fix: redirect lost after Pangolin auth session timeout (#3001)

src/components/OrgPolicyRequired.tsx

@@ -11,24 +11,76 @@ import {
 import { Shield, ArrowRight } from "lucide-react";
 import Link from "next/link";
 import { useTranslations } from "next-intl";
+import { useRouter } from "next/navigation";
+import { api } from "@app/lib/api";
 
 type OrgPolicyRequiredProps = {
     orgId: string;
     policies: {
         requiredTwoFactor?: boolean;
+        maxSessionLength?: {
+            compliant: boolean;
+            maxSessionLengthHours: number;
+            sessionAgeHours: number;
+        };
+        passwordAge?: {
+            compliant: boolean;
+            maxPasswordAgeDays: number;
+            passwordAgeDays: number;
+        };
     };
+    redirectAfterAuth?: string;
 };
 
 export default function OrgPolicyRequired({
     orgId,
-    policies
+    policies,
+    redirectAfterAuth
 }: OrgPolicyRequiredProps) {
     const t = useTranslations();
+    const router = useRouter();
 
-    const policySteps = [];
+    const sessionExpired =
+        policies?.maxSessionLength &&
+        policies.maxSessionLength.compliant === false;
 
-    if (policies?.requiredTwoFactor === false) {
-        policySteps.push(t("enableTwoFactorAuthentication"));
+    function reauthenticate() {
+        api.post("/auth/logout")
+            .catch(() => {})
+            .then(() => {
+                const destination = redirectAfterAuth ?? `/${orgId}`;
+                router.push(destination);
+                router.refresh();
+            });
+    }
+
+    if (sessionExpired) {
+        return (
+            <Card className="w-full max-w-md">
+                <CardHeader className="text-center">
+                    <div className="mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-orange-100">
+                        <Shield className="h-6 w-6 text-orange-600" />
+                    </div>
+                    <CardTitle className="text-xl font-semibold">
+                        {t("sessionExpired")}
+                    </CardTitle>
+                    <CardDescription>
+                        {t("sessionExpiredReauthRequired")}
+                    </CardDescription>
+                </CardHeader>
+                <CardContent className="space-y-4">
+                    <div className="pt-4">
+                        <Button
+                            className="w-full"
+                            onClick={reauthenticate}
+                        >
+                            {t("reauthenticate")}
+                            <ArrowRight className="ml-2 h-4 w-4" />
+                        </Button>
+                    </div>
+                </CardContent>
+            </Card>
+        );
     }
 
     return (