fix: normalize API base URL to prevent double slashes

Remove trailing slashes from VITE_API_BASE_URL before concatenating
paths. This fixes issues where URLs like `http://localhost:8081/`
would result in `http://localhost:8081//openapi.json`.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: Clément VALENTIN

apps/web/src/pages/ApiDocs.tsx

@@ -18,7 +18,9 @@ declare global {
 export default function ApiDocs() {
   const { isDark } = useThemeStore()
   // Use runtime config first, then build-time env, then default
-  const apiBaseUrl = window.__ENV__?.VITE_API_BASE_URL || import.meta.env.VITE_API_BASE_URL || '/api'
+  // Remove trailing slash to avoid double slashes in URLs
+  const rawApiBaseUrl = window.__ENV__?.VITE_API_BASE_URL || import.meta.env.VITE_API_BASE_URL || '/api'
+  const apiBaseUrl = rawApiBaseUrl.replace(/\/+$/, '')
 
   useEffect(() => {
     // Hide the "Explore" link and customize Swagger UI colors

apps/web/src/pages/ConsentRedirect.tsx

@@ -12,7 +12,9 @@ declare global {
 }
 
 // Use runtime config first, then build-time env, then default
-const API_BASE_URL = window.__ENV__?.VITE_API_BASE_URL || import.meta.env.VITE_API_BASE_URL || '/api'
+// Remove trailing slash to avoid double slashes in URLs
+const rawApiBaseUrl = window.__ENV__?.VITE_API_BASE_URL || import.meta.env.VITE_API_BASE_URL || '/api'
+const API_BASE_URL = rawApiBaseUrl.replace(/\/+$/, '')
 
 export default function ConsentRedirect() {
   const [searchParams] = useSearchParams()

apps/web/src/pages/OAuthCallback.tsx

@@ -15,7 +15,9 @@ declare global {
 }
 
 // Use runtime config first, then build-time env, then default
-const API_BASE_URL = window.__ENV__?.VITE_API_BASE_URL || import.meta.env.VITE_API_BASE_URL || '/api'
+// Remove trailing slash to avoid double slashes in URLs
+const rawApiBaseUrl = window.__ENV__?.VITE_API_BASE_URL || import.meta.env.VITE_API_BASE_URL || '/api'
+const API_BASE_URL = rawApiBaseUrl.replace(/\/+$/, '')
 
 // Global flag to track redirect across component remounts (persists until page reload)
 declare global {

apps/web/src/pages/VerifyEmail.tsx

@@ -1,13 +1,26 @@
 import { useEffect, useState } from 'react'
 import { useNavigate, useSearchParams } from 'react-router-dom'
 
+// Runtime environment from env.js (generated at container startup)
+declare global {
+  interface Window {
+    __ENV__?: {
+      VITE_API_BASE_URL?: string
+      VITE_BACKEND_URL?: string
+    }
+  }
+}
+
 export default function VerifyEmail() {
   const [searchParams] = useSearchParams()
   const navigate = useNavigate()
   const [status, setStatus] = useState<'loading' | 'success' | 'error'>('loading')
   const [message, setMessage] = useState('')
 
-  const apiBaseUrl = import.meta.env.VITE_API_BASE_URL || 'http://localhost:8000'
+  // Use runtime config first, then build-time env, then default
+  // Remove trailing slash to avoid double slashes in URLs
+  const rawApiBaseUrl = window.__ENV__?.VITE_API_BASE_URL || import.meta.env.VITE_API_BASE_URL || '/api'
+  const apiBaseUrl = rawApiBaseUrl.replace(/\/+$/, '')
 
   useEffect(() => {
     const token = searchParams.get('token')