feat: prisma schema, groups API, deploy workflow

app/composables/useAuth.ts

@@ -0,0 +1,72 @@
+import { jwtDecode } from 'jwt-decode'
+import { getAuth, signInWithPopup, GoogleAuthProvider, signOut, onAuthStateChanged } from 'firebase/auth'
+
+interface User {
+  id: string
+  email: string
+  username: string
+  role?: string
+}
+
+export const useAuth = () => {
+  const token = useCookie<string | null>('xflow_token', {
+    maxAge: 60 * 60 * 24 * 7,
+    sameSite: 'strict'
+  })
+
+  const user = computed<User | null>(() => {
+    if (!token.value) return null
+    try {
+      return jwtDecode<User>(token.value)
+    } catch {
+      return null
+    }
+  })
+
+  const isAuthenticated = computed(() => !!token.value && !!user.value)
+  const isAdmin = computed(() => user.value?.role === 'admin')
+
+  const googleSignIn = async () => {
+    const auth = getAuth()
+    const provider = new GoogleAuthProvider()
+    const result = await signInWithPopup(auth, provider)
+    const idToken = await result.user.getIdToken()
+
+    const res = await $fetch<{ token: string; user: User }>('/api/auth/google', {
+      method: 'POST',
+      body: { idToken }
+    })
+
+    token.value = res.token
+    await navigateTo('/')
+  }
+
+  const logout = async () => {
+    const auth = getAuth()
+    await signOut(auth)
+    token.value = null
+    navigateTo('/login')
+  }
+
+  const initAuth = () => {
+    const auth = getAuth()
+    onAuthStateChanged(auth, async (firebaseUser) => {
+      if (firebaseUser) {
+        const idToken = await firebaseUser.getIdToken()
+        if (idToken !== token.value) {
+          token.value = idToken
+        }
+      }
+    })
+  }
+
+  return {
+    token,
+    user,
+    isAuthenticated,
+    isAdmin,
+    googleSignIn,
+    logout,
+    initAuth
+  }
+}