npm install @xenterprises/nuxt-x-auth-local

// nuxt.config.ts
export default defineNuxtConfig({
  extends: ['@xenterprises/nuxt-x-auth-local'],
})

// nuxt.config.ts
export default defineNuxtConfig({
  extends: ['@xenterprises/nuxt-x-auth-local'],
})

# .env — your JWT backend base URL
NUXT_PUBLIC_LOCAL_AUTH_BASE_URL=http://localhost:4000

// app/app.config.ts — optional overrides; must live in app/, not the project root
export default defineAppConfig({
  xAuth: {
    redirects: {
      afterLogin: '/dashboard',
    },
    ui: {
      logoUrl: '/logo.svg',
      form: { icon: 'i-lucide-shield' },
    },
  },
})

// server/routes/auth/login.post.ts — accepts any non-empty credentials
export default defineEventHandler(async (event) => {
  const body = await readBody<{ email?: string; password?: string }>(event)

  if (!body?.email || !body?.password) {
    throw createError({ statusCode: 400, message: 'Email and password are required' })
  }

  return {
    accessToken: 'mock-access-token',
    refreshToken: 'mock-refresh-token',
    user: {
      id: '1',
      email: body.email,
      name: 'Demo User',
      emailVerified: true,
    },
  }
})

// server/routes/auth/me.get.ts — returns the demo user when authorized
export default defineEventHandler((event) => {
  const authorization = getHeader(event, 'authorization')

  if (!authorization?.startsWith('Bearer ')) {
    throw createError({ statusCode: 401, message: 'Unauthorized' })
  }

  return {
    user: {
      id: '1',
      email: 'demo@example.com',
      name: 'Demo User',
      emailVerified: true,
    },
  }
})

export default defineAppConfig({
  xAuth: {
    tokens: {
      accessCookie: 'x_auth_access',   // cookie name for access token
      refreshCookie: 'x_auth_refresh',  // cookie name for refresh token
      hasRefresh: true,                 // set false if your API has no refresh token
    },

    redirects: {
      login: '/auth/login',
      signup: '/auth/signup',
      afterLogin: '/',
      afterSignup: '/',
      afterLogout: '/auth/login',
      forgotPassword: '/auth/forgot-password',
    },

    features: {
      forgotPassword: true,
      signup: true,
      routeProtection: true,        // set false to disable the global route middleware
    },

    ui: {
      showLogo: true,
      logoUrl: undefined,          // e.g. '/logo.svg'
      brandName: undefined,        // shown above the auth card
      tagline: undefined,          // shown under the brand name
      form: {
        icon: undefined,           // e.g. 'i-lucide-shield'; per-form fallbacks apply
        showSeparator: true,
      },
    },
  },
})

const {
  // State
  user,            // Ref<AuthUser | null>  — shared via useState
  isLoading,       // Ref<boolean>          — shared via useState
  isAuthenticated, // ComputedRef<boolean>
  emailSent,       // Ref<boolean>          — true after forgotPassword

  // Core
  login,           // (email, password) => Promise<AuthUser | null>
  signup,          // (email, password) => Promise<AuthUser | null>
  logout,          // () => Promise<true>

  // Password management
  forgotPassword,  // (email) => Promise<boolean>
  resetPassword,   // (token, newPassword) => Promise<true | { error }>
  changePassword,  // (currentPassword, newPassword) => Promise<true | { error }>

  // Token / session
  refreshToken,    // () => Promise<AuthTokens | null>
  getCurrentUser,  // () => Promise<AuthUser | null>
  getToken,        // () => string | null  (synchronous)
  getAuthHeaders,  // () => Record<string, string>  (synchronous)

  resetState,      // () => void — clears emailSent
  config,          // ComputedRef<AuthConfig>
} = useXAuth()

{
  id: string
  email: string
  name: string
  avatar?: string
  emailVerified: boolean
  metadata?: Record<string, any>
}

{ "accessToken": "eyJ...", "refreshToken": "eyJ..." }

{ "user": { "id": "1", "email": "user@example.com", "name": "Jane" } }

{ "accessToken": "eyJ...", "refreshToken": "eyJ..." }

// Login
const user = await login('user@example.com', 'password')

// Protect an API call
const headers = getAuthHeaders()
// { Authorization: 'Bearer eyJ...' }

// Change password (authenticated)
const result = await changePassword('oldPass', 'newPass')
if (result !== true) console.error(result.error)

// Reset password from email link
const result = await resetPassword(route.query.token, newPassword)

const { $getAuthToken } = useNuxtApp()
const token = $getAuthToken() // string | null