rstillwell/deckhearth
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

🔍 Add Authentication Debugging

Browse source 
- Added debug logging to getUserFromRequest function
- Log when no auth header is found vs when token verification fails
- Log token verification attempts and decoded results
- This will help identify why 'All My Cards' collection lookup is failing

The issue appears to be that the development fallback always returns admin user,
but users are trying to access collections belonging to other users (like Bob).
This debugging will help us see if tokens are being sent properly.
This commit is contained in:
Randall Stillwell 2025-07-27 21:22:25 -05:00
parent 7d385d1fa7
commit 85131240e5
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
lib/permission-middleware.js
View file

@ -13,11 +13,14 @@ export async function getUserFromRequest(req) {
if (!authHeader || !authHeader.startsWith('Bearer ')) { if (!authHeader || !authHeader.startsWith('Bearer ')) {
// For development, return user ID 1 if no token (should be removed in production) // For development, return user ID 1 if no token (should be removed in production)
console.warn('⚠️ Development mode: Using fallback user authentication'); console.warn('⚠️ Development mode: Using fallback user authentication');
console.warn('⚠️ No auth header found:', authHeader);
return { userId: 1, email: 'admin@tcgvault.com', role: 'admin' }; return { userId: 1, email: 'admin@tcgvault.com', role: 'admin' };
} }
const token = authHeader.substring(7); const token = authHeader.substring(7);
console.log('🔍 Attempting to verify token:', token.substring(0, 20) + '...');
const decoded = jwt.verify(token, JWT_SECRET); const decoded = jwt.verify(token, JWT_SECRET);
console.log('✅ Token decoded successfully:', decoded);
// Get user data from database // Get user data from database
const result = await sql` const result = await sql`