fix: update public routes to fix auth

Author: AhmedAmrNabil

app/components/SideBar/Left/index.vue

@@ -28,7 +28,7 @@ const userStore = useUserStore();
         }"
       ></SideBarLeftTab>
       <SideBarLeftTab :tab="{ label: 'more', icon: 'more-horiz', route: '#' }"></SideBarLeftTab>
-      <UiButton variant="ghost-default" size="icon-xl" @click="loginService.logout()">
+      <UiButton variant="ghost-default" size="icon-xl" @click="loginService.logout">
         <Icon name="ic:outline-logout" size="24" />
       </UiButton>
     </div>

app/middleware/auth.global.ts

@@ -2,7 +2,12 @@ import { apiFetch } from '~/api';
 import { isAuthenticated, parseSetCookie } from '~/services/auth/authService';
 
 // Public routes that don’t require auth
-const publicRoutes = ['/', '/auth/forgot-password', '/playground/dummy-login'];
+const publicRoutePatterns: RegExp[] = [
+  /^\/$/, // root "/"
+  /^\/password-reset(?:\/.*)?$/, // "/reset-password" and subpaths
+  /^\/auth(?:\/.*)?$/, // "/auth/*"
+  /^\/profile(?:\/.*)?$/, // "/profile/*"
+];
 
 export default defineNuxtRouteMiddleware(async (to) => {
   let isAuth = isAuthenticated();
@@ -12,7 +17,8 @@ export default defineNuxtRouteMiddleware(async (to) => {
     return navigateTo('/home');
   }
   // Allow if it's a public route
-  if (publicRoutes.includes(to.path)) return;
+  const isPublic = publicRoutePatterns.some((regex) => regex.test(to.path));
+  if (isPublic) return;
 
   if (!isAuth) {
     // try to authenticate using refresh token

app/services/auth/loginService.ts

@@ -1,3 +1,5 @@
+import { apiFetch } from '~/api';
+
 export interface LoginSchema {
   identifier: string;
   password: string;
@@ -22,7 +24,7 @@ export const loginService = {
   },
 
   async logout() {
-    const response = await $fetch<ApiResponseBase>('/api/auth/logout', {
+    const response = await apiFetch<ApiResponseBase>('/api/auth/logout', {
       method: 'POST',
     });
     navigateTo('/');

nuxt.config.ts

@@ -11,6 +11,7 @@ export default defineNuxtConfig({
       githubClientId: process.env.NUXT_PUBLIC_GITHUB_CLIENT_ID || '',
       githubRedirectUri: process.env.NUXT_PUBLIC_GITHUB_REDIRECT_URI || '',
       githubScope: process.env.NUXT_PUBLIC_GITHUB_SCOPE || '',
+      siteKey: process.env.NUXT_PUBLIC_RECAPTCHA_SITE_KEY || '',
     },
   },
   devtools: {
@@ -25,12 +26,6 @@ export default defineNuxtConfig({
       include: ['../shared/types/**/*.ts', '../mocks/**/*.ts', '../test/**/*.ts'],
     },
   },
-  runtimeConfig: {
-    public: {
-      siteKey: process.env.NUXT_PUBLIC_RECAPTCHA_SITE_KEY || '',
-    },
-  },
-
   app: {
     head: {
       link: [

server/api/auth/logout.post.ts

@@ -3,11 +3,13 @@ import type { ApiResponseBase } from '~~/shared/types/api';
 
 export default defineWrappedResponseHandler(async (event) => {
   const cookie = getHeader(event, 'cookie');
+  const authHeader = getHeader(event, 'authorization');
   const response = await serverApiFetch.raw<ApiResponseBase>('/auth/logout', {
     method: 'POST',
     credentials: 'include',
     headers: {
       ...(cookie ? { cookie } : {}), // Forward client cookies
+      ...(authHeader ? { Authorization: authHeader } : {}),
     },
   });
   deleteCookie(event, 'access_token', { path: '/' });