Fix login (audit_logs table + fault-tolerant audit), feedback graceful errors, remove raw AI explanation fallback, localStorage feedback persistence, Betterstack cloud logging

backend/app/core/logger.py

@@ -1,4 +1,6 @@
 import sys
+import os
+import requests as _requests
 from loguru import logger
 from app.core.config import settings
 from pathlib import Path
@@ -19,8 +21,6 @@ log_dir = Path("app_logs")
 log_dir.mkdir(parents=True, exist_ok=True)
 
 # 4. Console Logger (JSON Serialized)
-# Because serialize=True is used, the "request_id" from the 'extra' dict 
-# will automatically be included in the JSON output!
 logger.add(
     sys.stdout,
     format="{message}",
@@ -30,7 +30,6 @@ logger.add(
 )
 
 # 5. File Logger
-# We inject [{extra[request_id]}] into the format string so it prints beautifully 
 logger.add(
     "app_logs/api_{time:YYYY-MM-DD}.log",
     rotation="00:00",
@@ -40,3 +39,32 @@ logger.add(
     format="{time:YYYY-MM-DD HH:mm:ss} | {level} | [{extra[request_id]}] {name}:{function}:{line} - {message}",
     enqueue=True
 )
+
+# 6. Betterstack Logtail Cloud Sink (free remote logging)
+#    Set LOGTAIL_SOURCE_TOKEN in your HuggingFace Space secrets to enable.
+_LOGTAIL_TOKEN = os.environ.get("LOGTAIL_SOURCE_TOKEN", "")
+if _LOGTAIL_TOKEN:
+    def _logtail_sink(message):
+        record = message.record
+        try:
+            _requests.post(
+                "https://in.logs.betterstack.com",
+                headers={
+                    "Authorization": f"Bearer {_LOGTAIL_TOKEN}",
+                    "Content-Type": "application/json",
+                },
+                json={
+                    "message": record["message"],
+                    "level": record["level"].name,
+                    "request_id": record["extra"].get("request_id", "SYSTEM"),
+                    "logger": record["name"],
+                    "function": record["function"],
+                    "line": record["line"],
+                    "dt": record["time"].isoformat(),
+                },
+                timeout=3,
+            )
+        except Exception:
+            pass  # Never let cloud logging failure affect the app
+
+    logger.add(_logtail_sink, level="INFO", enqueue=True)

backend/app/services/audit_service.py

@@ -1,29 +1,39 @@
-from sqlalchemy.orm import Session
-from app.models.audit_model import AuditLog
-from fastapi import Request
-from app.core.request_id import get_request_id
-
-def log_audit_event(
-    db: Session,
-    action: str,
-    user_id: int | None = None,
-    request: Request | None = None,
-    details: dict | None = None
-):
-    ip_address = None
-    if request and request.client:
-        ip_address = request.client.host
-
-        # ip_address = request.headers.get("X-Forwarded-For", request.client.host)
-        meta = details or {}
-        meta["request_id"] = get_request_id()
-
-        audit_entry = AuditLog(
-            user_id=user_id,
-            action=action,
-            ip=ip_address,
-            metadata_info=meta
-        )
-
-        db.add(audit_entry)
-        db.commit()
+import logging
+from sqlalchemy.orm import Session
+from app.models.audit_model import AuditLog
+from fastapi import Request
+from app.core.request_id import get_request_id
+
+logger = logging.getLogger(__name__)
+
+def log_audit_event(
+    db: Session,
+    action: str,
+    user_id: int | None = None,
+    request: Request | None = None,
+    details: dict | None = None
+):
+    try:
+        ip_address = None
+        if request and request.client:
+            ip_address = request.client.host
+
+        meta = details or {}
+        meta["request_id"] = get_request_id()
+
+        audit_entry = AuditLog(
+            user_id=user_id,
+            action=action,
+            ip=ip_address,
+            metadata_info=meta
+        )
+
+        db.add(audit_entry)
+        db.commit()
+    except Exception as e:
+        # Never let an audit log failure crash the main request
+        try:
+            db.rollback()
+        except Exception:
+            pass
+        logger.warning(f"Audit log write failed (non-critical): {e}")

