Files
iD/modules/ui/account.js
Martin Raifer 91aa85a1c0 better handling of rate limited API map calls and other API errors
* retry all unsuccessful map calls after waiting 8 seconds (spinner continues to indicate loading state)
* also logged-in users can be rate limited: add dedicated error message
* don't log users out when requests return 401/403 (except on the _get own user data_ request, which would indicate that the oauth token was revoked): it's better to show the error message if a legitimate api call was actually unauthorized

closes #10299
2025-03-11 15:40:05 +01:00

109 lines
2.8 KiB
JavaScript

import { t } from '../core/localizer';
import { svgIcon } from '../svg/icon';
export function uiAccount(context) {
const osm = context.connection();
function updateUserDetails(selection) {
if (!osm) return;
if (!osm.authenticated()) { // logged out
render(selection, null);
} else {
osm.userDetails((err, user) => {
if (err && err.status === 401) {
// 401 Unauthorized
// cannot load own user data: there must be something wrong (e.g. API token was revoked)
// -> log out to allow user to reauthenticate
osm.logout();
}
render(selection, user);
});
}
}
function render(selection, user) {
let userInfo = selection.select('.userInfo');
let loginLogout = selection.select('.loginLogout');
if (user) {
userInfo
.html('')
.classed('hide', false);
let userLink = userInfo
.append('a')
.attr('href', osm.userURL(user.display_name))
.attr('target', '_blank');
// Add user's image or placeholder
if (user.image_url) {
userLink.append('img')
.attr('class', 'icon pre-text user-icon')
.attr('src', user.image_url);
} else {
userLink
.call(svgIcon('#iD-icon-avatar', 'pre-text light'));
}
// Add user name
userLink.append('span')
.attr('class', 'label')
.text(user.display_name);
// show "Log Out"
loginLogout
.classed('hide', false)
.select('a')
.text(t('logout'))
.on('click', e => {
e.preventDefault();
osm.logout();
// OAuth2's idea of "logout" is just to get rid of the bearer token.
// If we try to "login" again, it will just grab the token again.
// What a user probably _really_ expects is to logout of OSM so that they can switch users.
// So, we open a popup with a "Logout" button. After logging out, they can login again using
// the same popup window.
osm.authenticate(undefined, { switchUser: true });
});
} else { // no user
userInfo
.html('')
.classed('hide', true);
// show "Log In"
loginLogout
.classed('hide', false)
.select('a')
.text(t('login'))
.on('click', e => {
e.preventDefault();
osm.authenticate();
});
}
}
return function(selection) {
if (!osm) return;
selection.append('li')
.attr('class', 'userInfo')
.classed('hide', true);
selection.append('li')
.attr('class', 'loginLogout')
.classed('hide', true)
.append('a')
.attr('href', '#');
osm.on('change.account', () => updateUserDetails(selection));
updateUserDetails(selection);
};
}