@bagelink/auth 1.15.519 → 1.15.523

package/dist/index.cjs

@@ -1030,6 +1030,16 @@ let tenancyEnabled = false;
 const accountInfo = vue.ref(null);
 const tenants = vue.ref([]);
 const currentTenant = vue.ref(null);
+let initialAuthCheck = null;
+function ensureInitialAuth() {
+  if (initialAuthCheck === null) {
+    initialAuthCheck = useAuth().checkAuth().catch(() => false);
+  }
+  return initialAuthCheck;
+}
+function resetInitialAuth() {
+  initialAuthCheck = null;
+}
 function getRedirectConfig() {
   if (!redirectConfig) {
     throw new Error("Redirect config not initialized. Did you call createAuth with redirect config?");
@@ -1132,6 +1142,9 @@ function createAuth(params) {
      */
     install(app) {
       app.config.globalProperties.$auth = useAuth();
+    },
+    get ready() {
+      return ensureInitialAuth();
     }
   };
   return authInstance;
@@ -1284,7 +1297,7 @@ function useAuth() {
           });
         }
       }
-      return true;
+      return getIsLoggedIn();
     } catch {
       accountInfo.value = null;
       return false;
@@ -1554,12 +1567,13 @@ function useAuth() {
 const useAuth$1 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
   createAuth,
+  ensureInitialAuth,
   getRedirectConfig,
+  resetInitialAuth,
   useAuth
 }, Symbol.toStringTag, { value: "Module" }));
-let authInitialized = false;
 function resetAuthState() {
-  authInitialized = false;
+  resetInitialAuth();
 }
 function authGuard() {
   return async function guard(to, _from) {
@@ -1569,9 +1583,8 @@ function authGuard() {
     const requiresNoAuth = config.noAuthRoutes.includes(to.name);
     const skipsAuthBootstrap = to.meta.skipAuthBootstrap === true;
     try {
-      if (!authInitialized && !skipsAuthBootstrap) {
-        await auth.checkAuth();
-        authInitialized = true;
+      if (!skipsAuthBootstrap) {
+        await ensureInitialAuth();
       }
       const isAuthenticated = !!auth.user.value;
       if (isAuthenticated && requiresNoAuth) {
@@ -1635,6 +1648,7 @@ exports.buildLoginQuery = buildLoginQuery;
 exports.composeGuards = composeGuards;
 exports.createAuth = createAuth;
 exports.createAuthGuard = createAuthGuard;
+exports.ensureInitialAuth = ensureInitialAuth;
 exports.getAllSSOProviders = getAllSSOProviders;
 exports.getRedirectConfig = getRedirectConfig;
 exports.getRedirectUrl = getRedirectUrl;
@@ -1646,6 +1660,7 @@ exports.normalizeRedirectConfig = normalizeRedirectConfig;
 exports.performRedirect = performRedirect;
 exports.providers = providers;
 exports.resetAuthState = resetAuthState;
+exports.resetInitialAuth = resetInitialAuth;
 exports.setAuthContext = setAuthContext;
 exports.sso = sso;
 exports.ssoProvidersList = ssoProvidersList;

package/dist/index.mjs

@@ -1028,6 +1028,16 @@ let tenancyEnabled = false;
 const accountInfo = ref(null);
 const tenants = ref([]);
 const currentTenant = ref(null);
+let initialAuthCheck = null;
+function ensureInitialAuth() {
+  if (initialAuthCheck === null) {
+    initialAuthCheck = useAuth().checkAuth().catch(() => false);
+  }
+  return initialAuthCheck;
+}
+function resetInitialAuth() {
+  initialAuthCheck = null;
+}
 function getRedirectConfig() {
   if (!redirectConfig) {
     throw new Error("Redirect config not initialized. Did you call createAuth with redirect config?");
@@ -1130,6 +1140,9 @@ function createAuth(params) {
      */
     install(app) {
       app.config.globalProperties.$auth = useAuth();
+    },
+    get ready() {
+      return ensureInitialAuth();
     }
   };
   return authInstance;
@@ -1282,7 +1295,7 @@ function useAuth() {
           });
         }
       }
-      return true;
+      return getIsLoggedIn();
     } catch {
       accountInfo.value = null;
       return false;
@@ -1552,12 +1565,13 @@ function useAuth() {
 const useAuth$1 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
   createAuth,
+  ensureInitialAuth,
   getRedirectConfig,
+  resetInitialAuth,
   useAuth
 }, Symbol.toStringTag, { value: "Module" }));
-let authInitialized = false;
 function resetAuthState() {
-  authInitialized = false;
+  resetInitialAuth();
 }
 function authGuard() {
   return async function guard(to, _from) {
@@ -1567,9 +1581,8 @@ function authGuard() {
     const requiresNoAuth = config.noAuthRoutes.includes(to.name);
     const skipsAuthBootstrap = to.meta.skipAuthBootstrap === true;
     try {
-      if (!authInitialized && !skipsAuthBootstrap) {
-        await auth.checkAuth();
-        authInitialized = true;
+      if (!skipsAuthBootstrap) {
+        await ensureInitialAuth();
       }
       const isAuthenticated = !!auth.user.value;
       if (isAuthenticated && requiresNoAuth) {
@@ -1634,6 +1647,7 @@ export {
   composeGuards,
   createAuth,
   createAuthGuard,
+  ensureInitialAuth,
   getAllSSOProviders,
   getRedirectConfig,
   getRedirectUrl,
@@ -1645,6 +1659,7 @@ export {
   performRedirect,
   providers,
   resetAuthState,
+  resetInitialAuth,
   setAuthContext,
   sso,
   ssoProvidersList,

