Failed to fetch model 'StarCoder-1B' due to 401 Unauthorized

[SunleoSun]

Didn't find anything about auth in docs installation section, so created this issue.
Models are downloading for that addresses without problems in the browser.

Windows 11

curl -v https://huggingface.co/TabbyML/models/resolve/main/starcoderbase-1B.Q8_0.gguf

* Host huggingface.co:443 was resolved.
* IPv6: (none)
* IPv4: 143.204.237.40, 143.204.237.70, 143.204.237.54, 143.204.237.35
*   Trying 143.204.237.40:443...
* Connected to huggingface.co (143.204.237.40) port 443
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
* ALPN: server accepted http/1.1
* using HTTP/1.x
> GET /TabbyML/models/resolve/main/starcoderbase-1B.Q8_0.gguf HTTP/1.1
> Host: huggingface.co
> User-Agent: curl/8.9.1
> Accept: */*
>
* Request completely sent off
* schannel: remote party requests renegotiation
* schannel: renegotiating SSL/TLS connection
* schannel: SSL/TLS connection renegotiated
* schannel: failed to decrypt data, need more data
< HTTP/1.1 302 Found
< Content-Type: text/plain; charset=utf-8
< Content-Length: 1130
< Connection: keep-alive
< Date: Thu, 30 Jan 2025 21:00:44 GMT
< X-Powered-By: huggingface-moon
< cross-origin-opener-policy: same-origin
< Referrer-Policy: strict-origin-when-cross-origin
< X-Request-Id: Root=1-679be87c-76608fba38e876e47633f400
< Access-Control-Allow-Origin: https://huggingface.co
< Vary: Origin, Accept
< Access-Control-Expose-Headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,X-Total-Count,ETag,Link,Accept-Ranges,Content-Range,X-Xet-Access-Token,X-Xet-Token-Expiration,X-Xet-Refresh-Route,X-Xet-Cas-Url,X-Xet-Hash
< X-Repo-Commit: f0d46dd2120ad97bdd4651020891252381fee3f8
< Accept-Ranges: bytes
< X-Linked-Size: 1318591424
< X-Linked-ETag: "1bb6441486d102db03dac30c82d6b1029ee4f9f5d73f27444fa58cbfcd7cfa0f"
< Location: https://cdn-lfs-us-1.hf.co/repos/b8/59/b8596c1f6bafea5f6148f64b38391e867c08e0e726a8ce9e3581a6661a82c28e/1bb6441486d102db03dac30c82d6b1029ee4f9f5d73f27444fa58cbfcd7cfa0f?response-content-disposition=inline%3B+filename*%3DUTF-8%27%27starcoderbase-1B.Q8_0.gguf%3B+filename%3D%22starcoderbase-1B.Q8_0.gguf%22%3B&Expires=1738274444&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTczODI3NDQ0NH19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLmhmLmNvL3JlcG9zL2I4LzU5L2I4NTk2YzFmNmJhZmVhNWY2MTQ4ZjY0YjM4MzkxZTg2N2MwOGUwZTcyNmE4Y2U5ZTM1ODFhNjY2MWE4MmMyOGUvMWJiNjQ0MTQ4NmQxMDJkYjAzZGFjMzBjODJkNmIxMDI5ZWU0ZjlmNWQ3M2YyNzQ0NGZhNThjYmZjZDdjZmEwZj9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSoifV19&Signature=FCpLvbZqB3KbvbCUcIolwziGBWUHKxKe3WuBpZ3UGpyaGCdRy1-9LY2468Vg-Ox-wOqNGGwsijn6T6FOSi31NuRLws8TT%7EQWhwTvcbtF4AaVC4rXGMiMA1ViBWJZhVWVPUpB5Am7h6GkXeJOVjVi5UEHqRhGGSCRlaS8FInv1RiUBlA486vtoD19eyFhNLTFekgzE5D-ANuE17EFZXmaEqBubTpbx2Kt-aRlF9VjJvVoLfXe94Gz6Z8kPlErMKinVRyvBOSMd2q%7E1EdpeXJKOB94VvLxNk-vcWuqR%7EOE7WfNRZrB4sK%7ECKzActfByefxrF0TMWgPo64to9P2msTtHw__&Key-Pair-Id=K24J24Z295AEI9
< X-Cache: Miss from cloudfront
< Via: 1.1 6e7498469e2ca10a35f5f52ababba924.cloudfront.net (CloudFront)
< X-Amz-Cf-Pop: CPH50-C1
< X-Amz-Cf-Id: LlYMKCYgFnznFEEasv3r93K1RfUZH9TMknXs9K88Xnle4qzx8fK0fw==
<
Found. Redirecting to https://cdn-lfs-us-1.hf.co/repos/b8/59/b8596c1f6bafea5f6148f64b38391e867c08e0e726a8ce9e3581a6661a82c28e/1bb6441486d102db03dac30c82d6b1029ee4f9f5d73f27444fa58cbfcd7cfa0f?response-content-disposition=inline%3B+filename*%3DUTF-8%27%27starcoderbase-1B.Q8_0.gguf%3B+filename%3D%22starcoderbase-1B.Q8_0.gguf%22%3B&Expires=1738274444&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTczODI3NDQ0NH19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLmhmLmNvL3JlcG9zL2I4LzU5L2I4NTk2YzFmNmJhZmVhNWY2MTQ4ZjY0YjM4MzkxZTg2N2MwOGUwZTcyNmE4Y2U5ZTM1ODFhNjY2MWE4MmMyOGUvMWJiNjQ0MTQ4NmQxMDJkYjAzZGFjMzBjODJkNmIxMDI5ZWU0ZjlmNWQ3M2YyNzQ0NGZhNThjYmZjZDdjZmEwZj9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSoifV19&Signature=FCpLvbZqB3KbvbCUcIolwziGBWUHKxKe3WuBpZ3UGpyaGCdRy1-9LY2468Vg-Ox-wOqNGGwsijn6T6FOSi31NuRLws8TT%7EQWhwTvcbtF4AaVC4rXGMiMA1ViBWJZhVWVPUpB5Am7h6GkXeJOVjVi5UEHqRhGGSCRlaS8FInv1RiUBlA486vtoD19eyFhNLTFekgzE5D-ANuE17EFZXmaEqBubTpbx2Kt-aRlF9VjJvVoLfXe94Gz6Z8kPlErMKinVRyvBOSMd2q%7E1EdpeXJKOB94VvLxNk-vcWuqR%7EOE7WfNRZrB4sK%7ECKzActfByefxrF0TMWgPo64to9P2msTtHw__&Key-Pair-Id=K24J24Z295AEI9* Connection #0 to host huggingface.co left intact

