feat: Add CMS and Member Area screens with ViewModels

- Implemented CmsViewModel to manage CMS data loading and state.
- Created MemberAreaDetailScreens for displaying member information and news.
- Added MembersViewModel and MemberNewsViewModel for managing member data and news.
- Developed MemberAreaScreen to provide navigation and display member-related options.
- Introduced ProfileScreen and ProfileViewModel for user profile management.
- Implemented state management for loading, error handling, and form updates across screens.

server/api/cms/contact-requests.get.js

@@ -2,7 +2,7 @@ import { getUserFromToken, hasAnyRole } from '../../utils/auth.js'
 import { readContactRequests } from '../../utils/contact-requests.js'
 
 export default defineEventHandler(async (event) => {
-  const token = getCookie(event, 'auth_token')
+  const token = getCookie(event, 'auth_token') || getHeader(event, 'authorization')?.replace(/^Bearer\s+/i, '')
   const currentUser = token ? await getUserFromToken(token) : null
 
   if (!currentUser || !hasAnyRole(currentUser, 'admin', 'vorstand', 'trainer')) {

server/api/cms/password-reset-diagnostics.get.js

@@ -48,7 +48,7 @@ function summarizeAttempts(entries) {
 }
 
 export default defineEventHandler(async (event) => {
-  const token = getCookie(event, 'auth_token')
+  const token = getCookie(event, 'auth_token') || getHeader(event, 'authorization')?.replace(/^Bearer\s+/i, '')
   const currentUser = token ? await getUserFromToken(token) : null
 
   if (!currentUser || !hasRole(currentUser, 'admin')) {

server/api/cms/users/list.get.js

@@ -1,8 +1,8 @@
-import { getUserFromToken, readUsers, hasAnyRole, hasRole, migrateUserRoles } from '../../../utils/auth.js'
+import { getUserFromToken, readUsers, hasAnyRole, migrateUserRoles } from '../../../utils/auth.js'
 
 export default defineEventHandler(async (event) => {
   try {
-    const token = getCookie(event, 'auth_token')
+    const token = getCookie(event, 'auth_token') || getHeader(event, 'authorization')?.replace(/^Bearer\s+/i, '')
     const currentUser = await getUserFromToken(token)
 
     // Seite darf von Admin ODER Vorstand genutzt werden
@@ -15,8 +15,6 @@ export default defineEventHandler(async (event) => {
 
     const users = await readUsers()
 
-    const isVorstand = hasRole(currentUser, 'vorstand')
-
     // Nur Admin oder Vorstand duerfen vollen Benutzer-Contact und Rollen sehen.
     const canSeePrivate = hasAnyRole(currentUser, 'admin', 'vorstand')
 
@@ -53,4 +51,3 @@ export default defineEventHandler(async (event) => {
     throw error
   }
 })
-