Update app.py

app.py

@@ -50,6 +50,7 @@ log = logging.getLogger(__name__)
 # ─────────────────────────────────────────────────────────────────────────────
 HASH_VALUE    = os.environ.get("HASH_VALUE", "")
 CF_SECRET_KEY = os.environ.get("CF_SECRET_KEY", "")
+ALLOWED_DOMAIN = os.environ.get("ALLOWED_DOMAIN", "")
 HF_REPO_ID    = "digifreely/Maria"
 LLM_MODEL_ID  = "Qwen/Qwen2.5-1.5B-Instruct"   # Change 1: updated model
 
@@ -128,6 +129,13 @@ async def _authenticate(request: Request) -> bool:
         return _check_auth_code(auth_code)
     if cf_token:
         return await _check_turnstile(cf_token)
+
+    # Fallback: domain/referer check (same as init service)
+    referer = request.headers.get("referer", "")
+    origin  = request.headers.get("origin", "")
+    if ALLOWED_DOMAIN in referer or ALLOWED_DOMAIN in origin:
+        return True
+    
     return False