Remove login; open detection page directly

Dockerfile

@@ -19,7 +19,7 @@ WORKDIR /app
 
 # Build-time info + cache-bust:
 # Changing APP_BUILD forces Docker to re-run subsequent layers (including pip install).
-ARG APP_BUILD=21
+ARG APP_BUILD=22
 ENV APP_BUILD=${APP_BUILD}
 RUN echo "Docker build start: APP_BUILD=${APP_BUILD}" && python -V
 

app/auth.py

@@ -71,6 +71,23 @@ def get_user_from_token(token: str, db: Session) -> Optional[User]:
     return get_user_by_id(db, user_id)
 
 
+def get_or_create_guest_user(db: Session) -> User:
+    """Shared anonymous account when login is disabled."""
+    guest_email = "__guest__@system.local"
+    user = get_user_by_email(db, guest_email)
+    if user:
+        return user
+    user = User(
+        email=guest_email,
+        hashed_password=get_password_hash("guest-not-used"),
+        full_name="Guest",
+    )
+    db.add(user)
+    db.commit()
+    db.refresh(user)
+    return user
+
+
 def get_current_user(
     request: Request,
     credentials: Optional[HTTPAuthorizationCredentials] = Depends(security),

app/main.py

@@ -8,7 +8,7 @@ from pathlib import Path
 from typing import Optional
 
 from sqlalchemy import text as sa_text
-from fastapi import FastAPI, Depends, File, Form, HTTPException, Request, UploadFile
+from fastapi import FastAPI, Depends, File, Form, HTTPException, UploadFile
 from fastapi.responses import FileResponse, HTMLResponse, JSONResponse
 from fastapi.staticfiles import StaticFiles
 from pydantic import BaseModel
@@ -21,6 +21,7 @@ from .auth import (
     get_password_hash,
     get_user_by_email,
     get_current_user,
+    get_or_create_guest_user,
     get_user_from_token,
     verify_password,
 )
@@ -226,7 +227,6 @@ def me(user: Optional[User] = Depends(get_current_user)):
 # --- Detection route ---
 @app.post("/api/detect")
 async def detect(
-    request: Request,
     before: UploadFile = File(...),
     after: UploadFile = File(...),
     method: str = Form("AI-Based Deep Learning"),
@@ -238,21 +238,9 @@ async def detect(
     detection_sensitivity: float = Form(0.5),
     min_region_area: Optional[int] = Form(None),
     notify_email: Optional[str] = Form(None),
-    access_token: Optional[str] = Form(None),
     db: Session = Depends(get_db),
 ):
-    # Resolve user from token (header, cookie, or form - in case browser strips headers for multipart)
-    token = None
-    auth_header = request.headers.get("authorization") or request.headers.get("Authorization")
-    if auth_header and auth_header.lower().startswith("bearer "):
-        token = auth_header[7:].strip()
-    if not token:
-        token = request.cookies.get(COOKIE_NAME)
-    if not token:
-        token = access_token
-    user = get_user_from_token(token, db) if token else None
-    if not user:
-        raise HTTPException(status_code=401, detail="Login required")
+    user = get_or_create_guest_user(db)
     MAX_UPLOAD_BYTES = 20 * 1024 * 1024  # 20 MB
 
