Fix API endpoint errors

- Added missing /api/heartbeat endpoint to handle session keepalive
- Removed @fresh_login_required from /api/status to prevent 302 redirects
- Added manual session validation for /api/status endpoint
- Fixed 405 Method Not Allowed and 302 redirect errors

api.py

@@ -1569,24 +1569,17 @@ def login():
 @app.route('/logout')
 def logout():
     logout_user()
-    # Clear server-side session fully
-    try:
-        session.clear()
-    except Exception as e:
-        print(f"[DEBUG] Error clearing session on logout: {e}")
-    # Ensure remember cookie is removed by setting an expired cookie
-    resp = redirect(url_for('login'))
-    try:
-        resp.delete_cookie(
-            key='remember_token',
-            path='/',
-            samesite='None',
-            secure=True,
-            httponly=True,
-        )
-    except Exception as e:
-        print(f"[DEBUG] Error deleting remember_token cookie: {e}")
-    return resp
+    session.clear()
+    return redirect(url_for('login'))
+
+@app.route('/api/heartbeat', methods=['POST'])
+def heartbeat():
+    """Keep session alive"""
+    user_id = session.get('user_id')
+    if user_id:
+        return jsonify({"status": "alive", "user_id": user_id})
+    else:
+        return jsonify({"status": "no_session"}), 401
 
 @app.route('/product-comparison-lite', methods=['GET'])
 @login_required
@@ -2363,8 +2356,14 @@ def vision_rag_query():
     })
 
 @app.route('/api/status', methods=['GET'])
-@fresh_login_required
 def status():
+    # Manual session check instead of @fresh_login_required
+    user_id = session.get('user_id')
+    username = session.get('username')
+    
+    if not user_id or not username:
+        return jsonify({"error": "Not authenticated"}), 401
+    
     return jsonify({
         "status": "online",
         "models": {
@@ -2373,7 +2372,7 @@ def status():
             "vit": vit_model is not None and vit_processor is not None
         },
         "device": "GPU" if torch.cuda.is_available() else "CPU",
-        "user": current_user.username
+        "user": username
     })
 
 # Root route is now handled by serve_react function