Revert 2 vercel/react server components CVE vu 4t9xcx

.gitignore

@@ -31,11 +31,14 @@ yarn-error.log*
 .pnpm-debug.log*
 
 # env files (can opt-in for committing if needed)
-# .env*
+.env*
 
 # vercel
 .vercel
 
 # typescript
 *.tsbuildinfo
 next-env.d.ts
+
+# clerk configuration (can include secrets)
+/.clerk/

app/3d-printed-products/page.jsx

@@ -0,0 +1,16 @@
+"use client";
+
+import { useEffect } from "react";
+import { useRouter } from "next/navigation";
+import { ALL_3D_PRINTED_SLUG, getCategoryPagePath } from "@/lib/productCategories";
+
+/** Redirect legacy URL to the all-3D-printed shop category page */
+export default function ThreeDPrintedProductsRedirect() {
+  const router = useRouter();
+
+  useEffect(() => {
+    router.replace(getCategoryPagePath(ALL_3D_PRINTED_SLUG));
+  }, [router]);
+
+  return null;
+}

app/3d-printing-filament/page.jsx

@@ -0,0 +1,16 @@
+"use client";
+
+import { useEffect } from "react";
+import { useRouter } from "next/navigation";
+import { getCategoryPagePath } from "@/lib/productCategories";
+
+/** Redirect legacy URL to the filament shop category page */
+export default function FilamentProductsRedirect() {
+  const router = useRouter();
+
+  useEffect(() => {
+    router.replace(getCategoryPagePath("3d-printing-filament"));
+  }, [router]);
+
+  return null;
+}

app/add-address/page.jsx

@@ -4,9 +4,13 @@ import Navbar from "@/components/Navbar";
 import Footer from "@/components/Footer";
 import Image from "next/image";
 import { useState } from "react";
-
+import { useAppContext } from "@/context/AppContext";
+import toast from "react-hot-toast";
+import axios from "axios";
 const AddAddress = () => {
 
+    const {getToken , router} = useAppContext()
+
     const [address, setAddress] = useState({
         fullName: '',
         phoneNumber: '',
@@ -18,8 +22,22 @@ const AddAddress = () => {
 
     const onSubmitHandler = async (e) => {
         e.preventDefault();
+        try{
+            const token = await getToken()
+            const {data} = await axios.post('/api/user/add-address', {address}, {headers : {Authorization: `Bearer ${token}`}})
+
+            if(data.success){
+                toast.success(data.message)
+                router.push('/cart')
+            }else{
+                toast.error( data.message)
+            }
+
 
-    }
+        }catch(error){
+            toast.error(error.message)
+        }
+    }   
 
     return (
         <>

app/all-products/page.jsx

@@ -1,28 +1,19 @@
 'use client'
-import ProductCard from "@/components/ProductCard";
-import Navbar from "@/components/Navbar";
-import Footer from "@/components/Footer";
+import { useEffect } from "react";
 import { useAppContext } from "@/context/AppContext";
+import { useRouter } from "next/navigation";
 
 const AllProducts = () => {
+    const { setIsLoading } = useAppContext();
+    const router = useRouter();
 
-    const { products } = useAppContext();
+    useEffect(() => {
+        // Redirect to 3D printed products page
+        setIsLoading(false);
+        router.push("/shop/all-3d-printed");
+    }, [setIsLoading, router]);
 
-    return (
-        <>
-            <Navbar />
-            <div className="flex flex-col items-start px-6 md:px-16 lg:px-32">
-                <div className="flex flex-col items-end pt-12">
-                    <p className="text-2xl font-medium">All products</p>
-                    <div className="w-16 h-0.5 bg-orange-600 rounded-full"></div>
-                </div>
-                <div className="grid grid-cols-2 md:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5 flex-col items-center gap-6 mt-12 pb-14 w-full">
-                    {products.map((product, index) => <ProductCard key={index} product={product} />)}
-                </div>
-            </div>
-            <Footer />
-        </>
-    );
+    return null; // This component will redirect immediately
 };
 
 export default AllProducts;

app/api/cart/get/route.js

@@ -0,0 +1,39 @@
+import connectDb from "@/config/db";
+import User from "@/models/Users";
+import { getAuth } from "@clerk/nextjs/server";
+import { NextResponse } from "next/server";
+
+export async function GET(request) {
+    try{
+        const {userId} = getAuth(request)
+
+        if (!userId) {
+            return NextResponse.json({ 
+                success: false, 
+                message: "User not authenticated" 
+            }, { status: 401 });
+        }
+
+        await connectDb()
+        const user = await User.findById(userId)
+
+        if (!user) {
+            return NextResponse.json({ 
+                success: false, 
+                message: "User not found" 
+            }, { status: 404 });
+        }
+
+        const {cartItems} = user
+
+        return NextResponse.json({ success: true, cartItems})
+
+    }catch(error){
+        console.error("Error in cart get route:", error);
+        return NextResponse.json({
+            success: false, 
+            message: "Failed to fetch cart items",
+            error: error.message
+        }, { status: 500 });
+    }
+}

