Added email code verif

backend/app/ai/explanation_formatter.py

@@ -39,5 +39,14 @@ def format_explanation_with_llm(structured_data: dict) -> str:
         return _fallback_string_formatter(structured_data)
 
 def _fallback_string_formatter(data: dict) -> str:
+    label = data.get("label", "Unknown").lower()
+    conf = data.get("confidence_level", "Medium").lower()
     reasons = [r["reason"] for r in data.get("region_analysis", [])]
-    return f"Label: {data['label']} ({data['confidence_level']} Confidence). Reasons: {' | '.join(reasons)}"
+    reasons_str = ", and ".join(reasons) if reasons else "based on visual and structural analysis"
+    
+    if "ai" in label or "fake" in label:
+        return f"This media appears to be AI-generated with {conf} confidence, primarily flagged because of {reasons_str}."
+    elif "real" in label or "authentic" in label:
+        return f"This media appears to be authentic with {conf} confidence, showing natural characteristics."
+    else:
+        return f"This media is flagged as {label} due to suspicious patterns like {reasons_str}."

backend/app/api/auth_routes.py

@@ -114,9 +114,9 @@ def reset_password(data: PasswordResetConfirm, request: Request, db: Session = D
 
 @router.post("/verify-email")
 def verify_email(data: VerifyEmailConfirm, db: Session = Depends(get_db)):
-    user = confirm_email_verification(db, data.token)
+    user = confirm_email_verification(db, data.email, data.code)
     if not user:
-        raise HTTPException(status_code=400, detail="Invalid or expired verification token")
+        raise HTTPException(status_code=400, detail="Invalid or expired verification code")
     token = create_access_token({"user_id": user.id})
     return {"message": "Email successfully verified!", "access_token": token}
 
@@ -129,7 +129,7 @@ def resend_verification_endpoint(
     raw_token = resend_verification(db, data.email)
     if raw_token:
         background_tasks.add_task(send_verification_email, data.email, raw_token)
-    return {"message": "If the account exists and is unverified, a new link has been sent."}
+    return {"message": "If the account exists and is unverified, a verification code has been sent."}
 
 @router.get("/me")
 def get_current_active_user(

backend/app/api/feedback_routes.py

@@ -5,6 +5,7 @@ from app.models.feedback_model import Feedback
 from app.core.auth_dependancy import get_current_user
 from app.schemas.feedback_schema import FeedbackCreate
 from app.ai.meta_classifier import retrain_from_feedback
+from app.api.file_routes import decode_id
 
 router = APIRouter(prefix="/feedback", tags=["Feedback"])
 
@@ -15,13 +16,18 @@ def submit_feedback(
     db: Session = Depends(get_db),
     user = Depends(get_current_user)
 ):
+    try:
+        real_file_id = decode_id(payload.file_id)
+    except HTTPException:
+        raise HTTPException(status_code=400, detail="Invalid file ID")
+
     # Check if user already submitted feedback for this file
-    existing = db.query(Feedback).filter(Feedback.file_id == payload.file_id, Feedback.user_id == user.id).first()
+    existing = db.query(Feedback).filter(Feedback.file_id == real_file_id, Feedback.user_id == user.id).first()
     if existing:
         raise HTTPException(status_code=400, detail="Feedback already submitted for this file.")
 
     fb = Feedback(
-        file_id=payload.file_id,
+        file_id=real_file_id,
         user_id=user.id,
         label=payload.label,
         confidence=payload.confidence,

backend/app/core/config.py

@@ -7,7 +7,7 @@ class Settings(BaseSettings):
     MODEL_DIR: str = "../models/"
     UPLOAD_DIR: str = "uploads/"
     LOG_LEVEL: str = "INFO"
-    ENABLE_LLM_EXPLANATION: bool = False
+    ENABLE_LLM_EXPLANATION: bool = True
     HUGGINGFACE_API_KEY: str | None = None
     API_URL: str = "https://api-inference.huggingface.co/models/mistralai/Mistral-7B-Instruct-v0.3"
     SESSION_SECRET_KEY: str = "fallback_secret_if_not_found"

backend/app/core/logger.py

@@ -40,31 +40,32 @@ logger.add(
     enqueue=True
 )
 
