fix: set session cookies to SameSite=None and Secure=True for Hugging Face iframe compatibility

Dockerfile

@@ -4,6 +4,7 @@ FROM python:3.10-slim
 ENV PYTHONDONTWRITEBYTECODE 1
 ENV PYTHONUNBUFFERED 1
 ENV FLASK_APP autogranted.py
+ENV FLASK_CONFIG production
 ENV PORT 7860
 
 # Install system dependencies

config.py

@@ -8,6 +8,12 @@ class Config:
     SECRET_KEY = os.environ.get('SECRET_KEY') or 'dev-secret-key-change-in-production'
     APP_PASSWORD = os.environ.get('APP_PASSWORD')
     
+    # Hugging Face Iframe compatibility
+    SESSION_COOKIE_SAMESITE = 'None'
+    SESSION_COOKIE_SECURE = True
+    REMEMBER_COOKIE_SAMESITE = 'None'
+    REMEMBER_COOKIE_SECURE = True
+    
     # Database Configuration
     SQLALCHEMY_DATABASE_URI = os.environ.get('DATABASE_URL') or 'postgresql://localhost/autogranted'
     SQLALCHEMY_TRACK_MODIFICATIONS = False