addEventListener('fetch', event => {
  event.respondWith(handleRequest(event.request))
})
async function handleRequest(request) {
  // Step 1: Get the JWT token from the request headers
  const jwtToken = request.headers.get('Cf-Access-Jwt-Assertion')
  let userEmail = null
  if (jwtToken) {
    // Step 2: Decode the JWT token and extract the email
    userEmail = getEmailFromJwt(jwtToken)
  }
  // Step 3: Forward the request to the origin server (your Vue app)
  const response = await fetch(request)
  // Check if the response is valid
  if (!response) {
    return new Response('Error fetching the origin response', { status: 502 })
  }
  // Step 4: Create a new Headers object from the response headers
  let newHeaders = new Headers(response.headers)

  // Step 5: Determine isAdmin value based on email
  let isAdmin = "false"
  if (userEmail === '[email protected]' || userEmail === '[email protected]') {
    isAdmin = "true"
  }

  // Step 6: Set the isAdmin header
  newHeaders.set('isAdmin', isAdmin)

  // Step 7: Create a new Response with the modified headers
  let newResponse = new Response(response.body, {
    status: response.status,
    statusText: response.statusText,
    headers: newHeaders,
  })

  return newResponse
}

// Helper function to decode JWT and extract the email
function getEmailFromJwt(token) {
  try {
    // Split the token into header, payload, and signature
    const base64Url = token.split('.')[1]
    const base64 = base64UrlReplace(base64Url)
    const jsonPayload = atob(base64)
    const payload = JSON.parse(jsonPayload)
    return payload.email
  } catch (e) {
    console.error('Error decoding JWT:', e)
    return null
  }
}
// Helper function to replace URL-safe base64 characters
function base64UrlReplace(base64Url) {
  // Replace '-' with '+' and '_' with '/'
  base64Url = base64Url.replace(/-/g, '+').replace(/_/g, '/')
  // Pad with '='
  while (base64Url.length % 4) {
    base64Url += '='
  }
  return base64Url
}

addEventListener('fetch', event => {
  event.respondWith(handleRequest(event.request))
})
async function handleRequest(request) {
  // Step 1: Get the JWT token from the request headers
  const jwtToken = request.headers.get('Cf-Access-Jwt-Assertion')
  let userEmail = null
  if (jwtToken) {
    // Step 2: Decode the JWT token and extract the email
    userEmail = getEmailFromJwt(jwtToken)
  }
  // Step 3: Forward the request to the origin server (your Vue app)
  const response = await fetch(request)
  // Check if the response is valid
  if (!response) {
    return new Response('Error fetching the origin response', { status: 502 })
  }
  // Step 4: Create a new Headers object from the response headers
  let newHeaders = new Headers(response.headers)

  // Step 5: Determine isAdmin value based on email
  let isAdmin = "false"
  if (userEmail === '[email protected]' || userEmail === '[email protected]') {
    isAdmin = "true"
  }

  // Step 6: Set the isAdmin header
  newHeaders.set('isAdmin', isAdmin)

  // Step 7: Create a new Response with the modified headers
  let newResponse = new Response(response.body, {
    status: response.status,
    statusText: response.statusText,
    headers: newHeaders,
  })

  return newResponse
}

// Helper function to decode JWT and extract the email
function getEmailFromJwt(token) {
  try {
    // Split the token into header, payload, and signature
    const base64Url = token.split('.')[1]
    const base64 = base64UrlReplace(base64Url)
    const jsonPayload = atob(base64)
    const payload = JSON.parse(jsonPayload)
    return payload.email
  } catch (e) {
    console.error('Error decoding JWT:', e)
    return null
  }
}
// Helper function to replace URL-safe base64 characters
function base64UrlReplace(base64Url) {
  // Replace '-' with '+' and '_' with '/'
  base64Url = base64Url.replace(/-/g, '+').replace(/_/g, '/')
  // Pad with '='
  while (base64Url.length % 4) {
    base64Url += '='
  }
  return base64Url
}