@djangocfg/api 2.1.455 → 2.1.457

package/src/_api/generated/_cfg_totp/events.ts

@@ -1,198 +0,0 @@
-// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras.events
-// Hooks Hey API client interceptors → typed CustomEvents on `window`.
-// DO NOT EDIT — re-run `make gen-clients`.
-//
-// Usage:
-//   import "./generated/events"  // side-effect: registers interceptors
-//
-//   window.addEventListener("cmdop:network-error", (e) => {
-//     console.log(e.detail.status, e.detail.method, e.detail.url);
-//   });
-
-import { client } from "../client.gen";
-
-// ─────────────────────────────────────────────────────────────────────────────
-// Event names + detail types
-// ─────────────────────────────────────────────────────────────────────────────
-
-export const NETWORK_ERROR_EVENT = "cmdop:network-error" as const;
-export const VALIDATION_ERROR_EVENT = "cmdop:validation-error" as const;
-export const RUNTIME_ERROR_EVENT = "cmdop:runtime-error" as const;
-
-export interface NetworkErrorDetail {
-  /** HTTP method (GET/POST/...). */
-  method: string;
-  /** Request URL. */
-  url: string;
-  /** HTTP status if response arrived; null on transport failure. */
-  status: number | null;
-  /** Response body parsed as text (best-effort, may be empty). */
-  body?: string;
-  /** Underlying error message (network failures, abort, etc.). */
-  error?: string;
-  /** Heuristic: did the request likely fail due to CORS? */
-  possiblyCors: boolean;
-  timestamp: Date;
-}
-
-export interface ValidationErrorDetail {
-  /** Operation ID this validation applies to (from the OpenAPI spec). */
-  operation: string;
-  /** Schema name that failed (if known). */
-  schema?: string;
-  /** Issues array — shape mirrors zod's ZodIssue but kept opaque here to
-   *  avoid forcing a hard zod dep on consumers that don't use schemas. */
-  issues: unknown;
-  /** Raw response data that failed validation. */
-  data: unknown;
-  timestamp: Date;
-}
-
-export interface RuntimeErrorDetail {
-  /** Free-form source identifier — component name, hook name, etc. */
-  source: string;
-  message: string;
-  /** Original Error object (may be undefined when caller lacks one). */
-  error?: Error;
-  /** Arbitrary context payload from the caller. */
-  context?: Record<string, unknown>;
-  timestamp: Date;
-}
-
-// Augment the global WindowEventMap so addEventListener gets typed details.
-declare global {
-  interface WindowEventMap {
-    "cmdop:network-error": CustomEvent<NetworkErrorDetail>;
-    "cmdop:validation-error": CustomEvent<ValidationErrorDetail>;
-    "cmdop:runtime-error": CustomEvent<RuntimeErrorDetail>;
-  }
-}
-
-// ─────────────────────────────────────────────────────────────────────────────
-// Dispatch helpers
-// ─────────────────────────────────────────────────────────────────────────────
-
-function _dispatch<T>(name: string, detail: T): void {
-  if (typeof window === "undefined") return;
-  try {
-    window.dispatchEvent(new CustomEvent(name, { detail, bubbles: true }));
-  } catch {
-    // Event dispatch must never crash the app.
-  }
-}
-
-/** Emit a runtime error from anywhere in app code. */
-export function emitRuntimeError(
-  source: string,
-  message: string,
-  error?: Error,
-  context?: Record<string, unknown>,
-): void {
-  _dispatch<RuntimeErrorDetail>(RUNTIME_ERROR_EVENT, {
-    source,
-    message,
-    error,
-    context,
-    timestamp: new Date(),
-  });
-}
-
-/** Emit a zod validation failure. Called by hooks when `validate` is provided. */
-export function dispatchValidationError(
-  operation: string,
-  data: unknown,
-  issues: unknown,
-  schema?: string,
-): void {
-  _dispatch<ValidationErrorDetail>(VALIDATION_ERROR_EVENT, {
-    operation,
-    schema,
-    issues,
-    data,
-    timestamp: new Date(),
-  });
-}
-
-// ─────────────────────────────────────────────────────────────────────────────
-// Listen helpers — typed wrappers over addEventListener, return cleanup fn.
