summaryrefslogtreecommitdiff
path: root/apps/web/src/app/api/waitlist/token/route.ts
diff options
context:
space:
mode:
authorKha Nguyen <hi@khanguyen.com>2025-07-24 17:04:27 -0500
committerKha Nguyen <hi@khanguyen.com>2025-07-24 17:04:27 -0500
commit8e737d87e0accbf1d433f4c8b1e8e0f125849799 (patch)
tree386560ac1449991da1ab6d43637e82046a725e71 /apps/web/src/app/api/waitlist/token/route.ts
parent1ccacf6bb5db579cf6f343d9de57bce92d296f5f (diff)
downloadopencut-8e737d87e0accbf1d433f4c8b1e8e0f125849799.tar.gz
Revert "merge main"
This reverts commit 1ccacf6bb5db579cf6f343d9de57bce92d296f5f.
Diffstat (limited to 'apps/web/src/app/api/waitlist/token/route.ts')
-rw-r--r--apps/web/src/app/api/waitlist/token/route.ts23
1 files changed, 4 insertions, 19 deletions
diff --git a/apps/web/src/app/api/waitlist/token/route.ts b/apps/web/src/app/api/waitlist/token/route.ts
index fc2ff32c..4c7695fa 100644
--- a/apps/web/src/app/api/waitlist/token/route.ts
+++ b/apps/web/src/app/api/waitlist/token/route.ts
@@ -5,10 +5,7 @@ import { env } from "@/env";
const CSRF_TOKEN_NAME = "waitlist-csrf";
const TOKEN_EXPIRY = 60 * 60 * 1000;
-const allowedHosts =
- env.NODE_ENV === "development"
- ? ["localhost:3000", "127.0.0.1:3000"]
- : ["opencut.app", "www.opencut.app"];
+const allowedHosts = env.NODE_ENV === "development" ? ["localhost:3000", "127.0.0.1:3000"] : ["opencut.app", "www.opencut.app"];
export async function GET(request: NextRequest) {
const referer = request.headers.get("referer");
@@ -17,20 +14,11 @@ export async function GET(request: NextRequest) {
if (referer) {
const refererUrl = new URL(referer);
- if (
- !allowedHosts.some(
- (allowed) =>
- refererUrl.host === allowed || refererUrl.host.endsWith(allowed)
- )
- ) {
+ if (!allowedHosts.some((allowed) => refererUrl.host === allowed || refererUrl.host.endsWith(allowed))) {
return NextResponse.json({ error: "Forbidden" }, { status: 403 });
}
} else if (host) {
- if (
- !allowedHosts.some(
- (allowed) => host === allowed || host.endsWith(allowed)
- )
- ) {
+ if (!allowedHosts.some((allowed) => host === allowed || host.endsWith(allowed))) {
return NextResponse.json({ error: "Forbidden" }, { status: 403 });
}
} else {
@@ -43,10 +31,7 @@ export async function GET(request: NextRequest) {
const token = crypto.randomBytes(32).toString("hex");
const timestamp = Date.now();
- const signature = crypto
- .createHmac("sha256", env.BETTER_AUTH_SECRET)
- .update(`${token}:${timestamp}`)
- .digest("hex");
+ const signature = crypto.createHmac("sha256", env.BETTER_AUTH_SECRET).update(`${token}:${timestamp}`).digest("hex");
const cookieStore = await cookies();
cookieStore.set(CSRF_TOKEN_NAME, `${token}:${timestamp}:${signature}`, {