Removed setUserLockout from PartnerUI

2026-10-24 11:39:47 +02:00
parent 3316fc0275
commit 7220700bac
6 changed files with 67 additions and 177 deletions
@@ -17,7 +17,6 @@ import { AccountActivationModal } from '../components/auth/AccountActivationModa
 import { NonPartnerAccessDeniedModal } from '../components/auth/NonPartnerAccessDeniedModal';
 import { SessionExpiredModal } from '../components/auth/SessionExpiredModal';
 import { encodeHashIdSync } from '../services/toolsService';
-import { verifyTenantLockout, clearTenantLockoutCache } from '../services/tenantLockoutService';
 import {
  onSessionExpired,
  triggerSessionExpired,
@@ -510,35 +509,6 @@ export const AuthProvider: React.FC<{ children: ReactNode }> = ({ children }) =>
                return;
              }

-              // Step 3: Verify tenant lockout using the HashId-encoded tenant ID
-              const effectiveTenantId =
-                parsedTenantId ??
-                syncResult.data?.tenantId ??
-                syncResult.data?.organisationId ??
-                tenantClaimValues.tenantId;
-
-              const tenantLockoutResult = await verifyTenantLockout(effectiveTenantId, tenantClaim);
-
-              if (!tenantLockoutResult.isActive) {
-                setIsPendingActivation(true);
-                setIsSynced(false);
-                setActivationError(tenantLockoutResult.errorMessage || 'Tenant is inactive or not found');
-                setIsLoading(false);
-                return;
-              }
-
-              if (tenantLockoutResult.tenant?.name) {
-                profile.tenant = tenantLockoutResult.tenant.name;
-                setTenantName(tenantLockoutResult.tenant.name);
-              }
-              if (tenantLockoutResult.tenant?.id !== undefined && !profile.tenant_id) {
-                const numericTid = Number(tenantLockoutResult.tenant.id);
-                if (!isNaN(numericTid) && numericTid > 0) {
-                  profile.tenant_id = numericTid;
-                  setTenantId(numericTid);
-                }
-              }
-
              setUser({ ...profile });
              localStorage.setItem(LOCAL_STORAGE_USER_KEY, JSON.stringify(profile));

@@ -669,39 +639,6 @@ export const AuthProvider: React.FC<{ children: ReactNode }> = ({ children }) =>
                return;
              }

-              // Step 3: Verify tenant lockout using HashId-encoded tenant ID
-              const effectiveTenantId =
-                storedTenantId ??
-                syncResult.data?.tenantId ??
-                syncResult.data?.organisationId ??
-                tenantClaimValues.tenantId;
-
-              const tenantLockoutResult = await verifyTenantLockout(
-                effectiveTenantId,
-                storedTenantClaim,
-                hadPendingActivation
-              );
-
-              if (!tenantLockoutResult.isActive) {
-                setIsPendingActivation(true);
-                setIsSynced(false);
-                setActivationError(tenantLockoutResult.errorMessage || 'Tenant is inactive or not found');
-                return;
-              }
-
-              if (tenantLockoutResult.tenant?.name) {
-                if (resolvedUser) {
-                  resolvedUser.tenant = tenantLockoutResult.tenant.name;
-                }
-                setTenantName(tenantLockoutResult.tenant.name);
-              }
-              if (tenantLockoutResult.tenant?.id !== undefined && resolvedUser && !resolvedUser.tenant_id) {
-                const numericTid = Number(tenantLockoutResult.tenant.id);
-                if (!isNaN(numericTid) && numericTid > 0) {
-                  resolvedUser.tenant_id = numericTid;
-                  setTenantId(numericTid);
-                }
-              }
              if (resolvedUser) {
                setUser({ ...resolvedUser });
                localStorage.setItem(LOCAL_STORAGE_USER_KEY, JSON.stringify(resolvedUser));
@@ -746,8 +683,7 @@ export const AuthProvider: React.FC<{ children: ReactNode }> = ({ children }) =>
  const syncUserSession = async (force = true): Promise<UserSyncResult> => {
    try {
      await loadRuntimeConfig();
-      clearTenantLockoutCache();
-      if (sub) {
+            if (sub) {
        clearCachedUserRbac(sub);
      }

@@ -793,41 +729,7 @@ export const AuthProvider: React.FC<{ children: ReactNode }> = ({ children }) =>
        localStorage.setItem(LOCAL_STORAGE_CLAIMS_KEY, JSON.stringify(resolved.claims));
      } catch {}

