fix authen

Dockerfile

@@ -17,8 +17,6 @@ ENV MPLCONFIGDIR=/tmp/matplotlib-cache
 ENV TRANSFORMERS_CACHE=/tmp/huggingface-cache
 ENV HF_HOME=/tmp/huggingface-cache
 ENV HF_DATASETS_CACHE=/tmp/huggingface-cache
-ENV PYTHONUNBUFFERED=1
-ENV LOG_LEVEL=DEBUG
 
 # Copy requirements từ project hiện tại
 COPY requirements.txt .
@@ -55,4 +53,4 @@ USER appuser
 
 # Chạy ứng dụng với Uvicorn
 # Lưu ý: Hugging Face Spaces sử dụng port 7860
-CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860", "--log-level", "debug"] 
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"] 

auth.py

@@ -10,7 +10,7 @@ from typing import Annotated, Optional
 from jwt.exceptions import InvalidTokenError
 
 pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
-oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token", auto_error=True)
+oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/token", auto_error=True)
 
 # Authentication helper functions
 def verify_password(plain_password, hashed_password):
@@ -47,16 +47,29 @@ async def get_current_user(token: Annotated[str, Depends(oauth2_scheme)]):
         headers={"WWW-Authenticate": "Bearer"},
     )
     try:
+        print(f"Decoding token: {token[:10]}...")
         payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
+        print(f"Token payload: {payload}")
         username = payload.get("sub")
         if username is None:
+            print("Username not found in token payload")
             raise credentials_exception
         token_data = TokenData(username=username)
-    except InvalidTokenError:
+        print(f"Token data: {token_data}")
+    except InvalidTokenError as e:
+        print(f"Token validation error: {str(e)}")
         raise credentials_exception
-    user = get_user(get_users(), username=token_data.username)
+    except Exception as e:
+        print(f"Unexpected error during token validation: {str(e)}")
+        raise credentials_exception
+
+    users = get_users()
+    print(f"Available users: {list(users.keys())}")
+    user = get_user(users, username=token_data.username)
     if user is None:
+        print(f"User not found: {token_data.username}")
         raise credentials_exception
+    print(f"User authenticated: {user.username}")
     return user
 
 async def get_current_active_user(

data/users.json

@@ -6,13 +6,6 @@
         "hashed_password": "$2b$12$RtcKFk7B3hKd7vYkwxdFN.eBXSiryQIRUG.OoJ07Pl9lzHNUkugMi",
         "disabled": false
     },
-    "meiseidev": {
-        "username": "meiseidev",
-        "full_name": "meiseidev",
-        "email": "",
-        "hashed_password": "$2b$12$LXIbdQ388dMiN/ej76zuHeHuuz.VHz9rJfH4FpwdVbqfwCbSI55Va",
-        "disabled": false
-    },
     "meisaidev": {
         "username": "meisaidev",
         "full_name": "meisaidev",

main.py

@@ -4,7 +4,6 @@ from fastapi import FastAPI
 import uvicorn
 import traceback
 from contextlib import asynccontextmanager
-from fastapi.middleware.cors import CORSMiddleware
 
 current_dir = os.path.dirname(os.path.abspath(__file__))
 sys.path.append(current_dir)
@@ -35,9 +34,6 @@ app = FastAPI(
     description="API for MeisaiCheck AI System",
     version="1.0",
     lifespan=lifespan,
-    openapi_url="/openapi.json",
-    docs_url="/docs",
-    redoc_url="/redoc",
     openapi_tags=[
         {
             "name": "Health",
@@ -52,15 +48,8 @@ app = FastAPI(
             "description": "AI model endpoints for prediction and embedding",
         },
     ],
-)
-
-# Add CORS middleware
-app.add_middleware(
-    CORSMiddleware,
-    allow_origins=["*"],
-    allow_credentials=True,
-    allow_methods=["*"],
-    allow_headers=["*"],
+    # Add root_path for HF Spaces deployment
+    root_path="/api",
 )
 
 # Include Routers
@@ -75,4 +64,4 @@ async def root():
 
 if __name__ == "__main__":
     create_directories()
-    uvicorn.run(app, host="0.0.0.0", port=8000)
+    uvicorn.run(app, host="0.0.0.0", port=7860)

routes/health.py

@@ -1,8 +1,25 @@
-from fastapi import APIRouter
+from fastapi import APIRouter, Depends
+from auth import get_current_user
+from models import User
 import time
 
 router = APIRouter()
 
 @router.get("/health")
 async def health_check():
-    return {"status": "ok", "timestamp": time.time()}
+    """
+    Check if the API is running
+    """
+    return {"status": "healthy"}
+
+
+@router.get("/auth-check")
+async def auth_check(current_user: User = Depends(get_current_user)):
+    """
+    Debug endpoint to verify authentication is working
+    """
+    return {
+        "authenticated": True,
+        "username": current_user.username,
+        "message": "Authentication successful",
+    }