change in main.py for handling X-api via Query

main.py

@@ -4,8 +4,8 @@ import logging
 import json
 import re
 from contextlib import asynccontextmanager
-from fastapi import FastAPI, WebSocket, WebSocketDisconnect, Request, status, Depends, Header, HTTPException
-from fastapi.concurrency import run_in_threadpool # This line is corrected (no syntax error)
+from fastapi import FastAPI, WebSocket, WebSocketDisconnect, Request, status, Depends, Header, HTTPException, Query
+from fastapi.concurrency import run_in_threadpool  # This line is corrected (no syntax error)
 from pydantic import BaseModel
 from dotenv import load_dotenv
 from openai import OpenAI
@@ -15,6 +15,7 @@ from langchain_postgres.vectorstores import PGVector
 from sqlalchemy import create_engine
 import asyncio
 import io
+from typing import Optional
 
 # --- SETUP ---
 os.environ['TF_CPP_MIN_LOG_LEVEL'] = '2'
@@ -246,13 +247,23 @@ async def test_text_query_endpoint(query: TextQuery):
 
 
 @app.websocket("/browser-listen")
-async def browser_websocket_endpoint(websocket: WebSocket):
+async def browser_websocket_endpoint(
+    websocket: WebSocket,
+    token: Optional[str] = Query(None)  # Get token from query param
+):
     """
     Main WebSocket endpoint for browser-based audio.
-    Receives one audio blob, returns one audio blob.
+    Authenticates using a query parameter.
     """
+    # Authentication block
+    if not token or token != SHARED_SECRET:
+        logging.warning(f"Browser auth failed: Invalid token '{token}'")
+        await websocket.accept()  # Accept briefly to send error
+        await websocket.close(code=status.WS_1008_POLICY_VIOLATION)
+        return
+
     await websocket.accept()
-    logging.info("Browser client connected.")
+    logging.info("Browser client connected and authenticated.")
 
     try:
         while True:
@@ -267,7 +278,6 @@ async def browser_websocket_endpoint(websocket: WebSocket):
             audio_bytes = base64.b64decode(audio_base64)
 
             # 2. Transcribe (Shared logic)
-            # This works for WAV, WebM, Opus, etc.
             user_text = await run_in_threadpool(transcribe_audio, audio_bytes)
             if not user_text:
                 logging.info("Transcription empty; skipping.")