Update app.py

app.py

@@ -13,8 +13,13 @@ HF_TOKEN = os.environ.get("HF_TOKEN", "")
 if not HF_TOKEN:
     raise Exception("HF_TOKEN environment variable not set. Add it in Space secrets.")
 
-# Set HTTP headers for all outgoing httpfs requests
-con.execute(f"SET http_headers = 'Authorization: Bearer {HF_TOKEN}'")
+# Create HTTP secret for authentication (bearer token)
+con.execute(f"""
+    CREATE SECRET IF NOT EXISTS hf_token (
+        TYPE HTTP,
+        HEADER 'Authorization' 'Bearer {HF_TOKEN}'
+    );
+""")
 
 # Parquet URL (without ?token)
 PARQUET_URL = "https://huggingface.co/datasets/tfqdeadlo/Inddatainone/resolve/main/users_data.parquet"
@@ -26,8 +31,7 @@ def home():
 @app.get("/search")
 async def search_mobile(mobile: str = Query(..., description="Mobile number to search")):
     try:
-        # DuckDB will read remote parquet directly (no download)
-        # Predicate pushdown: sirf matching rows fetch hongi
+        # Remote parquet direct read - no download, only required rows fetched
         query = f"""
             SELECT mobile, name, fname, address, alt, circle, id, email 
             FROM read_parquet('{PARQUET_URL}') 
@@ -44,6 +48,6 @@ async def search_mobile(mobile: str = Query(..., description="Mobile number to s
         return {"status": "success", "data": row_dict}
         
     except Exception as e:
-        # Token hide karo error se
+        # Token leak se bachao
         error_msg = str(e).replace(HF_TOKEN, "[HIDDEN]")
         raise HTTPException(status_code=500, detail=f"Error: {error_msg}")