initial commit

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Webcodelab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -1,12 +1,200 @@
+# 🧠 AI Resume Ranker API
+
+An intelligent, production-ready Resume Ranking API for developers, recruiters, and HR tech platforms.  
+Inspired by Stripe & Paystack API experiences — complete with authentication, dashboard, and live testing interface.
+
+Built with **Flask + Sentence Transformers + PDF Parsing + Semantic AI**, this API helps you automatically score and rank resumes against any job description using powerful language understanding models.
+
+---
+
+## 🚀 Features
+
+- ✅ **API Key Authentication** with secure Bearer token format
+- 🧾 **Semantic Resume Ranking** using transformer embeddings (not just keyword matching)
+- 📤 Supports **batch PDF uploads**
+- 📬 **JSON API responses** with ranked relevance scores
+- 🧪 **Live Testing Interface** on the dashboard
+- 🔐 **Secure User System** with login, signup, hashed passwords
+- 🔁 **API Key Regeneration** from the dashboard
+- 📚 Beautiful **API Documentation Page** with copyable code samples
+- 🧰 **Try It Now**: Upload resumes + job text and see live scoring
+- 📈 Ready for usage tracking, analytics, or rate limiting
+- 💼 Built for scaling into a full SaaS product
+
+---
+
+## 🌐 Live Demo
+
+> Coming soon: hosted on Render or Railway (e.g., [https://resume-ranker.example.com](https://resume-ranker.example.com))
+
 ---
-title: AI Resume Ranker API
-emoji: 📊
-colorFrom: yellow
-colorTo: purple
-sdk: docker
-pinned: false
-license: mit
-short_description: Resume
+
+## 📦 API Overview
+
+### 🔗 Endpoint
+
+```
+
+POST /api/rank-resumes
+
+```
+
+### 🔐 Authentication
+
+Send your API key in the request header:
+
+```
+
+Authorization: Bearer amn=your\_api\_key\_here
+
+````
+
+### 📤 Request Parameters
+
+| Name            | Type             | Required | Description                          |
+|-----------------|------------------|----------|--------------------------------------|
+| resumes         | `file[] (PDF)`   | ✅ Yes   | One or more PDF resumes              |
+| job_description | `string`         | ✅ Yes   | Job description text to compare with |
+
+---
+
+## 📥 Example Usage
+
+### 🧪 Try It via cURL
+
+```bash
+curl -X POST https://yourdomain.com/api/rank-resumes \
+  -H "Authorization: Bearer amn=sk_live_abc123xyz" \
+  -F "resumes=@resume1.pdf" \
+  -F "resumes=@resume2.pdf" \
+  -F "job_description=We are hiring a backend Django developer..."
+````
+
+### 📦 Sample Response
+
+```json
+{
+  "results": [
+    {
+      "filename": "resume1.pdf",
+      "score": 0.8745
+    },
+    {
+      "filename": "resume2.pdf",
+      "score": 0.6721
+    }
+  ],
+  "count": 2,
+  "requested_by": "user@example.com"
+}
+```
+
+---
+
+## 🛠 Tech Stack
+
+* **Backend:** Flask, Blueprints, Jinja2
+* **AI:** SentenceTransformers (`all-MiniLM-L6-v2`)
+* **PDF Parsing:** PyMuPDF
+* **Auth:** Flask sessions + hashed passwords
+* **Database:** SQLite (dev) / PostgreSQL-ready
+* **Frontend:** Bootstrap 5 + custom Jinja templates
+* **Hosting:** Render / Railway / PythonAnywhere
+* **Docs UI:** Fully embedded HTML + live form
+
+---
+
+## 🧪 Try It Now (via Dashboard)
+
+* Register/Login
+* View and copy your API Key
+* Paste a job description
+* Upload 1–5 resumes (PDF)
+* Get AI-scored ranking results instantly
+
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+## 🧑‍💻 Developer Setup
+
+```bash
+git clone https://github.com/yourusername/resume-ranker-api.git
+cd resume-ranker-api
+python -m venv venv
+source venv/bin/activate  # or venv\Scripts\activate on Windows
+pip install -r requirements.txt
+flask run
+```
+
+Perfect — thanks for the clarification.
+
+You're right to **remove the real email password** before pushing to GitHub — sensitive credentials should never be committed. Instead, include **placeholder values** in the `.env` section of your `README.md`.
+
+---
+
+## ✅ Updated `.env` Example for README
+
+Here's the correct `.env` block to include in the `README.md`:
+
+```ini
+FLASK_ENV=development
+SECRET_KEY=your_secret_key_here
+DATABASE_URL=sqlite:///db.sqlite3
+
+# ✅ Email credentials for verification system
+EMAIL_USER=your_email@gmail.com
+EMAIL_PASS=your_app_password_here
+```
+
+> 📌 **Note:** Use an **App Password** (not your actual Gmail password) if you're using Gmail SMTP. App passwords are safer and Gmail-compliant.
+
+---
+
+## 🔒 Additional Security Tip
+
+To prevent accidental exposure:
+
+* Add `.env` to your `.gitignore`
+* Use environment variables in production (Render, Railway, Fly.io all support this)
+
+**`.gitignore` entry:**
+
+.env
+```
+
+---
+
+## ✅ Bonus (Optional): Mention in README
+
+You can also add a small note under **Developer Setup** in your README:
+
+> 📧 **Note:** To enable email verification links, set `EMAIL_USER` and `EMAIL_PASS` in your `.env`. We recommend using an App Password with Gmail or a transactional email provider like Mailgun or SendGrid.
+
+
+## 💡 Future Features
+
+* ✅ API usage tracking
+* ⏳ Rate limiting (per API key)
+* 📊 Dashboard analytics
+* 🧠 Resume summarization API
+* 📁 CSV/JSON result export
+* 🧩 SDKs for Python & JS
+
+---
+
+## 🤝 Contributing
+
+Pull requests are welcome! Let's build the future of AI recruiting tools together.
+
+---
+
+## 📜 License
+
+MIT License
+
+---
+
+## 📬 Contact
+
+Made with ❤️ by [Muhammad Aminu Umar](mailto:webcodelabb@gmail.com)
+🔗 [LinkedIn](https://linkedin.com/in/webcodelab) | [GitHub](https://github.com/webcodelabb)
+

