bulltrackers-module 1.0.598 → 1.0.600

package/functions/api-v2/helpers/data-fetchers/firestore.js

@@ -541,7 +541,7 @@ const lookupCidByEmail = async (firestore, userEmail) => {
             const verificationRef = userDoc.ref.collection('verification').doc('data');
             const verificationDoc = await verificationRef.get();
             
-            if (verificationDoc.exists()) {
+            if (verificationDoc.exists) {
                 const verificationData = verificationDoc.data();
                 const emails = Array.isArray(verificationData.email) 
                     ? verificationData.email 

package/functions/api-v2/middleware/identity_middleware.js

@@ -12,12 +12,14 @@
 const { isDeveloper } = require('../helpers/data-fetchers/firestore.js'); // Using your provided helper
 
 // List of public routes that don't require userCid
+// Also includes routes that use Firebase Auth token authentication (like /verification/lookup)
 const PUBLIC_ROUTES = [
     '/watchlists/public',
     '/popular-investors/trending',
     '/popular-investors/categories',
     '/popular-investors/master-list',
-    '/popular-investors/search'
+    '/popular-investors/search',
+    '/verification/lookup' // Uses Firebase Auth token instead of userCid
 ];
 
 const isPublicRoute = (path, originalUrl) => {
@@ -31,16 +33,21 @@ const resolveUserIdentity = async (req, res, next) => {
         // Check if this is a public route (check both path and originalUrl for Express routing)
         const isPublic = isPublicRoute(req.path, req.originalUrl);
         
+        // Check if route uses Firebase Auth token (has Authorization header with Bearer token)
+        // These routes authenticate via Firebase Auth token, not userCid
+        const hasFirebaseAuth = req.headers.authorization && 
+                                req.headers.authorization.startsWith('Bearer ');
+        
         // 1. Identify the actual authenticated user (from Auth middleware or params)
         const actualUserId = req.query.userCid || req.body.userCid || req.headers['x-user-cid'];
         
-        // For public routes, userCid is optional
-        if (!actualUserId && !isPublic) {
+        // For public routes or Firebase Auth routes, userCid is optional
+        if (!actualUserId && !isPublic && !hasFirebaseAuth) {
             return res.status(400).json({ error: "Missing user identification (userCid)" });
         }
 
-        // If no user ID provided and it's a public route, skip identity resolution
-        if (!actualUserId && isPublic) {
+        // If no user ID provided and it's a public route or uses Firebase Auth, skip identity resolution
+        if (!actualUserId && (isPublic || hasFirebaseAuth)) {
             req.actualUserId = null;
             req.targetUserId = null;
             req.isImpersonating = false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bulltrackers-module",
-  "version": "1.0.598",
+  "version": "1.0.600",
   "description": "Helper Functions for Bulltrackers.",
   "main": "index.js",
   "files": [