feat(auth): render UI only for authenticated users

frontend/src/app/app.tsx

@@ -3,7 +3,7 @@ import { BrowserRouter, Route, Routes } from 'react-router-dom';
 import { ThemeProvider } from '@mui/material';
 import { Root } from '../pages/root';
 import { Search } from '../pages/search';
-import { Header } from '../features/auth';
+import { Header } from '../features/auth/header';
 import theme from '../features/theme';
 
 import './normalize.css';

frontend/src/features/auth/header/header.tsx

@@ -4,14 +4,14 @@ import { Button, IconButton } from '@mui/material';
 import SettingsIcon from '@mui/icons-material/Settings';
 import './header.scss';
 import { useNavigate } from 'react-router-dom';
-import useKeycloakAuth from './keycloak';
+import { useKeycloakAuth } from '../keycloak';
 
 const name = cn('Header');
 
 export const Header: React.FC = () => {
     const navigate = useNavigate();
 
-    const {authenticated, keycloak} = useKeycloakAuth();
+    const { authenticated, keycloak } = useKeycloakAuth();
 
     return (
         <header className={name()}>
@@ -36,7 +36,7 @@ export const Header: React.FC = () => {
                         Logout
                     </Button>
                     <IconButton
-                        sx={{alignSelf: 'center', ml: 2}}
+                        sx={{ alignSelf: 'center', ml: 2 }}
                         onClick={() => document.location = `${process.env.KEYCLOAK_URL}/realms/${process.env.KEYCLOAK_REALM}/account/`}
                     >
                         <SettingsIcon />
@@ -56,7 +56,7 @@ export const Header: React.FC = () => {
                 >
                     Registration
                 </Button>
-            </div>} 
+            </div>}
         </header>
     );
 }

frontend/src/features/auth/header/index.ts

@@ -0,0 +1 @@
+export * from './header';

frontend/src/features/auth/keycloak.ts

@@ -1,39 +1,44 @@
 import Keycloak from 'keycloak-js';
 import { useEffect, useState } from 'react';
 
-const kc = new Keycloak({
+const keycloakConfig = {
     url: process.env.KEYCLOAK_URL as string,
     realm: process.env.KEYCLOAK_REALM as string,
     clientId: process.env.KEYCLOAK_CLIENT as string,
-});
-
-const initKeycloak = () => {
-    return kc.init({
-        onLoad: 'check-sso',
-        silentCheckSsoRedirectUri: window.location.origin + "/silent-check-sso.html",
-        checkLoginIframe: false,
-        pkceMethod: 'S256',
-    });
 };
 
-export default function useKeycloakAuth() {
+const kc = new Keycloak(keycloakConfig);
+
+let keycloakInitialized = false; // Prevent multiple initializations
+
+const initKeycloak = async () => {
+    if (!keycloakInitialized) {
+        keycloakInitialized = true;
+        return kc.init({
+            onLoad: 'check-sso',
+            silentCheckSsoRedirectUri: window.location.origin + "/silent-check-sso.html",
+            checkLoginIframe: false,
+            pkceMethod: 'S256',
+        });
+    }
+    return kc.authenticated ?? false;
+};
+
+export function useKeycloakAuth() {
     const [authenticated, setAuthenticated] = useState<boolean | null>(null);
 
     useEffect(() => {
-        initKeycloak().then(auth => {
+        initKeycloak().then(auth => setAuthenticated(auth));
-            setAuthenticated(auth);
-        });
 
-        // Handle token expiration
+        // Ensure event listeners are only set once
-        if (kc.onTokenExpired) {
+        if (!kc.onTokenExpired) {
             kc.onTokenExpired = () => kc.updateToken().then(() => setAuthenticated(true));
         }
 
-        // Listen for authentication events
         kc.onAuthSuccess = () => setAuthenticated(true);
         kc.onAuthError = () => setAuthenticated(false);
         kc.onAuthLogout = () => setAuthenticated(false);
     }, []);
 
     return { authenticated, keycloak: kc };
-}
+}

frontend/src/features/auth/withAuth/index.ts

@@ -0,0 +1 @@
+export * from './withAuth';

frontend/src/features/auth/withAuth/withAuth.scss

@@ -0,0 +1,10 @@
+@use "../../../shared/styles/colors.scss" as *;
+
+.NotAuthenticated {
+    font-family: Roboto, Helvetica, Arial, sans-serif;
+    font-weight: 400;
+    font-size: 2rem;
+    text-align: center;
+    margin-top: 5rem;
+    color: $text-secondary;
+}

frontend/src/features/auth/withAuth/withAuth.tsx

@@ -0,0 +1,17 @@
+import { cn } from '@bem-react/classname';
+import { useKeycloakAuth } from '../keycloak';
+import React from 'react';
+
+import './withAuth.scss';
+
+const name = cn('NotAuthenticated');
+
+export function withAuth(Cmp: React.FC) {
+    return () => {
+        const { authenticated } = useKeycloakAuth();
+
+        return authenticated ? <Cmp /> : <div className={name()}>
+            Not authenticated
+        </div>
+    }
+}

frontend/src/pages/root.tsx

@@ -1,8 +1,9 @@
 import React from 'react';
 import { CreateRecord } from '../features/createRecord';
 import { Page } from '../shared/components/Page';
+import { withAuth } from '../features/auth/withAuth';
 
-export const Root: React.FC = () => {
+export const Root: React.FC = withAuth(() => {
     return (
         <div>
             <Page>
@@ -10,4 +11,4 @@ export const Root: React.FC = () => {
             </Page>
         </div>
     )
-}
+});

frontend/src/pages/search.tsx

@@ -1,9 +1,10 @@
 import React from 'react';
+import { withAuth } from '../features/auth/withAuth';
 
-export const Search: React.FC = () => {
+export const Search: React.FC = withAuth(() => {
     return (
         <div>
             Search
         </div>
     )
-}
+});