authentication stopgap integration w/ nuxt + client + server

[alee]

Eventually the nuxt app may subsume and contain all of what used to be server and client but this is a long-range task that will require extensive refactoring of all the components etc., to use tailwindcss and nuxt abstractions and simplifications

So as a stopgap measure one direction we're exploring uses JWT tokens based on this SO question:

https://stackoverflow.com/questions/73398610/nuxt-3-jwt-authentication-using-fetch-and-pinia

and in particular this question: https://stackoverflow.com/a/73406144/93370

1. create an api login post endpoint in nuxt (/server/api/login.post.ts) that creates a fresh JWT based on an email address, e.g.,

import jwt from 'jsonwebtoken';

export default defineEventHandler(async (event) => {
  const body = await useBody(event);
  const token: string = await jwt.sign({ email: body.email }, email_hash);
  return token;
});

2. set the JWT into an httponly cookie

https://stackoverflow.com/questions/39810741/how-to-store-a-jwt-token-inside-an-http-only-cookie

3. add a nuxt middleware (server/middleware/setAuth.ts) that makes accessing the authenticated user in all other api endpoints easier:

import jwt from 'jsonwebtoken';

    export default defineEventHandler(async (event) => {
      if (event.req.headers.authentication) {
        event.context.auth = { email: await jwt.verify(event.req.headers.authentication, email_hash).email };
      }
    });

4. all requests that require authentication need to include the JWT in the headers under an authentication key

$fetch('/api/dashboard', {
            method: 'post',
            headers: {
              authentication: myJsonWebToken,
            },
          });

5. in all nuxt server endpoints that need an auth user get it via event.context.auth.email or whatever we set it to in the server/middleware

6. legacy server side also needs these same checks, this is probably gonna be ugly copy/paste duplication for simplicity at the moment

[alee]

closing for now until we decide on #795