Restructure the repo into a pnpm + Turborepo monorepo: - apps/web: Nuxt 4 site, now server-rendered and reading all content from the API; pages cached with SWR and purged on content changes - apps/api: NestJS 12 + Prisma 7 + PostgreSQL. Auth with short-lived access tokens and rotating httpOnly refresh cookies, roles (ADMIN, EDITOR), catalog, editable site sections, media upload to S3-compatible storage (converted to WebP), contact messages, audit log - apps/admin: Vue 3 admin panel (Ant Design Vue, Pinia, Tailwind) for products, categories, site sections, messages, media and users - packages/shared: Zod schemas and types shared by API and admin Also: - seed script that loads the original 8 categories / 89 products and section content - Docker images for api (with a one-off migrate service), web, admin, and an nginx gateway for both domains - dev and production compose files, daily database backup service - API e2e tests Removes the committed static out/ build and the old root Dockerfile. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
26 lines
945 B
TypeScript
26 lines
945 B
TypeScript
import { timingSafeEqual } from "node:crypto";
|
|
|
|
/**
|
|
* Called by the API after content changes: drops all cached pages so the next request
|
|
* renders fresh HTML. Protected by a shared secret (NUXT_REVALIDATE_SECRET).
|
|
*/
|
|
export default defineEventHandler(async (event) => {
|
|
const expected = useRuntimeConfig().revalidateSecret;
|
|
const given = getHeader(event, "x-revalidate-secret") ?? "";
|
|
if (!expected || !safeEqual(given, expected)) {
|
|
throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
|
|
}
|
|
|
|
// route-rule caches (swr) are stored as cache:nitro:routes:*
|
|
const storage = useStorage("cache");
|
|
const keys = await storage.getKeys("nitro:routes");
|
|
await Promise.all(keys.map((k) => storage.removeItem(k)));
|
|
return { cleared: keys.length };
|
|
});
|
|
|
|
function safeEqual(a: string, b: string) {
|
|
const ab = Buffer.from(a);
|
|
const bb = Buffer.from(b);
|
|
return ab.length === bb.length && timingSafeEqual(ab, bb);
|
|
}
|