);
}
return this.props.children;
}
}
const queryClient = new QueryClient({
defaultOptions: {
queries: {
staleTime: 1000 * 60,
retry: 1,
},
},
});
function StreamTokenSync() {
useStreamTokenSync();
return null;
}
function WebSocketProvider({ children }: { children: React.ReactNode }) {
useWebSocket();
usePrintProgressTitle();
return <>{children};
}
function ProtectedRoute({ children }: { children: React.ReactNode }) {
const { authEnabled, loading, user } = useAuth();
const location = useLocation();
if (loading) {
return
Loading...
;
}
if (authEnabled && !user) {
return ;
}
return <>{children};
}
function PermissionRoute({ permission, children }: { permission: string | string[]; children: React.ReactNode }) {
// Permission-gated route: any user with the given permission can enter, not
// just admins. Individual components below this guard apply their own
// per-action permission checks. Used for pages where delegation is supported
// (e.g. settings:read grants read-only access to Settings; specific tabs
// require their own permissions like users:read, groups:update, etc.).
const { authEnabled, loading, user, hasPermission } = useAuth();
const location = useLocation();
if (loading) {
return
Loading...
;
}
// Auth disabled → open access (backward compatibility)
if (!authEnabled) {
return <>{children};
}
if (!user) {
return ;
}
// A list lets in anyone holding at least one of the permissions.
const required = (Array.isArray(permission) ? permission : [permission]) as Parameters[0][];
if (!required.some((p) => hasPermission(p))) {
return ;
}
return <>{children};
}
function SetupRoute({ children }: { children: React.ReactNode }) {
const { authEnabled, loading } = useAuth();
if (loading) {
return
Loading...
;
}
// If auth is already enabled, redirect to login
// Otherwise, allow access to setup page (even if setup was completed before)
// This allows users to enable auth later if they skipped it during initial setup
if (authEnabled) {
return ;
}
return <>{children};
}
function App() {
return (
{/* ThemeProvider sits inside AuthProvider so its initial
``api.getSettings()`` fetch can wait for AuthContext to
resolve — otherwise it fires unconditionally on every
login page load and returns 401. ErrorBoundary uses
inline styles, so a missing theme on a crash screen is
not a regression. */}
{/* Standalone pages (login, camera, overlay, ...) wait here; pages
inside a layout wait in that layout, so its frame stays up. */}
}>
{/* Setup page - only accessible if auth not enabled */}
} />
{/* Login page */}
} />
{/* "Sign in with Bambuddy" for connected apps: standalone, no layout,
so it also fits inside the sidebar iframe of the app asking. */}
} />
{/* Camera page - standalone, no layout, no WebSocket (doesn't need real-time updates) */}
} />
{/* Stream overlay page - standalone for OBS/streaming embeds, no auth required */}
} />
{/* Cam Wall on its own URL (#2531). Outside ProtectedRoute because a
?token= kiosk has no session to protect; the page itself sends a
tokenless visitor to /login, and the backend gates the feed. */}
} />
{/* SpoolBuddy kiosk UI */}
}>
} />
} />
} />
} />
} />
{/* Calibration moved into the settings page; old bookmarks land there. */}
} />
{/* Main app with WebSocket for real-time updates */}
}>
} />
} />
} />
{/* Slicer Pipelines (#1425) — Pipelines tab lives on the
Print Queue page (Queue + History + Timeline +
Pipelines). Old standalone URL redirects. */}
} />
} />
} />
} />
} />
} />
} />
} />
} />
} />
} />
{/* The page was MakerWorld-only until Manyfold joined it (#1471); old links and bookmarks still land on that tab. */}
} />
} />
} />
} />
} />
} />
} />
} />
} />
} />
} />
} />
);
}
export default App;