Update main.py

main.py

@@ -168,6 +168,45 @@ def send_text_request(model_name, prompt, image):
         print(f"Error with model {model_name}: {e}")
         return None
 
+@app.route('/api/projects/<string:project_id>/images', methods=['GET'])
+def get_project_image(project_id):
+    """
+    Fetches an image from a given URL and returns it.
+    This acts as a proxy to get around client-side CORS issues for PDF generation.
+    The image URL is passed as a query parameter.
+    """
+    uid = verify_token(request.headers.get('Authorization'))
+    if not uid:
+        return jsonify({'error': 'Unauthorized'}), 401
+
+    # Verify the user has access to this project to prevent unauthorized image proxying
+    project_data = db_ref.child(f'projects/{project_id}').get()
+    if not project_data or project_data.get('uid') != uid:
+        return jsonify({'error': 'Project not found or access denied'}), 404
+
+    image_url = request.args.get('url')
+    if not image_url:
+        return jsonify({'error': 'Image URL parameter is required'}), 400
+
+    try:
+        # It's crucial to use a session object for potential connection pooling and header management
+        with requests.Session() as s:
+            response = s.get(image_url, stream=True)
+            response.raise_for_status()  # Raise an exception for bad status codes
+
+            # Get content type from the original response
+            content_type = response.headers.get('Content-Type', 'application/octet-stream')
+
+            # Stream the response back to the client
+            return Response(response.iter_content(chunk_size=8192), content_type=content_type)
+
+    except requests.exceptions.RequestException as e:
+        print(f"Error fetching image from URL {image_url}: {e}")
+        return jsonify({'error': f'Failed to fetch image from the provided URL: {e}'}), 502 # 502 Bad Gateway is appropriate here
+    except Exception as e:
+        print(f"An unexpected error occurred while proxying image: {e}")
+        return jsonify({'error': 'An internal error occurred'}), 500
+
 # -----------------------------------------------------------------------------
 # 3. AUTHENTICATION & USER MANAGEMENT
 # -----------------------------------------------------------------------------