feat: Update environment variables and improve Sitar API configuration

.env.example

@@ -31,16 +31,6 @@ CORE_DB_PASSWORD=postgres
 # Ejemplo para Hub: http://localhost:5173,http://100.78.6.108:5174,http://100.78.6.108:8001
 CORS_ORIGINS=http://localhost:5173,http://localhost:3000
 
-# ---- API Tipo cambio (External) ---
-EXTERNAL_API_URL=http://74.208.80.245:3000
-EXTERNAL_API_USER=devAS
-EXTERNAL_API_PASSWORD=T6Y4mqP09Y[-2-3H 
-
-# ----- API SITAR (Warnings) ---
-SITAR_API_URL=""
-SITAR_API_USER=""
-SITAR_API_PASSWORD=""
-
 # ----- Frontend -----
 NODE_ENV=development
 VITE_API_URL=http://localhost:8000/api
@@ -52,6 +42,11 @@ VITE_KEYCLOAK_CLIENT_ID=anexo76-frontend
 #------ Celery / Valkey ----------
 VALKEY_URL=redis://valkey:6379/0
 
+# ----- Sitar API -----
+SITAR_API_URL=http://api.sitar.aduanasoft.com
+SITAR_API_USER=user_sitar_api
+SITAR_API_PASSWORD=password123
+
 # ==================================
 # CONFIGURACIÓN DE SINCRONIZACIÓN
 # ==================================

docker-compose.prod.yml

@@ -174,9 +174,6 @@ services:
       - SITAR_API_URL=${SITAR_API_URL}
       - SITAR_API_USER=${SITAR_API_USER}
       - SITAR_API_PASSWORD=${SITAR_API_PASSWORD}      
-      - EXTERNAL_API_URL=${EXTERNAL_API_URL}
-      - EXTERNAL_API_USER=${EXTERNAL_API_USER}
-      - EXTERNAL_API_PASSWORD=${EXTERNAL_API_PASSWORD}
       - VALKEY_URL=${VALKEY_URL:-redis://valkey:6379/0}
       - CENTRAL_SERVER_URL=${CENTRAL_SERVER_URL:-""}
       - SYNC_SECRET_TOKEN=${SYNC_SECRET_TOKEN:-change-this-sync-token-in-production}

docker-compose.yml

@@ -178,9 +178,6 @@ services:
       - SITAR_API_URL=${SITAR_API_URL}
       - SITAR_API_USER=${SITAR_API_USER}
       - SITAR_API_PASSWORD=${SITAR_API_PASSWORD}
-      - EXTERNAL_API_URL=${EXTERNAL_API_URL}
-      - EXTERNAL_API_USER=${EXTERNAL_API_USER}
-      - EXTERNAL_API_PASSWORD=${EXTERNAL_API_PASSWORD}
       - VALKEY_URL=${VALKEY_URL:-redis://valkey:6379/0}
       - CENTRAL_SERVER_URL=${CENTRAL_SERVER_URL:-""}
       - SYNC_SECRET_TOKEN=${SYNC_SECRET_TOKEN:-change-this-sync-token-in-production}

frontend/src/routes/auth/callback/+page.server.ts

@@ -1,7 +1,7 @@
 import { redirect } from '@sveltejs/kit';
 import type { PageServerLoad } from './$types';
 
-export const load: PageServerLoad = async ({ url, cookies }) => {
+export const load: PageServerLoad = async ({ url, cookies, fetch }) => {
 	// Obtener el código y state de los query params
 	const code = url.searchParams.get('code');
 	const state = url.searchParams.get('state');

frontend/src/routes/login/+page.server.ts

@@ -19,7 +19,7 @@ export const load: PageServerLoad = async ({ cookies, url }) => {
 };
 
 export const actions = {
-	default: async ({ request, cookies, url }) => {
+	default: async ({ request, cookies, url, fetch }) => {
 		const data = await request.formData();
 		const username = data.get('username')?.toString();
 		const password = data.get('password')?.toString();

frontend/svelte.config.js

@@ -9,7 +9,7 @@ const config = {
 	kit: { 
 		adapter: adapter(),
 		csrf: {
-			checkOrigin: false
+			trustedOrigins: (process.env.TRUSTED_ORIGINS ?? process.env.CORS_ORIGINS ?? '').split(',').filter(Boolean)
 		}
 	}
 };