+}
diff --git a/src/components/auth/session-guard.tsx b/src/components/auth/session-guard.tsx
new file mode 100644
index 0000000..4a6fd48
--- /dev/null
+++ b/src/components/auth/session-guard.tsx
@@ -0,0 +1,51 @@
+'use client'
+
+import { ReactNode, useEffect, useState } from 'react'
+import { useQuery, useQueryClient } from '@tanstack/react-query'
+import axiosInstance from '@/axios/axiosInstance'
+import { apiErrorMessage, expireSession, getAccessToken, getRefreshToken, getSessionIdentity } from '@/lib/auth'
+
+export default function SessionGuard({ children }: { children: ReactNode }) {
+ const [ready, setReady] = useState(false)
+ const client = useQueryClient()
+ useEffect(() => {
+ if (!getAccessToken() && !getRefreshToken()) { expireSession(); return }
+ setReady(true)
+ const identity = getSessionIdentity()
+ let navigating = false
+ const changed = (event: StorageEvent) => {
+ if (navigating) return
+ if (event.key !== 'authSession' && event.key !== null && !(identity.startsWith('legacy:') && event.key === 'refresh' && event.newValue === null)) return
+ if (getSessionIdentity() === identity && getRefreshToken()) return
+ navigating = true
+ setReady(false)
+ client.clear()
+ if (!getRefreshToken()) expireSession()
+ else window.location.replace('/shop')
+ }
+ window.addEventListener('storage', changed)
+ return () => window.removeEventListener('storage', changed)
+ }, [client])
+ const query = useQuery({
+ queryKey: ['cuser-info-x1'],
+ enabled: ready,
+ queryFn: async () => {
+ const result = await axiosInstance.get('cuser/info/')
+ if (result.data?.role && result.data.role !== 'workspace_customer') {
+ expireSession()
+ throw new Error('این حساب به پنل مشتریان دسترسی ندارد.')
+ }
+ return result
+ },
+ retry: false,
+ staleTime: 30000,
+ refetchOnWindowFocus: true,
+ refetchInterval: 60000,
+ })
+ if (!ready || query.isLoading) return