Merge Dev

.claude/launch.json

@@ -0,0 +1,65 @@
+{
+  "version": "0.0.1",
+  "configurations": [
+    {
+      "name": "devcon",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "devcon-website", "dev"],
+      "port": 3000
+    },
+    {
+      "name": "devcon-app",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "devcon-app", "dev"],
+      "port": 3000
+    },
+    {
+      "name": "devcon-api",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "devcon-api", "dev"],
+      "port": 4000
+    },
+    {
+      "name": "devcon-ai",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "devcon-ai", "dev"],
+      "port": 3001
+    },
+    {
+      "name": "devconnect",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "devconnect", "dev"],
+      "port": 3000
+    },
+    {
+      "name": "devconnect-app",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "devconnect-app", "dev"],
+      "port": 3000
+    },
+    {
+      "name": "archive",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "archive", "dev"],
+      "port": 3000
+    },
+    {
+      "name": "perks-portal",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "perks-portal", "dev"],
+      "port": 3000
+    },
+    {
+      "name": "event-app",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "event-app", "dev"],
+      "port": 3000
+    },
+    {
+      "name": "social-ticket",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "social-ticket", "dev"],
+      "port": 3000
+    }
+  ]
+}

.github/workflows/devcon.yml

@@ -19,15 +19,22 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.13.1
+          run_install: false
 
       - name: Use Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
-          node-version: "18.x"
+          node-version: "20.x"
+          cache: "pnpm"
 
       - name: Install dependencies
-        run: yarn
+        run: pnpm install --frozen-lockfile
 
       - name: Run Eslint // Lint
-        run: yarn lint
+        run: pnpm exec eslint . --quiet

.gitignore

@@ -65,3 +65,6 @@ devcon/analyze/**
 # Local Netlify folder
 .netlify
 
+# Claude
+.claude/settings.local.json
+

devcon-api/data/whitelisted-domains.csv

@@ -0,0 +1,3 @@
+domain
+ethereum.org
+university.edu

devcon-api/src/controllers/whitelist.ts

@@ -0,0 +1,91 @@
+import { Request, Response, Router } from 'express'
+import fs from 'fs'
+import { join } from 'path'
+import { SignJWT, jwtVerify } from 'jose'
+import { parseCSV } from '@/utils/files'
+import { sendMail } from '@/services/email'
+import { CONFIG, SERVER_CONFIG } from '@/utils/config'
+
+export const whitelistRouter = Router()
+
+whitelistRouter.post('/whitelist/send-form-link', sendFormLink)
+whitelistRouter.get('/whitelist/verify', verifyToken)
+
+async function sendFormLink(req: Request, res: Response) {
+  const { email } = req.body
+
+  if (!email || typeof email !== 'string') {
+    return res.status(400).send({ status: 400, message: 'Email is required' })
+  }
+
+  const domain = email.split('@')[1]?.toLowerCase()
+  if (!domain) {
+    return res.status(400).send({ status: 400, message: 'Invalid email format' })
+  }
+
+  try {
+    const csvPath = join(CONFIG.DATA_FOLDER, 'whitelisted-domains.csv')
+    const csvData = fs.readFileSync(csvPath, 'utf-8')
+    const rows = await parseCSV(csvData)
+    const whitelistedDomains = rows.map((row: any) => row.domain?.toLowerCase().trim())
+
+    const isWhitelisted = whitelistedDomains.includes(domain)
+
+    if (!isWhitelisted) {
+      // Not whitelisted — return the form URL directly (no token), they can still apply
+      const formUrl = SERVER_CONFIG.WHITELIST_FORM_URL
+      return res.status(200).send({ status: 200, message: 'Form link ready', data: { formUrl, whitelisted: false } })
+    }
+
+    // Whitelisted — sign a JWT and email the form link with the token pre-filled
+    const secret = new TextEncoder().encode(SERVER_CONFIG.WHITELIST_JWT_SECRET)
+    const token = await new SignJWT({ email, domain })
+      .setProtectedHeader({ alg: 'HS256' })
+      .setExpirationTime('7d')
+      .setIssuedAt()
+      .sign(secret)
+
+    const formUrl = `${SERVER_CONFIG.WHITELIST_FORM_URL}?usp=pp_url&${SERVER_CONFIG.WHITELIST_FORM_TOKEN_FIELD}=${token}`
+
+    if (SERVER_CONFIG.NODE_ENV === 'development') {
+      // Dev mode — skip email, return the form URL directly
+      return res.status(200).send({ status: 200, message: 'Form link ready (dev mode)', data: { formUrl, whitelisted: true } })
+    }
+
+    await sendMail(email, 'email-cta', 'Your Devcon Form Link', {
+      TITLE: 'Your Devcon Form Link',
+      DESCRIPTION: 'Click the button below to access the form.',
+      CALL_TO_ACTION: 'Open Form',
+      URL: formUrl,
+    })
+
+    return res.status(200).send({ status: 200, message: 'Form link sent', data: { whitelisted: true } })
+  } catch (error) {
+    console.error('Error in send-form-link:', error)
+    return res.status(500).send({ status: 500, message: 'Internal server error' })
+  }
+}
+
+async function verifyToken(req: Request, res: Response) {
+  const { token } = req.query
+
+  if (!token || typeof token !== 'string') {
+    return res.status(400).send({ status: 400, data: { whitelisted: false }, message: 'Token is required' })
+  }
+
+  try {
+    const secret = new TextEncoder().encode(SERVER_CONFIG.WHITELIST_JWT_SECRET)
+    const { payload } = await jwtVerify(token, secret)
+
+    return res.status(200).send({
+      status: 200,
+      data: {
+        whitelisted: true,
+        email: payload.email,
+        domain: payload.domain,
+      },
+    })
+  } catch (error) {
+    return res.status(401).send({ status: 401, data: { whitelisted: false }, message: 'Invalid or expired token' })
+  }
+}

devcon-api/src/routes.ts

@@ -7,6 +7,7 @@ import { aiRouter } from '@/controllers/ai'
 import { atSlurperRouter } from '@/controllers/at-slurper'
 import { destinoRouter } from '@/controllers/destino'
 import { hooksRouter } from '@/controllers/hooks'
+import { whitelistRouter } from '@/controllers/whitelist'
 import { Router } from 'express'
 import { API_INFO } from '@/utils/config'
 
@@ -27,3 +28,4 @@ router.use(aiRouter)
 router.use(atSlurperRouter)
 router.use(destinoRouter)
 router.use(hooksRouter)
+router.use(whitelistRouter)

devcon-api/src/utils/config.ts

@@ -51,6 +51,10 @@ export const SERVER_CONFIG = {
   SMTP_PASSWORD: process.env.SMTP_PASSWORD,
 
   ACCREDITATION_GUIDE_URL: process.env.ACCREDITATION_GUIDE_URL || '',
+
+  WHITELIST_JWT_SECRET: process.env.WHITELIST_JWT_SECRET || '',
+  WHITELIST_FORM_URL: process.env.WHITELIST_FORM_URL || '',
+  WHITELIST_FORM_TOKEN_FIELD: process.env.WHITELIST_FORM_TOKEN_FIELD || 'entry.123456789',
 }
 
 export const PRETALX_CONFIG = {