Update app.py

app.py

@@ -2,64 +2,58 @@ import os
 import time
 import random
 import traceback
+import json
 
-from fastapi import FastAPI, Depends, HTTPException, Security
-from fastapi.security.api_key import APIKeyHeader
+from fastapi import FastAPI, HTTPException, Depends, Header
 from pydantic import BaseModel
 import uvicorn
 
 from g4f.client import Client
 from g4f.Provider import __providers__
 
-MODEL = "gpt-4o-mini"
-
-MAX_RETRIES = 10
-TIMEOUT = 60
-
-# --- إعدادات مفاتيح الأمان من البيئة المستضافة ---
-# قراءة مفتاح حمايتك الخاص لـ FastAPI (إذا لم تجده سيضع قيمة افتراضية لحين ضبطه في الـ Secrets)
-MY_API_KEY = os.getenv("MY_PROJECT_API_KEY", "my_fallback_secret_key_123")
-api_key_header = APIKeyHeader(name="Authorization", auto_error=False)
-
-# قراءة مفتاح سيرفر Context7 من الـ Secrets الخاصة بـ Hugging Face
-CONTEXT7_KEY = os.getenv("CONTEXT7_API_KEY", "")
-
-# بناء قالب تكوين الـ MCP الخاص بـ Context7 برمجياً
-MCP_CONFIG = {
-    "mcpServers": {
-        "context7": {
-            "url": "https://mcp.context7.com/mcp",
-            "headers": {
-                "Authorization": f"Bearer {CONTEXT7_KEY}"
+# ============================================================
+# إنشاء ملف config.json تلقائياً إذا لم يكن موجوداً
+# (تقرأه مكتبة g4f تلقائياً عند إنشاء Client)
+# ============================================================
+CONFIG_PATH = "config.json"
+
+if not os.path.exists(CONFIG_PATH):
+    context7_key = os.environ.get("CONTEXT7_API_KEY", "")
+    if context7_key:
+        config_data = {
+            "mcpServers": {
+                "context7": {
+                    "url": "https://mcp.context7.com/mcp",
+                    "headers": {
+                        "Authorization": f"Bearer {context7_key}"
+                    }
+                }
             }
         }
-    }
-}
+        with open(CONFIG_PATH, "w", encoding="utf-8") as f:
+            json.dump(config_data, f, indent=2, ensure_ascii=False)
+        print("[+] config.json auto-generated for Context7 MCP")
+    else:
+        print("[!] CONTEXT7_API_KEY not set; skipping config.json creation")
 
-async def get_api_key(api_key_header: str = Security(api_key_header)):
-    """دالة التحقق من أن العميل الخارجي يرسل مفتاح الـ API الصحيح"""
-    if not api_key_header:
-        raise HTTPException(status_code=403, detail="Missing API Key in Authorization header")
-    
-    # دعم صيغتي النقل العادية والمسبوقة بـ Bearer
-    token = api_key_header.replace("Bearer ", "").strip()
-    if token != MY_API_KEY:
-        raise HTTPException(status_code=403, detail="Invalid API Key. Access Denied.")
-    return token
+# ============================================================
+# المنطق الأصلي — لم يُمسَّ
+# ============================================================
 
+MODEL = "gpt-4o-mini"
+
+MAX_RETRIES = 10
+TIMEOUT = 60
 
 SAFE_PROVIDERS = []
 
 for provider in __providers__:
     try:
         name = provider.__name__.lower()
-
         if not getattr(provider, "working", False):
             continue
-
         if getattr(provider, "needs_auth", False):
             continue
-
         if getattr(provider, "use_nodriver", False):
             continue
 
@@ -117,6 +111,7 @@ class SmartG4F:
 
         for attempt in range(MAX_RETRIES):
             pool = self.provider_pool()
+
             if not pool:
                 return {
                     "success": False,
@@ -124,10 +119,10 @@ class SmartG4F:
                 }
 
             provider = random.choice(pool)
+
             print(f"[TRY {attempt+1}] {provider.__name__}")
 
             try:
-                # دمج إعداد الـ MCP لـ Context7 عبر الـ extra_body لضمان استدعائه مع الموديل المختار
                 response = client.chat.completions.create(
                     model=MODEL,
                     provider=provider,
@@ -138,9 +133,6 @@ class SmartG4F:
                         }
                     ],
                     timeout=TIMEOUT,
-                    extra_body={
-                        "mcp_config": MCP_CONFIG
-                    } if CONTEXT7_KEY else {} # يتم تفعيله فقط في حال وجود المفتاح لحمايتك من الأخطاء
                 )
 
                 text = response.choices[0].message.content
@@ -159,6 +151,7 @@ class SmartG4F:
 
             except Exception as e:
                 err = str(e).lower()
+
                 traceback.print_exc()
 
                 errors.append({
@@ -169,13 +162,17 @@ class SmartG4F:
                 if "429" in err:
                     self.mark_bad(provider, 600)
                     time.sleep(random.randint(10, 20))
+
                 elif "cloudflare" in err:
                     self.mark_bad(provider, 1200)
                     time.sleep(20)
+
                 elif "timeout" in err:
                     self.mark_bad(provider, 300)
+
                 else:
                     self.mark_bad(provider, 180)
+
                 continue
 
         return {
@@ -185,6 +182,7 @@ class SmartG4F:
 
 
 app = FastAPI()
+
 ai = SmartG4F()
 
 
@@ -192,6 +190,39 @@ class Query(BaseModel):
     prompt: str
 
 
+# ============================================================
+# نظام الحماية — Bearer Token
+# ============================================================
+def verify_api_key(authorization: str = Header(None)):
+    expected_key = os.environ.get("MY_PROJECT_API_KEY")
+    if not expected_key:
+        raise HTTPException(
+            status_code=500,
+            detail="Server misconfiguration: MY_PROJECT_API_KEY not set"
+        )
+
+    if not authorization:
+        raise HTTPException(
+            status_code=403,
+            detail="Missing Authorization header"
+        )
+
+    if not authorization.startswith("Bearer "):
+        raise HTTPException(
+            status_code=403,
+            detail="Invalid authorization header format. Expected: Bearer <token>"
+        )
+
+    token = authorization.split(" ", 1)[1] if " " in authorization else ""
+    if token != expected_key:
+        raise HTTPException(
+            status_code=403,
+            detail="Invalid API key"
+        )
+
+    return True
+
+
 @app.get("/")
 async def home():
     return {
@@ -200,9 +231,8 @@ async def home():
     }
 
 
-# تفعيل الحماية بـ Depends(get_api_key) لمنع أي استهلاك خارجي غير مصرح به
-@app.post("/ask")
-async def ask(query: Query, token: str = Depends(get_api_key)):
+@app.post("/ask", dependencies=[Depends(verify_api_key)])
+async def ask(query: Query):
     return ai.ask(query.prompt)