Vishesh 'ironeagle' Bangotra
28cf6ccacf
## Summary
Wire spec-driven auth into the frontend. Auth config (server URL, paths) is extracted from the served OpenAPI spec by `AppProvider`. `AuthProvider` receives the config as a prop. 401 responses from both the main API and the auth server dispatch an `auth:unauthorized` event that triggers redirect to `/login`. Fix `ProfileRoutes` URL duplication bug.
## Changes
### Auth config from spec
- **`main.jsx`** — `AppProvider` wraps everything, loads spec, exposes `authConfig`. `AuthProvider` receives `authConfig` from `useAppContext()`. `onUnauthorized` passed to both `AppProvider` and `AuthProvider` wires `navigate("/login")`.
### 401 handling
- **`AppProvider.tsx`** — remove `onUnauthorized` prop (handled by `AuthProvider`'s event listener instead, avoiding double-navigation).
- **`useApi.ts`** — 401 response interceptor dispatches `auth:unauthorized` CustomEvent on `window`.
### Profile routing fix
- **`Admin.tsx:ProfileRoutes`** — replace nested `<Routes>` (which caused `/profile/me/me` URL duplication with React Router v6) with `useLocation()`/`useNavigate()` conditional rendering. Only allows `/profile/me` and `/profile/me/edit`.
- **`Admin.tsx:ProfileComponentWrapper`** — replace `pushState() + reload()` with React Router `navigate()` for both `onEdit` and `handleSubmit`.
### Debug logging
- Temporary console logs at every navigation point for diagnosing remaining issues.
Reviewed-on: #12
Co-authored-by: Vishesh 'ironeagle' Bangotra <aetoskia@gmail.com>
Co-committed-by: Vishesh 'ironeagle' Bangotra <aetoskia@gmail.com>
41 lines
1.0 KiB
TypeScript
41 lines
1.0 KiB
TypeScript
import axios, { AxiosInstance } from "axios";
|
|
import { tokenStore } from "./token";
|
|
|
|
export function attachAuthInterceptors(client: AxiosInstance) {
|
|
client.interceptors.request.use((config) => {
|
|
const token = tokenStore.get();
|
|
if (token) {
|
|
if (!config.headers) {
|
|
(config as any).headers = {};
|
|
}
|
|
config.headers.Authorization = `Bearer ${token}`;
|
|
}
|
|
return config;
|
|
});
|
|
|
|
client.interceptors.response.use(
|
|
(res) => res,
|
|
(error) => {
|
|
if (error.response?.status === 401) {
|
|
console.log("[authAxios] 401 from %s %s", error.config?.method, error.config?.url);
|
|
tokenStore.clear();
|
|
window.dispatchEvent(new CustomEvent("auth:unauthorized"));
|
|
}
|
|
return Promise.reject(error);
|
|
}
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Factory for app APIs that need auth
|
|
*/
|
|
export function createApiClient(baseURL: string): AxiosInstance {
|
|
const client = axios.create({
|
|
baseURL,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
|
|
attachAuthInterceptors(client);
|
|
return client;
|
|
}
|