@strapi/admin 5.53.0 → 5.54.0

package/dist/admin/admin/src/features/Auth.mjs

@@ -1,17 +1,21 @@
-import { jsx } from 'react/jsx-runtime';
+import { jsxs, Fragment, jsx } from 'react/jsx-runtime';
 import * as React from 'react';
+import { Dialog } from '@strapi/design-system';
+import { useIntl } from 'react-intl';
 import { useLocation, useNavigate } from 'react-router-dom';
+import { ConfirmDialog } from '../components/ConfirmDialog.mjs';
 import { createContext } from '../components/Context.mjs';
 import { useTypedDispatch, useTypedSelector } from '../core/store/hooks.mjs';
 import { useStrapiApp } from './StrapiApp.mjs';
-import { useIdleSessionLogout } from '../hooks/useIdleSessionLogout.mjs';
 import { useQueryParams } from '../hooks/useQueryParams.mjs';
+import { useSessionKeepalive } from '../hooks/useSessionKeepalive.mjs';
 import { logout, setToken, setLocale, login, getStoredToken } from '../reducer.mjs';
 import { adminApi } from '../services/api.mjs';
 import { useGetMeQuery, useGetMyPermissionsQuery, useLoginMutation, useLogoutMutation, useLazyCheckPermissionsQuery } from '../services/auth.mjs';
 import { normalizeAdminLocale } from '../translations/normalizeAdminLocale.mjs';
 import { getOrCreateDeviceId } from '../utils/deviceId.mjs';
-import { attemptTokenRefresh, setOnSessionExpired, setOnTokenUpdate } from '../utils/getFetchClient.mjs';
+import { getFetchClient, attemptTokenRefresh, setOnSessionExpired, resetSessionExpiredNotification, setOnTokenUpdate } from '../utils/getFetchClient.mjs';
+import { hasUnsavedChanges } from '../utils/unsavedChangesRegistry.mjs';
 
 /**
  * ensure the Auth context never exposes a non-function for checkUserHasPermissions.
@@ -32,7 +36,32 @@ const [Provider, useAuth] = createContext('Auth');
 const STORAGE_KEYS = {
     STATUS: 'isLoggedIn'
 };
+const isForcedLogout = (reason)=>reason === 'session-dead';
+/**
+ * Copy for the unsaved-changes prompt. A server-confirmed dead session needs to
+ * say *why* the dialog appeared, otherwise it reads as the usual navigation
+ * blocker and users confirm straight through it.
+ */ const LOGOUT_PROMPTS = {
+    voluntary: {
+        title: undefined,
+        body: {
+            id: 'global.prompt.unsaved',
+            defaultMessage: 'You have unsaved changes, are you sure you want to leave?'
+        }
+    },
+    'session-dead': {
+        title: {
+            id: 'app.session.ended.title',
+            defaultMessage: 'Session ended'
+        },
+        body: {
+            id: 'app.session.ended.unsaved',
+            defaultMessage: "Your session has ended and can't be resumed. Your unsaved changes will be lost when you log out."
+        }
+    }
+};
 const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken = false })=>{
+    const { formatMessage } = useIntl();
     const dispatch = useTypedDispatch();
     const runRbacMiddleware = useStrapiApp('AuthProvider', (state)=>state.rbac.run);
     const location = useLocation();
@@ -57,7 +86,46 @@ const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken =
     const navigate = useNavigate();
     const [loginMutation] = useLoginMutation();
     const [logoutMutation] = useLogoutMutation();
-    const clearStateAndLogout = React.useCallback(()=>{
+    const pendingLogoutRef = React.useRef(null);
+    const logoutGuardOpenRef = React.useRef(false);
+    const logoutGuardReasonRef = React.useRef('voluntary');
+    const [isSessionLogoutDialogOpen, setIsSessionLogoutDialogOpen] = React.useState(false);
+    const [sessionLogoutReason, setSessionLogoutReason] = React.useState('voluntary');
+    /**
+   * Prompt before discarding unsaved edits, then run `logoutFn`.
+   *
+   * - `voluntary`: Cancel leaves the user logged in (server session intact).
+   * - `session-dead`: the session is already unusable — Cancel (or dismiss)
+   *   still runs `logoutFn` so the client cannot keep a stale token. While the
+   *   dialog is open, a later `session-dead` request upgrades the pending action.
+   */ const runLogoutWithGuard = React.useCallback((logoutFn, reason = 'voluntary')=>{
+        if (logoutGuardOpenRef.current) {
+            pendingLogoutRef.current = logoutFn;
+            if (isForcedLogout(reason)) {
+                logoutGuardReasonRef.current = reason;
+                setSessionLogoutReason(reason);
+            }
+            return;
+        }
+        if (!hasUnsavedChanges()) {
+            logoutFn();
+            return;
+        }
+        logoutGuardOpenRef.current = true;
+        logoutGuardReasonRef.current = reason;
+        pendingLogoutRef.current = logoutFn;
+        setSessionLogoutReason(reason);
+        setIsSessionLogoutDialogOpen(true);
+    }, []);
+    const performGlobalLogout = React.useCallback(()=>{
+        void (async ()=>{
+            try {
+                const { post } = getFetchClient();
+                await post('/admin/logout');
+            } catch  {
+            // The session may already be invalid.
+            }
+        })();
         dispatch(adminApi.util.resetApiState());
         dispatch(logout());
         navigate('/auth/login');
@@ -65,22 +133,40 @@ const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken =
         dispatch,
         navigate
     ]);
-    /**
-   * Clear *only this tab's* session and redirect to login, without removing the
-   * shared `isLoggedIn`/`jwtToken` storage keys. Unlike `clearStateAndLogout`,
-   * this does not dispatch `logoutAction`, so it does not fire the cross-tab
-   * `storage` event that logs every tab out. Used by the speculative idle timer,
-   * which fires per-tab at the access token's `exp`: an idle tab must never tear
-   * down a session that another tab is still actively using. A genuine logout
-   * (user-initiated, or a server-confirmed 401 via `setOnSessionExpired`) still
-   * goes through `clearStateAndLogout` and broadcasts to all tabs.
-   */ const clearLocalSessionAndRedirect = React.useCallback(()=>{
-        dispatch(adminApi.util.resetApiState());
-        dispatch(setToken(null));
-        navigate('/auth/login');
+    const clearStateAndLogout = React.useCallback(()=>{
+        runLogoutWithGuard(performGlobalLogout, 'session-dead');
     }, [
-        dispatch,
-        navigate
+        performGlobalLogout,
+        runLogoutWithGuard
+    ]);
+    const handleConfirmSessionLogout = React.useCallback(()=>{
+        logoutGuardOpenRef.current = false;
+        logoutGuardReasonRef.current = 'voluntary';
+        setIsSessionLogoutDialogOpen(false);
+        setSessionLogoutReason('voluntary');
+        const logoutFn = pendingLogoutRef.current;
+        pendingLogoutRef.current = null;
+        logoutFn?.();
+    }, []);
+    const handleCancelSessionLogout = React.useCallback(()=>{
+        const forced = isForcedLogout(logoutGuardReasonRef.current);
+        const logoutFn = pendingLogoutRef.current;
+        logoutGuardOpenRef.current = false;
+        logoutGuardReasonRef.current = 'voluntary';
+        pendingLogoutRef.current = null;
+        setIsSessionLogoutDialogOpen(false);
+        setSessionLogoutReason('voluntary');
+        // Forced paths: session is already dead — dismiss must still clear client state.
+        if (forced) {
+            logoutFn?.();
+        }
+    }, []);
+    const handleSessionLogoutDialogOpenChange = React.useCallback((open)=>{
+        if (!open) {
+            handleCancelSessionLogout();
+        }
+    }, [
+        handleCancelSessionLogout
     ]);
     const resyncToken = React.useCallback((newToken)=>{
         dispatch(setToken(newToken));
@@ -89,10 +175,11 @@ const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken =
     ]);
     /**
    * Track the timestamp of the user's last interaction. This is the activity
-   * signal `useIdleSessionLogout` uses to tell an active user (silently renew
-   * their session) apart from a genuinely idle one (log out). Successful API
-   * calls don't refresh the short-lived access token on their own, so without
-   * this an actively-working user is logged out the moment the token expires.
+   * signal `useSessionKeepalive` uses to tell an active user (silently renew
+   * their session) apart from a genuinely idle one (leave the stale access
+   * token alone until the next request). Successful API calls don't refresh
+   * the short-lived access token on their own, so without this an
+   * actively-working user would hit a 401 the moment the token expires.
    */ const lastActivityRef = React.useRef(Date.now());
     React.useEffect(()=>{
         const markActivity = ()=>{
@@ -118,7 +205,7 @@ const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken =
     const getLastActivityAt = React.useCallback(()=>lastActivityRef.current, []);
     /**
    * Silently rotate the refresh token and mint a new access token. Returns
-   * `true` on success (the resulting `setToken` re-arms the idle timer) and
+   * `true` on success (the resulting `setToken` re-arms the renew timer) and
    * `false` when the server rejects it (session genuinely over).
    */ const renewSession = React.useCallback(async ()=>{
         try {
@@ -167,15 +254,15 @@ const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken =
         clearStateAndLogout
     ]);
     /**
-   * Session lifecycle at access-token expiry. The timer fires per-tab; the hook
-   * then either (1) re-syncs from a token another tab refreshed, (2) silently
-   * renews when the user has been active, or (3) logs out. Idle logout is local
-   * so an idle tab can't force-logout an actively-used one; a server-confirmed
-   * dead session (renewal rejected) broadcasts globally. See
-   * `useIdleSessionLogout` for the full rationale.
-   */ useIdleSessionLogout({
+   * Session keepalive around access-token expiry. The timer fires per-tab; the
+   * hook then either (1) re-syncs from a token another tab refreshed, (2)
+   * silently renews when the user has been active, or (3) does nothing when
+   * idle — leaving the stale access token in place so unsaved form state
+   * survives until the next request refreshes it. A server-confirmed dead
+   * session (renewal rejected) broadcasts globally via `onSessionDead`. See
+   * `useSessionKeepalive` for the full rationale.
+   */ useSessionKeepalive({
         token,
-        onExpired: clearLocalSessionAndRedirect,
         onSessionDead: clearStateAndLogout,
         getStoredToken,
         onResync: resyncToken,
@@ -207,6 +294,7 @@ const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken =
        * because if something fails, it will throw an error.
        */ if ('data' in res) {
             const { token } = res.data;
+            resetSessionExpiredNotification();
             dispatch(login({
                 token,
                 persist: rememberMe
@@ -217,14 +305,26 @@ const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken =
         dispatch,
         loginMutation
     ]);
-    const logout$1 = React.useCallback(async ()=>{
-        await logoutMutation({
-            deviceId: getOrCreateDeviceId()
+    /**
+   * Explicit user logout. Confirm unsaved changes *before* `logoutMutation` so
+   * Cancel leaves the server session and client token intact.
+   */ const logout$1 = React.useCallback(async ()=>{
+        runLogoutWithGuard(()=>{
+            void (async ()=>{
+                try {
+                    await logoutMutation({
+                        deviceId: getOrCreateDeviceId()
+                    });
+                } catch  {
+                // The session may already be invalid.
+                }
+                performGlobalLogout();
+            })();
         });
-        clearStateAndLogout();
     }, [
-        clearStateAndLogout,
-        logoutMutation
+        logoutMutation,
+        performGlobalLogout,
+        runLogoutWithGuard
     ]);
     const refetchPermissions = React.useCallback(async ()=>{
         if (!isUninitialized) {
@@ -292,16 +392,32 @@ const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken =
         userPermissions
     ]);
     const isLoading = isLoadingUser || isLoadingPermissions;
-    return /*#__PURE__*/ jsx(Provider, {
-        token: token,
-        user: user,
-        login: login$1,
-        logout: logout$1,
-        permissions: userPermissions,
-        checkUserHasPermissions: checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS,
-        refetchPermissions: refetchPermissions,
-        isLoading: isLoading,
-        children: children
+    return /*#__PURE__*/ jsxs(Fragment, {
+        children: [
+            /*#__PURE__*/ jsx(Provider, {
+                token: token,
+                user: user,
+                login: login$1,
+                logout: logout$1,
+                permissions: userPermissions,
+                checkUserHasPermissions: checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS,
+                refetchPermissions: refetchPermissions,
+                isLoading: isLoading,
+                children: children
+            }),
+            /*#__PURE__*/ jsx(Dialog.Root, {
+                open: isSessionLogoutDialogOpen,
+                onOpenChange: handleSessionLogoutDialogOpenChange,
+                children: /*#__PURE__*/ jsx(ConfirmDialog, {
+                    onConfirm: handleConfirmSessionLogout,
+                    onCancel: handleCancelSessionLogout,
+                    title: LOGOUT_PROMPTS[sessionLogoutReason].title ? formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].title) : undefined,
+                    // Forced session-dead: no Cancel that pretends the session is still valid.