backend/main.py

@@ -1,78 +1,81 @@
-from fastapi import FastAPI
-from fastapi.middleware.cors import CORSMiddleware
-from fastapi.staticfiles import StaticFiles
-from contextlib import asynccontextmanager
-import os
-from uvicorn.middleware.proxy_headers import ProxyHeadersMiddleware
-from slowapi import _rate_limit_exceeded_handler
-from slowapi.errors import RateLimitExceeded
-from app.api.user_routes import router as user_router
-from app.api.auth_routes import router as auth_router
-from app.api.profile_routes import router as profile_router
-from app.api.file_routes import router as file_router
-from app.api.feedback_routes import router as feedback_router
-from app.api.admin_routes import router as admin_router
-from app.api.metric_routes import router as metrics_router
-from app.api.user_issue_routes import router as user_issue_router
-from app.core.logging_middleware import APILoggingMiddleware
-from app.api.user_routes import router as user_router
-from app.core.limiter import limiter
-from app.middleware.security_headers import SecurityHeadersMiddleware
-from starlette.middleware.sessions import SessionMiddleware
-
-@asynccontextmanager
-async def lifespan(app: FastAPI):
-    pass
-    yield
-
-is_production = os.environ.get("ENVIRONMENT", "development") == "production"
-
-app = FastAPI(
-    title="Spotix",
-    lifespan=lifespan,
-    docs_url=None if is_production else "/docs",
-    redoc_url=None if is_production else "/redoc",
-    openapi_url=None if is_production else "/openapi.json"
-)
-
-app.add_middleware(ProxyHeadersMiddleware, trusted_hosts=["*"])
-
-app.add_middleware(
-    SessionMiddleware, 
-    secret_key=os.environ.get("SESSION_SECRET_KEY", "neural-vault-oauth-session-secret-9912"),
-    https_only=is_production
-)
-
-frontend_url = os.environ.get("FRONTEND_URL", "http://localhost:3000")
-origins = [frontend_url]
-if frontend_url != "http://localhost:3000":
-    origins.append("http://localhost:3000")
-
-app.add_middleware(
-    CORSMiddleware,
-    allow_origins=origins,
-    allow_credentials=True,
-    allow_methods=["*"],
-    allow_headers=["*"],
-)
-
-# Trigger reload
-app.mount("/static", StaticFiles(directory="."), name="static")
-
-app.state.limiter = limiter
-app.include_router(profile_router)
-app.include_router(user_router)
-app.include_router(auth_router)
-app.include_router(file_router)
-app.include_router(feedback_router)
-app.include_router(admin_router)
-app.include_router(metrics_router)
-app.include_router(user_issue_router)
-app.add_middleware(APILoggingMiddleware)
-app.include_router(profile_router)
-app.add_exception_handler(RateLimitExceeded, _rate_limit_exceeded_handler)
-app.add_middleware(SecurityHeadersMiddleware)
-
-@app.get("/")
-def home():
-    return {"message": "Backend running successfully"}
+from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
+from fastapi.staticfiles import StaticFiles
+from contextlib import asynccontextmanager
+import os
+from uvicorn.middleware.proxy_headers import ProxyHeadersMiddleware
+from slowapi import _rate_limit_exceeded_handler
+from slowapi.errors import RateLimitExceeded
+from app.api.user_routes import router as user_router
+from app.api.auth_routes import router as auth_router
+from app.api.profile_routes import router as profile_router
+from app.api.file_routes import router as file_router
+from app.api.feedback_routes import router as feedback_router
+from app.api.admin_routes import router as admin_router
+from app.api.metric_routes import router as metrics_router
+from app.api.user_issue_routes import router as user_issue_router
+from app.core.logging_middleware import APILoggingMiddleware
+from app.core.limiter import limiter
+from app.middleware.security_headers import SecurityHeadersMiddleware
+from starlette.middleware.sessions import SessionMiddleware
+
+@asynccontextmanager
+async def lifespan(app: FastAPI):
+    # Auto-create any missing tables (e.g. audit_logs) without dropping existing data
+    from app.db.database import Base, engine
+    import app.models.audit_model  # noqa: ensure AuditLog is registered with Base
+    import app.models.user_model   # noqa
+    import app.models.file_model   # noqa
+    Base.metadata.create_all(bind=engine, checkfirst=True)
+    yield
+
+is_production = os.environ.get("ENVIRONMENT", "development") == "production"
+
+app = FastAPI(
+    title="Spotix",
+    lifespan=lifespan,
+    docs_url=None if is_production else "/docs",
+    redoc_url=None if is_production else "/redoc",
+    openapi_url=None if is_production else "/openapi.json"
+)
+
+app.add_middleware(ProxyHeadersMiddleware, trusted_hosts=["*"])
+
+app.add_middleware(
+    SessionMiddleware, 
+    secret_key=os.environ.get("SESSION_SECRET_KEY", "neural-vault-oauth-session-secret-9912"),
+    https_only=is_production
+)
+
+frontend_url = os.environ.get("FRONTEND_URL", "http://localhost:3000")
+origins = [frontend_url]
+if frontend_url != "http://localhost:3000":
+    origins.append("http://localhost:3000")
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=origins,
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+# Trigger reload
+app.mount("/static", StaticFiles(directory="."), name="static")
+
+app.state.limiter = limiter
+app.include_router(profile_router)
+app.include_router(user_router)
+app.include_router(auth_router)
+app.include_router(file_router)
+app.include_router(feedback_router)
+app.include_router(admin_router)
+app.include_router(metrics_router)
+app.include_router(user_issue_router)
+app.add_middleware(APILoggingMiddleware)
+app.add_exception_handler(RateLimitExceeded, _rate_limit_exceeded_handler)
+app.add_middleware(SecurityHeadersMiddleware)
+
+@app.get("/")
+def home():
+    return {"message": "Backend running successfully"}

