all kinds of frontend sec. adaptations

auth/AuthProvider.tsx

@@ -1,4 +1,5 @@
-import { createContext, useContext, useEffect, useMemo, useState, PropsWithChildren } from 'react'
+import { createContext, useContext, useEffect, useMemo, useState } from 'react'
+import type { PropsWithChildren } from 'react'
 import { userManager } from './oidc'
 import type { User } from 'oidc-client-ts'
 
@@ -42,13 +43,19 @@ userManager.events.removeAccessTokenExpired(onExpired)
 
 
 // Spegla token till sessionStorage så ky kan läsa den
+// i useEffect som speglar token:
 useEffect(() => {
-const token = user?.access_token ?? null
-if (token) sessionStorage.setItem('access_token', token)
-else sessionStorage.removeItem('access_token')
+  const token = user?.access_token ?? null
+  if (token) {
+    sessionStorage.setItem('access_token', token)
+    console.debug('access_token set')
+  } else {
+    sessionStorage.removeItem('access_token')
+  }
 }, [user])
 
 
+
 const api: AuthCtx = useMemo(() => ({
 user,
 isAuthenticated: !!user && !user.expired,

auth/oidc.ts

@@ -1,6 +1,6 @@
 import { UserManager, WebStorageStateStore, Log, type UserManagerSettings } from 'oidc-client-ts'
 
-
+console.log('AUTHORITY:', import.meta.env.VITE_OIDC_AUTHORITY)
 const settings: UserManagerSettings = {
 authority: import.meta.env.VITE_OIDC_AUTHORITY!,
 client_id: import.meta.env.VITE_OIDC_CLIENT_ID!,