Project Uploaded

api_server.py

@@ -12,6 +12,7 @@ from dotenv import load_dotenv
 load_dotenv()
 
 def decode_base64_with_padding(b64_string: str) -> bytes:
+    """Decodes a Base64 string, adding missing padding if necessary."""
     missing_padding = len(b64_string) % 4
     if missing_padding:
         b64_string += '=' * (4 - missing_padding)
@@ -21,19 +22,20 @@ def decode_base64_with_padding(b64_string: str) -> bytes:
         print(f"Error decoding base64 string after padding: {e}")
         return b""
 
+# --- START: CRITICAL SECTION ---
 # Define a writable directory for ALL runtime files
 WRITABLE_DIR = "/tmp"
 COOKIES_PATH = os.path.join(WRITABLE_DIR, "facebook_cookies.pkl")
 SERVICE_ACCOUNT_FILE = os.path.join(WRITABLE_DIR, "service_account.json")
 
-# Decode secrets at startup into the /tmp directory
+# Decode ALL necessary secrets at startup into the /tmp directory
 if 'FB_COOKIES_B64' in os.environ:
     decoded_cookies = decode_base64_with_padding(os.environ['FB_COOKIES_B64'])
     if decoded_cookies:
         with open(COOKIES_PATH, 'wb') as f:
             f.write(decoded_cookies)
 
-# --- FIX: Decode the Service Account secret ---
+# This is the missing piece: decode the Service Account secret
 if 'SERVICE_ACCOUNT_B64' in os.environ:
     decoded_service_account = decode_base64_with_padding(os.environ['SERVICE_ACCOUNT_B64'])
     if decoded_service_account:
@@ -45,6 +47,7 @@ FINAL5_PATH  = os.environ.get("FINAL5_PATH", "final5.py")
 PYTHON_BIN   = os.environ.get("PYTHON_BIN", "python")
 SENDER_EMAIL = os.environ.get("SENDER_EMAIL", "smahato@hillsidemedicalgroup.com")
 
+# Point the output directories to the writable /tmp directory
 SCRAPE_OUTDIR = os.path.join(WRITABLE_DIR, "scraped")
 ANALYSIS_OUTDIR = os.path.join(WRITABLE_DIR, "analysis")
 
@@ -58,7 +61,7 @@ GMAIL_SCOPES = [ "https://www.googleapis.com/auth/gmail.send" ]
 os.makedirs(SCRAPE_OUTDIR, exist_ok=True)
 os.makedirs(ANALYSIS_OUTDIR, exist_ok=True)
 
-# --- FIX: Implement non-interactive, service-account based authentication ---
+# Use non-interactive, service-account based authentication
 def build_gmail_service():
     if not os.path.exists(SERVICE_ACCOUNT_FILE):
         log("Service account file not found, Gmail unavailable.", "error", "GMAIL")
@@ -73,13 +76,13 @@ def build_gmail_service():
         return service
     except Exception as e:
         log(f"Failed to build Gmail service: {e}", "error", "GMAIL")
-        log("CRITICAL: Ensure your service account has Domain-Wide Delegation enabled and is authorized for the GMail API for the user {SENDER_EMAIL}", "error", "GMAIL")
+        log(f"CRITICAL: Ensure your service account has Domain-Wide Delegation enabled for the user {SENDER_EMAIL}", "error", "GMAIL")
         return None
 
 gmail_service = build_gmail_service()
+# --- END: CRITICAL SECTION ---
+
 
-# The rest of api_server.py remains unchanged...
-# (Full code omitted for brevity, just replace the top section and the build_gmail_service function)
 @dataclass
 class GroupRun:
     link: str