-      const tenantClaimValues = extractTenantClaimValues(claims, accessToken);
-      const effectiveTenantId =
-        currentTenantId ??
-        result.data?.tenantId ??
-        result.data?.organisationId ??
-        tenantClaimValues.tenantId;
-      const effectiveTenantClaim = currentTenantClaim || tenantClaimValues.tenant || undefined;
-
-      // Step 3: Verify tenant lockout using HashId-encoded tenant ID
-      const tenantLockoutResult = await verifyTenantLockout(
-        effectiveTenantId,
-        effectiveTenantClaim,
-        true
-      );
-      if (!tenantLockoutResult.isActive) {
-        const msg = tenantLockoutResult.errorMessage || 'Tenant is not Active. Lockout active.';
-        setIsPendingActivation(true);
-        setIsSynced(false);
-        setActivationError(msg);
-        return {
-          success: false,
-          isActivationPending: true,
-          errorMessage: msg,
-        };
-      }
-
-      if (tenantLockoutResult.tenant?.name) {
-        setTenantName(tenantLockoutResult.tenant.name);
-      }
-      if (tenantLockoutResult.tenant?.id !== undefined && !tenantId) {
-        const numericTid = Number(tenantLockoutResult.tenant.id);
-        if (!isNaN(numericTid) && numericTid > 0) {
-          setTenantId(numericTid);
-        }
-      }
+      // Partner user verified successfully

      setActivationPending(false);
      setIsPendingActivation(false);
@@ -873,8 +775,7 @@ export const AuthProvider: React.FC<{ children: ReactNode }> = ({ children }) =>
      localStorage.removeItem(LOCAL_STORAGE_SUB_KEY);
      localStorage.removeItem(LOCAL_STORAGE_CLAIMS_KEY);
      clearUserSyncInBrowser();
-      clearTenantLockoutCache();
-      setUser(null);
+            setUser(null);
      setSub('');
      setClaims({});
      setTenantId(null);
@@ -1585,13 +1585,7 @@ export const deleteUserClaim = async (targetUserId: string, claimId: string | nu
  await apiClient.delete(`/v1/api/users/${targetUserId}/claims/${claimId}`);
 };

-export const forceLogoutUser = async (userId: string): Promise<void> => {
-  await apiClient.put(`/v1/api/users/${userId}/session/logout`);
-};
-
-export const setUserLockout = async (userId: string, disable: boolean): Promise<void> => {
-  await apiClient.put(`/v1/api/users/${userId}/session/lockout/${disable}`);
-};
+// Administrative functions (forceLogoutUser, setUserLockout) removed from PartnerUI

 import {
  syncUserAccount,
@@ -189,19 +189,7 @@ async function executeBackendSync(
  userSub?: string,
  profile?: UserSyncProfile
 ): Promise<{ endpoint: string; data?: any }> {
-  const rawTenantId = profile?.tenant_id ?? (profile as any)?.tenantId;
-  const parsedTenantId =
-    rawTenantId !== undefined && rawTenantId !== null && rawTenantId !== ''
-      ? Number(rawTenantId)
-      : undefined;
-
-  const resolvedOrgId =
-    parsedTenantId !== undefined
-      ? parsedTenantId
-      : profile?.organisationId !== undefined && profile?.organisationId !== null && profile?.organisationId !== ''
-      ? Number(profile.organisationId)
-      : undefined;
-
+  const endpoint = '/v1/api/integration/sync';
  const payload = {
    id: userSub || profile?.id || profile?.sub,
    sub: userSub || profile?.sub,
@@ -209,40 +197,25 @@ async function executeBackendSync(
    name: profile?.name || undefined,
    role: profile?.role || undefined,
    tenant: profile?.tenant || undefined,
-    tenant_id: parsedTenantId,
-    organisationId: resolvedOrgId,
+    tenant_id: profile?.tenant_id,
+    organisationId: profile?.organisationId,
  };

-  let lastError: any = null;
-
-  for (const endpoint of USER_SYNC_CANDIDATE_ENDPOINTS) {
-    try {
-      let res;
-      if (endpoint === '/v1/api/integration/sync') {
-        try {
-          res = await apiClient.post(endpoint, payload);
-        } catch (postErr: any) {
-          const errStatus = postErr?.response?.status;
-          if (errStatus === 400 || errStatus === 415 || errStatus === 422) {
-            res = await apiClient.post(endpoint, {});
-          } else {
-            throw postErr;
-          }
-        }
-      } else {
-        res = await apiClient.post(endpoint, payload);
-      }
-      return { endpoint, data: res?.data };
-    } catch (err: any) {
-      lastError = err;
-      const status = err?.response?.status;
-      if (status === 401 || status === 403 || status === 423) {
+  try {
+    const res = await apiClient.post(endpoint, payload);
+    return { endpoint, data: res?.data };
+  } catch (err: any) {
+    const status = err?.response?.status;
+    if (status === 400 || status === 415 || status === 422) {
+      try {
+        const resFallback = await apiClient.post(endpoint, {});
+        return { endpoint, data: resFallback?.data };
+      } catch (fallbackErr) {
        throw err;
      }
    }
+    throw err;
  }
-
-  throw lastError || new Error('Failed to reach user sync endpoint');
 }

 export async function syncUserAccount(