App Auth: Complete End-User Authentication & Role-Based Access Control

import { useState, useEffect, createContext, useContext } from 'react';

const BASE_URL = 'https://apps-manager.in';
const APP_PUBLIC_ID = 'app_pub_789456';

interface User {
  _id: string;
  email: string;
  name: string;
  role: string;
}

export function useAppAuth() {
  const [user, setUser] = useState<User | null>(null);
  const [token, setToken] = useState<string | null>(() => localStorage.getItem('am_user_token'));
  const [loading, setLoading] = useState(true);

  // Check existing session
  useEffect(() => {
    async function fetchMe() {
      if (!token) {
        setLoading(false);
        return;
      }
      try {
        const res = await fetch(`${BASE_URL}/apps/${APP_PUBLIC_ID}/auth/me`, {
          headers: { 'Authorization': `Bearer ${token}` },
        });
        if (res.ok) {
          const data = await res.json();
          setUser(data.user);
        } else {
          logout();
        }
      } catch (err) {
        logout();
      } finally {
        setLoading(false);
      }
    }
    fetchMe();
  }, [token]);

  const login = async (email: string, password: string) => {
    const res = await fetch(`${BASE_URL}/apps/${APP_PUBLIC_ID}/auth/login`, {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({ email, password }),
    });
    const data = await res.json();
    if (!res.ok) throw new Error(data.message || 'Login failed');

    localStorage.setItem('am_user_token', data.token);
    setToken(data.token);
    setUser(data.user);
    return data.user;
  };

  const logout = () => {
    localStorage.removeItem('am_user_token');
    setToken(null);
    setUser(null);
  };

  return { user, token, loading, login, logout };
}