Update server.js

server.js

@@ -47,19 +47,19 @@ async function extract(url, res){
 app.get ('/extract',(req,res)=>extract(req.query.url,res));
 app.post('/extract',(req,res)=>extract(req.body.url,res));
 
-/* POST /login  { "key": "secret" } */
-app.post('/login', async (req, res) => {
-/*  if (TOKEN && req.body.key !== TOKEN)
-    return res.status(401).json({ error: 'unauthorized' });*/
+/* POST /login  → { ok, screenshot_b64 } */
+app.post('/login', async (_req, res) => {
+  const out = await runLogin();
 
-  // optional: debounce so two calls don't overlap
-  if (app.locals.running) return res.status(429).json({ error: 'busy' });
-  app.locals.running = true;
+  if (!out.ok) {
+    return res.status(500).json(out);
+  }
 
-  const result = await runLogin();
-  app.locals.running = false;
-
-  res.json(result);
+  const b64 = out.png.toString('base64');
+  res.json({
+    ok: true,
+    screenshot_b64: 'data:image/png;base64,' + b64.slice(0),  // ready for <img src=...>
+  });
 });
 
 console.log('🛰️  Public URL will be:', HOSTNAME);