@moneybar.online/moneybar 4.1.0 → 4.2.2

package/src/index.ts

@@ -226,6 +226,19 @@ export class MoneyBar {
       if (forceRefresh || !this.cachedStatus) {
         // Get download count only if we don't have it cached
         count = await this.getDownloadCount();
+
+        // CRITICAL: Check if security key validation failed
+        // Don't proceed with normal status if there's a security error
+        if (this.securityKeyFailed) {
+          // Return a minimal error status
+          return {
+            currentCount: 0,
+            limit: this.config.freeAttemptLimit,
+            isPremium: false,
+            isAuthenticated: false,
+            remaining: 0
+          };
+        }
       } else {
         // Use cached count if available to avoid unnecessary API call
         count = this.cachedStatus.currentCount;
@@ -2801,6 +2814,18 @@ User Agent: ${feedbackData.userAgent}
     }
 
     const status = await this.getDownloadStatus();
+
+    // CRITICAL: Check again AFTER API call - flag may have been set during getDownloadStatus
+    if (this.securityKeyFailed) {
+      this.disableDownloadButtons('security_key');
+      return;
+    }
+
+    if (this.supabaseConnectionFailed) {
+      this.disableDownloadButtons('connection');
+      return;
+    }
+
     this.updateUserSection(status);
   }
 
@@ -3181,12 +3206,13 @@ User Agent: ${feedbackData.userAgent}
 
             // Check if it's a security key validation error
             if (errorMsg.toLowerCase().includes('security key')) {
-              console.error(`❌ Security Key Validation Failed: ${errorMsg}`);
+              console.error(`❌ Security Key Validation Failed [check-download-limit]: ${errorMsg}`);
+              console.error(`💡 Backend Function: check-download-limit`);
               console.error(`💡 Please check your security_key in the MoneyBar configuration`);
               this.securityKeyFailed = true; // Set security key error flag
               this.supabaseConnectionFailed = true; // Also mark connection as failed to disable downloads
             } else {
-              console.warn(`Supabase authentication failed: ${response.status} - ${errorMsg}`);
+              console.warn(`Supabase authentication failed [check-download-limit]: ${response.status} - ${errorMsg}`);
               this.supabaseConnectionFailed = true;
             }
           } catch (e) {
@@ -3256,12 +3282,13 @@ User Agent: ${feedbackData.userAgent}
 
             // Check if it's a security key validation error
             if (errorMsg.toLowerCase().includes('security key')) {
-              console.error(`❌ Security Key Validation Failed: ${errorMsg}`);
+              console.error(`❌ Security Key Validation Failed [check-download-limit]: ${errorMsg}`);
+              console.error(`💡 Backend Function: check-download-limit`);
               console.error(`💡 Please check your security_key in the MoneyBar configuration`);
               this.securityKeyFailed = true; // Set security key error flag
               this.supabaseConnectionFailed = true; // Also mark connection as failed to disable downloads
             } else {
-              console.warn(`Supabase authentication failed: ${response.status} - ${errorMsg}`);
+              console.warn(`Supabase authentication failed [check-download-limit]: ${response.status} - ${errorMsg}`);
               this.supabaseConnectionFailed = true;
             }
           } catch (e) {