-# 6. Betterstack Logtail Cloud Sink (free remote logging)
-#    Set LOGTAIL_SOURCE_TOKEN in your HuggingFace Space secrets to enable.
-_LOGTAIL_TOKEN = os.environ.get("LOGTAIL_SOURCE_TOKEN", "")
-if _LOGTAIL_TOKEN:
-    def _logtail_sink(message):
+# 6. New Relic Cloud Sink
+#    Set NEW_RELIC_LICENSE_KEY and NEW_RELIC_APP_NAME in your environment.
+_NR_KEY = os.environ.get("NEW_RELIC_LICENSE_KEY", "")
+if _NR_KEY:
+    import newrelic.agent
+    try:
+        newrelic.agent.initialize()
+    except Exception:
+        pass
+
+    def _newrelic_sink(message):
         record = message.record
         try:
-            _requests.post(
-                "https://in.logs.betterstack.com",
-                headers={
-                    "Authorization": f"Bearer {_LOGTAIL_TOKEN}",
-                    "Content-Type": "application/json",
-                },
-                json={
-                    "message": record["message"],
-                    "level": record["level"].name,
+            # Send to New Relic Logs APM
+            newrelic.agent.record_log_event(
+                message=record["message"],
+                level=record["level"].name,
+                timestamp=int(record["time"].timestamp() * 1000),
+                attributes={
                     "request_id": record["extra"].get("request_id", "SYSTEM"),
                     "logger": record["name"],
                     "function": record["function"],
                     "line": record["line"],
-                    "dt": record["time"].isoformat(),
-                },
-                timeout=3,
+                }
             )
         except Exception:
             pass  # Never let cloud logging failure affect the app
 
-    logger.add(_logtail_sink, level="INFO", enqueue=True)
+    logger.add(_newrelic_sink, level="INFO", enqueue=True)

backend/app/schemas/auth_schema.py

@@ -12,7 +12,8 @@ class PasswordResetConfirm(BaseModel):
     new_password: str
 
 class VerifyEmailConfirm(BaseModel):
-    token: str
+    email: EmailStr
+    code: str
 
 class ResendVerificationRequest(BaseModel):
     email: EmailStr

backend/app/schemas/feedback_schema.py

@@ -2,7 +2,7 @@ from pydantic import BaseModel
 from typing import Optional
 
 class FeedbackCreate(BaseModel):
-    file_id: int
+    file_id: str
     label: str
     confidence: float
     freq_score: float

backend/app/services/auth_service.py

@@ -92,17 +92,14 @@ def confirm_password_reset(db: Session, token: str, new_password: str, request:
     log_audit_event(db, "password_reset", target_user.id, request)
     return True
 
-def confirm_email_verification(db: Session, token: str) -> bool:
-    unverified_users = db.query(User).filter(User.is_verified == False).all()
-
-    target_user = None
-    for user in unverified_users:
-        if user.verification_token_hash and verify_password(token, user.verification_token_hash):
-            target_user = user
-            break
+def confirm_email_verification(db: Session, email: str, code: str) -> User | None:
+    target_user = db.query(User).filter(User.email == email, User.is_verified == False).first()
 
     if not target_user:
         return None
+        
+    if not target_user.verification_token_hash or not verify_password(code, target_user.verification_token_hash):
+        return None
     
     if datetime.now(UTC) > target_user.verification_token_expire_at.replace(tzinfo=UTC):
         return None
@@ -120,9 +117,9 @@ def resend_verification(db: Session, email: str) -> str | None:
     if not user or user.is_verified:
         return None
         