frontend/app/login/page.tsx

@@ -95,11 +95,16 @@ export default function LoginPage() {
                 setLoading(false);
             }
         } catch (err: any) {
-            const detail = err.response?.data?.detail;
-            if (Array.isArray(detail)) {
-                setError(detail[0]?.msg || "Validation Error");
+            if (!err.response) {
+                // Network error — backend unreachable or CORS
+                setError("Unable to reach the server. Please try again shortly.");
             } else {
-                setError(detail || "Authentication Failed");
+                const detail = err.response?.data?.detail;
+                if (Array.isArray(detail)) {
+                    setError(detail[0]?.msg || "Validation error. Please check your inputs.");
+                } else {
+                    setError(detail || "Authentication failed. Please check your credentials.");
+                }
             }
             setLoading(false);
         }

frontend/app/result/[id]/page.tsx

@@ -186,13 +186,9 @@ export default function ResultPage() {
                 label = 'Real';
             }
 
-            if (parts.length > 1 && !fileData.ai_explanation) {
-                // Ignore FREQ and CNN legacy splits for strictly explanation maps
-                const mappedExplanations = parts.slice(1).filter(p => !p.includes('FREQ:') && !p.includes('CNN:') && !p.includes('NSFW:'));
-                if (mappedExplanations.length > 0) {
-                    fileData.ai_explanation = mappedExplanations.join('\n').trim();
-                }
-            }
+            // Do NOT fall back to parsing result lines as explanation -
+            // those are raw model output labels, not natural language.
+            // ai_explanation from the API (LLM-generated) is used directly below.
 
             const freqMatch = fileData.result.match(/FREQ:\s*([\d\.]+)/);
             const cnnMatch = fileData.result.match(/CNN:\s*([\d\.]+)/);
@@ -218,6 +214,16 @@ export default function ResultPage() {
     const isVideo = fileData?.type?.startsWith("video/");
     const allLoaded = isVideo ? mediaLoaded : (mediaLoaded && (!heatmapUrl || heatmapLoaded));
 
+    // Check localStorage so reopening a result page doesn't re-show the popup
+    useEffect(() => {
+        if (fileData?.id) {
+            const key = `spotix_feedback_${fileData.id}`;
+            if (localStorage.getItem(key) === 'done') {
+                setFeedbackSubmitted(true);
+            }
+        }
+    }, [fileData?.id]);
+
     useEffect(() => {
         if (allLoaded && isAuthenticated && !feedbackSubmitted && verdictStatus) {
             const timer = setTimeout(() => setShowFeedbackPopup(true), 2000);
@@ -226,22 +232,30 @@ export default function ResultPage() {
     }, [allLoaded, isAuthenticated, feedbackSubmitted, verdictStatus]);
 
     const submitFeedback = async (selectedLabel: string) => {
+        if (!fileData) return;
         setFeedbackLoading(true);
         setFeedbackError(null);
         try {
             await apiLayer.submitFeedback({
-                file_id: parseInt(fileId),
+                file_id: fileData.id,  // use the integer id from data, not the URL string
                 label: selectedLabel.toLowerCase(),
                 confidence: confidenceVal ?? 0,
                 freq_score: freqScore ?? 0,
                 cnn_score: cnnScore ?? 0
             });
+            // Persist so reopening this page won't show popup again
+            localStorage.setItem(`spotix_feedback_${fileData.id}`, 'done');
             setFeedbackSubmitted(true);
             setShowFeedbackPopup(false);
             setShowFeedbackModal(false);
         } catch (err: any) {
-            const msg = err.response?.data?.detail || "Failed to submit. Please try again.";
-            setFeedbackError(typeof msg === 'string' ? msg : JSON.stringify(msg));
+            const status = err.response?.status;
+            if (status === 400) {
+                // e.g. "Feedback already submitted for this file."
+                setFeedbackError("You've already rated this scan.");
+            } else {
+                setFeedbackError("Something went wrong. Please try again.");
+            }
         } finally {
             setFeedbackLoading(false);
         }