d1cef7a9ab
Run the instance in private mode when instance_url is not configured: the API rejects anonymous requests except the auth-bootstrap set (sign-in, token refresh, instance profile/settings, SSO providers, share-link access) plus first-run user creation, and the web UI redirects anonymous visitors to /auth instead of /explore. Setting instance_url keeps the current public behavior. Access tokens and personal access tokens are never gated. Enforcement lives in a shared Authorizer used by both the Connect interceptor and the gRPC-gateway middleware; the file server applies the same rule to public-memo attachments and avatars. Also merges the duplicated Authenticate/AuthenticateToUser token dispatch behind resolveBearer, dedups the AuthContext unauthenticated state, extracts the redirect decision into a pure shouldGatePrivateInstance helper, and prints the access mode at startup.
53 lines
1.7 KiB
TypeScript
53 lines
1.7 KiB
TypeScript
import { clearAccessToken } from "@/auth-state";
|
|
import { ROUTES } from "@/router/routes";
|
|
import { buildAuthRoute, isPublicRoute } from "./redirect-safety";
|
|
|
|
// Re-export the pure helpers so existing call sites (`@/utils/auth-redirect`)
|
|
// keep working without every caller switching to the new module. The side-effectful
|
|
// `redirectOnAuthFailure` lives here; pure logic lives in `./redirect-safety`.
|
|
export {
|
|
AUTH_REASON_PARAM,
|
|
AUTH_REASON_PROTECTED_MEMO,
|
|
AUTH_REDIRECT_PARAM,
|
|
buildAuthRoute,
|
|
getSafeRedirectPath,
|
|
isPublicRoute,
|
|
shouldGatePrivateInstance,
|
|
} from "./redirect-safety";
|
|
|
|
/**
|
|
* Imperatively redirects the current document to the auth entry page, preserving
|
|
* the current URL as the `redirect` target. Intended for hard-fail auth paths
|
|
* (e.g. a refresh-token request returning 401 from a non-React context).
|
|
*
|
|
* No-ops when the user is already on an auth page or on a public page that
|
|
* does not require authentication, unless `forceRedirect` is set.
|
|
*/
|
|
export function redirectOnAuthFailure(
|
|
forceRedirect = false,
|
|
options?: {
|
|
redirect?: string | null;
|
|
reason?: string | null;
|
|
},
|
|
): void {
|
|
const currentPath = window.location.pathname;
|
|
const currentRedirectPath = `${window.location.pathname}${window.location.search}${window.location.hash}`;
|
|
|
|
// Already on auth page, nothing to do.
|
|
if (currentPath.startsWith(ROUTES.AUTH)) {
|
|
return;
|
|
}
|
|
|
|
// Don't redirect if it's a public route (unless forced, e.g. public visibility is disallowed).
|
|
if (!forceRedirect && isPublicRoute(currentPath)) {
|
|
return;
|
|
}
|
|
|
|
clearAccessToken();
|
|
window.location.replace(
|
|
buildAuthRoute({
|
|
...options,
|
|
redirect: options?.redirect ?? currentRedirectPath,
|
|
}),
|
|
);
|
|
}
|