Update app.py

app.py

@@ -7,33 +7,32 @@ app = FastAPI()
 # --- 🔐 SECURITY ---
 VALID_KEYS = {"Satuu5": "Master_Admin"}
 
-# --- 🏛️ DATABASE ---
+# Hugging Face Settings se Secret uthayega
+HF_TOKEN = os.getenv("HF_TOKEN") 
 DATA_URL = "https://huggingface.co/datasets/Watchhrr/HITECH_DB/resolve/main/Hi-Tek-DB.zip.001"
 
 @app.get("/")
 def home():
-    return {"message": "Hitech API is LIVE. Use /search to find records."}
+    return {"status": "Online", "Owner": "Swapnil"}
 
 @app.get("/search")
-def search(
-    query: str = Query(..., description="Phone or Aadhar number"),
-    type: str = Query("phone", description="Type: phone, aadhar, or name"),
-    key: str = Query(..., description="Your API Key")
-):
-    # 1. Key Verification
+def search(query: str, type: str = "phone", key: str = None):
+    # 1. Key Check
     if key not in VALID_KEYS:
         raise HTTPException(status_code=403, detail="Invalid API Key!")
 
-    # 2. Database Search
     con = duckdb.connect()
     try:
-        # SQL query to search across the split zip parts
+        # Authentication using Environment Variable
+        con.execute(f"SET http_keep_alive=false;")
+        con.execute(f"INSTALL httpfs; LOAD httpfs;")
+        if HF_TOKEN:
+            con.execute(f"SET http_header = 'Authorization: Bearer {HF_TOKEN}';")
+        
+        # Database Search
         sql = f"SELECT * FROM read_csv_auto('{DATA_URL}') WHERE {type} = ? LIMIT 5"
         result = con.execute(sql, [query]).df().to_dict(orient="records")
         
-        if not result:
-            return {"status": "success", "message": "No record found", "data": []}
-            
         return {"status": "success", "data": result}
     except Exception as e:
         return {"status": "error", "message": str(e)}