fix(auth): log real Firebase error + add NUXT_FIREBASE_API_KEY to docker-compose

app/server/api/auth/google.post.ts

@@ -23,10 +23,19 @@ export default defineEventHandler(async (event) => {
     throw createError({ statusCode: 500, message: 'Firebase API key not configured' })
   }
 
-  const verifyRes = await $fetch<any>(
+  console.log('[Auth] Received idToken, length:', idToken?.length || 0)
+  console.log('[Auth] Using API key (masked):', apiKey ? `${apiKey.slice(0, 6)}...${apiKey.slice(-4)}` : 'EMPTY')
+
+  let verifyRes: any
+  try {
+    verifyRes = await $fetch<any>(
       `https://identitytoolkit.googleapis.com/v1/accounts:lookup?key=${apiKey}`,
       { method: 'POST', body: { idToken } }
-  ).catch(() => null)
+    )
+  } catch (err: any) {
+    console.error('[Auth] Firebase token verification failed:', err?.data || err?.message || err)
+    throw createError({ statusCode: 401, message: 'Invalid Firebase token' })
+  }
 
   if (!verifyRes?.users?.[0]) {
     throw createError({ statusCode: 401, message: 'Invalid Firebase token' })

server/docker-compose.yml

@@ -22,6 +22,7 @@ services:
       GITEA_MINDMAP_REPO: ${GITEA_MINDMAP_REPO:-MMAVTEX}
       GITEA_PROJECT_REPO: ${GITEA_PROJECT_REPO:-XFlow}
       DATABASE_URL: postgresql://${POSTGRES_USER:-admin}:${POSTGRES_PASSWORD}@xflow_db:5432/${DB_NAME_XFLOW:-xflow_crm_db}
+      NUXT_FIREBASE_API_KEY: ${FIREBASE_API_KEY}
       NUXT_PUBLIC_FIREBASE_API_KEY: ${FIREBASE_API_KEY}
       NUXT_PUBLIC_FIREBASE_AUTH_DOMAIN: ${FIREBASE_AUTH_DOMAIN}
       NUXT_PUBLIC_FIREBASE_PROJECT_ID: ${FIREBASE_PROJECT_ID}