[{"data":1,"prerenderedAt":369},["ShallowReactive",2],{"navigation_docs":3,"diagnostic-content-NUXT0037":44},[4,8,12,16,20,24,28,32,36,40],{"title":5,"path":6,"stem":7},"CLI","\u002Fcli","1.cli",{"title":9,"path":10,"stem":11},"Nuxt","\u002Fnuxt","2.nuxt",{"title":13,"path":14,"stem":15},"Vue","\u002Fvue","3.vue",{"title":17,"path":18,"stem":19},"Vite","\u002Fvite","4.vite",{"title":21,"path":22,"stem":23},"Nitro","\u002Fnitro","5.nitro",{"title":25,"path":26,"stem":27},"TypeScript","\u002Ftypescript","6.typescript",{"title":29,"path":30,"stem":31},"shadcn","\u002Fshadcn","7.shadcn",{"title":33,"path":34,"stem":35},"Package","\u002Fpackage","8.package",{"title":37,"path":38,"stem":39},"Extending Doctor","\u002Fextending","9.extending",{"title":41,"path":42,"stem":43},"Pinia","\u002Fpinia","9.pinia",{"id":45,"title":46,"body":47,"category":53,"code":359,"description":360,"docsUrl":54,"extension":361,"fix":77,"framework":362,"meta":363,"navigation":364,"pack":56,"path":365,"ruleId":57,"rulePath":58,"seo":366,"severity":59,"source":60,"sourceUrl":61,"stem":367,"why":70,"__hash__":368},"diagnostics\u002Fdiagnostics\u002FNUXT0037.md","NUXT0037: Route middleware does not secure API routes",{"type":48,"value":49,"toc":349},"minimark",[50,62,67,71,75,78,82,87,90,184,187,284,288,291,317,321,333,337,345],[51,52],"rule-metadata",{"category":53,"docsUrl":54,"fix":55,"pack":56,"ruleId":57,"rulePath":58,"severity":59,"source":60,"sourceUrl":61},"middleware","https:\u002F\u002Fnuxt.com\u002Fdocs\u002F4.x\u002Fguide\u002Fdirectory-structure\u002Fapp\u002Fmiddleware#when-middleware-runs","suggestion","vite-doctor\u002Fnuxt","nuxt\u002Fmiddleware\u002Fno-route-middleware-api-security","\u002Fnuxt\u002Frules\u002Fmiddleware\u002Fno-route-middleware-api-security","warn","src\u002Frule-packs\u002Fnuxt\u002Frules\u002Fnuxt\u002Fno-route-middleware-api-security.ts","https:\u002F\u002Fgithub.com\u002Fonmax\u002Fvite-doctor\u002Fblob\u002Fmain\u002Fsrc\u002Frule-packs\u002Fnuxt\u002Frules\u002Fnuxt\u002Fno-route-middleware-api-security.ts",[63,64,66],"h2",{"id":65},"why-it-happens","Why it happens",[68,69,70],"p",{},"Navigation helpers only work correctly in the runtime they were designed for. Returning the navigation result keeps redirects and aborts observable to Nuxt.",[63,72,74],{"id":73},"fix","Fix",[68,76,77],{},"Remove route middleware API security, or move it to the Nuxt runtime\u002FAPI that owns that behavior.",[63,79,81],{"id":80},"example","Example",[83,84,86],"h3",{"id":85},"keep-api-authorization-on-the-server","Keep API authorization on the server",[68,88,89],{},"Before",[91,92,97],"pre",{"className":93,"code":94,"language":95,"meta":96,"style":96},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","export default defineNuxtRouteMiddleware((to) => {\n  if (!to.query.token) return abortNavigation()\n})\n","ts","",[98,99,100,137,175],"code",{"__ignoreMap":96},[101,102,105,109,112,116,120,123,127,130,134],"span",{"class":103,"line":104},"line",1,[101,106,108],{"class":107},"s7zQu","export",[101,110,111],{"class":107}," default",[101,113,115],{"class":114},"s2Zo4"," defineNuxtRouteMiddleware",[101,117,119],{"class":118},"sTEyZ","(",[101,121,119],{"class":122},"sMK4o",[101,124,126],{"class":125},"sHdIc","to",[101,128,129],{"class":122},")",[101,131,133],{"class":132},"spNyl"," =>",[101,135,136],{"class":122}," {\n",[101,138,140,143,147,150,152,155,158,160,163,166,169,172],{"class":103,"line":139},2,[101,141,142],{"class":107},"  