Update app.py

app.py

@@ -9,20 +9,26 @@ app = Flask(__name__, static_folder='static')
 app.secret_key = b'_5#y2L"F4Q8z\n\xec]/' # Change this key for secure deployment
 
 csrf = CSRFProtect(app)
-app.config['WTF_CSRF_CHECK_DEFAULT'] = False
+
+# Following config necessary for iFrame (For ex, HuggingFace App)
 app.config['SESSION_COOKIE_SECURE'] = True
 app.config['SESSION_COOKIE_SAMESITE'] = "None"
 
 SESSION_DICT = {}
 
+def delete_session(key):
+    if key in session:
+        if session[key] in SESSION_DICT:
+            del SESSION_DICT[session[key]]
+        session.pop(key, None)
+
 def add_to_session(key, value):
+    delete_session(key)
     uid = uuid.uuid4()
     SESSION_DICT[uid] = value
     session[key] = uid
-    print('ADD SESSION', key, uid)
 
 def get_session_data(key):
-    print('GET FROM SESSION', session, SESSION_DICT)
     if key not in session or session[key] not in SESSION_DICT:
         return None
     return SESSION_DICT[session[key]]
@@ -32,6 +38,7 @@ def send_rapidapi(url, payload):
         "content-type": "application/json",
         "X-RapidAPI-Key": os.environ.get("API_KEY")
     }
+
     response = requests.post(url, json=payload, headers=headers)
     return response.json()
 
@@ -49,20 +56,23 @@ def face_recognition(face_payload):
     url = 'https://face-recognition26.p.rapidapi.com/api/face_compare_base64'
     resp = send_rapidapi(url, face_payload)
     return resp
-        
+
 @app.route("/")
 def index():
     return redirect(url_for('id_type'))
 
 @app.route("/id_type/", methods=['GET'])
 def id_type():
+    delete_session('id_type')
+    delete_session('id_file')
+    delete_session('id_res')
+    delete_session('fr_selfie')
+    delete_session('liveness_res')
     return render_template('id_type.html')
 
 @app.route("/id_type/", methods=['POST'])
 def id_type_done():
-    print("Request Come here", request.values['ocr_type'])
     add_to_session('id_type', request.values['ocr_type'])
-    print("All OK")
     return redirect(url_for('id_file'))
 
 @app.route("/id_file/", methods=['GET'])
@@ -71,14 +81,18 @@ def id_file():
     if id_type is None:
         return redirect(url_for('id_type'))
     
-    id_file = get_session_data('id_file')
+    if request.headers.get("Referer").endswith("/id_detail"):
+        delete_session('id_file')
+
+    id_file = get_session_data('id_file')      
+
     if id_type == 'ic':
         if id_file is not None and id_file['image2'] == "":
-            return render_template('id_file.html', id_type = 'ic_back')
+            return render_template('id_file.html', id_type = 'ic_back', error_model = False)
         else:
-            return render_template('id_file.html', id_type = 'ic_front')
+            return render_template('id_file.html', id_type = 'ic_front', error_model = False)
     else:
-        return render_template('id_file.html', id_type = 'passport')    
+        return render_template('id_file.html', id_type = 'passport', error_model = False)    
 
 @app.route("/id_file/", methods=['POST'])
 def id_file_done():
@@ -90,38 +104,35 @@ def id_file_done():
         if id_file is not None and id_file['image2'] == "":
             id_file['image2'] = id_base64
             add_to_session('id_file', id_file)
-            return redirect(url_for('id_detail'))
         else:
             add_to_session('id_file', {
                 "image": id_base64,
                 "image2": ""
             })
-            return redirect(url_for('id_file'))
+            return render_template('id_file.html', id_type = 'ic_back', error_model = False)
     else:
-        add_to_session('id_file', {
+        id_file = {
             "image": id_base64,
             "image2": ""
-        })
-        return redirect(url_for('id_detail'))
+        }
+        add_to_session('id_file', id_file)
+
+    res = id_recognition(id_file)
+    if not ('data' in res and 'ocr' in res['data'] and 'name' in res['data']['ocr'] and 'data' in res and 'image' in res['data'] and 'portrait' in res['data']['image'] and 'documentFrontSide' in res['data']['image']):
+        delete_session('id_file')
+        if id_type == 'ic':
+            return render_template('id_file.html', id_type = 'ic_front', error_model = True)
+        else:
+            return render_template('id_file.html', id_type = 'passport', error_model = True)
+
+    add_to_session('id_res', res)
+    return redirect(url_for('id_detail'))
 