-// ─────────────────────────────────────────────────────────────────────────────
-
-export function onNetworkError(
-  cb: (detail: NetworkErrorDetail) => void,
-): () => void {
-  if (typeof window === "undefined") return () => {};
-  const handler = (e: CustomEvent<NetworkErrorDetail>) => cb(e.detail);
-  window.addEventListener(NETWORK_ERROR_EVENT, handler);
-  return () => window.removeEventListener(NETWORK_ERROR_EVENT, handler);
-}
-
-export function onValidationError(
-  cb: (detail: ValidationErrorDetail) => void,
-): () => void {
-  if (typeof window === "undefined") return () => {};
-  const handler = (e: CustomEvent<ValidationErrorDetail>) => cb(e.detail);
-  window.addEventListener(VALIDATION_ERROR_EVENT, handler);
-  return () => window.removeEventListener(VALIDATION_ERROR_EVENT, handler);
-}
-
-export function onRuntimeError(
-  cb: (detail: RuntimeErrorDetail) => void,
-): () => void {
-  if (typeof window === "undefined") return () => {};
-  const handler = (e: CustomEvent<RuntimeErrorDetail>) => cb(e.detail);
-  window.addEventListener(RUNTIME_ERROR_EVENT, handler);
-  return () => window.removeEventListener(RUNTIME_ERROR_EVENT, handler);
-}
-
-// ─────────────────────────────────────────────────────────────────────────────
-// Hey API interceptors — wire once, emit on response/error.
-// ─────────────────────────────────────────────────────────────────────────────
-
-let _wired = false;
-
-function _wire(): void {
-  if (_wired) return;
-  _wired = true;
-
-  // response interceptor: every response, OK or not, lets us see status.
-  // We only emit for non-2xx — successful requests are silent.
-  client.interceptors.response.use(async (response, request) => {
-    if (!response.ok) {
-      let body: string | undefined;
-      try {
-        body = await response.clone().text();
-        if (body.length > 4000) body = body.slice(0, 4000) + "…";
-      } catch {
-        // ignore — body inaccessible
-      }
-      _dispatch<NetworkErrorDetail>(NETWORK_ERROR_EVENT, {
-        method: request.method,
-        url: request.url,
-        status: response.status,
-        body,
-        possiblyCors: false,
-        timestamp: new Date(),
-      });
-    }
-    return response;
-  });
-
-  // error interceptor: transport-level failures (abort, DNS, CORS, offline).
-  client.interceptors.error.use((error, _response, request) => {
-    const msg = error instanceof Error ? error.message : String(error);
-    // Heuristic: CORS-blocked fetches usually surface as "Failed to fetch"
-    // without a status. Not perfect, but catches the common case.
-    const possiblyCors = /failed to fetch|network error|cors/i.test(msg);
-    _dispatch<NetworkErrorDetail>(NETWORK_ERROR_EVENT, {
-      method: request?.method ?? "UNKNOWN",
-      url: request?.url ?? "",
-      status: null,
-      error: msg,
-      possiblyCors,
-      timestamp: new Date(),
-    });
-    return error;
-  });
-}
-
-_wire();

package/src/auth/__tests__/jwt.test.ts

@@ -1,119 +0,0 @@
-/**
- * JWT expiry-helper tests (auth/utils/jwt.ts).
- *
- * These functions decide whether the client should trust a persisted token or
- * treat the session as dead. They must FAIL CLOSED: anything undecodable counts
- * as expired, so garbage in localStorage sends the user to the login form
- * rather than looping on 401s. (This is the automated version of the user's
- * manual "clear localStorage and the form appeared".)