app/__init__.py

@@ -0,0 +1,23 @@
+from flask import Flask
+from flask_sqlalchemy import SQLAlchemy
+import os
+
+db = SQLAlchemy()
+
+def create_app():
+    app = Flask(__name__)
+    app.config['SECRET_KEY'] = 'your-secret-key'
+    app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///users.db'
+    app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
+
+    db.init_app(app)
+
+    with app.app_context():
+        from .models import User
+        db.create_all()
+
+        # ✅ Import and register the blueprint
+        from .routes import auth
+        app.register_blueprint(auth)
+
+    return app

app/code_generator.py

@@ -0,0 +1,24 @@
+def generate_ranker_code():
+    flask_code = '''@app.route('/rank-resumes', methods=['POST'])
+def rank_resumes():
+    resumes = request.files.getlist('resumes')
+    job_description = request.form.get('job_description')
+
+    # Placeholder logic — replace with your ranking algorithm
+    ranked = [resume.filename for resume in resumes]
+    return jsonify({
+        "job_description": job_description,
+        "ranked_resumes": ranked
+    })'''
+
+    html_code = '''<form method="POST" action="/rank-resumes" enctype="multipart/form-data">
+  <label>Upload Resumes:</label><br>
+  <input type="file" name="resumes" multiple required><br><br>
+
+  <label>Paste Job Description:</label><br>
+  <textarea name="job_description" rows="6" cols="50" required></textarea><br><br>
+
+  <button type="submit">Rank Resumes</button>
+</form>'''
+
+    return flask_code, html_code

