Update app/utils.py

app/utils.py

@@ -2,6 +2,12 @@ import fitz  # PyMuPDF
 from sklearn.feature_extraction.text import TfidfVectorizer
 from sklearn.metrics.pairwise import cosine_similarity
 
+import os
+import requests
+from functools import wraps
+from flask import request, jsonify
+
+
 def extract_text_from_pdf(file_storage):
     with fitz.open(stream=file_storage.read(), filetype="pdf") as doc:
         return " ".join([page.get_text() for page in doc])
@@ -25,10 +31,8 @@ def rank_resumes_by_similarity(resume_files, job_description):
     ]
 
 
-# utils/auth.py
-from functools import wraps
-from flask import request, jsonify
-from .models import User  # adjust import to your structure
+SUPABASE_URL = os.getenv("SUPABASE_URL")
+SUPABASE_API_KEY = os.getenv("SUPABASE_API_KEY")
 
 def require_api_key(f):
     @wraps(f)
@@ -40,10 +44,27 @@ def require_api_key(f):
 
         token = auth_header.split("Bearer ")[1].strip()
 
-        user = User.query.filter_by(api_key=token).first()
-        if not user:
+        # Call Supabase REST API to validate token
+        headers = {
+            "apikey": SUPABASE_API_KEY,
+            "Authorization": f"Bearer {SUPABASE_API_KEY}",  # service role
+            "Content-Type": "application/json"
+        }
+
+        url = f"{SUPABASE_URL}/rest/v1/users?api_key=eq.{token}"
+
+        response = requests.get(url, headers=headers)
+
+        if response.status_code != 200:
+            return jsonify({"error": "Failed to contact Supabase"}), 500
+
+        user_data = response.json()
+
+        if not user_data:
             return jsonify({"error": "Invalid or revoked API key."}), 403
 
-        request.user = user  # attach user to request for downstream use
+        # Optionally attach user to request (like before)
+        request.user = user_data[0]
+
         return f(*args, **kwargs)
     return decorated_function