How can I use basic auth and pass a token too?

[russback]

My backend API is having basic auth added to it, so instead of passing the token in the Bearer auth header, I need to pass it either in the body of all requests, or appended in the URL of all requests. All requests need to have the basic auth header added also.

I am having trouble with this on the server side. I have an axios inteceptor which works on client-side but not server-side.

Here's my config:

auth: {
    resetOnError: true,
    strategies: {
      local: {
        token: {
          property: 'data.token'
        },
        user: {
          property: 'data.user',
          autoFetch: false
        },
        endpoints: {
          login: { url: `${process.env.API_BASE_URL}auth/login`, method: 'post' },
          logout: false,
          user: { url: `${process.env.API_BASE_URL}auth/user`, method: 'get', propertyName: 'data.user' }
        },
        tokenRequired: true
      }
    },
    redirect: {
      login: constants.paths.AUTH_REQUIRED,
      logout: constants.paths.LOGGED_OUT,
      callback: false,
      user: constants.paths.USER_PROFILE,
      home: constants.paths.LOGGED_IN
    },
    plugins: [
      '~/plugins/auth.js'
    ]
}

The relevant part of my login code looks like this, and you can see I am storing the token in universal storage:

const res = await ctx.$auth.login({ data })
if (! res.data || ! res.data.errors) ctx.$auth.setUser(res.data.data.user)
ctx.$auth.$storage.setUniversal('token', res.data.data.token, true)

The inteceptor in the auth plugin then retrieves the token from storage and appends to the URL being called by axios:

$axios.onRequest((config) => {
  const token = $auth.$storage.getUniversal('token')
  if (token) config.url = config.url + '?token=' + token
  // TODO: add basic auth to config.headers
})

I am seeing the token come through appended to the URL on client requests, but when I hit refresh and the application calls get user, the inteceptor is not being called.

After some debugging it seems that the plugin referenced in auth.plugins is not called on the server-side. I have another plugin with an axios inteceptor that is referenced in the plugins property of the nuxt.config.js file. If I add a console.log call to both inteceptors, I see that the auth plugin's inteceptor does not fire when I hit refresh, it only fires when I make a client-side request.

So I'm lost now. Can somebody tell me how I can pass both the token and basic auth header to the server all requests?