Add scan history, quick add button, camera manual UPC test, and warning pop up

.gitignore

@@ -156,3 +156,4 @@ stephen-ghcr-pat
 # End of https://www.toptal.com/developers/gitignore/api/node,firebase
 backend/serviceAccountKey.json
 frontend/node_modules/*
+backend/node_modules/*

backend/Dockerfile

@@ -1,6 +1,6 @@
 FROM public.ecr.aws/lambda/nodejs:20
 
-COPY package*.json ./
+COPY package.json package-lock.json ./
 RUN npm ci --omit=dev
 
 COPY . .

backend/__tests__/index.test.js

@@ -98,6 +98,7 @@ describe('GET /ingredients/:upc/:userId', () => {
     const userData = { allergens: ['peanut'], intolerances: ['gluten'] };
     const mockRef = {
       get: jest.fn().mockResolvedValue({ exists: true, data: () => userData }),
+      collection: jest.fn().mockReturnValue({ add: jest.fn().mockResolvedValue({}) }),
     };
     const mockCollection = { doc: jest.fn().mockReturnValue(mockRef) };
     getDb.mockResolvedValue({ collection: jest.fn().mockReturnValue(mockCollection) });
@@ -120,6 +121,7 @@ describe('GET /ingredients/:upc/:userId', () => {
     const userData = { allergens: ['peanut'], intolerances: ['gluten'] };
     const mockRef = {
       get: jest.fn().mockResolvedValue({ exists: true, data: () => userData }),
+      collection: jest.fn().mockReturnValue({ add: jest.fn().mockResolvedValue({}) }),
     };
     const mockCollection = { doc: jest.fn().mockReturnValue(mockRef) };
     getDb.mockResolvedValue({ collection: jest.fn().mockReturnValue(mockCollection) });
@@ -143,6 +145,7 @@ describe('GET /ingredients/:upc/:userId', () => {
     const userData = { allergens: ['peanut'], intolerances: ['wheat'] };
     const mockRef = {
       get: jest.fn().mockResolvedValue({ exists: true, data: () => userData }),
+      collection: jest.fn().mockReturnValue({ add: jest.fn().mockResolvedValue({}) }),
     };
     const mockCollection = { doc: jest.fn().mockReturnValue(mockRef) };
     getDb.mockResolvedValue({ collection: jest.fn().mockReturnValue(mockCollection) });

backend/middleware/auth.js

@@ -3,20 +3,24 @@ const getDb = require('../firebase');
 
 async function requireAuth(req, res, next) {
   if (req.method === 'OPTIONS') {
+    console.log(`[auth] OPTIONS ${req.path} - skipping auth`);
     return next();
   }
 
   const authHeader = req.headers.authorization;
 
+  console.log(`[auth] ${req.method} ${req.path} - auth header present: ${Boolean(authHeader)}`);
+
   if (!authHeader || !authHeader.startsWith('Bearer ')) {
     return res.status(401).json({ error: 'Missing or invalid Authorization header' });
   }
 
-  const token = authHeader.split('Bearer ')[1];
+  const token = authHeader.slice(7).trim();
 
   try {
     await getDb();
     req.user = await admin.auth().verifyIdToken(token);
+    console.log(`[auth] ${req.method} ${req.path} - authenticated user: ${req.user.uid}`);
     next();
   } catch (err) {
     console.error(`[auth] ${req.method} ${req.path} - token verification failed:`, err.message);