package/dist/router.d.ts

@@ -1,4 +1,7 @@
 import { NavigationGuard, RouteLocationNormalized, RouteLocationRaw } from 'vue-router';
+/**
+ * Auth router integration for Vue Router
+ */
 /**
  * Reset auth initialization state
  * Useful for testing or app reload scenarios

package/dist/useAuth.d.ts

@@ -27,7 +27,24 @@ export interface AuthInstance extends ObjectPlugin<[]> {
     }) => AuthInstance;
     routerGuard: () => (to: any, from: any) => Promise<any>;
     install: (app: App) => void;
+    /**
+     * Resolves once the initial session check (`/me`) has completed — logged in
+     * or not. Never rejects. Await before `app.mount()` so nothing renders
+     * before the auth state is known:
+     * ```ts
+     * await auth.ready
+     * app.mount('#app')
+     * ```
+     */
+    readonly ready: Promise<boolean>;
 }
+/**
+ * Run (once) and return the initial session check. Resolves `true` when a user
+ * is logged in, `false` otherwise (a 401 from `/me` just means "logged out").
+ */
+export declare function ensureInitialAuth(): Promise<boolean>;
+/** Forget the initial check (tests / full re-init). */
+export declare function resetInitialAuth(): void;
 /**
  * Get the current redirect configuration
  * Used internally by router guard

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bagelink/auth",
   "type": "module",
-  "version": "1.15.519",
+  "version": "1.15.523",
   "description": "Bagelink auth package",
   "author": {
     "name": "Bagel Studio",

package/src/router.ts

@@ -1,20 +1,17 @@
 import type { NavigationGuard, RouteLocationNormalized, RouteLocationRaw } from 'vue-router'
 import { buildLoginQuery } from './redirect'
-import { useAuth, getRedirectConfig } from './useAuth'
+import { useAuth, getRedirectConfig, ensureInitialAuth, resetInitialAuth } from './useAuth'
 
 /**
  * Auth router integration for Vue Router
  */
 
-// Track if auth has been initialized (for performance)
-let authInitialized = false
-
 /**
  * Reset auth initialization state
  * Useful for testing or app reload scenarios
  */
 export function resetAuthState() {
-	authInitialized = false
+	resetInitialAuth()
 }
 
 /**
@@ -48,10 +45,10 @@ export function authGuard() {
 		const skipsAuthBootstrap = to.meta.skipAuthBootstrap === true
 
 		try {
-			// Only check auth once on first navigation for performance
-			if (!authInitialized && !skipsAuthBootstrap) {
-				await auth.checkAuth()
-				authInitialized = true
+			// Resolve the session once, before the first route renders. Shared
+			// with `auth.ready`, so `/me` is only requested once on boot.
+			if (!skipsAuthBootstrap) {
+				await ensureInitialAuth()
 			}
 
 			// Use cached auth state from reactive user ref

package/src/useAuth.ts

@@ -71,6 +71,36 @@ export interface AuthInstance extends ObjectPlugin<[]> {
 	use: (dependency: any, options?: { guard?: boolean }) => AuthInstance
 	routerGuard: () => (to: any, from: any) => Promise<any>
 	install: (app: App) => void
+	/**
+	 * Resolves once the initial session check (`/me`) has completed — logged in
+	 * or not. Never rejects. Await before `app.mount()` so nothing renders
+	 * before the auth state is known:
+	 * ```ts
+	 * await auth.ready
+	 * app.mount('#app')
+	 * ```
+	 */
+	readonly ready: Promise<boolean>
+}
+
+// Single shared initial session check. The router guard and `auth.ready`
+// both await the same promise, so `/me` is requested exactly once on boot.
+let initialAuthCheck: Promise<boolean> | null = null
+
+/**
+ * Run (once) and return the initial session check. Resolves `true` when a user
+ * is logged in, `false` otherwise (a 401 from `/me` just means "logged out").
+ */
+export function ensureInitialAuth(): Promise<boolean> {
+	if (initialAuthCheck === null) {
+		initialAuthCheck = useAuth().checkAuth().catch(() => false)
+	}
+	return initialAuthCheck
+}
+
+/** Forget the initial check (tests / full re-init). */
+export function resetInitialAuth(): void {
+	initialAuthCheck = null
 }
 
 /**
@@ -200,6 +230,10 @@ export function createAuth(params: InitParams): AuthInstance {
 			// Make auth available globally
 			app.config.globalProperties.$auth = useAuth()
 		},
+
+		get ready(): Promise<boolean> {
+			return ensureInitialAuth()
+		},
 	}
 
 	return authInstance
@@ -414,6 +448,10 @@ export function useAuth() {
 		}
 	}
 
+	/**
+	 * Resolve the current session. Never throws: a 401 from `/me` simply means
+	 * "logged out" and is not an error. Returns whether a user is logged in.
+	 */
 	async function checkAuth(): Promise<boolean> {
 		try {
 			const { data } = await api.getCurrentUser()
@@ -424,7 +462,7 @@ export function useAuth() {
 					await loadTenants().catch(() => {})
 				}
 			}
-			return true
+			return getIsLoggedIn()
 		} catch {
 			accountInfo.value = null
 			return false