feat: Initial Nuxt app

wp-content/themes/ccat/server/api/login.gql

@@ -0,0 +1,9 @@
+mutation login($email: String!, $password: String!) {
+  login(input: { username: $email, password: $password }) {
+    authToken
+    refreshToken
+    user {
+      email
+    }
+  }
+}

wp-content/themes/ccat/server/api/login.post.ts

@@ -0,0 +1,29 @@
+import { defineEventHandler, readBody } from "h3";
+
+export default defineEventHandler(async (event) => {
+  const { email, password } = await readBody(event);
+  try {
+    const response = await useGraphqlMutation("login", { email, password });
+    if (response.errors.length) {
+      throw new Error(response.errors[0]?.message);
+    }
+    if (!response.data.login) {
+      throw new Error("Login failed: Invalid credentials");
+    }
+    const { authToken, refreshToken, user } = response.data.login;
+    await setUserSession(event, {
+      user,
+      secure: { authToken, refreshToken },
+      loggedInAt: new Date().toISOString(),
+    });
+    return { success: true };
+  }
+  catch (error) {
+    const messages: Record<string, string> = {
+      invalid_email: "Courriel et/ou mot de passe invalide(s).",
+      incorrect_password: "Courriel et/ou mot de passe invalide(s).",
+    };
+    const message = error instanceof Error && messages[error.message] ? messages[error.message] : "Une erreur est survenue.";
+    return { success: false, message };
+  }
+});

wp-content/themes/ccat/server/api/logout.post.ts

@@ -0,0 +1,6 @@
+import { defineEventHandler } from "h3";
+
+export default defineEventHandler(async (event) => {
+  await clearUserSession(event);
+  return { success: true };
+});

wp-content/themes/ccat/server/graphql/refreshJwtToken.gql

@@ -0,0 +1,5 @@
+mutation refreshJwtAuthToken($refreshToken: String!) {
+  refreshJwtAuthToken(input: { jwtRefreshToken: $refreshToken }) {
+    authToken
+  }
+}

wp-content/themes/ccat/server/graphqlMiddleware.serverOptions.ts

@@ -0,0 +1,29 @@
+import { defineGraphqlServerOptions } from "nuxt-graphql-middleware/server-options";
+import { jwtDecode } from "jwt-decode";
+
+interface DecodedToken {
+  exp: number;
+}
+
+async function refreshAuthToken(refreshToken: string): Promise<string | null> {
+  const refreshResponse = await useGraphqlMutation("refreshJwtAuthToken", { refreshToken });
+  return refreshResponse.data?.refreshJwtAuthToken?.authToken || null;
+}
+
+export default defineGraphqlServerOptions({
+  async serverFetchOptions(event) {
+    const session = await getUserSession(event);
+    if (!session?.secure?.authToken) return {};
+
+    const decoded = jwtDecode<DecodedToken>(session.secure.authToken);
+    const isExpired = decoded.exp * 1000 < Date.now();
+    if (isExpired) {
+      const newToken = await refreshAuthToken(session.secure.authToken);
+      if (newToken) {
+        session.secure.authToken = newToken;
+      }
+    }
+
+    return { headers: { Authorization: `Bearer ${session.secure.authToken}` } };
+  },
+});