script> const TRACKING_ENDPOINT = "https://ekhabhoxaj.execute-api.us-east-1.amazonaws.com/prod/TrackUserActivity"; const AUTH_CHECK_ENDPOINT = "https://ekhabhoxaj.execute-api.us-east-1.amazonaws.com/prod/CheckUserAuthStatus"; const CLIENT_ID = "U-202515341"; const DOMAIN = "upscalem.com"; const INACTIVITY_LIMIT = 10 * 60 * 1000; // 10 minutes const REDIRECT_INTERVAL = 30 * 60 * 1000; // 30 minutes const now = Date.now(); let sessionToken = localStorage.getItem("sessionToken"); let sessionStart = parseInt(localStorage.getItem("sessionStart") || now.toString(), 10); let sessionExpiresAt = parseInt(localStorage.getItem("sessionExpiresAt") || "0", 10); let userId = localStorage.getItem("userId"); let accessToken = localStorage.getItem("accessToken"); let refreshToken = localStorage.getItem("refreshToken"); let sessionIsNew = false; // Check for admin bypass flag const isAdminBypass = localStorage.getItem("isAdminBypass") === "true"; if (!sessionToken || now > sessionExpiresAt) { sessionToken = `${now}-${Math.random().toString(36).substring(2, 10)}`; sessionStart = now; sessionExpiresAt = now + INACTIVITY_LIMIT; sessionIsNew = true; localStorage.setItem("sessionToken", sessionToken); localStorage.setItem("sessionStart", sessionStart.toString()); localStorage.setItem("sessionExpiresAt", sessionExpiresAt.toString()); } function resetSessionTimer() { const newExpiry = Date.now() + INACTIVITY_LIMIT; localStorage.setItem("sessionExpiresAt", newExpiry.toString()); } ["click", "scroll", "keydown"].forEach(evt => { window.addEventListener(evt, resetSessionTimer, { passive: true }); }); function forceLogout() { localStorage.clear(); sessionStorage.clear(); window.location.href = "/login"; } async function checkIfStillAuthenticated() { if (!accessToken && !refreshToken) return false; if (accessToken) { try { const res = await fetch(`${AUTH_CHECK_ENDPOINT}?accessToken=${encodeURIComponent(accessToken)}`); if (res.ok) { const data = await res.json(); if (data?.authenticated && data.userId) { localStorage.setItem("userId", data.userId); userId = data.userId; return true; } } } catch (err) { console.warn("Access token check failed"); } } if (refreshToken) { try { const res = await fetch(`${AUTH_CHECK_ENDPOINT}?refreshToken=${encodeURIComponent(refreshToken)}`); if (res.ok) { const data = await res.json(); if (data?.authenticated && data.userId && data.accessToken) { accessToken = data.accessToken; localStorage.setItem("accessToken", accessToken); if (data.refreshToken) { refreshToken = data.refreshToken; localStorage.setItem("refreshToken", refreshToken); } localStorage.setItem("userId", data.userId); userId = data.userId; return true; } } } catch (err) { console.warn("Refresh token invalid", err); } } return false; } function getAccurateSessionDuration() { const start = parseInt(localStorage.getItem("sessionStart") || Date.now().toString(), 10); const elapsed = Math.floor((Date.now() - start) / 1000); return elapsed > 0 ? formatDuration(elapsed) : "0m 0s"; } function formatDuration(seconds) { const mins = Math.floor(seconds / 60); const secs = seconds % 60; return `${mins}m ${secs}s`; } function sendTrackingData(data = {}) { const params = new URLSearchParams({ clientid: CLIENT_ID, domain: DOMAIN, sessionToken, ...(userId ? { userId } : {}), ...data }).toString(); fetch(`${TRACKING_ENDPOINT}?${params}`, { method: "GET" }).catch(console.error); } window.sendTrackingData = sendTrackingData; (async () => { const isLoginPage = (window.location.pathname === "/" || window.location.pathname === "/index.html"); // Skip all checks and redirects if admin bypass is enabled if (isAdminBypass) { // Just send tracking for session start or resume, no redirect or logout if (sessionIsNew) { sendTrackingData({ eventType: "sessionStart" }); } else { sendTrackingData({ eventType: "sessionResume", avgSessionDuration: getAccurateSessionDuration() }); } return; } // If no tokens at all, user is anonymous, don’t force logout or redirect if (!accessToken && !refreshToken) { if (sessionIsNew) { sendTrackingData({ eventType: "sessionStart" }); } else { sendTrackingData({ eventType: "sessionResume", avgSessionDuration: getAccurateSessionDuration() }); } return; } const stillAuthenticated = await checkIfStillAuthenticated(); if (!stillAuthenticated) { if (!isLoginPage) { forceLogout(); } return; } const lastRedirect = parseInt(sessionStorage.getItem("lastRedirectTime") || "0", 10); const now = Date.now(); const shouldRedirect = !sessionStorage.getItem("sessionRedirected") && now - lastRedirect > REDIRECT_INTERVAL && isLoginPage; if (shouldRedirect) { sessionStorage.setItem("sessionRedirected", "true"); sessionStorage.setItem("lastRedirectTime", now.toString()); window.location.href = "/upscale-logged-in/home-signedin"; return; } if (sessionIsNew) { sendTrackingData({ eventType: "sessionStart" }); } else { sendTrackingData({ eventType: "sessionResume", avgSessionDuration: getAccurateSessionDuration() }); } })(); document.addEventListener("visibilitychange", async () => { if (document.visibilityState === "visible") { const now = Date.now(); const expiresAt = parseInt(localStorage.getItem("sessionExpiresAt") || "0", 10); if (now > expiresAt) { // Skip auth checks for admin bypass users if (isAdminBypass) { resetSessionTimer(); sendTrackingData({ eventType: "sessionUpdate", avgSessionDuration: getAccurateSessionDuration(), endTime: new Date().toISOString() }); return; } const stillAuthenticated = await checkIfStillAuthenticated(); if (!stillAuthenticated) { if (accessToken || refreshToken) { forceLogout(); } return; } sessionToken = `${now}-${Math.random().toString(36).substring(2, 10)}`; sessionStart = now; sessionExpiresAt = now + INACTIVITY_LIMIT; sessionIsNew = true; localStorage.setItem("sessionToken", sessionToken); localStorage.setItem("sessionStart", sessionStart.toString()); localStorage.setItem("sessionExpiresAt", sessionExpiresAt.toString()); sendTrackingData({ eventType: "sessionStart" }); } else { resetSessionTimer(); sendTrackingData({ eventType: "sessionUpdate", avgSessionDuration: getAccurateSessionDuration(), endTime: new Date().toISOString() }); } } }); let unloadHandled = false; function handleUnload() { if (unloadHandled) return; unloadHandled = true; sendTrackingData({ avgSessionDuration: getAccurateSessionDuration(), endTime: new Date().toISOString() }); } window.addEventListener("beforeunload", handleUnload); document.addEventListener("visibilitychange", () => { if (document.visibilityState === "hidden") { handleUnload(); } }); window.checkIfStillAuthenticated = checkIfStillAuthenticated;