authorized fix keycloak sidebarItem

2025-07-08 14:07:05 +07:00
parent 78b75999ea
commit 25f4b8cac7
16 changed files with 1183 additions and 969 deletions
@@ -1,12 +1,54 @@
-const userInfoStores = useUserInfoStore()
-const { getUserInfoStore } = storeToRefs(useUserInfoStore())
-const { data } = useAuth()
-export default defineNuxtRouteMiddleware((to, from) => {
-    console.log(data.value)
-    if (data.value === null || !data.value) {
-        navigateTo('/sample-page')
-    } else {
-        navigateTo('/sambelPage_copy')
-        console.log('berhasil login')
+import {getTimetoMilis, timestampToDate} from "~/utils/helper";
+import {signOut} from "next-auth/react";
+
+export default defineNuxtRouteMiddleware(async (to, from) => {
+  if (process.server) return;
+  try {
+    const sess = await useSessionLogin('getSess');
+    console.log('session data:', sess);
+    // console.log('route auth requirement:', timestampToDate(sess?.expires_in?.timestamps, 'id-ID'));
+    // const timeMilis= sess?.expires_in?.timestamps*1000
+    // console.log(timeMilis)
+    // console.log('route auth requirement:', new Date(timeMilis));
+    // console.log('milis:', timestampToDate(sess?.expires_in?.timestamps,'id-ID'));
+    // console.log('milis:', timestampToDate(getTimetoMilis(),'id-ID'));
+
+    // Jika session tidak ada atau sudah expired
+
+    if(!sess || getTimetoMilis()>= sess?.user_payload?.expires?.expires_at){
+      if(to.path!=='/auth/login'){
+        await signOut()
+        return navigateTo({
+          path: "/auth/login",
+          query: {
+            ...to.query,
+            reason: "auth_required",
+            continue: "true"
+          }
+        });
+      }
+      return;
    }
-})
+
+
+    // Optional: Pengecekan tipe user jika diperlukan
+    // if (to.meta.auth && to.meta.auth !== sess?.user_payload?.typeUser) {
+    const metaRoles=to.meta?.roles;
+    console.log(metaRoles);
+    if (!to.meta || !metaRoles.includes(sess?.user_payload?.typeUser)) {
+      return navigateTo('/auth/401');
+    }
+
+  } catch (err) {
+    console.error('Session check failed:', err);
+    if (to.path !== '/auth/login') {
+      return navigateTo({
+        path: '/auth/login',
+        query: {
+          returnUrl: to.fullPath,
+          reason: 'session check failed'
+        }
+      });
+    }
+  }
+});