app/api/cart/update/route.js

@@ -0,0 +1,23 @@
+import connectDb from "@/config/db";
+import User from "@/models/Users";
+import { getAuth } from "@clerk/nextjs/server";
+import { NextResponse } from "next/server";
+
+export async function POST(request) {
+    try{
+        const { userId} = getAuth(request);
+        const { cartData } = await request.json()
+
+        await connectDb()
+        const user = await User.findById(userId)
+
+        user.cartItems = cartData
+        await user.save()
+
+        return NextResponse.json({ success : true})
+
+
+    }catch(error){
+        return NextResponse.json({ success: false, message : error.message})
+    }
+}

app/api/check-env/route.js

@@ -0,0 +1,26 @@
+import { NextResponse } from 'next/server';
+
+export async function GET() {
+    try {
+        const keyId = process.env.RAZORPAY_KEY_ID;
+        const keySecret = process.env.RAZORPAY_KEY_SECRET;
+        const publicKey = process.env.NEXT_PUBLIC_RAZORPAY_KEY_ID;
+
+        return NextResponse.json({
+            success: true,
+            data: {
+                hasKeyId: !!keyId,
+                keyIdLength: keyId?.length,
+                hasKeySecret: !!keySecret,
+                keySecretLength: keySecret?.length,
+                hasPublicKey: !!publicKey,
+                publicKeyLength: publicKey?.length
+            }
+        });
+    } catch (error) {
+        return NextResponse.json({
+            success: false,
+            message: error.message
+        });
+    }
+} 

app/api/design-request/[id]/download/route.js

@@ -0,0 +1,58 @@
+import connectDb from "@/config/db";
+import authSeller from "@/lib/authSeller";
+import DesignRequest from "@/models/DesignRequest";
+import { getAuth } from "@clerk/nextjs/server";
+import { NextResponse } from "next/server";
+
+export async function GET(request, context) {
+    try {
+        const { userId } = getAuth(request);
+
+        // Extract id from context params
+        const id = context?.params?.id;
+
+        if (!id) {
+            return NextResponse.json({ 
+                success: false, 
+                message: "Invalid request: Missing design request ID" 
+            }, { status: 400 });
+        }
+
+        if (!userId) {
+            return NextResponse.json({ success: false, message: "Not authenticated" });
+        }
+
+        const isSeller = await authSeller(userId);
+        if (!isSeller) {
+            return NextResponse.json({ success: false, message: "Not Authorized" });
+        }
+
+        await connectDb();
+
+        const designRequest = await DesignRequest.findById(id);
+
+        if (!designRequest) {
+            return NextResponse.json({ 
+                success: false, 
+                message: "Design request not found" 
+            }, { status: 404 });
+        }
+
+        // Check if we have a Cloudinary URL
+        if (designRequest.fileUrl) {
+            return NextResponse.redirect(designRequest.fileUrl);
+        }
+
+        return NextResponse.json({ 
+            success: false, 
+            message: "No file URL found" 
+        }, { status: 404 });
+
+    } catch (error) {
+        console.error("Error downloading file:", error);
+        return NextResponse.json({ 
+            success: false, 
+            message: error.message || "Error downloading file" 
+        }, { status: 500 });
+    }
+} 

app/api/design-request/[id]/status/route.js

@@ -0,0 +1,57 @@
+import connectDb from "@/config/db";
+import authSeller from "@/lib/authSeller";
+import DesignRequest from "@/models/DesignRequest";
+import { getAuth } from "@clerk/nextjs/server";
+import { NextResponse } from "next/server";
+
+export async function PUT(request, { params }) {
+    try {
+        const { userId } = getAuth(request);
+        const { id } = params;
+        const { status, quote, estimatedDelivery, adminNotes } = await request.json();
+
+        if (!userId) {
+            return NextResponse.json({ success: false, message: "Not authenticated" });
+        }
+
+        const isSeller = await authSeller(userId);
+        if (!isSeller) {
+            return NextResponse.json({ success: false, message: "Not Authorized" });
+        }
+
+        await connectDb();
+
+        const updateData = { status };
+
+        // Add optional fields if provided
+        if (quote !== undefined) updateData.quote = quote;
+        if (estimatedDelivery !== undefined) updateData.estimatedDelivery = estimatedDelivery;
+        if (adminNotes !== undefined) updateData.adminNotes = adminNotes;
+
+        const updatedRequest = await DesignRequest.findByIdAndUpdate(
+            id,
+            updateData,
+            { new: true }
+        );
+
+        if (!updatedRequest) {
+            return NextResponse.json({ 
+                success: false, 
+                message: "Design request not found" 
+            }, { status: 404 });
+        }
+
+        return NextResponse.json({ 
+            success: true, 
+            message: "Status updated successfully",
+            designRequest: updatedRequest
+        });
+
+    } catch (error) {
+        console.error("Error updating design request status:", error);
+        return NextResponse.json({ 
+            success: false, 
+            message: error.message || "Error updating status" 
+        }, { status: 500 });
+    }
+}