@bagelink/auth 1.7.96 → 1.7.101

package/dist/index.cjs

@@ -88,8 +88,10 @@ class AuthApi {
       if (resetToken !== null) {
         config.headers["X-Reset-Token"] = resetToken;
       }
+      console.log("[AuthApi] Interceptor - currentTenantId:", this.currentTenantId);
       if (this.currentTenantId !== null) {
         config.headers["X-Tenant-ID"] = this.currentTenantId;
+        console.log("[AuthApi] Added X-Tenant-ID header:", this.currentTenantId);
       }
       return config;
     });
@@ -101,13 +103,13 @@ class AuthApi {
    * Get available authentication methods
    */
   async getAuthMethods() {
-    return this.api.get("/authentication/methods");
+    return this.api.get("authentication/methods");
   }
   /**
    * Register a new account
    */
   async register(data) {
-    return this.api.post("/authentication/register", {
+    return this.api.post("authentication/register", {
       ...data,
       email: data.email.toLowerCase()
     });
@@ -116,7 +118,7 @@ class AuthApi {
    * Login with password
    */
   async login(email, password) {
-    return this.api.post("/authentication/login/password", {
+    return this.api.post("authentication/login/password", {
       email: email.toLowerCase(),
       password
     });
@@ -125,13 +127,13 @@ class AuthApi {
    * Logout and clear session
    */
   async logout() {
-    return this.api.post("/authentication/logout", {});
+    return this.api.post("authentication/logout", {});
   }
   /**
    * Refresh current session
    */
   async refreshSession() {
-    return this.api.post("/authentication/refresh", {});
+    return this.api.post("authentication/refresh", {});
   }
   // ============================================
   // SSO Authentication Methods
@@ -141,7 +143,7 @@ class AuthApi {
    * Returns authorization URL to redirect user to
    */
   async initiateSSO(data) {
-    return this.api.post(`/authentication/sso/${data.provider}/initiate`, {
+    return this.api.post(`authentication/sso/${data.provider}/initiate`, {
       redirect_uri: data.redirect_uri,
       state: data.state
     });
@@ -150,7 +152,7 @@ class AuthApi {
    * Complete SSO login after callback from provider
    */
   async ssoCallback(data) {
-    return this.api.post(`/authentication/sso/${data.provider}/callback`, {
+    return this.api.post(`authentication/sso/${data.provider}/callback`, {
       code: data.code,
       state: data.state
     });
@@ -159,7 +161,7 @@ class AuthApi {
    * Link an SSO provider to existing account
    */
   async linkSSOProvider(data) {
-    return this.api.post(`/authentication/sso/${data.provider}/link`, {
+    return this.api.post(`authentication/sso/${data.provider}/link`, {
       code: data.code,
       state: data.state
     });
@@ -168,7 +170,7 @@ class AuthApi {
    * Unlink an SSO provider from account
    */
   async unlinkSSOProvider(provider) {
-    return this.api.delete(`/authentication/sso/${provider}/unlink`);
+    return this.api.delete(`authentication/sso/${provider}/unlink`);
   }
   // ============================================
   // Current User (Me) Methods
@@ -177,19 +179,19 @@ class AuthApi {
    * Get current user account info
    */
   async getCurrentUser() {
-    return this.api.get("/authentication/me");
+    return this.api.get("authentication/me");
   }
   /**
    * Update current user profile
    */
   async updateCurrentUser(data) {
-    return this.api.patch("/authentication/me", data);
+    return this.api.patch("authentication/me", data);
   }
   /**
    * Delete current user account
    */
   async deleteCurrentUser() {
-    return this.api.delete("/authentication/me");
+    return this.api.delete("authentication/me");
   }
   // ============================================
   // Account Management (Admin)
@@ -198,31 +200,31 @@ class AuthApi {
    * Get account information by ID
    */
   async getAccount(accountId) {
-    return this.api.get(`/authentication/account/${accountId}`);
+    return this.api.get(`authentication/account/${accountId}`);
   }
   /**
    * Update account by ID
    */
   async updateAccount(accountId, data) {
-    return this.api.patch(`/authentication/account/${accountId}`, data);
+    return this.api.patch(`authentication/account/${accountId}`, data);
   }
   /**
    * Delete account by ID
    */
   async deleteAccount(accountId) {
-    return this.api.delete(`/authentication/account/${accountId}`);
+    return this.api.delete(`authentication/account/${accountId}`);
   }
   /**
    * Activate account by ID
    */
