🐛 fix: proxy requests through the web origin

.devcontainer/docker-compose.yml

@@ -33,7 +33,7 @@ services:
       - KUBECONFIG=/home/dev/.kube/config
       - DATABASE_URL=postgresql://postgres:postgres@db:5432/minikura?sslmode=disable
       - WEB_URL=http://localhost:3001
-      - NEXT_PUBLIC_API_URL=http://localhost:3000
+      - API_URL=http://localhost:3000
       - KUBERNETES_NAMESPACE=minikura
       - ENABLE_CRD_REFLECTION=true
 

.env.example

@@ -6,8 +6,8 @@ DATABASE_URL="postgresql://user:password@localhost:5432/minikura"
 # URL where the web frontend is running (used for CORS)
 WEB_URL="http://localhost:3001"
 
-# API URL that the web frontend should connect to
+# Internal API URL used by the Next.js server and same-origin browser proxy
-NEXT_PUBLIC_API_URL="http://localhost:3000"
+API_URL="http://localhost:3000"
 
 # Kubernetes Configuration
 KUBERNETES_NAMESPACE="minikura"

apps/backend/src/middleware/auth.ts

@@ -3,6 +3,8 @@ import { betterAuth } from "better-auth";
 import { prismaAdapter } from "better-auth/adapters/prisma";
 import { admin, openAPI } from "better-auth/plugins";
 
+const webUrl = process.env.WEB_URL || "http://localhost:3001";
+
 export const auth = betterAuth({
   database: prismaAdapter(prisma, {
     provider: "postgresql",
@@ -10,11 +12,11 @@ export const auth = betterAuth({
   }),
   emailAndPassword: { enabled: true },
   plugins: [admin(), openAPI()],
-  trustedOrigins: [process.env.WEB_URL || "http://localhost:3001"],
+  trustedOrigins: [webUrl],
-  session: {
-    cookieCache: { enabled: true, maxAge: 60 * 5 },
-  },
   basePath: "/auth",
+  advanced: {
+    useSecureCookies: webUrl.startsWith("https://"),
+  },
 });
 
 export type Auth = typeof auth;

apps/web/app/page.tsx

@@ -4,7 +4,7 @@ import { redirect } from "next/navigation";
 
 export const dynamic = "force-dynamic";
 
-const apiUrl = process.env.NEXT_PUBLIC_API_URL || "http://localhost:3000";
+const apiUrl = process.env.API_URL || "http://localhost:3000";
 const api = treaty<App>(apiUrl);
 
 export default async function HomePage() {

apps/web/lib/api-client.ts

@@ -1,7 +1,10 @@
 import { treaty } from "@elysiajs/eden";
 import type { App } from "@minikura/backend";
 
-const baseUrl = process.env.NEXT_PUBLIC_API_URL || "http://localhost:3000";
+const baseUrl =
+  typeof window === "undefined"
+    ? process.env.API_URL || "http://localhost:3000"
+    : window.location.origin;
 
 export const api = treaty<App>(baseUrl, {
   fetch: {

apps/web/lib/auth-client.ts

@@ -2,9 +2,11 @@ import { adminClient } from "better-auth/client/plugins";
 import { createAuthClient } from "better-auth/react";
 
 export const authClient = createAuthClient({
-  baseURL: process.env.NEXT_PUBLIC_API_URL || "http://localhost:3000",
   basePath: "/auth",
   plugins: [adminClient()],
+  fetchOptions: {
+    credentials: "include",
+  },
 });
 
 export const { useSession, signIn, signOut, signUp } = authClient;

apps/web/next.config.mjs

@@ -4,7 +4,21 @@
  * @type {import('next').NextConfig}
  */
 const nextConfig = {
-  /* config options here */
+  async rewrites() {
-}
+    const apiUrl = (process.env.API_URL || process.env.NEXT_PUBLIC_API_URL || "http://localhost:3000")
+      .replace(/\/$/, "");
+
+    return [
+      {
+        source: "/auth/:path*",
+        destination: `${apiUrl}/auth/:path*`,
+      },
+      {
+        source: "/api/:path*",
+        destination: `${apiUrl}/api/:path*`,
+      },
+    ];
+  },
+};
  
-export default nextConfig
+export default nextConfig;