Update app.py

app.py

@@ -1,25 +1,31 @@
-from fastapi import FastAPI, HTTPException, Form
+from fastapi import FastAPI, HTTPException
 from fastapi.middleware.cors import CORSMiddleware
 from pydantic import BaseModel
 import sqlite3
 import hashlib
 import os
+
 app = FastAPI()
 
-# CORS (allow frontend on another origin like mobile app)
+# Allow all CORS origins (change this if needed for production)
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],  # or set your domain/app origin
+    allow_origins=["*"],
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],
 )
 
+# ✅ Ensure DB path is in a writable directory for Hugging Face Spaces
+HF_DATA_DIR = os.getenv("HF_HOME", "/data")
+os.makedirs(HF_DATA_DIR, exist_ok=True)
+db_path = os.path.join(HF_DATA_DIR, "users.db")
 
-db_path = os.path.join(os.getenv("HF_HOME", "/data"), "users.db")
+# Connect to the database
 conn = sqlite3.connect(db_path, check_same_thread=False)
-
 cursor = conn.cursor()
+
+# Create users table if it doesn't exist
 cursor.execute('''
     CREATE TABLE IF NOT EXISTS users (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -29,11 +35,11 @@ cursor.execute('''
 ''')
 conn.commit()
 
-# Utility function to hash passwords
+# Utility function to hash passwords securely
 def hash_password(password: str) -> str:
     return hashlib.sha256(password.encode()).hexdigest()
 
-# Models
+# Request models
 class SignupForm(BaseModel):
     email: str
     password: str
@@ -42,7 +48,7 @@ class LoginForm(BaseModel):
     email: str
     password: str
 
-# Routes
+# Route to sign up new users
 @app.post("/signup")
 def signup(data: SignupForm):
     email = data.email.lower().strip()
@@ -55,6 +61,7 @@ def signup(data: SignupForm):
     except sqlite3.IntegrityError:
         raise HTTPException(status_code=409, detail="Email already registered")
 
+# Route to log in existing users
 @app.post("/login")
 def login(data: LoginForm):
     email = data.email.lower().strip()
@@ -68,6 +75,7 @@ def login(data: LoginForm):
     else:
         raise HTTPException(status_code=401, detail="Invalid credentials")
 
+# Test root route
 @app.get("/")
 def root():
     return {"message": "FastAPI Auth API is running 🚀"}