Function process_video

backend/app.py:59–151

(request: Request)

        modal.Secret.from_name("webhook-secret"),
    ]
)
@modal.fastapi_endpoint(method="POST")
async def process_video(request: Request):
    auth_header = request.headers.get("Authorization", "")
    expected_secret = os.environ.get("MODAL_WEBHOOK_SECRET", "")
    # hmac.compare_digest avoids the byte-by-byte short-circuit that lets a
    # network-adjacent attacker enumerate the secret via response timing.
    if not expected_secret or not hmac.compare_digest(
        auth_header, f"Bearer {expected_secret}"
    ):
        raise HTTPException(status_code=401, detail="Unauthorized")

    try:
        payload = await request.json()
        if not isinstance(payload, dict):
            raise ValueError("Expected an object")
        match_id = payload.get("match_id")
        file_key = payload.get("file_key")
        if not isinstance(match_id, str):
            raise ValueError("Missing recording ID")
        uuid.UUID(match_id)
        if not isinstance(file_key, str) or not file_key.startswith(f"{match_id}/"):
            raise ValueError("Storage key does not belong to the recording")
        if any(part in ("", ".", "..") for part in file_key.split("/")):
            raise ValueError("Invalid storage key")
    except (ValueError, TypeError):
        return JSONResponse({"error": "Invalid recording ID or storage key."}, status_code=400)

    supabase = None

    def _stage(stage: str, progress: float, *, failure: str | None = None) -> None:
        """Write an early-stage breadcrumb to Supabase so the UI shows what's
        happening during the 15-90s window between the trigger-process webhook
        and run_pipeline's heartbeat. Without this the page sat on
        'Calibrating the court · STARTING' (derived stage from progress=0)
        for the entire Modal cold-start + download + import phase.
        Defensive on column-missing so an un-migrated environment still
        runs to completion."""
        nonlocal supabase
        payload: dict = {"progress": round(float(progress), 3), "processing_stage": stage}
        if failure:
            payload = {**payload, "status": "failed", "error": failure}
        try:
            if supabase is None:
                from supabase import create_client
                supabase = create_client(os.environ["SUPABASE_URL"], os.environ["SUPABASE_SERVICE_ROLE_KEY"])
            supabase.table("matches").update(payload).eq("id", match_id).execute()
            print(f"[Stage] {stage} ({progress:.3f})", flush=True)
        except Exception as e:
            payload.pop("processing_stage", None)
            try:
                supabase.table("matches").update(payload).eq("id", match_id).execute()
                print(f"[Stage] {stage} ({progress:.3f}) — stage col missing", flush=True)
            except Exception as e2:
                print(f"[Stage] {stage} write failed: {e2}", flush=True)

    try:
        from supabase import create_client