@access-dlsu/leapify 0.260507.4 → 0.260507.5

package/dist/lib/middleware/cors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/cors.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAE7C,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAgChF"}
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/cors.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAE7C,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,iBAAiB,CA6ChF"}

package/dist/lib/middleware/pow-challenge.cjs

@@ -1,29 +1,29 @@
 'use strict';
 
-var chunkBFMJDSDI_cjs = require('../../chunk-BFMJDSDI.cjs');
+var chunkLVKPYSXI_cjs = require('../../chunk-LVKPYSXI.cjs');
 require('../../chunk-EMMSS5I5.cjs');
 
 
 
 Object.defineProperty(exports, "POW_COOKIE_NAME", {
   enumerable: true,
-  get: function () { return chunkBFMJDSDI_cjs.POW_COOKIE_NAME; }
+  get: function () { return chunkLVKPYSXI_cjs.POW_COOKIE_NAME; }
 });
 Object.defineProperty(exports, "POW_PATH", {
   enumerable: true,
-  get: function () { return chunkBFMJDSDI_cjs.POW_PATH; }
+  get: function () { return chunkLVKPYSXI_cjs.POW_PATH; }
 });
 Object.defineProperty(exports, "POW_VERIFY_PATH", {
   enumerable: true,
-  get: function () { return chunkBFMJDSDI_cjs.POW_VERIFY_PATH; }
+  get: function () { return chunkLVKPYSXI_cjs.POW_VERIFY_PATH; }
 });
 Object.defineProperty(exports, "createPowChallengeMiddleware", {
   enumerable: true,
-  get: function () { return chunkBFMJDSDI_cjs.createPowChallengeMiddleware; }
+  get: function () { return chunkLVKPYSXI_cjs.createPowChallengeMiddleware; }
 });
 Object.defineProperty(exports, "handlePowVerify", {
   enumerable: true,
-  get: function () { return chunkBFMJDSDI_cjs.handlePowVerify; }
+  get: function () { return chunkLVKPYSXI_cjs.handlePowVerify; }
 });
 //# sourceMappingURL=pow-challenge.cjs.map
 //# sourceMappingURL=pow-challenge.cjs.map

package/dist/lib/middleware/pow-challenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pow-challenge.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/pow-challenge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAIlD,yCAAyC;AACzC,eAAO,MAAM,QAAQ,6BAA6B,CAAA;AAElD,sCAAsC;AACtC,eAAO,MAAM,eAAe,oCAAuB,CAAA;AAEnD,qCAAqC;AACrC,eAAO,MAAM,eAAe,gBAAgB,CAAA;AA2L5C;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAAC;;;;;;;;;;;;oEA+D1C;AAID;;;;;;;GAOG;AACH,wBAAgB,4BAA4B;cACN,eAAe;yBA2CpD"}
+{"version":3,"file":"pow-challenge.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/pow-challenge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAIlD,yCAAyC;AACzC,eAAO,MAAM,QAAQ,6BAA6B,CAAA;AAElD,sCAAsC;AACtC,eAAO,MAAM,eAAe,oCAAuB,CAAA;AAEnD,qCAAqC;AACrC,eAAO,MAAM,eAAe,gBAAgB,CAAA;AAmM5C;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAAC;;;;;;;;;;;;oEAkE1C;AAID;;;;;;;GAOG;AACH,wBAAgB,4BAA4B;cACN,eAAe;yBAgDpD"}

package/dist/lib/middleware/pow-challenge.js

@@ -1,4 +1,4 @@
-export { POW_COOKIE_NAME, POW_PATH, POW_VERIFY_PATH, createPowChallengeMiddleware, handlePowVerify } from '../../chunk-LJ5BSSYE.js';
+export { POW_COOKIE_NAME, POW_PATH, POW_VERIFY_PATH, createPowChallengeMiddleware, handlePowVerify } from '../../chunk-5YYVBPAE.js';
 import '../../chunk-G3PMV62Z.js';
 //# sourceMappingURL=pow-challenge.js.map
 //# sourceMappingURL=pow-challenge.js.map

