@moneybar.online/moneybar 3.9.0 → 4.0.0

package/moneybar-config-template.js

@@ -19,6 +19,7 @@ import { MoneyBar } from 'https://cdn.jsdelivr.net/npm/@moneybar.online/moneybar
 const VALUE_FIRST_CONFIG = {
   actionFunction: 'generatePDF',
   appId: 'pdf-generator',
+  security_key: 'sk_YOUR_SECURITY_KEY_HERE', // 🔐 Add your security key from Supabase
   freeAttemptLimit: 3,
   supabase: {
     url: 'https://qhlzdkwcrrjjcqvupyaa.supabase.co',
@@ -50,6 +51,7 @@ const VALUE_FIRST_CONFIG = {
 const FEEDBACK_INTELLIGENCE_CONFIG = {
   actionFunction: 'runAnalysis',
   appId: 'saas-analytics',
+  security_key: 'sk_YOUR_SECURITY_KEY_HERE', // 🔐 Add your security key from Supabase
   freeAttemptLimit: 3,
   supabase: {
     url: 'https://qhlzdkwcrrjjcqvupyaa.supabase.co',
@@ -90,6 +92,7 @@ const FEEDBACK_INTELLIGENCE_CONFIG = {
 const INSTANT_PAYMENT_CONFIG = {
   actionFunction: 'createTemplate',
   appId: 'template-creator',
+  security_key: 'sk_YOUR_SECURITY_KEY_HERE', // 🔐 Add your security key from Supabase
   freeAttemptLimit: 5,
   supabase: {
     url: 'https://qhlzdkwcrrjjcqvupyaa.supabase.co',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moneybar.online/moneybar",
-  "version": "3.9.0",
+  "version": "4.0.0",
   "description": "The navbar of monetization. Fix the 3 money-blocking stages: forced sign-ins, silent drop-offs, and broken payment flows. Turn browsers into buyers.",
   "main": "dist/index.esm.js",
   "module": "dist/index.esm.js",

package/src/index.ts

@@ -3143,7 +3143,7 @@ User Agent: ${feedbackData.userAgent}
         },
         body: JSON.stringify({
           fingerprint: this.userFingerprint,
-          app_id: this.config.appId,
+          security_key: this.config.security_key,
           action: 'check'
         })
       });
@@ -3156,7 +3156,21 @@ User Agent: ${feedbackData.userAgent}
       } else {
         // Handle auth errors (401/403) as connection failures
         if (response.status === 401 || response.status === 403) {
-          console.warn(`Supabase authentication failed: ${response.status} - Invalid anon key`);
+          // Try to get the actual error message from response
+          try {
+            const errorData = await response.json();
+            const errorMsg = errorData.error || errorData.message || 'Authentication failed';
+
+            // Check if it's a security key validation error
+            if (errorMsg.toLowerCase().includes('security key')) {
+              console.error(`❌ Security Key Validation Failed: ${errorMsg}`);
+              console.error(`💡 Please check your security_key in the MoneyBar configuration`);
+            } else {
+              console.warn(`Supabase authentication failed: ${response.status} - ${errorMsg}`);
+            }
+          } catch (e) {
+            console.warn(`Supabase authentication failed: ${response.status} - Unable to parse error`);
+          }
           this.supabaseConnectionFailed = true;
         }
       }
@@ -3182,7 +3196,7 @@ User Agent: ${feedbackData.userAgent}
 
     const requestBody = {
       fingerprint: this.userFingerprint,
-      app_id: this.config.appId,
+      security_key: this.config.security_key,
       action: 'increment'
     };
 
@@ -3214,7 +3228,21 @@ User Agent: ${feedbackData.userAgent}
       } else {
         // Handle auth errors (401/403) as connection failures
         if (response.status === 401 || response.status === 403) {
-          console.warn(`Supabase authentication failed: ${response.status} - Invalid anon key`);
+          // Try to get the actual error message from response
+          try {
+            const errorData = await response.json();
+            const errorMsg = errorData.error || errorData.message || 'Authentication failed';
+
+            // Check if it's a security key validation error
+            if (errorMsg.toLowerCase().includes('security key')) {
+              console.error(`❌ Security Key Validation Failed: ${errorMsg}`);
+              console.error(`💡 Please check your security_key in the MoneyBar configuration`);
+            } else {
+              console.warn(`Supabase authentication failed: ${response.status} - ${errorMsg}`);
+            }
+          } catch (e) {
+            console.warn(`Supabase authentication failed: ${response.status} - Unable to parse error`);
+          }
           this.supabaseConnectionFailed = true;
         }
       }

package/src/types.ts

@@ -2,6 +2,9 @@ export interface MoneyBarConfig {
   /** Unique identifier for your app (e.g., 'gif-maker', 'pdf-creator') */
   appId: string;
 
+  /** Security key for domain-based authentication (REQUIRED) */
+  security_key: string;
+
   /** Number of free attempts allowed before paywall */
   freeAttemptLimit: number;