Update app.py

app.py

@@ -9,7 +9,6 @@ AUTH_HEADER = os.environ.get("AUTH_HEADER")
 
 async def is_session_valid(session_token: str) -> bool:
     async with httpx.AsyncClient() as client:
-        print(session_token)
         resp = await client.get(
             f"{BACKEND_URL}/user/session",
             params={"token": session_token},
@@ -30,12 +29,12 @@ async def proxy(full_path: str, request: Request):
     if user_auth and user_auth.lower().startswith("bearer "):
         session_token = user_auth.split(" ", 1)[1]
 
-    # Valida sessão, exceto para rotas públicas (exemplo: login, register)
+    # Valida sessão, exceto para rotas públicas
     if full_path not in ["user/login", "user/register", "user/session"]:
         if not session_token or not await is_session_valid(session_token):
             return Response(content="Não autorizado", status_code=401)
 
-    # Copia headers originais e adiciona Authorization do Supabase
+    # Copia headers originais e sobrescreve Authorization com AUTH_HEADER
     headers = dict(request.headers)
     headers["Authorization"] = AUTH_HEADER
     for h in ["host", "content-length", "accept-encoding", "connection"]: