Support Authorization Bearer token fallback for session verification

app/utils/security.py

@@ -8,6 +8,12 @@ from app.utils.firebase import verify_session_cookie
 
 async def get_current_user(request: Request, db: AsyncSession = Depends(get_db)) -> models.User:
     session_cookie = request.cookies.get("archvise_session")
+    # Fallback to Authorization header if cookie is missing (e.g. cross-domain/proxy environment)
+    if not session_cookie:
+        auth_header = request.headers.get("Authorization")
+        if auth_header and auth_header.startswith("Bearer "):
+            session_cookie = auth_header.split(" ")[1]
+
     if not session_cookie:
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,