Authentication Pages

interface LoginRequest {
  email: string;
  password: string;
  remember_me?: boolean;
}
 
interface LoginResponse {
  access_token: string;
  refresh_token: string;
  user: {
    id: string;
    email: string;
    name: string;
    roles: string[];
    tenant_id: string;
  };
  mfa_required: boolean;
}

// Token storage in HTTP-only cookies (not localStorage)
const setTokens = (access: string, refresh: string) => {
  document.cookie = `access_token=${access}; Secure; SameSite=Strict; Path=/`;
  document.cookie = `refresh_token=${refresh}; Secure; SameSite=Strict; Path=/`;
};
 
// Automatic token refresh
apiClient.interceptors.response.use(
  (response) => response,
  async (error) => {
    if (error.response?.status === 401) {
      const newTokens = await refreshToken();
      return apiClient.request(error.config);
    }
    throw error;
  }
);

interface RegistrationRequest {
  email: string;
  password: string;
  name: string;
  invitation_code: string;
}