@autobusal/providers 1.2.10 → 1.2.11

package/CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to `@autobusal/providers` are documented here. This project
 adheres to [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.2.11] - 2026-07-19
+
+### Fixed
+
+- bff-mode 401 no longer logs the user out when the BFF confirms the session is still valid: the apiClient now rejects the failed request (letting react-query retry) instead of tearing down auth. A single account query 401ing (transient race or a flaky upstream call) previously bounced the user to /login even though they were logged in. Bearer mode unchanged.
 ## [1.2.10] - 2026-07-19
 
 ### Fixed

package/Queries/apiClient.ts

@@ -43,22 +43,21 @@ apiClient.interceptors.response.use(response => (
   if (error.response) {
     // if we have a 401, the session is gone, so we go to the logout page.
     if (error.response.status === 401 && window.location.pathname !== '/account/logout') {
-      // bff mode: auth is a server-side httpOnly cookie the BFF manages. A
-      // request that races the login/cookie hand-off (e.g. the account queries
-      // fired the instant the SPA lands on /account) can 401 transiently while
-      // the session is actually valid - and a blind logout here would drop the
-      // user straight back out. So confirm with the BFF first; if we are still
-      // authenticated, transparently retry the request once instead of logging
-      // out. bearer mode has no such race (the token is attached synchronously
-      // from localStorage) and falls straight through to logout.
-      if (isBffMode && error.config && !error.config._bffAuthRetried) {
+      // bff mode: auth is a server-side httpOnly cookie the BFF manages, so a
+      // single request's 401 does NOT reliably mean "logged out" the way a
+      // bearer 401 does - a query that momentarily races the login/cookie
+      // hand-off (or a flaky upstream call) can 401 while the session is still
+      // valid. A blind logout here drops the user straight back to /login. So
+      // confirm with the BFF: only tear the session down if it agrees we are no
+      // longer authenticated; otherwise just reject and let react-query retry -
+      // the user stays logged in. bearer mode has no such ambiguity (the token
+      // is attached synchronously from localStorage) and logs out immediately.
+      if (isBffMode) {
         try {
           const { data } = await apiClient.get('/session');
 
           if (data?.authenticated) {
-            error.config._bffAuthRetried = true;
-
-            return await apiClient(error.config);
+            return Promise.reject(error);
           }
         } catch {
           // /session unreachable - fall through to logout.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autobusal/providers",
-  "version": "1.2.10",
+  "version": "1.2.11",
   "author": "Ferjolt Ozuni",
   "type": "module",
   "main": "index.ts"