Files

T

Lovehsigure_520 78ec4dd8ba fix(ui-server-auth): trust new Go backend origin (#2043 )

## Summary
- trust the new Railway Go backend in the standalone Auth UI
- preserve exact-origin validation for untrusted redirects
- document the root cause, delivery plan, and production validation path

## Root cause
The Auth UI rejected
`api_server_url=https://airi-server-next.up.railway.app`, fell back to
the legacy API, and surfaced `Load failed` at the browser CORS boundary.

## Test plan
- focused bootstrap-context tests: 6/6
- complete Auth UI suite: 27/27
- `vue-tsc --noEmit`
- production Vite build
- emitted bundle contains the exact new backend origin

2026-07-10 15:03:10 +00:00

public

feat(admin-ui): update admin UI URLs to remove trailing slashes and adjust redirects

2026-06-09 17:46:58 +08:00

src

fix(ui-server-auth): trust new Go backend origin (#2043 )

2026-07-10 15:03:10 +00:00

index.html

refactor(ui-server-auth,server): use better design of signin page

2026-04-10 16:25:11 +08:00

package.json

chore: update package dependencies and remove specific catalog references

2026-06-07 19:45:28 +08:00

README.md

chore: remove admin dashboard

2026-07-02 02:22:16 +08:00

tsconfig.json

fix(stage-pages,stage-ui): plugin host update

2026-04-22 14:23:45 +08:00

uno.config.ts

…

vite-env.d.ts

…

vite.config.ts

feat(auth): migrate auth ui to unique domain

2026-06-09 00:15:34 +08:00

vitest.config.ts

…

wrangler.toml

feat(auth): migrate auth ui to unique domain

2026-06-09 00:15:34 +08:00

README.md

AIRI Server Auth UI

Auth UI for the hosted AIRI server. It is a Vue/Vite app deployed separately from apps/server and used for Better Auth sign-in, email verification, password reset, profile, and Electron OIDC callback relay flows.

Use When

Building user-facing auth pages backed by server /api/auth/* endpoints.
Updating login, sign-up, verification, reset-password, account profile, or Electron auth relay UX.
Deploying the auth surface to Cloudflare Workers Static Assets.

Do Not Use When

Building the main stage app sign-in callback pages that consume OIDC tokens.
Adding admin-only operational pages. Those belong in the standalone proj-airi admin repository.

Commands

pnpm -F @proj-airi/ui-server-auth dev
pnpm -F @proj-airi/ui-server-auth typecheck
pnpm -F @proj-airi/ui-server-auth build

Deployment

pnpm -F @proj-airi/ui-server-auth build writes to apps/ui-server-auth/dist. Vue Router owns /ui/*, while Vite assets are served from root /assets/* so Cloudflare Pages can serve static files without rewriting nested asset paths. Cloudflare Pages uses public/_redirects to route /ui/* back to the SPA HTML.

The production GitHub Actions workflow deploys this app to the Cloudflare Pages project moeru-ai-airi-auth with separate auth-account credentials:

AUTH_CLOUDFLARE_ACCOUNT_ID=...
AUTH_CLOUDFLARE_API_TOKEN=...

apps/ui-server-auth/wrangler.toml remains available for Workers Static Assets deployments, but production CI uses Cloudflare Pages direct upload.

Production expects:

VITE_SERVER_URL=https://api.airi.build

The server redirects historical /auth/* URLs to AUTH_UI_URL, which defaults to https://accounts.airi.build/ui.

The server-dev workflow deploys a Cloudflare Pages branch build at https://server-dev.moeru-ai-airi-auth.pages.dev/ui/ with VITE_SERVER_URL=https://airi-server-dev.up.railway.app. Set the server-dev API environment variable AUTH_UI_URL=https://server-dev.moeru-ai-airi-auth.pages.dev/ui when the full dev auth redirect chain should stay on server-dev.