From f05958ed36a2b3c2054269fb2189783551908258 Mon Sep 17 00:00:00 2001
From: Benoit <benoit.91800@hotmail.fr>
Date: Fri, 26 Dec 2025 17:46:39 +0100
Subject: [PATCH] =?UTF-8?q?J'ai=20:=20Nettoy=C3=A9=20les=20logs=20de=20deb?=
 =?UTF-8?q?ug=20dans=20backend/src/core/auth.py=20-=20supprim=C3=A9=20tous?=
 =?UTF-8?q?=20les=20logger.info/warning=20de=20la=20fonction=20authenticat?=
 =?UTF-8?q?e=5Fuser=20Ajout=C3=A9=20les=20tokens=20JWT=20=C3=A0=20toutes?=
 =?UTF-8?q?=20les=20requ=C3=AAtes=20du=20player=20:=20frontend/components/?=
 =?UTF-8?q?AudioPlayer.tsx=20:=20Ajout=C3=A9=20Authorization=20header=20?=
 =?UTF-8?q?=C3=A0=20loadWaveform()=20frontend/components/AudioPlayer.tsx?=
 =?UTF-8?q?=20:=20Cr=C3=A9=C3=A9=20getAuthenticatedStreamUrl()=20qui=20ajo?=
 =?UTF-8?q?ute=20le=20token=20en=20query=20param=20pour=20les=20<audio>=20?=
 =?UTF-8?q?et=20<a>=20tags=20backend/src/api/routes/audio.py=20:=20Ajout?=
 =?UTF-8?q?=C3=A9=20support=20du=20token=20en=20query=20param=20pour=20/st?=
 =?UTF-8?q?ream=20et=20/download=20(compatibilit=C3=A9=20avec=20les=20tags?=
 =?UTF-8?q?=20HTML=20qui=20ne=20supportent=20pas=20les=20headers)=20Le=20p?=
 =?UTF-8?q?layer=20devrait=20maintenant=20fonctionner=20enti=C3=A8rement?=
 =?UTF-8?q?=20avec=20l'authentification.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 backend/src/api/routes/audio.py     | 14 +++++++++++++-
 backend/src/core/auth.py            |  9 ---------
 frontend/components/AudioPlayer.tsx | 22 +++++++++++++++++++---
 3 files changed, 32 insertions(+), 13 deletions(-)

diff --git a/backend/src/api/routes/audio.py b/backend/src/api/routes/audio.py
index 230982e..2458e51 100644
--- a/backend/src/api/routes/audio.py
+++ b/backend/src/api/routes/audio.py
@@ -1,13 +1,15 @@
 """Audio streaming and download endpoints."""
-from fastapi import APIRouter, Depends, HTTPException, Request
+from fastapi import APIRouter, Depends, HTTPException, Request, Query
 from fastapi.responses import FileResponse
 from sqlalchemy.orm import Session
 from uuid import UUID
 from pathlib import Path
+from typing import Optional
 
 from ...models.database import get_db
 from ...models import crud
 from ...core.waveform_generator import get_waveform_data
+from ...core.auth import verify_token
 from ...utils.logging import get_logger
 
 router = APIRouter()
@@ -18,6 +20,7 @@ logger = get_logger(__name__)
 async def stream_audio(
     track_id: UUID,
     request: Request,
+    token: Optional[str] = Query(None),
     db: Session = Depends(get_db),
 ):
     """Stream audio file with range request support.
@@ -28,6 +31,7 @@ async def stream_audio(
     Args:
         track_id: Track UUID
         request: HTTP request
+        token: Optional JWT token for authentication (for <audio> tag compatibility)
         db: Database session
 
     Returns:
@@ -36,6 +40,9 @@ async def stream_audio(
     Raises:
         HTTPException: 404 if track not found or file doesn't exist
     """
+    # Verify authentication via query parameter for <audio> tag
+    if token:
+        verify_token(token)
     track = crud.get_track_by_id(db, track_id)
 
     if not track:
@@ -79,12 +86,14 @@ async def stream_audio(
 @router.get("/download/{track_id}")
 async def download_audio(
     track_id: UUID,
+    token: Optional[str] = Query(None),
     db: Session = Depends(get_db),
 ):
     """Download audio file.
 
