fix: restore execute endpoints, fix API paths, and use relative URLs

- Re-add get_current_user dependency to execute_single_request and
  execute_test_suite (their bodies reference user.id for history saving)
- Fix ApiKeysPage: use /api/v1/api-keys instead of /api-keys (was returning
  SPA HTML instead of JSON)
- Fix ImportExportPage: use /api/v1/ prefix for collections, import, and
  export endpoints
- Add Array.isArray guards for API responses in ApiKeysPage and
  ImportExportPage
- Set VITE_API_URL to empty in .env.production so the SPA uses relative
  URLs (same-origin) instead of hardcoded Azure URL

Author: Scarage1

frontend/.env.production

@@ -1,2 +1,4 @@
-# Production Backend URL (Azure App Service)
-VITE_API_URL=https://apiwatch-shivamkumar.azurewebsites.net
+# Production Backend URL
+# When deployed, the SPA is served by the same FastAPI backend,
+# so an empty VITE_API_URL uses relative URLs (same-origin).
+VITE_API_URL=

frontend/src/pages/ApiKeysPage.tsx

@@ -31,8 +31,8 @@ export default function ApiKeysPage() {
   const fetchKeys = useCallback(async () => {
     try {
       setLoading(true);
-      const res = await api.get('/api-keys');
-      setKeys(res.data);
+      const res = await api.get('/api/v1/api-keys');
+      setKeys(Array.isArray(res.data) ? res.data : []);
     } catch {
       // silently handle
     } finally {
@@ -53,7 +53,7 @@ export default function ApiKeysPage() {
         d.setDate(d.getDate() + expiresInDays);
         payload.expires_at = d.toISOString();
       }
-      const res = await api.post('/api-keys', payload);
+      const res = await api.post('/api/v1/api-keys', payload);
       setNewKeyValue(res.data.raw_key);
       setName('');
       setScopes(['read', 'write']);
@@ -68,7 +68,7 @@ export default function ApiKeysPage() {
   const handleRevoke = async (id: string) => {
     if (!confirm('Revoke this API key? This cannot be undone.')) return;
     try {
-      await api.delete(`/api-keys/${id}`);
+      await api.delete(`/api/v1/api-keys/${id}`);
       fetchKeys();
     } catch {
       // silently handle

frontend/src/pages/ImportExportPage.tsx

@@ -31,8 +31,8 @@ export default function ImportExportPage() {
   const fetchCollections = useCallback(async () => {
     try {
       setLoading(true);
-      const res = await api.get('/collections');
-      setCollections(res.data);
+      const res = await api.get('/api/v1/collections');
+      setCollections(Array.isArray(res.data) ? res.data : []);
     } catch {
       // silently handle
     } finally {
@@ -53,7 +53,7 @@ export default function ImportExportPage() {
       setImportResult(null);
       const formData = new FormData();
       formData.append('file', file);
-      await api.post('/import-export/import/postman', formData, {
+      await api.post('/api/v1/import-export/import/postman', formData, {
         headers: { 'Content-Type': 'multipart/form-data' },
       });
       setImportResult({ success: true, message: `Successfully imported "${file.name}"` });
@@ -69,7 +69,7 @@ export default function ImportExportPage() {
   const handleExport = async (collectionId: string, format: 'postman' | 'openapi') => {
     try {
       setExporting(`${collectionId}-${format}`);
-      const res = await api.get(`/import-export/export/${format}/${collectionId}`);
+      const res = await api.get(`/api/v1/import-export/export/${format}/${collectionId}`);
       const blob = new Blob([JSON.stringify(res.data, null, 2)], { type: 'application/json' });
       const url = URL.createObjectURL(blob);
       const a = document.createElement('a');

src/api_server.py

@@ -29,6 +29,7 @@
 from src.diagnose import DiagnosisEngine
 from src.database import init_db, close_db, get_db, check_db_health
 from src.models import RequestHistory
+from src.jwt_auth import get_current_user
 from src.routes import api_v1_router, mock_catch_router
 from src.rate_limit import RateLimitMiddleware, RateLimitConfig
 from src.cache import get_cache, close_cache
@@ -300,6 +301,7 @@ async def health_check():
 async def execute_single_request(
     request_input: RequestConfigInput,
     db: AsyncSession = Depends(get_db),
+    user = Depends(get_current_user),
 ):
     """Execute a single API request (async via httpx)."""
     try:
@@ -366,6 +368,7 @@ async def execute_single_request(
 async def execute_test_suite(
     suite_input: TestSuiteInput,
     db: AsyncSession = Depends(get_db),
+    user = Depends(get_current_user),
 ) -> List[RequestResult]:
     """Execute a test suite (async via httpx)."""
     try: