From c2a8ecdd5db0b33be79628bdb0ca10fdce776a8b Mon Sep 17 00:00:00 2001 From: Lantum-Brendan Date: Tue, 24 Feb 2026 23:33:51 +0100 Subject: [PATCH 01/13] chore: Align API configuration and harden authentication --- .env.example | 2 +- README.md | 4 +++- src/stores/auth.ts | 9 ++++++++- src/views/HomeView.vue | 2 +- src/views/LoginView.vue | 4 ++-- 5 files changed, 15 insertions(+), 6 deletions(-) diff --git a/.env.example b/.env.example index 460e575..76a74b6 100644 --- a/.env.example +++ b/.env.example @@ -1 +1 @@ -VITE_API_URL=http://localhost:8080 +VITE_API_URL=http://localhost:8090/api diff --git a/README.md b/README.md index 553d36a..272c6bd 100644 --- a/README.md +++ b/README.md @@ -75,9 +75,11 @@ Create a `.env.local` file to configure the API connection: ```bash # FlatRun Agent API URL -VITE_API_URL=http://localhost:8090 +VITE_API_URL=http://localhost:8090/api ``` +`VITE_API_URL` must include the `/api` prefix used by the agent routes. + For production deployments: ```bash diff --git a/src/stores/auth.ts b/src/stores/auth.ts index 0903156..1e9def7 100644 --- a/src/stores/auth.ts +++ b/src/stores/auth.ts @@ -63,9 +63,16 @@ export const useAuthStore = defineStore("auth", () => { const login = async (apiKey: string) => { loading.value = true; error.value = ""; + const normalizedApiKey = apiKey.trim(); + + if (!normalizedApiKey) { + error.value = "API key is required"; + loading.value = false; + return false; + } try { - const response = await apiClient.post("/auth/login", { api_key: apiKey }); + const response = await apiClient.post("/auth/login", { api_key: normalizedApiKey }); token.value = response.data.token; localStorage.setItem("auth_token", response.data.token); diff --git a/src/views/HomeView.vue b/src/views/HomeView.vue index 9c92e1b..ff91650 100644 --- a/src/views/HomeView.vue +++ b/src/views/HomeView.vue @@ -395,7 +395,7 @@ const agentVersion = computed(() => statsStore.agentVersion); const lastUpdated = computed(() => statsStore.formatLastUpdated()); const apiEndpoint = computed(() => { - return window.location.hostname + ":8090"; + return import.meta.env.VITE_API_URL || `${window.location.protocol}//${window.location.hostname}:8090`; }); const systemHealth = computed(() => { diff --git a/src/views/LoginView.vue b/src/views/LoginView.vue index 5535286..157ee87 100644 --- a/src/views/LoginView.vue +++ b/src/views/LoginView.vue @@ -107,7 +107,7 @@ -