app/decorators.py

@@ -0,0 +1,22 @@
+# utils/auth.py
+from functools import wraps
+from flask import request, jsonify
+from .models import User  # adjust import to your structure
+
+def require_api_key(f):
+    @wraps(f)
+    def decorated_function(*args, **kwargs):
+        auth_header = request.headers.get('Authorization')
+
+        if not auth_header or not auth_header.startswith('Bearer '):
+            return jsonify({"error": "Missing or invalid Authorization header."}), 401
+
+        token = auth_header.split("Bearer ")[1].strip()
+
+        user = User.query.filter_by(api_key=token).first()
+        if not user:
+            return jsonify({"error": "Invalid or revoked API key."}), 403
+
+        request.user = user  # attach user to request for downstream use
+        return f(*args, **kwargs)
+    return decorated_function

app/email_utils.py

@@ -0,0 +1,37 @@
+import smtplib
+from email.mime.text import MIMEText
+from email.mime.multipart import MIMEMultipart
+import os
+
+def send_verification_email(to_email, username, token):
+    from_email = os.getenv("EMAIL_USER")
+    app_password = os.getenv("EMAIL_PASS")
+
+    subject = "Verify your account"
+    verification_link = f"http://127.0.0.1:5000/verify/{token}"
+    body = f"""
+    Hi {username},
+
+    Thanks for registering! Please verify your email by clicking the link below:
+
+    {verification_link}
+
+    If you didn't sign up, you can ignore this email.
+    """
+
+    msg = MIMEMultipart()
+    msg['From'] = from_email
+    msg['To'] = to_email
+    msg['Subject'] = subject
+
+    msg.attach(MIMEText(body, 'plain'))
+
+    try:
+        with smtplib.SMTP_SSL('smtp.gmail.com', 465) as server:
+            server.login(from_email, app_password)
+            server.send_message(msg)
+        print(f"Verification email sent to {to_email}")
+        return True
+    except Exception as e:
+        print(f"Failed to send email: {e}")
+        return False

app/models.py

@@ -0,0 +1,30 @@
+from . import db
+from werkzeug.security import generate_password_hash, check_password_hash
+import uuid
+import secrets
+
+class User(db.Model):
+    id = db.Column(db.Integer, primary_key=True)
+    username = db.Column(db.String(150), unique=True, nullable=False)
+    email = db.Column(db.String(150), unique=True, nullable=False)
+    password_hash = db.Column(db.String(256), nullable=False)
+
+    is_verified = db.Column(db.Boolean, default=False)
+    verification_token = db.Column(db.String(64), unique=True, nullable=True, default=lambda: str(uuid.uuid4()))
+
+    api_key = db.Column(db.String(64), unique=True, nullable=True, default=lambda: secrets.token_hex(32))
+
+    def generate_api_key(self):
+        raw_key = secrets.token_hex(32)
+        self.api_key = f"amn={raw_key}"
+        db.session.commit()
+
+    def generate_verification_token(self):
+        self.verification_token = str(uuid.uuid4())
+        db.session.commit()
+
+    def set_password(self, password):
+        self.password_hash = generate_password_hash(password)
+
+    def check_password(self, password):
+        return check_password_hash(self.password_hash, password)

app/ranker.py

@@ -0,0 +1,22 @@
+# utils/ranker.py
+from sentence_transformers import SentenceTransformer, util
+from .utils import extract_text_from_pdf
+
+model = SentenceTransformer('paraphrase-MiniLM-L6-v2')
+  # You can load this once globally
+
+def rank_resumes_by_semantic_similarity(resume_files, job_description):
+    resume_texts = [extract_text_from_pdf(f) for f in resume_files]
+    job_embedding = model.encode(job_description, convert_to_tensor=True)
+
+    results = []
+    for file, resume_text in zip(resume_files, resume_texts):
+        resume_embedding = model.encode(resume_text, convert_to_tensor=True)
+        similarity = util.cos_sim(job_embedding, resume_embedding).item()
+        results.append({
+            "filename": file.filename,
+            "score": round(similarity, 4)
+        })
+
+    results.sort(key=lambda x: x['score'], reverse=True)
+    return results

