fix: normalize frontend api errors and remove sensitive debug logs

backend/app.js

@@ -13,7 +13,6 @@ app.use(express.json());
 app.use('/test', express.static(path.join(__dirname, 'public')));
 
 const allowedOrigins = process.env.ALLOWED_ORIGINS.split(",").map(origin => origin.trim());
-console.log("Allowed Origins:", allowedOrigins);
 app.use(
   cors({
     origin: function (origin, callback) {

backend/controllers/lists.controller.v2.js

@@ -100,7 +100,6 @@ exports.markBought = async (req, res) => {
     if (!item_name) return res.status(400).json({ message: "Item name is required" });
 
     const item = await List.getItemByName(householdId, storeId, item_name);
-    console.log('requesting mark  ', { item, householdId, storeId, item_name, bought, quantity_bought });
     if (!item) return res.status(404).json({ message: "Item not found" });
 
 

backend/models/list.model.v2.js

@@ -97,7 +97,6 @@ exports.getItemByName = async (householdId, storeId, itemName) => {
       AND hl.item_id = $3`,
     [householdId, storeId, itemId]
   );
-  console.log(result.rows);
   return result.rows[0] || null;
 };
 

backend/models/user.model.js

@@ -6,9 +6,7 @@ exports.ROLES = {
 }
 
 exports.findByUsername = async (username) => {
-  query = `SELECT * FROM users WHERE username = ${username}`;
   const result = await pool.query("SELECT * FROM users WHERE username = $1", [username]);
-  console.log(query);
   return result.rows[0];
 };
 

frontend/src/api/axios.js

@@ -19,8 +19,15 @@ api.interceptors.request.use((config => {
 api.interceptors.response.use(
   response => response,
   error => {
+    const payload = error.response?.data;
+    const normalizedMessage = payload?.error?.message || payload?.message;
+
+    if (payload?.error?.message && payload.message === undefined) {
+      payload.message = payload.error.message;
+    }
+
     if (error.response?.status === 401 &&
-      error.response?.data?.message === "Invalid or expired token") {
+      normalizedMessage === "Invalid or expired token") {
       localStorage.removeItem("token");
       window.location.href = "/login";
       alert("Your session has expired. Please log in again.");

frontend/src/components/manage/CreateJoinHousehold.jsx

@@ -38,7 +38,6 @@ export default function CreateJoinHousehold({ onClose }) {
     setError("");
 
     try {
-      console.log("Joining household with invite code:", inviteCode);
       await joinHousehold(inviteCode);
       await refreshHouseholds();
       onClose();