- */
-
-import { describe, expect, it } from 'vitest';
-
-import { getTokenExpiry, isTokenExpired, isTokenExpiringSoon } from '../utils/jwt';
-
-const NOW = 1_800_000_000_000; // fixed "now" in ms (injected, not Date.now())
-
-/** Base64url without padding — mirrors real JWT segment encoding. */
-function b64url(obj: unknown): string {
-  const json = JSON.stringify(obj);
-  const b64 = Buffer.from(json, 'utf8').toString('base64');
-  return b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
-}
-
-/** Build a syntactically valid 3-segment JWT with the given payload. */
-function jwt(payload: Record<string, unknown>): string {
-  const header = b64url({ alg: 'HS256', typ: 'JWT' });
-  const body = b64url(payload);
-  return `${header}.${body}.signature`;
-}
-
-/** exp claim is in SECONDS in a real JWT. */
-const expSeconds = (ms: number) => Math.floor(ms / 1000);
-
-describe('getTokenExpiry', () => {
-  it('extracts exp (converted to ms) from a well-formed token', () => {
-    const token = jwt({ exp: expSeconds(NOW) });
-    expect(getTokenExpiry(token)).toBe(expSeconds(NOW) * 1000);
-  });
-
-  it('returns null for null / undefined / empty', () => {
-    expect(getTokenExpiry(null)).toBeNull();
-    expect(getTokenExpiry(undefined)).toBeNull();
-    expect(getTokenExpiry('')).toBeNull();
-  });
-
-  it('returns null for a non-JWT string (wrong segment count)', () => {
-    expect(getTokenExpiry('not-a-jwt')).toBeNull();
-    expect(getTokenExpiry('only.two')).toBeNull();
-    expect(getTokenExpiry('a.b.c.d')).toBeNull();
-  });
-
-  it('returns null when the payload is not valid base64/JSON', () => {
-    expect(getTokenExpiry('aaa.!!!!.bbb')).toBeNull();
-  });
-
-  it('returns null when exp is missing or non-numeric', () => {
-    expect(getTokenExpiry(jwt({ sub: 'user' }))).toBeNull();
-    expect(getTokenExpiry(jwt({ exp: 'soon' }))).toBeNull();
-    expect(getTokenExpiry(jwt({ exp: null }))).toBeNull();
-  });
-
-  it('handles a non-object payload (e.g. a JSON number) as no-exp', () => {
-    const header = b64url({ alg: 'HS256' });
-    const body = b64url(42 as unknown as Record<string, unknown>);
-    expect(getTokenExpiry(`${header}.${body}.sig`)).toBeNull();
-  });
-});
-
-describe('isTokenExpired (fail-closed)', () => {
-  it('false for a token that expires in the future', () => {
-    const token = jwt({ exp: expSeconds(NOW + 60_000) });
-    expect(isTokenExpired(token, 0, NOW)).toBe(false);
-  });
-
-  it('true for a token already past exp', () => {
-    const token = jwt({ exp: expSeconds(NOW - 1) });
-    expect(isTokenExpired(token, 0, NOW)).toBe(true);
-  });
-
-  it('true exactly at exp (boundary is inclusive → expired)', () => {
-    const token = jwt({ exp: expSeconds(NOW) });
-    expect(isTokenExpired(token, 0, NOW)).toBe(true);
-  });
-
-  it('skew treats a soon-to-expire token as already expired', () => {
-    const token = jwt({ exp: expSeconds(NOW + 30_000) }); // expires in 30s
-    expect(isTokenExpired(token, 60_000, NOW)).toBe(true); // 60s skew
-    expect(isTokenExpired(token, 10_000, NOW)).toBe(false); // 10s skew
-  });
-
-  it('true (fail-closed) for null / garbage / no-exp tokens', () => {
-    expect(isTokenExpired(null, 0, NOW)).toBe(true);
