fix bug

app.py

@@ -184,40 +184,63 @@ def _has_active_tasks(task_list):
 app = FastAPI(title="CloudFileRelay｜Online Files to Cloud Drive")
 
 # 会话存储
+SESSION_FILE = "sessions_db.json"
 sessions: dict = {}
 
 
+def load_sessions():
+    global sessions
+    if os.path.exists(SESSION_FILE):
+        try:
+            with open(SESSION_FILE, "r", encoding="utf-8") as f:
+                sessions = json.load(f)
+        except Exception:
+            sessions = {}
+
+
+def save_sessions():
+    try:
+        with open(SESSION_FILE, "w", encoding="utf-8") as f:
+            json.dump(sessions, f, ensure_ascii=False, indent=2)
+    except Exception:
+        pass
+
+
+load_sessions()
+
+
 def get_or_create_session(request: Request) -> tuple:
-    sid = request.cookies.get("sid", "")
+    # 优先从 header 获取 sid，作为 fallback 方案，解决 iframe 跨域 Cookie 丢失问题
+    sid = request.headers.get("X-Session-ID", "")
+    if not sid:
+        sid = request.cookies.get("sid", "")
+    
     if sid and sid in sessions:
         return sid, sessions[sid]
-    sid = uuid.uuid4().hex
     
-    test_tasks = []
-    if ENABLE_TEST_DATA:
-        # 初始化一些测试数据以展示分页效果
-        for i in range(45):
-            test_tasks.append({
-                "trace_id": f"test_{20240208}_{i:03d}",
-                "run_id": str(123456 + i),
-                "filename": f"测试文件_{i:03d}.mp4",
-                "url": f"https://example.com/file_{i:03d}.mp4",
-                "status": "已转存" if i % 3 != 0 else "失败",
-                "share_url": f"https://quark.cn/s/{"abcdefghijk"[i%11]*12}" if i % 3 != 0 else "",
-                "created_at": f"2026-02-08 10:{i//60:02d}:{i%60:02d}",
-            })
+    # 如果 sid 已经存在但不在 sessions 中（可能服务器重启），仍保留原 sid 以维持客户端一致性
+    if not sid:
+        sid = uuid.uuid4().hex
     
-    sessions[sid] = test_tasks
+    if sid not in sessions:
+        sessions[sid] = []
+        save_sessions()
     return sid, sessions[sid]
 
 
 def json_resp(data: dict, sid: str) -> JSONResponse:
+    # 每次有变更时保存会话（这里简单处理，实际高并发下建议异步或定时保存）
+    save_sessions()
+    # 在响应体中携带 sid，方便前端存入 localStorage
+    data["sid"] = sid
     resp = JSONResponse(content=data)
-    resp.set_cookie("sid", sid, max_age=86400 * 7, httponly=True, samesite="lax")
+    # 使用 samesite="none" 和 secure=True 以支持在 Hugging Face Spaces 等 iframe 环境中正常传递 Cookie
+    resp.set_cookie("sid", sid, max_age=86400 * 7, httponly=True, samesite="none", secure=True)
     return resp
 
 
 # ---- 请求模型 ----
+
 class SubmitRequest(BaseModel):
     url: str
     filename: str = ""
@@ -232,10 +255,11 @@ class QueryRequest(BaseModel):
 async def index(request: Request):
     sid, _ = get_or_create_session(request)
     resp = HTMLResponse(content=HTML_TEMPLATE)
-    resp.set_cookie("sid", sid, max_age=86400 * 7, httponly=True, samesite="lax")
+    resp.set_cookie("sid", sid, max_age=86400 * 7, httponly=True, samesite="none", secure=True)
     return resp
 
 
+
 # ---- API ----
 @app.get("/api/extract-filename")
 async def api_extract_filename(url: str = Query("")):
@@ -995,12 +1019,22 @@ function renderPaginationControls(totalPages) {
    API Helper
    ============================================================ */
 async function api(endpoint, method, body) {
-  const opt = { method: method || 'GET', headers: {'Content-Type':'application/json'} };
+  const sid = localStorage.getItem('sid') || '';
+  const opt = { 
+    method: method || 'GET', 
+    headers: {
+      'Content-Type':'application/json',
+      'X-Session-ID': sid
+    } 
+  };
   if (body) opt.body = JSON.stringify(body);
   const r = await fetch(endpoint, opt);
-  return await r.json();
+  const d = await r.json();
+  if (d.sid) localStorage.setItem('sid', d.sid);
+  return d;
 }
 
+
 /* ============================================================
    URL → 文件名自动提取
    ============================================================ */