fix: tailwind v4 postcss, auth-server session, eslint cleanups

backend/src/index.js

@@ -1,8 +1,8 @@
 // FILE: backend/src/index.js  (ESM) ไฟล์ฉบับ “Bearer-only”
+// FILE: src/index.js  (ESM)
 import fs from "node:fs";
 import express from "express";
 import cors from "cors";
-import cookieParser from "cookie-parser"; // added
 
 import sql from "./db/index.js";
 import healthRouter from "./routes/health.js";
@@ -10,9 +10,6 @@ import { authJwt } from "./middleware/authJwt.js";
 import { loadPrincipalMw } from "./middleware/loadPrincipal.js";
 
 // ROUTES
-import usersRoutes from "./routes/users.js";
-import rbacAdminRoutes from "./routes/rbac_admin.js";
-import dashboardRoutes from "./routes/dashboard.js";
 import authRoutes from "./routes/auth.js";
 import lookupRoutes from "./routes/lookup.js";
 import organizationsRoutes from "./routes/organizations.js";
@@ -26,6 +23,7 @@ import contractDwgRoutes from "./routes/contract_dwg.js";
 import categoriesRoutes from "./routes/categories.js";
 import volumesRoutes from "./routes/volumes.js";
 import uploadsRoutes from "./routes/uploads.js";
+import usersRoutes from "./routes/users.js";
 import permissionsRoutes from "./routes/permissions.js";
 
 const PORT = Number(process.env.PORT || 3001);
@@ -39,9 +37,7 @@ const ALLOW_ORIGINS = [
   "http://127.0.0.1:3000",
   FRONTEND_ORIGIN,
   ...(process.env.CORS_ALLOWLIST
-    ? process.env.CORS_ALLOWLIST.split(",")
-        .map((x) => x.trim())
-        .filter(Boolean)
+    ? process.env.CORS_ALLOWLIST.split(",").map((x) => x.trim()).filter(Boolean)
     : []),
 ].filter(Boolean);
 
@@ -78,10 +74,6 @@ app.use(
     exposedHeaders: ["Content-Disposition", "Content-Length"],
   })
 );
-
-// parse cookies สำหรับ access_token / refresh_token
-app.use(cookieParser()); // added
-
 app.options(
   "*",
   cors({
@@ -113,12 +105,8 @@ app.get("/health", async (_req, res) => {
 });
 app.get("/livez", (_req, res) => res.send("ok"));
 app.get("/readyz", async (_req, res) => {
-  try {
-    await sql.query("SELECT 1");
-    res.send("ready");
-  } catch {
-    res.status(500).send("not-ready");
-  }
+  try { await sql.query("SELECT 1"); res.send("ready"); }
+  catch { res.status(500).send("not-ready"); }
 });
 app.get("/info", (_req, res) =>
   res.json({
@@ -150,8 +138,6 @@ app.use("/api/volumes", volumesRoutes);
 app.use("/api/uploads", uploadsRoutes);
 app.use("/api/users", usersRoutes);
 app.use("/api/permissions", permissionsRoutes);
-app.use("/api/rbac", rbacAdminRoutes);
-app.use("/api/dashboard", dashboardRoutes);
 
 // 404 / error
 app.use((req, res) =>
@@ -173,9 +159,7 @@ async function shutdown(signal) {
   try {
     console.log(`[SHUTDOWN] ${signal} received`);
     await new Promise((resolve) => server.close(resolve));
-    try {
-      await sql.end();
-    } catch {}
+    try { await sql.end(); } catch {}
     console.log("[SHUTDOWN] complete");
     process.exit(0);
   } catch (e) {