feat: add ESLint configuration for Nuxt and NestJS projects

- Introduced a new ESLint configuration file to support both Nuxt and NestJS applications.
- Implemented a function to scope files specifically for the web application, ensuring proper linting of relevant file types.
- Configured fallback rules for shared TypeScript and JavaScript files, enhancing code quality and consistency across the project.

Author: tacxou

Makefile

@@ -31,7 +31,7 @@ $(shell mkdir -p $(CERT_DIR))
 .DEFAULT_GOAL := help
 help:
 	@printf "\033[33mUsage:\033[0m\n  make [target] [arg=\"val\"...]\n\n\033[33mTargets:\033[0m\n"
-	@grep -E '^[-a-zA-Z0-9_\.\/]+:.*?## .*$$' $(MAKEFILE_LIST) \
+	@grep -h -E '^[-a-zA-Z0-9_\.\/]+:.*?## .*$$' $(MAKEFILE_LIST) \
 		| sort | awk 'BEGIN {FS = ":.*?## "}; {printf "  \033[32m%-15s\033[0m %s\n", $$1, $$2}'
 
 build: ## Build the container
@@ -253,3 +253,9 @@ clean-ssl-cert: ## Nettoyer les certificats HTTPS
 
 show-cert-info: ## Afficher les informations du certificat
 	@openssl x509 -in $(CERT_DIR)/server.crt -text -noout
+
+hibp-key-hex: ## Génère une clé 32 bytes (64 hex chars)
+	@printf "SESAME_PASSWORD_HISTORY_HIBP_KEY=%s\n" "$$(openssl rand -hex 32)"
+
+hibp-key-b64: ## Génère une clé 32 bytes (base64)
+	@printf "SESAME_PASSWORD_HISTORY_HIBP_KEY=%s\n" "$$(openssl rand -base64 32)"

eslint.config.mjs

@@ -0,0 +1,50 @@
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { createRequire } from 'node:module'
+import { FlatCompat } from '@eslint/eslintrc'
+import nuxt from '@nuxt/eslint-config'
+
+const require = createRequire(import.meta.url)
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+
+const compatRoot = new FlatCompat({ baseDirectory: __dirname })
+const compatApi = new FlatCompat({ baseDirectory: path.join(__dirname, 'apps/api') })
+
+function scopeFilesToWeb(files) {
+  if (!Array.isArray(files) || files.length === 0) {
+    return ['apps/web/**/*.{ts,js,vue}']
+  }
+  return files.map((f) => {
+    if (typeof f !== 'string') return f
+    if (f.startsWith('!')) return `!apps/web/${f.slice(1)}`
+    if (f.startsWith('apps/web/')) return f
+    return `apps/web/${f}`
+  })
+}
+
+const webConfigs = (await nuxt()).map((c) => ({
+  ...c,
+  files: scopeFilesToWeb(c.files),
+}))
+
+export default [
+  {
+    ignores: ['**/node_modules/**', '**/dist/**', '**/.output/**', '**/.nuxt/**', '**/coverage/**'],
+  },
+
+  // API (NestJS)
+  ...compatApi.config(require('./apps/api/.eslintrc.js')).map((c) => ({
+    ...c,
+    files: ['apps/api/**/*.{ts,js}'],
+  })),
+
+  // Web (Nuxt)
+  ...webConfigs,
+
+  // Fallback root rules for shared TS/JS (if any)
+  ...compatRoot.config(require('./.eslintrc.js')).map((c) => ({
+    ...c,
+    files: ['packages/**/*.{ts,js}', 'scripts/**/*.{ts,js}'],
+  })),
+]
+