Update main.py

main.py

@@ -168,44 +168,49 @@ def send_text_request(model_name, prompt, image):
         print(f"Error with model {model_name}: {e}")
         return None
 
-@app.route('/api/projects/<string:project_id>/images', methods=['GET'])
-def get_project_image(project_id):
+
+# =============================================================================
+# OPEN IMAGE PROXY ENDPOINT (NO AUTHENTICATION)
+# =============================================================================
+@app.route('/api/image-proxy', methods=['GET'])
+def image_proxy():
     """
-    Fetches an image from a given URL and returns it.
+    [NO AUTH - OPEN PROXY] Fetches an image from a given URL and returns it.
     This acts as a proxy to get around client-side CORS issues for PDF generation.
     The image URL is passed as a query parameter.
-    """
-    uid = verify_token(request.headers.get('Authorization'))
-    if not uid:
-        return jsonify({'error': 'Unauthorized'}), 401
-
-    # Verify the user has access to this project to prevent unauthorized image proxying
-    project_data = db_ref.child(f'projects/{project_id}').get()
-    if not project_data or project_data.get('uid') != uid:
-        return jsonify({'error': 'Project not found or access denied'}), 404
 
+    WARNING: This endpoint is an open proxy and is not secure. Anyone can use it
+    to route traffic through your server. Use with caution.
+    """
     image_url = request.args.get('url')
     if not image_url:
-        return jsonify({'error': 'Image URL parameter is required'}), 400
+        return jsonify({'error': 'The "url" query parameter is required.'}), 400
 
     try:
-        # It's crucial to use a session object for potential connection pooling and header management
+        # Use a session object for better performance and connection management.
+        # Set a timeout to prevent requests from hanging indefinitely.
         with requests.Session() as s:
-            response = s.get(image_url, stream=True)
-            response.raise_for_status()  # Raise an exception for bad status codes
+            response = s.get(image_url, stream=True, timeout=15)
+            # Raise an exception for bad status codes (e.g., 404 Not Found, 500 Server Error).
+            response.raise_for_status()
 
-            # Get content type from the original response
+            # Get the content type from the original image response to pass it along to the client.
             content_type = response.headers.get('Content-Type', 'application/octet-stream')
 
-            # Stream the response back to the client
-            return Response(response.iter_content(chunk_size=8192), content_type=content_type)
+            # Stream the response back to the client. This is memory-efficient as it doesn't
+            # load the entire image into memory at once.
+            return Response(response.iter_content(chunk_size=1024), content_type=content_type)
 
+    except requests.exceptions.Timeout:
+        return jsonify({'error': 'The request to the external image URL timed out.'}), 504 # 504 Gateway Timeout
     except requests.exceptions.RequestException as e:
-        print(f"Error fetching image from URL {image_url}: {e}")
-        return jsonify({'error': f'Failed to fetch image from the provided URL: {e}'}), 502 # 502 Bad Gateway is appropriate here
+        # This catches other network-related errors (e.g., DNS failure, connection error).
+        print(f"Error fetching image from URL '{image_url}': {e}")
+        return jsonify({'error': f'Failed to fetch the image from the provided URL. The server may be down or the URL may be incorrect.'}), 502 # 502 Bad Gateway
     except Exception as e:
-        print(f"An unexpected error occurred while proxying image: {e}")
-        return jsonify({'error': 'An internal error occurred'}), 500
+        # Catch any other unexpected errors.
+        print(f"An unexpected error occurred while proxying the image '{image_url}': {e}")
+        return jsonify({'error': 'An internal server error occurred while trying to fetch the image.'}), 500
 
 # -----------------------------------------------------------------------------
 # 3. AUTHENTICATION & USER MANAGEMENT