app/routes.py

@@ -0,0 +1,210 @@
+from flask import Blueprint, render_template, request, redirect, url_for, flash, session, abort, jsonify
+from .models import User
+from . import db
+from .email_utils import send_verification_email
+from .code_generator import generate_ranker_code
+from .utils import rank_resumes_by_similarity
+import requests 
+from werkzeug.utils import secure_filename
+from .ranker import rank_resumes_by_semantic_similarity
+
+auth = Blueprint('auth', __name__)
+
+@auth.route('/')
+def home():
+    return jsonify({"message": "Flask API is live on Hugging Face!"})
+
+@auth.route('/embed', methods=['POST'])
+def embed():
+    data = request.json
+    text = data.get("text", "")
+    return jsonify({"embedding": [0.1, 0.2, 0.3]})  # Dummy
+
+@auth.route('/rank-resumes', methods=['POST'])
+def rank_resumes():
+    auth_header = request.headers.get('Authorization')
+    if not auth_header or not auth_header.startswith('Bearer '):
+        return jsonify({"error": "Missing or invalid Authorization header"}), 401
+
+    api_key = auth_header.split(" ")[1]
+    user = User.query.filter_by(api_key=api_key).first()
+    if not user:
+        return jsonify({"error": "Invalid API key"}), 403
+
+    resumes = request.files.getlist('resumes')
+    job_description = request.form.get('job_description')
+
+    if not resumes or not job_description:
+        return jsonify({"error": "Missing resumes or job description"}), 400
+
+    ranked = rank_resumes_by_semantic_similarity(resumes, job_description)
+
+    return jsonify({
+        "job_description": job_description,
+        "ranked_resumes": ranked
+    })
+
+
+
+@auth.route('/register', methods=['GET', 'POST'])
+def register():
+    if request.method == 'POST':
+        username = request.form['username']
+        email = request.form['email']
+        password = request.form['password']
+
+        if User.query.filter_by(email=email).first():
+            flash('Email already registered.')
+            return redirect(url_for('auth.register'))
+
+        new_user = User(username=username, email=email)
+        new_user.set_password(password)
+        new_user.generate_verification_token()
+        db.session.add(new_user)
+        db.session.commit()
+
+        #  Send verification email
+        if send_verification_email(email, username, new_user.verification_token):
+            flash('Registration successful! Please check your email to verify your account.')
+        else:
+            flash('Registration succeeded, but failed to send verification email.')
+            new_user.generate_api_key()
+            db.session.commit()
+        return redirect(url_for('auth.login'))
+
+    return render_template('register.html')
+
+@auth.route('/login', methods=['GET', 'POST'])
+def login():
+    if request.method == 'POST':
+        email = request.form['email']
+        password = request.form['password']
+        user = User.query.filter_by(email=email).first()
+
+        if user and user.check_password(password):
+            if not user.is_verified:
+                flash('Please verify your email before logging in.')
+                return redirect(url_for('auth.login'))
+
+            session['user_id'] = user.id
+            session['username'] = user.username
+            flash('Logged in successfully.')
+            return redirect(url_for('auth.dashboard'))
+        else:
+            flash('Invalid email or password.')
+            return redirect(url_for('auth.login'))
+
+    return render_template('login.html')
+
+@auth.route('/resend-verification', methods=['GET', 'POST'])
+def resend_verification():
+    if request.method == 'POST':
+        email = request.form['email']
+        user = User.query.filter_by(email=email).first()
+
+        if user:
+            if user.is_verified:
+                flash('Your email is already verified. You can log in.')
+                return redirect(url_for('auth.login'))
+
+            user.generate_verification_token()
+            db.session.commit()
+            if send_verification_email(user.email, user.username, user.verification_token):
+                flash('Verification email resent. Please check your inbox.')
+            else:
+                flash('Failed to send verification email. Try again later.')
+        else:
+            flash('No account found with that email.')
+
+        return redirect(url_for('auth.login'))
+
+    return render_template('resend_verification.html')
+
+
+@auth.route('/dashboard')
+def dashboard():
+    if 'user_id' not in session:
+        flash('Please log in to access the dashboard.')
+        return redirect(url_for('auth.login'))
+
+    user = User.query.get(session['user_id'])
+    return render_template('dashboard.html', user=user)
+
+@auth.route('/generate-api', methods=['GET', 'POST'])
+def generate_api():
+    if 'user_id' not in session:
+        flash('Please log in to access the API generator.')
+        return redirect(url_for('auth.login'))
+
+    if request.method == 'POST':
+        flask_code, html_code = generate_ranker_code()
+        return render_template('generated_code.html', flask_code=flask_code, html_code=html_code)
+
+    return render_template('generate_api.html')
+
+@auth.route('/regenerate-api-key', methods=['POST'])
+def regenerate_api_key():
+    if 'user_id' not in session:
+        flash('Please log in.')
+        return redirect(url_for('auth.login'))
+
+    user = User.query.get(session['user_id'])
+    user.generate_api_key()
+    db.session.commit()
+    flash('API key regenerated.')
+    return redirect(url_for('auth.dashboard'))
+
+@auth.route('/logout')
+def logout():
+    session.clear()
+    flash('You have been logged out.')
+    return redirect(url_for('auth.login'))
+
+@auth.route('/verify/<token>')
+def verify_email(token):
+    user = User.query.filter_by(verification_token=token).first()
+    if user:
+        user.is_verified = True
+        user.verification_token = None
+        db.session.commit()
+        flash('Email verified! You can now log in.')
+        return redirect(url_for('auth.login'))
+    else:
+        flash('Invalid or expired verification link.')
+        return redirect(url_for('auth.register'))
+
+@auth.route('/docs')
+def docs():
+    return render_template('docs.html', response=None)
+
+# Inside your auth.py or views.py
+
+from flask import request, render_template, redirect, url_for, flash
+from .models import User
+from .utils import rank_resumes_by_similarity  # import your real function
+
+@auth.route('/try-api', methods=['POST'])
+def try_api():
+    api_key = request.form.get('api_key')
+    resumes = request.files.getlist('resumes')
+    job_description = request.form.get('job_description')
+
+    if not api_key or not resumes or not job_description:
+        flash("All fields are required.")
+        return redirect(url_for('auth.docs'))
+
+    user = User.query.filter_by(api_key=api_key).first()
+    if not user:
+        return render_template('docs.html', response=" Invalid API key.")
+
+    try:
+        # ✅ Use the actual ranking logic
+        results = rank_resumes_by_semantic_similarity(resumes, job_description)
+
+        return render_template(
+            'docs.html',
+            response=results,
+            job_description=job_description
+        )
+    except Exception as e:
+        return render_template('docs.html', response=f" Error: {str(e)}")

