OpenFlare/frontend/components/auth/require-auth.tsx

'use client';

import { useEffect, type ReactNode } from 'react';
import { useRouter } from 'next/navigation';
import { Loader2 } from 'lucide-react';

import { useUser } from '@/contexts/user-context';

type RequireAuthProps = {
  children: ReactNode;
  fallback?: ReactNode;
  minHeightClassName?: string;
};

/**
 * Guards page content until the session user is available.
 * Redirect to login is handled by the parent layout; this only covers the content slot.
 */
export function RequireAuth({
  children,
  fallback,
  minHeightClassName = 'min-h-[400px]',
}: RequireAuthProps) {
  const { user, loading } = useUser();

  if (loading) {
    return (
      fallback ?? (
        <div
          className={`flex items-center justify-center ${minHeightClassName}`}
        >
          <Loader2 className='size-6 animate-spin text-primary' />
        </div>
      )
    );
  }

  if (!user) {
    return null;
  }

  return <>{children}</>;
}

type RequireAdminAuthProps = {
  children: ReactNode;
};

/** Guards admin routes after the shared shell has rendered. */
export function RequireAdminAuth({ children }: RequireAdminAuthProps) {
  const { user, loading } = useUser();
  const router = useRouter();

  useEffect(() => {
    if (!loading && user && !user.is_admin) {
      router.replace('/403');
    }
  }, [loading, user, router]);

  if (loading) {
    return (
      <div className='flex min-h-[400px] items-center justify-center'>
        <Loader2 className='size-6 animate-spin text-primary' />
      </div>
    );
  }

  if (!user?.is_admin) {
    return null;
  }

  return <>{children}</>;
}