   async activateAccount(accountId) {
-    return this.api.post(`/authentication/account/${accountId}/activate`, {});
+    return this.api.post(`authentication/account/${accountId}/activate`, {});
   }
   /**
    * Deactivate account by ID
    */
   async deactivateAccount(accountId) {
-    return this.api.post(`/authentication/account/${accountId}/deactivate`, {});
+    return this.api.post(`authentication/account/${accountId}/deactivate`, {});
   }
   // ============================================
   // Password Management
@@ -231,13 +233,13 @@ class AuthApi {
    * Change password (requires current password)
    */
   async changePassword(data) {
-    return this.api.post("/authentication/password/change", data);
+    return this.api.post("authentication/password/change", data);
   }
   /**
    * Initiate forgot password flow
    */
   async forgotPassword(email) {
-    return this.api.post("/authentication/password/forgot", {
+    return this.api.post("authentication/password/forgot", {
       email: email.toLowerCase()
     });
   }
@@ -245,13 +247,13 @@ class AuthApi {
    * Verify password reset token
    */
   async verifyResetToken(token) {
-    return this.api.get(`/authentication/password/verify-reset-token/${token}`);
+    return this.api.get(`authentication/password/verify-reset-token/${token}`);
   }
   /**
    * Reset password with token
    */
   async resetPassword(data) {
-    return this.api.post("/authentication/password/reset", data);
+    return this.api.post("authentication/password/reset", data);
   }
   // ============================================
   // Email Verification
@@ -260,7 +262,7 @@ class AuthApi {
    * Send email verification
    */
   async sendVerification(data = {}, user) {
-    return this.api.post("/authentication/verify/send", data, {
+    return this.api.post("authentication/verify/send", data, {
       params: user ? { user } : void 0
     });
   }
@@ -268,7 +270,7 @@ class AuthApi {
    * Verify email with token
    */
   async verifyEmail(token) {
-    return this.api.post("/authentication/verify/email", { token });
+    return this.api.post("authentication/verify/email", { token });
   }
   // ============================================
   // Session Management
@@ -277,25 +279,25 @@ class AuthApi {
    * Get sessions for an account
    */
   async getSessions(accountId) {
-    return this.api.get(`/authentication/sessions/${accountId}`);
+    return this.api.get(`authentication/sessions/${accountId}`);
   }
   /**
    * Revoke a specific session
    */
   async revokeSession(sessionToken) {
-    return this.api.delete(`/authentication/sessions/${sessionToken}`);
+    return this.api.delete(`authentication/sessions/${sessionToken}`);
   }
   /**
    * Revoke all sessions for an account
    */
   async revokeAllSessions(accountId) {
-    return this.api.delete(`/authentication/sessions/account/${accountId}`);
+    return this.api.delete(`authentication/sessions/account/${accountId}`);
   }
   /**
    * Cleanup expired sessions (admin)
    */
   async cleanupSessions() {
-    return this.api.post("/authentication/cleanup-sessions", {});
+    return this.api.post("authentication/cleanup-sessions", {});
   }
   // ============================================
   // Multi-Tenancy Methods
@@ -304,7 +306,7 @@ class AuthApi {
    * Get list of tenants the authenticated user belongs to
    */
   async getTenants() {
-    return this.api.get("/tenants");
+    return this.api.get("tenants");
   }
 }
 const _hoisted_1$8 = { class: "txt20 bold mb-1" };
@@ -2163,6 +2165,9 @@ function useAuth() {
     await logoutPromise.catch(() => {
     });
     accountInfo.value = null;
+    tenants.value = [];
+    currentTenant.value = null;
+    api.setTenantId(null);
     emitter.emit(AuthState.LOGOUT);
   }
   async function login(credentials) {
@@ -2182,6 +2187,8 @@ function useAuth() {
       accountInfo.value = data;
       if (getIsLoggedIn()) {
         emitter.emit(AuthState.AUTH_CHECK);
+        await loadTenants().catch(() => {
+        });
       }
       return true;
     } catch {
@@ -2193,10 +2200,13 @@ function useAuth() {
     try {
       const { data } = await api.getTenants();
       tenants.value = data;
+      console.log("[Auth] Loaded tenants:", tenants.value);
       if (currentTenant.value === null && tenants.value.length > 0) {
         const firstActiveTenant = tenants.value.find((t) => t.status === "active");
         if (firstActiveTenant !== void 0) {
+          console.log("[Auth] Auto-selecting tenant:", firstActiveTenant.id);
