@mundogamernetwork/shared-ui 1.3.0 → 1.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mundogamernetwork/shared-ui",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "description": "Mundo Gamer Network - Shared UI Layer (Nuxt 3)",
   "type": "module",
   "main": "./nuxt.config.ts",

package/pages/key-campaign/[slug].vue

@@ -13,15 +13,21 @@ const routePath = route.path.split('/');
 const lang = SUPPORTED_LOCALES.find(l => routePath.includes(l)) || 'en';
 
 const config = useRuntimeConfig();
-// keyApiUrl overrides apiBaseURL — lets each front point to a specific API base
-// (e.g. community uses agency-api, not its own locale-prefixed API base).
+// keyApiUrl overrides apiBaseURL — lets each front point to the API that
+// registered the shared key routes.
 // Follow the same override pattern as presskit/game/[slug].vue.
 const cfg = (config.public as any)?.mgSharedUi || config.public;
-const apiBase: string =
+const withApiV1 = (base?: string) => {
+	if (!base) return '';
+	const clean = base.replace(/\/$/, '');
+	return /\/api\/v1$/.test(clean) ? clean : `${clean}/api/v1`;
+};
+const apiBase: string = withApiV1(
 	(config.public as any).keyApiUrl ||
 	cfg.keyApiUrl ||
 	(config.public.apiBaseURL as string) ||
-	'';
+	'',
+);
 
 const { data: keyData, error: fetchError, pending, refresh } = await useAsyncData(
 	`public-key-${slug}`,

package/services/campaignService.ts

@@ -1,32 +1,67 @@
 import axios, { type AxiosInstance } from "axios"
 
 // Campaign service wraps the key-campaigns API used by TV, community, and agency.
-// Two clients:
-//   mainClient — public endpoints (/public/keys*), no auth required for listing
-//   authClient — authenticated endpoints (/api/v1/*), withCredentials
+// Each frontend backend registers the shared key routes through its own provider.
+// Authenticated calls must therefore use the current app API host, otherwise
+// cookies for api.mundogamer.tv/community/agency are not sent to api-main.
 
 let _mainClient: AxiosInstance | null = null
 let _authClient: AxiosInstance | null = null
 
-function getMainClient(): AxiosInstance {
-	if (_mainClient) return _mainClient
+const SUPPORTED_LOCALES = ["en", "pt-BR", "es", "de", "ro", "ar-AE"]
+
+function resolveLang(): string {
+	const seg =
+		typeof location === "undefined" ? "" : location.pathname.split("/")[1] || ""
+	return SUPPORTED_LOCALES.includes(seg) ? seg : "en"
+}
+
+function withApiV1(baseURL?: string): string {
+	if (!baseURL) return ""
+	const base = baseURL.replace(/\/$/, "")
+	return /\/api\/v1$/.test(base) ? base : `${base}/api/v1`
+}
 
-	const baseURL =
+function withoutApiV1(baseURL?: string): string {
+	return (baseURL || "").replace(/\/api\/v1\/?$/, "").replace(/\/$/, "")
+}
+
+function getPublicApiBaseURL(): string {
+	return withApiV1(
+		import.meta.env.VITE_KEY_API_URL ||
 		import.meta.env.VITE_CAMPAIGN_API_URL ||
+		import.meta.env.VITE_API_BASE_URL ||
 		import.meta.env.VITE_BASE_URL_NETWORK ||
+		"",
+	)
+}
+
+function getAuthenticatedApiBaseURL(): string {
+	return withApiV1(
+		import.meta.env.VITE_KEY_AUTH_API_URL ||
+		import.meta.env.VITE_KEY_API_URL ||
 		import.meta.env.VITE_API_BASE_URL ||
-		""
+		import.meta.env.VITE_CAMPAIGN_API_URL ||
+		import.meta.env.VITE_BASE_URL_NETWORK ||
+		"",
+	)
+}
+
+function getMainClient(): AxiosInstance {
+	if (_mainClient) return _mainClient
 
-	_mainClient = axios.create({ baseURL })
+	_mainClient = axios.create({ baseURL: getPublicApiBaseURL() })
 
 	_mainClient.interceptors.request.use((config) => {
-		const SUPPORTED_LOCALES = ["en", "pt-BR", "es", "de", "ro", "ar-AE"]
-		const seg =
-			typeof location === "undefined" ? "" : location.pathname.split("/")[1] || ""
-		const lang = SUPPORTED_LOCALES.includes(seg) ? seg : "en"
+		const lang = resolveLang()
 		config.params = { ...config.params, lang }
+		// Only attach the shared debug token in true local dev — "!== production"
+		// also matches "hlg" (staging), which has real logged-in users relying on
+		// their own session cookie via withCredentials. Attaching this static
+		// token there overrides/corrupts their actual auth, causing a 401 on
+		// endpoints that check the request's real identity (e.g. key requests).
 		if (
-			import.meta.env.VITE_APP_ENV !== "production" &&
+			import.meta.env.VITE_APP_ENV === "local" &&
 			typeof window !== "undefined" &&
 			import.meta.env.VITE_BEARER_TOKEN
 		) {
@@ -41,22 +76,18 @@ function getMainClient(): AxiosInstance {
 function getAuthClient(): AxiosInstance {
 	if (_authClient) return _authClient
 
-	const baseURL =
-		import.meta.env.VITE_CAMPAIGN_API_URL ||
-		import.meta.env.VITE_BASE_URL_NETWORK ||
-		import.meta.env.VITE_API_BASE_URL ||
-		""
-
-	_authClient = axios.create({ baseURL, withCredentials: true })
+	_authClient = axios.create({ baseURL: getAuthenticatedApiBaseURL(), withCredentials: true })
 
 	_authClient.interceptors.request.use((config) => {
-		const SUPPORTED_LOCALES = ["en", "pt-BR", "es", "de", "ro", "ar-AE"]
-		const seg =
-			typeof location === "undefined" ? "" : location.pathname.split("/")[1] || ""
-		const lang = SUPPORTED_LOCALES.includes(seg) ? seg : "en"
+		const lang = resolveLang()
 		config.params = { ...config.params, lang }
+		// Only attach the shared debug token in true local dev — "!== production"
+		// also matches "hlg" (staging), which has real logged-in users relying on
+		// their own session cookie via withCredentials. Attaching this static
+		// token there overrides/corrupts their actual auth, causing a 401 on
+		// endpoints that check the request's real identity (e.g. key requests).
 		if (
-			import.meta.env.VITE_APP_ENV !== "production" &&
+			import.meta.env.VITE_APP_ENV === "local" &&
 			typeof window !== "undefined" &&
 			import.meta.env.VITE_BEARER_TOKEN
 		) {
@@ -336,6 +367,16 @@ export const fetchCampaignTypes = (params: Record<string, any> = {}) => {
  * Fetch active platforms (for the platform filter select).
  */
 export const fetchCampaignPlatforms = () => {
+	const communityBaseURL = withoutApiV1(
+		import.meta.env.VITE_KEY_PLATFORMS_API_URL ||
+		import.meta.env.VITE_BASE_URL_COMMUNITY ||
+		(/community/i.test(import.meta.env.VITE_API_BASE_URL || "") ? import.meta.env.VITE_API_BASE_URL : ""),
+	)
+	if (communityBaseURL) {
+		return axios.get(`${communityBaseURL}/${resolveLang()}/platforms/currently`, {
+			withCredentials: true,
+		})
+	}
 	return authClient.get("/platforms/currently")
 }