Update app.py

app.py

@@ -865,22 +865,51 @@ async def admin_update_profile(user_id: str, request: Request, user=Depends(requ
 
 @app.post("/admin/requests")
 async def submit_admin_request(request: Request):
-    # No auth required — anyone can submit a request to become admin
     data    = await request.json()
     db      = get_db()
-    # Try to link to an existing account by name/uid, but not required
     uid     = data.get("uid","").strip().lower()
     profile = db.execute("SELECT id FROM profiles WHERE uid=?", (uid,)).fetchone() if uid else None
-    user_id = profile["id"] if profile else str(uuid.uuid4())  # placeholder if not registered yet
-    db.execute(
-        "INSERT INTO admin_requests (id,user_id,email,name,role_title,reason,id_image_url) VALUES (?,?,?,?,?,?,?)",
-        (str(uuid.uuid4()), user_id, data.get("email",""), data.get("name",""),
-         data.get("role_title",""), data.get("reason",""), data.get("id_image_url"))
-    )
-    db.commit()
-    db.close()
-    broker.publish("admin", {"type": "new_request"})
-    return {"ok": True}
+    user_id = profile["id"] if profile else str(uuid.uuid4())
+
+    # ── Auto ID check ────────────────────────────────────────────────────────
+    # If they uploaded an ID image, run SigLIP zero-shot check.
+    # If it looks like a student/staff ID → auto-approve immediately.
+    id_image_url = data.get("id_image_url")
+    auto_approved = False
+
+    if id_image_url and profile:
+        try:
+            img_path = os.path.join(IMG_DIR, os.path.basename(id_image_url))
+            if os.path.exists(img_path):
+                img_bytes  = open(img_path, "rb").read()
+                id_result  = _siglip_check_id(img_bytes)
+                if id_result.get("is_id") and id_result.get("confidence", 0) >= 0.45:
+                    # Looks like an ID — grant admin automatically
+                    db.execute("UPDATE profiles SET role='admin' WHERE id=?", (profile["id"],))
+                    auto_approved = True
+                    print(f"[admin-auto] approved uid={uid} confidence={id_result['confidence']:.2f}")
+        except Exception as e:
+            print(f"[admin-auto] check failed: {e}")
+
+    if auto_approved:
+        # Still log it but mark as auto-approved
+        db.execute(
+            "INSERT INTO admin_requests (id,user_id,email,name,role_title,reason,id_image_url,status) VALUES (?,?,?,?,?,?,?,?)",
+            (str(uuid.uuid4()), user_id, data.get("email",""), data.get("name",""),
+             data.get("role_title",""), data.get("reason",""), id_image_url, "approved")
+        )
+        db.commit(); db.close()
+        broker.publish("admin", {"type": "new_request"})
+        return {"ok": True, "auto_approved": True, "message": "ID verified — admin access granted!"}
+    else:
+        db.execute(
+            "INSERT INTO admin_requests (id,user_id,email,name,role_title,reason,id_image_url) VALUES (?,?,?,?,?,?,?)",
+            (str(uuid.uuid4()), user_id, data.get("email",""), data.get("name",""),
+             data.get("role_title",""), data.get("reason",""), id_image_url)
+        )
+        db.commit(); db.close()
+        broker.publish("admin", {"type": "new_request"})
+        return {"ok": True, "auto_approved": False, "message": "Request submitted — pending review"}
 
 # ══════════════════════════════════════════════════════════════════════════════
 # ── AI IMAGE FEATURES ─────────────────────────────────────────────────────────