Update app.js

app.js

@@ -223,8 +223,19 @@ app.post('/nullify', verifyFirebaseUser, async (req, res) => {
 
     const cacheKey = `${req.user.uid}:${projectId}`;
 
+    // 1. Remove Active Session (JWT secret)
     const existedInMemory = activeSessions.delete(cacheKey);
 
+    // 2. Remove Temporal Tokens (Pending Keys)
+    let deletedTempKeys = 0;
+    for (const [tKey, tData] of tempKeys.entries()) {
+        if (tData.uid === req.user.uid && tData.projectId === projectId) {
+            tempKeys.delete(tKey);
+            deletedTempKeys++;
+        }
+    }
+
+    // 3. Remove from DB
     if (db) {
         try {
             await db.ref(`plugin_oauth/${req.user.uid}/${projectId}`).remove();
@@ -233,11 +244,12 @@ app.post('/nullify', verifyFirebaseUser, async (req, res) => {
         }
     }
 
-    console.log(`☢️ NULLIFIED session for ${cacheKey}`);
+    console.log(`☢️ NULLIFIED session for ${cacheKey}. Removed ${deletedTempKeys} pending keys.`);
     res.json({ 
         success: true, 
-        message: 'Session secrets purged from memory and database.',
-        wasCached: existedInMemory 
+        message: 'Session secrets and pending keys purged from memory and database.',
+        wasCached: existedInMemory,
+        tempKeysRemoved: deletedTempKeys
     });
 });
 
@@ -310,35 +322,4 @@ app.get('/', (req, res) => {
                 const res = await fetch(baseUrl + '/redeem', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ key }) });
                 const data = await res.json();
                 document.getElementById('jwtResult').innerText = JSON.stringify(data, null, 2);
-                if(data.token) document.getElementById('jwtInput').value = data.token;
-            }
-            async function poll() {
-                const token = document.getElementById('jwtInput').value;
-                const res = await fetch(baseUrl + '/poll', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ token, payload: { msg: "Hello" } }) });
-                const data = await res.json();
-                document.getElementById('pollResult').innerText = JSON.stringify(data, null, 2);
-            }
-            async function cleanup() {
-                const res = await fetch(baseUrl + '/cleanup', { method: 'GET' });
-                const data = await res.json();
-                document.getElementById('mgmtResult').innerText = JSON.stringify(data, null, 2);
-            }
-            async function nullify() {
-                const token = document.getElementById('fbToken').value;
-                const projectId = document.getElementById('projId').value;
-                const headers = {};
-                if(token) headers['Authorization'] = 'Bearer ' + token;
-                const res = await fetch(baseUrl + '/nullify', { method: 'POST', headers: { 'Content-Type': 'application/json', ...headers }, body: JSON.stringify({ projectId }) });
-                const data = await res.json();
-                document.getElementById('mgmtResult').innerText = JSON.stringify(data, null, 2);
-            }
-        </script>
-    </body>
-    </html>
-    `);
-});
-
-const PORT = process.env.PORT || 7860;
-app.listen(PORT, () => {
-    console.log(`🚀 Server running on http://localhost:${PORT}`);
-});
+                if(data.token) document.getE