bento-auth-js/src/autoAuthenticate.ts

Authentication library for web applications of Bento-Platform

import { useEffect } from "react";
import { useIsAuthenticated, useIsAutoAuthenticating, useOpenIdConfig } from "./hooks";
import { LS_BENTO_WAS_SIGNED_IN, setLSNotSignedIn, usePerformAuth } from "./performAuth";
import { setIsAutoAuthenticating } from "./redux/authSlice";
import { useAppDispatch } from "./redux/store";

export interface AutoAuthenticateState {
    isAutoAuthenticating: boolean;
}

export const useAutoAuthenticate = (): AutoAuthenticateState => {
    const dispatch = useAppDispatch();

    const isAutoAuthenticating = useIsAutoAuthenticating();

    const isAuthenticated = useIsAuthenticated();
    const { data: openIdConfig } = useOpenIdConfig();
    const performAuth = usePerformAuth();

    const authzEndpoint = openIdConfig?.["authorization_endpoint"];

    useEffect(() => {
        if (
            !isAuthenticated &&
            !isAutoAuthenticating &&
            authzEndpoint &&
            localStorage.getItem(LS_BENTO_WAS_SIGNED_IN) === "true"
        ) {
            console.debug("auto-authenticating");
            setLSNotSignedIn();
            dispatch(setIsAutoAuthenticating(true));
            // If performAuth() is successful, there will be a redirect. Otherwise, an error will be thrown and
            // isAutoAuthenticating will be reset to `false`.
            performAuth().catch((err) => {
                console.error(err);
                // Prevent loop: set auto-authenticating to false and unset localStorage LS_BENTO_WAS_SIGNED_IN
                //  - Without setting localStorage, this would trigger the effect to run again.
                localStorage.removeItem(LS_BENTO_WAS_SIGNED_IN);
                dispatch(setIsAutoAuthenticating(false));
            });
        }
    }, [dispatch, authzEndpoint, isAuthenticated, isAutoAuthenticating, performAuth]);

    return { isAutoAuthenticating };
};