app/routes/api.py

@@ -0,0 +1,25 @@
+# routes/api.py
+from flask import Blueprint, request, jsonify
+from ..ranker import rank_resumes_by_semantic_similarity  # <-- updated import
+from ..decorators import require_api_key
+
+api = Blueprint('api', __name__)
+
+@api.route('/api/rank-resumes', methods=['POST'])
+@require_api_key
+def rank_resumes():
+    job_description = request.form.get('job_description')
+    resume_files = request.files.getlist('resumes')
+
+    if not job_description or not resume_files:
+        return jsonify({'error': 'Missing job description or resumes'}), 400
+
+    try:
+        results = rank_resumes_by_semantic_similarity(resume_files, job_description)
+        return jsonify({
+            'results': results,
+            'count': len(results),
+            'requested_by': request.user.email
+        })
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500

app/templates/base.html

@@ -0,0 +1,22 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>{% block title %}Auth App{% endblock %}</title>
+  <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
+</head>
+<body class="container mt-5">
+
+  {% with messages = get_flashed_messages() %}
+    {% if messages %}
+      <div class="alert alert-info">
+        {% for message in messages %}
+          <div>{{ message }}</div>
+        {% endfor %}
+      </div>
+    {% endif %}
+  {% endwith %}
+
+  {% block content %}{% endblock %}
+
+</body>
+</html>

