Upload main.py

main.py

@@ -69,7 +69,7 @@ app.add_middleware(
 # to ensure we don’t leak hop-by-hop headers
 def _filter_resp_headers(h):
     # pass through useful headers but strip hop-by-hop
-    allowed = {"content-type", "content-disposition", "content-length"}
+    allowed = {"content-disposition"}
     return {k: v for k, v in h.items() if k.lower() in allowed}
 
 def _extract_user_token(req: Request) -> str | None:
@@ -124,8 +124,19 @@ async def _forward_stream(path: str, files=None, data=None, user_token: str | No
         async with client.stream(method, url, headers=headers, files=files, data=data) as resp:
             if resp.status_code >= 400:
                 text = await resp.aread()
-                return Response(content=text, status_code=resp.status_code, media_type=resp.headers.get("content-type","text/plain"))
-            return StreamingResponse(resp.aiter_raw(), status_code=resp.status_code, headers=_filter_resp_headers(resp.headers))
+                return Response(
+                    content=text,
+                    status_code=resp.status_code,
+                    media_type=resp.headers.get("content-type","text/plain")
+                )
+            media_type = resp.headers.get("content-type", "application/octet-stream")
+            safe_headers = _filter_resp_headers(resp.headers)  # Content-Disposition only
+            return StreamingResponse(
+                resp.aiter_raw(),
+                status_code=resp.status_code,
+                media_type=media_type,
+                headers=safe_headers,
+            )
 
 # for demo
 async def _forward_demo_stream(path: str, *, files: dict | None, data: dict | None, method: str = "POST"):
@@ -142,12 +153,22 @@ async def _forward_demo_stream(path: str, *, files: dict | None, data: dict | No
 
     timeout = httpx.Timeout(120.0)
     async with httpx.AsyncClient(timeout=timeout) as client:
-        # stream response back to the caller (so large CSVs don’t load fully into memory)
         async with client.stream(method, url, headers=headers, files=files, data=data) as resp:
             if resp.status_code >= 400:
                 text = await resp.aread()
-                raise HTTPException(status_code=resp.status_code, detail=text.decode(errors="ignore"))
-            return StreamingResponse(resp.aiter_raw(), status_code=resp.status_code, headers=_filter_resp_headers(resp.headers))
+                return Response(
+                    content=text,
+                    status_code=resp.status_code,
+                    media_type=resp.headers.get("content-type","text/plain")
+                )
+            media_type = resp.headers.get("content-type", "application/octet-stream")
+            safe_headers = _filter_resp_headers(resp.headers)  # Content-Disposition only
+            return StreamingResponse(
+                resp.aiter_raw(),
+                status_code=resp.status_code,
+                media_type=media_type,
+                headers=safe_headers,
+            )
 
 @app.get("/")
 async def root(req: Request):