Update app.py

app.py

@@ -13,17 +13,13 @@ HF_TOKEN = os.environ.get("HF_TOKEN", "")
 if not HF_TOKEN:
     raise Exception("HF_TOKEN environment variable not set. Add it in Space secrets.")
 
-# Create HTTP secret for authentication (bearer token)
-con.execute(f"""
-    CREATE SECRET IF NOT EXISTS hf_token (
-        TYPE HTTP,
-        HEADER 'Authorization' 'Bearer {HF_TOKEN}'
-    );
-""")
-
-# Parquet URL (without ?token)
+# Remote parquet URL
 PARQUET_URL = "https://huggingface.co/datasets/tfqdeadlo/Inddatainone/resolve/main/users_data.parquet"
 
+# DuckDB map syntax for HTTP headers
+# Isse token automatically authorisation header mein bheja jayega
+HEADERS_MAP = f"map({{'Authorization': 'Bearer {HF_TOKEN}'}})"
+
 @app.get("/")
 def home():
     return {"message": "API is running. Use /search?mobile=NUMBER"}
@@ -31,23 +27,24 @@ def home():
 @app.get("/search")
 async def search_mobile(mobile: str = Query(..., description="Mobile number to search")):
     try:
-        # Remote parquet direct read - no download, only required rows fetched
+        # Direct remote parquet read with authentication headers
+        # DuckDB sirf matching rows fetch karega, poori file nahi
         query = f"""
             SELECT mobile, name, fname, address, alt, circle, id, email 
-            FROM read_parquet('{PARQUET_URL}') 
+            FROM read_parquet('{PARQUET_URL}', http_headers={HEADERS_MAP}) 
             WHERE mobile = ? 
             LIMIT 1
         """
         result = con.execute(query, [str(mobile)]).fetchall()
         
         if not result:
-            return {"status": "error", "message": f"Mobile {mobile} nahi mila."}
+            return {"status": "error", "message": f"Mobile number {mobile} nahi mila."}
         
         columns = [desc[0] for desc in con.description]
         row_dict = dict(zip(columns, result[0]))
         return {"status": "success", "data": row_dict}
         
     except Exception as e:
-        # Token leak se bachao
-        error_msg = str(e).replace(HF_TOKEN, "[HIDDEN]")
+        # Token ko error message se hata do
+        error_msg = str(e).replace(HF_TOKEN, "[HIDDEN_TOKEN]")
         raise HTTPException(status_code=500, detail=f"Error: {error_msg}")