${escapeHtml(race.name)}
${banner}${result ? 'La pagina mostra solo le foto restituite da FaceAI.' : 'In questa simulazione il vecchio select tipoPuntoFoto รจ sostituito dal pulsante Face ID.'}
- ${photoList}
${result ? 'La pagina mostra solo le foto restituite da FaceAI.' : 'In questa simulazione il vecchio select tipoPuntoFoto รจ sostituito dal pulsante Face ID.'}
${escapeHtml(error.message)}
`); } }); app.post('/api/auth/exchange', async (req, res) => { try { const { token } = req.body; const payload = verifySignedPayload(token, config.sharedSecret); if (payload.type !== 'handoff') { throw new Error('Wrong token type'); } const race = normalizeRaceForSession(payload.race); const availability = await buildRaceAvailability(race); const faceAiAllowed = payload.user.membershipStatus === 'active' && availability.available; const sessionId = createSession({ user: payload.user, race, lang: payload.lang, returnUrl: payload.returnUrl, availability, access: { faceAiAllowed } }); res.cookie(config.sessionCookieName, sessionId, { httpOnly: true, sameSite: 'lax', secure: false, path: '/' }); res.json({ user: payload.user, race, lang: payload.lang, returnUrl: payload.returnUrl, availability, access: { faceAiAllowed } }); } catch (error) { res.status(400).json({ error: error.message }); } }); app.get('/api/session', requireSession, (req, res) => { res.json(req.faceaiSession); }); app.post('/api/searches', requireSession, enforceSearchRateLimit, upload.single('selfie'), async (req, res) => { try { const raceId = String(req.body.raceId || req.faceaiSession.race.id); const userId = String(req.faceaiSession.user.id); const race = normalizeRaceForSession(raceId === req.faceaiSession.race.id ? req.faceaiSession.race : (mockCatalog[raceId] || req.faceaiSession.race)); const availability = await buildRaceAvailability(race); if (!availability.available) { res.status(409).json({ error: availability.message, code: availability.reasonCode || 'RACE_PKL_UNAVAILABLE' }); return; } const activeSearchId = await getActiveSearchId(redis, userId); if (activeSearchId) { res.status(409).json({ error: 'There is already an operation being processed.', code: 'ACTIVE_SEARCH_EXISTS', activeSearchId }); return; } if (!req.file) { res.status(400).json({ error: 'Choose a selfie before starting the search.', code: 'MISSING_SELFIE' }); return; } const search = await createSearchRecord(redis, { raceId, raceName: race?.name || raceId, raceStorage: race?.storage || availability.storage, userId, returnUrl: req.faceaiSession.returnUrl, lang: req.faceaiSession.lang, selfieName: req.file.originalname, selfiePath: req.file.path, uploadPath: req.file.path }, config.searchTtlSeconds); const lockAcquired = await acquireActiveSearchLock(redis, userId, search.id, config.searchTtlSeconds); if (!lockAcquired) { await fsp.unlink(req.file.path).catch(() => {}); res.status(409).json({ error: 'There is already an operation being processed.', code: 'ACTIVE_SEARCH_EXISTS' }); return; } const finalUploadDir = path.join(config.uploadRoot, search.id); await fsp.mkdir(finalUploadDir, { recursive: true }); const finalUploadPath = path.join(finalUploadDir, path.basename(req.file.path)); await fsp.rename(req.file.path, finalUploadPath); const updatedSearch = await saveSearchRecord(redis, { ...search, selfiePath: finalUploadPath, uploadPath: finalUploadPath }, config.searchTtlSeconds); await searchQueue.add('run-search', { searchId: search.id }, { removeOnComplete: 100, removeOnFail: 100 }); res.status(201).json({ id: updatedSearch.id, status: updatedSearch.status, raceId: updatedSearch.raceId, raceStorage: updatedSearch.raceStorage, selfieName: updatedSearch.selfieName, matchCount: updatedSearch.matchCount, errorCode: updatedSearch.errorCode, errorMessage: updatedSearch.errorMessage }); } catch (error) { res.status(500).json({ error: error.message || 'Unable to create the search.' }); } }); app.get('/api/searches/:id', requireSession, async (req, res) => { const search = await getSearchRecord(redis, req.params.id); if (!search || search.userId !== req.faceaiSession.user.id) { res.status(404).json({ error: 'Search not found' }); return; } res.json({ id: search.id, status: search.status, raceId: search.raceId, resultId: search.resultId, createdAt: search.createdAt, completedAt: search.completedAt, matchCount: search.matchCount || 0, errorCode: search.errorCode, errorMessage: search.errorMessage }); }); app.get('/api/searches/:id/redirect', requireSession, async (req, res) => { const search = await getSearchRecord(redis, req.params.id); if (!search || search.userId !== req.faceaiSession.user.id) { res.status(404).json({ error: 'Search not found' }); return; } if (search.status !== 'completed' || !search.resultId) { res.status(409).json({ error: 'Search not completed yet' }); return; } const result = await getResultRecord(redis, search.resultId); if (!result) { res.status(404).json({ error: 'Result not found' }); return; } const token = issueReturnToken(result); res.json({ url: `${config.legacyReturnUrl}?resultId=${encodeURIComponent(result.id)}&token=${encodeURIComponent(token)}` }); }); app.get('/bridge/results/:id', async (req, res) => { try { const token = String(req.query.token || ''); const payload = verifySignedPayload(token, config.sharedSecret); if (payload.type !== 'return') { throw new Error('Wrong token type'); } if (String(payload.resultId || '') !== String(req.params.id)) { throw new Error('Result id mismatch'); } const result = await getResultRecord(redis, req.params.id); if (!result || result.userId !== payload.userId) { throw new Error('Result not found'); } res.json({ id: result.id, raceId: result.raceId, raceName: result.raceName, userId: result.userId, returnUrl: result.returnUrl, lang: result.lang, matches: result.matches }); } catch (error) { res.status(400).json({ error: error.message }); } }); app.get('/api/health/queue', async (req, res) => { try { await redis.ping(); res.json({ ok: true }); } catch (error) { res.status(500).json({ ok: false, error: error.message }); } }); if (fs.existsSync(frontendDist)) { app.use(express.static(frontendDist)); app.get('*', (req, res, next) => { if (req.path.startsWith('/api/') || req.path.startsWith('/dev/')) { next(); return; } res.sendFile(path.join(frontendDist, 'index.html')); }); } app.listen(config.port, () => { console.log(`FaceAI backend listening on http://localhost:${config.port}`); });