Authentication Interview Questions

Prevent multiple token refreshes when parallel API calls fail by sharing a single refresh promise.

A ProtectedRoute component checks session state before rendering children and redirects unauthenticated users to login. Handle the isLoading state to prevent flash redirects, preserve the originally-attempted URL, and extend to role-based access.