chore: update auth middleware and integrate kiroo

Author: yash-pouranik

.kiroo/.gitignore

@@ -15,12 +15,13 @@ const app = express();
 app.set('trust proxy', 1);
 const GC = require('./utils/GC');
 const { getPublicIp } = require('./utils/network');
+const { capture } = require('@kiroo/sdk');
+
 
 // Initialize Queue Workers
 require('./queues/emailQueue');
 require('./queues/authEmailQueue');
 
-// Middleware (We apply admin options globally except where overridden via dynamic handling)
 app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
@@ -31,7 +32,6 @@ const dashboardLimiter = rateLimit({
     skip: (req) => process.env.NODE_ENV === 'development',
 });
 
-// FIX 3: Strict limiter for auth endpoints (login / register)
 const { authLimiter } = require('./middleware/auth_limiter');
 
 
@@ -65,6 +65,14 @@ if (process.env.NODE_ENV !== 'test') {
     GC.storageGarbageCollect();
 }
 
+app.use(capture({
+  supabaseUrl: process.env.SUPABASE_URL,
+  supabaseKey: process.env.SUPABASE_KEY,
+  bucket: process.env.SUPABASE_BUCKET,
+  sampleRate: 0.2
+}));
+
+
 
 // LOGGING
 const { limiter, logger } = require('./middleware/api_usage');
@@ -123,6 +131,11 @@ app.use((err, req, res, next) => {
         message: err.message
     });
 });
+
+app.use((req, res) => {
+    const id = res.get("X-Kiroo-Replay-ID");
+    res.json({error: "Not Found", replayId: id})   
+})
 // INITIALIZATION
 if (process.env.NODE_ENV !== 'test') {
 

.kiroo/config.json

@@ -10,7 +10,7 @@ module.exports = function (req, res, next) {
     }
 
     // Extract the actual token by removing the "Bearer " prefix
-    // We split the header value by space and take the second part
+    // spliting the header value by space and take the second part
     const token = authHeader.split(' ')[1];
 
     // If token is missing after splitting, the format is invalid
@@ -32,7 +32,6 @@ module.exports = function (req, res, next) {
         console.log("err---------------2")
         console.error(err);
 
-        // Do not expose detailed error information in production
         res.status(400).json({ error: 'Invalid Token' });
     }
 };

backend/app.js

@@ -10,6 +10,7 @@
   "author": "",
   "license": "MIT",
   "dependencies": {
+    "@kiroo/sdk": "^0.1.2",
     "@supabase/supabase-js": "^2.84.0",
     "bcryptjs": "^3.0.2",
     "bullmq": "^5.70.1",