fix: CORS and database connection issues

 CORS Configuration:
- Add multiple allowed origins including worrybox.gigaelk.com
- Support both production and development URLs
- Enable credentials for cross-origin requests

 Database Connection Resilience:
- Add /api/wake endpoint to wake up sleeping databases
- Implement retry logic in subscription service
- Add fallback subscription tiers when API unavailable
- Increase API timeout to 30 seconds

 Frontend Error Handling:
- Make subscription loading non-blocking for login
- Add graceful fallbacks for failed API calls
- Improve error logging and user experience
- Separate subscription loading from authentication flow

This fixes the login issues caused by CORS blocks and sleeping databases
on free hosting services like Render. Users can now login even when
the subscription API is temporarily unavailable!

Author: GigaElk

backend/src/index.ts

@@ -24,7 +24,12 @@ const PORT = process.env.PORT || 5000;
 // Security middleware
 app.use(helmet());
 app.use(cors({
-  origin: process.env.FRONTEND_URL || 'http://localhost:3000',
+  origin: [
+    process.env.FRONTEND_URL || 'http://localhost:3000',
+    'https://worrybox.gigaelk.com',
+    'http://localhost:3000',
+    'http://localhost:5173', // Vite dev server
+  ],
   credentials: true,
 }));
 
@@ -65,6 +70,31 @@ app.get('/health', async (req, res) => {
   res.status(isHealthy ? 200 : 503).send(isHealthy ? 'OK' : 'UNHEALTHY');
 });
 
+// Database wake-up endpoint
+app.get('/api/wake', async (req, res) => {
+  try {
+    // Simple database query to wake up the connection
+    const { PrismaClient } = await import('@prisma/client');
+    const prisma = new PrismaClient();
+    await prisma.$queryRaw`SELECT 1`;
+    await prisma.$disconnect();
+    
+    res.json({
+      status: 'awake',
+      message: 'Database connection established',
+      timestamp: new Date().toISOString()
+    });
+  } catch (error: any) {
+    logger.error('Database wake-up failed', error);
+    res.status(503).json({
+      status: 'sleeping',
+      message: 'Database connection failed',
+      error: error.message,
+      timestamp: new Date().toISOString()
+    });
+  }
+});
+
 // Import routes
 import authRoutes from './routes/auth';
 import userRoutes from './routes/users';

frontend/src/contexts/SubscriptionContext.tsx

@@ -35,14 +35,30 @@ export const SubscriptionProvider: React.FC<SubscriptionProviderProps> = ({ chil
       setIsLoading(true)
       setError(null)
 
-      // Load subscription tiers (always available)
-      const tiersData = await subscriptionService.getSubscriptionTiers()
-      setTiers(tiersData)
+      // Load subscription tiers (always available) - with retry logic
+      try {
+        const tiersData = await subscriptionService.getSubscriptionTiers()
+        setTiers(tiersData)
+      } catch (tiersError: any) {
+        console.warn('Failed to load subscription tiers, using fallback:', tiersError)
+        // Fallback tiers if API is unavailable
+        setTiers([
+          { id: 'free', name: 'Free', price: 0, features: ['Basic features'] },
+          { id: 'supporter', name: 'Supporter', price: 4.99, features: ['All Free features', 'Premium support'] },
+          { id: 'premium', name: 'Premium', price: 9.99, features: ['All Supporter features', 'Advanced analytics', 'Priority support'] }
+        ])
+      }
 
       // Load user subscription if authenticated
       if (user) {
-        const subscriptionData = await subscriptionService.getCurrentSubscription()
-        setSubscription(subscriptionData)
+        try {
+          const subscriptionData = await subscriptionService.getCurrentSubscription()
+          setSubscription(subscriptionData)
+        } catch (subError: any) {
+          console.warn('Failed to load user subscription:', subError)
+          // Don't block login for subscription loading failures
+          setSubscription(null)
+        }
       } else {
         setSubscription(null)
       }

frontend/src/services/api.ts

@@ -5,6 +5,7 @@ const API_BASE_URL = import.meta.env.VITE_API_URL || 'http://localhost:5000/api'
 // Create axios instance
 const api = axios.create({
   baseURL: API_BASE_URL,
+  timeout: 30000, // 30 second timeout
   headers: {
     'Content-Type': 'application/json',
   },

frontend/src/services/subscriptionService.ts

@@ -33,10 +33,36 @@ export interface FeatureAccess {
 }
 
 export const subscriptionService = {
+  // Wake up the database (useful for sleeping databases on free hosting)
+  async wakeUpDatabase(): Promise<void> {
+    try {
+      await api.get('/wake')
+    } catch (error) {
+      console.warn('Database wake-up failed:', error)
+      // Don't throw - this is just a helper
+    }
+  },
+
   // Get available subscription tiers
   async getSubscriptionTiers(): Promise<SubscriptionTier[]> {
-    const response = await api.get('/subscriptions/tiers')
-    return response.data.data
+    try {
+      const response = await api.get('/subscriptions/tiers')
+      return response.data.data
+    } catch (error: any) {
+      // If the first request fails, try waking up the database and retry once
+      if (error.code === 'ERR_NETWORK' || error.response?.status >= 500) {
+        console.log('Attempting to wake up database and retry...')
+        await this.wakeUpDatabase()
+        
+        // Wait a moment for the database to wake up
+        await new Promise(resolve => setTimeout(resolve, 2000))
+        
+        // Retry the request
+        const response = await api.get('/subscriptions/tiers')
+        return response.data.data
+      }
+      throw error
+    }
   },
 
   // Get current user's subscription