feat: add operator landing and login

frontend/src/services/api/auth.ts

@@ -0,0 +1,20 @@
+import { apiGet, apiPost } from './client'
+
+export interface AuthSession {
+  authentication_required: boolean
+  authenticated: boolean
+  username: string | null
+  expires_at: string | null
+}
+
+export function getAuthSession(): Promise<AuthSession> {
+  return apiGet<AuthSession>('/api/v1/auth/session')
+}
+
+export function login(username: string, password: string): Promise<AuthSession> {
+  return apiPost<AuthSession>('/api/v1/auth/login', { username, password })
+}
+
+export function logout(): Promise<AuthSession> {
+  return apiPost<AuthSession>('/api/v1/auth/logout')
+}

frontend/src/services/api/client.ts

@@ -23,19 +23,23 @@ async function parseResponse<T>(response: Response): Promise<T> {
     const code = typeof payload?.error === "string" ? payload.error : legacyError?.code ?? "REQUEST_ERROR";
     const message = payload?.message ?? legacyError?.message ?? `Request failed (${response.status})`;
     const details = payload?.details ?? legacyError?.details;
+    if (response.status === 401 && code === "AUTHENTICATION_REQUIRED") {
+      window.dispatchEvent(new CustomEvent("geointel:session-expired"));
+    }
     throw new ApiHttpError(message, code, details);
   }
   return payload.data as T;
 }
 
 export async function apiGet<T>(path: string): Promise<T> {
-  const response = await fetch(apiUrl(path));
+  const response = await fetch(apiUrl(path), { credentials: "same-origin" });
   return parseResponse<T>(response);
 }
 
 export async function apiPost<T>(path: string, body?: object): Promise<T> {
   const response = await fetch(apiUrl(path), {
     method: "POST",
+    credentials: "same-origin",
     headers: { "Content-Type": "application/json" },
     body: body ? JSON.stringify(body) : undefined,
   });
@@ -45,6 +49,7 @@ export async function apiPost<T>(path: string, body?: object): Promise<T> {
 export async function apiPatch<T>(path: string, body?: object): Promise<T> {
   const response = await fetch(apiUrl(path), {
     method: "PATCH",
+    credentials: "same-origin",
     headers: { "Content-Type": "application/json" },
     body: body ? JSON.stringify(body) : undefined,
   });
@@ -54,6 +59,7 @@ export async function apiPatch<T>(path: string, body?: object): Promise<T> {
 export async function apiDelete<T>(path: string): Promise<T> {
   const response = await fetch(apiUrl(path), {
     method: "DELETE",
+    credentials: "same-origin",
   });
   return parseResponse<T>(response);
 }
@@ -61,6 +67,7 @@ export async function apiDelete<T>(path: string): Promise<T> {
 export async function apiMultipart<T>(path: string, form: FormData): Promise<T> {
   const response = await fetch(apiUrl(path), {
     method: "POST",
+    credentials: "same-origin",
     body: form,
   });
   return parseResponse<T>(response);