Harden web session handling and production config

2026-04-07 19:48:48 -05:00
parent 890f3fff2b
commit 0292b2e85a
9 changed files with 96 additions and 20 deletions
@@ -15,7 +15,6 @@ export function AuthProvider({ children }) {
        .then(({ data }) => setUser(data.data.user))
        .catch(() => {
          localStorage.removeItem('accessToken');
-          localStorage.removeItem('refreshToken');
        })
        .finally(() => setLoading(false));
    } else {
@@ -25,18 +24,15 @@ export function AuthProvider({ children }) {

  const login = useCallback(async (email, password) => {
    const { data } = await apiLogin({ email, password });
-    const { accessToken, refreshToken, user: userData } = data.data;
+    const { accessToken, user: userData } = data.data;
    localStorage.setItem('accessToken', accessToken);
-    localStorage.setItem('refreshToken', refreshToken);
    setUser(userData);
    return userData;
  }, []);

  const logout = useCallback(async () => {
-    const refreshToken = localStorage.getItem('refreshToken');
-    try { await apiLogout(refreshToken); } catch { /* ignore */ }
+    try { await apiLogout(); } catch { /* ignore */ }
    localStorage.removeItem('accessToken');
-    localStorage.removeItem('refreshToken');
    setUser(null);
  }, []);