Spaces:
Sleeping
Sleeping
| /** | |
| * ProtectedRoute Component | |
| * | |
| * Wrapper component that protects routes requiring authentication. | |
| * Redirects to login if user is not authenticated. | |
| * | |
| * Per MASTER CONSTRAINTS: | |
| * - All features are locked behind authentication | |
| * - No access without login | |
| * - Clear, user-friendly error handling | |
| * | |
| * CRITICAL FIX FOR PAGE RELOAD: | |
| * - ONLY checks localStorage for token + user | |
| * - Does NOT wait for backend verification | |
| * - If token is invalid, the next API call will handle 401 redirect | |
| * - This ensures page reload NEVER redirects to login incorrectly | |
| * | |
| * Note: Maintenance mode is now handled at App.jsx level | |
| */ | |
| import React from 'react'; | |
| import { Navigate, useLocation } from 'react-router-dom'; | |
| import { getToken, getStoredUser } from '../services/api'; | |
| function ProtectedRoute({ children }) { | |
| const location = useLocation(); | |
| // SIMPLE CHECK: Only look at localStorage | |
| // If token AND user exist locally, allow access immediately | |
| // No async verification - that's handled by AuthContext in background | |
| // If token is actually invalid, API calls will return 401 and handle redirect | |
| const token = getToken(); | |
| const storedUser = getStoredUser(); | |
| const hasLocalAuth = !!(token && storedUser); | |
| // Only redirect if there's NO local auth at all | |
| if (!hasLocalAuth) { | |
| console.log('[ProtectedRoute] No local auth found, redirecting to login'); | |
| return <Navigate to="/login" state={{ from: location }} replace />; | |
| } | |
| // Has local auth - render protected content immediately | |
| // Trust localStorage, let API calls handle invalid tokens via 401 | |
| return children; | |
| } | |
| export default ProtectedRoute; |