Update app/main.py

app/main.py

@@ -108,8 +108,18 @@ def favicon():
 @app.get("/auth/google")
 def auth_google():
     try:
-        authorization_url, _state = get_authorization_url()
+        flow = build_flow()
+        authorization_url, state = flow.authorization_url(
+            access_type="offline",
+            prompt="consent",
+            include_granted_scopes="true",
+        )
+
+        # 🔥 salvar flow pelo state
+        oauth_flow_global[state] = flow
+
         return RedirectResponse(url=authorization_url)
+
     except Exception as exc:
         return {
             "ok": False,
@@ -119,12 +129,23 @@ def auth_google():
 
 
 @app.get("/oauth2callback")
-def oauth2callback(code: str = Query(...)):
+def oauth2callback(code: str = Query(...), state: str = Query(...)):
     try:
-        flow = build_flow()
+        flow = oauth_flow_global.get(state)
+
+        if not flow:
+            return HTMLResponse(
+                "<h3>Erro: sessao OAuth expirada ou invalida.</h3>",
+                status_code=400,
+            )
+
         flow.fetch_token(code=code)
+
         save_credentials(flow.credentials)
 
+        # limpar da memória
+        oauth_flow_global.pop(state, None)
+
         return HTMLResponse(
             """
             <h3>Autorizacao concluida com sucesso.</h3>
@@ -132,12 +153,12 @@ def oauth2callback(code: str = Query(...)):
             <p>Voce ja pode fechar esta aba.</p>
             """
         )
+
     except Exception as exc:
         return HTMLResponse(
             f"""
             <h3>Erro ao concluir autorizacao Google.</h3>
             <p>{str(exc)}</p>
-            <p>Verifique GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, GOOGLE_REDIRECT_URI e GOOGLE_SPREADSHEET_ID.</p>
             """,
             status_code=500,
         )