Mode2Test AuthAndToken component complete: login/logout working, token persistence, background refresh active, tested and verified

Mode2Test/AuthAndToken/backend/auth-routes.ts

@@ -0,0 +1,82 @@
+import { Hono } from 'hono';
+import type { Context } from 'hono';
+import { getTokens, saveTokens, clearTokens, hasValidPbToken } from './token-service';
+
+// Authentication API routes
+// Endpoints for frontend to check auth status, get tokens, logout
+
+export function createAuthRoutes(): Hono {
+  const router = new Hono();
+
+  // PERMANENT: Check if user is authenticated
+  // Returns current auth status and which tokens are available
+  router.get('/status', async (c: Context) => {
+    const hasValid = await hasValidPbToken();
+    return c.json({
+      authenticated: hasValid,
+      pbTokenValid: hasValid,
+      message: hasValid ? 'User authenticated' : 'User not authenticated'
+    });
+  });
+
+  // PERMANENT: Get current tokens
+  // Frontend/backend can call this to get fresh token state
+  // Only returns tokens if PB token is valid (auth required)
+  router.get('/tokens', async (c: Context) => {
+    const hasValid = await hasValidPbToken();
+    if (!hasValid) {
+      return c.json({ error: 'Not authenticated' }, 401);
+    }
+
+    const tokens = await getTokens();
+    return c.json({
+      pbToken: tokens?.pbToken || null,
+      graphToken: tokens?.graphToken || null,
+      pbTokenExpiry: tokens?.pbTokenExpiry || null,
+      graphTokenExpiry: tokens?.graphTokenExpiry || null
+    });
+  });
+
+  // PERMANENT: Handle login callback from OAuth2
+  // Frontend sends back the PB auth response after successful login
+  // Stores both PB and Graph tokens
+  router.post('/login', async (c: Context) => {
+    try {
+      const body = await c.req.json() as any;
+      const pbToken = body.pbToken;
+      const graphToken = body.graphToken;
+
+      if (!pbToken) {
+        return c.json({ error: 'Missing pbToken' }, 400);
+      }
+
+      await saveTokens(pbToken, graphToken);
+      return c.json({
+        success: true,
+        message: 'Login successful',
+        authenticated: true
+      });
+    } catch (err) {
+      console.log('[AuthAndToken] Login error:', (err as Error)?.message);
+      return c.json({ error: 'Login failed' }, 500);
+    }
+  });
+
+  // PERMANENT: Logout - clear all tokens
+  // Called when user clicks logout
+  router.post('/logout', async (c: Context) => {
+    try {
+      await clearTokens();
+      return c.json({
+        success: true,
+        message: 'Logged out',
+        authenticated: false
+      });
+    } catch (err) {
+      console.log('[AuthAndToken] Logout error:', (err as Error)?.message);
+      return c.json({ error: 'Logout failed' }, 500);
+    }
+  });
+
+  return router;
+}