@lenne.tech/nuxt-extensions 1.19.0 → 1.19.1

package/README.md

@@ -583,6 +583,20 @@ absolute URL is used as it is. If your project routes uploads through its own sa
 instead, set `ltExtensions.tus.resolveAgainstApi: false` and the relative endpoint stays on the app
 origin.
 
+**Changing it per stage.** The `tus` options are part of the public runtime config, so a deployed
+stage can override them through the environment, without a rebuild:
+
+```bash
+# Send this stage's uploads to another host (absolute URLs are used as they are)
+NUXT_PUBLIC_LT_EXTENSIONS_TUS_DEFAULT_ENDPOINT=https://uploads.example.com/tus
+# Keep a relative endpoint on the app origin (own same-origin proxy)
+NUXT_PUBLIC_LT_EXTENSIONS_TUS_RESOLVE_AGAINST_API=false
+```
+
+Keep the relative default where you can: `NUXT_PUBLIC_API_URL` already differs per stage, so `'/tus'`
+follows it. Uploads are sent with credentials, so a host other than the API has to receive the
+session cookie, or every upload answers 401.
+
 **Which id to keep.** After a successful upload, `item.fileId` is the id of the stored file, read
 from the `X-File-Id` response header (nest-server 11.42.13+). Use it for file links and references.
 `item.url` is the TUS upload resource; its last segment is the upload id, not the file id. `fileId`

package/dist/module.d.mts

@@ -3,7 +3,7 @@ import { LtExtensionsModuleOptions } from '../dist/runtime/types/index.js';
 export * from '../dist/runtime/types/index.js';
 
 declare const name = "@lenne.tech/nuxt-extensions";
-declare const version = "1.19.0";
+declare const version = "1.19.1";
 declare const configKey = "ltExtensions";
 declare const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 declare const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "configKey": "ltExtensions",
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.19.0",
+  "version": "1.19.1",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -2,7 +2,7 @@ import { defineNuxtModule, createResolver, tryResolveModule, addImports, addComp
 import { pathToFileURL } from 'node:url';
 
 const name = "@lenne.tech/nuxt-extensions";
-const version = "1.19.0";
+const version = "1.19.1";
 const configKey = "ltExtensions";
 const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/runtime/composables/auth/use-lt-auth.js

@@ -3,6 +3,7 @@ import { ltArrayBufferToBase64Url, ltBase64UrlToUint8Array } from "../../utils/c
 import { clearLtAuthCookies, getLtApiBase, getLtAuthCookieNames, resolveLtAuthState } from "../../lib/auth-state.js";
 import { useLtAuthClient } from "../use-lt-auth-client.js";
 const VALIDATE_SESSION_TIMEOUT_MS = 1e4;
+let staleJwtRefresh = null;
 function useTranslation() {
   const nuxtApp = useNuxtApp();
   const i18n = nuxtApp.$i18n;
@@ -139,8 +140,35 @@ export function useLtAuth() {
         });
       }
     }
+    if (response.status === 401 && isJwtMode.value && isAuthenticated.value && !needsCookies) {
+      const freshToken = await refreshStaleJwt();
+      if (freshToken) {
+        headers.set("Authorization", `Bearer ${freshToken}`);
+        return fetch(url, {
+          ...options,
+          headers,
+          credentials: "omit"
+        });
+      }
+    }
     return response;
   }
+  async function refreshStaleJwt() {
+    const mint = async () => await switchToJwtMode() ? jwtToken.value : null;
+    if (!import.meta.client) {
+      return mint();
+    }
+    if (!staleJwtRefresh) {
+      staleJwtRefresh = mint().finally(() => {
+        staleJwtRefresh = null;
+      });
+    }
+    const token = await staleJwtRefresh;
+    if (token && jwtToken.value !== token) {
+      jwtToken.value = token;
+    }
+    return token;
+  }
   const AUTHZ_KEYS = ["banExpires", "banReason", "banned", "emailVerified", "role", "roles", "twoFactorEnabled"];
   function mergeSessionUser(sessionUser) {
     const cached = resolvedAuthState.value?.user;

package/dist/runtime/composables/auth/use-system-setup.js

@@ -1,10 +1,21 @@
 import { computed, useState } from "#imports";
 import { ltSha256 } from "../../utils/crypto.js";
-import { buildLtApiUrl } from "../../lib/auth-state.js";
+import { buildLtApiUrl, resolveLtApiBaseUrl, warnMissingLtApiUrl } from "../../lib/auth-state.js";
+function isApiUrlMissing() {
+  try {
+    return resolveLtApiBaseUrl().missing;
+  } catch {
+    return true;
+  }
+}
 export function useSystemSetup() {
   const needsSetupState = useState("lt-needs-setup", () => null);
   const needsSetup = computed(() => needsSetupState.value);
   async function checkSetupStatus() {
+    if (import.meta.server && isApiUrlMissing()) {
+      warnMissingLtApiUrl("server");
+      return false;
+    }
     try {
       const url = buildLtApiUrl("/system-setup/status");
       const data = await $fetch(url);

package/dist/runtime/lib/auth-state.js

@@ -78,7 +78,7 @@ export function isLocalDevApiProxy() {
 }
 const MISSING_API_URL_WARNING = {
   client: "[LtExtensions] No API URL configured. Set NUXT_PUBLIC_API_URL. API paths stay relative and resolve against the app origin, so auth and setup calls 404 unless the app is served behind a same-origin reverse proxy.",
-  server: "[LtExtensions] No API URL configured for SSR. Set NUXT_API_URL or NUXT_PUBLIC_API_URL. API paths stay relative, so server-side requests never reach the backend: $fetch resolves them against Nitro (404) and global fetch rejects them as an invalid URL."
+  server: "[LtExtensions] No API URL configured for SSR. Set NUXT_API_URL or NUXT_PUBLIC_API_URL. API paths stay relative, so server-side requests never reach the backend: $fetch sends them to this Nitro server itself and global fetch rejects them as an invalid URL."
 };
 function stripTrailingSlashes(url) {
   return url.replace(/\/+$/, "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.19.0",
+  "version": "1.19.1",
   "description": "Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.tech projects",
   "repository": {
     "type": "git",