           setTenant(firstActiveTenant.id);
+          console.log("[Auth] Tenant set. Current tenant ID in API:", api.getTenantId());
         }
       }
       return tenants.value;

package/dist/index.mjs

@@ -86,8 +86,10 @@ class AuthApi {
       if (resetToken !== null) {
         config.headers["X-Reset-Token"] = resetToken;
       }
+      console.log("[AuthApi] Interceptor - currentTenantId:", this.currentTenantId);
       if (this.currentTenantId !== null) {
         config.headers["X-Tenant-ID"] = this.currentTenantId;
+        console.log("[AuthApi] Added X-Tenant-ID header:", this.currentTenantId);
       }
       return config;
     });
@@ -99,13 +101,13 @@ class AuthApi {
    * Get available authentication methods
    */
   async getAuthMethods() {
-    return this.api.get("/authentication/methods");
+    return this.api.get("authentication/methods");
   }
   /**
    * Register a new account
    */
   async register(data) {
-    return this.api.post("/authentication/register", {
+    return this.api.post("authentication/register", {
       ...data,
       email: data.email.toLowerCase()
     });
@@ -114,7 +116,7 @@ class AuthApi {
    * Login with password
    */
   async login(email, password) {
-    return this.api.post("/authentication/login/password", {
+    return this.api.post("authentication/login/password", {
       email: email.toLowerCase(),
       password
     });
@@ -123,13 +125,13 @@ class AuthApi {
    * Logout and clear session
    */
   async logout() {
-    return this.api.post("/authentication/logout", {});
+    return this.api.post("authentication/logout", {});
   }
   /**
    * Refresh current session
    */
   async refreshSession() {
-    return this.api.post("/authentication/refresh", {});
+    return this.api.post("authentication/refresh", {});
   }
   // ============================================
   // SSO Authentication Methods
@@ -139,7 +141,7 @@ class AuthApi {
    * Returns authorization URL to redirect user to
    */
   async initiateSSO(data) {
-    return this.api.post(`/authentication/sso/${data.provider}/initiate`, {
+    return this.api.post(`authentication/sso/${data.provider}/initiate`, {
       redirect_uri: data.redirect_uri,
       state: data.state
     });
@@ -148,7 +150,7 @@ class AuthApi {
    * Complete SSO login after callback from provider
    */
   async ssoCallback(data) {
-    return this.api.post(`/authentication/sso/${data.provider}/callback`, {
+    return this.api.post(`authentication/sso/${data.provider}/callback`, {
       code: data.code,
       state: data.state
     });
@@ -157,7 +159,7 @@ class AuthApi {
    * Link an SSO provider to existing account
    */
   async linkSSOProvider(data) {
-    return this.api.post(`/authentication/sso/${data.provider}/link`, {
+    return this.api.post(`authentication/sso/${data.provider}/link`, {
       code: data.code,
       state: data.state
     });
@@ -166,7 +168,7 @@ class AuthApi {
    * Unlink an SSO provider from account
    */
   async unlinkSSOProvider(provider) {
-    return this.api.delete(`/authentication/sso/${provider}/unlink`);
+    return this.api.delete(`authentication/sso/${provider}/unlink`);
   }
   // ============================================
   // Current User (Me) Methods
@@ -175,19 +177,19 @@ class AuthApi {
    * Get current user account info
    */
   async getCurrentUser() {
-    return this.api.get("/authentication/me");
+    return this.api.get("authentication/me");
   }
   /**
    * Update current user profile
    */
   async updateCurrentUser(data) {
-    return this.api.patch("/authentication/me", data);
+    return this.api.patch("authentication/me", data);
   }
   /**
    * Delete current user account
    */
   async deleteCurrentUser() {
-    return this.api.delete("/authentication/me");
+    return this.api.delete("authentication/me");
   }
   // ============================================
   // Account Management (Admin)
@@ -196,31 +198,31 @@ class AuthApi {
    * Get account information by ID
    */
   async getAccount(accountId) {
-    return this.api.get(`/authentication/account/${accountId}`);
+    return this.api.get(`authentication/account/${accountId}`);
   }
   /**
    * Update account by ID
    */
   async updateAccount(accountId, data) {
-    return this.api.patch(`/authentication/account/${accountId}`, data);
+    return this.api.patch(`authentication/account/${accountId}`, data);
   }
   /**
    * Delete account by ID
    */
   async deleteAccount(accountId) {
