Delete app.py

app.py

@@ -1,190 +0,0 @@
-"""
-Flask REST API for Auth App
-Hosted on Hugging Face Spaces
-"""
-
-from flask import Flask, request, jsonify
-from flask_cors import CORS
-from pymongo import MongoClient
-from pymongo.errors import DuplicateKeyError
-from werkzeug.security import generate_password_hash, check_password_hash
-import jwt
-import os
-import datetime
-from functools import wraps
-from dotenv import load_dotenv
-import logging
-
-load_dotenv()
-
-logging.basicConfig(level=logging.INFO)
-logger = logging.getLogger(__name__)
-
-app = Flask(__name__)
-CORS(app, origins="*", supports_credentials=True)
-
-# ── Config ────────────────────────────────────────────────────────────────────
-MONGO_URI   = os.environ.get("MONGO_URI", "")
-JWT_SECRET  = os.environ.get("JWT_SECRET", "change-me-in-production-please")
-JWT_EXPIRY  = int(os.environ.get("JWT_EXPIRY_HOURS", 24))
-DB_NAME     = os.environ.get("DB_NAME", "authapp")
-
-# ── DB connection (lazy) ──────────────────────────────────────────────────────
-_client = None
-_db     = None
-
-def get_db():
-    global _client, _db
-    if _db is None:
-        if not MONGO_URI:
-            raise RuntimeError("MONGO_URI environment variable is not set.")
-        _client = MongoClient(MONGO_URI, serverSelectionTimeoutMS=5000)
-        _db = _client[DB_NAME]
-        # Unique index on email
-        _db.users.create_index("email", unique=True)
-        logger.info("MongoDB connected.")
-    return _db
-
-
-# ── JWT helpers ───────────────────────────────────────────────────────────────
-def create_token(user_id: str, email: str) -> str:
-    payload = {
-        "sub":   str(user_id),
-        "email": email,
-        "iat":   datetime.datetime.utcnow(),
-        "exp":   datetime.datetime.utcnow() + datetime.timedelta(hours=JWT_EXPIRY),
-    }
-    return jwt.encode(payload, JWT_SECRET, algorithm="HS256")
-
-
-def decode_token(token: str) -> dict:
-    return jwt.decode(token, JWT_SECRET, algorithms=["HS256"])
-
-
-def token_required(f):
-    @wraps(f)
-    def decorated(*args, **kwargs):
-        auth_header = request.headers.get("Authorization", "")
-        if not auth_header.startswith("Bearer "):
-            return jsonify({"error": "Missing or invalid Authorization header"}), 401
-        token = auth_header.split(" ", 1)[1]
-        try:
-            payload = decode_token(token)
-        except jwt.ExpiredSignatureError:
-            return jsonify({"error": "Token has expired"}), 401
-        except jwt.InvalidTokenError as e:
-            return jsonify({"error": f"Invalid token: {e}"}), 401
-        request.user = payload
-        return f(*args, **kwargs)
-    return decorated
-
-
-# ── Health ────────────────────────────────────────────────────────────────────
-@app.route("/health", methods=["GET"])
-def health():
-    try:
-        db = get_db()
-        db.command("ping")
-        return jsonify({"status": "ok", "db": "connected"})
-    except Exception as e:
-        return jsonify({"status": "error", "detail": str(e)}), 503
-
-
-# ── Auth routes ───────────────────────────────────────────────────────────────
-@app.route("/api/signup", methods=["POST"])
-def signup():
-    data = request.get_json(silent=True) or {}
-    name     = (data.get("name")     or "").strip()
-    email    = (data.get("email")    or "").strip().lower()
-    password = (data.get("password") or "").strip()
-
-    if not all([name, email, password]):
-        return jsonify({"error": "name, email, and password are required"}), 400
-    if len(password) < 8:
-        return jsonify({"error": "Password must be at least 8 characters"}), 400
-
-    db = get_db()
-    user_doc = {
-        "name":            name,
-        "email":           email,
-        "password_hash":   generate_password_hash(password),
-        "created_at":      datetime.datetime.utcnow(),
-        "last_login":      None,
-    }
-    try:
-        result = db.users.insert_one(user_doc)
-    except DuplicateKeyError:
-        return jsonify({"error": "An account with this email already exists"}), 409
-
-    token = create_token(str(result.inserted_id), email)
-    return jsonify({
-        "message": "Account created successfully",
-        "token":   token,
-        "user":    {"id": str(result.inserted_id), "name": name, "email": email},
-    }), 201
-
-
-@app.route("/api/login", methods=["POST"])
-def login():
-    data = request.get_json(silent=True) or {}
-    email    = (data.get("email")    or "").strip().lower()
-    password = (data.get("password") or "").strip()
-
-    if not all([email, password]):
-        return jsonify({"error": "email and password are required"}), 400
-
-    db   = get_db()
-    user = db.users.find_one({"email": email})
-    if not user or not check_password_hash(user["password_hash"], password):
-        return jsonify({"error": "Invalid email or password"}), 401
-
-    db.users.update_one({"_id": user["_id"]}, {"$set": {"last_login": datetime.datetime.utcnow()}})
-    token = create_token(str(user["_id"]), email)
-    return jsonify({
-        "message": "Login successful",
-        "token":   token,
-        "user":    {"id": str(user["_id"]), "name": user["name"], "email": email},
-    })
-
-
-# ── Protected routes ──────────────────────────────────────────────────────────
-@app.route("/api/me", methods=["GET"])
-@token_required
-def me():
-    from bson import ObjectId
-    db   = get_db()
-    user = db.users.find_one({"_id": ObjectId(request.user["sub"])})
-    if not user:
-        return jsonify({"error": "User not found"}), 404
-    return jsonify({
-        "id":         str(user["_id"]),
-        "name":       user["name"],
-        "email":      user["email"],
-        "created_at": user["created_at"].isoformat(),
-        "last_login": user["last_login"].isoformat() if user.get("last_login") else None,
-    })
-
-
-@app.route("/api/dashboard/stats", methods=["GET"])
-@token_required
-def dashboard_stats():
-    db         = get_db()
-    total      = db.users.count_documents({})
-    recent_cut = datetime.datetime.utcnow() - datetime.timedelta(days=7)
-    recent     = db.users.count_documents({"created_at": {"$gte": recent_cut}})
-
-    from bson import ObjectId
-    user = db.users.find_one({"_id": ObjectId(request.user["sub"])})
-    member_days = (datetime.datetime.utcnow() - user["created_at"]).days if user else 0
-
-    return jsonify({
-        "total_users":    total,
-        "new_this_week":  recent,
-        "member_days":    member_days,
-        "active_sessions": 1,          # placeholder – extend as needed
-    })
-
-
-if __name__ == "__main__":
-    port = int(os.environ.get("PORT", 7860))   # HF Spaces default
-    app.run(host="0.0.0.0", port=port, debug=False)