Business Expense Tracker

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_115":-5,"_20":116,"_22":117,"_118":119,"_120":121,"_25":122,"_24":-5,"_123":-5,"_124":-5,"_125":53,"_126":127,"_128":44,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","sahebdad","name","Expense","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","73e4b046-27a6-11f0-9edc-569c3dd06744","main.tsx","fileId","73894a30-27a6-11f0-9edc-569c3dd06744","parentId","branchId","73868bec-27a6-11f0-9edc-569c3dd06744","branchVersion",16,"latest",true,"createdAt",["D",1740624999492],15,"fileType","http","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\n\n// Rest of the client-side code remains the same...\n\nexport default async function server(request: Request): Promise {\n const { sqlite } = await import(\"https://esm.town/v/stevekrouse/sqlite\");\n const KEY = \"Expense\";\n const SCHEMA_VERSION = 7; // Increment schema version\n\n // Persistent sessions storage with more detailed tracking\n const sessions: Record = {};\n\n // Enhanced cookie parsing function\n const parseCookies = (cookieHeader: string | null): Record => {\n console.log(\"Raw Cookie Header:\", cookieHeader);\n\n if (!cookieHeader) {\n console.error(\"No cookie header found\");\n return {};\n }\n\n try {\n const cookieObj = cookieHeader.split(\"; \").reduce((acc, cookie) => {\n const [name, value] = cookie.split(\"=\");\n acc[name] = decodeURIComponent(value);\n return acc;\n }, {} as Record);\n\n console.log(\"Parsed Cookies:\", cookieObj);\n return cookieObj;\n } catch (error) {\n console.error(\"Cookie parsing error:\", error);\n return {};\n }\n };\n\n // Secure session ID generation\n const generateSessionId = () => {\n return crypto.randomUUID();\n };\n\n // Create users table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${KEY}_users_${SCHEMA_VERSION} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL,\n password TEXT NOT NULL,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )\n `);\n\n // Create expenses table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${KEY}_expenses_${SCHEMA_VERSION} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL,\n date TEXT NOT NULL,\n amount REAL NOT NULL,\n category TEXT NOT NULL,\n description TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (user_id) REFERENCES ${KEY}_users_${SCHEMA_VERSION}(id)\n )\n `);\n\n // Enhanced password hashing\n const hashPassword = (password: string) => {\n let hash = 0;\n for (let i = 0; i < password.length; i++) {\n const char = password.charCodeAt(i);\n hash = ((hash << 5) - hash) + char;\n hash = hash & hash;\n }\n return Math.abs(hash).toString();\n };\n\n // Comprehensive authentication middleware\n const authenticateRequest = (request: Request) => {\n console.log(\"Authentication Request Headers:\", Object.fromEntries(request.headers.entries()));\n\n const cookieHeader = request.headers.get(\"cookie\");\n console.log(\"Raw Cookie Header:\", cookieHeader);\n\n const cookies = parseCookies(cookieHeader);\n const sessionId = cookies[\"session\"];\n\n console.log(\"Extracted Session ID:\", sessionId);\n\n if (!sessionId) {\n console.error(\"No session ID found in cookies\");\n return null;\n }\n\n const session = sessions[sessionId];\n\n if (!session) {\n console.error(\"No session found for session ID:\", sessionId);\n console.log(\"Current Sessions:\", Object.keys(sessions));\n return null;\n }\n\n if (session.expiresAt < Date.now()) {\n console.error(\"Session expired\");\n delete sessions[sessionId];\n return null;\n }\n\n return session;\n };\n\n // Session check endpoint with comprehensive logging\n if (request.method === \"GET\" && new URL(request.url).pathname === \"/session\") {\n console.log(\"Session Check Request\");\n\n const cookieHeader = request.headers.get(\"cookie\");\n console.log(\"Session Check Cookie Header:\", cookieHeader);\n\n const cookies = parseCookies(cookieHeader);\n const sessionId = cookies[\"session\"];\n\n console.log(\"Session Check Session ID:\", sessionId);\n\n if (!sessionId) {\n console.error(\"No session ID found during session check\");\n return new Response(\n JSON.stringify({\n loggedIn: false,\n message: \"No session ID found\",\n }),\n {\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n const session = sessions[sessionId];\n\n if (!session) {\n console.error(\"Invalid session during session check:\", sessionId);\n return new