mirror of
https://github.com/multica-ai/multica.git
synced 2026-07-23 18:17:44 +02:00
f3d20fd50d
The NoAccessPage button previously only called nav.push('/login'),
leaving the session cookie, React Query cache, and local auth state
intact. AuthInitializer then silently re-authenticates and bounces the
user right back to the workspace URL — the button appeared broken.
Extract the logout flow (clear per-workspace storage, clear cookies,
clear multica_tabs, queryClient.clear(), authStore.logout(), navigate
to /login) into a shared useLogout() hook in packages/views/auth/.
AppSidebar and NoAccessPage both use it now; any future logout entry
point can too.
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
64 lines
2.7 KiB
TypeScript
64 lines
2.7 KiB
TypeScript
"use client";
|
|
|
|
import { useCallback } from "react";
|
|
import { useQueryClient } from "@tanstack/react-query";
|
|
import { useAuthStore } from "@multica/core/auth";
|
|
import { workspaceKeys } from "@multica/core/workspace/queries";
|
|
import { clearWorkspaceStorage, defaultStorage } from "@multica/core/platform";
|
|
import { paths } from "@multica/core/paths";
|
|
import type { Workspace } from "@multica/core/types";
|
|
import { useNavigation } from "../navigation";
|
|
|
|
/**
|
|
* Performs a complete logout: clears per-workspace client storage, legacy
|
|
* cookies, the desktop tab state, the entire React Query cache, the
|
|
* in-memory auth store, and finally navigates to /login. Wraps what was
|
|
* previously duplicated in app-sidebar's logout handler so NoAccessPage's
|
|
* "Sign in as a different user" and any future entry point can use the
|
|
* same flow.
|
|
*
|
|
* Without a unified logout, callers that only do `navigate('/login')`
|
|
* leave the auth cookie + React Query cache + local storage intact —
|
|
* AuthInitializer then silently re-authenticates the user on the login
|
|
* page and redirects them back where they came from.
|
|
*/
|
|
export function useLogout() {
|
|
const queryClient = useQueryClient();
|
|
const authLogout = useAuthStore((s) => s.logout);
|
|
const { push } = useNavigation();
|
|
|
|
return useCallback(() => {
|
|
// Clear workspace-scoped storage for every workspace this user has
|
|
// access to, BEFORE clearing the React Query cache (which holds the
|
|
// workspace list). Otherwise per-workspace drafts/chat/etc would leak
|
|
// to the next user on this device.
|
|
const cachedWorkspaces =
|
|
queryClient.getQueryData<Workspace[]>(workspaceKeys.list()) ?? [];
|
|
for (const ws of cachedWorkspaces) {
|
|
clearWorkspaceStorage(defaultStorage, ws.slug);
|
|
}
|
|
|
|
// Clear the last-workspace-slug cookie. Otherwise on a shared device
|
|
// the next user gets redirected by the proxy to the previous user's
|
|
// last workspace, then bounced to NoAccessPage — confusing.
|
|
if (typeof document !== "undefined") {
|
|
document.cookie =
|
|
"last_workspace_slug=; path=/; max-age=0; SameSite=Lax";
|
|
}
|
|
|
|
// Clear desktop tab state. Tab paths can contain workspace slugs and
|
|
// issue UUIDs that must not survive across user sessions on a shared
|
|
// machine. No-op on web (web doesn't write this key).
|
|
defaultStorage.removeItem("multica_tabs");
|
|
|
|
queryClient.clear();
|
|
authLogout();
|
|
|
|
// Navigate to /login explicitly. authLogout() clears state but doesn't
|
|
// move the URL — without this the caller might be on a workspace URL
|
|
// which renders null (layout gates on user) and leaves the user
|
|
// stuck on a blank page.
|
|
push(paths.login());
|
|
}, [queryClient, authLogout, push]);
|
|
}
|