fix: konvertera alla API route handlers till withAuth wrapper

Ersätter getAuthHeaders() + auth() standalone med withAuth() wrapper
i alla route handlers. Auth() standalone fungerar inte korrekt i
Next.js 16 + NextAuth beta.28 pga async cookies() kompatibilitet.
withAuth() använder auth() i wrapper-form sa att request.auth
populeras direkt av NextAuth.

Pavaerkade filer: 27 route handlers + ny lib/with-auth.ts

frontend/app/api/recipes/[id]/image/route.ts

@@ -1,27 +1,16 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { getAuthHeaders } from '../../../../../lib/auth-headers';
+import { NextResponse } from 'next/server';
+import { withAuth } from '../../../../../lib/with-auth';
 
 const API_BASE = process.env.NEXT_PUBLIC_API_URL_INTERNAL || 'http://recipe-api:8080';
 
-export async function POST(
-  request: NextRequest,
-  { params }: { params: Promise<{ id: string }> },
-) {
-  const { id } = await params;
-  const authHeaders = await getAuthHeaders();
+export const POST = withAuth(async (request, session, context) => {
+  const { id } = await context.params;
   const body = await request.text();
-
   const res = await fetch(`${API_BASE}/api/recipes/${id}/image`, {
     method: 'POST',
-    headers: { 'Content-Type': 'application/json', ...authHeaders },
+    headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${session.accessToken}` },
     body,
-    cache: 'no-store',
   });
-
   const text = await res.text();
-
-  return new NextResponse(text, {
-    status: res.status,
-    headers: { 'Content-Type': 'application/json' },
-  });
-}
+  return new NextResponse(text, { status: res.status, headers: { 'Content-Type': 'application/json' } });
+});

frontend/app/api/recipes/[id]/route.ts

@@ -1,55 +1,35 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { getAuthHeaders } from '../../../../lib/auth-headers';
+import { NextResponse } from 'next/server';
+import { withAuth } from '../../../../lib/with-auth';
 
 const API_BASE = process.env.NEXT_PUBLIC_API_URL_INTERNAL || 'http://recipe-api:8080';
 
-export async function GET(
-  _request: NextRequest,
-  { params }: { params: Promise<{ id: string }> },
-) {
-  const { id } = await params;
-  const authHeaders = await getAuthHeaders();
+export const GET = withAuth(async (request, session, context) => {
+  const { id } = await context.params;
   const res = await fetch(`${API_BASE}/api/recipes/${id}`, {
-    headers: { ...authHeaders },
+    headers: { Authorization: `Bearer ${session.accessToken}` },
     cache: 'no-store',
   });
   const text = await res.text();
-  return new NextResponse(text, {
-    status: res.status,
-    headers: { 'Content-Type': 'application/json' },
-  });
-}
+  return new NextResponse(text, { status: res.status, headers: { 'Content-Type': 'application/json' } });
+});
 
-export async function PATCH(
-  request: NextRequest,
-  { params }: { params: Promise<{ id: string }> },
-) {
-  const { id } = await params;
-  const authHeaders = await getAuthHeaders();
+export const PATCH = withAuth(async (request, session, context) => {
+  const { id } = await context.params;
   const body = await request.json();
   const res = await fetch(`${API_BASE}/api/recipes/${id}`, {
     method: 'PATCH',
-    headers: { 'Content-Type': 'application/json', ...authHeaders },
+    headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${session.accessToken}` },
     body: JSON.stringify(body),
-    cache: 'no-store',
   });
   const text = await res.text();
-  return new NextResponse(text, {
-    status: res.status,
-    headers: { 'Content-Type': 'application/json' },
-  });
-}
+  return new NextResponse(text, { status: res.status, headers: { 'Content-Type': 'application/json' } });
+});
 
-export async function DELETE(
-  _request: NextRequest,
-  { params }: { params: Promise<{ id: string }> },
-) {
-  const { id } = await params;
-  const authHeaders = await getAuthHeaders();
+export const DELETE = withAuth(async (_request, session, context) => {
+  const { id } = await context.params;
   const res = await fetch(`${API_BASE}/api/recipes/${id}`, {
     method: 'DELETE',
-    headers: { ...authHeaders },
-    cache: 'no-store',
+    headers: { Authorization: `Bearer ${session.accessToken}` },
   });
   return new NextResponse(null, { status: res.status });
-}
+});

frontend/app/api/recipes/route.ts

@@ -1,31 +1,27 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { getAuthHeaders } from '../../../lib/auth-headers';
+import { NextResponse } from 'next/server';
+import { withAuth } from '../../../lib/with-auth';
 
 const API_BASE = process.env.NEXT_PUBLIC_API_URL_INTERNAL || 'http://recipe-api:8080';
 
-export async function GET() {
-  const authHeaders = await getAuthHeaders();
+export const GET = withAuth(async (_request, session) => {
   const res = await fetch(`${API_BASE}/api/recipes`, {
-    headers: { ...authHeaders },
+    headers: { Authorization: `Bearer ${session.accessToken}` },
     cache: 'no-store',
   });
   const data = await res.json();
   return NextResponse.json(data, { status: res.status });
-}
+});
 
-export async function POST(request: NextRequest) {
-  const authHeaders = await getAuthHeaders();
+export const POST = withAuth(async (request, session) => {
   const body = await request.json();
   const res = await fetch(`${API_BASE}/api/recipes`, {
     method: 'POST',
-    headers: { 'Content-Type': 'application/json', ...authHeaders },
+    headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${session.accessToken}` },
     body: JSON.stringify(body),
-    cache: 'no-store',
   });
-
   const text = await res.text();
   return new NextResponse(text, {
     status: res.status,
     headers: { 'Content-Type': res.headers.get('content-type') ?? 'application/json' },
   });
-}
+});