-    expect(isTokenExpired(undefined, 0, NOW)).toBe(true);
-    expect(isTokenExpired('garbage', 0, NOW)).toBe(true);
-    expect(isTokenExpired(jwt({ sub: 'x' }), 0, NOW)).toBe(true);
-  });
-});
-
-describe('isTokenExpiringSoon', () => {
-  it('true when expiry is within the threshold', () => {
-    const token = jwt({ exp: expSeconds(NOW + 5 * 60_000) }); // 5 min
-    expect(isTokenExpiringSoon(token, 10 * 60_000, NOW)).toBe(true);
-  });
-
-  it('false when expiry is beyond the threshold', () => {
-    const token = jwt({ exp: expSeconds(NOW + 20 * 60_000) }); // 20 min
-    expect(isTokenExpiringSoon(token, 10 * 60_000, NOW)).toBe(false);
-  });
-
-  it('false (not "soon") for undecodable tokens — the expired path owns those', () => {
-    expect(isTokenExpiringSoon(null, 10 * 60_000, NOW)).toBe(false);
-    expect(isTokenExpiringSoon('garbage', 10 * 60_000, NOW)).toBe(false);
-  });
-
-  it('true for an already-expired but decodable token', () => {
-    const token = jwt({ exp: expSeconds(NOW - 1000) });
-    expect(isTokenExpiringSoon(token, 10 * 60_000, NOW)).toBe(true);
-  });
-});

package/src/auth/__tests__/sessionBootstrap.test.ts

@@ -1,111 +0,0 @@
-/**
- * Bootstrap dead-session detection (isSessionDeadOnBootstrap in AuthContext).
- *
- * This is the decision that, at app start, either shows the login form or lets
- * the app try to use / refresh the persisted tokens. It reproduces the exact
- * scenario the user hit: stale tokens in localStorage that can never recover,
- * where the fix used to be "clear localStorage by hand". The session is DEAD
- * only when the access token is unusable AND the refresh token can't save it.
- */
-
-import { describe, expect, it } from 'vitest';
-
-import { isSessionDeadOnBootstrap } from '../context/AuthContext';
-
-const NOW = 1_800_000_000_000;
-const expSeconds = (ms: number) => Math.floor(ms / 1000);
-
-function b64url(obj: unknown): string {
-  return Buffer.from(JSON.stringify(obj), 'utf8')
-    .toString('base64')
-    .replace(/\+/g, '-')
-    .replace(/\//g, '_')
-    .replace(/=+$/, '');
-}
-function jwt(payload: Record<string, unknown>): string {
-  return `${b64url({ alg: 'HS256' })}.${b64url(payload)}.sig`;
-}
-const live = () => jwt({ exp: expSeconds(NOW + 3_600_000) }); // +1h
-const dead = () => jwt({ exp: expSeconds(NOW - 3_600_000) }); // -1h
-
-describe('isSessionDeadOnBootstrap', () => {
-  it('ALIVE: live access + live refresh', () => {
-    expect(isSessionDeadOnBootstrap(live(), live(), NOW)).toBe(false);
-  });
-
-  it('ALIVE: live access even if refresh is dead (access still works)', () => {
-    expect(isSessionDeadOnBootstrap(live(), dead(), NOW)).toBe(false);
-  });
-
-  it('ALIVE: live access even with no refresh token', () => {
-    expect(isSessionDeadOnBootstrap(live(), null, NOW)).toBe(false);
-  });
-
-  it('ALIVE: dead access but LIVE refresh (refresh can rescue it)', () => {
-    expect(isSessionDeadOnBootstrap(dead(), live(), NOW)).toBe(false);
-  });
-
-  it('DEAD: dead access + dead refresh (the classic stuck state)', () => {
-    expect(isSessionDeadOnBootstrap(dead(), dead(), NOW)).toBe(true);
-  });
-
-  it('DEAD: dead access + no refresh token', () => {
-    expect(isSessionDeadOnBootstrap(dead(), null, NOW)).toBe(true);
-  });
-
