push update socket data dan token

server/api/external/validate-token.post.ts

@@ -0,0 +1,77 @@
+import { defineEventHandler, createError } from 'h3';
+import { getSessionFromCookie } from '~/server/utils/sessionStore';
+
+export default defineEventHandler(async (event) => {
+  console.log('🌐 Proxy: External token validation requested');
+  
+  const config = useRuntimeConfig();
+  
+  try {
+    // 1. Get current session to retrieve access token
+    const session = await getSessionFromCookie(event);
+    
+    if (!session || !session.accessToken) {
+      console.log('❌ Proxy: No valid session or access token found');
+      throw createError({
+        statusCode: 401,
+        statusMessage: 'Unauthorized: No valid session found',
+      });
+    }
+    
+    const accessToken = session.accessToken;
+    
+    // Log token details for debugging audience and claims
+    try {
+      const payloadPart = accessToken.split('.')[1];
+      const payload = JSON.parse(Buffer.from(payloadPart, 'base64').toString());
+      console.log('🎫 Full Token Payload:', JSON.stringify(payload, null, 2));
+      console.log('🎫 Token Audience (aud):', payload.aud);
+    } catch (e) {
+      console.warn('⚠️ Proxy: Failed to parse token for logging');
+    }
+
+    const externalApiUrl = `${config.externalApiBaseUrl}/api/v1/auth/me`;
+    
+    console.log(`📡 Proxy: Calling external API: ${externalApiUrl}`);
+    
+    // 2. Call external API with Bearer token
+    // We use $fetch from ofetch (auto-imported in Nuxt/Nitro)
+    const response = await $fetch(externalApiUrl, {
+      method: 'GET',
+      headers: {
+        'Authorization': `Bearer ${accessToken}`,
+        'Accept': 'application/json',
+      },
+      timeout: config.externalApiTimeout || 10000,
+    });
+    
+    console.log('✅ Proxy: External API call successful');
+    
+    return {
+      success: true,
+      data: response,
+      timestamp: new Date().toISOString()
+    };
+    
+  } catch (error: any) {
+    console.error('❌ Proxy: External API call failed:', error.message);
+    
+    // Check if it's an HTTP error from the external API
+    const statusCode = error.response?.status || 500;
+    const statusText = error.response?.statusText || 'External API Error';
+    const errorData = error.response?._data || error.data || null;
+    
+    console.error(`   Status: ${statusCode} ${statusText}`);
+    if (errorData) {
+      console.error('   Error Data:', JSON.stringify(errorData));
+    }
+    
+    return {
+      success: false,
+      error: statusText,
+      statusCode: statusCode,
+      details: errorData || error.message,
+      timestamp: new Date().toISOString()
+    };
+  }
+});