-    raw_token = secrets.token_urlsafe(32)
+    raw_token = f"{secrets.randbelow(900000) + 100000}"
     hashed_token = hash_password(raw_token)
-    expire_date = datetime.now(UTC) + timedelta(hours=24)
+    expire_date = datetime.now(UTC) + timedelta(minutes=10)
     
     user.verification_token_hash = hashed_token
     user.verification_token_expire_at = expire_date

backend/app/services/email_service.py

@@ -60,8 +60,6 @@ async def send_reset_password_email(email_to: str, raw_token: str):
         logger.error(f"Failed to send password reset email via SMTP: {str(e)}")
 
 async def send_verification_email(email_to: str, raw_token: str):
-    verify_link = f"{settings.FRONTEND_URL}/verify-email?token={raw_token}"
-
     html_content = f"""
     <div style="font-family: 'Inter', Arial, sans-serif; max-width: 600px; margin: 0 auto; background-color: #080c14; border: 1px solid #1f2937; border-radius: 16px; overflow: hidden;">
         <div style="background-color: #11141d; padding: 40px; text-align: center; border-bottom: 1px solid #1f2937;">
@@ -70,12 +68,12 @@ async def send_verification_email(email_to: str, raw_token: str):
         </div>
         <div style="padding: 40px; color: #d0c4bb; line-height: 1.6;">
             <h2 style="color: #fde8d6; margin-top: 0; font-size: 20px;">Welcome to the Engine.</h2>
-            <p>Please confirm your neural-link authorization by verifying your email address.</p>
-            <p>Click the secure uplink button below to activate your account. <strong style="color: #fde8d6;">This link will expire in 24 hours.</strong></p>
+            <p>Please confirm your neural-link authorization by entering the following verification code.</p>
+            <p><strong style="color: #fde8d6;">This code will expire in 10 minutes.</strong></p>
             <div style="text-align: center; margin: 40px 0;">
-                <a href="{verify_link}" style="background-color: #fde8d6; color: #080c14; padding: 14px 32px; text-decoration: none; border-radius: 8px; font-weight: bold; display: inline-block; text-transform: uppercase; letter-spacing: 1px; font-size: 14px;">
-                    Verify Authorization
-                </a>
+                <div style="background-color: #1f2937; color: #fde8d6; padding: 20px; border-radius: 8px; font-weight: bold; display: inline-block; letter-spacing: 4px; font-size: 32px; font-family: monospace;">
+                    {raw_token}
+                </div>
             </div>
             <div style="margin-top: 40px; padding-top: 20px; border-top: 1px solid #1f2937; font-size: 11px; text-align: center; opacity: 0.5; text-transform: uppercase; letter-spacing: 1px;">
                 © 2026 SPOTIX KINETIC. ENGINEERED FOR THE ETHEREAL.
@@ -85,7 +83,7 @@ async def send_verification_email(email_to: str, raw_token: str):
     """
 
     if not settings.SMTP_USER or not settings.SMTP_SERVER:
-        logger.warning(f"[DEV MODE] SMTP credentials missing. Verif link: {verify_link}")
+        logger.warning(f"[DEV MODE] SMTP credentials missing. Verification code: {raw_token}")
         return
     
     try:

backend/app/services/user_service.py

@@ -16,9 +16,9 @@ def create_user(db: Session, email: str, username: str, password: str) -> tuple[
     
     hashed_password = hash_password(password)
 