+                    startAction: isForcedLogout(sessionLogoutReason) ? /*#__PURE__*/ jsx(Fragment, {}) : undefined,
+                    children: formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].body)
+                })
+            })
+        ]
     });
 };
 

package/dist/admin/admin/src/features/Auth.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.mjs","sources":["../../../../../admin/src/features/Auth.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { useLocation, useNavigate } from 'react-router-dom';\n\nimport { Login } from '../../../shared/contracts/authentication';\nimport { createContext } from '../components/Context';\nimport { useTypedDispatch, useTypedSelector } from '../core/store/hooks';\nimport { useStrapiApp } from '../features/StrapiApp';\nimport { useIdleSessionLogout } from '../hooks/useIdleSessionLogout';\nimport { useQueryParams } from '../hooks/useQueryParams';\nimport {\n  getStoredToken,\n  login as loginAction,\n  logout as logoutAction,\n  setLocale,\n  setToken,\n} from '../reducer';\nimport { adminApi } from '../services/api';\nimport {\n  useGetMeQuery,\n  useGetMyPermissionsQuery,\n  useLazyCheckPermissionsQuery,\n  useLoginMutation,\n  useLogoutMutation,\n} from '../services/auth';\nimport { normalizeAdminLocale } from '../translations/normalizeAdminLocale';\nimport { getOrCreateDeviceId } from '../utils/deviceId';\nimport {\n  attemptTokenRefresh,\n  setOnSessionExpired,\n  setOnTokenUpdate,\n} from '../utils/getFetchClient';\n\nimport type {\n  Permission as PermissionContract,\n  SanitizedAdminUser,\n} from '../../../shared/contracts/shared';\n\ninterface Permission\n  extends Pick<PermissionContract, 'action' | 'subject'>,\n    Partial<Omit<PermissionContract, 'action' | 'subject'>> {}\n\ninterface User\n  extends Pick<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>,\n    Partial<Omit<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>> {}\n\ninterface AuthContextValue {\n  login: (\n    body: Login.Request['body'] & { rememberMe: boolean }\n  ) => Promise<Awaited<ReturnType<ReturnType<typeof useLoginMutation>[0]>>>;\n  logout: () => Promise<void>;\n  /**\n   * @alpha\n   * @description given a list of permissions, this function checks\n   * those against the current user's permissions or those passed as\n   * the second argument, if the user has those permissions the complete\n   * permission object form the API is returned. Therefore, if the list is\n   * empty, the user does not have any of those permissions.\n   */\n  checkUserHasPermissions: (\n    permissions?: Array<Pick<Permission, 'action'> & Partial<Omit<Permission, 'action'>>>,\n    passedPermissions?: Permission[],\n    rawQueryContext?: string\n  ) => Promise<Permission[]>;\n  isLoading: boolean;\n  permissions: Permission[];\n  refetchPermissions: () => Promise<void>;\n  token: string | null;\n  user?: User;\n}\n\n/**\n * ensure the Auth context never exposes a non-function for checkUserHasPermissions.\n * When this is undefined (e.g. context timing in production builds), consumers would throw\n * \"p is not a function\" / \"checkUserHasPermissions is not a function\". By always passing\n * a function here, all current and future consumers are protected without per-call-site guards.\n *\n * When would the fallback run? Only if the real checkUserHasPermissions were ever undefined\n * when we pass to the Provider (e.g. a rare timing/build edge case). In normal runs it is\n * always defined (useCallback), so the real function is passed and behavior is unchanged.\n *\n * If the fallback ever did run: it returns [] so consumers (which use .length > 0) treat it\n * as \"no permission\" for that render—under-permissive. On the next AuthProvider re-render we\n * pass the real function again, so the context updates and the view corrects quickly.\n * @see https://github.com/strapi/strapi/issues/24384\n */\nconst NOOP_CHECK_USER_HAS_PERMISSIONS: AuthContextValue['checkUserHasPermissions'] = async () => [];\n\nconst [Provider, useAuth] = createContext<AuthContextValue>('Auth');\n\ninterface AuthProviderProps {\n  children: React.ReactNode;\n  /**\n   * @internal could be removed at any time.\n   */\n  _defaultPermissions?: Permission[];\n\n  // NOTE: this is used for testing purposed only\n  _disableRenewToken?: boolean;\n}\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  STATUS: 'isLoggedIn',\n};\n\nconst AuthProvider = ({\n  children,\n  _defaultPermissions = [],\n  _disableRenewToken = false,\n}: AuthProviderProps) => {\n  const dispatch = useTypedDispatch();\n  const runRbacMiddleware = useStrapiApp('AuthProvider', (state) => state.rbac.run);\n  const location = useLocation();\n  const [{ rawQuery }] = useQueryParams();\n\n  const locationRef = React.useRef(location);\n\n  // Update ref without causing re-render\n  React.useEffect(() => {\n    locationRef.current = location;\n  }, [location]);\n\n  const token = useTypedSelector((state) => state.admin_app.token ?? null);\n\n  const { data: user, isLoading: isLoadingUser } = useGetMeQuery(undefined, {\n    /**\n     * If there's no token, we don't try to fetch\n     * the user data because it will fail.\n     */\n    skip: !token,\n  });\n\n  const {\n    data: userPermissions = _defaultPermissions,\n    refetch,\n    isUninitialized,\n    isLoading: isLoadingPermissions,\n  } = useGetMyPermissionsQuery(undefined, {\n    skip: !token,\n  });\n\n  const navigate = useNavigate();\n\n  const [loginMutation] = useLoginMutation();\n  const [logoutMutation] = useLogoutMutation();\n\n  const clearStateAndLogout = React.useCallback(() => {\n    dispatch(adminApi.util.resetApiState());\n    dispatch(logoutAction());\n    navigate('/auth/login');\n  }, [dispatch, navigate]);\n\n  /**\n   * Clear *only this tab's* session and redirect to login, without removing the\n   * shared `isLoggedIn`/`jwtToken` storage keys. Unlike `clearStateAndLogout`,\n   * this does not dispatch `logoutAction`, so it does not fire the cross-tab\n   * `storage` event that logs every tab out. Used by the speculative idle timer,\n   * which fires per-tab at the access token's `exp`: an idle tab must never tear\n   * down a session that another tab is still actively using. A genuine logout\n   * (user-initiated, or a server-confirmed 401 via `setOnSessionExpired`) still\n   * goes through `clearStateAndLogout` and broadcasts to all tabs.\n   */\n  const clearLocalSessionAndRedirect = React.useCallback(() => {\n    dispatch(adminApi.util.resetApiState());\n    dispatch(setToken(null));\n    navigate('/auth/login');\n  }, [dispatch, navigate]);\n\n  const resyncToken = React.useCallback(\n    (newToken: string) => {\n      dispatch(setToken(newToken));\n    },\n    [dispatch]\n  );\n\n  /**\n   * Track the timestamp of the user's last interaction. This is the activity\n   * signal `useIdleSessionLogout` uses to tell an active user (silently renew\n   * their session) apart from a genuinely idle one (log out). Successful API\n   * calls don't refresh the short-lived access token on their own, so without\n   * this an actively-working user is logged out the moment the token expires.\n   */\n  const lastActivityRef = React.useRef(Date.now());\n  React.useEffect(() => {\n    const markActivity = () => {\n      lastActivityRef.current = Date.now();\n    };\n    const events = ['pointerdown', 'keydown', 'click', 'scroll', 'touchstart'];\n    events.forEach((event) =>\n      window.addEventListener(event, markActivity, { passive: true, capture: true })\n    );\n\n    return () => {\n      events.forEach((event) => window.removeEventListener(event, markActivity, { capture: true }));\n    };\n  }, []);\n  const getLastActivityAt = React.useCallback(() => lastActivityRef.current, []);\n\n  /**\n   * Silently rotate the refresh token and mint a new access token. Returns\n   * `true` on success (the resulting `setToken` re-arms the idle timer) and\n   * `false` when the server rejects it (session genuinely over).\n   */\n  const renewSession = React.useCallback(async () => {\n    try {\n      await attemptTokenRefresh();\n      return true;\n    } catch {\n      return false;\n    }\n  }, []);\n\n  React.useEffect(() => {\n    if (user) {\n      if (user.preferedLanguage) {\n        dispatch(setLocale(normalizeAdminLocale(user.preferedLanguage)));\n      }\n    }\n  }, [dispatch, user]);\n\n  /**\n   * Register a callback to update Redux state when the token is refreshed.\n   * This ensures the app state stays in sync with the token stored in localStorage/cookies.\n   */\n  React.useEffect(() => {\n    setOnTokenUpdate((newToken) => {\n      dispatch(setToken(newToken));\n    });\n\n    return () => {\n      setOnTokenUpdate(null);\n    };\n  }, [dispatch]);\n\n  /**\n   * Register the session-expired handler that the fetch layer / RTK baseQuery\n   * call when the server rejects the refresh token. This is what redirects\n   * the active tab to /auth/login on a 401, instead of leaving the user on\n   * a stale page until they click something.\n   */\n  React.useEffect(() => {\n    setOnSessionExpired(() => {\n      clearStateAndLogout();\n    });\n\n    return () => {\n      setOnSessionExpired(null);\n    };\n  }, [clearStateAndLogout]);\n\n  /**\n   * Session lifecycle at access-token expiry. The timer fires per-tab; the hook\n   * then either (1) re-syncs from a token another tab refreshed, (2) silently\n   * renews when the user has been active, or (3) logs out. Idle logout is local\n   * so an idle tab can't force-logout an actively-used one; a server-confirmed\n   * dead session (renewal rejected) broadcasts globally. See\n   * `useIdleSessionLogout` for the full rationale.\n   */\n  useIdleSessionLogout({\n    token,\n    onExpired: clearLocalSessionAndRedirect,\n    onSessionDead: clearStateAndLogout,\n    getStoredToken,\n    onResync: resyncToken,\n    getLastActivityAt,\n    renewSession,\n    disabled: _disableRenewToken,\n  });\n\n  React.useEffect(() => {\n    /**\n     * This will log a user out of all tabs if they log out in one tab.\n     */\n    const handleUserStorageChange = (event: StorageEvent) => {\n      if (event.key === STORAGE_KEYS.STATUS && event.newValue === null) {\n        clearStateAndLogout();\n      }\n    };\n\n    window.addEventListener('storage', handleUserStorageChange);\n\n    return () => {\n      window.removeEventListener('storage', handleUserStorageChange);\n    };\n  });\n\n  const login = React.useCallback<AuthContextValue['login']>(\n    async ({ rememberMe, ...body }) => {\n      const res = await loginMutation({ ...body, deviceId: getOrCreateDeviceId(), rememberMe });\n\n      /**\n       * There will always be a `data` key in the response\n       * because if something fails, it will throw an error.