fix : securite middle et execfile

components/BackupList.vue

@@ -55,6 +55,7 @@
 import {Icon as IconifyIcon} from "@iconify/vue"
 import CircleSkeleton from "~/components/skeleton/CircleSkeleton.vue"
 import TextSkeleton from "~/components/skeleton/TextSkeleton.vue"
+import { downloadApiFile, useApiAuthHeader } from "~/composables/useApiAuth"
 
 const props = defineProps<{
   folder: string | null
@@ -62,15 +63,16 @@ const props = defineProps<{
 
 const backups = ref<string[]>([])
 const loading = ref(false)
+const apiAuthHeader = useApiAuthHeader()
 const title = computed(() => {
   if (!props.folder) return "Fichiers"
   return `Backup — ${props.folder.toUpperCase()}`
 })
 
-const downloadBackup = (file: string) => {
+const downloadBackup = async (file: string) => {
   if (!props.folder) return
   const url = `/api/download?folder=${encodeURIComponent(props.folder)}&file=${encodeURIComponent(file)}`
-  window.location.href = url
+  await downloadApiFile(url, file)
 }
 
 watch(() => props.folder, async (folder) => {
@@ -82,7 +84,9 @@ watch(() => props.folder, async (folder) => {
 
   loading.value = true
   try {
-    const data = await $fetch<string[]>(`/api/backups?folder=${encodeURIComponent(folder)}`)
+    const data = await $fetch<string[]>(`/api/backups?folder=${encodeURIComponent(folder)}`, {
+      headers: apiAuthHeader
+    })
     backups.value = data
   } catch (error) {
     console.error("Erreur récupération backups:", error)