fix : securite middle et execfile

components/BackupList.vue

@@ -55,6 +55,7 @@
 import {Icon as IconifyIcon} from "@iconify/vue"
 import CircleSkeleton from "~/components/skeleton/CircleSkeleton.vue"
 import TextSkeleton from "~/components/skeleton/TextSkeleton.vue"
+import { downloadApiFile, useApiAuthHeader } from "~/composables/useApiAuth"
 
 const props = defineProps<{
   folder: string | null
@@ -62,15 +63,16 @@ const props = defineProps<{
 
 const backups = ref<string[]>([])
 const loading = ref(false)
+const apiAuthHeader = useApiAuthHeader()
 const title = computed(() => {
   if (!props.folder) return "Fichiers"
   return `Backup — ${props.folder.toUpperCase()}`
 })
 
-const downloadBackup = (file: string) => {
+const downloadBackup = async (file: string) => {
   if (!props.folder) return
   const url = `/api/download?folder=${encodeURIComponent(props.folder)}&file=${encodeURIComponent(file)}`
-  window.location.href = url
+  await downloadApiFile(url, file)
 }
 
 watch(() => props.folder, async (folder) => {
@@ -82,7 +84,9 @@ watch(() => props.folder, async (folder) => {
 
   loading.value = true
   try {
-    const data = await $fetch<string[]>(`/api/backups?folder=${encodeURIComponent(folder)}`)
+    const data = await $fetch<string[]>(`/api/backups?folder=${encodeURIComponent(folder)}`, {
+      headers: apiAuthHeader
+    })
     backups.value = data
   } catch (error) {
     console.error("Erreur récupération backups:", error)

components/BackupRun.vue

@@ -79,6 +79,7 @@
 <script setup lang="ts">
 import { computed, onMounted, ref } from "vue"
 import { Icon as IconifyIcon } from "@iconify/vue"
+import { useApiAuthHeader } from "~/composables/useApiAuth"
 
 type BackupScript = {
   key: string
@@ -118,6 +119,7 @@ const scripts = ref<BackupScript[]>([])
 const output = ref<string>("")
 const message = ref<string>("")
 const isError = ref(false)
+const apiAuthHeader = useApiAuthHeader()
 
 const statusClass = computed(() => (isError.value ? "status-error" : "status-success"))
 
@@ -134,7 +136,9 @@ const loadScripts = async () => {
     downloadFolders: []
   })
   try {
-    const data = await $fetch<BackupScriptListResponse>("/api/backup-script")
+    const data = await $fetch<BackupScriptListResponse>("/api/backup-script", {
+      headers: apiAuthHeader
+    })
     scripts.value = data.scripts
   } catch (error) {
     scripts.value = []
@@ -162,7 +166,8 @@ const runScript = async (key: string) => {
   try {
     const data = await $fetch<BackupScriptRunResponse>("/api/backup-script", {
       method: "POST",
-      body: { key }
+      body: { key },
+      headers: apiAuthHeader
     })
     message.value = `${data.label} execute avec succes`
     output.value = data.output || "Aucune sortie retournee."

components/MessageDiscord.vue

@@ -1,6 +1,10 @@
 <script setup>
 import {Icon as IconifyIcon} from "@iconify/vue"
-const { data: messages } = await useFetch('/api/discord/messages')
+import { useApiAuthHeader } from "~/composables/useApiAuth"
+
+const { data: messages } = await useFetch('/api/discord/messages', {
+  headers: useApiAuthHeader()
+})
 </script>
 
 <template>

components/Speedtest.vue

@@ -42,11 +42,13 @@
 <script setup lang="ts">
 import {computed, ref} from "vue"
 import {Icon as IconifyIcon} from "@iconify/vue"
+import { useApiAuthHeader, withApiAuth } from "~/composables/useApiAuth"
 
 const ping = ref<number | null>(null)
 const download = ref<number | null>(null)
 const upload = ref<number | null>(null)
 const isTesting = ref(false)
+const apiAuthHeader = useApiAuthHeader()
 
 const metrics = computed(() => [
   { label: "Download", icon: "mdi:arrow-down-bold", value: download.value, unit: "Mbps" },
@@ -56,7 +58,9 @@ const metrics = computed(() => [
 
 async function testDownload() {
   const start = performance.now()
-  const res = await fetch('/api/download')
+  const res = await fetch('/api/download', {
+    headers: apiAuthHeader
+  })
   const blob = await res.blob()
   const end = performance.now()
   const size = blob.size
@@ -68,7 +72,7 @@ async function testUpload() {
   const size = 5 * 1024 * 1024
   const data = new Uint8Array(size)
   const start = performance.now()
-  await fetch('/api/upload', { method: 'POST', body: data })
+  await fetch('/api/upload', withApiAuth({ method: 'POST', body: data }))
   const end = performance.now()
   const seconds = (end - start) / 1000
   upload.value = Math.round((size * 8) / seconds / 1000000)

components/StatusSite.vue

@@ -43,6 +43,7 @@
 import CircleSkeleton from "~/components/skeleton/CircleSkeleton.vue"
 import TextSkeleton from "~/components/skeleton/TextSkeleton.vue"
 import {onBeforeUnmount, onMounted, ref} from "vue"
+import { useApiAuthHeader } from "~/composables/useApiAuth"
 
 interface StatusRow {
   label: string
@@ -71,6 +72,7 @@ const props = withDefaults(
 const rows = ref<StatusRow[]>([])
 const loading = ref(true)
 const initialized = ref(false)
+const apiAuthHeader = useApiAuthHeader()
 let timer: ReturnType<typeof setInterval> | null = null
 
 const statusLabel = (status: number) => {
@@ -84,7 +86,9 @@ const checkStatus = async () => {
     loading.value = true
   }
   try {
-    const data = await $fetch<StatusResponse>(props.endpoint)
+    const data = await $fetch<StatusResponse>(props.endpoint, {
+      headers: apiAuthHeader
+    })
     rows.value = data.results
   } catch (error) {
     rows.value = [