From c3595a1bac0a46761f1f9381da009b2d17c792f5 Mon Sep 17 00:00:00 2001
From: Agent Zero <agent@media-on.de>
Date: Sun, 16 Aug 2026 23:32:07 +0200
Subject: [PATCH] fix(auth): useLogin maps login response to User,
 ProtectedRoute calls useAuth()

---
 frontend/src/api/auth.ts               | 13 ++++++++++++-
 frontend/src/routes/ProtectedRoute.tsx |  4 ++++
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/frontend/src/api/auth.ts b/frontend/src/api/auth.ts
index eec4f03..e247da4 100644
--- a/frontend/src/api/auth.ts
+++ b/frontend/src/api/auth.ts
@@ -26,7 +26,18 @@ export function useLogin() {
     mutationFn: (payload: LoginPayload) =>
       apiPost('/auth/login', payload),
     onSuccess: (data: any) => {
-      setUser(data.user || data);
+      // Map flat login response to User interface
+      const user = data.user || {
+        id: data.user_id,
+        email: data.email,
+        first_name: data.name?.split(' ')[0] || '',
+        last_name: data.name?.split(' ').slice(1).join(' ') || '',
+        role: data.role,
+        is_system_admin: data.is_system_admin,
+        tenants: [{ id: data.tenant_id, name: data.tenant_name, slug: '' }],
+        avatar_url: null,
+      };
+      setUser(user);
       setError(null);
       // Store CSRF token for subsequent unsafe requests
       if (data.csrf_token) {
diff --git a/frontend/src/routes/ProtectedRoute.tsx b/frontend/src/routes/ProtectedRoute.tsx
index 85135a9..970fc32 100644
--- a/frontend/src/routes/ProtectedRoute.tsx
+++ b/frontend/src/routes/ProtectedRoute.tsx
@@ -1,11 +1,15 @@
 import React from 'react';
 import { Navigate, useLocation } from 'react-router-dom';
 import { useAuthStore } from '@/store/authStore';
+import { useAuth } from '@/hooks/useAuth';
 
 export function ProtectedRoute({ children }: { children: React.ReactNode }) {
   const { isAuthenticated } = useAuthStore();
   const location = useLocation();
 
+  // Load user data on mount (handles page refresh)
+  useAuth();
+
   if (!isAuthenticated) {
     return <Navigate to="/login" state={{ from: location }} replace />;
   }