feat: integrate Logto auth with middleware and login page (#36) #43

Merged

maximus merged 1 commit from issue-36-auth-logto into issue-35-web-setup

2026-04-06 15:38:46 +00:00

maximus commented

2026-04-06 15:37:57 +00:00

Owner

Fixes #36

Summary

Logto SDK (@logto/next) integrated with same pattern as la-compagnie-maximus
API routes: /api/logto/sign-in, /api/logto/callback, /api/logto/sign-out
Next.js middleware redirects unauthenticated users to /auth
Auth helper getAuthenticatedUser() extracts userId (sub claim) for API routes
Login page with Compte Maximus branding
Session cookie: HttpOnly, Secure in production, SameSite via Logto SDK defaults

Depends on

PR #42 (issue-35-web-setup)

Fixes #36 ## Summary - Logto SDK (`@logto/next`) integrated with same pattern as la-compagnie-maximus - API routes: `/api/logto/sign-in`, `/api/logto/callback`, `/api/logto/sign-out` - Next.js middleware redirects unauthenticated users to `/auth` - Auth helper `getAuthenticatedUser()` extracts `userId` (`sub` claim) for API routes - Login page with Compte Maximus branding - Session cookie: HttpOnly, Secure in production, SameSite via Logto SDK defaults ## Depends on - PR #42 (issue-35-web-setup)

maximus added 1 commit 2026-04-06 15:37:58 +00:00

feat: integrate Logto auth with middleware and login page (#36 ) 42c39907cd

- Logto config matching la-compagnie-maximus pattern
- API routes: sign-in, callback, sign-out
- Next.js middleware protecting all routes except /auth and /api
- Auth helper to extract userId (sub) from Logto context
- Login page with Compte Maximus branding

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

maximus commented

2026-04-06 15:38:16 +00:00

Author

Owner

Review — APPROVE

Clean Logto integration matching la-compagnie-maximus pattern. Auth routes, middleware, and helper all look correct.

No secrets committed
Cookie security delegated to Logto SDK
Middleware protects all routes correctly
TypeScript compiles
Consistent with ecosystem auth pattern

## Review — APPROVE Clean Logto integration matching la-compagnie-maximus pattern. Auth routes, middleware, and helper all look correct. - [x] No secrets committed - [x] Cookie security delegated to Logto SDK - [x] Middleware protects all routes correctly - [x] TypeScript compiles - [x] Consistent with ecosystem auth pattern