curl -v https://huggingface.co/TabbyML/SantaCoder-1B/resolve/main/tabby.json

* Host huggingface.co:443 was resolved.
* IPv6: (none)
* IPv4: 143.204.237.35, 143.204.237.54, 143.204.237.70, 143.204.237.40
*   Trying 143.204.237.35:443...
* Connected to huggingface.co (143.204.237.35) port 443
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
* ALPN: server accepted http/1.1
* using HTTP/1.x
> GET /TabbyML/SantaCoder-1B/resolve/main/tabby.json HTTP/1.1
> Host: huggingface.co
> User-Agent: curl/8.9.1
> Accept: */*
>
* Request completely sent off
* schannel: remote party requests renegotiation
* schannel: renegotiating SSL/TLS connection
* schannel: SSL/TLS connection renegotiated
< HTTP/1.1 401 Unauthorized
< Content-Type: text/plain; charset=utf-8
< Content-Length: 29
< Connection: keep-alive
< Date: Thu, 30 Jan 2025 21:03:41 GMT
< X-Powered-By: huggingface-moon
< cross-origin-opener-policy: same-origin
< Referrer-Policy: strict-origin-when-cross-origin
< X-Request-Id: Root=1-679be92d-5d467b1b5d1d14454d423a02
< Access-Control-Allow-Origin: https://huggingface.co
< Vary: Origin
< Access-Control-Expose-Headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,X-Total-Count,ETag,Link,Accept-Ranges,Content-Range,X-Xet-Access-Token,X-Xet-Token-Expiration,X-Xet-Refresh-Route,X-Xet-Cas-Url,X-Xet-Hash
< X-Error-Message: Invalid username or password.
< WWW-Authenticate: Bearer realm="Authentication required", charset="UTF-8"
< ETag: W/"1d-DMkJvg8tpLoaQbsiq9Mz7l2CJyI"
< X-Cache: Error from cloudfront
< Via: 1.1 6ca0922c4cb330aecc1b691bf382d464.cloudfront.net (CloudFront)
< X-Amz-Cf-Pop: CPH50-C1
< X-Amz-Cf-Id: ujFcEGyH4AayI710kjPhO96HQQ-AK1WBC7M-ZkkK8i9K6-kv8nSfOQ==
<
Invalid username or password.* Connection #0 to host huggingface.co left intact

[ZHallen122]

I have same problem

[Sma1lboy]

I just tested it, and I encountered the same problem with the current main branch. I will try to fix it.

[SunleoSun]

I just tested it, and I encountered the same problem with the current main branch. I will try to fix it.

I assume that problem is with https://huggingface.co/TabbyML repo, not in code as I used stable tabby release

[Sma1lboy]

The problem arises from Tabby adding the default basic_auth anonymous when downloading the model, but Hugging Face rejected it

After remove it, I got:

[gu-does-git]

after debugging all night long I found this. This is a critical issue, I can't run tabby in none of my devices!!! Please check and accept @Sma1lboy fix asap 🙏

[Sma1lboy]

#3772

[wsxiaoys]

For anyone affected, please try the release candidate at https://github.com/TabbyML/tabby/releases/tag/v0.23.1-rc.1 to see if it resolves the issue for you.

[SunleoSun]

For anyone affected, please try the release candidate at https://github.com/TabbyML/tabby/releases/tag/v0.23.1-rc.1 to see if it resolves the issue for you.

Thanks, this fixed the issue.