lcbp3.np-dms.work/frontend/app/layout.jsx

// File: frontend/app/layout.jsx
import Link from "next/link";
import { redirect } from "next/navigation";
import { cookies, headers } from "next/headers";
// ถ้ามี lib rbac เดิมอยู่ให้ใช้ต่อได้
import { can } from "@/lib/rbac";

// แก้ title ให้ถูกสะกด
export const metadata = { title: "DMS | Protected" };

const API_BASE = (process.env.NEXT_PUBLIC_API_BASE || "").replace(/\/$/, "");

async function fetchSessionFromAPI() {
  // ดึงคุกกี้จริงจากฝั่งเซิร์ฟเวอร์ แล้วส่งต่อให้ backend
  const cookieHeader = cookies().toString(); // serialize ทั้งชุด
  const hostHdr = headers().get("host");
  const protoHdr = headers().get("x-forwarded-proto") || "https";

  const res = await fetch(`${API_BASE}/api/auth/me`, {
    method: "GET",
    headers: {
      Cookie: cookieHeader,
      // เผื่อ backend ตรวจ origin/proto/host
      "X-Forwarded-Host": hostHdr || "",
      "X-Forwarded-Proto": protoHdr,
      Accept: "application/json",
    },
    // server component ไม่ต้องใช้ credentials
    cache: "no-store",
  });

  if (!res.ok) return null;
  try {
    const data = await res.json();
    return data?.ok ? data : null;
  } catch {
    return null;
  }
}

export default async function ProtectedLayout({ children }) {
  const session = await fetchSessionFromAPI();
  if (!session) {
    // พยายามส่ง next path กลับไปที่ /login
    redirect("/login?next=/dashboard");
  }
  const { user } = session;

  return (
    <section className="grid grid-cols-12 gap-6 p-4 mx-auto max-w-7xl">
      <aside className="col-span-12 lg:col-span-3 xl:col-span-3">
        <div className="p-4 border rounded-3xl bg-white/70">
          <div className="mb-3 text-sm">RBAC: <b>{user.role}</b></div>

          <nav className="space-y-2">
            <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/dashboard">แดชบอร์ด</Link>
            <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/drawings">Drawings</Link>
            <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/rfas">RFAs</Link>
            <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/transmittals">Transmittals</Link>
            <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/correspondences">Correspondences</Link>
            <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/contracts-volumes">Contracts & Volumes</Link>
            <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/reports">Reports</Link>

            {can(user, "workflow:view") && (
              <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/workflow">Workflow (n8n)</Link>
            )}
            {can(user, "health:view") && (
              <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/health">Health</Link>
            )}
            {can(user, "users:manage") && (
              <Link className="block px-4 py-2 rounded-xl bg-white/60 hover:bg-white" href="/users">ผู้ใช้/บทบาท</Link>
            )}
          </nav>
        </div>
      </aside>

      <main className="col-span-12 space-y-6 lg:col-span-9 xl:col-span-9">
        {/* System / Quick Actions */}
        <div className="flex items-center gap-2">
          <div className="flex-1 text-lg font-semibold">Document Management System — LCBP3 Phase 3</div>

          {can(user, "admin:view") && (
            <a className="px-3 py-2 text-white rounded-xl" style={{ background: "#0D5C75" }} href="/admin">Admin</a>
          )}
          {can(user, "users:manage") && (
            <a className="px-3 py-2 text-white rounded-xl" style={{ background: "#0D5C75" }} href="/users">ผู้ใช้/บทบาท</a>
          )}
          {can(user, "health:view") && (
            <a className="px-3 py-2 text-white rounded-xl" style={{ background: "#0D5C75" }} href="/health">Health</a>
          )}
          {can(user, "workflow:view") && (
            <a className="px-3 py-2 text-white rounded-xl" style={{ background: "#0D5C75" }} href="/workflow">Workflow</a>
          )}
          {can(user, "rfa:create") && (
            <a className="px-3 py-2 text-white rounded-xl" style={{ background: "#0D5C75" }} href="/rfas/new">+ RFA</a>
          )}
          {can(user, "drawing:upload") && (
            <a className="px-3 py-2 text-white rounded-xl" style={{ background: "#0D5C75" }} href="/drawings/upload">+ Upload Drawing</a>
          )}
          {can(user, "transmittal:create") && (
            <a className="px-3 py-2 text-white rounded-xl" style={{ background: "#0D5C75" }} href="/transmittals/new">+ Transmittal</a>
          )}
          {can(user, "correspondence:create") && (
            <a className="px-3 py-2 text-white rounded-xl" style={{ background: "#0D5C75" }} href="/correspondences/new">+ หนังสือสื่อสาร</a>
          )}
        </div>

        {children}
      </main>
    </section>
  );
}