Files
soroush.asadi 82d1cf8e9e
CI/CD / CI · API (dotnet build + test) (push) Successful in 46s
CI/CD / CI · Admin API (dotnet build) (push) Successful in 28s
CI/CD / CI · Dashboard (tsc) (push) Successful in 1m8s
CI/CD / CI · Admin Web (tsc) (push) Successful in 37s
CI/CD / CI · Website (tsc) (push) Successful in 44s
CI/CD / CI · Koja (tsc) (push) Successful in 50s
CI/CD / Deploy · all services (push) Successful in 2m50s
fix(auth): stop logging users out on every deploy
Diagnostic on prod confirmed the backend keeps sessions valid across deploys
(stable 64-char JWT key, 30-day access tokens, 62 refresh tokens persisting in
Redis with appendonly; redis/db never restart on deploy). The forced logout was
client-side:

1. The axios refresh path treated ANY refresh failure as "session gone" and
   nuked the tokens. During the ~30s API restart window of a deploy, the refresh
   POST gets a 502/timeout (transient) → user kicked to /login. Now refresh
   distinguishes a definitive 4xx (truly invalid/expired refresh → log out) from
   a transient network/5xx failure (reject + keep the session; retry later).
   Refresh tokens are opaque Redis GUIDs, so they survive even a key rotation —
   the only thing that was breaking sessions was this over-eager logout.

2. PWA service worker served a stale app shell after an update, pointing at JS
   chunks the new build replaced. Added skipWaiting + clientsClaim +
   cleanupOutdatedCaches and a NetworkFirst handler for navigations so the HTML
   and its chunk refs always match the live deploy; hashed static stays
   CacheFirst.

Net: a normal update no longer logs anyone out. tsc clean.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 20:42:38 +03:30

91 lines
2.7 KiB
TypeScript

import type { NextConfig } from "next";
import createNextIntlPlugin from "next-intl/plugin";
import withPWAInit from "@ducanh2912/next-pwa";
const withNextIntl = createNextIntlPlugin("./src/i18n/request.ts");
const withPWA = withPWAInit({
dest: "public",
cacheOnFrontEndNav: true,
aggressiveFrontEndNavCaching: true,
reloadOnOnline: true,
disable: process.env.NODE_ENV === "development",
workboxOptions: {
disableDevLogs: true,
// Pick up a new deploy promptly and never serve a stale shell that points
// at JS chunks the new build replaced (which looked like being logged out
// after every update).
skipWaiting: true,
clientsClaim: true,
cleanupOutdatedCaches: true,
runtimeCaching: [
// HTML navigations: always try the network first so the document and its
// chunk references match the currently-deployed build; fall back to cache
// only when offline.
{
urlPattern: ({ request }: { request: Request }) => request.mode === "navigate",
handler: "NetworkFirst",
options: {
cacheName: "pages",
networkTimeoutSeconds: 5,
expiration: { maxEntries: 50, maxAgeSeconds: 24 * 60 * 60 },
},
},
// Hashed static chunks are immutable per build — cache-first is safe and fast.
{
urlPattern: /\/_next\/static\//,
handler: "CacheFirst",
options: {
cacheName: "static-assets",
expiration: { maxEntries: 200, maxAgeSeconds: 30 * 24 * 60 * 60 },
},
},
// API: NetworkFirst — show cached data when offline
{
urlPattern: /\/api\//,
handler: "NetworkFirst",
options: {
cacheName: "api-data",
networkTimeoutSeconds: 5,
expiration: { maxEntries: 300, maxAgeSeconds: 10 * 60 },
},
},
// Menu images & media
{
urlPattern: /\.(?:png|jpg|jpeg|svg|gif|webp|ico)$/,
handler: "StaleWhileRevalidate",
options: {
cacheName: "media-cache",
expiration: { maxEntries: 300, maxAgeSeconds: 7 * 24 * 60 * 60 },
},
},
],
},
});
const adminWebOrigin =
process.env.ADMIN_WEB_ORIGIN ?? "http://localhost:3102";
const nextConfig: NextConfig = {
output: "standalone",
experimental: {
optimizePackageImports: ["recharts", "lucide-react"],
},
async redirects() {
return [
{
source: "/:locale(fa|ar|en)/admin",
destination: `${adminWebOrigin}/:locale/admin`,
permanent: false,
},
{
source: "/:locale(fa|ar|en)/admin/:path*",
destination: `${adminWebOrigin}/:locale/admin/:path*`,
permanent: false,
},
];
},
};
export default withPWA(withNextIntl(nextConfig));