\n       */\n      if ('data' in res) {\n        const { token } = res.data;\n\n        dispatch(\n          loginAction({\n            token,\n            persist: rememberMe,\n          })\n        );\n      }\n\n      return res;\n    },\n    [dispatch, loginMutation]\n  );\n\n  const logout = React.useCallback(async () => {\n    await logoutMutation({ deviceId: getOrCreateDeviceId() });\n    clearStateAndLogout();\n  }, [clearStateAndLogout, logoutMutation]);\n\n  const refetchPermissions = React.useCallback(async () => {\n    if (!isUninitialized) {\n      await refetch();\n    }\n  }, [isUninitialized, refetch]);\n\n  const [checkPermissions] = useLazyCheckPermissionsQuery();\n  const checkUserHasPermissions: AuthContextValue['checkUserHasPermissions'] = React.useCallback(\n    async (\n      permissions,\n      passedPermissions,\n      // TODO:\n      // Here we have parameterised checkUserHasPermissions in order to pass\n      // query context from elsewhere in the application.\n      // See packages/core/content-manager/admin/src/features/DocumentRBAC.tsx\n\n      // This is in order to calculate permissions on accurate query params.\n      // We should be able to rely on the query params in this provider\n      // If we need to pass additional context to the RBAC middleware\n      // we should define a better context type.\n      rawQueryContext\n    ) => {\n      /**\n       * If there's no permissions to check, then we allow it to\n       * pass to preserve existing behaviours.\n       *\n       * TODO: should we review this? it feels more dangerous than useful.\n       */\n      if (!permissions || permissions.length === 0) {\n        return [{ action: '', subject: '' }];\n      }\n\n      /**\n       * Given the provided permissions, return the permissions from either passedPermissions\n       * or userPermissions as this is expected to be the full permission entity.\n       */\n      const actualUserPermissions = passedPermissions ?? userPermissions;\n\n      const matchingPermissions = actualUserPermissions.filter(\n        (permission) =>\n          permissions.findIndex(\n            (perm) =>\n              perm.action === permission.action &&\n              // Only check the subject if it's provided\n              (perm.subject == undefined || perm.subject === permission.subject)\n          ) >= 0\n      );\n\n      const middlewaredPermissions = await runRbacMiddleware(\n        {\n          user,\n          permissions: userPermissions,\n          pathname: locationRef.current.pathname,\n          search: (rawQueryContext || rawQuery).split('?')[1] ?? '',\n        },\n        matchingPermissions\n      );\n\n      const shouldCheckConditions = middlewaredPermissions.some(\n        (perm) => Array.isArray(perm.conditions) && perm.conditions.length > 0\n      );\n\n      if (!shouldCheckConditions) {\n        return middlewaredPermissions;\n      }\n\n      const { data, error } = await checkPermissions({\n        permissions: middlewaredPermissions.map((perm) => ({\n          action: perm.action,\n          subject: perm.subject,\n        })),\n      });\n\n      if (error) {\n        throw error;\n      } else {\n        return middlewaredPermissions.filter((_, index) => data?.data[index] === true);\n      }\n    },\n    [checkPermissions, rawQuery, runRbacMiddleware, user, userPermissions]\n  );\n\n  const isLoading = isLoadingUser || isLoadingPermissions;\n\n  return (\n    <Provider\n      token={token}\n      user={user}\n      login={login}\n      logout={logout}\n      permissions={userPermissions}\n      checkUserHasPermissions={checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS}\n      refetchPermissions={refetchPermissions}\n      isLoading={isLoading}\n    >\n      {children}\n    </Provider>\n  );\n};\n\nexport { AuthProvider, useAuth, STORAGE_KEYS };\nexport type { AuthContextValue, Permission, User };\n"],"names":["NOOP_CHECK_USER_HAS_PERMISSIONS","Provider","useAuth","createContext","STORAGE_KEYS","STATUS","AuthProvider","children","_defaultPermissions","_disableRenewToken","dispatch","useTypedDispatch","runRbacMiddleware","useStrapiApp","state","rbac","run","location","useLocation","rawQuery","useQueryParams","locationRef","React","useRef","useEffect","current","token","useTypedSelector","admin_app","data","user","isLoading","isLoadingUser","useGetMeQuery","undefined","skip","userPermissions","refetch","isUninitialized","isLoadingPermissions","useGetMyPermissionsQuery","navigate","useNavigate","loginMutation","useLoginMutation","logoutMutation","useLogoutMutation","clearStateAndLogout","useCallback","adminApi","util","resetApiState","logoutAction","clearLocalSessionAndRedirect","setToken","resyncToken","newToken","lastActivityRef","Date","now","markActivity","events","forEach","event","window","addEventListener","passive","capture","removeEventListener","getLastActivityAt","renewSession","attemptTokenRefresh","preferedLanguage","setLocale","normalizeAdminLocale","setOnTokenUpdate","setOnSessionExpired","useIdleSessionLogout","onExpired","onSessionDead","getStoredToken","onResync","disabled","handleUserStorageChange","key","newValue","login","rememberMe","body","res","deviceId","getOrCreateDeviceId","loginAction","persist","logout","refetchPermissions","checkPermissions","useLazyCheckPermissionsQuery","checkUserHasPermissions","permissions","passedPermissions","rawQueryContext","length","action","subject","actualUserPermissions","matchingPermissions","filter","permission","findIndex","perm","middlewaredPermissions","pathname","search","split","shouldCheckConditions","some","Array","isArray","conditions","error","map","_","index","_jsx"],"mappings":";;;;;;;;;;;;;;;AAuEA;;;;;;;;;;;;;;IAeA,MAAMA,+BAAAA,GAA+E,UAAY,EAAE;AAEnG,MAAM,CAACC,QAAAA,EAAUC,OAAAA,CAAQ,GAAGC,aAAAA,CAAgC,MAAA;AAa5D,MAAMC,YAAAA,GAAe;IAEnBC,MAAAA,EAAQ;AACV;AAEA,MAAMC,YAAAA,GAAe,CAAC,EACpBC,QAAQ,EACRC,sBAAsB,EAAE,EACxBC,kBAAAA,GAAqB,KAAK,EACR,GAAA;AAClB,IAAA,MAAMC,QAAAA,GAAWC,gBAAAA,EAAAA;IACjB,MAAMC,iBAAAA,GAAoBC,aAAa,cAAA,EAAgB,CAACC,QAAUA,KAAAA,CAAMC,IAAI,CAACC,GAAG,CAAA;AAChF,IAAA,MAAMC,QAAAA,GAAWC,WAAAA,EAAAA;AACjB,IAAA,MAAM,CAAC,EAAEC,QAAQ,EAAE,CAAC,GAAGC,cAAAA,EAAAA;IAEvB,MAAMC,WAAAA,GAAcC,KAAAA,CAAMC,MAAM,CAACN,QAAAA,CAAAA;;AAGjCK,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdH,QAAAA,WAAAA,CAAYI,OAAO,GAAGR,QAAAA;IACxB,CAAA,EAAG;AAACA,QAAAA;AAAS,KAAA,CAAA;IAEb,MAAMS,KAAAA,GAAQC,iBAAiB,CAACb,KAAAA,GAAUA,MAAMc,SAAS,CAACF,KAAK,IAAI,IAAA,CAAA;IAEnE,MAAM,EAAEG,MAAMC,IAAI,EAAEC,WAAWC,aAAa,EAAE,GAAGC,aAAAA,CAAcC,SAAAA,EAAW;AACxE;;;AAGC,QACDC,MAAM,CAACT;AACT,KAAA,CAAA;AAEA,IAAA,MAAM,EACJG,IAAAA,EAAMO,eAAAA,GAAkB5B,mBAAmB,EAC3C6B,OAAO,EACPC,eAAe,EACfP,SAAAA,EAAWQ,oBAAoB,EAChC,GAAGC,yBAAyBN,SAAAA,EAAW;AACtCC,QAAAA,IAAAA,EAAM,CAACT;AACT,KAAA,CAAA;AAEA,IAAA,MAAMe,QAAAA,GAAWC,WAAAA,EAAAA;IAEjB,MAAM,CAACC,cAAc,GAAGC,gBAAAA,EAAAA;IACxB,MAAM,CAACC,eAAe,GAAGC,iBAAAA,EAAAA;IAEzB,MAAMC,mBAAAA,GAAsBzB,KAAAA,CAAM0B,WAAW,CAAC,IAAA;QAC5CtC,QAAAA,CAASuC,QAAAA,CAASC,IAAI,CAACC,aAAa,EAAA,CAAA;QACpCzC,QAAAA,CAAS0C,MAAAA,EAAAA,CAAAA;QACTX,QAAAA,CAAS,aAAA,CAAA;IACX,CAAA,EAAG;AAAC/B,QAAAA,QAAAA;AAAU+B,QAAAA;AAAS,KAAA,CAAA;AAEvB;;;;;;;;;AASC,MACD,MAAMY,4BAAAA,GAA+B/B,KAAAA,CAAM0B,WAAW,CAAC,IAAA;QACrDtC,QAAAA,CAASuC,QAAAA,CAASC,IAAI,CAACC,aAAa,EAAA,CAAA;AACpCzC,QAAAA,QAAAA,CAAS4C,QAAAA,CAAS,IAAA,CAAA,CAAA;QAClBb,QAAAA,CAAS,aAAA,CAAA;IACX,CAAA,EAAG;AAAC/B,QAAAA,QAAAA;AAAU+B,QAAAA;AAAS,KAAA,CAAA;AAEvB,IAAA,MAAMc,WAAAA,GAAcjC,KAAAA,CAAM0B,WAAW,CACnC,CAACQ,QAAAA,GAAAA;AACC9C,QAAAA,QAAAA,CAAS4C,QAAAA,CAASE,QAAAA,CAAAA,CAAAA;IACpB,CAAA,EACA;AAAC9C,QAAAA;AAAS,KAAA,CAAA;AAGZ;;;;;;AAMC,MACD,MAAM+C,eAAAA,GAAkBnC,KAAAA,CAAMC,MAAM,CAACmC,KAAKC,GAAG,EAAA,CAAA;AAC7CrC,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,MAAMoC,YAAAA,GAAe,IAAA;YACnBH,eAAAA,CAAgBhC,OAAO,GAAGiC,IAAAA,CAAKC,GAAG,EAAA;AACpC,QAAA,CAAA;AACA,QAAA,MAAME,MAAAA,GAAS;AAAC,YAAA,aAAA;AAAe,YAAA,SAAA;AAAW,YAAA,OAAA;AAAS,YAAA,QAAA;AAAU,YAAA;AAAa,SAAA;QAC1EA,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GACdC,OAAOC,gBAAgB,CAACF,OAAOH,YAAAA,EAAc;gBAAEM,OAAAA,EAAS,IAAA;gBAAMC,OAAAA,EAAS;AAAK,aAAA,CAAA,CAAA;QAG9E,OAAO,IAAA;YACLN,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GAAUC,OAAOI,mBAAmB,CAACL,OAAOH,YAAAA,EAAc;oBAAEO,OAAAA,EAAS;AAAK,iBAAA,CAAA,CAAA;AAC5F,QAAA,CAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IACL,MAAME,iBAAAA,GAAoB/C,MAAM0B,WAAW,CAAC,IAAMS,eAAAA,CAAgBhC,OAAO,EAAE,EAAE,CAAA;AAE7E;;;;AAIC,MACD,MAAM6C,YAAAA,GAAehD,KAAAA,CAAM0B,WAAW,CAAC,UAAA;QACrC,IAAI;YACF,MAAMuB,mBAAAA,EAAAA;YACN,OAAO,IAAA;AACT,QAAA,CAAA,CAAE,OAAM;YACN,OAAO,KAAA;AACT,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAELjD,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,IAAIM,IAAAA,EAAM;YACR,IAAIA,IAAAA,CAAK0C,gBAAgB,EAAE;gBACzB9D,QAAAA,CAAS+D,SAAAA,CAAUC,oBAAAA,CAAqB5C,IAAAA,CAAK0C,gBAAgB,CAAA,CAAA,CAAA;AAC/D,YAAA;AACF,QAAA;IACF,CAAA,EAAG;AAAC9D,QAAAA,QAAAA;AAAUoB,QAAAA;AAAK,KAAA,CAAA;AAEnB;;;MAIAR,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdmD,QAAAA,gBAAAA,CAAiB,CAACnB,QAAAA,GAAAA;AAChB9C,YAAAA,QAAAA,CAAS4C,QAAAA,CAASE,QAAAA,CAAAA,CAAAA;AACpB,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACLmB,gBAAAA,CAAiB,IAAA,CAAA;AACnB,QAAA,CAAA;IACF,CAAA,EAAG;AAACjE,QAAAA;AAAS,KAAA,CAAA;AAEb;;;;;MAMAY,KAAAA,CAAME,SAAS,CAAC,IAAA;QACdoD,mBAAAA,CAAoB,IAAA;AAClB7B,YAAAA,mBAAAA,EAAAA;AACF,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACL6B,mBAAAA,CAAoB,IAAA,CAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AAAC7B,QAAAA;AAAoB,KAAA,CAAA;AAExB;;;;;;;AAOC,MACD8B,oBAAAA,CAAqB;AACnBnD,QAAAA,KAAAA;QACAoD,SAAAA,EAAWzB,4BAAAA;QACX0B,aAAAA,EAAehC,mBAAAA;AACfiC,QAAAA,cAAAA;QACAC,QAAAA,EAAU1B,WAAAA;AACVc,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;QACAY,QAAAA,EAAUzE;AACZ,KAAA,CAAA;AAEAa,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd;;QAGA,MAAM2D,0BAA0B,CAACpB,KAAAA,GAAAA;YAC/B,IAAIA,KAAAA,CAAMqB,GAAG,KAAKhF,YAAAA,CAAaC,MAAM,IAAI0D,KAAAA,CAAMsB,QAAQ,KAAK,IAAA,EAAM;AAChEtC,gBAAAA,mBAAAA,EAAAA;AACF,YAAA;AACF,QAAA,CAAA;QAEAiB,MAAAA,CAAOC,gBAAgB,CAAC,SAAA,EAAWkB,uBAAAA,CAAAA;QAEnC,OAAO,IAAA;YACLnB,MAAAA,CAAOI,mBAAmB,CAAC,SAAA,EAAWe,uBAAAA,CAAAA;AACxC,QAAA,CAAA;AACF,IAAA,CAAA,CAAA;IAEA,MAAMG,OAAAA,GAAQhE,MAAM0B,WAAW,CAC7B,OAAO,EAAEuC,UAAU,EAAE,GAAGC,IAAAA,EAAM,GAAA;QAC5B,MAAMC,GAAAA,GAAM,MAAM9C,aAAAA,CAAc;AAAE,YAAA,GAAG6C,IAAI;YAAEE,QAAAA,EAAUC,mBAAAA,EAAAA;AAAuBJ,YAAAA;AAAW,SAAA,CAAA;AAEvF;;;UAIA,IAAI,UAAUE,GAAAA,EAAK;AACjB,YAAA,MAAM,EAAE/D,KAAK,EAAE,GAAG+D,IAAI5D,IAAI;AAE1BnB,YAAAA,QAAAA,CACEkF,KAAAA,CAAY;AACVlE,gBAAAA,KAAAA;gBACAmE,OAAAA,EAASN;AACX,aAAA,CAAA,CAAA;AAEJ,QAAA;QAEA,OAAOE,GAAAA;IACT,CAAA,EACA;AAAC/E,QAAAA,QAAAA;AAAUiC,QAAAA;AAAc,KAAA,CAAA;IAG3B,MAAMmD,QAAAA,GAASxE,KAAAA,CAAM0B,WAAW,CAAC,UAAA;AAC/B,QAAA,MAAMH,cAAAA,CAAe;YAAE6C,QAAAA,EAAUC,mBAAAA;AAAsB,SAAA,CAAA;AACvD5C,QAAAA,mBAAAA,EAAAA;IACF,CAAA,EAAG;AAACA,QAAAA,mBAAAA;AAAqBF,QAAAA;AAAe,KAAA,CAAA;IAExC,MAAMkD,kBAAAA,GAAqBzE,KAAAA,CAAM0B,WAAW,CAAC,UAAA;AAC3C,QAAA,IAAI,CAACV,eAAAA,EAAiB;YACpB,MAAMD,OAAAA,EAAAA;AACR,QAAA;IACF,CAAA,EAAG;AAACC,QAAAA,eAAAA;AAAiBD,QAAAA;AAAQ,KAAA,CAAA;IAE7B,MAAM,CAAC2D,iBAAiB,GAAGC,4BAAAA,EAAAA;AAC3B,IAAA,MAAMC,0BAAuE5E,KAAAA,CAAM0B,WAAW,CAC5F,OACEmD,WAAAA,EACAC;;;;;;;;AAUAC,IAAAA,eAAAA,GAAAA;AAEA;;;;;AAKC,UACD,IAAI,CAACF,WAAAA,IAAeA,WAAAA,CAAYG,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO;AAAC,gBAAA;oBAAEC,MAAAA,EAAQ,EAAA;oBAAIC,OAAAA,EAAS;AAAG;AAAE,aAAA;AACtC,QAAA;AAEA;;;UAIA,MAAMC,wBAAwBL,iBAAAA,IAAqBhE,eAAAA;AAEnD,QAAA,MAAMsE,sBAAsBD,qBAAAA,CAAsBE,MAAM,CACtD,CAACC,aACCT,WAAAA,CAAYU,SAAS,CACnB,CAACC,OACCA,IAAAA,CAAKP,MAAM,KAAKK,UAAAA,CAAWL,MAAM;iBAEhCO,IAAAA,CAAKN,OAAO,IAAItE,SAAAA,IAAa4E,IAAAA,CAAKN,OAAO,KAAKI,UAAAA,CAAWJ,OAAM,CAAA,CAAA,IAC/D,CAAA,CAAA;QAGT,MAAMO,sBAAAA,GAAyB,MAAMnG,iBAAAA,CACnC;AACEkB,YAAAA,IAAAA;YACAqE,WAAAA,EAAa/D,eAAAA;YACb4E,QAAAA,EAAU3F,WAAAA,CAAYI,OAAO,CAACuF,QAAQ;YACtCC,MAAAA,EAASZ,CAAAA,eAAAA,IAAmBlF,QAAO,EAAG+F,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI;SACzD,EACAR,mBAAAA,CAAAA;AAGF,QAAA,MAAMS,wBAAwBJ,sBAAAA,CAAuBK,IAAI,CACvD,CAACN,OAASO,KAAAA,CAAMC,OAAO,CAACR,IAAAA,CAAKS,UAAU,CAAA,IAAKT,IAAAA,CAAKS,UAAU,CAACjB,MAAM,GAAG,CAAA,CAAA;AAGvE,QAAA,IAAI,CAACa,qBAAAA,EAAuB;YAC1B,OAAOJ,sBAAAA;AACT,QAAA;AAEA,QAAA,MAAM,EAAElF,IAAI,EAAE2F,KAAK,EAAE,GAAG,MAAMxB,gBAAAA,CAAiB;AAC7CG,YAAAA,WAAAA,EAAaY,sBAAAA,CAAuBU,GAAG,CAAC,CAACX,QAAU;AACjDP,oBAAAA,MAAAA,EAAQO,KAAKP,MAAM;AACnBC,oBAAAA,OAAAA,EAASM,KAAKN;iBAChB,CAAA;AACF,SAAA,CAAA;AAEA,QAAA,IAAIgB,KAAAA,EAAO;YACT,MAAMA,KAAAA;QACR,CAAA,MAAO;YACL,OAAOT,sBAAAA,CAAuBJ,MAAM,CAAC,CAACe,CAAAA,EAAGC,QAAU9F,IAAAA,EAAMA,IAAI,CAAC8F,KAAAA,CAAM,KAAK,IAAA,CAAA;AAC3E,QAAA;IACF,CAAA,EACA;AAAC3B,QAAAA,gBAAAA;AAAkB7E,QAAAA,QAAAA;AAAUP,QAAAA,iBAAAA;AAAmBkB,QAAAA,IAAAA;AAAMM,QAAAA;AAAgB,KAAA,CAAA;AAGxE,IAAA,MAAML,YAAYC,aAAAA,IAAiBO,oBAAAA;AAEnC,IAAA,qBACEqF,GAAA,CAAC3H,QAAAA,EAAAA;QACCyB,KAAAA,EAAOA,KAAAA;QACPI,IAAAA,EAAMA,IAAAA;QACNwD,KAAAA,EAAOA,OAAAA;QACPQ,MAAAA,EAAQA,QAAAA;QACRK,WAAAA,EAAa/D,eAAAA;AACb8D,QAAAA,uBAAAA,EAAyBA,uBAAAA,IAA2BlG,+BAAAA;QACpD+F,kBAAAA,EAAoBA,kBAAAA;QACpBhE,SAAAA,EAAWA,SAAAA;AAEVxB,QAAAA,QAAAA,EAAAA;;AAGP;;;;"}
+{"version":3,"file":"Auth.mjs","sources":["../../../../../admin/src/features/Auth.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { Dialog } from '@strapi/design-system';\nimport { useIntl, type MessageDescriptor } from 'react-intl';\nimport { useLocation, useNavigate } from 'react-router-dom';\n\nimport { Login } from '../../../shared/contracts/authentication';\nimport { ConfirmDialog } from '../components/ConfirmDialog';\nimport { createContext } from '../components/Context';\nimport { useTypedDispatch, useTypedSelector } from '../core/store/hooks';\nimport { useStrapiApp } from '../features/StrapiApp';\nimport { useQueryParams } from '../hooks/useQueryParams';\nimport { useSessionKeepalive } from '../hooks/useSessionKeepalive';\nimport {\n  getStoredToken,\n  login as loginAction,\n  logout as logoutAction,\n  setLocale,\n  setToken,\n} from '../reducer';\nimport { adminApi } from '../services/api';\nimport {\n  useGetMeQuery,\n  useGetMyPermissionsQuery,\n  useLazyCheckPermissionsQuery,\n  useLoginMutation,\n  useLogoutMutation,\n} from '../services/auth';\nimport { normalizeAdminLocale } from '../translations/normalizeAdminLocale';\nimport { getOrCreateDeviceId } from '../utils/deviceId';\nimport {\n  attemptTokenRefresh,\n  getFetchClient,\n  resetSessionExpiredNotification,\n  setOnSessionExpired,\n  setOnTokenUpdate,\n} from '../utils/getFetchClient';\nimport { hasUnsavedChanges } from '../utils/unsavedChangesRegistry';\n\nimport type {\n  Permission as PermissionContract,\n  SanitizedAdminUser,\n} from '../../../shared/contracts/shared';\n\ninterface Permission\n  extends Pick<PermissionContract, 'action' | 'subject'>,\n    Partial<Omit<PermissionContract, 'action' | 'subject'>> {}\n\ninterface User\n  extends Pick<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>,\n    Partial<Omit<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>> {}\n\ninterface AuthContextValue {\n  login: (\n    body: Login.Request['body'] & { rememberMe: boolean }\n  ) => Promise<Awaited<ReturnType<ReturnType<typeof useLoginMutation>[0]>>>;\n  logout: () => Promise<void>;\n  /**\n   * @alpha\n   * @description given a list of permissions, this function checks\n   * those against the current user's permissions or those passed as\n   * the second argument, if the user has those permissions the complete\n   * permission object form the API is returned. Therefore, if the list is\n   * empty, the user does not have any of those permissions.\n   */\n  checkUserHasPermissions: (\n    permissions?: Array<Pick<Permission, 'action'> & Partial<Omit<Permission, 'action'>>>,\n    passedPermissions?: Permission[],\n    rawQueryContext?: string\n  ) => Promise<Permission[]>;\n  isLoading: boolean;\n  permissions: Permission[];\n  refetchPermissions: () => Promise<void>;\n  token: string | null;\n  user?: User;\n}\n\n/**\n * ensure the Auth context never exposes a non-function for checkUserHasPermissions.\n * When this is undefined (e.g. context timing in production builds), consumers would throw\n * \"p is not a function\" / \"checkUserHasPermissions is not a function\". By always passing\n * a function here, all current and future consumers are protected without per-call-site guards.\n *\n * When would the fallback run? Only if the real checkUserHasPermissions were ever undefined\n * when we pass to the Provider (e.g. a rare timing/build edge case). In normal runs it is\n * always defined (useCallback), so the real function is passed and behavior is unchanged.\n *\n * If the fallback ever did run: it returns [] so consumers (which use .length > 0) treat it\n * as \"no permission\" for that render—under-permissive. On the next AuthProvider re-render we\n * pass the real function again, so the context updates and the view corrects quickly.\n * @see https://github.com/strapi/strapi/issues/24384\n */\nconst NOOP_CHECK_USER_HAS_PERMISSIONS: AuthContextValue['checkUserHasPermissions'] = async () => [];\n\nconst [Provider, useAuth] = createContext<AuthContextValue>('Auth');\n\ninterface AuthProviderProps {\n  children: React.ReactNode;\n  /**\n   * @internal could be removed at any time.\n   */\n  _defaultPermissions?: Permission[];\n\n  // NOTE: this is used for testing purposed only\n  _disableRenewToken?: boolean;\n}\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  STATUS: 'isLoggedIn',\n};\n\n/**\n * Why the session is ending.\n * - `voluntary`: explicit user logout — cancelable when there are unsaved edits.\n * - `session-dead`: server rejected the refresh (idle/max session window elapsed)\n *   — forced; Cancel / dismiss still clears client state.\n *\n * Short-lived access-token expiry is NOT a logout reason: idle tabs leave the\n * stale token in place and the next request refreshes (or hits session-dead).\n */\ntype LogoutReason = 'voluntary' | 'session-dead';\n\nconst isForcedLogout = (reason: LogoutReason) => reason === 'session-dead';\n\n/**\n * Copy for the unsaved-changes prompt. A server-confirmed dead session needs to\n * say *why* the dialog appeared, otherwise it reads as the usual navigation\n * blocker and users confirm straight through it.\n */\nconst LOGOUT_PROMPTS = {\n  voluntary: {\n    title: undefined,\n    body: {\n      id: 'global.prompt.unsaved',\n      defaultMessage: 'You have unsaved changes, are you sure you want to leave?',\n    },\n  },\n  'session-dead': {\n    title: {\n      id: 'app.session.ended.title',\n      defaultMessage: 'Session ended',\n    },\n    body: {\n      id: 'app.session.ended.unsaved',\n      defaultMessage:\n        \"Your session has ended and can't be resumed. Your unsaved changes will be lost when you log out.\",\n    },\n  },\n} satisfies Record<LogoutReason, { title?: MessageDescriptor; body: MessageDescriptor }>;\n\nconst AuthProvider = ({\n  children,\n  _defaultPermissions = [],\n  _disableRenewToken = false,\n}: AuthProviderProps) => {\n  const { formatMessage } = useIntl();\n  const dispatch = useTypedDispatch();\n  const runRbacMiddleware = useStrapiApp('AuthProvider', (state) => state.rbac.run);\n  const location = useLocation();\n  const [{ rawQuery }] = useQueryParams();\n\n  const locationRef = React.useRef(location);\n\n  // Update ref without causing re-render\n  React.useEffect(() => {\n    locationRef.current = location;\n  }, [location]);\n\n  const token = useTypedSelector((state) => state.admin_app.token ?? null);\n\n  const { data: user, isLoading: isLoadingUser } = useGetMeQuery(undefined, {\n    /**\n     * If there's no token, we don't try to fetch\n     * the user data because it will fail.\n     */\n    skip: !token,\n  });\n\n  const {\n    data: userPermissions = _defaultPermissions,\n    refetch,\n    isUninitialized,\n    isLoading: isLoadingPermissions,\n  } = useGetMyPermissionsQuery(undefined, {\n    skip: !token,\n  });\n\n  const navigate = useNavigate();\n\n  const [loginMutation] = useLoginMutation();\n  const [logoutMutation] = useLogoutMutation();\n\n  const pendingLogoutRef = React.useRef<(() => void) | null>(null);\n  const logoutGuardOpenRef = React.useRef(false);\n  const logoutGuardReasonRef = React.useRef<LogoutReason>('voluntary');\n  const [isSessionLogoutDialogOpen, setIsSessionLogoutDialogOpen] = React.useState(false);\n  const [sessionLogoutReason, setSessionLogoutReason] = React.useState<LogoutReason>('voluntary');\n\n  /**\n   * Prompt before discarding unsaved edits, then run `logoutFn`.\n   *\n   * - `voluntary`: Cancel leaves the user logged in (server session intact).\n   * - `session-dead`: the session is already unusable — Cancel (or dismiss)\n   *   still runs `logoutFn` so the client cannot keep a stale token. While the\n   *   dialog is open, a later `session-dead` request upgrades the pending action.