app/templates/dashboard.html

@@ -0,0 +1,34 @@
+{% extends "base.html" %}
+{% block title %}Dashboard{% endblock %}
+{% block content %}
+<h2>Welcome, {{ user.username }}!</h2>
+<p>This is your protected dashboard.</p>
+<h5>Your API Key</h5>
+<div class="input-group mb-3">
+  <input type="text" class="form-control" id="apiKey" value="{{ user.api_key }}" readonly>
+  <button class="btn btn-outline-secondary" type="button" onclick="copyApiKey()">Copy</button>
+</div>
+
+<form method="POST" action="{{ url_for('auth.regenerate_api_key') }}">
+  <button class="btn btn-warning">Regenerate API Key</button>
+</form>
+<div>
+    <p><a href="{{ url_for('auth.docs') }}">📘 View API Documentation</a></p>
+
+</div>
+<!-- <p><a href="{{ url_for('auth.docs') }}">📘 View API Documentation</a></p> -->
+
+<a href="{{ url_for('auth.logout') }}" class="btn btn-danger">Logout</a>
+
+<script>
+function copyApiKey() {
+  const input = document.getElementById("apiKey");
+  input.select();
+  input.setSelectionRange(0, 99999); // For mobile
+  document.execCommand("copy");
+  alert("API key copied to clipboard!");
+}
+</script>
+
+{% endblock %}
+

app/templates/docs.html

@@ -0,0 +1,118 @@
+{% extends "base.html" %}
+{% block title %}API Documentation{% endblock %}
+
+{% block content %}
+<h2 class="mb-4">📘 Resume Ranker API Documentation</h2>
+
+<h4>🔗 Endpoint</h4>
+<pre><code class="copyable">POST https://yourdomain.com/api/rank-resumes</code></pre>
+
+<h4>🔐 Authentication</h4>
+<p>Include your API key in the <code>Authorization</code> header:</p>
+<pre><code class="copyable">Authorization: Bearer amn=your_api_key_here</code></pre>
+
+<h4>📤 Request Parameters</h4>
+<ul>
+  <li><strong>resumes</strong> (file[], required): One or more PDF resumes</li>
+  <li><strong>job_description</strong> (text, required): The job description to match against</li>
+</ul>
+
+<h4>📥 Example Request (curl)</h4>
+<pre><code class="copyable">curl -X POST https://yourdomain.com/api/rank-resumes \
+  -H "Authorization: Bearer amn=your_api_key_here" \
+  -F "resumes=@cv1.pdf" \
+  -F "resumes=@cv2.pdf" \
+  -F "job_description=We are hiring a backend engineer..."</code></pre>
+
+<h4>📥 Example Request (Python)</h4>
+<pre><code class="copyable">import requests
+
+headers = {
+    "Authorization": "Bearer amn=your_api_key_here"
+}
+files = [
+    ('resumes', ('cv1.pdf', open('cv1.pdf', 'rb'), 'application/pdf')),
+    ('resumes', ('cv2.pdf', open('cv2.pdf', 'rb'), 'application/pdf')),
+]
+data = {
+    "job_description": "We are hiring a backend engineer..."
+}
+
+response = requests.post("https://yourdomain.com/api/rank-resumes", headers=headers, files=files, data=data)
+print(response.json())</code></pre>
+
+<h4>📦 Sample Response</h4>
+<pre><code class="copyable">{
+  "results": [
+    {
+      "filename": "cv2.pdf",
+      "score": 0.8745
+    },
+    {
+      "filename": "cv1.pdf",
+      "score": 0.6721
+    }
+  ],
+  "count": 2,
+  "requested_by": "user@example.com"
+}</code></pre>
+
+<hr class="my-5">
+
+<h4>🧪 Try It Now</h4>
+<form method="POST" action="{{ url_for('auth.try_api') }}" enctype="multipart/form-data">
+  <div class="mb-3">
+    <label for="api_key" class="form-label">API Key</label>
+    <input type="text" class="form-control" id="api_key" name="api_key" placeholder="amn=your_api_key_here" required>
+  </div>
+  <div class="mb-3">
+    <label for="resumes" class="form-label">Upload Resumes (PDF)</label>
+    <input type="file" class="form-control" id="resumes" name="resumes" multiple required>
+  </div>
+  <div class="mb-3">
+    <label for="job_description" class="form-label">Job Description</label>
+    <textarea class="form-control" id="job_description" name="job_description" rows="4" required></textarea>
+  </div>
+  <button type="submit" class="btn btn-success">Submit Test Request</button>
+</form>
+
+{% if response is iterable and response[0] is mapping %}
+<hr class="my-5">
+<h5>📬 API Response</h5>
+<table class="table table-striped">
+  <thead>
+    <tr><th>Filename</th><th>Score</th></tr>
+  </thead>
+  <tbody>
+    {% for item in response %}
+    <tr>
+      <td>{{ item.filename }}</td>
+      <td>{{ item.score }}</td>
+    </tr>
+    {% endfor %}
+  </tbody>
+</table>
+{% elif response %}
+<hr class="my-5">
+<h5>📬 API Response</h5>
+<pre><code>{{ response }}</code></pre>
+{% endif %}
+
+<p class="mt-4"><a href="{{ url_for('auth.dashboard') }}" class="btn btn-secondary">← Back to Dashboard</a></p>
+
+<!-- ✅ Copy Button Script -->
+<script>
+document.querySelectorAll('code.copyable').forEach(block => {
+  const button = document.createElement('button');
+  button.innerText = 'Copy';
+  button.className = 'btn btn-sm btn-outline-primary mb-2 float-end';
+  button.addEventListener('click', () => {
+    const text = block.innerText;
+    navigator.clipboard.writeText(text);
+    button.innerText = 'Copied!';
+    setTimeout(() => button.innerText = 'Copy', 1500);
+  });
+  block.parentElement.insertBefore(button, block);
+});
+</script>
+{% endblock %}

