feat: restructure into XFlow monorepo with Nuxt 4, Modular Onion Monolith, Android client, and Desktop CLI

2026-09-28 08:57:32 +05:00
parent edcd30c829
commit 0837b3f612
204 changed files with 24616 additions and 39 deletions
@@ -0,0 +1,93 @@
+import { generateToken } from '~/server/utils/auth'
+import { prisma } from '~/server/utils/prisma'
+
+interface FirebaseUser {
+  localId: string
+  email: string
+  displayName?: string
+  photoUrl?: string
+}
+
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event)
+  const { idToken } = body
+
+  if (!idToken) {
+    throw createError({ statusCode: 400, message: 'Firebase ID token required' })
+  }
+
+  const config = useRuntimeConfig()
+  const apiKey = config.firebaseApiKey || config.public.firebaseApiKey
+
+  if (!apiKey) {
+    throw createError({ statusCode: 500, message: 'Firebase API key not configured' })
+  }
+
+  console.log('[Auth] Received idToken, length:', idToken?.length || 0)
+  console.log('[Auth] Using API key (masked):', apiKey ? `${apiKey.slice(0, 6)}...${apiKey.slice(-4)}` : 'EMPTY')
+
+  let verifyRes: any
+  try {
+    verifyRes = await $fetch<any>(
+      `https://identitytoolkit.googleapis.com/v1/accounts:lookup?key=${apiKey}`,
+      { method: 'POST', body: { idToken } }
+    )
+  } catch (err: any) {
+    console.error('[Auth] Firebase token verification failed:', err?.data || err?.message || err)
+    throw createError({ statusCode: 401, message: 'Invalid Firebase token' })
+  }
+
+  if (!verifyRes?.users?.[0]) {
+    throw createError({ statusCode: 401, message: 'Invalid Firebase token' })
+  }
+
+  const fbUser: FirebaseUser = verifyRes.users[0]
+  const email = fbUser.email
+  // Очищаем username: заменяем пробелы на дефисы и убираем спецсимволы
+  const username = email.split('@')[0].toLowerCase().replace(/\s+/g, '-').replace(/[^a-z0-9-_]/g, '')
+  const userId = fbUser.localId
+
+  const user = await prisma.user.upsert({
+    where: { email },
+    update: { 
+      username 
+      // Мы не затираем профиль при каждом входе, но нам нужно его получить
+    },
+    create: {
+      id: userId,
+      email,
+      username,
+      password: 'firebase-managed',
+      role: 'user',
+      profile: {
+        create: {
+          displayName: fbUser.displayName || username,
+          avatar: fbUser.photoUrl || `https://api.dicebear.com/7.x/avataaars/svg?seed=${userId}`
+        }
+      }
+    },
+    include: { 
+      profile: true 
+    }
+  })
+
+  const token = generateToken({
+    id: user.id,
+    email: user.email,
+    username: user.username,
+    displayName: user.profile?.displayName || user.username,
+    role: user.role
+  })
+
+  return {
+    message: 'Google sign-in successful',
+    token,
+    user: {
+      id: user.id,
+      email: user.email,
+      username: user.username,
+      role: user.role,
+      photoUrl: fbUser.photoUrl
+    }
+  }
+})