mirror of
https://github.com/karpathy/nanochat.git
synced 2026-06-12 01:48:52 +00:00
aa7a907063
Remove NextAuth and replace with token-based auth against the backend
auth service (OAuth + JWT). The frontend now redirects login to
/api/auth/google and /api/auth/github (proxied by nginx to the auth
service), captures the JWT from the redirect query param, and uses it
for all API calls.
Key changes:
- Remove next-auth dependency and all NextAuth config/routes
- Add lib/auth-client.ts (JWT token storage + auth headers)
- Add hooks/useAuth.ts (client-side auth state + token capture)
- Rewrite middleware.ts to pass-through (client-side auth only)
- Login page uses plain <a> links to /api/auth/{provider}
- Chat page captures access_token from OAuth redirect
- Zustand store fetches conversations from real chat-api via JWT
- API routes proxy /api/conversations/* to chat-api with auth
- chat/stream route supports conversationId + auth header forwarding
- useSSE hook accepts auth headers for authenticated streaming
- Sidebar loads conversations from API, supports delete
- Landing page (Hero, LandingNav) uses useAuth instead of useSession
- Add .env.production.example and scripts/generate-jwt-keys.sh
Mock echo fallback preserved when CHAT_API_URL is not set.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
55 lines
2.1 KiB
TypeScript
55 lines
2.1 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
|
|
export const runtime = 'nodejs';
|
|
|
|
const CHAT_API = process.env.CHAT_API_URL || 'http://chat-api:8002';
|
|
|
|
export async function GET(req: NextRequest, { params }: { params: { id: string } }) {
|
|
const auth = req.headers.get('authorization');
|
|
if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
|
|
|
try {
|
|
const res = await fetch(`${CHAT_API}/api/conversations/${params.id}`, {
|
|
headers: { Authorization: auth },
|
|
});
|
|
return NextResponse.json(await res.json(), { status: res.status });
|
|
} catch (err) {
|
|
console.error('[conversations/:id] GET error:', err);
|
|
return NextResponse.json({ error: 'Failed to fetch conversation' }, { status: 500 });
|
|
}
|
|
}
|
|
|
|
export async function PUT(req: NextRequest, { params }: { params: { id: string } }) {
|
|
const auth = req.headers.get('authorization');
|
|
if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
|
|
|
const body = await req.json();
|
|
try {
|
|
const res = await fetch(`${CHAT_API}/api/conversations/${params.id}`, {
|
|
method: 'PUT',
|
|
headers: { Authorization: auth, 'Content-Type': 'application/json' },
|
|
body: JSON.stringify(body),
|
|
});
|
|
return NextResponse.json(await res.json(), { status: res.status });
|
|
} catch (err) {
|
|
console.error('[conversations/:id] PUT error:', err);
|
|
return NextResponse.json({ error: 'Failed to update conversation' }, { status: 500 });
|
|
}
|
|
}
|
|
|
|
export async function DELETE(req: NextRequest, { params }: { params: { id: string } }) {
|
|
const auth = req.headers.get('authorization');
|
|
if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
|
|
|
try {
|
|
const res = await fetch(`${CHAT_API}/api/conversations/${params.id}`, {
|
|
method: 'DELETE',
|
|
headers: { Authorization: auth },
|
|
});
|
|
return NextResponse.json({ ok: true }, { status: res.status });
|
|
} catch (err) {
|
|
console.error('[conversations/:id] DELETE error:', err);
|
|
return NextResponse.json({ error: 'Failed to delete conversation' }, { status: 500 });
|
|
}
|
|
}
|