app/templates/generate_api.html

@@ -0,0 +1,9 @@
+{% extends "base.html" %}
+{% block title %}Generate Resume Ranker API{% endblock %}
+{% block content %}
+<h2>Generate Resume Ranker API</h2>
+<p>This will generate a single endpoint that accepts resumes and a job description, and returns ranked results.</p>
+<form method="POST">
+  <button type="submit" class="btn btn-primary">Generate API</button>
+</form>
+{% endblock %}

app/templates/generated_code.html

@@ -0,0 +1,13 @@
+{% extends "base.html" %}
+{% block title %}Generated Code{% endblock %}
+{% block content %}
+<h2>Generated Flask Code</h2>
+<pre><code>{{ flask_code }}</code></pre>
+
+{% if html_code %}
+<h2>Generated HTML Form</h2>
+<pre><code>{{ html_code }}</code></pre>
+{% endif %}
+
+<a href="{{ url_for('auth.generate_api') }}" class="btn btn-secondary mt-3">Generate Another</a>
+{% endblock %}

app/templates/login.html

@@ -0,0 +1,20 @@
+{% extends "base.html" %}
+{% block title %}Login{% endblock %}
+{% block content %}
+<h2>Login</h2>
+<form method="POST">
+  <div class="mb-3">
+    <input name="email" type="email" class="form-control" placeholder="Email" required>
+  </div>
+  <div class="mb-3">
+    <input name="password" type="password" class="form-control" placeholder="Password" required>
+  </div>
+  <button type="submit" class="btn btn-primary">Login</button>
+</form>
+<p class="mt-3">
+  Didn't get the verification email?
+  <a href="{{ url_for('auth.resend_verification') }}">Resend it</a>
+</p>
+
+<p class="mt-3">Don't have an account? <a href="{{ url_for('auth.register') }}">Register</a></p>
+{% endblock %}

app/templates/register.html

@@ -0,0 +1,18 @@
+{% extends "base.html" %}
+{% block title %}Register{% endblock %}
+{% block content %}
+<h2>Register</h2>
+<form method="POST">
+  <div class="mb-3">
+    <input name="username" class="form-control" placeholder="Username" required>
+  </div>
+  <div class="mb-3">
+    <input name="email" type="email" class="form-control" placeholder="Email" required>
+  </div>
+  <div class="mb-3">
+    <input name="password" type="password" class="form-control" placeholder="Password" required>
+  </div>
+  <button type="submit" class="btn btn-success">Register</button>
+</form>
+<p class="mt-3">Already have an account? <a href="{{ url_for('auth.login') }}">Login</a></p>
+{% endblock %}