-    raw_token = secrets.token_urlsafe(32)
+    raw_token = f"{secrets.randbelow(900000) + 100000}"
     hashed_token = hash_password(raw_token)
-    expire_date = datetime.now(UTC) + timedelta(hours=24)
+    expire_date = datetime.now(UTC) + timedelta(minutes=10)
     
     new_user = User(
         email=email,

backend/requirements.txt

@@ -180,3 +180,4 @@ websocket-client==1.9.0
 wrapt==2.1.1
 
 boto3==1.34.84
+newrelic==9.13.0

frontend/app/login/page.tsx

@@ -6,11 +6,12 @@ import { useRouter } from "next/navigation";
 import { Turnstile } from "@marsidev/react-turnstile";
 
 export default function LoginPage() {
-    const [mode, setMode] = useState<'login' | 'signup'>('login');
+    const [mode, setMode] = useState<'login' | 'signup' | 'verify'>('login');
     const [identifier, setIdentifier] = useState("");
     const [email, setEmail] = useState("");
     const [username, setUsername] = useState("");
     const [password, setPassword] = useState("");
+    const [verificationCode, setVerificationCode] = useState("");
     const [error, setError] = useState("");
     const [successMessage, setSuccessMessage] = useState("");
     const [loading, setLoading] = useState(false);
@@ -86,24 +87,30 @@ export default function LoginPage() {
                 });
                 localStorage.setItem("access_token", res.data.access_token);
                 window.location.href = "/dashboard";
-            } else {
+            } else if (mode === 'signup') {
                 const res = await axios.post(`${baseUrl}/users/register`, { email, username, password }, {
                     headers: { "cf-turnstile-response": turnstileToken }
                 });
-                setSuccessMessage(res.data.message || "Account created! Check your email to verify.");
-                setMode('login');
+                setSuccessMessage(res.data.message || "Account created! Please enter your verification code.");
+                setMode('verify');
                 setLoading(false);
+            } else if (mode === 'verify') {
+                const res = await axios.post(`${baseUrl}/auth/verify-email`, { email: email || identifier, code: verificationCode });
+                localStorage.setItem("access_token", res.data.access_token);
+                window.location.href = "/dashboard";
             }
         } catch (err: any) {
             if (!err.response) {
                 // Network error — backend unreachable or CORS
-                setError("Unable to reach the server. Please try again shortly.");
+                setError(err.message || "Unable to reach the server. Please try again shortly.");
             } else {
                 const detail = err.response?.data?.detail;
                 if (Array.isArray(detail)) {
                     setError(detail[0]?.msg || "Validation error. Please check your inputs.");
+                } else if (typeof detail === 'string') {
+                    setError(detail);
                 } else {
-                    setError(detail || "Authentication failed. Please check your credentials.");
+                    setError("Server returned an unexpected error. Please try again.");
                 }
             }
             setLoading(false);
@@ -170,55 +177,71 @@ export default function LoginPage() {
                     )}
 
