client detect

core/schemas.py

@@ -12,7 +12,7 @@ class GoogleAuthRequest(BaseModel):
     """Request with Google ID token from frontend Sign-In."""
     id_token: str = Field(..., min_length=1, description="Google ID token from Sign-In")
     temp_user_id: Optional[str] = Field(None, description="Optional temp user ID for linking")
-    client_type: str = Field("web", description="Client type: 'web' (cookies) or 'mobile' (body)")
+    client_type: Optional[str] = Field(None, description="Client type: 'web' or 'mobile' (auto-detected if not provided)")
 
 
 class AuthResponse(BaseModel):

routers/auth.py

@@ -69,6 +69,22 @@ async def check_registration(
     return {"is_registered": client_user is not None}
 
 
+
+def detect_client_type(request: Request) -> str:
+    """
+    Detect client type from User-Agent header.
+    Browsers get 'web', native apps get 'mobile'.
+    """
+    user_agent = request.headers.get("user-agent", "").lower()
+    
+    # Browser indicators
+    browser_keywords = ["mozilla", "chrome", "firefox", "safari", "edge", "opera"]
+    
+    if any(keyword in user_agent for keyword in browser_keywords):
+        return "web"
+    return "mobile"
+
+
 @router.post("/google", response_model=AuthResponse)
 async def google_auth(
     request: GoogleAuthRequest,
@@ -82,10 +98,15 @@ async def google_auth(
     Supports two client types:
     - "web": Sets refresh_token in HttpOnly cookie (secure)
     - "mobile": Returns refresh_token in JSON body
+    
+    Client type is auto-detected from User-Agent if not provided.
     """
     response = JSONResponse(content={})  # Placeholder, will be populated later
     ip = req.client.host
     
+    # Auto-detect client type if not explicitly provided
+    client_type = request.client_type if request.client_type else detect_client_type(req)
+    
     # Rate Limit: 10 attempts per minute per IP
     if not await check_rate_limit(db, ip, "/auth/google", 10, 1):
         raise HTTPException(