api.ts

import axios from 'axios'
import { getCookie, setCookie } from 'cookies-next'
import { NAVIGATION } from '@/config'

const api = axios.create()

api.interceptors.request.use(
    (config) => {
        const token = getCookie('access')
        if (token) {
            if (!config.headers) {
                config.headers = axios.AxiosHeaders.from({})
            }
            config.headers.Authorization = `Bearer ${token}`
        }
        return config
    },
    (error) => Promise.reject(error),
)

api.interceptors.response.use(
    (response) => response,
    async (error) => {
        const originalRequest = error.config

        // Handle 401 Unauthorized - try to refresh token
        if (error.response?.status === 401 && !originalRequest._retry) {
            originalRequest._retry = true
            try {
                const response = await axios.post(NAVIGATION.AUTH_REFRESH)
                const { access } = response.data

                setCookie('access', access, { path: '/', sameSite: 'lax' })

                // Dispatch a custom event to notify the app about token refresh
                if (typeof window !== 'undefined') {
                    window.dispatchEvent(new CustomEvent('tokenRefreshed'))
                }

                if (!originalRequest.headers) {
                    originalRequest.headers = axios.AxiosHeaders.from({})
                }
                originalRequest.headers.Authorization = `Bearer ${access}`

                console.log('Token refreshed!')
                return api(originalRequest)
            } catch (refreshError) {
                console.error('Refresh token failed', refreshError)
                // Redirect to login if refresh fails
                if (typeof window !== 'undefined') {
                    window.location.href = '/'
                }
                return Promise.reject(refreshError)
            }
        }

        // Handle 403 Forbidden - redirect to login
        if (error.response?.status === 403) {
            console.error('Access forbidden - redirecting to login')
            if (typeof window !== 'undefined') {
                window.location.href = '/'
            }
        }

        return Promise.reject(error)
    },
)

export default api