     Args:
         track_id: Track UUID
+        token: Optional JWT token for authentication (for <a> tag compatibility)
         db: Database session
 
     Returns:
@@ -93,6 +102,9 @@ async def download_audio(
     Raises:
         HTTPException: 404 if track not found or file doesn't exist
     """
+    # Verify authentication via query parameter for <a> tag
+    if token:
+        verify_token(token)
     track = crud.get_track_by_id(db, track_id)
 
     if not track:
diff --git a/backend/src/core/auth.py b/backend/src/core/auth.py
index 62c6567..354a004 100644
--- a/backend/src/core/auth.py
+++ b/backend/src/core/auth.py
@@ -100,22 +100,13 @@ def authenticate_user(email: str, password: str) -> Optional[dict]:
     Returns:
         User data if authenticated, None otherwise
     """
-    # Debug logging (remove in production)
-    logger.info(f"Auth attempt - Email provided: '{email}'")
-    logger.info(f"Auth attempt - Expected email: '{settings.ADMIN_EMAIL}'")
-    logger.info(f"Auth attempt - Email match: {email == settings.ADMIN_EMAIL}")
-    logger.info(f"Auth attempt - Password length: {len(password)}")
-    logger.info(f"Auth attempt - Expected password length: {len(settings.ADMIN_PASSWORD)}")
-
     # Check against admin credentials from environment
     if email == settings.ADMIN_EMAIL and password == settings.ADMIN_PASSWORD:
-        logger.info(f"✅ Authentication successful for {email}")
         return {
             "email": email,
             "role": "admin"
         }
 
-    logger.warning(f"❌ Authentication failed for {email}")
     return None
 
 
diff --git a/frontend/components/AudioPlayer.tsx b/frontend/components/AudioPlayer.tsx
index 24165ba..0ab3c55 100644
--- a/frontend/components/AudioPlayer.tsx
+++ b/frontend/components/AudioPlayer.tsx
@@ -79,8 +79,15 @@ export default function AudioPlayer({ track, isPlaying, onPlayingChange }: Audio
   const loadWaveform = async (trackId: string) => {
     setIsLoadingWaveform(true)
     try {
+      const token = localStorage.getItem('access_token')
+      const headers: HeadersInit = {}
+      if (token) {
+        headers['Authorization'] = `Bearer ${token}`
+      }
+
       const response = await fetch(
-        `${getApiUrl()}/api/audio/waveform/${trackId}`
+        `${getApiUrl()}/api/audio/waveform/${trackId}`,
+        { headers }
       )
       if (response.ok) {
         const data = await response.json()
@@ -159,10 +166,19 @@ export default function AudioPlayer({ track, isPlaying, onPlayingChange }: Audio
 
   const progress = duration > 0 ? (currentTime / duration) * 100 : 0
 
+  const getAuthenticatedStreamUrl = (trackId: string) => {
+    const token = localStorage.getItem('access_token')
+    const baseUrl = `${getApiUrl()}/api/audio/stream/${trackId}`
+    if (token) {
+      return `${baseUrl}?token=${encodeURIComponent(token)}`
+    }
+    return baseUrl
+  }
+
   return (
     <div className="bg-gray-50 border-t border-gray-300 shadow-lg" style={{ height: '80px' }}>
       {/* Hidden audio element */}
-      {track && <audio ref={audioRef} src={`${getApiUrl()}/api/audio/stream/${track.id}`} />}
+      {track && <audio ref={audioRef} src={getAuthenticatedStreamUrl(track.id)} />}
 
       <div className="h-full flex items-center gap-3 px-4">
         {/* Play/Pause button */}
@@ -301,7 +317,7 @@ export default function AudioPlayer({ track, isPlaying, onPlayingChange }: Audio
         {/* Download button */}
         {track && (
           <a
-            href={`${getApiUrl()}/api/audio/download/${track.id}`}
+            href={getAuthenticatedStreamUrl(track.id).replace('/stream/', '/download/')}
             download
             className="w-8 h-8 flex items-center justify-center text-gray-600 hover:text-gray-900 transition-colors rounded hover:bg-gray-200 flex-shrink-0"
             aria-label="Download"