Support base64-encoded Firebase credentials for HF Spaces

backend/utils/firebase_storage.py

@@ -5,12 +5,14 @@ Uploads organization logos and scan report PDFs to Firebase Storage
 and returns public/signed download URLs.
 
 Env vars required:
-    FIREBASE_CREDENTIALS  — path to serviceAccountKey.json
+    FIREBASE_CREDENTIALS  — path to serviceAccountKey.json OR base64-encoded JSON
     FIREBASE_STORAGE_BUCKET — e.g. your-project.appspot.com
 """
 
 import os
 import io
+import base64
+import json
 import logging
 from typing import Optional
 
@@ -57,7 +59,15 @@ def init_firebase() -> bool:
         from firebase_admin import credentials, storage
 
         if not firebase_admin._apps:
-            cred = credentials.Certificate(creds_path)
+            # Support both file path and base64-encoded JSON (for HF Spaces)
+            if os.path.isfile(creds_path):
+                cred = credentials.Certificate(creds_path)
+            else:
+                # Treat as base64-encoded JSON string
+                creds_json = base64.b64decode(creds_path).decode("utf-8")
+                creds_dict = json.loads(creds_json)
+                cred = credentials.Certificate(creds_dict)
+
             _app = firebase_admin.initialize_app(cred, {"storageBucket": bucket_name})
 
         _bucket = storage.bucket()