     def _read_upload(upload: UploadFile, field_name: str):
@@ -418,10 +406,9 @@ async def detect(
 @app.post("/api/notify/test")
 def notify_test(
     data: EmailRequest,
-    user: Optional[User] = Depends(get_current_user),
+    db: Session = Depends(get_db),
 ):
-    if not user:
-        raise HTTPException(status_code=401, detail="Login required")
+    get_or_create_guest_user(db)
     sent, error = send_test_email(data.email.strip())
     if not sent:
         raise HTTPException(status_code=400, detail=error or "Failed to send test email")
@@ -445,11 +432,9 @@ def serve_overlay(path: str):
 # --- History ---
 @app.get("/api/history")
 def history(
-    user: Optional[User] = Depends(get_current_user),
     db: Session = Depends(get_db),
 ):
-    if not user:
-        raise HTTPException(status_code=401, detail="Login required")
+    user = get_or_create_guest_user(db)
     runs = db.query(DetectionRun).filter(DetectionRun.user_id == user.id).order_by(DetectionRun.created_at.desc()).limit(100).all()
     return [
         {
@@ -474,12 +459,10 @@ def history(
 @app.get("/api/history/{run_id}")
 def get_run(
     run_id: int,
-    user: Optional[User] = Depends(get_current_user),
     db: Session = Depends(get_db),
 ):
     """Fetch a single run by id for opening from history (result view with slider, table, zoom)."""
-    if not user:
-        raise HTTPException(status_code=401, detail="Login required")
+    user = get_or_create_guest_user(db)
     run = db.query(DetectionRun).filter(DetectionRun.id == run_id, DetectionRun.user_id == user.id).first()
     if not run:
         raise HTTPException(status_code=404, detail="Run not found")
@@ -509,11 +492,9 @@ def get_run(
 def notify_run(
     run_id: int,
     data: EmailRequest,
-    user: Optional[User] = Depends(get_current_user),
     db: Session = Depends(get_db),
 ):
-    if not user:
-        raise HTTPException(status_code=401, detail="Login required")
+    user = get_or_create_guest_user(db)
     run = db.query(DetectionRun).filter(DetectionRun.id == run_id, DetectionRun.user_id == user.id).first()
     if not run:
         raise HTTPException(status_code=404, detail="Run not found")
@@ -539,11 +520,9 @@ def notify_run(
 @app.delete("/api/history/{run_id}")
 def delete_run(
     run_id: int,
-    user: Optional[User] = Depends(get_current_user),
     db: Session = Depends(get_db),
 ):
-    if not user:
-        raise HTTPException(status_code=401, detail="Login required")
+    user = get_or_create_guest_user(db)
     run = db.query(DetectionRun).filter(DetectionRun.id == run_id, DetectionRun.user_id == user.id).first()
     if not run:
         raise HTTPException(status_code=404, detail="Run not found")

static/css/style.css

@@ -337,12 +337,24 @@ input:focus, select:focus, textarea:focus {
 .btn-sm { font-size: 0.8rem; padding: 0.45rem 0.8rem; }
 .btn-lg { padding: 0.8rem 1.6rem; font-size: 0.95rem; }
 
-/* ---- Topbar (user avatar) ---- */
+/* ---- Topbar ---- */
 .topbar {
   display: flex;
-  justify-content: flex-end;
+  justify-content: flex-start;
   margin-bottom: 1rem;
 }
+.app-brand {
+  display: flex;
+  align-items: center;
+  gap: 0.6rem;
+  font-weight: 600;
+  font-size: 1.05rem;
+  color: var(--text);
+}
+.app-brand svg {
+  color: var(--grad-start);
+  flex-shrink: 0;
+}
 .nav-user {
   position: relative;
 }

static/js/app.js

@@ -1,15 +1,16 @@
 const API_BASE = '';
 
-function getToken() { return localStorage.getItem('token'); }
-function setToken(token) {
-  if (token) localStorage.setItem('token', token);
-  else localStorage.removeItem('token');
-}
-
-function showView(id) {
-  document.querySelectorAll('.view').forEach(v => v.classList.remove('active'));
-  const el = document.getElementById('view-' + id);
-  if (el) el.classList.add('active');
+async function api(method, path, options = {}) {
+  const headers = { ...options.headers };
+  if (options.body && !(options.body instanceof FormData)) {
+    headers['Content-Type'] = 'application/json';
+  }
+  const res = await fetch(API_BASE + path, { method, headers, credentials: 'include', ...options });
+  const text = await res.text();
+  let data = null;
+  try { data = text ? JSON.parse(text) : null; } catch (_) {}
+  if (!res.ok) throw new Error(data?.detail || res.statusText || 'Request failed');
+  return data;
 }
 
 function showError(id, msg) {
@@ -34,120 +35,10 @@ function isValidEmail(email) {
   return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test((email || '').trim());
 }
 
