Update app.py

app.py

@@ -5,18 +5,30 @@ from typing import List
 from datetime import date, datetime, timedelta
 from collections import Counter
 import math
+import jwt
 import json
 import os
 from fastapi.middleware.cors import CORSMiddleware
 from dotenv import load_dotenv
+from supabase import create_client, Client
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
 
 from itinerary.summary_generator import generate_summary_with_ai
 from recommender.recommender import Recommender
 from itinerary.itinerary_scheduler import ItineraryScheduler
 from recommender.weather_api import get_weather_forecast
 
+
 load_dotenv()
 
+JWT_SECRET_KEY = os.getenv("JWT_SECRET_KEY", "your-super-secret-key-for-local-dev")
+ALGORITHM = "HS256"
+
+SUPABASE_URL = os.getenv("SUPABASE_URL")
+SUPABASE_KEY = os.getenv("SUPABASE_KEY")
+supabase: Client = create_client(SUPABASE_URL, SUPABASE_KEY)
+
+
 
 class ConnectionManager:
     def __init__(self):
@@ -61,6 +73,20 @@ class ItineraryRequest(BaseModel):
             }
         }
 
+security = HTTPBearer()
+def get_current_user_id(credentials: HTTPAuthorizationCredentials = Depends(security)) -> str:
+    """Decodes the JWT token to get the user's ID."""
+    token = credentials.credentials
+    try:
+        payload = jwt.decode(token, JWT_SECRET_KEY, algorithms=[ALGORITHM])
+        user_id = payload.get("sub") # 'sub' is the standard claim for subject/user ID
+        if user_id is None:
+            raise HTTPException(status_code=401, detail="Invalid token: User ID not found")
+        return user_id
+    except jwt.ExpiredSignatureError:
+        raise HTTPException(status_code=401, detail="Token has expired")
+    except jwt.InvalidTokenError:
+        raise HTTPException(status_code=401, detail="Invalid token")
 
 # --- FastAPI Application Setup ---
 app = FastAPI(
@@ -69,7 +95,6 @@ app = FastAPI(
     version="1.0.0"
 )
 
-
 # --- Database and Recommender Initialization ---
 db_params = {
     "host": os.getenv("DB_HOST"),
@@ -138,7 +163,10 @@ app.add_middleware(
 
 # --- API Endpoint Definition ---
 @app.post("/schedule", summary="Generate a Scheduled Itinerary")
-def create_scheduled_itinerary(request: ItineraryRequest):
+def create_scheduled_itinerary(
+    request: ItineraryRequest,
+    user_id: str = Depends(get_current_user_id)
+):
     used_place_ids = set()
     all_itineraries = []
 
@@ -170,6 +198,17 @@ def create_scheduled_itinerary(request: ItineraryRequest):
     raw_forecast = get_weather_forecast(request.user_lat, request.user_lon, forecast_start, forecast_end)
     daily_forecast = format_daily_forecast(raw_forecast)
 
+    try:
+        supabase.table('itineraries').insert({
+            "user_id": user_id,
+            "itinerary_data": scheduled_result,
+            "start_date": request.start_date.isoformat(),
+            "end_date": request.end_date.isoformat()
+        }).execute()
+        print(f"Successfully saved itinerary for user: {user_id}")
+    except Exception as e:
+        print(f"ERROR: Could not save itinerary to Supabase. Reason: {e}")
+
     # 4. Combine results into the final response
     return {
         "scheduled_itineraries": scheduled_result["scheduled"],