 @app.route("/id_detail/", methods=['GET'])
 def id_detail():
-    sess_id_file = get_session_data('id_file')
-    if sess_id_file is not None:
-        res = id_recognition(sess_id_file)
-        if 'data' in res and 'ocr' in res['data'] and 'name' in res['data']['ocr']:
-            add_to_session('id_name', res['data']['ocr']['name'])
-
-        if 'data' in res and 'image' in res['data']:
-            if 'portrait' in res['data']['image']:
-                add_to_session('id_face', res['data']['image']['portrait'])
-            if 'documentFrontSide' in res['data']['image']:
-                add_to_session('id_front', res['data']['image']['documentFrontSide'])
-        
-        add_to_session('id_liveness', res['authenticity_liveness'])
-        add_to_session('id_forge', res['authenticity_meta'])
-        
-        return render_template('id_detail.html', ocr_result = json.dumps(res))
+    sess_id_res = get_session_data('id_res')
+    if sess_id_res is not None:       
+        return render_template('id_detail.html', ocr_result = json.dumps(sess_id_res))
     else:
         return redirect(url_for('id_type'))
 
@@ -131,31 +142,44 @@ def id_detail_done():
 
 @app.route("/fr_file/", methods=['GET'])
 def fr_file():
-    return render_template('fr_file.html')
+    delete_session('fr_selfie')
+    delete_session('liveness_res')
+    return render_template('fr_file.html', error_model = False)
 
 @app.route("/fr_file/", methods=['POST'])
 def fr_file_done():
     fr_base64 = request.values['fr_file']
     add_to_session('fr_selfie', fr_base64)
+
+    liveness_api_resp = face_liveness({
+    "image": fr_base64
+    })
+
+    print("Liveness Result:", liveness_api_resp)
+
+    if 'data' in liveness_api_resp and 'result' in liveness_api_resp['data']:
+        liveness_res = liveness_api_resp['data']['result']        
+        if liveness_res not in ["genuine", "spoof"]:
+            return render_template('fr_file.html', error_model = True)
+    
+        add_to_session('liveness_res', liveness_res)
+    else:
+        return render_template('fr_file.html', error_model = True)
+
     return redirect(url_for('fr_detail'))
 
 @app.route("/fr_detail/", methods=['GET'])
 def fr_detail():
-    sess_id_front = get_session_data('id_front')
-    if sess_id_front is None:
+    sess_id_res = get_session_data('id_res')
+    if sess_id_res is None:
         return redirect(url_for('id_type'))
     
     sess_fr_selfie = get_session_data('fr_selfie')
     if sess_fr_selfie is not None:
-        liveness_api_resp = face_liveness({
-            "image": sess_fr_selfie
-            })
-        
-        if 'data' in liveness_api_resp and 'result' in liveness_api_resp['data']:
-            liveness_res = liveness_api_resp['data']['result']
 
-        print("Liveness Result:", liveness_api_resp)
-        sess_id_face = get_session_data('id_face')
+        liveness_res = get_session_data('liveness_res')
+        
+        sess_id_face = sess_id_res['data']['image']['portrait']
         if sess_id_face is not None:
             payload = {
                 "image1": sess_id_face,
@@ -169,10 +193,10 @@ def fr_detail():
 
             print("Matching Result", recog_api_resp)
         return render_template('fr_detail.html', 
-                               id_name = get_session_data('id_name'), 
-                               id_liveness = get_session_data('id_liveness').upper(), 
-                               id_forge = get_session_data('id_forge').upper(), 
-                               id_front = 'data:image/png;base64,' + sess_id_front, 
+                               id_name = sess_id_res['data']['ocr']['name'], 
+                               id_liveness = sess_id_res['authenticity_liveness'].upper(), 
+                               id_forge = sess_id_res['authenticity_meta'].upper(), 
+                               id_front = 'data:image/png;base64,' + sess_id_res['data']['image']['documentFrontSide'], 
                                id_face = 'data:image/png;base64,' + sess_id_face, 
                                selfie = 'data:image/png;base64,' + sess_fr_selfie, 
                                liveness_res = liveness_res.upper(),