Update main.py

main.py

@@ -1,6 +1,7 @@
 import os
 import secrets
 import dns.resolver
+import requests
 from fastapi import FastAPI, HTTPException, Security, Depends
 from fastapi.security.api_key import APIKeyHeader
 from fastapi.middleware.cors import CORSMiddleware
@@ -14,35 +15,61 @@ SUPABASE_URL = os.getenv("SUPABASE_URL")
 SUPABASE_KEY = os.getenv("SUPABASE_KEY")
 ADMIN_SECRET = os.getenv("ADMIN_SECRET")
 
-# Check credentials immediately
-if not SUPABASE_URL or not SUPABASE_KEY or not ADMIN_SECRET:
-    # Fallback for build phase, but will error at runtime if missing
-    print("WARNING: Secrets are missing. Check HF Settings.") 
+if not SUPABASE_URL or not SUPABASE_KEY:
+    print("WARNING: Supabase Credentials missing.")
 
-# Initialize Supabase
 try:
     supabase: Client = create_client(SUPABASE_URL, SUPABASE_KEY)
 except:
     supabase = None
 
-# Security Header
+# Security
 API_KEY_NAME = "X-API-Key"
 api_key_header = APIKeyHeader(name=API_KEY_NAME, auto_error=False)
 
-# Domain Lists
-DISPOSABLE_DOMAINS = {"tempmail.com", "10minutemail.com", "guerrillamail.com", "yopmail.com", "sharklasers.com"} 
-FREE_PROVIDERS = {"gmail.com", "yahoo.com", "outlook.com", "hotmail.com", "icloud.com", "protonmail.com"}
+# --- DATA LOADING (The Fix) ---
+# 1. Start with a set of known free providers
+FREE_PROVIDERS = {"gmail.com", "yahoo.com", "outlook.com", "hotmail.com", "icloud.com", "protonmail.com", "aol.com", "zoho.com"}
+
+# 2. Initialize Disposable Domains with some manual overrides
+DISPOSABLE_DOMAINS = {"naqulu.com", "temp-mail.org", "10minutemail.com"}
+
+def load_blocklist():
+    """
+    Downloads 50,000+ fake domains from a community GitHub list.
+    """
+    print("⏳ Downloading Fake Domain Database...")
+    try:
+        # This is the industry standard open-source list
+        url = "https://raw.githubusercontent.com/disposable-email-domains/disposable-email-domains/master/disposable_email_blocklist.conf"
+        response = requests.get(url, timeout=10)
+        
+        if response.status_code == 200:
+            count = 0
+            for line in response.text.splitlines():
+                domain = line.strip().lower()
+                if domain:
+                    DISPOSABLE_DOMAINS.add(domain)
+                    count += 1
+            print(f"✅ Database Loaded: {count} fake domains active.")
+        else:
+            print("⚠️ Failed to download list. Using basic list.")
+            
+    except Exception as e:
+        print(f"⚠️ Error loading blocklist: {e}")
+
+# Load data immediately on startup
+load_blocklist()
 
 # --- APP SETUP ---
 app = FastAPI(title="Secure Email Validator")
 
-# 1. FIX: ENABLE CORS (Allows your Frontend to talk to Backend)
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],  # Allows all origins
+    allow_origins=["*"],
     allow_credentials=True,
-    allow_methods=["*"],  # Allows all methods
-    allow_headers=["*"],  # Allows all headers
+    allow_methods=["*"],
+    allow_headers=["*"],
 )
 
 # --- MODELS ---
@@ -55,20 +82,16 @@ class EmailRequest(BaseModel):
 
 # --- HELPER FUNCTIONS ---
 def attempt_transaction(api_key: str):
-    """Deduct 1 credit using Supabase secure function."""
     if api_key == ADMIN_SECRET:
-        return True # Admin bypass
-
+        return True 
     try:
-        # Call the SQL function we created earlier
         response = supabase.rpc("deduct_credit", {"check_key": api_key}).execute()
-        return response.data # Returns True or False
+        return response.data 
     except Exception as e:
         print(f"DB Error: {e}")
         return False
 