package/dist/worker.js

@@ -25097,11 +25097,14 @@ function parseCmsMode(raw2) {
 
 // node_modules/hono/dist/middleware/cors/index.js
 var cors = (options) => {
-  const opts = {
+  const defaults = {
     origin: "*",
     allowMethods: ["GET", "HEAD", "PUT", "POST", "DELETE", "PATCH"],
     allowHeaders: [],
-    exposeHeaders: [],
+    exposeHeaders: []
+  };
+  const opts = {
+    ...defaults,
     ...options
   };
   const findAllowOrigin = ((optsOrigin) => {
@@ -25192,9 +25195,22 @@ function createCorsMiddleware(allowedOrigins) {
   });
   return async (c, next) => {
     const origin = c.req.header("origin");
+    if (c.req.path.startsWith("/api/uploads/images")) {
+      c.header("Access-Control-Allow-Origin", "*");
+      c.header("Access-Control-Allow-Methods", "GET, OPTIONS");
+      if (c.req.method === "OPTIONS") {
+        return c.body(null, 204);
+      }
+      return next();
+    }
     if (!c.req.path.startsWith("/health") && !c.req.path.startsWith("/api/auth") && !c.req.path.startsWith("/internal") && origin && !allowedOrigins.includes("*") && !allowedOrigins.includes(origin)) {
       return c.json(
-        { error: { code: "DOMAIN_RESTRICTED", message: `Origin ${origin} is not allowed` } },
+        {
+          error: {
+            code: "DOMAIN_RESTRICTED",
+            message: `Origin ${origin} is not allowed`
+          }
+        },
         403
       );
     }
@@ -25230,7 +25246,15 @@ var CHALLENGE_KV_PREFIX = "pow:challenge:";
 var DEFAULT_POW_DIFFICULTY = 4;
 var CHALLENGE_TTL_SEC = 120;
 var COOKIE_MAX_AGE_SEC = 3600;
-var EXEMPT_PATHS = ["/health", "/internal", "/api/auth"];
+var EXEMPT_PATHS = [
+  "/health",
+  "/internal",
+  "/api/auth",
+  "/api/uploads/images",
+  "/api/classes",
+  "/api/faqs",
+  "/api/config"
+];
 function base64urlEncode(bytes) {
   let binary2 = "";
   for (const byte of bytes) {
@@ -25395,16 +25419,23 @@ async function handlePowVerify(c) {
   const secret = c.env.INTERNAL_API_SECRET;
   const ip = getClientIp(c);
   const token = await signCookie(secret, ip);
+  const isSecure = c.req.raw.url.startsWith("https") || c.req.header("x-forwarded-proto") === "https";
   c.header(
     "Set-Cookie",
-    `${POW_COOKIE_NAME}=${token}; Path=/; Max-Age=${COOKIE_MAX_AGE_SEC}; Secure; HttpOnly; SameSite=Lax`
+    `${POW_COOKIE_NAME}=${token}; Path=/; Max-Age=${COOKIE_MAX_AGE_SEC}; ${isSecure ? "Secure; " : ""}HttpOnly; SameSite=Lax`
   );
   return c.json({ redirect: redir || "/" });
 }
 function createPowChallengeMiddleware() {
   return createMiddleware(async (c, next) => {
     if (c.req.path === POW_VERIFY_PATH) return next();
-    if (EXEMPT_PATHS.some((p) => c.req.path.startsWith(p))) return next();
+    const normalizedPath = c.req.path.toLowerCase().replace(/\/$/, "");
+    const isExempt = EXEMPT_PATHS.some((p) => {
+      const ep = p.toLowerCase().replace(/\/$/, "");
+      return normalizedPath === ep || normalizedPath.startsWith(ep + "/");
+    });
+    console.log(`[pow] path=${c.req.path} normalized=${normalizedPath} exempt=${isExempt}`);
+    if (isExempt) return next();
     if (c.req.method === "OPTIONS") return next();
     if (c.req.header("Authorization")) return next();
     const cookieHeader = c.req.header("Cookie") ?? "";
@@ -62840,11 +62871,21 @@ function createAuth(env2) {
             };
             if (isFirstUser) {
               await db.insert(users).values(base).onConflictDoUpdate({
-                target: users.betterAuthId,
-                set: { role: "super_admin" }
+                target: users.email,
+                set: {
+                  betterAuthId: user.id,
+                  role: "super_admin",
+                  name: user.name ?? user.email.split("@")[0]
+                }
               });
             } else {
-              await db.insert(users).values(base).onConflictDoNothing({ target: users.betterAuthId });
+              await db.insert(users).values(base).onConflictDoUpdate({
+                target: users.email,
+                set: {
+                  betterAuthId: user.id,
+                  name: user.name ?? user.email.split("@")[0]
+                }
+              });
             }
           }
         }
@@ -62873,7 +62914,13 @@ async function resolveUser(env2, betterAuthUserId, betterAuthUserEmail, betterAu
       betterAuthId: betterAuthUserId,
       email: betterAuthUserEmail,
       name: betterAuthUserName ?? betterAuthUserEmail.split("@")[0]
-    }).onConflictDoNothing({ target: users.betterAuthId }).returning();
+    }).onConflictDoUpdate({
+      target: users.email,
+      set: {
+        betterAuthId: betterAuthUserId,
+        name: betterAuthUserName ?? betterAuthUserEmail.split("@")[0]
+      }
+    }).returning();
     dbUser = created;
   }
   if (!dbUser) throw unauthorized("Failed to resolve user record");
@@ -66282,7 +66329,7 @@ async function ensureDatabase(d1) {
     try {
       await d1.prepare(sql3).run();
     } catch (err) {
-      if (err?.message?.includes("duplicate column") || err?.message?.includes("no such column: is_major")) {
+      if (err?.message?.includes("duplicate column") || err?.message?.includes("no such column") && err?.message?.includes("is_major")) {
         continue;
       }
       throw err;