admin / Apex

import { createContext, useContext, useEffect, useState } from "react";
import { api, setToken } from "./api";

export interface User {
  id: number;
  email: string;
  name: string;
  roles: string[];
  mfa_enrolled: boolean;
  must_change_password: boolean;
}

interface AuthCtx {
  user: User | null;
  loading: boolean;
  refresh: () => Promise<void>;
  logout: () => void;
  has: (...roles: string[]) => boolean;
}

const Ctx = createContext<AuthCtx>(null as any);
export const useAuth = () => useContext(Ctx);

export function AuthProvider({ children }: { children: React.ReactNode }) {
  const [user, setUser] = useState<User | null>(null);
  const [loading, setLoading] = useState(true);

  async function refresh() {
    try {
      const u = await api.get("/auth/me");
      setUser(u);
    } catch {
      setUser(null);
    } finally {
      setLoading(false);
    }
  }

  useEffect(() => {
    refresh();
  }, []);

  function logout() {
    setToken(null);
    setUser(null);
  }

  function has(...roles: string[]) {
    if (!user) return false;
    if (user.roles.includes("administrator")) return true;
    return roles.some((r) => user.roles.includes(r));
  }

  return (
    <Ctx.Provider value={{ user, loading, refresh, logout, has }}>
      {children}
    </Ctx.Provider>
  );
}