Migrated auth to Nitro

app/composables/useAuth.ts

@@ -1,147 +1,74 @@
-import axios, { AxiosError } from "axios"
-
-let refreshPromise: Promise<any> | null = null
-let waitForPromise: boolean = false
-
-const setCookie = (
-	name: string,
-	value: string,
-	options: {
-		maxAge?: number
-		path?: string
-		sameSite?: "lax" | "strict" | "none"
-		secure?: boolean
-	} = {},
-) => {
-	let cookie = `${encodeURIComponent(name)}=${encodeURIComponent(value)}`
-
-	if (options.maxAge !== undefined) {
-		cookie += `; Max-Age=${options.maxAge}`
-	}
-
-	cookie += `; Path=${options.path ?? "/"}`
-	cookie += `; SameSite=${options.sameSite ?? "Lax"}`
-
-	if (options.secure) cookie += "; Secure"
-
-	document.cookie = cookie
+type SessionResponse = {
+	sessionToken: string
+	expireAt: string
 }
 
 export const useAuth = () => {
-	const refreshToken = useCookie<string | null>("refreshToken", {
-		sameSite: "lax",
-	})
-
 	const sessionToken = useCookie<string | null>("sessionToken", {
 		sameSite: "lax",
-		maxAge: 60 * 60, // 60 minutes
+		maxAge: 60 * 60,
 	})
 
-	const signin = async (
-		email: string,
-		password: string,
-		remember: boolean = false,
-	) => {
+	let refreshPromise: Promise<string | null> | null = null
+
+	const signin = async (email: string, password: string, remember = false) => {
 		try {
-			const res = await cfetch(
-				"/auth/signin",
-				{
-					method: "POST",
-					data: {
-						email,
-						password,
-					},
-				},
-				false,
-			)
-
-			// NOTE: Quite hacky... this should be changed.
-			// TODO: Add httpOnly and update the backend to support that.
-			if (remember) {
-				setCookie("refreshToken", res.data.refreshToken, {
-					maxAge: 60 * 60 * 24 * 30, // 30 days
-				})
-			} else {
-				setCookie("refreshToken", res.data.refreshToken)
-			}
-			//refreshToken.value = res.data.refreshToken
-			await refreshSessionToken()
-
-			await navigateTo("/")
-		} catch (e) {
-			if (axios.isAxiosError(e) && e.response?.data?.message) {
-				throw new Error(e.response.data.message)
-			}
-
-			throw new Error("Failed to sign in")
-		}
-	}
-
-	const signup = async (name: string, email: string, password: string) => {}
-
-	const signout = () => {
-		refreshToken.value = null
-		sessionToken.value = null
-	}
-
-	const refreshSessionToken = async () => {
-		if (waitForPromise) {
-			// Force it to wait up to 50 ms for it to set refreshPromise, hopefully less
-			for (let i = 0; i < 10; i++) {
-				if (refreshPromise != null) {
-					break
-				}
-
-				await new Promise((r) => setTimeout(r, 5))
-			}
-		}
-
-		waitForPromise = true
-
-		if (refreshPromise != null) {
-			waitForPromise = false
-			return refreshPromise
-		}
-
-		refreshPromise = cfetch(
-			"/auth/session",
-			{
-				data: {
-					refreshToken: refreshToken.value,
-				},
+			await $fetch("/api/auth/signin", {
 				method: "POST",
-			},
-			false,
-		)
-			.then((res) => {
-				const token = res.data.sessionToken
-				sessionToken.value = token
-
-				refreshPromise = null
-
-				return token
+				body: { email, password, remember: Boolean(remember) },
 			})
-			.catch((e) => {
-				refreshPromise = null
-				sessionToken.value = null
 
+			if (!(await refreshSessionToken())) throw new Error("Unable to create session")
+			await navigateTo("/")
+		} catch (error: any) {
+			throw new Error(error?.data?.message || error?.statusMessage || "Failed to sign in")
+		}
+	}
+
+	const signup = async (name: string, email: string, password: string) => {
+		try {
+			await $fetch("/api/auth/register", {
+				method: "POST",
+				body: { name, email, password },
+			})
+
+			if (!(await refreshSessionToken())) throw new Error("Unable to create session")
+			await navigateTo("/")
+		} catch (error: any) {
+			throw new Error(error?.data?.message || error?.statusMessage || "Failed to sign up")
+		}
+	}
+
+	const signout = async () => {
+		try {
+			await $fetch("/api/auth/signout", { method: "POST" })
+		} finally {
+			sessionToken.value = null
+		}
+	}
+
+	const refreshSessionToken = async (): Promise<string | null> => {
+		if (refreshPromise) return refreshPromise
+
+		refreshPromise = $fetch<SessionResponse>("/api/auth/session", {
+			method: "POST",
+		})
+			.then((response) => {
+				sessionToken.value = response.sessionToken
+				return response.sessionToken
+			})
+			.catch(() => {
+				sessionToken.value = null
 				return null
 			})
 			.finally(() => {
-				waitForPromise = false
+				refreshPromise = null
 			})
 
 		return refreshPromise
 	}
 
-	if (getCurrentInstance()) {
-		onMounted(() => {
-			if (refreshToken.value && !sessionToken.value) refreshSessionToken()
-		})
-	}
-
 	return {
-		refreshToken,
 		sessionToken,
 		signin,
 		signup,