feat: setup auth schema

2026-07-30 16:43:27 +07:00
parent 8a6a16ce9a
commit fdbc5dfe99
13 changed files with 217 additions and 45 deletions
@@ -0,0 +1,76 @@
+import { lodash } from '@repo/utils';
+import { appDatabase, AppDatabaseKey, appStorage, AppStorageKey } from '../storage/local';
+import { PrivilegeEntity } from '@repo/ui/foundations';
+
+interface TerminateOptions {
+  /** When true, appends ?redirect= so the user returns to their page after re-login.
+   *  Defaults to false (intended for 401 / expired token).
+   *  Set to false for manual logout so the user lands on a clean login page. */
+  preserveRedirect?: boolean;
+}
+
+export async function terminateAuthSession(options: TerminateOptions = {}) {
+  const { preserveRedirect = false } = options;
+
+  /**
+   * Delete invalid tokens (Clear local state)
+   */
+  await appDatabase.removeItem(AppDatabaseKey.USER_PRIVILEGE);
+  await appDatabase.removeItem(AppDatabaseKey.USER_PROFILE);
+  await appDatabase.removeItem(AppDatabaseKey.ACCESS_TOKEN);
+  await appStorage.removeItem(AppStorageKey.USER_ID);
+
+  /**
+   * Build the login URL
+   */
+  let loginUrl = '/auth/login';
+
+  if (preserveRedirect) {
+    const currentPath = window.location.pathname + window.location.search;
+    loginUrl += `?redirect=${encodeURIComponent(currentPath)}`;
+  }
+
+  /**
+   * Redirect without saving history to prevent infinite back-loops
+   */
+  window.location.replace(loginUrl);
+}
+
+export async function initiateAuthSession(respLogin: any) {
+  const data = respLogin?.data ?? {};
+  const { token, id } = data;
+  const userProfile = lodash.omit(data, ['token']);
+
+  if (!token) throw new Error('Login response missing token');
+
+  // FIXME: Populate this with the mapped privilege data.
+  // NOTE: The assignment below needs to be updated. Replace the empty object `{}`
+  // with the actual mapped data (e.g., from mappingUserPrivilege(data)).
+  // Expected structure (Record<string, PrivilegeEntity>):
+  // {
+  //   "TRANSACTION_BOOKING": {
+  //     ALLOW_CREATE: true,
+  //     ALLOW_VIEW: true,
+  //     // ...
+  //   }
+  // }
+  const userPrivilege: Record<string, PrivilegeEntity> = {};
+
+  /**
+   * Store credentials in local storage
+   */
+  await appStorage.setItem(AppStorageKey.USER_ID, id);
+  await appDatabase.setItem(AppDatabaseKey.ACCESS_TOKEN, token);
+  await appDatabase.setItem(AppDatabaseKey.USER_PROFILE, { ...userProfile, label: userProfile.role });
+  await appDatabase.setItem(AppDatabaseKey.USER_PRIVILEGE, userPrivilege);
+
+  /**
+   * Determine redirect destination
+   * If the user was redirected here from a protected page, honour that URL.
+   * Otherwise fall back to the default app entry point.
+   */
+  const params = new URLSearchParams(window.location.search);
+  const redirectTo = params.get('redirect');
+
+  window.location.replace(redirectTo ? decodeURIComponent(redirectTo) : '/app');
+}