FIX: Login System

Author: NEKOYASAN

.gitignore

@@ -88,3 +88,6 @@ sw.*
 
 # Vim swap files
 *.swp
+
+.runtimeconfig.json
+key.json

nuxt.config.js

@@ -63,6 +63,10 @@ module.exports = {
       src: '@/plugins/persistedstate.js',
       ssr: false,
     },
+    {
+      src: '@/plugins/firebase-admin.js',
+      ssr: true,
+    },
   ],
   /*
    ** Nuxt.js dev-modules

package.json

@@ -35,6 +35,7 @@
     "dayjs": "^1.8.26",
     "express": "^4.17.1",
     "firebase": "^7.14.2",
+    "firebase-admin": "^8.12.0",
     "js-cookie": "^2.2.1",
     "jwt-decode": "^2.2.0",
     "lodash.clonedeep": "^4.5.0",

src/layouts/ClassLayout.vue

@@ -1,5 +1,19 @@
-export default function ({ store, redirect }) {
-  if (!store.getters['modules/user/isAuthenticated']) {
-    return redirect('/account/login')
+export default ({ req, redirect }) => {
+  if (process.server) {
+    const admin = require('firebase-admin')
+    const cookieparser = require('cookieparser')
+    if (req.headers.cookie) {
+      const token = cookieparser.parse(req.headers.cookie).__session
+      admin
+        .auth()
+        .verifyIdToken(token)
+        .then(() => {})
+        .catch((error) => {
+          console.error(error)
+          redirect('/account/login')
+        })
+    } else {
+      redirect('/account/login')
+    }
   }
 }

src/middleware/authenticated.js

@@ -0,0 +1,14 @@
+// eslint-disable-next-line import/no-mutable-exports
+let admin = null
+if (process.server) {
+  admin = require('firebase-admin')
+  if (!admin.apps.length) {
+    admin.initializeApp({
+      credential: admin.credential.applicationDefault(),
+      databaseURL: 'https://studyathome.firebaseio.com',
+    })
+  }
+}
+
+// eslint-disable-next-line no-undef
+export default admin

src/plugins/firebase-admin.js

@@ -32,15 +32,15 @@ export const actions = {
       avatar: user.photoURL,
       uid: user.uid,
     }
-    Cookies.set('access_token', token) // saving token in cookie for server rendering
+    Cookies.set('__session', token) // saving token in cookie for server rendering
     await dispatch('setUserData', userInfo)
     await dispatch('setUid', firebase.auth().currentUser.uid)
   },
 
   async logout({ commit }) {
     await firebase.auth().signOut()
 
-    Cookies.remove('access_token')
+    Cookies.remove('__session')
     commit('setUserData', null)
     commit('setUid', null)
   },