@props([
    // Where an expired session sends the person. Staff layouts hand it the
    // login page; the public portal reloads the page they were already on,
    // because a customer looking at their own invoice has no login to return
    // to and the reload is all that is needed to mint a fresh token.
    'to' => null,
])

{{--
    Nobody sees "419 | Page Expired".

    A normal request that hits an expired session is redirected server-side (see
    the TokenMismatchException handler in bootstrap/app.php). A Livewire request
    cannot be: it is fetch(), it cannot follow the 302, and Livewire's own
    default is a browser confirm() box reading "This page has expired. Would you
    like to refresh?" — which is the dialog this replaces.

    Mounted in every layout, so the answer is the same wherever the session runs
    out: staff go to login, customers get their page back.
--}}
<script>
    document.addEventListener('livewire:init', () => {
        Livewire.hook('request', ({ fail }) => {
            fail(({ status, preventDefault }) => {
                if (status === 419) {
                    preventDefault();
                    window.location.href = @json($to ?? route('login'));
                }
            });
        });
    });
</script>