-async function api(method, path, options = {}) {
-  const headers = { ...options.headers };
-  const token = getToken();
-  if (token) headers['Authorization'] = 'Bearer ' + token;
-  if (options.body && !(options.body instanceof FormData)) {
-    headers['Content-Type'] = 'application/json';
-  }
-  const res = await fetch(API_BASE + path, { method, headers, credentials: 'include', ...options });
-  const text = await res.text();
-  let data = null;
-  try { data = text ? JSON.parse(text) : null; } catch (_) {}
-  if (!res.ok) throw new Error(data?.detail || res.statusText || 'Request failed');
-  return data;
-}
-
-// ---- Auth ----
-document.getElementById('form-login')?.addEventListener('submit', async (e) => {
-  e.preventDefault();
-  hideError('login-error');
-  const email = document.getElementById('login-email').value.trim();
-  const password = document.getElementById('login-password').value;
-  try {
-    const data = await api('POST', '/api/auth/login', { body: JSON.stringify({ email, password }) });
-    setToken(data.access_token);
-    document.getElementById('user-email').textContent = data.user.email;
-    handlePostAuthNavigation();
-  } catch (err) { showError('login-error', err.message); }
-});
-
-document.getElementById('form-register')?.addEventListener('submit', async (e) => {
-  e.preventDefault();
-  hideError('register-error');
-  const full_name = document.getElementById('register-name').value.trim();
-  const email = document.getElementById('register-email').value.trim();
-  const password = document.getElementById('register-password').value;
-  try {
-    const data = await api('POST', '/api/auth/register', { body: JSON.stringify({ email, password, full_name }) });
-    setToken(data.access_token);
-    document.getElementById('user-email').textContent = data.user.email;
-    handlePostAuthNavigation();
-  } catch (err) { showError('register-error', err.message); }
-});
-
-function handlePostAuthNavigation() {
-  showView('dashboard');
+function init() {
   loadHistory();
 }
 
-// ---- Forgot password ----
-document.getElementById('form-forgot')?.addEventListener('submit', async (e) => {
-  e.preventDefault();
-  hideError('forgot-error');
-  hideError('forgot-success');
-  const email = document.getElementById('forgot-email').value.trim();
-  const new_password = document.getElementById('forgot-password').value;
-  try {
-    const data = await api('POST', '/api/auth/reset-password', { body: JSON.stringify({ email, new_password }) });
-    showSuccess('forgot-success', data.message || 'Password reset! You can now sign in.');
-    document.getElementById('form-forgot').reset();
-  } catch (err) { showError('forgot-error', err.message); }
-});
-
-// ---- Password visibility toggle ----
-document.querySelectorAll('.password-toggle').forEach((btn) => {
-  btn.addEventListener('click', () => {
-    const input = document.getElementById(btn.dataset.target);
-    if (!input) return;
-    const showing = input.type !== 'password';
-    input.type = showing ? 'password' : 'text';
-    btn.style.opacity = showing ? '' : '0.9';
-  });
-});
-
-document.querySelectorAll('[data-view]').forEach((a) => {
-  a.addEventListener('click', (e) => {
-    e.preventDefault();
-    showView(a.getAttribute('data-view'));
-    hideError('login-error');
-    hideError('register-error');
-    hideError('forgot-error');
-    hideError('forgot-success');
-  });
-});
-
-document.getElementById('btn-logout')?.addEventListener('click', async () => {
-  try { await fetch(API_BASE + '/api/auth/logout', { method: 'POST', credentials: 'include' }); } catch (_) {}
-  setToken(null);
-  document.getElementById('nav-dropdown')?.classList.add('hidden');
-  showView('login');
-});
-
-// ---- Avatar dropdown toggle ----
-document.getElementById('btn-avatar')?.addEventListener('click', (e) => {
-  e.stopPropagation();
-  document.getElementById('nav-dropdown')?.classList.toggle('hidden');
-});
-document.addEventListener('click', (e) => {
-  const dd = document.getElementById('nav-dropdown');
-  if (dd && !dd.classList.contains('hidden') && !e.target.closest('.nav-user')) {
-    dd.classList.add('hidden');
-  }
-});
-
-async function init() {
-  const token = getToken();
-  if (!token) { showView('login'); return; }
-  try {
-    const user = await api('GET', '/api/me');
-    document.getElementById('user-email').textContent = user.email;
-    showView('dashboard');
-    loadHistory();
-  } catch (_) { setToken(null); showView('login'); }
-}
-
 // ---- Upload zones with preview ----
 function setupUploadZone(inputId, nameId, zoneId, previewId) {
   const input = document.getElementById(inputId);
@@ -409,7 +300,6 @@ document.getElementById('form-detect')?.addEventListener('submit', async (e) =>
   loading.classList.remove('hidden');
   startDetectionProgress();
 
