Update app.py

app.py

@@ -405,13 +405,13 @@ async def get_protected(
     token: Optional[str] = None  # token is Optional because it may come from the cookie
 ):
     # Try to get the token from the query parameter first, then fall back to the cookie
-    token = token or request.cookies.get("access_token")
-    if not token:
+    access_token = token or request.cookies.get("access_token")
+    if not access_token:
         raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Not authenticated xxx")
     
     # Here verify_token is used directly in the endpoint
     # If the token is invalid, verify_token will raise an HTTPException and the following lines will not be executed
-    user_email = verify_token(token)  # Assuming that verify_token returns the user's email if the token is valid
+    user_email = verify_token(access_token)  # Assuming that verify_token returns the user's email if the token is valid
     
     # Get the user from the database
     db_user = get_user_by_email(db, user_email)