Simple product feedback for founders.

// Express route — keep signing secret server-side only
app.post("/api/product-signals-portal", async (req, res) => {
  const user = await getCurrentUser(req);
  if (!user) return res.status(401).json({ error: "Sign in required." });

  const response = await fetch(PRODUCT_SIGNALS_API_ENDPOINT, {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "Authorization": "Bearer " + process.env.PRODUCT_SIGNALS_SIGNING_SECRET
    },
    body: JSON.stringify({
      projectId: "YOUR_PROJECT_ID",
      user: {
        externalUserId: user.id,
        email: user.email,
        name: user.name,
      }
    })
  });

  const { portalUrl, expiresAt } = await response.json();
  res.json({ portalUrl, expiresAt });
});