kobotoolbox / kpi / 38426451352

84%

master: 76%

push

github

feat(frontend): auth status tracking DEV-1860 (#7656)

### 📣 Summary

Signing in now returns you to the page you were trying to reach, and the
app notices when your session changes in another tab. Hidden behind
feature flag.

### 💭 Notes

Ports allauth's `determineAuthChangeEvent` / `flow2path` from their
react-spa example.

Changes here:

- **`jsapp/js/auth/authStatus.ts`** — reads `GET /auth/session` into a
flat `AuthStatus`
- **`jsapp/js/auth/AuthChangeRedirector.tsx`** — reacts to the auth
status changes and causes a redirect - mounted twice, once per app tree
(`app.jsx`, `auth/routes.tsx`)
- **`jsapp/js/auth/authRedirects.ts`** — a switch saying where each
event leads
- **`jsapp/js/auth/nextUrl.ts`** — reads and writes `?next=` with some
safety
- **`jsapp/js/auth/flowRoutes.ts`** — flow → screen mappings
- **`jsapp/js/auth/authGate.ts`** — the guard decision as testable
function; used in **`requireAuth.tsx`** / **`RequireAnonymous.tsx`**
- **`jsapp/js/auth/routes.tsx`** — `/auth/authenticate/totp` and
`/auth/authenticate/recovery-codes` now redirect to the login screen
instead of rendering a placeholder. These are our SPA routes; Django's
own `/accounts/2fa/authenticate/` is untouched

### 👀 Preview steps

1. ℹ️ have an account, a project, and `authRedesignEnabled` turned on
2. sign out, then paste a deep link into the address bar — e.g. your
project's **Project → Settings** page, `/#/forms/<uid>/settings`
3. 🔴 [on main] you land on the login screen and, after signing in, on
the project list — you get to go find that page again yourself
4. 🟢 [on PR] you land on `/#/auth/login?next=…` with the project
settings path in `next`, and signing in drops you straight on **Project
→ Settings**
5. now open the app in two tabs, both signed in
6. sign out in tab 1, then switch back to tab 2 — focusing it is what
makes it re-check the session
7. 🟢 tab 2 sends you to `/#/auth/login` with `?next=` set to whatever
you were looking at — no ghost session, no half-l... (continued)

10553 of 13884 branches covered (76.01%)

33585 of 40312 relevant lines covered (83.31%)

5.5 hits per line