Update app.py

app.py

@@ -3,59 +3,100 @@ import httpx
 from bs4 import BeautifulSoup
 from datetime import datetime, timedelta
 
-app = FastAPI()
+app = FastAPI(title="iVasMS API (GET only)")
 
 LOGIN_URL = "https://www.ivasms.com/login"
 DASHBOARD_URL = "https://www.ivasms.com/portal"
 SMS_URL = "https://www.ivasms.com/portal/sms/received/getsms"
 
+# Global session (simple & legal)
 client = httpx.Client(
     follow_redirects=True,
     headers={
-        "User-Agent": "Mozilla/5.0",
+        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
+        "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
         "Accept-Language": "en-US,en;q=0.9",
-    }
+        "Connection": "keep-alive",
+    },
+    timeout=30.0
 )
 
 session_ready = False
 csrf_token = None
 
-@app.post("/login")
+
+@app.get("/")
+def root():
+    return {
+        "service": "iVasMS API",
+        "login": "/login?email=EMAIL&password=PASSWORD",
+        "status": "/status",
+        "sms": "/sms",
+        "logout": "/logout"
+    }
+
+
+@app.get("/login")
 def login(email: str, password: str):
+    """
+    LOGIN via GET
+    Example:
+    /login?email=xxx@gmail.com&password=xxxxx
+    """
     global session_ready, csrf_token
 
+    # Step 1: open login page (get CSRF)
     r = client.get(LOGIN_URL)
     soup = BeautifulSoup(r.text, "html.parser")
-    token = soup.find("input", {"name": "_token"})
+    token_input = soup.find("input", {"name": "_token"})
+    if not token_input:
+        raise HTTPException(500, "CSRF token not found")
 
+    # Step 2: submit login (email + username for safety)
     data = {
         "email": email,
         "username": email,
         "password": password,
-        "_token": token["value"]
+        "_token": token_input["value"]
     }
 
     res = client.post(LOGIN_URL, data=data)
 
     if "login" in str(res.url):
+        session_ready = False
         raise HTTPException(401, "Login failed")
 
+    # Step 3: get dashboard CSRF
     dash = client.get(DASHBOARD_URL)
-    soup = BeautifulSoup(dash.text, "html.parser")
-    meta = soup.find("meta", {"name": "csrf-token"})
+    dash_soup = BeautifulSoup(dash.text, "html.parser")
+    meta = dash_soup.find("meta", {"name": "csrf-token"})
+    if not meta:
+        session_ready = False
+        raise HTTPException(500, "Dashboard CSRF not found")
 
     csrf_token = meta["content"]
     session_ready = True
 
-    return {"status": "ok"}
+    return {
+        "status": "ok",
+        "logged_in": True
+    }
+
 
 @app.get("/status")
 def status():
-    return {"logged_in": session_ready}
+    return {
+        "logged_in": session_ready
+    }
+
 
 @app.get("/sms")
 def get_sms():
-    if not session_ready:
+    """
+    Ambil SMS (raw HTML)
+    Harus login dulu
+    """
+    if not session_ready or not csrf_token:
         raise HTTPException(401, "Not logged in")
 
     today = datetime.utcnow()
@@ -68,11 +109,19 @@ def get_sms():
     }
 
     r = client.post(SMS_URL, data=payload)
-    return {"raw_html": r.text}
 
-@app.post("/logout")
+    return {
+        "success": True,
+        "raw_html": r.text
+    }
+
+
+@app.get("/logout")
 def logout():
-    global session_ready
+    global session_ready, csrf_token
     client.cookies.clear()
     session_ready = False
-    return {"status": "logged out"}
+    csrf_token = None
+    return {
+        "status": "logged_out"
+    }