smart tdee

backend/app/auth/deps.py

@@ -14,7 +14,10 @@ def _extract_token(request: Request) -> str | None:
         if token:
             return token
     header = request.headers.get("X-API-Token", "").strip()
-    return header or None
+    if header:
+        return header
+    query = request.query_params.get("token", "").strip()
+    return query or None
 
 
 def get_current_user(