Update app.py

app.py

@@ -1,6 +1,7 @@
 from flask import Flask, render_template, request, jsonify, redirect, url_for, session
 from flask.sessions import SecureCookieSessionInterface
 from salesforce import get_salesforce_connection
+from redis import Redis
 import os
 
 # Initialize Flask app and Salesforce connection
@@ -15,12 +16,13 @@ print("Salesforce connection established.")
 # Set the secret key to handle sessions securely
 app.secret_key = os.getenv("SECRET_KEY", "sSSjyhInIsUohKpG8sHzty2q")  # Replace with a secure key
 
-app.config["SESSION_COOKIE_PATH"] = "/"  # Available across all routes
-app.config["SESSION_COOKIE_DOMAIN"] = None  # Let the browser determine the domain
-app.config["SESSION_COOKIE_SECURE"] = False  # Set to True if HTTPS
-app.config["SESSION_COOKIE_HTTPONLY"] = True  # Prevent JavaScript access
-app.config["SESSION_PERMANENT"] = False  # Do not use permanent sessions
+# Set session cookie policies
+app.config["SESSION_TYPE"] = "redis"
+app.config["SESSION_REDIS"] = Redis(host="localhost", port=6379)  # Replace with Redis details
+app.config["SESSION_COOKIE_SAMESITE"] = "None"
+app.config["SESSION_COOKIE_SECURE"] = True
 
+Session(app)
 
 # Ensure secure session handling for environments like Hugging Face
 app.session_interface = SecureCookieSessionInterface()
@@ -54,7 +56,6 @@ def login():
     if request.method == "POST":
         email = request.form.get("email")
         password = request.form.get("password")
-        print(f"Login Succesful")
         print(f"Login attempt with email: {email}")  # Debug log
 
         try:
@@ -65,7 +66,7 @@ def login():
                 session['user_id'] = result["records"][0]['Id']
                 session['user_email'] = email
                 print(f"Session variables set: user_id={session['user_id']}, user_email={session['user_email']}")
-                print(f"Session cookie: {app.session_interface.get_signing_serializer(app).dumps(session)}")  # Dump session
+                print(f"Session cookie: {request.cookies.get(app.session_cookie_name)}")  # Check session cookie
                 return redirect(url_for("menu"))
             else:
                 print("Invalid credentials!")
@@ -78,9 +79,9 @@ def login():
 
 @app.route("/menu", methods=["GET", "POST"])
 def menu():
-    print(f"Cookies on /menu: {request.cookies}")
     selected_category = request.args.get("category", "All")
     user_id = session.get('user_id')
+    print(f"Cookies on /menu: {request.cookies}")  # Debug: Check cookies sent
     print(f"Session check in /menu: user_id={user_id}")
 
     if not user_id: