Update app.py

app.py

@@ -2,12 +2,14 @@ import os
 import asyncio
 import json
 import pty
-import subprocess
-from fastapi import FastAPI, WebSocket, WebSocketDisconnect
+from fastapi import FastAPI, WebSocket, WebSocketDisconnect, Query
 from fastapi.middleware.cors import CORSMiddleware
+from starlette.websockets import WebSocketCloseReason
 
 app = FastAPI()
 
+PASSWORD = os.getenv("TERMINAL_PASSWORD")
+
 app.add_middleware(
     CORSMiddleware,
     allow_origins=["*"],
@@ -16,13 +18,17 @@ app.add_middleware(
 )
 
 @app.websocket("/ws")
-async def websocket_endpoint(websocket: WebSocket):
+async def websocket_endpoint(websocket: WebSocket, password: str = Query(default="")):
+    if password != PASSWORD:
+        await websocket.close(code=WebSocketCloseReason.POLICY_VIOLATION)
+        print("Conexão recusada: senha incorreta")
+        return
+
     await websocket.accept()
 
     pid, fd = pty.fork()
 
     if pid == 0:
-        # Processo filho: executa shell com variável TERM
         os.environ["TERM"] = "xterm-256color"
         shell = os.environ.get("SHELL", "/bin/bash")
         os.execvp(shell, [shell])
@@ -43,7 +49,6 @@ async def websocket_endpoint(websocket: WebSocket):
             try:
                 while True:
                     msg = await websocket.receive_text()
-                    # Tenta interpretar como JSON (para resize)
                     try:
                         data = json.loads(msg)
                         if data.get("type") == "resize":