Update start.sh

start.sh

@@ -41,6 +41,16 @@ export NEXT_PUBLIC_DEPLOY_ENV=${NEXT_PUBLIC_DEPLOY_ENV:-"PRODUCTION"}
 export EDITION=${NEXT_PUBLIC_EDITION}
 export DEPLOY_ENV=${NEXT_PUBLIC_DEPLOY_ENV}
 
+# Security / Cookies (Critical for HF Spaces)
+export SECRET_KEY=${SECRET_KEY:-"dify-secret-key-random-123456"}
+export SESSION_COOKIE_SAMESITE=${SESSION_COOKIE_SAMESITE:-"None"}
+export SESSION_COOKIE_SECURE=${SESSION_COOKIE_SECURE:-"true"}
+export COOKIE_HTTPONLY=${COOKIE_HTTPONLY:-"true"}
+export SESSION_COOKIE_HTTPONLY=${SESSION_COOKIE_HTTPONLY:-"true"}
+
+# Fix for invalid or missing user-agent in some environments
+export FLASK_RUN_EXTRA_FILES=""
+
 # Console URLs - must be set!
 export CONSOLE_API_URL=${CONSOLE_API_URL:-"https://pommsn-dify.hf.space"}
 export CONSOLE_WEB_URL=${CONSOLE_WEB_URL:-"https://pommsn-dify.hf.space"}