-  it('DEAD: both tokens null (empty storage that still triggered init)', () => {
-    expect(isSessionDeadOnBootstrap(null, null, NOW)).toBe(true);
-  });
-
-  it('DEAD: garbage access + garbage refresh (corrupt storage — user cleared this by hand)', () => {
-    expect(isSessionDeadOnBootstrap('garbage', 'also-garbage', NOW)).toBe(true);
-  });
-
-  it('DEAD: garbage access + no refresh', () => {
-    expect(isSessionDeadOnBootstrap('xxxxx', null, NOW)).toBe(true);
-  });
-
-  it('ALIVE: garbage access but a LIVE refresh token still lets us recover', () => {
-    expect(isSessionDeadOnBootstrap('garbage', live(), NOW)).toBe(false);
-  });
-
-  it('DEAD: access expired exactly at now + refresh expired (inclusive boundary)', () => {
-    const atNow = jwt({ exp: expSeconds(NOW) });
-    expect(isSessionDeadOnBootstrap(atNow, atNow, NOW)).toBe(true);
-  });
-});
-
-/**
- * `isAuthenticated` is now derived as `!isSessionDeadOnBootstrap(...)` (via the
- * private isSessionAlive wrapper in AuthContext). These assertions read the same
- * predicate from the guard's point of view — proving the fix is self-sufficient:
- * a stale session reads as unauthenticated from LOCAL exp alone, with no server
- * 401 required (the exact case a CSP-blocked / hung request used to swallow).
- */
-describe('isAuthenticated gate (derived from session liveness, network-free)', () => {
-  const alive = (a: string | null, r: string | null) => !isSessionDeadOnBootstrap(a, r, NOW);
-
-  it('reports authenticated while the access token is still valid', () => {
-    expect(alive(live(), null)).toBe(true);
-  });
-
-  it('stays authenticated when access is expired but refresh can still renew', () => {
-    // Between access expiry and the silent refresh — NOT bounced to /auth.
-    expect(alive(dead(), live())).toBe(true);
-  });
-
-  it('reports UNAUTHENTICATED the instant both tokens are expired — no 401 needed', () => {
-    // This is the reporter's scenario: an expired session where the 401 that
-    // would normally trigger logout is swallowed by CSP / a hung request.
-    expect(alive(dead(), dead())).toBe(false);
-  });
-
-  it('reports UNAUTHENTICATED for a stale access with no refresh token', () => {
-    expect(alive(dead(), null)).toBe(false);
-  });
-
-  it('reports UNAUTHENTICATED for garbage tokens (would have read "present" before)', () => {
-    // The OLD isAuthenticated() returned true for any non-null token string.
-    expect(alive('stale-non-jwt', 'also-garbage')).toBe(false);
-  });
-});

package/src/auth/__tests__/useTokenRefresh.dom.test.tsx

@@ -1,167 +0,0 @@
-// @vitest-environment jsdom
-
-/**
- * useTokenRefresh DOM tests.
- *
- * The proactive refresher decides WHEN to refresh (expiry timer, window focus,
- * network reconnect) and delegates HOW to triggerRefresh. It is central to the
- * stuck-auth bug: a proactive refresh that fails on a dead/blacklisted token
- * must surface onRefreshError so AuthContext can collapse the session to the
- * login form. These tests mock the api store + triggerRefresh and drive timers
- * and window events.
- */
-
-import { renderHook, act } from '@testing-library/react';
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-
-// Mocks must be declared before importing the hook under test.
