Update app.py

app.py

@@ -9,7 +9,6 @@ LOGIN_URL = "https://www.ivasms.com/login"
 DASHBOARD_URL = "https://www.ivasms.com/portal"
 SMS_URL = "https://www.ivasms.com/portal/sms/received/getsms"
 
-# Global session (simple & legal)
 client = httpx.Client(
     follow_redirects=True,
     headers={
@@ -28,7 +27,6 @@ csrf_token = None
 @app.get("/")
 def root():
     return {
-        "service": "iVasMS API",
         "login": "/login?email=EMAIL&password=PASSWORD",
         "status": "/status",
         "sms": "/sms",
@@ -38,26 +36,16 @@ def root():
 
 @app.get("/login")
 def login(email: str, password: str):
-    """
-    LOGIN via GET
-    Example:
-    /login?email=xxx@gmail.com&password=xxxxx
-    """
     global session_ready, csrf_token
 
-    # Step 1: open login page (get CSRF)
-    r = client.get(LOGIN_URL)
-    soup = BeautifulSoup(r.text, "html.parser")
-    token_input = soup.find("input", {"name": "_token"})
-    if not token_input:
-        raise HTTPException(500, "CSRF token not found")
+    # Step 1: open login page (for cookies)
+    client.get(LOGIN_URL)
 
-    # Step 2: submit login (email + username for safety)
+    # Step 2: submit login (NO CSRF HERE)
     data = {
         "email": email,
         "username": email,
-        "password": password,
-        "_token": token_input["value"]
+        "password": password
     }
 
     res = client.post(LOGIN_URL, data=data)
@@ -66,13 +54,14 @@ def login(email: str, password: str):
         session_ready = False
         raise HTTPException(401, "Login failed")
 
-    # Step 3: get dashboard CSRF
+    # Step 3: open dashboard, get CSRF token
     dash = client.get(DASHBOARD_URL)
-    dash_soup = BeautifulSoup(dash.text, "html.parser")
-    meta = dash_soup.find("meta", {"name": "csrf-token"})
+    soup = BeautifulSoup(dash.text, "html.parser")
+    meta = soup.find("meta", {"name": "csrf-token"})
+
     if not meta:
         session_ready = False
-        raise HTTPException(500, "Dashboard CSRF not found")
+        raise HTTPException(500, "Dashboard CSRF token not found")
 
     csrf_token = meta["content"]
     session_ready = True
@@ -85,17 +74,11 @@ def login(email: str, password: str):
 
 @app.get("/status")
 def status():
-    return {
-        "logged_in": session_ready
-    }
+    return {"logged_in": session_ready}
 
 
 @app.get("/sms")
 def get_sms():
-    """
-    Ambil SMS (raw HTML)
-    Harus login dulu
-    """
     if not session_ready or not csrf_token:
         raise HTTPException(401, "Not logged in")
 
@@ -122,6 +105,4 @@ def logout():
     client.cookies.clear()
     session_ready = False
     csrf_token = None
-    return {
-        "status": "logged_out"
-    }
+    return {"status": "logged_out"}