Update app.py

app.py

@@ -81,16 +81,36 @@ def load_tokens():
 # Helper: Exchange authorization code or refresh token
 def fetch_token_from_api(payload):
     url = "https://openapi.ctrader.com/apps/token"
-    res = requests.get(url, params=payload)
-    if res.status_code == 200:
-        data = res.json()
-        logger.info("Token request successful")
-        return data
-    elif res.status_code == 429:
-        logger.warning("cTrader API rate limited (HTTP 429). Please wait a minute before retrying login.")
-        return None
-    else:
-        logger.error(f"Token exchange failed (HTTP {res.status_code}): {res.text[:200]}")
+    headers = {
+        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
+        "Accept": "application/json, text/plain, */*"
+    }
+    
+    # Attempt 1: GET request with custom headers
+    try:
+        res = requests.get(url, params=payload, headers=headers, timeout=10)
+        if res.status_code == 200:
+            data = res.json()
+            logger.info("Token request successful (GET)")
+            return data
+    except Exception as e:
+        logger.warning(f"GET token request exception: {e}")
+
+    # Attempt 2: POST request fallback with form-encoded data
+    try:
+        res = requests.post(url, data=payload, headers=headers, timeout=10)
+        if res.status_code == 200:
+            data = res.json()
+            logger.info("Token request successful (POST)")
+            return data
+        elif res.status_code == 429:
+            logger.warning("cTrader API rate limited (HTTP 429). Cloudflare/WAF blocked request.")
+            return None
+        else:
+            logger.error(f"Token exchange failed (HTTP {res.status_code}): {res.text[:200]}")
+            return None
+    except Exception as e:
+        logger.error(f"POST token request exception: {e}")
         return None
 
 # Helper: Send protocol buffer message over SSL Socket