Create server/server.js

server/server.js

@@ -0,0 +1,56 @@
+require('dotenv').config();
+const express = require('express');
+const multer = require('multer');
+const cors = require('cors');
+const { decodeAuthFromImage } = require('./decoder');
+
+const app = express();
+const port = process.env.PORT || 3000;
+
+// --- CORS Configuration ---
+const allowedOrigins = process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : [];
+const corsOptions = {
+  origin: (origin, callback) => {
+    // Allow requests with no origin (like mobile apps or curl) and from allowed origins
+    if (!origin || allowedOrigins.indexOf(origin) !== -1 || allowedOrigins.includes('*')) {
+      callback(null, true);
+    } else {
+      callback(new Error('Not allowed by CORS'));
+    }
+  },
+};
+app.use(cors(corsOptions));
+
+// --- Multer for file uploads ---
+const upload = multer({
+  storage: multer.memoryStorage(),
+  limits: { fileSize: 5 * 1024 * 1024 }, // 5MB limit
+});
+
+// --- API Endpoint ---
+app.post('/api/decode', upload.single('authImage'), async (req, res) => {
+  const privateKey = process.env.PLUGIN_PRIVATE_KEY;
+  
+  if (!privateKey) {
+    console.error("FATAL: PLUGIN_PRIVATE_KEY environment variable is not set.");
+    return res.status(500).json({ success: false, error: 'Server configuration error.' });
+  }
+
+  if (!req.file) {
+    return res.status(400).json({ success: false, error: 'No image file provided. Please upload a file with the key "authImage".' });
+  }
+
+  try {
+    const credentials = await decodeAuthFromImage(req.file.buffer, privateKey);
+    res.json({ success: true, data: credentials });
+  } catch (error) {
+    res.status(400).json({ success: false, error: error.message });
+  }
+});
+
+app.listen(port, () => {
+  console.log(`KeyLock Decoder Plugin listening at http://localhost:${port}`);
+  if (allowedOrigins.length > 0) {
+    console.log(`CORS enabled for: ${allowedOrigins.join(', ')}`);
+  }
+});