-const mockGetToken = vi.fn<() => string | null>();
-const mockGetRefreshToken = vi.fn<() => string | null>();
-const mockTriggerRefresh = vi.fn<() => Promise<string | null>>();
-
-vi.mock('../../', () => ({
-  api: {
-    getToken: () => mockGetToken(),
-    getRefreshToken: () => mockGetRefreshToken(),
-  },
-}));
-vi.mock('../refreshHandler', () => ({
-  triggerRefresh: () => mockTriggerRefresh(),
-}));
-
-import { useTokenRefresh } from '../hooks/useTokenRefresh';
-
-const NOW = 1_800_000_000_000;
-const expSeconds = (ms: number) => Math.floor(ms / 1000);
-function b64url(o: unknown) {
-  return Buffer.from(JSON.stringify(o), 'utf8').toString('base64')
-    .replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
-}
-function jwt(exp: number) {
-  return `${b64url({ alg: 'HS256' })}.${b64url({ exp })}.sig`;
-}
-const liveToken = () => jwt(expSeconds(NOW + 60 * 60_000)); // +1h — not expiring
-const expiringToken = () => jwt(expSeconds(NOW + 60_000)); // +1m — within 10m threshold
-
-describe('useTokenRefresh', () => {
-  beforeEach(() => {
-    vi.useFakeTimers();
-    vi.setSystemTime(NOW);
-    mockGetToken.mockReset();
-    mockGetRefreshToken.mockReset();
-    mockTriggerRefresh.mockReset();
-    mockGetRefreshToken.mockReturnValue('R-valid');
-    mockTriggerRefresh.mockResolvedValue('access-new');
-  });
-  afterEach(() => {
-    vi.useRealTimers();
-    vi.restoreAllMocks();
-  });
-
-  it('refreshes on mount when the token is expiring soon', async () => {
-    mockGetToken.mockReturnValue(expiringToken());
-    renderHook(() => useTokenRefresh({ enabled: true }));
-    // initial checkAndRefresh runs in an effect
-    await act(async () => { await Promise.resolve(); });
-    expect(mockTriggerRefresh).toHaveBeenCalledTimes(1);
-  });
-
-  it('does NOT refresh on mount when the token is fresh', async () => {
-    mockGetToken.mockReturnValue(liveToken());
-    renderHook(() => useTokenRefresh({ enabled: true }));
-    await act(async () => { await Promise.resolve(); });
-    expect(mockTriggerRefresh).not.toHaveBeenCalled();
-  });
-
-  it('does nothing when there is no access token', async () => {
-    mockGetToken.mockReturnValue(null);
-    renderHook(() => useTokenRefresh({ enabled: true }));
-    await act(async () => { await Promise.resolve(); });
-    expect(mockTriggerRefresh).not.toHaveBeenCalled();
-  });
-
-  it('is inert when disabled', async () => {
-    mockGetToken.mockReturnValue(expiringToken());
-    renderHook(() => useTokenRefresh({ enabled: false }));
-    await act(async () => { await Promise.resolve(); });
-    expect(mockTriggerRefresh).not.toHaveBeenCalled();
-  });
-
-  it('fires onRefresh with the new token on success', async () => {
-    mockGetToken.mockReturnValue(expiringToken());
-    const onRefresh = vi.fn();
-    const { result } = renderHook(() => useTokenRefresh({ enabled: true, onRefresh }));
-    await act(async () => { await result.current.refreshToken(); });
-    expect(onRefresh).toHaveBeenCalledWith('access-new');
-  });
-
-  it('fires onRefreshError when the refresh fails (dead/blacklisted token)', async () => {
-    // Fresh token so the mount-effect check does NOT auto-refresh; we drive the
-    // failing refresh explicitly to isolate the error path.
