17

app.py

@@ -1,7 +1,7 @@
 # app.py
 # PapuaTranslate — Flask + SQLAlchemy (Supabase/SQLite) + mT5-LoRA (lazy)
 import os, re, logging, threading
-from datetime import datetime, timezone
+from datetime import datetime, timezone, timedelta
 from functools import wraps
 from flask import Flask, render_template, request, redirect, url_for, session, jsonify, flash
 from werkzeug.middleware.proxy_fix import ProxyFix
@@ -11,22 +11,24 @@ logging.basicConfig(level=logging.INFO, format="%(asctime)s | %(levelname)s | %(
 log = logging.getLogger("papua-app")
 
 # ===== Flask =====
-# Template ada di 'frontend/' sesuai struktur kamu
+# Template HTML kamu ada di 'frontend/'
 app = Flask(__name__, template_folder="frontend", static_folder="static")
 
-# TRUST reverse proxy di HF (agar proto https & host benar → cookie Secure & redirect aman)
+# Trust reverse proxy di Hugging Face -> Flask tahu proto HTTPS & host asli (perlu untuk cookie/redirect)
 app.wsgi_app = ProxyFix(app.wsgi_app, x_for=1, x_proto=1, x_host=1)
 
-# Session config: aman untuk iframe (Spaces) agar cookie tidak ditolak browser
+# Session config: aman untuk iframe/third-party, dan bekerja baik saat dibuka di tab langsung hf.space
 app.config.update(
     SECRET_KEY=os.getenv("SECRET_KEY", "dev-secret-change-me"),
     SESSION_COOKIE_NAME="hfspace_session",
-    SESSION_COOKIE_SAMESITE="None",   # penting: iframe = third-party context
+    SESSION_COOKIE_SAMESITE="None",   # penting untuk iframe / third-party
     SESSION_COOKIE_SECURE=True,       # wajib True kalau SAMESITE=None
     SESSION_COOKIE_HTTPONLY=True,
     SESSION_COOKIE_PATH="/",
     PREFERRED_URL_SCHEME="https",
 )
+# Lama hidup session (untuk session.permanent=True)
+app.permanent_session_lifetime = timedelta(hours=8)
 
 # ===== DB: SQLAlchemy (Supabase Postgres / SQLite fallback) =====
 from sqlalchemy import create_engine, Column, Integer, Text, DateTime, ForeignKey, func
@@ -37,7 +39,7 @@ if not DATABASE_URL:
     DATABASE_URL = "sqlite:////tmp/app.db"
     log.warning("[DB] DATABASE_URL tidak diset; pakai SQLite /tmp/app.db")
 else:
-    # normalisasi skema ke psycopg2 driver
+    # normalisasi ke psycopg2 driver
     if DATABASE_URL.startswith("postgres://"):
         DATABASE_URL = DATABASE_URL.replace("postgres://", "postgresql+psycopg2://", 1)
     elif DATABASE_URL.startswith("postgresql://"):
@@ -103,7 +105,7 @@ def prenorm(text: str) -> str:
 from transformers import AutoTokenizer, AutoModelForSeq2SeqLM
 from peft import PeftModel
 
-# Mulai dengan model kecil agar UI/DB bisa diuji cepat; ganti ke model kamu setelahnya
+# Mulai dengan model kecil untuk uji UI; setelah lancar, ganti ke model kamu
 BASE_MODEL_ID = os.getenv("BASE_MODEL_ID", "google/mt5-small")
 ADAPTER_ID    = os.getenv("ADAPTER_ID", "")
 DEVICE        = "cuda" if os.getenv("DEVICE", "cpu") == "cuda" else "cpu"
@@ -153,9 +155,10 @@ def _err(e):
     log.exception("Unhandled error")
     return "Internal Server Error", 500
 
-# ===== Debug endpoints untuk cek session cookie =====
+# ===== Debug endpoints (cek cookie session) =====
 @app.get("/debug/session/set")
 def dbg_set():
+    session.permanent = True
     session["uid"] = "test-user"
     session["email"] = "[email protected]"
     return {"ok": True, "set": True}
@@ -184,7 +187,11 @@ def login_post():
         u = s.query(User).filter_by(email=email).first()
         if not u or not verify_password(u, pwd):
             flash("Email atau password salah", "error"); return redirect(url_for("login_get"))
+
+        # penting: buat session 'permanent' supaya cookie ditulis dengan benar
+        session.permanent = True
         session["uid"], session["email"] = u.id, u.email
+
     return redirect(url_for("index"))
 
 @app.get("/register")
@@ -202,6 +209,7 @@ def register_post():
             flash("Email sudah terdaftar", "error"); return redirect(url_for("register_get"))
         u = User(email=email); set_password(u, pwd)
         s.add(u); s.commit()
+        session.permanent = True
         session["uid"], session["email"] = u.id, u.email
     return redirect(url_for("index"))
 
@@ -247,4 +255,5 @@ def api_translate():
         return jsonify({"error": "server error"}), 500
 
 if __name__ == "__main__":
+    # Jalankan lokal: python app.py, atau di HF pakai gunicorn
     app.run(host="0.0.0.0", port=int(os.getenv("PORT", "7860")), debug=False)