DiunaBI/DiunaBI.UI.Shared/Handlers/UnauthorizedResponseHandler.cs

using Microsoft.AspNetCore.Components;
using Microsoft.Extensions.DependencyInjection;
using DiunaBI.UI.Shared.Services;

namespace DiunaBI.UI.Shared.Handlers;

public class UnauthorizedResponseHandler : DelegatingHandler
{
    private readonly IServiceProvider _serviceProvider;

    public UnauthorizedResponseHandler(IServiceProvider serviceProvider)
    {
        _serviceProvider = serviceProvider;
    }

    protected override async Task<HttpResponseMessage> SendAsync(
        HttpRequestMessage request,
        CancellationToken cancellationToken)
    {
        var response = await base.SendAsync(request, cancellationToken);

        // Check if response is 401 Unauthorized
        if (response.StatusCode == System.Net.HttpStatusCode.Unauthorized)
        {
            Console.WriteLine("⚠️ 401 Unauthorized response detected - clearing credentials and redirecting to login");

            try
            {
                // Create a scope to get scoped services
                using var scope = _serviceProvider.CreateScope();
                var authService = scope.ServiceProvider.GetRequiredService<AuthService>();
                var navigationManager = scope.ServiceProvider.GetRequiredService<NavigationManager>();

                // Clear authentication
                await authService.ClearAuthenticationAsync();

                // Navigate to login page with session expired message
                navigationManager.NavigateTo("/login?sessionExpired=true", forceLoad: true);
            }
            catch (InvalidOperationException ex)
            {
                // NavigationManager may not be initialized in all contexts (e.g., during initial load)
                // Log the error and allow the 401 response to propagate to the caller
                Console.WriteLine($"⚠️ Cannot navigate to login - NavigationManager not initialized: {ex.Message}");
                Console.WriteLine("⚠️ 401 response will be handled by the calling component");

                // Still try to clear authentication if we can get the AuthService
                try
                {
                    using var scope = _serviceProvider.CreateScope();
                    var authService = scope.ServiceProvider.GetRequiredService<AuthService>();
                    await authService.ClearAuthenticationAsync();
                }
                catch (Exception clearEx)
                {
                    Console.WriteLine($"⚠️ Could not clear authentication: {clearEx.Message}");
                }
            }
            catch (Exception ex)
            {
                // Log any other unexpected errors
                Console.WriteLine($"❌ Error handling 401 response: {ex.Message}");
            }
        }

        return response;
    }
}