if",[101,144,146],{"class":145},"swJcz"," (",[101,148,149],{"class":122},"!",[101,151,126],{"class":118},[101,153,154],{"class":122},".",[101,156,157],{"class":118},"query",[101,159,154],{"class":122},[101,161,162],{"class":118},"token",[101,164,165],{"class":145},") ",[101,167,168],{"class":107},"return",[101,170,171],{"class":114}," abortNavigation",[101,173,174],{"class":145},"()\n",[101,176,178,181],{"class":103,"line":177},3,[101,179,180],{"class":122},"}",[101,182,183],{"class":118},")\n",[68,185,186],{},"After",[91,188,190],{"className":93,"code":189,"language":95,"meta":96,"style":96},"export default defineEventHandler((event) => {\n  const token = getQuery(event).token\n  if (!token) throw createError({ statusCode: 401 })\n})\n",[98,191,192,214,239,277],{"__ignoreMap":96},[101,193,194,196,198,201,203,205,208,210,212],{"class":103,"line":104},[101,195,108],{"class":107},[101,197,111],{"class":107},[101,199,200],{"class":114}," defineEventHandler",[101,202,119],{"class":118},[101,204,119],{"class":122},[101,206,207],{"class":125},"event",[101,209,129],{"class":122},[101,211,133],{"class":132},[101,213,136],{"class":122},[101,215,216,219,222,225,228,230,232,234,236],{"class":103,"line":139},[101,217,218],{"class":132},"  const",[101,220,221],{"class":118}," token",[101,223,224],{"class":122}," =",[101,226,227],{"class":114}," getQuery",[101,229,119],{"class":145},[101,231,207],{"class":118},[101,233,129],{"class":145},[101,235,154],{"class":122},[101,237,238],{"class":118},"token\n",[101,240,241,243,245,247,249,251,254,257,259,262,265,268,272,275],{"class":103,"line":177},[101,242,142],{"class":107},[101,244,146],{"class":145},[101,246,149],{"class":122},[101,248,162],{"class":118},[101,250,165],{"class":145},[101,252,253],{"class":107},"throw",[101,255,256],{"class":114}," createError",[101,258,119],{"class":145},[101,260,261],{"class":122},"{",[101,263,264],{"class":145}," statusCode",[101,266,267],{"class":122},":",[101,269,271],{"class":270},"sbssI"," 401",[101,273,274],{"class":122}," }",[101,276,183],{"class":145},[101,278,280,282],{"class":103,"line":279},4,[101,281,180],{"class":122},[101,283,183],{"class":118},[63,285,287],{"id":286},"verify-the-fix","Verify the fix",[68,289,290],{},"Run only this rule after editing so the report stays focused on the diagnostic you are closing:",[91,292,296],{"className":293,"code":294,"language":295,"meta":96,"style":96},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","pnpm nuxt doctor --rules nuxt\u002Fmiddleware\u002Fno-route-middleware-api-security\n","bash",[98,297,298],{"__ignoreMap":96},[101,299,300,304,308,311,314],{"class":103,"line":104},[101,301,303],{"class":302},"sBMFI","pnpm",[101,305,307],{"class":306},"sfazB"," nuxt",[101,309,310],{"class":306}," doctor",[101,312,313],{"class":306}," --rules",[101,315,316],{"class":306}," nuxt\u002Fmiddleware\u002Fno-route-middleware-api-security\n",[63,318,320],{"id":319},"useful-links","Useful links",[322,323,324],"ul",{},[325,326,327],"li",{},[328,329,332],"a",{"href":54,"rel":330},[331],"nofollow","Upstream docs",[63,334,336],{"id":335},"related-rule","Related rule",[322,338,339],{},[325,340,341],{},[328,342,343],{"href":58},[98,344,57],{},[346,347,348],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}",{"title":96,"searchDepth":139,"depth":139,"links":350},[351,352,353,356,357,358],{"id":65,"depth":139,"text":66},{"id":73,"depth":139,"text":74},{"id":80,"depth":139,"text":81,"children":354},[355],{"id":85,"depth":177,"text":86},{"id":286,"depth":139,"text":287},{"id":319,"depth":139,"text":320},{"id":335,"depth":139,"text":336},"NUXT0037","Flags route middleware API security in Nuxt middleware code before it leaks into runtime behavior.","md","nuxt",{},true,"\u002Fdiagnostics\u002Fnuxt0037",{"title":46,"description":360},"diagnostics\u002FNUXT0037","AXHEV76_YoiUK9dyzJ4VpHwadqWtyDGHXXhe7QlPUg4",1791309497479]