feat(frontend): add apiFetch wrapper for automatic auth token injection

Centralizes auth token management into a reusable apiFetch() helper and getAuthHeaders() utility, eliminating inline Bearer token logic across all frontend files.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
This commit is contained in:
2026-07-06 19:21:34 +01:00
co-authored by Sisyphus
parent e831953e5b
commit 92124158bf
48 changed files with 530 additions and 1190 deletions
@@ -1,5 +1,5 @@
<script lang="ts">
import { authStore } from '$lib/stores/auth.svelte';
import { apiFetch } from '$lib/utils/api';
import { SvelteDate, SvelteMap } from 'svelte/reactivity';
import { CalendarDate, getLocalTimeZone, type DateValue } from '@internationalized/date';
import { toast } from 'svelte-sonner';
@@ -502,16 +502,8 @@
const endStr = `${endYear}-${String(endMonth).padStart(2, '0')}-${String(daysInEndMonth).padStart(2, '0')}`;
const [whRes, ahRes] = await Promise.all([
fetch(`/api/scheduling/working-hours?start=${startStr}&end=${endStr}`, {
headers: authStore.currentToken
? { Authorization: `Bearer ${authStore.currentToken}` }
: {}
}),
fetch(`/api/scheduling/available-hours?start=${startStr}&end=${endStr}`, {
headers: authStore.currentToken
? { Authorization: `Bearer ${authStore.currentToken}` }
: {}
})
apiFetch(`/api/scheduling/working-hours?start=${startStr}&end=${endStr}`),
apiFetch(`/api/scheduling/available-hours?start=${startStr}&end=${endStr}`)
]);
if (whRes.ok && ahRes.ok) {
@@ -578,16 +570,8 @@
const endStr = endOfMonth.toString();
const [whRes, ahRes] = await Promise.all([
fetch(`/api/scheduling/working-hours?start=${startStr}&end=${endStr}`, {
headers: authStore.currentToken
? { Authorization: `Bearer ${authStore.currentToken}` }
: {}
}),
fetch(`/api/scheduling/available-hours?start=${startStr}&end=${endStr}`, {
headers: authStore.currentToken
? { Authorization: `Bearer ${authStore.currentToken}` }
: {}
})
apiFetch(`/api/scheduling/working-hours?start=${startStr}&end=${endStr}`),
apiFetch(`/api/scheduling/available-hours?start=${startStr}&end=${endStr}`)
]);
if (whRes.ok && ahRes.ok) {
@@ -623,9 +607,7 @@
async function fetchAvailableServices() {
loadingServices = true;
try {
const response = await fetch('/api/services', {
headers: { Authorization: `Bearer ${authStore.currentToken}` }
});
const response = await apiFetch('/api/services');
if (response.ok) {
availableServices = (await response.json()) as Service[];
}
@@ -726,12 +708,9 @@
body.notes = notes.trim();
}
const response = await fetch(`/api/bookings/${booking.id}/edit-request`, {
const response = await apiFetch(`/api/bookings/${booking.id}/edit-request`, {
method: 'POST',
headers: {
'Content-Type': 'application/json',
Authorization: `Bearer ${authStore.currentToken}`
},
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify(body)
});