right app permission and write http error codes

Dockerfile

@@ -1,12 +1,16 @@
 FROM python:3.12-slim
 
+# Create application user with home directory
+RUN useradd -m appuser
+USER appuser
+ENV HOME=/home/appuser
 WORKDIR /code
 
-COPY ./pyproject.toml /code/
-COPY ./README.md /code/
-COPY ./src /code/src
-COPY ./openapi.yaml /code/
+COPY --chown=appuser:appuser ./pyproject.toml /code/
+COPY --chown=appuser:appuser ./README.md /code/
+COPY --chown=appuser:appuser ./src /code/src
+COPY --chown=appuser:appuser ./openapi.yaml /code/
 
 RUN pip install --no-cache-dir .[all]
 
-CMD ["uvicorn", "everycure.app:app", "--host", "0.0.0.0", "--port", "7860"]
+CMD ["uvicorn", "everycure.app:app", "--host", "0.0.0.0", "--port", "7860"]

src/everycure/app.py

@@ -5,7 +5,7 @@ import logging
 import uvicorn
 
 # Set up logging
-logging.basicConfig(level=logging.DEBUG)
+logging.basicConfig(level=logging.INFO)
 logger = logging.getLogger(__name__)
 
 app = FastAPI(
@@ -27,7 +27,7 @@ app.add_middleware(
 # Rest of your existing code
 @app.post("/api/v1/extract", response_model=List[Entity])
 async def extract_entities(file: UploadFile):
-    logger.debug(f"Received request for file: {file.filename}")
+    logger.info(f"Received request for file: {file.filename}")
     
     if not file:
         logger.error("No file provided")
@@ -38,9 +38,9 @@ async def extract_entities(file: UploadFile):
         raise HTTPException(status_code=415, detail="File must be a PDF")
     
     try:
-        logger.debug("Starting entity extraction")
+        logger.info("Starting entity extraction")
         result = extract_entities_from_pdf(file)
-        logger.debug(f"Successfully extracted {len(result)} entities")
+        logger.info(f"Successfully extracted {len(result)} entities")
         return result
     except Exception as e:
         logger.error(f"Error during extraction: {str(e)}", exc_info=True)

tests/test_api.py

@@ -30,7 +30,7 @@ def test_extract_entities_invalid_file():
             files={"file": ("test.txt", tmp, "text/plain")}
         )
     
-    assert response.status_code == 400
+    assert response.status_code == 415
     assert "Invalid file type" in response.json()["detail"]
 
 def test_extract_entities_empty_file(test_pdf):
@@ -40,4 +40,4 @@ def test_extract_entities_empty_file(test_pdf):
             files={}  # No file provided
         )
     
-    assert response.status_code == 422  # FastAPI's validation error
+    assert response.status_code == 400  # FastAPI's validation error