add login with sessian and cleanup

client/src/stores/auth.ts

@@ -0,0 +1,109 @@
+import { defineStore } from 'pinia'
+import { ref } from 'vue'
+
+interface User {
+	id: number
+	username: string
+	email?: string
+}
+
+export const useAuthStore = defineStore('auth', () => {
+	const user = ref<User | null>(null)
+	const loading = ref(false)
+	const error = ref<string | null>(null)
+
+	async function fetchUser() {
+		try {
+			loading.value = true
+			const res = await fetch('/api/v1/user/info', {
+				method: 'GET',
+				credentials: 'include',
+			})
+			if (res.ok) {
+				const data = await res.json()
+				user.value = data.user
+				error.value = null
+			} else if (res.status === 401) {
+				const refreshed = await refreshToken()
+				if (refreshed) return await fetchUser()
+				user.value = null
+			} else {
+				throw new Error('Failed to fetch user')
+			}
+		} catch (err: any) {
+			error.value = err.message
+			user.value = null
+		} finally {
+			loading.value = false
+		}
+	}
+
+	async function login(username: string, password: string) {
+		try {
+			loading.value = true
+			error.value = null
+			const res = await fetch('/api/v1/auth/login', {
+				method: 'POST',
+				headers: { 'Content-Type': 'application/json' },
+				credentials: 'include',
+				body: JSON.stringify({ username, password }),
+			})
+			if (!res.ok) throw new Error('Invalid credentials')
+			const data = await res.json()
+			if (data.ok && data.user) {
+				user.value = data.user
+				return true
+			}
+			throw new Error('Login failed')
+		} catch (err: any) {
+			error.value = err.message
+			return false
+		} finally {
+			loading.value = false
+		}
+	}
+
+	async function refreshToken() {
+		if (!document.cookie.includes('refresh_token')) return false
+		try {
+			const res = await fetch('/api/v1/auth/refresh', {
+				method: 'POST',
+				credentials: 'include',
+			})
+			if (res.ok) {
+				console.info('Token refreshed')
+				return true
+			}
+			console.warn('Token refresh failed')
+			return false
+		} catch {
+			return false
+		}
+	}
+
+	async function logout() {
+		try {
+			await fetch('/api/v1/auth/logout', {
+				method: 'POST',
+				credentials: 'include',
+			})
+		} catch (err) {
+			console.warn('Logout error:', err)
+		} finally {
+			user.value = null
+		}
+	}
+
+	const isAuthenticated = computed(() => !!user.value)
+
+	return {
+		user,
+		loading,
+		error,
+		isAuthenticated,
+		login,
+		logout,
+		fetchUser,
+		refreshToken,
+	}
+})