Response(\n JSON.stringify({\n loggedIn: false,\n message: \"Invalid session\",\n }),\n {\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n if (session.expiresAt < Date.now()) {\n console.error(\"Expired session during check:\", sessionId);\n delete sessions[sessionId];\n return new Response(\n JSON.stringify({\n loggedIn: false,\n message: \"Session expired\",\n }),\n {\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n return new Response(\n JSON.stringify({\n loggedIn: true,\n username: session.username,\n }),\n {\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // Login endpoint with enhanced logging\n if (request.method === \"POST\" && new URL(request.url).pathname === \"/login\") {\n const { username, password } = await request.json();\n\n console.log(\"Login attempt for username:\", username);\n\n const result = await sqlite.execute(\n `\n SELECT * FROM ${KEY}_users_${SCHEMA_VERSION} \n WHERE username = ? AND password = ?\n `,\n [username, hashPassword(password)],\n );\n\n if (result.rows.length > 0) {\n const user = result.rows[0];\n const sessionId = generateSessionId();\n const now = Date.now();\n const expiresAt = now + 24 * 60 * 60 * 1000; // 24 hours\n\n // Remove any existing sessions for this user\n Object.keys(sessions).forEach(key => {\n if (sessions[key].userId === user.id) {\n delete sessions[key];\n }\n });\n\n // Create new session\n sessions[sessionId] = {\n username: user.username,\n userId: user.id,\n expiresAt,\n createdAt: now,\n };\n\n console.log(\"Login successful, created session:\", sessionId);\n\n return new Response(JSON.stringify({ success: true }), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\": `session=${sessionId}; HttpOnly; Path=/; SameSite=Strict; Max-Age=86400`,\n },\n });\n }\n\n console.error(\"Login failed for username:\", username);\n\n return new Response(\n JSON.stringify({\n success: false,\n message: \"Invalid username or password\",\n }),\n {\n status: 401,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // Logout endpoint with logging\n if (request.method === \"POST\" && new URL(request.url).pathname === \"/logout\") {\n const cookieHeader = request.headers.get(\"cookie\");\n const cookies = parseCookies(cookieHeader);\n const sessionId = cookies[\"session\"];\n\n console.log(\"Logout attempt for session:\", sessionId);\n\n if (sessionId) {\n delete sessions[sessionId];\n console.log(\"Session deleted:\", sessionId);\n }\n\n return new Response(null, {\n headers: {\n \"Set-Cookie\": \"session=; HttpOnly; Path=/; Max-Age=0\",\n },\n });\n }\n\n // Rest of the endpoints remain the same...\n\n // Default HTML response\n return new Response(\n `\n \n \n Business Expense Tracker\n \n \n \n \n

\n \n \n \n \n `,\n {\n headers: { \"Content-Type\": \"text/html\" },\n },\n );\n}\n\nconst css = `\n/* Previous CSS remains the same */\n`;","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1740624999492],"children",[],[35],"73864bd2-27a6-11f0-9edc-569c3dd06744",["D",1746225630470],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","ce4d27e0-f487-11ef-b95b-83259b5812d2","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","31e99def-1a38-45d2-a99f-61f86016cad8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_114":110},"org",{"_11":12,"_108":-5,"_109":110,"_70":71,"_111":112,"_113":53},"branch",{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ0YXpQZVlxaTVDTzFNNHVxbFBaaFozQlFEVCJ9","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":148,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":149,"_95":150,"_97":151,"_99":53},[145],"files",[145],"counts",{"_135":77,"_136":137,"_138":77,"_31":139,"_140":141},[133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":134},[35],"pulls","branches",1,"forks",{"_142":77,"_144":77},"connections",{"_142":77,"_143":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":146,"_18":147},[],[35],["D",1746225630470],{"_11":12,"_114":110},{"_11":12,"_108":-5,"_109":110,"_70":71,"_111":112,"_113":53},{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_130":185,"_186":187,"_188":189,"_190":53,"_191":53,"_192":53,"_193":44,"_194":-5,"_195":-7,"_196":-7,"_197":77,"_198":53,"_199":53,"_200":-5,"_201":53,"_202":53,"_203":53,"_204":-5},"ENV",{"_156":157,"_158":159,"_160":16,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","c73f21da490985bff19c279eb0e09db24d688e4f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]