Function AuthProvider

frontend/src/providers/AuthProvider.tsx:43–210

({ children }: { children: React.ReactNode })

  user: null,
  isAdmin: false,
  login: () => {},
  logout: async () => {},
  refreshAccessToken: async () => {},
  validateToken: async () => false,
  refreshUserInfo: async () => false,
});

export function AuthProvider({ children }: { children: React.ReactNode }) {
  const [token, setToken] = useState<string | null>(null);
  const [isAuthorized, setIsAuthorized] = useState(false);
  const [isLoading, setIsLoading] = useState(true);
  const [user, setUser] = useState<User | null>(null);
  const [roles, setRoles] = useState<string[]>([]);
  const router = useRouter();

  const [checkToken] = useLazyQuery<{ checkToken: boolean }>(CHECK_TOKEN_QUERY);
  const [refreshTokenMutation] = useMutation(REFRESH_TOKEN_MUTATION);
  const [getUserInfo] = useLazyQuery<{ me: User }>(GET_USER_INFO);
  const [getMyRoles] = useLazyQuery<{ myRoles: string[] }>(GET_MY_ROLES);
  // no-cache: a cached `true` would skip the network on the second logout of a
  // session and leave that token live.
  const [logoutQuery] = useLazyQuery<{ logout: boolean }>(LOGOUT, {
    fetchPolicy: 'no-cache',
  });

  const validateToken = useCallback(async () => {
    const storedToken = localStorage.getItem(LocalStore.accessToken);
    if (!storedToken) {
      setIsAuthorized(false);
      setUser(null);
      return false;
    }
    try {
      const { data } = await checkToken({
        variables: { input: { token: storedToken } },
      });
      if (data?.checkToken) {
        setToken(storedToken);
        return true;
      }
      return false;
    } catch (error) {
      logger.error('Token validation error:', error);
      return false;
    }
  }, [checkToken]);

  const fetchUserInfo = useCallback(async () => {
    try {
      const { data } = await getUserInfo();
      if (data?.me) {
        setUser(data.me);
        // Alongside rather than inside `me`: roles are a separate guarded
        // query now. A failure here only costs the Admin link.
        getMyRoles()
          .then(({ data: r }) => setRoles(r?.myRoles ?? []))
          .catch(() => setRoles([]));
        return true;