9f01e315c1
SSO settings page: resolve plan before the role check. A non-Enterprise org now renders the upsell state for every role instead of showing a "permission denied" panel to non-Owners for a feature their org can't use yet. manage:sso is only enforced once the org is actually entitled. Extracts EMPTY_SSO_STATUS and uses throwPermissionDenied(). Also removes the client-side SSO session fetch guard. It monkeypatched global window.fetch, which made it the initiator of every request and obfuscated the real call site on any 4xx/5xx. Session revocation is still enforced server-side on every authenticated request and surfaces as a logout redirect on the next navigation/refresh, so the client guard was UX-only and not worth the cross-cutting cost.
44 lines
1.1 KiB
TypeScript
44 lines
1.1 KiB
TypeScript
import { useEffect, useState } from "react";
|
|
|
|
type EventSourceOptions = {
|
|
init?: EventSourceInit;
|
|
event?: string;
|
|
disabled?: boolean;
|
|
};
|
|
|
|
/**
|
|
* Subscribe to an event source and return the latest event.
|
|
* @param url The URL of the event source to connect to
|
|
* @param options The options to pass to the EventSource constructor
|
|
* @returns The last event received from the server
|
|
*/
|
|
export function useEventSource(
|
|
url: string | URL,
|
|
{ event = "message", init, disabled }: EventSourceOptions = {}
|
|
) {
|
|
const [data, setData] = useState<string | null>(null);
|
|
|
|
useEffect(() => {
|
|
if (disabled) {
|
|
return;
|
|
}
|
|
|
|
// reset data if dependencies change
|
|
setData(null);
|
|
|
|
const eventSource = new EventSource(url, init);
|
|
eventSource.addEventListener(event ?? "message", handler);
|
|
|
|
function handler(event: MessageEvent) {
|
|
setData(event.data || "UNKNOWN_EVENT_DATA");
|
|
}
|
|
|
|
return () => {
|
|
eventSource.removeEventListener(event ?? "message", handler);
|
|
eventSource.close();
|
|
};
|
|
}, [url, event, init, disabled]);
|
|
|
|
return data;
|
|
}
|