app/templates/resend_verification.html

@@ -0,0 +1,12 @@
+{% extends "base.html" %}
+{% block title %}Resend Verification{% endblock %}
+{% block content %}
+<h2>Resend Verification Email</h2>
+<form method="POST">
+  <div class="mb-3">
+    <input name="email" type="email" class="form-control" placeholder="Enter your email" required>
+  </div>
+  <button type="submit" class="btn btn-warning">Resend Email</button>
+</form>
+<p class="mt-3"><a href="{{ url_for('auth.login') }}">Back to login</a></p>
+{% endblock %}

app/utils.py

@@ -0,0 +1,49 @@
+import fitz  # PyMuPDF
+from sklearn.feature_extraction.text import TfidfVectorizer
+from sklearn.metrics.pairwise import cosine_similarity
+
+def extract_text_from_pdf(file_storage):
+    with fitz.open(stream=file_storage.read(), filetype="pdf") as doc:
+        return " ".join([page.get_text() for page in doc])
+
+def rank_resumes_by_similarity(resume_files, job_description):
+    resume_texts = [extract_text_from_pdf(f) for f in resume_files]
+    documents = [job_description] + resume_texts
+
+    vectorizer = TfidfVectorizer(stop_words='english')
+    tfidf_matrix = vectorizer.fit_transform(documents)
+
+    job_vector = tfidf_matrix[0]
+    resume_vectors = tfidf_matrix[1:]
+
+    similarities = cosine_similarity(job_vector, resume_vectors).flatten()
+    ranked = sorted(zip(resume_files, similarities), key=lambda x: x[1], reverse=True)
+
+    return [
+        {"filename": file.filename, "score": round(score, 4)}
+        for file, score in ranked
+    ]
+
+
+# utils/auth.py
+from functools import wraps
+from flask import request, jsonify
+from .models import User  # adjust import to your structure
+
+def require_api_key(f):
+    @wraps(f)
+    def decorated_function(*args, **kwargs):
+        auth_header = request.headers.get('Authorization')
+
+        if not auth_header or not auth_header.startswith('Bearer '):
+            return jsonify({"error": "Missing or invalid Authorization header."}), 401
+
+        token = auth_header.split("Bearer ")[1].strip()
+
+        user = User.query.filter_by(api_key=token).first()
+        if not user:
+            return jsonify({"error": "Invalid or revoked API key."}), 403
+
+        request.user = user  # attach user to request for downstream use
+        return f(*args, **kwargs)
+    return decorated_function

dockerfile

@@ -0,0 +1,23 @@
+FROM python:3.10-slim
+
+WORKDIR /app
+
+# Install dependencies
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Copy all files
+COPY . .
+
+# Optional: avoid using cached Hugging Face models in root directory
+ENV TRANSFORMERS_CACHE=/app/cache
+ENV HF_HOME=/app/cache
+
+# Set PYTHONPATH (useful if you're importing from app/)
+ENV PYTHONPATH=/app
+
+# HF Spaces default port is 7860
+EXPOSE 7860
+
+# Start server
+CMD ["gunicorn", "--bind", "0.0.0.0:7860", "main:app"]

main.py

@@ -0,0 +1,11 @@
+from app import create_app
+from dotenv import load_dotenv
+import os
+
+load_dotenv()  
+
+app = create_app()
+
+if __name__ == '__main__':
+    port = int(os.environ.get("PORT", 7860))
+    app.run(host='0.0.0.0', port=port)

requirements.txt

@@ -0,0 +1,12 @@
+Flask
+Flask-SQLAlchemy
+Flask-Migrate
+Werkzeug
+python-dotenv
+PyMuPDF
+scikit-learn
+requests
+sentence-transformers
+gunicorn
+transformers
+torch