James BruntonandGitHub
1816bad1ba
# Description of Changes Refactor frontend auth to the shared folder and hook it up to both the portal and editor so they share the same system. Also adds various tasks to help run the portal, including `task dev:portal` to spawn the portal with the backend, and `task dev:portal:proxy` to spawn the editor, portal and backend, and a reverse proxy (at localhost:3000) to allow you to use both at once to simulate how this will actually be deployed, allowing you to check whether the seamless transition between the two actually works.
71 lines
2.0 KiB
TypeScript
71 lines
2.0 KiB
TypeScript
/**
|
|
* Default HTTP transport for the shared auth engine.
|
|
*
|
|
* The editor injects its own richer axios instance (with platform routing,
|
|
* error toasts, credit headers, ...) via {@link configureSpringAuth}. Apps that
|
|
* don't have one - notably the portal - fall back to this minimal client, which
|
|
* attaches the `stirling_jwt` bearer token so the portal and editor share a
|
|
* single same-origin session.
|
|
*/
|
|
import axios, { type AxiosInstance } from "axios";
|
|
|
|
/** localStorage key holding the Spring JWT. Shared so portal + editor agree. */
|
|
export const JWT_STORAGE_KEY = "stirling_jwt";
|
|
|
|
export function getStoredToken(): string | null {
|
|
try {
|
|
if (typeof localStorage === "undefined") return null;
|
|
return localStorage.getItem(JWT_STORAGE_KEY);
|
|
} catch {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
export function setStoredToken(token: string): void {
|
|
try {
|
|
if (typeof localStorage !== "undefined") {
|
|
localStorage.setItem(JWT_STORAGE_KEY, token);
|
|
}
|
|
} catch {
|
|
// localStorage unavailable (private mode) - fail open
|
|
}
|
|
}
|
|
|
|
export function clearStoredToken(): void {
|
|
try {
|
|
if (typeof localStorage !== "undefined") {
|
|
localStorage.removeItem(JWT_STORAGE_KEY);
|
|
}
|
|
} catch {
|
|
// ignore
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Create the fallback transport. `baseURL` defaults to "/" so it targets the
|
|
* same origin that served the SPA - the backend serves both portal and editor,
|
|
* so the cookie/token domain is shared.
|
|
*/
|
|
export function createDefaultHttpClient(baseURL = "/"): AxiosInstance {
|
|
const client = axios.create({
|
|
baseURL,
|
|
responseType: "json",
|
|
withCredentials: true,
|
|
});
|
|
|
|
client.interceptors.request.use((config) => {
|
|
const token = getStoredToken();
|
|
if (token) {
|
|
config.headers = config.headers ?? {};
|
|
// Respect an explicit Authorization header (e.g. /auth/me passes the
|
|
// candidate token directly); only fill it in when absent.
|
|
if (!config.headers.Authorization) {
|
|
config.headers.Authorization = `Bearer ${token}`;
|
|
}
|
|
}
|
|
return config;
|
|
});
|
|
|
|
return client;
|
|
}
|