Files
gooseek/backend/webui/src/lib/contexts/AuthContext.tsx
home a0e3748dde feat: auth service + security audit fixes + cleanup legacy services
Major changes:
- Add auth-svc: JWT auth, register/login/refresh, password reset
- Add auth UI: modals, pages (/login, /register, /forgot-password)
- Add usage tracking (usage_metrics table, daily limits)
- Add tiered rate limiting (free/pro/business)
- Add LLM usage limits per tier

Security fixes:
- All repos now require userID for Update/Delete operations
- JWT middleware in chat-svc, llm-svc, agent-svc, discover-svc
- ErrNotFound/ErrForbidden errors for proper access control

Cleanup:
- Remove legacy TypeScript services/ directory
- Remove computer-svc (to be reimplemented)
- Remove old deploy/docker configs

New files:
- backend/cmd/auth-svc/main.go
- backend/internal/auth/{types,repository}.go
- backend/internal/usage/{types,repository}.go
- backend/pkg/middleware/{llm_limits,ratelimit_tiered}.go
- backend/webui/src/components/auth/*
- backend/webui/src/app/(auth)/*

Made-with: Cursor
2026-02-28 01:33:49 +03:00

142 lines
3.1 KiB
TypeScript

'use client';
import {
createContext,
useContext,
useState,
useEffect,
useCallback,
ReactNode,
} from 'react';
import {
User,
AuthTokens,
RegisterRequest,
LoginRequest,
getStoredUser,
getStoredToken,
login as apiLogin,
register as apiRegister,
logout as apiLogout,
getMe,
refreshTokens,
clearAuth,
} from '@/lib/auth';
interface AuthContextType {
user: User | null;
isLoading: boolean;
isAuthenticated: boolean;
login: (data: LoginRequest) => Promise<AuthTokens>;
register: (data: RegisterRequest) => Promise<AuthTokens>;
logout: () => Promise<void>;
refreshUser: () => Promise<void>;
showAuthModal: (mode: 'login' | 'register') => void;
hideAuthModal: () => void;
authModalMode: 'login' | 'register' | null;
}
const AuthContext = createContext<AuthContextType | null>(null);
export function AuthProvider({ children }: { children: ReactNode }) {
const [user, setUser] = useState<User | null>(null);
const [isLoading, setIsLoading] = useState(true);
const [authModalMode, setAuthModalMode] = useState<'login' | 'register' | null>(null);
const initAuth = useCallback(async () => {
const token = getStoredToken();
if (!token) {
setIsLoading(false);
return;
}
const storedUser = getStoredUser();
if (storedUser) {
setUser(storedUser);
}
try {
const freshUser = await getMe();
if (freshUser) {
setUser(freshUser);
} else {
setUser(null);
clearAuth();
}
} catch {
const refreshed = await refreshTokens();
if (refreshed) {
setUser(refreshed.user);
} else {
setUser(null);
clearAuth();
}
} finally {
setIsLoading(false);
}
}, []);
useEffect(() => {
initAuth();
}, [initAuth]);
const login = useCallback(async (data: LoginRequest): Promise<AuthTokens> => {
const tokens = await apiLogin(data);
setUser(tokens.user);
setAuthModalMode(null);
return tokens;
}, []);
const register = useCallback(async (data: RegisterRequest): Promise<AuthTokens> => {
const tokens = await apiRegister(data);
setUser(tokens.user);
setAuthModalMode(null);
return tokens;
}, []);
const logout = useCallback(async () => {
await apiLogout();
setUser(null);
}, []);
const refreshUser = useCallback(async () => {
const freshUser = await getMe();
setUser(freshUser);
}, []);
const showAuthModal = useCallback((mode: 'login' | 'register') => {
setAuthModalMode(mode);
}, []);
const hideAuthModal = useCallback(() => {
setAuthModalMode(null);
}, []);
return (
<AuthContext.Provider
value={{
user,
isLoading,
isAuthenticated: !!user,
login,
register,
logout,
refreshUser,
showAuthModal,
hideAuthModal,
authModalMode,
}}
>
{children}
</AuthContext.Provider>
);
}
export function useAuth(): AuthContextType {
const context = useContext(AuthContext);
if (!context) {
throw new Error('useAuth must be used within AuthProvider');
}
return context;
}