Update app.py

app.py

@@ -21,10 +21,10 @@ logger = logging.getLogger("CloudBot")
 app = FastAPI(title="cTra Webhook Bot")
 
 # Config from Environment variables (Hugging Face Secrets)
-CLIENT_ID = os.environ.get("CTRADER_CLIENT_ID", "")
-CLIENT_SECRET = os.environ.get("CTRADER_CLIENT_SECRET", "")
-CTRADER_ENV = os.environ.get("CTRADER_ENV", "demo").lower()  # "demo" or "live"
-raw_vol = os.environ.get("TRADE_VOLUME", "1000")
+CLIENT_ID = os.environ.get("CTRADER_CLIENT_ID", "").strip()
+CLIENT_SECRET = os.environ.get("CTRADER_CLIENT_SECRET", "").strip()
+CTRADER_ENV = os.environ.get("CTRADER_ENV", "demo").lower().strip()  # "demo" or "live"
+raw_vol = os.environ.get("TRADE_VOLUME", "1000").strip()
 try:
     vol_float = float(raw_vol)
     if vol_float < 10.0:
@@ -504,6 +504,7 @@ async def dashboard(request: Request):
 
 @app.get("/login")
 async def login(request: Request):
+    import urllib.parse
     # Retrieve App redirect URI dynamically (supporting Hugging Face reverse proxy)
     space_host = os.environ.get("SPACE_HOST")
     if space_host:
@@ -515,12 +516,12 @@ async def login(request: Request):
     
     logger.info(f"Login URL redirect_uri generated: {redirect_uri}")
     
+    encoded_redirect_uri = urllib.parse.quote(redirect_uri)
     auth_url = (
         f"https://id.ctrader.com/my/settings/openapi/grantingaccess"
         f"?client_id={CLIENT_ID}"
-        f"&redirect_uri={redirect_uri}"
         f"&scope=trading"
-        f"&product=web"
+        f"&redirect_uri={encoded_redirect_uri}"
     )
     return RedirectResponse(auth_url)
 
@@ -556,7 +557,7 @@ async def callback(request: Request, code: str = None):
         }
         
         # Fetch account ID via protobuf socket (token endpoint doesn't return accounts)
-        account_id = os.environ.get("CTRADER_ACCOUNT_ID", "")
+        account_id = os.environ.get("CTRADER_ACCOUNT_ID", "").strip()
         if not account_id:
             try:
                 host = "live.ctraderapi.com" if CTRADER_ENV == "live" else "demo.ctraderapi.com"