Update app.py

app.py

@@ -18,7 +18,17 @@ logger = logging.getLogger(__name__)
 load_dotenv()
 
 app = Flask(__name__)
-app.secret_key = os.environ.get("SECRET_KEY", os.urandom(24).hex())
+# More explicit session configuration
+# We set SESSION_COOKIE_SECURE=False because Hugging Face Spaces handles HTTPS termination externally.
+# If you were running HTTPS directly in Flask, you'd set this to True.
+app.config.update(
+    SECRET_KEY=os.environ.get("SECRET_KEY", os.urandom(24).hex()), # Ensure SECRET_KEY is loaded
+    SESSION_COOKIE_HTTPONLY=True,  # Prevent client-side JS access to the cookie
+    SESSION_COOKIE_SAMESITE='Lax', # Recommended setting for CSRF protection
+    SESSION_COOKIE_SECURE=False,   # Set to False as HTTPS is handled externally by HF
+)
+
+app.secret_key = app.config['SECRET_KEY'] # Make sure app.secret_key is set from config
 
 # Store active sessions
 sessions = {}
@@ -34,7 +44,8 @@ def index():
     # Generate a unique session ID if one doesn't exist
     if "session_id" not in session:
         session["session_id"] = str(uuid.uuid4())
-        
+        logger.info(f"New session created: {session['session_id']}") # Add logging
+
     return render_template("index.html")
 
 def is_rate_limited(session_id):
@@ -64,11 +75,18 @@ def chat():
     """Handle chat requests"""
     data = request.json
     message = data.get("message", "")
-    session_id = session.get("session_id")
     
+    # Add logging to see the session state
+    logger.info(f"Chat request received. Current session keys: {list(session.keys())}")
+    
+    session_id = session.get("session_id")
+
     if not session_id:
+        logger.error("No valid session ID found in session object.") # Add error logging
         return jsonify({"error": "No valid session"}), 400
     
+    logger.info(f"Valid session ID found: {session_id}") # Add success logging
+    
     # Check rate limiting
     if is_rate_limited(session_id):
         return jsonify({
@@ -137,17 +155,9 @@ if __name__ == "__main__":
     os.makedirs("templates", exist_ok=True)
     
     # Priority: 1. Command line argument, 2. Environment variable, 3. Default (8080)
-   # port = args.port if args.port else int(os.environ.get("PORT", 8080))
-    
-    #logger.info(f"Starting GitHub Navigator on port {port}")
-    
-    # Run the app
-    #app.run(host="0.0.0.0", port=port, debug=True)  
-
-
-    port = args.port if args.port else int(os.environ.get("PORT", 7860))
+    port = args.port if args.port else int(os.environ.get("PORT", 8080))
     
     logger.info(f"Starting GitHub Navigator on port {port}")
     
-    # Run the app (without debug mode for production)
-    app.run(host="0.0.0.0", port=port)
+    # Run the app
+    app.run(host="0.0.0.0", port=port, debug=True)