feat: Add CMS and Member Area screens with ViewModels

- Implemented CmsViewModel to manage CMS data loading and state.
- Created MemberAreaDetailScreens for displaying member information and news.
- Added MembersViewModel and MemberNewsViewModel for managing member data and news.
- Developed MemberAreaScreen to provide navigation and display member-related options.
- Introduced ProfileScreen and ProfileViewModel for user profile management.
- Implemented state management for loading, error handling, and form updates across screens.

server/api/profile.put.js

@@ -1,9 +1,9 @@
-import { verifyToken, readUsers, writeUsers, verifyPassword, hashPassword, migrateUserRoles, revokeRefreshSessionsForUser } from '../utils/auth.js'
+import { verifyToken, getUserFromToken, readUsers, writeUsers, verifyPassword, hashPassword, migrateUserRoles, revokeRefreshSessionsForUser } from '../utils/auth.js'
 import { assertPasswordNotPwned } from '../utils/hibp.js'
 
 export default defineEventHandler(async (event) => {
   try {
-    const token = getCookie(event, 'auth_token')
+    const token = getCookie(event, 'auth_token') || getHeader(event, 'authorization')?.replace(/^Bearer\s+/i, '')
 
     if (!token) {
       throw createError({
@@ -21,6 +21,16 @@ export default defineEventHandler(async (event) => {
       })
     }
 
+    if (decoded.sid) {
+      const sessionUser = await getUserFromToken(token)
+      if (!sessionUser) {
+        throw createError({
+          statusCode: 401,
+          message: 'Ungültige Sitzung.'
+        })
+      }
+    }
+
     const body = await readBody(event)
     const { name, email, phone, geburtsdatum, currentPassword, newPassword } = body
 
@@ -31,7 +41,7 @@ export default defineEventHandler(async (event) => {
       })
     }
 
-  const users = await readUsers()
+    const users = await readUsers()
     const userIndex = users.findIndex(u => u.id === decoded.id)
 
     if (userIndex === -1) {