\n   */\n  const runLogoutWithGuard = React.useCallback(\n    (logoutFn: () => void, reason: LogoutReason = 'voluntary') => {\n      if (logoutGuardOpenRef.current) {\n        pendingLogoutRef.current = logoutFn;\n        if (isForcedLogout(reason)) {\n          logoutGuardReasonRef.current = reason;\n          setSessionLogoutReason(reason);\n        }\n        return;\n      }\n\n      if (!hasUnsavedChanges()) {\n        logoutFn();\n        return;\n      }\n\n      logoutGuardOpenRef.current = true;\n      logoutGuardReasonRef.current = reason;\n      pendingLogoutRef.current = logoutFn;\n      setSessionLogoutReason(reason);\n      setIsSessionLogoutDialogOpen(true);\n    },\n    []\n  );\n\n  const performGlobalLogout = React.useCallback(() => {\n    void (async () => {\n      try {\n        const { post } = getFetchClient();\n        await post('/admin/logout');\n      } catch {\n        // The session may already be invalid.\n      }\n    })();\n\n    dispatch(adminApi.util.resetApiState());\n    dispatch(logoutAction());\n    navigate('/auth/login');\n  }, [dispatch, navigate]);\n\n  const clearStateAndLogout = React.useCallback(() => {\n    runLogoutWithGuard(performGlobalLogout, 'session-dead');\n  }, [performGlobalLogout, runLogoutWithGuard]);\n\n  const handleConfirmSessionLogout = React.useCallback(() => {\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    const logoutFn = pendingLogoutRef.current;\n    pendingLogoutRef.current = null;\n    logoutFn?.();\n  }, []);\n\n  const handleCancelSessionLogout = React.useCallback(() => {\n    const forced = isForcedLogout(logoutGuardReasonRef.current);\n    const logoutFn = pendingLogoutRef.current;\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    pendingLogoutRef.current = null;\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    // Forced paths: session is already dead — dismiss must still clear client state.\n    if (forced) {\n      logoutFn?.();\n    }\n  }, []);\n\n  const handleSessionLogoutDialogOpenChange = React.useCallback(\n    (open: boolean) => {\n      if (!open) {\n        handleCancelSessionLogout();\n      }\n    },\n    [handleCancelSessionLogout]\n  );\n\n  const resyncToken = React.useCallback(\n    (newToken: string) => {\n      dispatch(setToken(newToken));\n    },\n    [dispatch]\n  );\n\n  /**\n   * Track the timestamp of the user's last interaction. This is the activity\n   * signal `useSessionKeepalive` uses to tell an active user (silently renew\n   * their session) apart from a genuinely idle one (leave the stale access\n   * token alone until the next request). Successful API calls don't refresh\n   * the short-lived access token on their own, so without this an\n   * actively-working user would hit a 401 the moment the token expires.\n   */\n  const lastActivityRef = React.useRef(Date.now());\n  React.useEffect(() => {\n    const markActivity = () => {\n      lastActivityRef.current = Date.now();\n    };\n    const events = ['pointerdown', 'keydown', 'click', 'scroll', 'touchstart'];\n    events.forEach((event) =>\n      window.addEventListener(event, markActivity, { passive: true, capture: true })\n    );\n\n    return () => {\n      events.forEach((event) => window.removeEventListener(event, markActivity, { capture: true }));\n    };\n  }, []);\n  const getLastActivityAt = React.useCallback(() => lastActivityRef.current, []);\n\n  /**\n   * Silently rotate the refresh token and mint a new access token. Returns\n   * `true` on success (the resulting `setToken` re-arms the renew timer) and\n   * `false` when the server rejects it (session genuinely over).\n   */\n  const renewSession = React.useCallback(async () => {\n    try {\n      await attemptTokenRefresh();\n      return true;\n    } catch {\n      return false;\n    }\n  }, []);\n\n  React.useEffect(() => {\n    if (user) {\n      if (user.preferedLanguage) {\n        dispatch(setLocale(normalizeAdminLocale(user.preferedLanguage)));\n      }\n    }\n  }, [dispatch, user]);\n\n  /**\n   * Register a callback to update Redux state when the token is refreshed.\n   * This ensures the app state stays in sync with the token stored in localStorage/cookies.\n   */\n  React.useEffect(() => {\n    setOnTokenUpdate((newToken) => {\n      dispatch(setToken(newToken));\n    });\n\n    return () => {\n      setOnTokenUpdate(null);\n    };\n  }, [dispatch]);\n\n  /**\n   * Register the session-expired handler that the fetch layer / RTK baseQuery\n   * call when the server rejects the refresh token. This is what redirects\n   * the active tab to /auth/login on a 401, instead of leaving the user on\n   * a stale page until they click something.\n   */\n  React.useEffect(() => {\n    setOnSessionExpired(() => {\n      clearStateAndLogout();\n    });\n\n    return () => {\n      setOnSessionExpired(null);\n    };\n  }, [clearStateAndLogout]);\n\n  /**\n   * Session keepalive around access-token expiry. The timer fires per-tab; the\n   * hook then either (1) re-syncs from a token another tab refreshed, (2)\n   * silently renews when the user has been active, or (3) does nothing when\n   * idle — leaving the stale access token in place so unsaved form state\n   * survives until the next request refreshes it. A server-confirmed dead\n   * session (renewal rejected) broadcasts globally via `onSessionDead`. See\n   * `useSessionKeepalive` for the full rationale.\n   */\n  useSessionKeepalive({\n    token,\n    onSessionDead: clearStateAndLogout,\n    getStoredToken,\n    onResync: resyncToken,\n    getLastActivityAt,\n    renewSession,\n    disabled: _disableRenewToken,\n  });\n\n  React.useEffect(() => {\n    /**\n     * This will log a user out of all tabs if they log out in one tab.\n     */\n    const handleUserStorageChange = (event: StorageEvent) => {\n      if (event.key === STORAGE_KEYS.STATUS && event.newValue === null) {\n        clearStateAndLogout();\n      }\n    };\n\n    window.addEventListener('storage', handleUserStorageChange);\n\n    return () => {\n      window.removeEventListener('storage', handleUserStorageChange);\n    };\n  });\n\n  const login = React.useCallback<AuthContextValue['login']>(\n    async ({ rememberMe, ...body }) => {\n      const res = await loginMutation({ ...body, deviceId: getOrCreateDeviceId(), rememberMe });\n\n      /**\n       * There will always be a `data` key in the response\n       * because if something fails, it will throw an error.\n       */\n      if ('data' in res) {\n        const { token } = res.data;\n\n        resetSessionExpiredNotification();\n        dispatch(\n          loginAction({\n            token,\n            persist: rememberMe,\n          })\n        );\n      }\n\n      return res;\n    },\n    [dispatch, loginMutation]\n  );\n\n  /**\n   * Explicit user logout. Confirm unsaved changes *before* `logoutMutation` so\n   * Cancel leaves the server session and client token intact.\n   */\n  const logout = React.useCallback(async () => {\n    runLogoutWithGuard(() => {\n      void (async () => {\n        try {\n          await logoutMutation({ deviceId: getOrCreateDeviceId() });\n        } catch {\n          // The session may already be invalid.\n        }\n        performGlobalLogout();\n      })();\n    });\n  }, [logoutMutation, performGlobalLogout, runLogoutWithGuard]);\n\n  const refetchPermissions = React.useCallback(async () => {\n    if (!isUninitialized) {\n      await refetch();\n    }\n  }, [isUninitialized, refetch]);\n\n  const [checkPermissions] = useLazyCheckPermissionsQuery();\n  const checkUserHasPermissions: AuthContextValue['checkUserHasPermissions'] = React.useCallback(\n    async (\n      permissions,\n      passedPermissions,\n      // TODO:\n      // Here we have parameterised checkUserHasPermissions in order to pass\n      // query context from elsewhere in the application.\n      // See packages/core/content-manager/admin/src/features/DocumentRBAC.tsx\n\n      // This is in order to calculate permissions on accurate query params.\n      // We should be able to rely on the query params in this provider\n      // If we need to pass additional context to the RBAC middleware\n      // we should define a better context type.\n      rawQueryContext\n    ) => {\n      /**\n       * If there's no permissions to check, then we allow it to\n       * pass to preserve existing behaviours.\n       *\n       * TODO: should we review this? it feels more dangerous than useful.\n       */\n      if (!permissions || permissions.length === 0) {\n        return [{ action: '', subject: '' }];\n      }\n\n      /**\n       * Given the provided permissions, return the permissions from either passedPermissions\n       * or userPermissions as this is expected to be the full permission entity.\n       */\n      const actualUserPermissions = passedPermissions ?? userPermissions;\n\n      const matchingPermissions = actualUserPermissions.filter(\n        (permission) =>\n          permissions.findIndex(\n            (perm) =>\n              perm.action === permission.action &&\n              // Only check the subject if it's provided\n              (perm.subject == undefined || perm.subject === permission.subject)\n          ) >= 0\n      );\n\n      const middlewaredPermissions = await runRbacMiddleware(\n        {\n          user,\n          permissions: userPermissions,\n          pathname: locationRef.current.pathname,\n          search: (rawQueryContext || rawQuery).split('?')[1] ?? '',\n        },\n        matchingPermissions\n      );\n\n      const shouldCheckConditions = middlewaredPermissions.some(\n        (perm) => Array.isArray(perm.conditions) && perm.conditions.length > 0\n      );\n\n      if (!shouldCheckConditions) {\n        return middlewaredPermissions;\n      }\n\n      const { data, error } = await checkPermissions({\n        permissions: middlewaredPermissions.map((perm) => ({\n          action: perm.action,\n          subject: perm.subject,\n        })),\n      });\n\n      if (error) {\n        throw error;\n      } else {\n        return middlewaredPermissions.filter((_, index) => data?.data[index] === true);\n      }\n    },\n    [checkPermissions, rawQuery, runRbacMiddleware, user, userPermissions]\n  );\n\n  const isLoading = isLoadingUser || isLoadingPermissions;\n\n  return (\n    <>\n      <Provider\n        token={token}\n        user={user}\n        login={login}\n        logout={logout}\n        permissions={userPermissions}\n        checkUserHasPermissions={checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS}\n        refetchPermissions={refetchPermissions}\n        isLoading={isLoading}\n      >\n        {children}\n      </Provider>\n      <Dialog.Root\n        open={isSessionLogoutDialogOpen}\n        onOpenChange={handleSessionLogoutDialogOpenChange}\n      >\n        <ConfirmDialog\n          onConfirm={handleConfirmSessionLogout}\n          onCancel={handleCancelSessionLogout}\n          title={\n            LOGOUT_PROMPTS[sessionLogoutReason].title\n              ? formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].title)\n              : undefined\n          }\n          // Forced session-dead: no Cancel that pretends the session is still valid.