Edouard Vanbelle
950c8c0f38
provide the DPoP nonce via cookie on login, this reduce the amount of API call and prevent having any first call returning in 401
29 lines
1.1 KiB
TypeScript
29 lines
1.1 KiB
TypeScript
/**
|
|
* Client startup hook. Runs once before the first route renders:
|
|
* - wires the API client's session-expired behaviour (clear store + redirect),
|
|
* - loads translations for the resolved locale.
|
|
*/
|
|
import { setSessionExpiredHandler } from '$lib/api/client';
|
|
import { initI18n } from '$lib/i18n/index.svelte';
|
|
import { session } from '$lib/stores/session.svelte';
|
|
import { seedNonceFromCookie } from '$lib/auth/dpop-proof';
|
|
|
|
export async function init(): Promise<void> {
|
|
setSessionExpiredHandler(() => {
|
|
session.reset();
|
|
if (typeof window !== 'undefined') {
|
|
window.location.href = '/login?source=session_expired';
|
|
}
|
|
});
|
|
|
|
// Consume the one-shot `oxicloud_dpop_nonce` cookie the backend
|
|
// stamps on every login-success response — critical for redirect-
|
|
// flow logins (OIDC callback, magic-link finish) where the browser
|
|
// lands here BEFORE any client-side login handler has run. Without
|
|
// this, the layout's `session.load()` fetchMe would be the first
|
|
// bound request and eat a `use_dpop_nonce` 401 → retry cycle.
|
|
seedNonceFromCookie();
|
|
|
|
await initI18n();
|
|
}
|