refactor: rename api endpoint to __session

Author: posva

packages/nuxt/src/module.ts

@@ -108,7 +108,7 @@ const VueFire: NuxtModule<VueFireNuxtModuleOptions> =
 
       if (nuxt.options.ssr) {
         addServerHandler({
-          route: '/api/_vuefire/auth',
+          route: '/api/__session',
           handler: resolve(runtimeDir, './auth/api.session'),
         })
       }

packages/nuxt/src/runtime/admin/plugin-auth-user.server.ts

@@ -29,9 +29,10 @@ export default defineNuxtPlugin(async (nuxtApp) => {
       if (isFirebaseError(err) && err.code === 'auth/id-token-expired') {
         // Other errors to be handled: auth/argument-error
         // the error is fine, the user is not logged in
+        console.log('[VueFire]: Token expired -', err)
       } else {
         // ignore the error and consider the user as not logged in
-        console.error('[VueFire]:', err)
+        console.error('[VueFire]: Unknown Error -', err)
       }
     }
   }

packages/nuxt/src/runtime/auth/plugin.client.ts

@@ -18,27 +18,37 @@ export default defineNuxtPlugin((nuxtApp) => {
   VueFireAuth(nuxtApp.payload.vuefireUser)(firebaseApp, nuxtApp.vueApp)
   const auth = getAuth(firebaseApp)
   // send a post request to the server when auth state changes to mint a cookie
-  beforeAuthStateChanged(auth, mintCookie, () => {
-    // rollback the auth state
-    mintCookie(auth.currentUser)
-  })
+  beforeAuthStateChanged(
+    auth,
+    // if this fails, we rollback the auth state
+    mintCookie,
+    () => {
+      // rollback the auth state
+      mintCookie(auth.currentUser)
+    }
+  )
 
   // we need both callback to avoid some race conditions
   onIdTokenChanged(auth, mintCookie)
 })
 
+// TODO: should this be throttled to avoid multiple calls
 /**
  * Sends a post request to the server to mint a cookie based auth session. The name of the cookie is defined in the
  * api.session.ts file.
  *
  * @param user - the user to mint a cookie for
  */
 async function mintCookie(user: User | null) {
-  const jwtToken = await user?.getIdToken()
+  const jwtToken = await user?.getIdToken(/* forceRefresh */ true)
   // throws if the server returns an error so that beforeAuthStateChanged can catch it to cancel
-  await $fetch('/api/_vuefire/auth', {
-    method: 'POST',
-    // if the token is undefined, the server will delete the cookie
-    body: { token: jwtToken },
-  })
+  await $fetch(
+    // '/api/__session-server',
+    '/api/__session',
+    {
+      method: 'POST',
+      // if the token is undefined, the server will delete the cookie
+      body: { token: jwtToken },
+    }
+  )
 }