-  const token = getToken();
   const form = new FormData();
   form.append('before', before);
   form.append('after', after);
@@ -457,15 +347,7 @@ document.getElementById('form-detect')?.addEventListener('submit', async (e) =>
     form.append('notify_email', email);
   }
 
-  if (token) form.append('access_token', token);
-
   try {
-    if (!token) {
-      showError('dashboard-error', 'Session expired. Please sign in again.');
-      setToken(null);
-      showView('login');
-      return;
-    }
     const data = await api('POST', '/api/detect', { body: form });
     showResult(data);
     const notifyCbDone = document.getElementById('detect-notify');

templates/index.html

@@ -4,147 +4,16 @@
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1.0" />
   <title>AI Change Detection</title>
-  <link rel="stylesheet" href="/static/css/style.css?v=26" />
+  <link rel="stylesheet" href="/static/css/style.css?v=28" />
 </head>
 <body>
   <div class="app">
-    <!-- Login view -->
-    <section id="view-login" class="view">
-      <div class="auth-container">
-        <div class="auth-logo">
-          <div class="auth-logo-icon">
-            <svg width="36" height="36" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><path d="M2 12h20"/><path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10 15.3 15.3 0 01-4-10 15.3 15.3 0 014-10z"/></svg>
-          </div>
-          <span>AI Change Detection</span>
-        </div>
-        <div class="card">
-          <h2>Welcome back</h2>
-          <p class="sub">Sign in to your account to continue.</p>
-          <div id="login-error" class="alert alert-error hidden"></div>
-          <form id="form-login">
-            <div class="form-group">
-              <label for="login-email">Email</label>
-              <input type="email" id="login-email" required placeholder="you@example.com" />
-            </div>
-            <div class="form-group">
-              <label for="login-password">Password</label>
-              <div class="input-password-wrap">
-                <input type="password" id="login-password" required placeholder="Enter your password" />
-                <button type="button" class="password-toggle" data-target="login-password" aria-label="Toggle password visibility">
-                  <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"/><circle cx="12" cy="12" r="3"/></svg>
-                </button>
-              </div>
-            </div>
-            <div class="auth-actions">
-              <button type="submit" class="btn btn-primary btn-block">Sign in</button>
-            </div>
-          </form>
-          <p class="forgot-link"><a href="#" data-view="forgot">Forgot your password?</a></p>
-          <p class="toggle-auth">Don't have an account? <a href="#" data-view="register">Create one</a></p>
-        </div>
-      </div>
-    </section>
-
-    <!-- Register view -->
-    <section id="view-register" class="view">
-      <div class="auth-container">
-        <div class="auth-logo">
-          <div class="auth-logo-icon">
-            <svg width="36" height="36" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><path d="M2 12h20"/><path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10 15.3 15.3 0 01-4-10 15.3 15.3 0 014-10z"/></svg>
-          </div>
-          <span>AI Change Detection</span>
-        </div>
-        <div class="card">
-          <h2>Create account</h2>
-          <p class="sub">Register to save and manage your detection runs.</p>
-          <div id="register-error" class="alert alert-error hidden"></div>
-          <form id="form-register">
-            <div class="form-group">
-              <label for="register-name">Full name</label>
-              <input type="text" id="register-name" placeholder="Your name" />
-            </div>
-            <div class="form-group">
-              <label for="register-email">Email</label>
-              <input type="email" id="register-email" required placeholder="you@example.com" />
-            </div>
-            <div class="form-group">
-              <label for="register-password">Password</label>
-              <div class="input-password-wrap">
-                <input type="password" id="register-password" required placeholder="Min. 6 characters" minlength="6" />
-                <button type="button" class="password-toggle" data-target="register-password" aria-label="Toggle password visibility">