-    mockGetToken.mockReturnValue(liveToken());
-    mockTriggerRefresh.mockResolvedValue(null); // refresh failed
-    const onRefreshError = vi.fn();
-    const { result } = renderHook(() => useTokenRefresh({ enabled: true, onRefreshError }));
-    await act(async () => { await Promise.resolve(); }); // let mount effect settle (no-op)
-    expect(mockTriggerRefresh).not.toHaveBeenCalled();
-
-    await act(async () => {
-      const ok = await result.current.refreshToken();
-      expect(ok).toBe(false);
-    });
-    expect(onRefreshError).toHaveBeenCalledTimes(1);
-    expect(onRefreshError.mock.calls[0][0]).toBeInstanceOf(Error);
-  });
-
-  it('refreshToken returns false and skips trigger when no refresh token exists', async () => {
-    mockGetToken.mockReturnValue(expiringToken());
-    mockGetRefreshToken.mockReturnValue(null);
-    const { result } = renderHook(() => useTokenRefresh({ enabled: true }));
-    await act(async () => {
-      const ok = await result.current.refreshToken();
-      expect(ok).toBe(false);
-    });
-    expect(mockTriggerRefresh).not.toHaveBeenCalled();
-  });
-
-  it('refreshes on window focus when the token is expiring', async () => {
-    mockGetToken.mockReturnValue(expiringToken());
-    renderHook(() => useTokenRefresh({ enabled: true }));
-    await act(async () => { await Promise.resolve(); }); // consume mount check
-    mockTriggerRefresh.mockClear();
-
-    await act(async () => {
-      window.dispatchEvent(new Event('focus'));
-      await Promise.resolve();
-    });
-    expect(mockTriggerRefresh).toHaveBeenCalledTimes(1);
-  });
-
-  it('refreshes on network reconnect (online event)', async () => {
-    mockGetToken.mockReturnValue(expiringToken());
-    renderHook(() => useTokenRefresh({ enabled: true }));
-    await act(async () => { await Promise.resolve(); });
-    mockTriggerRefresh.mockClear();
-
-    await act(async () => {
-      window.dispatchEvent(new Event('online'));
-      await Promise.resolve();
-    });
-    expect(mockTriggerRefresh).toHaveBeenCalledTimes(1);
-  });
-
-  it('removes its event listeners on unmount', async () => {
-    mockGetToken.mockReturnValue(expiringToken());
-    const { unmount } = renderHook(() => useTokenRefresh({ enabled: true }));
-    await act(async () => { await Promise.resolve(); });
-    unmount();
-    mockTriggerRefresh.mockClear();
-
-    await act(async () => {
-      window.dispatchEvent(new Event('focus'));
-      window.dispatchEvent(new Event('online'));
-      await Promise.resolve();
-    });
-    expect(mockTriggerRefresh).not.toHaveBeenCalled();
-  });
-});

package/src/auth/hooks/useAuthGuard.ts

@@ -1,35 +0,0 @@
-"use client"
-
-import { useEffect, useState } from 'react';
-
-import { useAuth } from '../context';
-import { useCfgRouter } from './useCfgRouter';
-
-interface UseAuthGuardOptions {
-  redirectTo?: string;
-  requireAuth?: boolean;
-  /** Whether to save current URL for redirect after auth (default: true) */
-  saveRedirectUrl?: boolean;
-}
-
-export const useAuthGuard = (options: UseAuthGuardOptions = {}) => {
-  const { redirectTo = '/auth', requireAuth = true, saveRedirectUrl: shouldSaveUrl = true } = options;
-  const { isAuthenticated, isLoading, saveRedirectUrl } = useAuth();
-  const router = useCfgRouter();
-  const [isRedirecting, setIsRedirecting] = useState(false);
-
-  useEffect(() => {
-    if (!isLoading && requireAuth && !isAuthenticated && !isRedirecting) {
-      // Save current URL before redirecting
-      if (shouldSaveUrl && typeof window !== 'undefined') {
-        const currentUrl = window.location.pathname + window.location.search;
-        saveRedirectUrl(currentUrl);
-      }
-
-      setIsRedirecting(true);
-      router.push(redirectTo);
-    }
-  }, [isAuthenticated, isLoading, router, redirectTo, requireAuth, isRedirecting, shouldSaveUrl, saveRedirectUrl]);
-
-  return { isAuthenticated, isLoading, isRedirecting };
-};