Update app.py

app.py

@@ -1,4 +1,4 @@
-from flask import Flask, render_template_string, request, redirect, url_for, session, flash, jsonify
+from flask import Flask, render_template_string, request, redirect, url_for, session, flash, jsonify, send_file
 from flask_caching import Cache
 import json
 import os
@@ -10,6 +10,8 @@ from huggingface_hub import HfApi, hf_hub_download
 from werkzeug.utils import secure_filename
 import random
 import string
+import requests
+from io import BytesIO
 
 app = Flask(__name__)
 app.secret_key = os.getenv("FLASK_SECRET_KEY", "supersecretkey")
@@ -466,10 +468,10 @@ def dashboard():
                     {% elif file['type'] == 'image' %}
                         <img class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}" alt="{{ file['filename'] }}" loading="lazy" onclick="openModal(this.src, false)">
                     {% else %}
-                        <p><a href="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}" target="_blank">{{ file['filename'] }}</a></p>
+                        <p>{{ file['filename'] }}</p>
                     {% endif %}
                     <p>{{ file['upload_date'] }}</p>
-                    <a href="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}" class="btn download-btn" download="{{ file['filename'] }}">Скачать</a>
+                    <a href="{{ url_for('download_file', file_path=file['path'], filename=file['filename']) }}" class="btn download-btn">Скачать</a>
                 </div>
             {% endfor %}
             {% if not user_files %}
@@ -552,6 +554,40 @@ def dashboard():
 '''
     return render_template_string(html, token=token, user_files=user_files, repo_id=REPO_ID)
 
+@app.route('/download/<path:file_path>/<filename>')
+def download_file(file_path, filename):
+    if 'token' not in session:
+        flash('Пожалуйста, войдите!')
+        return redirect(url_for('login'))
+    
+    token = session['token']
+    data = load_data()
+    if token not in data['users']:
+        session.pop('token', None)
+        flash('Токен недействителен!')
+        return redirect(url_for('login'))
+    
+    # Проверяем, что файл принадлежит пользователю
+    user_files = data['users'][token]['files']
+    if not any(file['path'] == file_path for file in user_files):
+        flash('У вас нет доступа к этому файлу!')
+        return redirect(url_for('dashboard'))
+    
+    file_url = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{file_path}"
+    response = requests.get(file_url)
+    
+    if response.status_code == 200:
+        file_content = BytesIO(response.content)
+        return send_file(
+            file_content,
+            as_attachment=True,
+            download_name=filename,
+            mimetype='application/octet-stream'
+        )
+    else:
+        flash('Ошибка при скачивании файла!')
+        return redirect(url_for('dashboard'))
+
 @app.route('/logout')
 def logout():
     session.pop('token', None)