Update app.py

app.py

@@ -1,38 +1,38 @@
 from fastapi import FastAPI, HTTPException
 from fastapi.middleware.cors import CORSMiddleware
 from pydantic import BaseModel
-import os
 import hashlib
+import os
 import certifi
 from motor.motor_asyncio import AsyncIOMotorClient
 
 app = FastAPI()
 
-# === CORS setup ===
+# Allow frontend CORS
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],  # Open CORS (adjust for production)
+    allow_origins=["*"],  # Change to your frontend origin in prod
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],
 )
 
-# === MongoDB Atlas Setup ===
-MONGO_URI = os.getenv("MONGO_URI")  # Make sure this is set in HF Secrets
+# Secure Mongo URI from Hugging Face Secrets
+MONGO_URI = os.getenv("MONGO_URI")
 
 if not MONGO_URI:
-    raise RuntimeError("❌ MONGO_URI not set in environment variables!")
+    raise RuntimeError("MONGO_URI environment variable is not set!")
 
-# Use certifi for secure SSL connection
+# Secure SSL connection with certifi
 client = AsyncIOMotorClient(MONGO_URI, tls=True, tlsCAFile=certifi.where())
 db = client["cps_db"]
 users_collection = db["users"]
 
-# === Utils ===
+# Password hashing
 def hash_password(password: str) -> str:
     return hashlib.sha256(password.encode()).hexdigest()
 
-# === Models ===
+# Pydantic models
 class SignupForm(BaseModel):
     email: str
     password: str
@@ -41,18 +41,18 @@ class LoginForm(BaseModel):
     email: str
     password: str
 
-# === Routes ===
+# Routes
 @app.post("/signup")
 async def signup(data: SignupForm):
     email = data.email.lower().strip()
     password = hash_password(data.password)
 
-    existing = await users_collection.find_one({"email": email})
-    if existing:
+    existing_user = await users_collection.find_one({"email": email})
+    if existing_user:
         raise HTTPException(status_code=409, detail="Email already registered")
 
     await users_collection.insert_one({"email": email, "password": password})
-    return {"success": True, "message": "Account created successfully"}
+    return {"success": True, "message": "Account created"}
 
 @app.post("/login")
 async def login(data: LoginForm):
@@ -60,11 +60,11 @@ async def login(data: LoginForm):
     password = hash_password(data.password)
 
     user = await users_collection.find_one({"email": email, "password": password})
-    if user:
-        return {"success": True, "message": "Login successful"}
-    else:
+    if not user:
         raise HTTPException(status_code=401, detail="Invalid credentials")
 
+    return {"success": True, "message": "Login successful"}
+
 @app.get("/")
 def root():
-    return {"message": "✅ MongoDB FastAPI backend is up"}
+    return {"message": "✅ FastAPI MongoDB backend is running"}