                     <form onSubmit={handleSubmit} className="space-y-4">
-                        {mode === 'signup' && (
+                        {mode === 'verify' ? (
                             <div className="relative group">
-                                <User className="absolute left-4 top-1/2 -translate-y-1/2 w-5 h-5 text-[#d0c4bb]/40 group-focus-within:text-[var(--theme-text)] transition-colors" />
+                                <KeyRound className="absolute left-4 top-1/2 -translate-y-1/2 w-5 h-5 text-[#d0c4bb]/40 group-focus-within:text-[var(--theme-text)] transition-colors" />
                                 <input 
                                     type="text" 
-                                    required={mode === 'signup'}
-                                    value={username}
-                                    onChange={(e) => setUsername(e.target.value)}
-                                    placeholder="Username"
-                                    className="w-full bg-theme-text/5 border border-theme-border rounded-xl py-4 pl-12 pr-4 text-[var(--theme-text)] placeholder-[#d0c4bb]/60 focus:outline-none focus:border-theme-border/50 focus:bg-theme-text/10 transition-all font-mono text-sm"
-                                />
-                            </div>
-                        )}
-                        {mode === 'login' ? (
-                            <div className="relative group">
-                                <Mail className="absolute left-4 top-1/2 -translate-y-1/2 w-5 h-5 text-[#d0c4bb]/40 group-focus-within:text-[var(--theme-text)] transition-colors" />
-                                <input 
-                                    type="text" 
-                                    required={mode === 'login'}
-                                    value={identifier}
-                                    onChange={(e) => setIdentifier(e.target.value)}
-                                    placeholder="Email or Username"
-                                    className="w-full bg-theme-text/5 border border-theme-border rounded-xl py-4 pl-12 pr-4 text-[var(--theme-text)] placeholder-[#d0c4bb]/60 focus:outline-none focus:border-theme-border/50 focus:bg-theme-text/10 transition-all font-mono text-sm"
+                                    required={mode === 'verify'}
+                                    value={verificationCode}
+                                    onChange={(e) => setVerificationCode(e.target.value)}
+                                    placeholder="6-Digit Verification Code"
+                                    className="w-full bg-theme-text/5 border border-theme-border rounded-xl py-4 pl-12 pr-4 text-[var(--theme-text)] placeholder-[#d0c4bb]/60 focus:outline-none focus:border-theme-border/50 focus:bg-theme-text/10 transition-all font-mono text-sm tracking-widest"
                                 />
                             </div>
                         ) : (
-                            <div className="relative group">
-                                <Mail className="absolute left-4 top-1/2 -translate-y-1/2 w-5 h-5 text-[#d0c4bb]/40 group-focus-within:text-[var(--theme-text)] transition-colors" />
-                                <input 
-                                    type="email" 
-                                    required={mode === 'signup'}
-                                    value={email}
-                                    onChange={(e) => setEmail(e.target.value)}
-                                    placeholder="Email"
-                                    className="w-full bg-theme-text/5 border border-theme-border rounded-xl py-4 pl-12 pr-4 text-[var(--theme-text)] placeholder-[#d0c4bb]/60 focus:outline-none focus:border-theme-border/50 focus:bg-theme-text/10 transition-all font-mono text-sm"
-                                />
-                            </div>
+                            <>
+                                {mode === 'signup' && (
+                                    <div className="relative group">
+                                        <User className="absolute left-4 top-1/2 -translate-y-1/2 w-5 h-5 text-[#d0c4bb]/40 group-focus-within:text-[var(--theme-text)] transition-colors" />
+                                        <input 
+                                            type="text" 
+                                            required={mode === 'signup'}
+                                            value={username}
+                                            onChange={(e) => setUsername(e.target.value)}
+                                            placeholder="Username"
+                                            className="w-full bg-theme-text/5 border border-theme-border rounded-xl py-4 pl-12 pr-4 text-[var(--theme-text)] placeholder-[#d0c4bb]/60 focus:outline-none focus:border-theme-border/50 focus:bg-theme-text/10 transition-all font-mono text-sm"
+                                        />
+                                    </div>
+                                )}
+                                {mode === 'login' ? (
+                                    <div className="relative group">
+                                        <Mail className="absolute left-4 top-1/2 -translate-y-1/2 w-5 h-5 text-[#d0c4bb]/40 group-focus-within:text-[var(--theme-text)] transition-colors" />
+                                        <input 
+                                            type="text" 
+                                            required={mode === 'login'}
+                                            value={identifier}
+                                            onChange={(e) => setIdentifier(e.target.value)}
+                                            placeholder="Email or Username"
+                                            className="w-full bg-theme-text/5 border border-theme-border rounded-xl py-4 pl-12 pr-4 text-[var(--theme-text)] placeholder-[#d0c4bb]/60 focus:outline-none focus:border-theme-border/50 focus:bg-theme-text/10 transition-all font-mono text-sm"
+                                        />
+                                    </div>
+                                ) : (
+                                    <div className="relative group">
+                                        <Mail className="absolute left-4 top-1/2 -translate-y-1/2 w-5 h-5 text-[#d0c4bb]/40 group-focus-within:text-[var(--theme-text)] transition-colors" />
+                                        <input 
+                                            type="email" 
+                                            required={mode === 'signup'}
+                                            value={email}
+                                            onChange={(e) => setEmail(e.target.value)}
+                                            placeholder="Email"
+                                            className="w-full bg-theme-text/5 border border-theme-border rounded-xl py-4 pl-12 pr-4 text-[var(--theme-text)] placeholder-[#d0c4bb]/60 focus:outline-none focus:border-theme-border/50 focus:bg-theme-text/10 transition-all font-mono text-sm"
+                                        />
+                                    </div>
+                                )}
+                                <div className="relative group">
+                                    <KeyRound className="absolute left-4 top-1/2 -translate-y-1/2 w-5 h-5 text-[#d0c4bb]/40 group-focus-within:text-[var(--theme-text)] transition-colors" />
+                                    <input 
+                                        type="password" 
+                                        required
+                                        value={password}
+                                        onChange={(e) => setPassword(e.target.value)}
+                                        placeholder="Password"
+                                        className="w-full bg-theme-text/5 border border-theme-border rounded-xl py-4 pl-12 pr-4 text-[var(--theme-text)] placeholder-[#d0c4bb]/60 focus:outline-none focus:border-theme-border/50 focus:bg-theme-text/10 transition-all font-mono text-sm"
+                                    />
+                                </div>
+                            </>
                         )}
-                        <div className="relative group">
-                            <KeyRound className="absolute left-4 top-1/2 -translate-y-1/2 w-5 h-5 text-[#d0c4bb]/40 group-focus-within:text-[var(--theme-text)] transition-colors" />
-                            <input 
-                                type="password" 
-                                required
-                                value={password}
-                                onChange={(e) => setPassword(e.target.value)}
-                                placeholder="Password"
-                                className="w-full bg-theme-text/5 border border-theme-border rounded-xl py-4 pl-12 pr-4 text-[var(--theme-text)] placeholder-[#d0c4bb]/60 focus:outline-none focus:border-theme-border/50 focus:bg-theme-text/10 transition-all font-mono text-sm"
-                            />
-                        </div>
                         
