mirror of
https://github.com/karpathy/nanochat.git
synced 2026-05-08 00:39:50 +00:00
aa7a907063
Remove NextAuth and replace with token-based auth against the backend
auth service (OAuth + JWT). The frontend now redirects login to
/api/auth/google and /api/auth/github (proxied by nginx to the auth
service), captures the JWT from the redirect query param, and uses it
for all API calls.
Key changes:
- Remove next-auth dependency and all NextAuth config/routes
- Add lib/auth-client.ts (JWT token storage + auth headers)
- Add hooks/useAuth.ts (client-side auth state + token capture)
- Rewrite middleware.ts to pass-through (client-side auth only)
- Login page uses plain <a> links to /api/auth/{provider}
- Chat page captures access_token from OAuth redirect
- Zustand store fetches conversations from real chat-api via JWT
- API routes proxy /api/conversations/* to chat-api with auth
- chat/stream route supports conversationId + auth header forwarding
- useSSE hook accepts auth headers for authenticated streaming
- Sidebar loads conversations from API, supports delete
- Landing page (Hero, LandingNav) uses useAuth instead of useSession
- Add .env.production.example and scripts/generate-jwt-keys.sh
Mock echo fallback preserved when CHAT_API_URL is not set.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
16 lines
491 B
Bash
Executable File
16 lines
491 B
Bash
Executable File
#!/bin/bash
|
|
# Generate RS256 JWT key pair for samosaChaat auth service
|
|
set -e
|
|
|
|
openssl genrsa -out jwt_private.pem 2048
|
|
openssl rsa -in jwt_private.pem -pubout -out jwt_public.pem
|
|
|
|
echo ""
|
|
echo "Keys generated: jwt_private.pem, jwt_public.pem"
|
|
echo ""
|
|
echo "Add to your .env file:"
|
|
echo "JWT_PRIVATE_KEY=\"$(cat jwt_private.pem | tr '\n' '|')\""
|
|
echo "JWT_PUBLIC_KEY=\"$(cat jwt_public.pem | tr '\n' '|')\""
|
|
echo ""
|
|
echo "The | characters will be replaced back to newlines by the services."
|