KrikoriosandClaude Opus 5
8807ff41c5
Driver onboarding now photographs the licence, ID card and vehicle
registration and reads the credential fields off them, plus a camera-only
profile selfie riders check the arriving driver against. Adds in-app chat
and WebRTC calls, push-backed ride offers, ratings, cancellation and
payment sheets, settlement, and the owner dashboard endpoints behind them.
Camera permission on Android:
- Declare CAMERA and READ_MEDIA_IMAGES in the manifest. expo-image-picker's
own plugin never declares CAMERA, and Android denies a request for an
undeclared permission instantly and silently — no dialog is ever shown,
which is indistinguishable from the app not asking at all.
- Handle canAskAgain: once Android stops showing the dialog, repeating why
we need it is a dead end, so offer Open Settings instead (lib/capture-
permission.ts), matching what the location flow already did.
Session: a 401 on a request that carried a token now ends the session
instead of being reinterpreted per-screen — driver-home had been reading it
as "this user has no driver profile" and showing an onboarding form to an
already-onboarded driver. Requests without a token are exempt so a failed
sign-in doesn't sign you out, and the notification is latched per token so
concurrent polls tear the session down once. (root) gains the auth guard
that turns that into the sign-in screen; app/index.tsx only guarded the way
in, leaving a session that ended mid-screen with nowhere to go.
Also ignore .uploads/ — it holds driver licence, ID and vehicle scans plus
profile photos, which are personal data and must not be committed.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
59 lines
1.9 KiB
TypeScript
59 lines
1.9 KiB
TypeScript
import { requireAuth } from "@/lib/jwt";
|
|
import { sql } from "@/lib/db";
|
|
import { TERMINAL_STATUS_ARRAY } from "@/lib/ride-lifecycle";
|
|
|
|
// GET — the signed-in rider's ride history (completed + cancelled rides),
|
|
// newest first, with the assigned driver (nullable via LEFT JOIN). This feeds
|
|
// the "Recent Rides" / "All rides" lists; the active/in-progress ride is
|
|
// tracked separately on the book-ride status screen.
|
|
export async function GET(req: Request) {
|
|
const auth = requireAuth(req);
|
|
if ("error" in auth) return auth.error;
|
|
|
|
try {
|
|
const response = await sql`
|
|
SELECT
|
|
r.ride_id,
|
|
r.origin_address,
|
|
r.destination_address,
|
|
r.origin_latitude,
|
|
r.origin_longitude,
|
|
r.destination_latitude,
|
|
r.destination_longitude,
|
|
r.ride_time,
|
|
r.fare_price,
|
|
r.payment_status,
|
|
r.status,
|
|
r.service,
|
|
r.created_at,
|
|
r.completed_at,
|
|
r.cancelled_at,
|
|
r.cancelled_by,
|
|
r.cancellation_reason,
|
|
(SELECT rr.rating FROM ride_ratings rr
|
|
WHERE rr.ride_id = r.ride_id AND rr.rater_type = 'rider') AS my_rating,
|
|
json_build_object(
|
|
'id', d.id,
|
|
'first_name', d.first_name,
|
|
'last_name', d.last_name,
|
|
'car_seats', d.car_seats,
|
|
'profile_image_url', d.profile_image_url,
|
|
'car_image_url', d.car_image_url,
|
|
'rating', d.rating,
|
|
'service', d.service,
|
|
'car_model', d.car_model
|
|
) AS driver
|
|
FROM rides r
|
|
LEFT JOIN drivers d ON d.id = r.driver_id
|
|
WHERE r.user_id = ${auth.userId}
|
|
AND r.status = ANY(${TERMINAL_STATUS_ARRAY}::text[])
|
|
ORDER BY r.created_at DESC
|
|
`;
|
|
|
|
return Response.json({ data: response });
|
|
} catch (error) {
|
|
console.error("[GET_RIDE_LIST]: ", error);
|
|
return Response.json({ error: "Internal Server Error" }, { status: 500 });
|
|
}
|
|
}
|