\n          startAction={isForcedLogout(sessionLogoutReason) ? <></> : undefined}\n        >\n          {formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].body)}\n        </ConfirmDialog>\n      </Dialog.Root>\n    </>\n  );\n};\n\nexport { AuthProvider, useAuth, STORAGE_KEYS };\nexport type { AuthContextValue, Permission, User };\n"],"names":["NOOP_CHECK_USER_HAS_PERMISSIONS","Provider","useAuth","createContext","STORAGE_KEYS","STATUS","isForcedLogout","reason","LOGOUT_PROMPTS","voluntary","title","undefined","body","id","defaultMessage","AuthProvider","children","_defaultPermissions","_disableRenewToken","formatMessage","useIntl","dispatch","useTypedDispatch","runRbacMiddleware","useStrapiApp","state","rbac","run","location","useLocation","rawQuery","useQueryParams","locationRef","React","useRef","useEffect","current","token","useTypedSelector","admin_app","data","user","isLoading","isLoadingUser","useGetMeQuery","skip","userPermissions","refetch","isUninitialized","isLoadingPermissions","useGetMyPermissionsQuery","navigate","useNavigate","loginMutation","useLoginMutation","logoutMutation","useLogoutMutation","pendingLogoutRef","logoutGuardOpenRef","logoutGuardReasonRef","isSessionLogoutDialogOpen","setIsSessionLogoutDialogOpen","useState","sessionLogoutReason","setSessionLogoutReason","runLogoutWithGuard","useCallback","logoutFn","hasUnsavedChanges","performGlobalLogout","post","getFetchClient","adminApi","util","resetApiState","logoutAction","clearStateAndLogout","handleConfirmSessionLogout","handleCancelSessionLogout","forced","handleSessionLogoutDialogOpenChange","open","resyncToken","newToken","setToken","lastActivityRef","Date","now","markActivity","events","forEach","event","window","addEventListener","passive","capture","removeEventListener","getLastActivityAt","renewSession","attemptTokenRefresh","preferedLanguage","setLocale","normalizeAdminLocale","setOnTokenUpdate","setOnSessionExpired","useSessionKeepalive","onSessionDead","getStoredToken","onResync","disabled","handleUserStorageChange","key","newValue","login","rememberMe","res","deviceId","getOrCreateDeviceId","resetSessionExpiredNotification","loginAction","persist","logout","refetchPermissions","checkPermissions","useLazyCheckPermissionsQuery","checkUserHasPermissions","permissions","passedPermissions","rawQueryContext","length","action","subject","actualUserPermissions","matchingPermissions","filter","permission","findIndex","perm","middlewaredPermissions","pathname","search","split","shouldCheckConditions","some","Array","isArray","conditions","error","map","_","index","_jsxs","_Fragment","_jsx","Dialog","Root","onOpenChange","ConfirmDialog","onConfirm","onCancel","startAction"],"mappings":";;;;;;;;;;;;;;;;;;;AA6EA;;;;;;;;;;;;;;IAeA,MAAMA,+BAAAA,GAA+E,UAAY,EAAE;AAEnG,MAAM,CAACC,QAAAA,EAAUC,OAAAA,CAAQ,GAAGC,aAAAA,CAAgC,MAAA;AAa5D,MAAMC,YAAAA,GAAe;IAEnBC,MAAAA,EAAQ;AACV;AAaA,MAAMC,cAAAA,GAAiB,CAACC,MAAAA,GAAyBA,MAAAA,KAAW,cAAA;AAE5D;;;;AAIC,IACD,MAAMC,cAAAA,GAAiB;IACrBC,SAAAA,EAAW;QACTC,KAAAA,EAAOC,SAAAA;QACPC,IAAAA,EAAM;YACJC,EAAAA,EAAI,uBAAA;YACJC,cAAAA,EAAgB;AAClB;AACF,KAAA;IACA,cAAA,EAAgB;QACdJ,KAAAA,EAAO;YACLG,EAAAA,EAAI,yBAAA;YACJC,cAAAA,EAAgB;AAClB,SAAA;QACAF,IAAAA,EAAM;YACJC,EAAAA,EAAI,2BAAA;YACJC,cAAAA,EACE;AACJ;AACF;AACF,CAAA;AAEA,MAAMC,YAAAA,GAAe,CAAC,EACpBC,QAAQ,EACRC,sBAAsB,EAAE,EACxBC,kBAAAA,GAAqB,KAAK,EACR,GAAA;IAClB,MAAM,EAAEC,aAAa,EAAE,GAAGC,OAAAA,EAAAA;AAC1B,IAAA,MAAMC,QAAAA,GAAWC,gBAAAA,EAAAA;IACjB,MAAMC,iBAAAA,GAAoBC,aAAa,cAAA,EAAgB,CAACC,QAAUA,KAAAA,CAAMC,IAAI,CAACC,GAAG,CAAA;AAChF,IAAA,MAAMC,QAAAA,GAAWC,WAAAA,EAAAA;AACjB,IAAA,MAAM,CAAC,EAAEC,QAAQ,EAAE,CAAC,GAAGC,cAAAA,EAAAA;IAEvB,MAAMC,WAAAA,GAAcC,KAAAA,CAAMC,MAAM,CAACN,QAAAA,CAAAA;;AAGjCK,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdH,QAAAA,WAAAA,CAAYI,OAAO,GAAGR,QAAAA;IACxB,CAAA,EAAG;AAACA,QAAAA;AAAS,KAAA,CAAA;IAEb,MAAMS,KAAAA,GAAQC,iBAAiB,CAACb,KAAAA,GAAUA,MAAMc,SAAS,CAACF,KAAK,IAAI,IAAA,CAAA;IAEnE,MAAM,EAAEG,MAAMC,IAAI,EAAEC,WAAWC,aAAa,EAAE,GAAGC,aAAAA,CAAcjC,SAAAA,EAAW;AACxE;;;AAGC,QACDkC,MAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAM,EACJG,IAAAA,EAAMM,eAAAA,GAAkB7B,mBAAmB,EAC3C8B,OAAO,EACPC,eAAe,EACfN,SAAAA,EAAWO,oBAAoB,EAChC,GAAGC,yBAAyBvC,SAAAA,EAAW;AACtCkC,QAAAA,IAAAA,EAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAMc,QAAAA,GAAWC,WAAAA,EAAAA;IAEjB,MAAM,CAACC,cAAc,GAAGC,gBAAAA,EAAAA;IACxB,MAAM,CAACC,eAAe,GAAGC,iBAAAA,EAAAA;IAEzB,MAAMC,gBAAAA,GAAmBxB,KAAAA,CAAMC,MAAM,CAAsB,IAAA,CAAA;IAC3D,MAAMwB,kBAAAA,GAAqBzB,KAAAA,CAAMC,MAAM,CAAC,KAAA,CAAA;IACxC,MAAMyB,oBAAAA,GAAuB1B,KAAAA,CAAMC,MAAM,CAAe,WAAA,CAAA;AACxD,IAAA,MAAM,CAAC0B,yBAAAA,EAA2BC,4BAAAA,CAA6B,GAAG5B,KAAAA,CAAM6B,QAAQ,CAAC,KAAA,CAAA;AACjF,IAAA,MAAM,CAACC,mBAAAA,EAAqBC,sBAAAA,CAAuB,GAAG/B,KAAAA,CAAM6B,QAAQ,CAAe,WAAA,CAAA;AAEnF;;;;;;;MAQA,MAAMG,qBAAqBhC,KAAAA,CAAMiC,WAAW,CAC1C,CAACC,QAAAA,EAAsB5D,SAAuB,WAAW,GAAA;QACvD,IAAImD,kBAAAA,CAAmBtB,OAAO,EAAE;AAC9BqB,YAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;AAC3B,YAAA,IAAI7D,eAAeC,MAAAA,CAAAA,EAAS;AAC1BoD,gBAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;gBAC/ByD,sBAAAA,CAAuBzD,MAAAA,CAAAA;AACzB,YAAA;AACA,YAAA;AACF,QAAA;AAEA,QAAA,IAAI,CAAC6D,iBAAAA,EAAAA,EAAqB;AACxBD,YAAAA,QAAAA,EAAAA;AACA,YAAA;AACF,QAAA;AAEAT,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,IAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;AAC/BkD,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;QAC3BH,sBAAAA,CAAuBzD,MAAAA,CAAAA;QACvBsD,4BAAAA,CAA6B,IAAA,CAAA;AAC/B,IAAA,CAAA,EACA,EAAE,CAAA;IAGJ,MAAMQ,mBAAAA,GAAsBpC,KAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5C,QAAA,KAAK,CAAC,UAAA;YACJ,IAAI;gBACF,MAAM,EAAEI,IAAI,EAAE,GAAGC,cAAAA,EAAAA;AACjB,gBAAA,MAAMD,IAAAA,CAAK,eAAA,CAAA;AACb,YAAA,CAAA,CAAE,OAAM;;AAER,YAAA;QACF,CAAA,GAAA;QAEAjD,QAAAA,CAASmD,QAAAA,CAASC,IAAI,CAACC,aAAa,EAAA,CAAA;QACpCrD,QAAAA,CAASsD,MAAAA,EAAAA,CAAAA;QACTxB,QAAAA,CAAS,aAAA,CAAA;IACX,CAAA,EAAG;AAAC9B,QAAAA,QAAAA;AAAU8B,QAAAA;AAAS,KAAA,CAAA;IAEvB,MAAMyB,mBAAAA,GAAsB3C,KAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5CD,QAAAA,kBAAAA,CAAmBI,mBAAAA,EAAqB,cAAA,CAAA;IAC1C,CAAA,EAAG;AAACA,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5C,MAAMY,0BAAAA,GAA6B5C,KAAAA,CAAMiC,WAAW,CAAC,IAAA;AACnDR,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;QAC/ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;QACvB,MAAMG,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;AAC3B+B,QAAAA,QAAAA,IAAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IAEL,MAAMW,yBAAAA,GAA4B7C,KAAAA,CAAMiC,WAAW,CAAC,IAAA;QAClD,MAAMa,MAAAA,GAASzE,cAAAA,CAAeqD,oBAAAA,CAAqBvB,OAAO,CAAA;QAC1D,MAAM+B,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCsB,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;AAC/BqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;QAC3ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;;AAEvB,QAAA,IAAIe,MAAAA,EAAQ;AACVZ,YAAAA,QAAAA,IAAAA;AACF,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAEL,IAAA,MAAMa,mCAAAA,GAAsC/C,KAAAA,CAAMiC,WAAW,CAC3D,CAACe,IAAAA,GAAAA;AACC,QAAA,IAAI,CAACA,IAAAA,EAAM;AACTH,YAAAA,yBAAAA,EAAAA;AACF,QAAA;IACF,CAAA,EACA;AAACA,QAAAA;AAA0B,KAAA,CAAA;AAG7B,IAAA,MAAMI,WAAAA,GAAcjD,KAAAA,CAAMiC,WAAW,CACnC,CAACiB,QAAAA,GAAAA;AACC9D,QAAAA,QAAAA,CAAS+D,QAAAA,CAASD,QAAAA,CAAAA,CAAAA;IACpB,CAAA,EACA;AAAC9D,QAAAA;AAAS,KAAA,CAAA;AAGZ;;;;;;;AAOC,MACD,MAAMgE,eAAAA,GAAkBpD,KAAAA,CAAMC,MAAM,CAACoD,KAAKC,GAAG,EAAA,CAAA;AAC7CtD,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,MAAMqD,YAAAA,GAAe,IAAA;YACnBH,eAAAA,CAAgBjD,OAAO,GAAGkD,IAAAA,CAAKC,GAAG,EAAA;AACpC,QAAA,CAAA;AACA,QAAA,MAAME,MAAAA,GAAS;AAAC,YAAA,aAAA;AAAe,YAAA,SAAA;AAAW,YAAA,OAAA;AAAS,YAAA,QAAA;AAAU,YAAA;AAAa,SAAA;QAC1EA,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GACdC,OAAOC,gBAAgB,CAACF,OAAOH,YAAAA,EAAc;gBAAEM,OAAAA,EAAS,IAAA;gBAAMC,OAAAA,EAAS;AAAK,aAAA,CAAA,CAAA;QAG9E,OAAO,IAAA;YACLN,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GAAUC,OAAOI,mBAAmB,CAACL,OAAOH,YAAAA,EAAc;oBAAEO,OAAAA,EAAS;AAAK,iBAAA,CAAA,CAAA;AAC5F,QAAA,CAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IACL,MAAME,iBAAAA,GAAoBhE,MAAMiC,WAAW,CAAC,IAAMmB,eAAAA,CAAgBjD,OAAO,EAAE,EAAE,CAAA;AAE7E;;;;AAIC,MACD,MAAM8D,YAAAA,GAAejE,KAAAA,CAAMiC,WAAW,CAAC,UAAA;QACrC,IAAI;YACF,MAAMiC,mBAAAA,EAAAA;YACN,OAAO,IAAA;AACT,QAAA,CAAA,CAAE,OAAM;YACN,OAAO,KAAA;AACT,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAELlE,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,IAAIM,IAAAA,EAAM;YACR,IAAIA,IAAAA,CAAK2D,gBAAgB,EAAE;gBACzB/E,QAAAA,CAASgF,SAAAA,CAAUC,oBAAAA,CAAqB7D,IAAAA,CAAK2D,gBAAgB,CAAA,CAAA,CAAA;AAC/D,YAAA;AACF,QAAA;IACF,CAAA,EAAG;AAAC/E,QAAAA,QAAAA;AAAUoB,QAAAA;AAAK,KAAA,CAAA;AAEnB;;;MAIAR,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdoE,QAAAA,gBAAAA,CAAiB,CAACpB,QAAAA,GAAAA;AAChB9D,YAAAA,QAAAA,CAAS+D,QAAAA,CAASD,QAAAA,CAAAA,CAAAA;AACpB,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACLoB,gBAAAA,CAAiB,IAAA,CAAA;AACnB,QAAA,CAAA;IACF,CAAA,EAAG;AAAClF,QAAAA;AAAS,KAAA,CAAA;AAEb;;;;;MAMAY,KAAAA,CAAME,SAAS,CAAC,IAAA;QACdqE,mBAAAA,CAAoB,IAAA;AAClB5B,YAAAA,mBAAAA,EAAAA;AACF,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACL4B,mBAAAA,CAAoB,IAAA,CAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AAAC5B,QAAAA;AAAoB,KAAA,CAAA;AAExB;;;;;;;;AAQC,MACD6B,mBAAAA,CAAoB;AAClBpE,QAAAA,KAAAA;QACAqE,aAAAA,EAAe9B,mBAAAA;AACf+B,QAAAA,cAAAA;QACAC,QAAAA,EAAU1B,WAAAA;AACVe,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;QACAW,QAAAA,EAAU3F;AACZ,KAAA,CAAA;AAEAe,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd;;QAGA,MAAM2E,0BAA0B,CAACnB,KAAAA,GAAAA;YAC/B,IAAIA,KAAAA,CAAMoB,GAAG,KAAK3G,YAAAA,CAAaC,MAAM,IAAIsF,KAAAA,CAAMqB,QAAQ,KAAK,IAAA,EAAM;AAChEpC,gBAAAA,mBAAAA,EAAAA;AACF,YAAA;AACF,QAAA,CAAA;QAEAgB,MAAAA,CAAOC,gBAAgB,CAAC,SAAA,EAAWiB,uBAAAA,CAAAA;QAEnC,OAAO,IAAA;YACLlB,MAAAA,CAAOI,mBAAmB,CAAC,SAAA,EAAWc,uBAAAA,CAAAA;AACxC,QAAA,CAAA;AACF,IAAA,CAAA,CAAA;IAEA,MAAMG,OAAAA,GAAQhF,MAAMiC,WAAW,CAC7B,OAAO,EAAEgD,UAAU,EAAE,GAAGtG,IAAAA,EAAM,GAAA;QAC5B,MAAMuG,GAAAA,GAAM,MAAM9D,aAAAA,CAAc;AAAE,YAAA,GAAGzC,IAAI;YAAEwG,QAAAA,EAAUC,mBAAAA,EAAAA;AAAuBH,YAAAA;AAAW,SAAA,CAAA;AAEvF;;;UAIA,IAAI,UAAUC,GAAAA,