Update flask_app.py

flask_app.py

@@ -35,20 +35,32 @@ from admin_module import admin_manager, admin_required
 app = Flask(__name__)
 
 # Configuration for sessions
-app.config['SECRET_KEY'] = os.environ.get('SECRET_KEY', 'dev-key-change-in-production')
+app.config['SECRET_KEY'] = os.environ.get('SECRET_KEY', 'dev-key-change-in-production-hf-spaces')
 app.config['SESSION_TYPE'] = 'filesystem'
 app.config['SESSION_PERMANENT'] = False
 app.config['SESSION_USE_SIGNER'] = True
 app.config['SESSION_KEY_PREFIX'] = 'englishhelper:'
+app.config['PERMANENT_SESSION_LIFETIME'] = 86400  # 24 hours
 
 Session(app)
 
-# Initialize database
+# Print session config for debugging
+print(f"Session config - SECRET_KEY length: {len(app.config['SECRET_KEY'])}")
+print(f"Session config - SESSION_TYPE: {app.config['SESSION_TYPE']}")
+print(f"Session config - Working directory: {os.getcwd()}")
+
+# Ensure flask_session directory exists
+import os
+session_dir = 'flask_session'
+if not os.path.exists(session_dir):
+    os.makedirs(session_dir)
+    print(f"Created session directory: {session_dir}")
+
+# Database initialization (handled by app.py)
 def initialize_database():
     init_db()
 
-# Initialize on startup
-initialize_database()
+# Note: Database initialization moved to app.py to avoid conflicts
 
 # Token tracking helper function
 def track_token_usage(user_id, provider, input_tokens, output_tokens, operation):
@@ -134,13 +146,23 @@ def tts_proxy():
     text = data.get('text', '')
     tld = data.get('tld', 'co.uk') 
     if not text: return jsonify({"error": "No text provided"}), 400
+    
+    # Validar comprimento do texto (10000 caracteres max)
+    if len(text) > 10000:
+        return jsonify({"error": "Text is too long. Maximum 10,000 characters allowed."}), 400
+    
     try:
+        # Log para debug
+        print(f"TTS request: {len(text)} characters, tld: {tld}")
+        
         tts = gTTS(text=text, lang='en', tld=tld)
         mp3_fp = io.BytesIO()
         tts.write_to_fp(mp3_fp)
         mp3_fp.seek(0)
+        
         return send_file(mp3_fp, mimetype='audio/mpeg')
     except Exception as e:
+        print(f"TTS Error: {e}")
         return jsonify({"error": f"Failed to generate audio via gTTS: {e}"}), 500
 
 # Primeira função explain_proxy removida - duplicata
@@ -332,16 +354,51 @@ def register():
         result = create_user(email, password)
         
         if result['success']:
-            # Send confirmation email
-            if send_confirmation_email(email, result['confirmation_token']):
+            # Try to send confirmation email (non-blocking for HF Spaces)
+            email_sent = False
+            try:
+                # Use a timeout to prevent hanging
+                import threading
+                import time
+                
+                def send_email_async():
+                    nonlocal email_sent
+                    try:
+                        email_sent = send_confirmation_email(email, result['confirmation_token'])
+                    except:
+                        email_sent = False
+                
+                # Start email sending in background with timeout
+                email_thread = threading.Thread(target=send_email_async)
+                email_thread.daemon = True
+                email_thread.start()
+                email_thread.join(timeout=5)  # 5 second timeout
+                
+            except Exception as e:
+                print(f"Email sending timeout or error: {e}")
+                email_sent = False
+            
+            # Return success message based on auto-confirmation and email status
+            auto_confirmed = result.get('auto_confirmed', False)
+            
+            if auto_confirmed:
+                return jsonify({
+                    'message': 'Registration successful! Your account is ready to use - you can log in immediately.',
+                    'email_sent': email_sent,
+                    'auto_confirmed': True,
+                    'note': 'Email confirmation is disabled in demo mode.'
+                }), 201
+            elif email_sent:
                 return jsonify({
                     'message': 'Registration successful! Please check your email to confirm your account.',
-                    'email_sent': True
+                    'email_sent': True,
+                    'auto_confirmed': False
                 }), 201
             else:
                 return jsonify({
                     'message': 'Registration successful! However, we could not send the confirmation email. Please contact support.',
-                    'email_sent': False
+                    'email_sent': False,
+                    'auto_confirmed': False
                 }), 201
         else:
             return jsonify({'error': result['message']}), 400
@@ -980,9 +1037,14 @@ def admin_login():
         username = data.get('username')
         password = data.get('password')
         
+        print(f"Admin login attempt - Username: {username}")
+        
         if admin_manager.login_admin(username, password):
+            print(f"Admin login successful - Session ID: {session.get('_id', 'no-id')}")
+            print(f"Session data after login: {dict(session)}")
             return jsonify({'success': True, 'message': 'Admin logged in successfully'})
         else:
+            print(f"Admin login failed - Invalid credentials for: {username}")
             return jsonify({'success': False, 'error': 'Invalid credentials'}), 401
             
     except Exception as e:
@@ -1005,14 +1067,41 @@ def admin_check():
     """Check admin authentication status"""
     try:
         is_authenticated = admin_manager.is_admin_logged_in()
+        username = session.get('admin_username')
+        
+        print(f"Admin check - Authenticated: {is_authenticated}, Username: {username}")
+        print(f"Current session data: {dict(session)}")
+        print(f"Session ID: {session.get('_id', 'no-session-id')}")
+        
         return jsonify({
             'authenticated': is_authenticated,
-            'username': session.get('admin_username') if is_authenticated else None
+            'username': username if is_authenticated else None,
+            'session_id': session.get('_id', 'no-session-id'),
+            'debug_session_keys': list(session.keys())
         })
     except Exception as e:
         print(f"Admin check error: {e}")
         return jsonify({'authenticated': False})
 
+# Debug route to test sessions
+@app.route('/admin/debug-session', methods=['GET', 'POST'])
+def debug_session():
+    """Debug session functionality"""
+    if request.method == 'POST':
+        session['debug_test'] = 'session_working'
+        session.permanent = True
+        return jsonify({
+            'message': 'Session test value set',
+            'session_data': dict(session)
+        })
+    else:
+        test_value = session.get('debug_test', 'not_found')
+        return jsonify({
+            'test_value': test_value,
+            'session_data': dict(session),
+            'session_id': session.get('_id', 'no-session-id')
+        })
+
 @app.route('/admin/dashboard', methods=['GET'])
 @admin_required
 def admin_dashboard():