feat: harden auth ops and deployment baseline

TaxBaik.Web/Services/ApiClient.cs

@@ -1,5 +1,6 @@
 namespace TaxBaik.Web.Services;
 
+using Microsoft.AspNetCore.Components;
 using System.Text.Json;
 
 public interface IApiClient
@@ -14,11 +15,13 @@ public interface IApiClient
 public class ApiClient : IApiClient
 {
     private readonly HttpClient _httpClient;
+    private readonly NavigationManager _navigationManager;
     private string? _authToken;
 
-    public ApiClient(HttpClient httpClient)
+    public ApiClient(HttpClient httpClient, NavigationManager navigationManager)
     {
         _httpClient = httpClient;
+        _navigationManager = navigationManager;
     }
 
     public async Task SetAuthToken(string? token)
@@ -34,7 +37,7 @@ public class ApiClient : IApiClient
     {
         try
         {
-            var response = await _httpClient.GetAsync($"/taxbaik/api/{endpoint}");
+            var response = await _httpClient.GetAsync(BuildApiUri(endpoint));
             if (!response.IsSuccessStatusCode)
                 return default;
 
@@ -53,7 +56,7 @@ public class ApiClient : IApiClient
         {
             var json = JsonSerializer.Serialize(data);
             var content = new StringContent(json, System.Text.Encoding.UTF8, "application/json");
-            var response = await _httpClient.PostAsync($"/taxbaik/api/{endpoint}", content);
+            var response = await _httpClient.PostAsync(BuildApiUri(endpoint), content);
 
             if (!response.IsSuccessStatusCode)
                 return default;
@@ -73,7 +76,7 @@ public class ApiClient : IApiClient
         {
             var json = JsonSerializer.Serialize(data);
             var content = new StringContent(json, System.Text.Encoding.UTF8, "application/json");
-            var response = await _httpClient.PutAsync($"/taxbaik/api/{endpoint}", content);
+            var response = await _httpClient.PutAsync(BuildApiUri(endpoint), content);
 
             if (!response.IsSuccessStatusCode)
                 return default;
@@ -91,11 +94,17 @@ public class ApiClient : IApiClient
     {
         try
         {
-            await _httpClient.DeleteAsync($"/taxbaik/api/{endpoint}");
+            await _httpClient.DeleteAsync(BuildApiUri(endpoint));
         }
         catch
         {
             // Ignore
         }
     }
+
+    private Uri BuildApiUri(string endpoint)
+    {
+        var relative = $"api/{endpoint.TrimStart('/')}";
+        return new Uri(new Uri(_navigationManager.BaseUri), relative);
+    }
 }