Files

bert.hausmans 8ace0480ae fix: handle 401 gracefully in auth initialization after httpOnly migration

Race condition: the axios 401 interceptor uses a dynamic import, so
handleUnauthorized() fires AFTER doInitialize() sets isInitialized=true.
handleUnauthorized() then reset isInitialized to false, leaving the app
stuck on a loading spinner with no way to recover.

Fix: remove isInitialized=false from handleUnauthorized() in all three
apps. When handleUnauthorized() redirects via window.location.href, all
JS state resets naturally. When it skips the redirect (already on a
public page like /login), the app should render normally in an
unauthenticated state.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-14 16:24:58 +02:00

public

chore: add Mock Service Worker public asset

2026-04-10 11:16:52 +02:00

src

fix: handle 401 gracefully in auth initialization after httpOnly migration

2026-04-14 16:24:58 +02:00

auto-imports.d.ts

feat(app): auth, orgs/events UI, router guards, and dev tooling

2026-04-07 21:51:10 +02:00

components.d.ts

feat(mail): center-align action button in email template

2026-04-14 00:49:41 +02:00

dev.Dockerfile

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

docker-compose.dev.yml

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

docker-compose.prod.yml

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

env.d.ts

feat(mail): center-align action button in email template

2026-04-14 00:49:41 +02:00

index.html

fix: add Google Fonts domains to CSP policy

2026-04-14 16:20:51 +02:00

nginx.conf

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

package.json

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

pnpm-lock.yaml

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

prod.Dockerfile

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

README 2.md

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

README.md

chore: align migrations, docs, and frontends with crewli.app setup

2026-04-07 10:45:34 +02:00

shims.d.ts

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

themeConfig.ts

feat(mail): center-align action button in email template

2026-04-14 00:49:41 +02:00

tsconfig.json

feat(app): auth, orgs/events UI, router guards, and dev tooling

2026-04-07 21:51:10 +02:00

typed-router.d.ts

feat: password reset, email change with verification, and password change

2026-04-14 15:38:54 +02:00

vite.config.ts

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

README.md

Crewli — Organizer SPA

Main product UI for organisation and event staff (Vue 3 + Vuexy + Vuetify). Lives in this repo; only re-copy from Vuexy when upgrading the template.

Setup

Install dependencies:

pnpm install

Create .env.local:

VITE_API_URL=http://localhost:8000/api/v1
VITE_APP_NAME="Crewli Organizer"

Dev server uses port 5174 (see vite.config.ts or run from repo root: make app).

pnpm dev --port 5174

Port

Runs on http://localhost:5174

Production: e.g. VITE_API_URL=https://api.crewli.app/api/v1 and host the SPA at https://app.crewli.app (see api/.env.example for FRONTEND_APP_URL and SANCTUM_STATEFUL_DOMAINS).