-# --- FRONTEND DASHBOARD (Embedded HTML) ---
-# This ensures you don't need a separate index.html file
+# --- UI ---
 html_content = """
 <!DOCTYPE html>
 <html lang="en">
@@ -92,13 +115,10 @@ html_content = """
 <body>
 <div class="container">
     <h1>📧 Validator Control Panel</h1>
-    
-    <!-- ADMIN SECTION -->
     <div class="section">
         <h3>🔑 Admin: Create API Key</h3>
         <label>Admin Secret</label>
         <input type="password" id="adminSecret" placeholder="Enter your ADMIN_SECRET">
-        
         <div style="display: flex; gap: 10px;">
             <div style="flex: 1;"><label>Client Name</label><input type="text" id="clientName"></div>
             <div style="flex: 1;"><label>Credits</label><input type="number" id="credits" value="1000"></div>
@@ -106,8 +126,6 @@ html_content = """
         <button onclick="createKey()">Generate Key</button>
         <pre id="adminOutput">Waiting...</pre>
     </div>
-
-    <!-- USER SECTION -->
     <div class="section">
         <h3>🚀 User: Test API</h3>
         <label>API Key</label>
@@ -118,18 +136,14 @@ html_content = """
         <pre id="userOutput">Waiting...</pre>
     </div>
 </div>
-
 <script>
     async function createKey() {
         const secret = document.getElementById('adminSecret').value;
         const name = document.getElementById('clientName').value;
         const credits = document.getElementById('credits').value;
         const out = document.getElementById('adminOutput');
-
         if(!secret) return alert("Enter Admin Secret!");
-        
         out.innerText = "Processing...";
-        
         try {
             const res = await fetch('/admin/create-key', {
                 method: 'POST',
@@ -141,16 +155,12 @@ html_content = """
             if(data.api_key) document.getElementById('apiKey').value = data.api_key;
         } catch(e) { out.innerText = "Error: " + e; }
     }
-
     async function testEmail() {
         const key = document.getElementById('apiKey').value;
         const email = document.getElementById('testEmail').value;
         const out = document.getElementById('userOutput');
-
         if(!key) return alert("Enter API Key!");
-
         out.innerText = "Checking...";
-
         try {
             const res = await fetch('/validate', {
                 method: 'POST',
@@ -166,62 +176,48 @@ html_content = """
 </html>
 """
 
-# --- API ROUTES ---
-
 @app.get("/", response_class=HTMLResponse)
 async def home():
-    """Serves the Dashboard UI"""
     return html_content
 
 @app.post("/admin/create-key")
 async def create_user(request: CreateUserRequest, x_api_key: str = Security(api_key_header)):
-    """Admin endpoint to generate keys."""
-    # Debugging: Print to logs if authentication fails
     if x_api_key != ADMIN_SECRET:
-        print(f"Auth Failed. Provided: {x_api_key}, Expected: {ADMIN_SECRET}")
         raise HTTPException(status_code=403, detail="Invalid Admin Secret")
-
     new_key = secrets.token_urlsafe(24)
-    data = {
-        "client_name": request.client_name,
-        "api_key": new_key,
-        "credits": request.credits
-    }
-    
+    data = {"client_name": request.client_name, "api_key": new_key, "credits": request.credits}
     try:
         supabase.table("api_users").insert(data).execute()
         return {"status": "success", "api_key": new_key, "credits": request.credits}
     except Exception as e:
-        print(f"Supabase Error: {str(e)}")
-        raise HTTPException(status_code=500, detail=f"Database Error: {str(e)}")
+        raise HTTPException(status_code=500, detail=str(e))
 
 @app.post("/validate")
 async def validate_email_endpoint(request: EmailRequest, x_api_key: str = Security(api_key_header)):
-    """The main validation logic."""
     if not x_api_key:
          raise HTTPException(status_code=403, detail="Missing API Key")
-
-    # 1. Deduct Credit
+    
     success = attempt_transaction(x_api_key)
     if not success:
         raise HTTPException(status_code=402, detail="Invalid Key or No Credits")
 
-    # 2. Validate
     email = request.email.lower().strip()
     result = {"email": email, "is_valid": False, "score": 0.0, "reason": "Unknown", "details": {}}
 
     try:
-        # Syntax Check
+        # 1. Syntax
         v = validate_email(email, check_deliverability=False)
         domain = v.domain
 
-        # Disposable Check
+        # 2. DISPOSABLE CHECK (Updated Logic)
+        # Check if domain is in our massive list
         if domain in DISPOSABLE_DOMAINS:
-            result["reason"] = "Disposable Domain"
+            result["reason"] = "Disposable Domain (Blacklisted)"
             result["details"]["disposable"] = True
+            result["score"] = 0.0
             return result
 
-        # MX Check
+        # 3. MX Record Check
         try:
             dns.resolver.resolve(domain, 'MX')
             mx_found = True
@@ -235,10 +231,17 @@ async def validate_email_endpoint(request: EmailRequest, x_api_key: str = Securi
             result["score"] = 0.1
             return result
 
-        # Success
+        # 4. Success Classification
         result["is_valid"] = True
-        result["score"] = 0.8 if domain in FREE_PROVIDERS else 1.0
-        result["type"] = "personal" if domain in FREE_PROVIDERS else "business"
+        
+        if domain in FREE_PROVIDERS:
+            result["score"] = 0.8
+            result["type"] = "personal"
+        else:
+            # It passed the blocklist and has MX, so likely business
+            result["score"] = 1.0
+            result["type"] = "business"
+            
         result["reason"] = "Valid"
 
     except EmailNotValidError as e: