Rename server1.js to server.js

server1.js → server.js

@@ -47,11 +47,19 @@ async function extract(url, res){
 app.get ('/extract',(req,res)=>extract(req.query.url,res));
 app.post('/extract',(req,res)=>extract(req.body.url,res));
 
-/* ---- on-demand login ---- */
-app.post('/login', async (req,res)=>{
-  if (API_KEY && req.body.key!==API_KEY) return res.status(401).json({error:'unauth'});
-  const out=await runLogin();
-  res.json(out);
+/* POST /login  { "key": "secret" } */
+app.post('/login', async (req, res) => {
+/*  if (TOKEN && req.body.key !== TOKEN)
+    return res.status(401).json({ error: 'unauthorized' });*/
+
+  // optional: debounce so two calls don't overlap
+  if (app.locals.running) return res.status(429).json({ error: 'busy' });
+  app.locals.running = true;
+
+  const result = await runLogin();
+  app.locals.running = false;
+
+  res.json(result);
 });
 
 console.log('🛰️  Public URL will be:', HOSTNAME);