Initial commit with Email Import Wizard and Task Processor updates

paperless-frontend/src/auth/AuthContext.tsx

@@ -0,0 +1,96 @@
+import { createContext, useContext, useEffect, useState, type ReactNode } from 'react';
+import { getUser, login, logout, userManager, type User } from './oidc';
+import { triggerLoginRedirect } from './sessionRedirect';
+import { Permission, mapGroupsToPermissions } from './permissions';
+
+interface AuthContextType {
+  user: User | null;
+  isAuthenticated: boolean;
+  isLoading: boolean;
+  permissions: Permission[];
+  hasPermission: (permission: Permission) => boolean;
+  login: () => Promise<void>;
+  logout: () => Promise<void>;
+}
+
+const AuthContext = createContext<AuthContextType | null>(null);
+
+export function AuthProvider({ children }: { children: ReactNode }) {
+  const [user, setUser] = useState<User | null>(null);
+  const [permissions, setPermissions] = useState<Permission[]>([]);
+  const [isLoading, setIsLoading] = useState(true);
+
+  const updatePermissions = (u: User | null) => {
+    if (!u) {
+      setPermissions([]);
+      return;
+    }
+    const groups = (u.profile as any).groups as string[] | undefined;
+    setPermissions(mapGroupsToPermissions(groups));
+  };
+
+  useEffect(() => {
+    getUser()
+      .then((u) => {
+        setUser(u);
+        updatePermissions(u);
+      })
+      .finally(() => setIsLoading(false));
+
+    const onUserLoaded = (u: User) => {
+      console.log('OIDC: User loaded/renewed');
+      setUser(u);
+      updatePermissions(u);
+    };
+    const onUserUnloaded = () => {
+      console.log('OIDC: User unloaded');
+      setUser(null);
+      updatePermissions(null);
+    };
+    const onSilentRenewError = (err: Error) => {
+      console.error('OIDC: Silent renew failed:', err);
+      if (/login_required|interaction_required|invalid_grant/.test(err.message ?? '')) {
+        setUser(null);
+        updatePermissions(null);
+        triggerLoginRedirect();
+      }
+    };
+
+    userManager.events.addUserLoaded(onUserLoaded);
+    userManager.events.addUserUnloaded(onUserUnloaded);
+    userManager.events.addSilentRenewError(onSilentRenewError);
+
+    return () => {
+      userManager.events.removeUserLoaded(onUserLoaded);
+      userManager.events.removeUserUnloaded(onUserUnloaded);
+      userManager.events.removeSilentRenewError(onSilentRenewError);
+    };
+  }, []);
+
+  const hasPermission = (permission: Permission) => {
+    if (permissions.includes(Permission.MANAGE_ALL)) return true;
+    return permissions.includes(permission);
+  };
+
+  return (
+    <AuthContext.Provider
+      value={{
+        user,
+        isAuthenticated: !!user && !user.expired,
+        isLoading,
+        permissions,
+        hasPermission,
+        login,
+        logout,
+      }}
+    >
+      {children}
+    </AuthContext.Provider>
+  );
+}
+
+export function useAuth(): AuthContextType {
+  const ctx = useContext(AuthContext);
+  if (!ctx) throw new Error('useAuth must be used within AuthProvider');
+  return ctx;
+}