Fixing Google authentication

app.py

@@ -99,21 +99,36 @@ BQ_PROJECT = "leadgenios-tech"
 BQ_TABLE_FQN = "leadgenios-tech.connector_appsflyer_raw_data.appsflyer_raw_data_daily_report"
 
 def _need_bq_client():
+    """
+    Producción (Hugging Face): usa el secret GCP_SA_JSON (contenido del JSON de la service account).
+    Local: si no hay GCP_SA_JSON, usa GOOGLE_APPLICATION_CREDENTIALS como fallback.
+    """
     if not _HAS_BQ:
         raise RuntimeError("Falta dependencia 'google-cloud-bigquery'.")
-    # --- Si usás secret GCP_SA_JSON en Hugging Face, podés cargarlo así:
-    # import json, pathlib
-    # sa_json = os.getenv("GCP_SA_JSON")
-    # if sa_json:
-    #     from google.oauth2 import service_account
-    #     info = json.loads(sa_json)
-    #     creds = service_account.Credentials.from_service_account_info(info)
-    #     project = info.get("project_id") or BQ_PROJECT
-    #     return bigquery.Client(project=project, credentials=creds)
-    # ---
-    if not os.getenv("GOOGLE_APPLICATION_CREDENTIALS"):
-        raise RuntimeError("GOOGLE_APPLICATION_CREDENTIALS no seteado.")
-    return bigquery.Client(project=BQ_PROJECT)
+
+    sa_json = os.getenv("GCP_SA_JSON")
+    if sa_json:
+        import json
+        try:
+            from google.oauth2 import service_account
+        except Exception as e:
+            raise RuntimeError(f"No se pudo importar google.oauth2.service_account: {e}")
+        try:
+            info = json.loads(sa_json)
+            creds = service_account.Credentials.from_service_account_info(info)
+            project = info.get("project_id") or BQ_PROJECT
+            return bigquery.Client(project=project, credentials=creds)
+        except Exception as e:
+            raise RuntimeError(f"GCP_SA_JSON inválido o no utilizable: {e}")
+
+    # Fallback local
+    if os.getenv("GOOGLE_APPLICATION_CREDENTIALS"):
+        try:
+            return bigquery.Client(project=BQ_PROJECT)
+        except Exception as e:
+            raise RuntimeError(f"Error creando cliente BQ con GOOGLE_APPLICATION_CREDENTIALS: {e}")
+
+    raise RuntimeError("No hay credenciales: seteá GCP_SA_JSON (prod) o GOOGLE_APPLICATION_CREDENTIALS (local).")
 
 def bq_get_columns_fixed():
     client = _need_bq_client()