INTF23 Review End Page

.eslintignore

@@ -1,2 +1,3 @@
-node_modules
+node_module
+node_modules/fraction.js
 __generated__

APIClients/AuthAPIClient.ts

@@ -0,0 +1,28 @@
+import { fetchGraphql } from "@utils/makegqlrequest";
+import { mutations, queries } from "graphql/queries";
+import BaseAPIClient from "./BaseAPIClient";
+
+export type TokenInfo = {
+  accessToken: string;
+  refreshToken: string;
+};
+
+export type Role = "Admin" | "User";
+
+const isAuthorizedByRole = (allowedRoles: Role[]): Promise<boolean> => {
+  BaseAPIClient.handleAuthRefresh();
+  const accessToken = localStorage.getItem("accessToken");
+
+  return fetchGraphql(queries.isAuthorizedByRole, {
+    accessToken,
+    roles: allowedRoles,
+  })
+    .then((result) => result.data.isAuthorizedByRole)
+    .catch(() => {
+      throw new Error("Auth Validation Error");
+    });
+};
+
+export default {
+  isAuthorizedByRole,
+};

APIClients/BaseAPIClient.ts

@@ -0,0 +1,42 @@
+import { fetchGraphql } from "@utils/makegqlrequest";
+import { mutations } from "graphql/queries";
+import jwt_decode from "jwt-decode";
+
+type AccessToken = {
+  readonly exp: number;
+};
+
+class BaseAPIClient {
+  static handleAuthRefresh(): void {
+    const accessToken = localStorage.getItem("accessToken");
+    const refreshToken = localStorage.getItem("refreshToken");
+    if (accessToken && refreshToken) {
+      const decodedToken = jwt_decode<AccessToken>(accessToken);
+      if (
+        decodedToken &&
+        decodedToken.exp <= Math.round(new Date().getTime() / 1000)
+      ) {
+        fetchGraphql(mutations.refresh, {
+          refreshToken: localStorage.getItem("refreshToken"),
+        })
+          .then((result) => {
+            if (typeof result.data.refresh === "string") {
+              localStorage.setItem("accessToken", result.data.refresh);
+            }
+          })
+          .catch((e: Error) => {
+            // fail to refresh and de-auth user
+            localStorage.clear();
+            window.location.reload(); // refresh current page
+            throw new Error(
+              `Failed to refresh accessToken token. Cause: ${e.message}`,
+            );
+          });
+      }
+    } else {
+      throw new Error("No access or refresh token provided");
+    }
+  }
+}
+
+export default BaseAPIClient;