-                  <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"/><circle cx="12" cy="12" r="3"/></svg>
-                </button>
-              </div>
-            </div>
-            <div class="auth-actions">
-              <button type="submit" class="btn btn-primary btn-block">Create account</button>
-            </div>
-          </form>
-          <p class="toggle-auth">Already have an account? <a href="#" data-view="login">Sign in</a></p>
-        </div>
-      </div>
-    </section>
-
-    <!-- Forgot password view -->
-    <section id="view-forgot" class="view">
-      <div class="auth-container">
-        <div class="auth-logo">
-          <div class="auth-logo-icon">
-            <svg width="36" height="36" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><path d="M2 12h20"/><path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10 15.3 15.3 0 01-4-10 15.3 15.3 0 014-10z"/></svg>
-          </div>
-          <span>AI Change Detection</span>
-        </div>
-        <div class="card">
-          <div class="forgot-header-icon">
-            <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="11" width="18" height="11" rx="2" ry="2"/><path d="M7 11V7a5 5 0 0110 0v4"/></svg>
-          </div>
-          <h2 style="text-align:center;">Reset your password</h2>
-          <p class="sub" style="text-align:center;">Enter the email you registered with and choose a new password.</p>
-          <div id="forgot-error" class="alert alert-error hidden"></div>
-          <div id="forgot-success" class="alert alert-success hidden"></div>
-          <form id="form-forgot">
-            <div class="form-group">
-              <label for="forgot-email">Email address</label>
-              <input type="email" id="forgot-email" required placeholder="you@example.com" />
-            </div>
-            <div class="form-group">
-              <label for="forgot-password">New password</label>
-              <div class="input-password-wrap">
-                <input type="password" id="forgot-password" required placeholder="Min. 6 characters" minlength="6" />
-                <button type="button" class="password-toggle" data-target="forgot-password" aria-label="Toggle password visibility">
-                  <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"/><circle cx="12" cy="12" r="3"/></svg>
-                </button>
-              </div>
-            </div>
-            <div class="auth-actions">
-              <button type="submit" class="btn btn-primary btn-block">Reset password</button>
-            </div>
-          </form>
-          <div style="text-align:center;">
-            <a href="#" class="back-to-login" data-view="login">
-              <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><line x1="19" y1="12" x2="5" y2="12"/><polyline points="12 19 5 12 12 5"/></svg>
-              Back to sign in
-            </a>
-          </div>
-        </div>
-      </div>
-    </section>
-
-    <!-- Dashboard view -->
-    <section id="view-dashboard" class="view">
+    <!-- Detection dashboard (shown immediately — no login) -->
+    <section id="view-dashboard" class="view active">
       <div class="topbar">
-        <div class="nav-user">
-          <button type="button" class="nav-avatar" id="btn-avatar" aria-label="Account menu">
-            <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M20 21v-2a4 4 0 00-4-4H8a4 4 0 00-4 4v2"/><circle cx="12" cy="7" r="4"/></svg>
-          </button>
-          <div class="nav-dropdown hidden" id="nav-dropdown">
-            <div class="nav-dropdown-email" id="user-email"></div>
-            <div class="nav-dropdown-divider"></div>
-            <button type="button" class="nav-dropdown-item" id="btn-logout">
-              <svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M9 21H5a2 2 0 01-2-2V5a2 2 0 012-2h4"/><polyline points="16 17 21 12 16 7"/><line x1="21" y1="12" x2="9" y2="12"/></svg>
-              Log out
-            </button>
-          </div>
+        <div class="app-brand">
+          <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><path d="M2 12h20"/><path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10 15.3 15.3 0 01-4-10 15.3 15.3 0 014-10z"/></svg>
+          <span>AI Change Detection</span>
         </div>
       </div>
 
@@ -364,6 +233,6 @@
     </div>
   </div>
 
-  <script src="/static/js/app.js?v=41"></script>
+  <script src="/static/js/app.js?v=42"></script>
 </body>
 </html>