                         <div className="flex justify-center mt-4">
                             <Turnstile 
@@ -238,7 +261,7 @@ export default function LoginPage() {
                             className="w-full mt-2 py-4 rounded-xl relative overflow-hidden group dash-border bg-theme-text/5 hover:bg-theme-text/10 transition"
                         >
                             <span className="relative z-10 font-bold tracking-widest text-sm uppercase flex items-center justify-center gap-2">
-                                {loading && mode === 'login' ? 'Authorizing...' : loading && mode === 'signup' ? 'Registering...' : mode === 'login' ? 'Login' : 'Register'}
+                                {loading && mode === 'login' ? 'Authorizing...' : loading && mode === 'signup' ? 'Registering...' : loading && mode === 'verify' ? 'Verifying...' : mode === 'login' ? 'Login' : mode === 'signup' ? 'Register' : 'Verify Code'}
                                 <ArrowRight className={`w-4 h-4 transition-transform group-hover:translate-x-1 ${loading ? 'hidden' : ''}`} />
                             </span>
                         </button>
@@ -246,11 +269,23 @@ export default function LoginPage() {
 
                     <div className="mt-4 text-center">
                          <button 
+                             type="button"
                              onClick={() => setMode(mode === 'login' ? 'signup' : 'login')}
                              className="text-xs text-[#d0c4bb]/60 hover:text-[var(--theme-text)] transition uppercase tracking-widest cursor-pointer"
                          >
                              {mode === 'login' ? "Don't have an Account? Create one." : "Already have an Account? Login."}
                          </button>
+                         {mode === 'login' && (
+                             <div className="mt-2">
+                                 <button 
+                                     type="button"
+                                     onClick={() => setMode('verify')}
+                                     className="text-xs text-[#d0c4bb]/40 hover:text-[var(--theme-text)] transition uppercase tracking-widest cursor-pointer"
+                                 >
+                                     Have a verification code?
+                                 </button>
+                             </div>
+                         )}
                     </div>
 
                     <div className="mt-8 flex items-center justify-center gap-4">