844e386e18
Changes:
- Add generateShareId() and extractShareId() helpers
- Share URLs now use single parameter: /share/location/{shareId}
- shareId = locationId (24 chars) + checksum (16 chars) = 40 chars total
- Update validateShareAccess() to extract locationId from shareId
- Update uploadProofOfPayment() to accept combined shareId
- Update LocationViewPage to validate and extract locationId from shareId
Benefits:
- Simpler URL structure (one parameter instead of two)
- Checksum extraction by length (deterministic, no parsing needed)
- Same security properties (HMAC-SHA256 validation)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
47 lines
1.6 KiB
TypeScript
47 lines
1.6 KiB
TypeScript
import { ViewLocationCard } from '@/app/ui/ViewLocationCard';
|
|
import { fetchLocationById, setSeenByTenantAt, validateShareAccess } from '@/app/lib/actions/locationActions';
|
|
import { getUserSettingsByUserId } from '@/app/lib/actions/userSettingsActions';
|
|
import { notFound } from 'next/navigation';
|
|
import { myAuth } from '@/app/lib/auth';
|
|
|
|
export default async function LocationViewPage({ shareId }: { shareId: string }) {
|
|
// Validate share access (checks checksum + TTL, extracts locationId)
|
|
const accessValidation = await validateShareAccess(shareId);
|
|
|
|
if (!accessValidation.valid || !accessValidation.locationId) {
|
|
return (
|
|
<div className="alert alert-error">
|
|
<p>{accessValidation.error || 'This content is no longer shared'}</p>
|
|
</div>
|
|
);
|
|
}
|
|
|
|
const locationId = accessValidation.locationId;
|
|
|
|
// Fetch location
|
|
const location = await fetchLocationById(locationId);
|
|
|
|
if (!location) {
|
|
return notFound();
|
|
}
|
|
|
|
// Fetch user settings for the location owner
|
|
const userSettings = await getUserSettingsByUserId(location.userId);
|
|
|
|
// Check if the page was accessed by an authenticated user who is the owner
|
|
const session = await myAuth();
|
|
const isOwner = session?.user?.id === location.userId;
|
|
|
|
// If the page is not visited by the owner, mark it as seen by tenant
|
|
if (!isOwner) {
|
|
await setSeenByTenantAt(locationId);
|
|
}
|
|
|
|
return (
|
|
<ViewLocationCard
|
|
location={location}
|
|
userSettings={userSettings}
|
|
shareId={shareId}
|
|
/>
|
|
);
|
|
} |