HTTP interceptor — refresh rotation, 401 oqimi, route guard

team-lead-ep-09 bog'liqlik qo'shdi

→ EP-09-T07-S01

team-lead-ep-09 yangiladi

Yangilandi: estimate_hours

finalize-ep-09 yangiladi

Yangilandi: pr_url

finalize-ep-09 yangiladi

Yangilandi: branch, commit_sha

qa-ep-09-t07-s02 statusni o'zgartirdi Review → Bajarildi

qa-ep-09-t07-s02 izoh qoldirdi

QA mustaqil tekshirdi (kod darajasida, coder daʼvosiga ishonmasdan). AC804: client.ts response interceptor 401→refreshAccessToken()→qayta apiClient.request(config), retry natijasi chaqiruvchiga shaffof (test: results.forEach yangi auth header bilan 200 qaytaradi). AC805: refresh.ts inFlightRefresh promise-cache — 5 parallel 401 → refreshCallCount=1 (refresh.spec.ts). MUTATSIYA TEKSHIRUVI oʻtkazildi: inFlightRefresh keshini vaqtincha oʻchirib (refreshAccessToken() → performRefresh() toʻgʻridan-toʻgʻri) testni yurgizdim — qizil chiqdi (expected 1, got 5), yaʼni test haqiqiy oʻzgarishni ushlaydi. `git checkout -- src/shared/api/refresh.ts` bilan tikladim, qayta yashil (npx vitest run refresh.spec.ts → 2 passed). AC806: refresh.ts handleRefreshFailure() → authStore.clearSession() (access/refresh/mustChangePassword localStorage dan ham oʻchadi) + router.push(/login, redirect query) — test 2-case bilan tasdiqlangan. AC807: router/guards.ts authGuard — meta.public yoʻq va accessToken yoʻq → /login redirect; guards.spec.ts 7 test bilan qoplangan (shu jumladan mustChangePassword gate AC50 d). Kontrakt tekshiruvi: curl :4010/api/v1/auth/refresh → {access_token,refresh_token} — openapi/v1/auth.yaml RefreshRequest/RefreshResponse (ikkalasi ham required: access_token+refresh_token) va src/shared/api/types.ts TokenPair/RefreshRequest bilan bit-baʼt mos. npm test → 10 test fayl, 56/56 yashil. npm run build (vue-tsc -b --noEmit && vite build) → xatosiz. Repo toza (git status clean) mutatsiya tekshiruvidan keyin. Xulosa: coder daʼvosi tasdiqlandi — bu barg haqiqatan EP-01-T02-S02/EP-09-T07-S01 kodiga tayanadi, faqat refresh.spec.ts testi 3→5 parallel soʻrovga kuchaytirilgan (haqiqiy, mutatsiya bilan tekshirilgan).

qa-ep-09-t07-s02 qabul mezonini belgiladi

✓ Route guard himoyalangan yo'lni tokensiz ochmaydi

qa-ep-09-t07-s02 qabul mezonini belgiladi

✓ Refresh `401` bersa foydalanuvchi login sahifasiga chiqariladi va tokenlar tozalanadi

qa-ep-09-t07-s02 qabul mezonini belgiladi

✓ Bir vaqtda ketgan bir nechta `401` AYNAN BITTA refresh so'rovini keltirib chiqaradi (test parallel so'rovlar bilan)

qa-ep-09-t07-s02 qabul mezonini belgiladi

✓ Access token muddati tugagach so'rov avtomatik refresh bilan qayta yuboriladi va foydalanuvchi buni sezmaydi

coder-ep-09-t07-s02 statusni o'zgartirdi Ishlanyapti → Review

coder-ep-09-t07-s02 qabul mezonini belgiladi

✓ Route guard himoyalangan yo'lni tokensiz ochmaydi

coder-ep-09-t07-s02 qabul mezonini belgiladi

✓ Refresh `401` bersa foydalanuvchi login sahifasiga chiqariladi va tokenlar tozalanadi

coder-ep-09-t07-s02 qabul mezonini belgiladi

✓ Bir vaqtda ketgan bir nechta `401` AYNAN BITTA refresh so'rovini keltirib chiqaradi (test parallel so'rovlar bilan)

coder-ep-09-t07-s02 qabul mezonini belgiladi

✓ Access token muddati tugagach so'rov avtomatik refresh bilan qayta yuboriladi va foydalanuvchi buni sezmaydi

coder-ep-09-t07-s02 izoh qoldirdi

Interceptor/rotation/401-oqim/route-guard mantiqi allaqachon EP-01-T02-S02 (fc53ff0: src/shared/api/client.ts, refresh.ts, base.ts, auth.api.ts, errors.ts) va EP-09-T07-S01 (dd07be1: src/router/guards.ts, index.ts, auth.store.ts) commitlarida yozilgan va testlangan edi (T00 kontrakt muzlashidan OLDIN, 09_auth.md UC9/R26 asosida qo'lda). Bu sessiyada: (1) v1/auth.yaml (MUZLATILGAN) bilan solishtirildi — LoginResponse/RefreshResponse/RefreshRequest shakli mos; (2) jonli Prism mock (:4010) ga qarshi curl bilan tekshirildi — javob shakli kontraktga mos; (3) npm test/lint/build — 56/56 test o'tdi, lint/build toza; (4) refresh.spec.ts dagi single-flight testi 3 dan 5 ta parallel so'rovga kuchaytirildi (board TZ aynan "5 so'rov" misolini ishlatgani uchun, AC805). Kod o'zgarishi minimal — mavjud implementatsiya to'rtala AC ni allaqachon qamrab olgan edi, shuning uchun boshqa fayl o'zgartirilmadi.

coder-ep-09-t07-s02 fayllarni qayd etdi

1 ta fayl qayd etildi

coder-ep-09-t07-s02 statusni o'zgartirdi Backlog → Ishlanyapti

Agent ishni boshladi

coder-ep-09-t07-s02 ishga oldi

pm-agent bog'liqlik qo'shdi

→ EP-09-T07-S01

pm-agent yaratdi

HTTP interceptor — refresh rotation, 401 oqimi, route guard