frontend/src/hooks/useAuth.tsx

import { useEffect, useState } from 'react';
import { useNavigate } from 'react-router-dom';

const tokenUrl = `${import.meta.env.VITE_API_URL}/api/users/token`;
const checktokenUrl = `${import.meta.env.VITE_API_URL}/api/users/checktoken`;
const refreshTokenUrl = `${import.meta.env.VITE_API_URL}/api/users/refreshtoken`;

export const checktoken = async (): Promise<boolean> => {
  try {
    let response = await fetch(checktokenUrl, {
      method: 'GET',
      headers: {
        'Content-Type': 'application/json',
      },
      credentials: 'include',
    });
    let data = await response.json();
    if (data.status === 'success') {
      return true;
    }
    response = await fetch(refreshTokenUrl, {
      method: 'GET',
      headers: {
        'Content-Type': 'application/json',
      },
      credentials: 'include',
    });
    data = await response.json();
    return data.status === 'success';
  } catch (error) {
    console.error(error);
    return false;
  }
};

const useAuth = () => {
  const navigate = useNavigate();

  const [isAuthenticated, setIsAuthenticated] = useState(false);

  useEffect(() => {
    checktoken()
      .then(result => setIsAuthenticated(result))
      .catch(console.error);
  }, []);

  const login = async (username: string, password: string, totp: string) => {
    const data = JSON.stringify({ username, password, totp });

    try {
      const response = await fetch(tokenUrl, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        credentials: 'include',
        body: data,
      });
      const responseData = await response.json();
      if (responseData.status === 'success') {
        setIsAuthenticated(true);
        navigate('/audits', { replace: true });
        return true;
      }
      return false;
    } catch (error) {
      console.error(error);
      return false;
    }
  };

  const logout = async () => {
    const path = '/api/users/refreshtoken';

    try {
      const response = await fetch(import.meta.env.VITE_API_URL + path, {
        method: 'DELETE',
        headers: {
          'Content-Type': 'application/json',
        },
        credentials: 'include',
      });
      const data = await response.json();
      if (data.status === 'success') {
        setIsAuthenticated(false);
        navigate('/login', { replace: true });
      }
    } catch (error) {
      console.error(error);
    }
  };

  const register = async (
    username: string,
    firstname: string,
    lastname: string,
    password: string,
  ) => {
    const data = JSON.stringify({
      username,
      firstname,
      lastname,
      password,
      role: 'admin',
    });

    try {
      const response = await fetch('/api/users/init', {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        credentials: 'include',
        body: data,
      });
      const responseData = await response.json();
      if (responseData.status === 'success') {
        navigate('/login', { replace: true });
        return true;
      }
    } catch (error) {
      console.error(error);
    }
    return false;
  };

  return {
    isAuthenticated,
    login,
    logout,
    checktoken,
    register,
  };
};

export default useAuth;