From 32632c1c35e53a1e10b586cd750fd935740c2824 Mon Sep 17 00:00:00 2001
From: admtracksteel <admtracksteel@gmail.com>
Date: Thu, 27 Aug 2026 14:44:32 +0000
Subject: [PATCH] Fix CORS and linting in app.ts for stable deploy

---
 src/server/app.ts                  | 4 ++--
 src/server/middleware/logtoAuth.ts | 3 +++
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/server/app.ts b/src/server/app.ts
index 86f78e1..295bc51 100644
--- a/src/server/app.ts
+++ b/src/server/app.ts
@@ -58,7 +58,7 @@ app.use(cors({
         }
     },
     methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
-    allowedHeaders: ['Content-Type', 'Authorization', 'x-organization-id']
+    allowedHeaders: ['Content-Type', 'Authorization', 'x-organization-id', 'x-organization-name']
 }));
 
 app.use(express.json({ limit: '5mb' }));
@@ -111,7 +111,7 @@ app.use((req, res, next) => {
 });
 
 // Error handler
-app.use((err: any, req: express.Request, res: express.Response, next: express.NextFunction) => {
+app.use((err: Error, req: express.Request, res: express.Response, _next: express.NextFunction) => {
     console.error('Express Error:', err);
     if (err.message === 'Not allowed by CORS') {
         return res.status(403).json({ error: 'CORS error' });
diff --git a/src/server/middleware/logtoAuth.ts b/src/server/middleware/logtoAuth.ts
index 3fd765d..1173b61 100644
--- a/src/server/middleware/logtoAuth.ts
+++ b/src/server/middleware/logtoAuth.ts
@@ -13,6 +13,7 @@ export async function authenticateRequest(req: Request): Promise<IAppUser | null
   const authHeader = req.headers.authorization;
   
   if (!authHeader?.startsWith('Bearer ')) {
+    console.log('[Auth] Missing or invalid authorization header:', authHeader);
     return null;
   }
   
@@ -28,6 +29,8 @@ export async function authenticateRequest(req: Request): Promise<IAppUser | null
     };
   }
   
+  console.log('[Auth] Verifying real token starting with:', token.substring(0, 15) + '...');
+  
   try {
     const { payload } = await jwtVerify(token, jwks, {
       issuer: `${LOGTO_URL}/oidc`,