EAAK;AACjB,YAAA,MAAM,EAAE9E,KAAK,EAAE,GAAG8E,IAAI3E,IAAI;AAE1B8E,YAAAA,+BAAAA,EAAAA;AACAjG,YAAAA,QAAAA,CACEkG,KAAAA,CAAY;AACVlF,gBAAAA,KAAAA;gBACAmF,OAAAA,EAASN;AACX,aAAA,CAAA,CAAA;AAEJ,QAAA;QAEA,OAAOC,GAAAA;IACT,CAAA,EACA;AAAC9F,QAAAA,QAAAA;AAAUgC,QAAAA;AAAc,KAAA,CAAA;AAG3B;;;AAGC,MACD,MAAMoE,QAAAA,GAASxF,KAAAA,CAAMiC,WAAW,CAAC,UAAA;QAC/BD,kBAAAA,CAAmB,IAAA;AACjB,YAAA,KAAK,CAAC,UAAA;gBACJ,IAAI;AACF,oBAAA,MAAMV,cAAAA,CAAe;wBAAE6D,QAAAA,EAAUC,mBAAAA;AAAsB,qBAAA,CAAA;AACzD,gBAAA,CAAA,CAAE,OAAM;;AAER,gBAAA;AACAhD,gBAAAA,mBAAAA,EAAAA;YACF,CAAA,GAAA;AACF,QAAA,CAAA,CAAA;IACF,CAAA,EAAG;AAACd,QAAAA,cAAAA;AAAgBc,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5D,MAAMyD,kBAAAA,GAAqBzF,KAAAA,CAAMiC,WAAW,CAAC,UAAA;AAC3C,QAAA,IAAI,CAAClB,eAAAA,EAAiB;YACpB,MAAMD,OAAAA,EAAAA;AACR,QAAA;IACF,CAAA,EAAG;AAACC,QAAAA,eAAAA;AAAiBD,QAAAA;AAAQ,KAAA,CAAA;IAE7B,MAAM,CAAC4E,iBAAiB,GAAGC,4BAAAA,EAAAA;AAC3B,IAAA,MAAMC,0BAAuE5F,KAAAA,CAAMiC,WAAW,CAC5F,OACE4D,WAAAA,EACAC;;;;;;;;AAUAC,IAAAA,eAAAA,GAAAA;AAEA;;;;;AAKC,UACD,IAAI,CAACF,WAAAA,IAAeA,WAAAA,CAAYG,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO;AAAC,gBAAA;oBAAEC,MAAAA,EAAQ,EAAA;oBAAIC,OAAAA,EAAS;AAAG;AAAE,aAAA;AACtC,QAAA;AAEA;;;UAIA,MAAMC,wBAAwBL,iBAAAA,IAAqBjF,eAAAA;AAEnD,QAAA,MAAMuF,sBAAsBD,qBAAAA,CAAsBE,MAAM,CACtD,CAACC,aACCT,WAAAA,CAAYU,SAAS,CACnB,CAACC,OACCA,IAAAA,CAAKP,MAAM,KAAKK,UAAAA,CAAWL,MAAM;iBAEhCO,IAAAA,CAAKN,OAAO,IAAIxH,SAAAA,IAAa8H,IAAAA,CAAKN,OAAO,KAAKI,UAAAA,CAAWJ,OAAM,CAAA,CAAA,IAC/D,CAAA,CAAA;QAGT,MAAMO,sBAAAA,GAAyB,MAAMnH,iBAAAA,CACnC;AACEkB,YAAAA,IAAAA;YACAqF,WAAAA,EAAahF,eAAAA;YACb6F,QAAAA,EAAU3G,WAAAA,CAAYI,OAAO,CAACuG,QAAQ;YACtCC,MAAAA,EAASZ,CAAAA,eAAAA,IAAmBlG,QAAO,EAAG+G,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI;SACzD,EACAR,mBAAAA,CAAAA;AAGF,QAAA,MAAMS,wBAAwBJ,sBAAAA,CAAuBK,IAAI,CACvD,CAACN,OAASO,KAAAA,CAAMC,OAAO,CAACR,IAAAA,CAAKS,UAAU,CAAA,IAAKT,IAAAA,CAAKS,UAAU,CAACjB,MAAM,GAAG,CAAA,CAAA;AAGvE,QAAA,IAAI,CAACa,qBAAAA,EAAuB;YAC1B,OAAOJ,sBAAAA;AACT,QAAA;AAEA,QAAA,MAAM,EAAElG,IAAI,EAAE2G,KAAK,EAAE,GAAG,MAAMxB,gBAAAA,CAAiB;AAC7CG,YAAAA,WAAAA,EAAaY,sBAAAA,CAAuBU,GAAG,CAAC,CAACX,QAAU;AACjDP,oBAAAA,MAAAA,EAAQO,KAAKP,MAAM;AACnBC,oBAAAA,OAAAA,EAASM,KAAKN;iBAChB,CAAA;AACF,SAAA,CAAA;AAEA,QAAA,IAAIgB,KAAAA,EAAO;YACT,MAAMA,KAAAA;QACR,CAAA,MAAO;YACL,OAAOT,sBAAAA,CAAuBJ,MAAM,CAAC,CAACe,CAAAA,EAAGC,QAAU9G,IAAAA,EAAMA,IAAI,CAAC8G,KAAAA,CAAM,KAAK,IAAA,CAAA;AAC3E,QAAA;IACF,CAAA,EACA;AAAC3B,QAAAA,gBAAAA;AAAkB7F,QAAAA,QAAAA;AAAUP,QAAAA,iBAAAA;AAAmBkB,QAAAA,IAAAA;AAAMK,QAAAA;AAAgB,KAAA,CAAA;AAGxE,IAAA,MAAMJ,YAAYC,aAAAA,IAAiBM,oBAAAA;IAEnC,qBACEsG,IAAA,CAAAC,QAAA,EAAA;;0BACEC,GAAA,CAACxJ,QAAAA,EAAAA;gBACCoC,KAAAA,EAAOA,KAAAA;gBACPI,IAAAA,EAAMA,IAAAA;gBACNwE,KAAAA,EAAOA,OAAAA;gBACPQ,MAAAA,EAAQA,QAAAA;gBACRK,WAAAA,EAAahF,eAAAA;AACb+E,gBAAAA,uBAAAA,EAAyBA,uBAAAA,IAA2B7H,+BAAAA;gBACpD0H,kBAAAA,EAAoBA,kBAAAA;gBACpBhF,SAAAA,EAAWA,SAAAA;AAEV1B,gBAAAA,QAAAA,EAAAA;;AAEH,0BAAAyI,GAAA,CAACC,OAAOC,IAAI,EAAA;gBACV1E,IAAAA,EAAMrB,yBAAAA;gBACNgG,YAAAA,EAAc5E,mCAAAA;AAEd,gBAAA,QAAA,gBAAAyE,GAAA,CAACI,aAAAA,EAAAA;oBACCC,SAAAA,EAAWjF,0BAAAA;oBACXkF,QAAAA,EAAUjF,yBAAAA;AACVpE,oBAAAA,KAAAA,EACEF,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,GACrCS,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,CAAA,GACvDC,SAAAA;;oBAGNqJ,WAAAA,EAAa1J,cAAAA,CAAeyD,qCAAuB0F,GAAA,CAAAD,QAAA,EAAA,EAAA,CAAA,GAAQ7I,SAAAA;AAE1DQ,oBAAAA,QAAAA,EAAAA,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACnD,IAAI;;;;;AAKjE;;;;"}

package/dist/admin/admin/src/hooks/useRegisterUnsavedChanges.js

@@ -0,0 +1,19 @@
+'use strict';
+
+var React = require('react');
+var unsavedChangesRegistry = require('../utils/unsavedChangesRegistry.js');
+
+/**
+ * Registers whether the current surface has unsaved edits so session-expiry
+ * logout can warn before clearing auth state (which unmounts forms).
+ */ const useRegisterUnsavedChanges = (id, enabled)=>{
+    React.useEffect(()=>{
+        return unsavedChangesRegistry.registerUnsavedChangesCheck(id, ()=>enabled);
+    }, [
+        id,
+        enabled
+    ]);
+};
+
+exports.useRegisterUnsavedChanges = useRegisterUnsavedChanges;
+//# sourceMappingURL=useRegisterUnsavedChanges.js.map

package/dist/admin/admin/src/hooks/useRegisterUnsavedChanges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRegisterUnsavedChanges.js","sources":["../../../../../admin/src/hooks/useRegisterUnsavedChanges.ts"],"sourcesContent":["import { useEffect } from 'react';\n\nimport { registerUnsavedChangesCheck } from '../utils/unsavedChangesRegistry';\n\n/**\n * Registers whether the current surface has unsaved edits so session-expiry\n * logout can warn before clearing auth state (which unmounts forms).\n */\nconst useRegisterUnsavedChanges = (id: string, enabled: boolean): void => {\n  useEffect(() => {\n    return registerUnsavedChangesCheck(id, () => enabled);\n  }, [id, enabled]);\n};\n\nexport { useRegisterUnsavedChanges };\n"],"names":["useRegisterUnsavedChanges","id","enabled","useEffect","registerUnsavedChangesCheck"],"mappings":";;;;;AAIA;;;IAIA,MAAMA,yBAAAA,GAA4B,CAACC,EAAAA,EAAYC,OAAAA,GAAAA;IAC7CC,eAAAA,CAAU,IAAA;QACR,OAAOC,kDAAAA,CAA4BH,IAAI,IAAMC,OAAAA,CAAAA;IAC/C,CAAA,EAAG;AAACD,QAAAA,EAAAA;AAAIC,QAAAA;AAAQ,KAAA,CAAA;AAClB;;;;"}

package/dist/admin/admin/src/hooks/useRegisterUnsavedChanges.mjs

@@ -0,0 +1,17 @@
+import { useEffect } from 'react';
+import { registerUnsavedChangesCheck } from '../utils/unsavedChangesRegistry.mjs';
+
+/**
+ * Registers whether the current surface has unsaved edits so session-expiry
+ * logout can warn before clearing auth state (which unmounts forms).
+ */ const useRegisterUnsavedChanges = (id, enabled)=>{
+    useEffect(()=>{
+        return registerUnsavedChangesCheck(id, ()=>enabled);
+    }, [
+        id,
+        enabled
+    ]);
+};
+
+export { useRegisterUnsavedChanges };
+//# sourceMappingURL=useRegisterUnsavedChanges.mjs.map

package/dist/admin/admin/src/hooks/useRegisterUnsavedChanges.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRegisterUnsavedChanges.mjs","sources":["../../../../../admin/src/hooks/useRegisterUnsavedChanges.ts"],"sourcesContent":["import { useEffect } from 'react';\n\nimport { registerUnsavedChangesCheck } from '../utils/unsavedChangesRegistry';\n\n/**\n * Registers whether the current surface has unsaved edits so session-expiry\n * logout can warn before clearing auth state (which unmounts forms).\n */\nconst useRegisterUnsavedChanges = (id: string, enabled: boolean): void => {\n  useEffect(() => {\n    return registerUnsavedChangesCheck(id, () => enabled);\n  }, [id, enabled]);\n};\n\nexport { useRegisterUnsavedChanges };\n"],"names":["useRegisterUnsavedChanges","id","enabled","useEffect","registerUnsavedChangesCheck"],"mappings":";;;AAIA;;;IAIA,MAAMA,yBAAAA,GAA4B,CAACC,EAAAA,EAAYC,OAAAA,GAAAA;IAC7CC,SAAAA,CAAU,IAAA;QACR,OAAOC,2BAAAA,CAA4BH,IAAI,IAAMC,OAAAA,CAAAA;IAC/C,CAAA,EAAG;AAACD,QAAAA,EAAAA;AAAIC,QAAAA;AAAQ,KAAA,CAAA;AAClB;;;;"}

package/dist/admin/admin/src/hooks/{useIdleSessionLogout.js → useSessionKeepalive.js}

@@ -27,31 +27,38 @@ const SESSION_EXPIRY_BUFFER_MS = 1000;
 /**
  * How long before the access token's `exp` an active tab renews. Renewing
  * ahead of expiry (rather than at it) means the refreshed token is already in
- * shared storage by the time any *other* tab's logout timer fires — so an idle
- * sibling re-syncs instead of racing the refresh and logging itself out.
+ * shared storage by the time any *other* tab's post-expiry timer fires — so an
+ * idle sibling re-syncs instead of racing the refresh.
  */ const SESSION_RENEW_MARGIN_MS = 10000;
 /**
- * Keep the admin session alive while the user is active, and end it when they
- * are genuinely idle — without one tab tearing down another.
+ * Keep the admin session alive while the user is active — without one tab
+ * tearing down another, and without logging anyone out because a short-lived
+ * access token aged out.
  *
- * The access token is short-lived (`accessTokenLifespan`, e.g. 30 min) and is
- * meant to be refreshed, not to be the session length. Two timers are armed per
- * token:
+ * The access token (`accessTokenLifespan`, e.g. 30 min) is transport plumbing,
+ * not the session length; the refresh token's idle/max window is the session.
+ * So expiry of the access JWT must never clear auth state or unmount the page:
+ * the next user-initiated request 401s, `withTokenRefresh` refreshes and
+ * retries, and only a *rejected* refresh ends the session (`onSessionDead`).
+ * Two timers are armed per token:
  *
  * - Renew (at `exp` minus a margin): if the user interacted during this token's
  *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the
  *   hook; a server rejection (`onSessionDead`) ends the session globally.
  *   Renewing early guarantees the refreshed token reaches shared storage before
- *   any sibling tab's logout timer fires.
- * - Logout (just after `exp`): the fallback when this tab did not renew. It
- *   first re-syncs from a token another tab refreshed (so an idle tab rides on
- *   an active sibling), then renews if activity arrived late, and only otherwise
- *   logs out — locally, so idle tabs never force-logout active ones.
+ *   any sibling tab's post-expiry timer fires.
+ * - Post-expiry (just after `exp`): the fallback when this tab did not renew.
+ *   It first re-syncs from a token another tab refreshed (so an idle tab rides
+ *   on an active sibling), then renews if activity arrived late. If the tab is
+ *   still idle, it does nothing destructive — the stale access token stays in
+ *   place so form state survives until the next request.
+ *
+ * Idle tabs must not renew: a tab left open forever must not keep the session
+ * alive past the server's idle/max window.
  *
  * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped
- * silently — the active-tab redirect on 401 still covers the symptom on the next
- * user-initiated request.
- */ const useIdleSessionLogout = ({ token, onExpired, onSessionDead, getStoredToken, onResync, getLastActivityAt, renewSession, disabled = false })=>{
+ * silently — the 401 refresh path still covers the next user-initiated request.
+ */ const useSessionKeepalive = ({ token, onSessionDead, getStoredToken, onResync, getLastActivityAt, renewSession, disabled = false })=>{
     React__namespace.useEffect(()=>{
         if (!token || disabled) {
             return undefined;
@@ -81,7 +88,7 @@ const SESSION_EXPIRY_BUFFER_MS = 1000;
             renewSession().then((renewed)=>{
                 if (!renewed) {
                     // Server rejected the refresh: the session is truly over.
