Update app.py

app.py

@@ -105,7 +105,7 @@ def download_file(user_id, password, filename):
         temp_name = f"{uuid.uuid4()}_{filename}"
         temp_path = os.path.join(TMP_DIR, temp_name)
 
-        wget_cmd = [
+        cmd = [
             "wget",
             "--tries=3",
             "--no-check-certificate",
@@ -115,9 +115,9 @@ def download_file(user_id, password, filename):
         ]
 
         if HF_TOKEN:
-            wget_cmd.insert(1, f"--header=Authorization: Bearer {HF_TOKEN}")
+            cmd.insert(1, f"--header=Authorization: Bearer {HF_TOKEN}")
 
-        subprocess.run(wget_cmd, check=True)
+        subprocess.run(cmd, check=True)
 
         return f"{SPACE_URL}/file={temp_path}"
 
@@ -243,4 +243,5 @@ with gr.Blocks(title="Pockit Cloud Client") as app:
             outputs=change_status
         )
 
-app.launch()
+# IMPORTANT: allow tmp folder
+app.launch(allowed_paths=[TMP_DIR])