Support Per-User API Keys in Multi-User Setup

[mortag]

Hello LobeChat team,

First of all, thank you for the amazing work on this project.

I’m currently using LobeChat in a multi-user environment, and I’ve encountered a significant issue: the OpenAI API key is shared between all users. This poses several problems:

It exposes my API key to other users.

There is no usage isolation, so one user can exhaust the API quota for everyone.

It makes it impossible to implement user-specific billing or limits.

Feature Request:

Please consider adding a feature to allow each user to input and use their own API key ("Bring Your Own Key" model). Alternatively, allow disabling the globally shared API key and enforce per-user keys instead.

This feature would make LobeChat much more secure and scalable in shared or public deployments.

Thank you for your attention!

Best regards,

[arvinxx]

just not set the OpenAI key in the env and then you will see the BYOK feature