-                    (onSessionDead ?? onExpired)();
+                    onSessionDead?.();
                 }
             // On success, storeToken -> setToken updates the token prop, which
             // re-runs this effect and re-arms against the new exp.
@@ -97,26 +104,26 @@ const SESSION_EXPIRY_BUFFER_MS = 1000;
                 renew();
             }
         }, renewDelay);
-        // Fallback decision just after expiry, for tabs that did not renew.
-        const logoutDelay = Math.max(expiry - armedAt + SESSION_EXPIRY_BUFFER_MS, 0);
-        const logoutTimeoutId = window.setTimeout(()=>{
+        // Fallback just after expiry for tabs that did not renew: re-sync or
+        // late-activity renew. Idle tabs leave the stale token alone.
+        const postExpiryDelay = Math.max(expiry - armedAt + SESSION_EXPIRY_BUFFER_MS, 0);
+        const postExpiryTimeoutId = window.setTimeout(()=>{
             if (tryResync()) {
                 return;
             }
             if (wasActive() && renewSession) {
                 renew();
-                return;
             }
-            // Genuinely idle: log out only this tab.
-            onExpired();
-        }, logoutDelay);
+        // Genuinely idle: do nothing. Keep the (stale) access token and the page
+        // mounted. The next request will 401 and either refresh transparently or
+        // hit the session-dead path if the server rejects the refresh.
+        }, postExpiryDelay);
         return ()=>{
             window.clearTimeout(renewTimeoutId);
-            window.clearTimeout(logoutTimeoutId);
+            window.clearTimeout(postExpiryTimeoutId);
         };
     }, [
         token,
-        onExpired,
         onSessionDead,
         getStoredToken,
         onResync,
@@ -128,5 +135,5 @@ const SESSION_EXPIRY_BUFFER_MS = 1000;
 
 exports.SESSION_EXPIRY_BUFFER_MS = SESSION_EXPIRY_BUFFER_MS;
 exports.SESSION_RENEW_MARGIN_MS = SESSION_RENEW_MARGIN_MS;
-exports.useIdleSessionLogout = useIdleSessionLogout;
-//# sourceMappingURL=useIdleSessionLogout.js.map
+exports.useSessionKeepalive = useSessionKeepalive;
+//# sourceMappingURL=useSessionKeepalive.js.map

package/dist/admin/admin/src/hooks/useSessionKeepalive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useSessionKeepalive.js","sources":["../../../../../admin/src/hooks/useSessionKeepalive.ts"],"sourcesContent":["import * as React from 'react';\n\nimport { decodeAccessTokenExpiry } from '../utils/jwt';\n\nconst SESSION_EXPIRY_BUFFER_MS = 1000;\n/**\n * How long before the access token's `exp` an active tab renews. Renewing\n * ahead of expiry (rather than at it) means the refreshed token is already in\n * shared storage by the time any *other* tab's post-expiry timer fires — so an\n * idle sibling re-syncs instead of racing the refresh.\n */\nconst SESSION_RENEW_MARGIN_MS = 10_000;\n\ninterface UseSessionKeepaliveOptions {\n  /**\n   * The current admin access JWT (from Redux), or `null` when logged out.\n   */\n  token: string | null;\n  /**\n   * Called when a renewal attempt is rejected by the server (the session is\n   * truly over: refresh token idle/max window elapsed). This is a\n   * server-confirmed end of session, so it SHOULD broadcast a global logout to\n   * every tab.\n   */\n  onSessionDead?: () => void;\n  /**\n   * Read the access token currently in shared storage (localStorage/cookie).\n   * Because every open tab shares the same refresh cookie, an active tab that\n   * refreshes writes a newer access token here. When omitted, the hook never\n   * re-syncs across tabs.\n   */\n  getStoredToken?: () => string | null;\n  /**\n   * Adopt a newer shared token instead of treating this tab's token as stale.\n   * Typically dispatches `setToken`, which updates Redux and causes this hook\n   * to re-arm against the later `exp`. Only called when `getStoredToken`\n   * returns a token whose `exp` is later than the in-memory one.\n   */\n  onResync?: (token: string) => void;\n  /**\n   * Epoch ms of the user's last interaction (pointer, key, scroll, …). Used to\n   * decide whether to silently renew when the access token is about to expire.\n   * Idle tabs must NOT renew — that would defeat the server's\n   * `idleSessionLifespan` / `idleRefreshTokenLifespan`. When omitted, the hook\n   * never treats the tab as active.\n   */\n  getLastActivityAt?: () => number;\n  /**\n   * Silently renew the session (rotate the refresh token + mint a new access\n   * token). Resolves `true` on success — the resulting `setToken` re-arms this\n   * hook against the new `exp` — or `false` when the server rejects it. Only\n   * called when the user was active during the current token's lifetime.\n   */\n  renewSession?: () => Promise<boolean>;\n  /**\n   * Escape hatch for tests / dev environments where we don't want the\n   * automatic renew / re-sync behavior. Mirrors the existing `_disableRenewToken`\n   * prop on `<AuthProvider>`.\n   */\n  disabled?: boolean;\n}\n\n/**\n * Keep the admin session alive while the user is active — without one tab\n * tearing down another, and without logging anyone out because a short-lived\n * access token aged out.\n *\n * The access token (`accessTokenLifespan`, e.g. 30 min) is transport plumbing,\n * not the session length; the refresh token's idle/max window is the session.\n * So expiry of the access JWT must never clear auth state or unmount the page:\n * the next user-initiated request 401s, `withTokenRefresh` refreshes and\n * retries, and only a *rejected* refresh ends the session (`onSessionDead`).\n * Two timers are armed per token:\n *\n * - Renew (at `exp` minus a margin): if the user interacted during this token's\n *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the\n *   hook; a server rejection (`onSessionDead`) ends the session globally.\n *   Renewing early guarantees the refreshed token reaches shared storage before\n *   any sibling tab's post-expiry timer fires.\n * - Post-expiry (just after `exp`): the fallback when this tab did not renew.\n *   It first re-syncs from a token another tab refreshed (so an idle tab rides\n *   on an active sibling), then renews if activity arrived late. If the tab is\n *   still idle, it does nothing destructive — the stale access token stays in\n *   place so form state survives until the next request.\n *\n * Idle tabs must not renew: a tab left open forever must not keep the session\n * alive past the server's idle/max window.\n *\n * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped\n * silently — the 401 refresh path still covers the next user-initiated request.\n */\nconst useSessionKeepalive = ({\n  token,\n  onSessionDead,\n  getStoredToken,\n  onResync,\n  getLastActivityAt,\n  renewSession,\n  disabled = false,\n}: UseSessionKeepaliveOptions): void => {\n  React.useEffect(() => {\n    if (!token || disabled) {\n      return undefined;\n    }\n\n    const expiry = decodeAccessTokenExpiry(token);\n    if (expiry === null) {\n      return undefined;\n    }\n\n    // When this token became active. Activity recorded after this point means\n    // the user was present during the token's lifetime.\n    const armedAt = Date.now();\n    const wasActive = () =>\n      typeof getLastActivityAt === 'function' && getLastActivityAt() >= armedAt;\n\n    // Adopt a fresher token another tab wrote to shared storage. Returns true\n    // when it re-synced (caller should stop).\n    const tryResync = (): boolean => {\n      const storedToken = getStoredToken?.() ?? null;\n      if (storedToken && storedToken !== token && onResync) {\n        const storedExpiry = decodeAccessTokenExpiry(storedToken);\n        if (storedExpiry !== null && storedExpiry > expiry) {\n          onResync(storedToken);\n          return true;\n        }\n      }\n      return false;\n    };\n\n    const renew = () => {\n      renewSession!().then((renewed) => {\n        if (!renewed) {\n          // Server rejected the refresh: the session is truly over.\n          onSessionDead?.();\n        }\n        // On success, storeToken -> setToken updates the token prop, which\n        // re-runs this effect and re-arms against the new exp.\n      });\n    };\n\n    // Renew ahead of expiry while the user is active.\n    const renewDelay = Math.max(expiry - armedAt - SESSION_RENEW_MARGIN_MS, 0);\n    const renewTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n      }\n    }, renewDelay);\n\n    // Fallback just after expiry for tabs that did not renew: re-sync or\n    // late-activity renew. Idle tabs leave the stale token alone.\n    const postExpiryDelay = Math.max(expiry - armedAt + SESSION_EXPIRY_BUFFER_MS, 0);\n    const postExpiryTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n      }\n      // Genuinely idle: do nothing. Keep the (stale) access token and the page\n      // mounted. The next request will 401 and either refresh transparently or\n      // hit the session-dead path if the server rejects the refresh.\n    }, postExpiryDelay);\n\n    return () => {\n      window.clearTimeout(renewTimeoutId);\n      window.clearTimeout(postExpiryTimeoutId);\n    };\n  }, [token, onSessionDead, getStoredToken, onResync, getLastActivityAt, renewSession, disabled]);\n};\n\nexport { useSessionKeepalive, SESSION_EXPIRY_BUFFER_MS, SESSION_RENEW_MARGIN_MS };\nexport type { UseSessionKeepaliveOptions };\n"],"names":["SESSION_EXPIRY_BUFFER_MS","SESSION_RENEW_MARGIN_MS","useSessionKeepalive","token","onSessionDead","getStoredToken","onResync","getLastActivityAt","renewSession","disabled","React","useEffect","undefined","expiry","decodeAccessTokenExpiry","armedAt","Date","now","wasActive","tryResync","storedToken","storedExpiry","renew","then","renewed","renewDelay","Math","max","renewTimeoutId","window","setTimeout","postExpiryDelay","postExpiryTimeoutId","clearTimeout"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAIA,MAAMA,wBAAAA,GAA2B;AACjC;;;;;AAKC,UACKC,uBAAAA,GAA0B;AAmDhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BC,UACKC,mBAAAA,GAAsB,CAAC,EAC3BC,KAAK,EACLC,aAAa,EACbC,cAAc,EACdC,QAAQ,EACRC,iBAAiB,EACjBC,YAAY,EACZC,QAAAA,GAAW,KAAK,EACW,GAAA;AAC3BC,IAAAA,gBAAAA,CAAMC,SAAS,CAAC,IAAA;QACd,IAAI,CAACR,SAASM,QAAAA,EAAU;YACtB,OAAOG,SAAAA;AACT,QAAA;AAEA,QAAA,MAAMC,SAASC,2BAAAA,CAAwBX,KAAAA,CAAAA;AACvC,QAAA,IAAIU,WAAW,IAAA,EAAM;YACnB,OAAOD,SAAAA;AACT,QAAA;;;QAIA,MAAMG,OAAAA,GAAUC,KAAKC,GAAG,EAAA;AACxB,QAAA,MAAMC,SAAAA,GAAY,IAChB,OAAOX,iBAAAA,KAAsB,cAAcA,iBAAAA,EAAAA,IAAuBQ,OAAAA;;;AAIpE,QAAA,MAAMI,SAAAA,GAAY,IAAA;AAChB,YAAA,MAAMC,cAAcf,cAAAA,IAAAA,IAAsB,IAAA;YAC1C,IAAIe,WAAAA,IAAeA,WAAAA,KAAgBjB,KAAAA,IAASG,QAAAA,EAAU;AACpD,gBAAA,MAAMe,eAAeP,2BAAAA,CAAwBM,WAAAA,CAAAA;gBAC7C,IAAIC,YAAAA,KAAiB,IAAA,IAAQA,YAAAA,GAAeR,MAAAA,EAAQ;oBAClDP,QAAAA,CAASc,WAAAA,CAAAA;oBACT,OAAO,IAAA;AACT,gBAAA;AACF,YAAA;YACA,OAAO,KAAA;AACT,QAAA,CAAA;AAEA,QAAA,MAAME,KAAAA,GAAQ,IAAA;YACZd,YAAAA,EAAAA,CAAgBe,IAAI,CAAC,CAACC,OAAAA,GAAAA;AACpB,gBAAA,IAAI,CAACA,OAAAA,EAAS;;AAEZpB,oBAAAA,aAAAA,IAAAA;AACF,gBAAA;;;AAGF,YAAA,CAAA,CAAA;AACF,QAAA,CAAA;;AAGA,QAAA,MAAMqB,aAAaC,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUd,uBAAAA,EAAyB,CAAA,CAAA;QACxE,MAAM2B,cAAAA,GAAiBC,MAAAA,CAAOC,UAAU,CAAC,IAAA;AACvC,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACF,YAAA;QACF,CAAA,EAAGG,UAAAA,CAAAA;;;AAIH,QAAA,MAAMM,kBAAkBL,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUf,wBAAAA,EAA0B,CAAA,CAAA;QAC9E,MAAMgC,mBAAAA,GAAsBH,MAAAA,CAAOC,UAAU,CAAC,IAAA;AAC5C,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACF,YAAA;;;;QAIF,CAAA,EAAGS,eAAAA,CAAAA;QAEH,OAAO,IAAA;AACLF,YAAAA,MAAAA,CAAOI,YAAY,CAACL,cAAAA,CAAAA;AACpBC,YAAAA,MAAAA,CAAOI,YAAY,CAACD,mBAAAA,CAAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AAAC7B,QAAAA,KAAAA;AAAOC,QAAAA,aAAAA;AAAeC,QAAAA,cAAAA;AAAgBC,QAAAA,QAAAA;AAAUC,QAAAA,iBAAAA;AAAmBC,QAAAA,YAAAA;AAAcC,QAAAA;AAAS,KAAA,CAAA;AAChG;;;;;;"}