refactor(auth): remove development auth bypass

src/domain/auth/api/auth-api.ts

@@ -6,11 +6,6 @@
 import { API_PATHS } from "@/api/api-paths";
 import { apiPost } from "@/api/api";
 import { handleApiResponse } from "@/api/handle-api-response";
-import {
-  disableAuthBypassForSession,
-  getBypassAuthUser,
-  isAuthBypassEnabled,
-} from "@/lib/auth/auth-bypass";
 import { clearAuth, getAuthUser, isSessionValid, setAuthUser } from "@/lib/auth/auth-storage";
 import type {
   AuthUser,
@@ -27,18 +22,10 @@ export async function login(credentials: LoginCredentials): Promise<AuthUser> {
 }
 
 export async function logout(): Promise<void> {
-  if (isAuthBypassEnabled()) {
-    disableAuthBypassForSession();
-  }
-
   clearAuth();
 }
 
 export async function getSession(): Promise<AuthUser | null> {
-  if (isAuthBypassEnabled()) {
-    return getBypassAuthUser();
-  }
-
   const user = getAuthUser();
 
   if (!user || !isSessionValid(user)) {

src/lib/auth/auth-bypass.ts

@@ -1,36 +0,0 @@
-import type { AuthUser } from "@/domain/auth/types/auth-user";
-import { env } from "@/lib/env";
-
-const BYPASS_DISABLED_KEY = "auth-bypass-disabled";
-
-export function isAuthBypassEnabled(): boolean {
-  if (!env.isDev || !env.authBypass) {
-    return false;
-  }
-
-  if (typeof window !== "undefined" && sessionStorage.getItem(BYPASS_DISABLED_KEY)) {
-    return false;
-  }
-
-  return true;
-}
-
-export function getBypassAuthUser(): AuthUser {
-  return {
-    token: "dev-bypass-token",
-    expiration: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000).toISOString(),
-    email: "dev-bypass@seahaven.test",
-    userRoles: "Admin",
-    phoneNumber: "",
-    fullname: "Dev Bypass User",
-    id: "dev-bypass",
-  };
-}
-
-export function disableAuthBypassForSession(): void {
-  if (typeof window === "undefined") {
-    return;
-  }
-
-  sessionStorage.setItem(BYPASS_DISABLED_KEY, "1");
-}

src/lib/env.ts

@@ -1,5 +1,4 @@
 export const env = {
   apiUrl: import.meta.env.VITE_API_URL?.trim() || "/api",
   isDev: import.meta.env.DEV,
-  authBypass: import.meta.env.VITE_AUTH_BYPASS === "true",
 } as const;

src/vite-env.d.ts

@@ -3,8 +3,6 @@
 interface ImportMetaEnv {
   readonly VITE_API_URL: string;
   readonly VITE_API_TARGET: string;
-  readonly VITE_AUTH_BYPASS?: string;
-  readonly VITE_WO_TABLE_MOCK?: string;
 }
 
 interface ImportMeta {