API Authentication

// API Authentication
const response = await fetch('https://api.luneo.app/v1/products', {
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY',
    'Content-Type': 'application/json'
  }
});

// OAuth 2.0 (Google, GitHub) via backend NestJS
// Le frontend redirige vers le backend qui gère le flow OAuth et les cookies JWT

const apiUrl = process.env.NEXT_PUBLIC_API_URL;
const res = await fetch(apiUrl + '/api/v1/auth/google', { redirect: 'follow' });
// Backend renvoie Set-Cookie (accessToken, refreshToken) et redirection

// JWT Verification
const jwt = require('jsonwebtoken');

const token = req.headers.authorization?.split(' ')[1];
const decoded = jwt.verify(token, process.env.JWT_SECRET);
logger.info('User ID:', decoded.sub);