Update backend/google_utils.py

backend/google_utils.py

@@ -5,38 +5,40 @@ from googleapiclient.discovery import build
 import json
 import os
 
-# Configuration
-CLIENT_SECRETS_FILE = "backend/client_secret.json"
 SCOPES = [
-    "https://www.googleapis.com/auth/drive", # <-- CHANGED: Upgraded from metadata.readonly
+    "https://www.googleapis.com/auth/drive", 
     "https://www.googleapis.com/auth/userinfo.email",
     "https://www.googleapis.com/auth/userinfo.profile",
     "openid"
 ]
 
-REDIRECT_URI = "http://localhost:5173/google-callback"
+REDIRECT_URI = "https://docusort.vercel.app/google-callback"
+
+def get_google_config():
+    """Securely load Google keys from Hugging Face Environment Secrets"""
+    secret_str = os.getenv("GOOGLE_CLIENT_SECRET_JSON")
+    if not secret_str:
+        print("WARNING: GOOGLE_CLIENT_SECRET_JSON not found in environment!")
+        return None
+    return json.loads(secret_str)
 
 def get_client_id_from_file():
-    if not os.path.exists(CLIENT_SECRETS_FILE):
-        return "MISSING_CLIENT_SECRET"
-    with open(CLIENT_SECRETS_FILE, 'r') as f:
-        data = json.load(f)
-        return data['web']['client_id']
+    config = get_google_config()
+    return config['web']['client_id'] if config else "MISSING"
 
 def get_client_secret_from_file():
-    if not os.path.exists(CLIENT_SECRETS_FILE):
-        return "MISSING_CLIENT_SECRET"
-    with open(CLIENT_SECRETS_FILE, 'r') as f:
-        data = json.load(f)
-        return data['web']['client_secret']
+    config = get_google_config()
+    return config['web']['client_secret'] if config else "MISSING"
 
 def get_google_auth_url():
-    flow = Flow.from_client_secrets_file(CLIENT_SECRETS_FILE, scopes=SCOPES, redirect_uri=REDIRECT_URI)
+    config = get_google_config()
+    flow = Flow.from_client_config(config, scopes=SCOPES, redirect_uri=REDIRECT_URI)
     auth_url, _ = flow.authorization_url(prompt='consent', access_type='offline')
     return auth_url
 
 def exchange_code_for_token(auth_code):
-    flow = Flow.from_client_secrets_file(CLIENT_SECRETS_FILE, scopes=SCOPES, redirect_uri=REDIRECT_URI)
+    config = get_google_config()
+    flow = Flow.from_client_config(config, scopes=SCOPES, redirect_uri=REDIRECT_URI)
     flow.fetch_token(code=auth_code)
     creds = flow.credentials
     service = build('oauth2', 'v2', credentials=creds)
@@ -60,12 +62,10 @@ def get_drive_service(access_token, refresh_token, token_uri, client_id, client_
     return build('drive', 'v3', credentials=creds)
 
 def list_files_in_folder(service, folder_id="root"):
-    # --- FIX: REMOVED TRY/EXCEPT SO MAIN.PY CAN CATCH ERRORS ---
     query = f"'{folder_id}' in parents and trashed = false"
     results = service.files().list(
         q=query,
         pageSize=100,
-        # <-- CHANGED: Added size and md5Checksum to the fields list
         fields="nextPageToken, files(id, name, mimeType, iconLink, webViewLink, size, md5Checksum)", 
         orderBy="folder, name"
     ).execute()