nuxt-app/server/api/config/global.get.ts

import { KNOWN_CONFIG_KEYS } from "#server/service/config/registry";
import type { KnownConfigKey, KnownConfigValue } from "#server/service/config/registry";

const PUBLIC_GLOBAL_CONFIG_KEYS = [
    "siteName",
    "allowRegister",
] as const satisfies readonly KnownConfigKey[];
const SECRET_MASKED_GLOBAL_CONFIG_KEYS = new Set<KnownConfigKey>([]);

export default defineWrappedResponseHandler(async (event) => {
    const user = await event.context.auth.getCurrent();
    const isAdmin = user?.role === "admin";
    const cacheKey = isAdmin ? "config:global:admin" : "config:global:public";

    const cached = await event.context.cache.get<{ config: Record<string, unknown> }>(cacheKey);
    if (cached) return R.success(cached);

    const keys: readonly KnownConfigKey[] = isAdmin ? KNOWN_CONFIG_KEYS : PUBLIC_GLOBAL_CONFIG_KEYS;

    const entries = await Promise.all(
        keys.map(async (key) => {
            const value = await event.context.config.getGlobal(key);
            const safeValue =
                SECRET_MASKED_GLOBAL_CONFIG_KEYS.has(key)
                    ? ""
                    : value;
            return [key, safeValue] as const satisfies [KnownConfigKey, KnownConfigValue<KnownConfigKey>];
        }),
    );

    const config = Object.fromEntries(entries);
    if (!isAdmin) {
        await event.context.cache.set(cacheKey, { config }, 300);
        return R.success({ config });
    }

    const result = { config: { ...config } };
    await event.context.cache.set(cacheKey, result, 300);
    return R.success(result);
});