Rotimi Best
d5b07d356e
New features: - HLS video encoding/streaming (hls routes, hls-encoder) and a media transcripts pipeline (transcripts route + media-transcript queries) - AI assistant chat vs. run model: agent-course-generation worker/queue, run-monitor pane, chat-changes card, content ask-ai bar - Per-theme course-page previews across org landing-page themes (bold, classic, corporate, editorial, etc.) with a shared course token/component set - View-as-student mode and login-link / link-invite invite flows Refactor: - Extract packages/core consolidating config (env, storage, dashboard-url), services and utils previously duplicated under apps/api/src/config - Remove legacy agent service modules (chat-tools, chat-context, context-window, document, fetch-url, lesson-content) - Relax Cross-Origin-Resource-Policy to allow cross-origin media embedding - Add format script to tenant-router so turbo run format covers it
50 lines
1.6 KiB
TypeScript
50 lines
1.6 KiB
TypeScript
import { createAuthClient } from 'better-auth/svelte';
|
|
import { env } from '$env/dynamic/public';
|
|
import { ssoClient } from '@better-auth/sso/client';
|
|
import { dev } from '$app/environment';
|
|
|
|
// Browser baseURL depends on deployment shape:
|
|
//
|
|
// - Self-hosted: browser auth calls stay on the dashboard origin at
|
|
// `/api/auth/*`; hooks.server.ts forwards them to the API over
|
|
// PRIVATE_SERVER_URL.
|
|
//
|
|
// - Cloud (multi-tenant): same-origin via the Cloudflare Worker so
|
|
// auth cookies stay host-only on whichever tenant/BYOD domain the
|
|
// user is on. We encode `<origin>/proxy/api/auth` because Better
|
|
// Auth's client treats any baseURL with a path as the full auth
|
|
// root verbatim (won't auto-append `/api/auth`).
|
|
//
|
|
// SSR: `authClient` methods are never invoked server-side (the dashboard
|
|
// uses `authServerClient` for that), but Better Auth's constructor still
|
|
// validates baseURL with `new URL(...)`, so we hand it the public API
|
|
// URL as an absolute-URL placeholder.
|
|
function resolveBaseURL() {
|
|
if (typeof window === 'undefined') {
|
|
return env.PUBLIC_SERVER_URL || 'http://localhost:3002';
|
|
}
|
|
if (dev) {
|
|
return env.PUBLIC_SERVER_URL || `${window.location.origin}/api/auth`;
|
|
}
|
|
if (env.PUBLIC_IS_SELFHOSTED === 'true') {
|
|
return `${window.location.origin}/api/auth`;
|
|
}
|
|
return `${window.location.origin}/proxy/api/auth`;
|
|
}
|
|
|
|
const baseURL = resolveBaseURL();
|
|
|
|
export const authClient = createAuthClient({
|
|
baseURL,
|
|
fetchOptions: {
|
|
credentials: 'include' // Include cookies in requests
|
|
},
|
|
plugins: [
|
|
ssoClient({
|
|
domainVerification: {
|
|
enabled: true
|
|
}
|
|
})
|
|
]
|
|
});
|