-    return this.api.delete(`/authentication/account/${accountId}`);
+    return this.api.delete(`authentication/account/${accountId}`);
   }
   /**
    * Activate account by ID
    */
   async activateAccount(accountId) {
-    return this.api.post(`/authentication/account/${accountId}/activate`, {});
+    return this.api.post(`authentication/account/${accountId}/activate`, {});
   }
   /**
    * Deactivate account by ID
    */
   async deactivateAccount(accountId) {
-    return this.api.post(`/authentication/account/${accountId}/deactivate`, {});
+    return this.api.post(`authentication/account/${accountId}/deactivate`, {});
   }
   // ============================================
   // Password Management
@@ -229,13 +231,13 @@ class AuthApi {
    * Change password (requires current password)
    */
   async changePassword(data) {
-    return this.api.post("/authentication/password/change", data);
+    return this.api.post("authentication/password/change", data);
   }
   /**
    * Initiate forgot password flow
    */
   async forgotPassword(email) {
-    return this.api.post("/authentication/password/forgot", {
+    return this.api.post("authentication/password/forgot", {
       email: email.toLowerCase()
     });
   }
@@ -243,13 +245,13 @@ class AuthApi {
    * Verify password reset token
    */
   async verifyResetToken(token) {
-    return this.api.get(`/authentication/password/verify-reset-token/${token}`);
+    return this.api.get(`authentication/password/verify-reset-token/${token}`);
   }
   /**
    * Reset password with token
    */
   async resetPassword(data) {
-    return this.api.post("/authentication/password/reset", data);
+    return this.api.post("authentication/password/reset", data);
   }
   // ============================================
   // Email Verification
@@ -258,7 +260,7 @@ class AuthApi {
    * Send email verification
    */
   async sendVerification(data = {}, user) {
-    return this.api.post("/authentication/verify/send", data, {
+    return this.api.post("authentication/verify/send", data, {
       params: user ? { user } : void 0
     });
   }
@@ -266,7 +268,7 @@ class AuthApi {
    * Verify email with token
    */
   async verifyEmail(token) {
-    return this.api.post("/authentication/verify/email", { token });
+    return this.api.post("authentication/verify/email", { token });
   }
   // ============================================
   // Session Management
@@ -275,25 +277,25 @@ class AuthApi {
    * Get sessions for an account
    */
   async getSessions(accountId) {
-    return this.api.get(`/authentication/sessions/${accountId}`);
+    return this.api.get(`authentication/sessions/${accountId}`);
   }
   /**
    * Revoke a specific session
    */
   async revokeSession(sessionToken) {
-    return this.api.delete(`/authentication/sessions/${sessionToken}`);
+    return this.api.delete(`authentication/sessions/${sessionToken}`);
   }
   /**
    * Revoke all sessions for an account
    */
   async revokeAllSessions(accountId) {
-    return this.api.delete(`/authentication/sessions/account/${accountId}`);
+    return this.api.delete(`authentication/sessions/account/${accountId}`);
   }
   /**
    * Cleanup expired sessions (admin)
    */
   async cleanupSessions() {
-    return this.api.post("/authentication/cleanup-sessions", {});
+    return this.api.post("authentication/cleanup-sessions", {});
   }
   // ============================================
   // Multi-Tenancy Methods
@@ -302,7 +304,7 @@ class AuthApi {
    * Get list of tenants the authenticated user belongs to
    */
   async getTenants() {
-    return this.api.get("/tenants");
+    return this.api.get("tenants");
   }
 }
 const _hoisted_1$8 = { class: "txt20 bold mb-1" };
@@ -2161,6 +2163,9 @@ function useAuth() {
     await logoutPromise.catch(() => {
     });
     accountInfo.value = null;
+    tenants.value = [];
+    currentTenant.value = null;
+    api.setTenantId(null);
     emitter.emit(AuthState.LOGOUT);
   }
   async function login(credentials) {
@@ -2180,6 +2185,8 @@ function useAuth() {
       accountInfo.value = data;
       if (getIsLoggedIn()) {
         emitter.emit(AuthState.AUTH_CHECK);
+        await loadTenants().catch(() => {
+        });
       }
       return true;
     } catch {
@@ -2191,10 +2198,13 @@ function useAuth() {
     try {
       const { data } = await api.getTenants();
       tenants.value = data;
+      console.log("[Auth] Loaded tenants:", tenants.value);
       if (currentTenant.value === null && tenants.value.length > 0) {
         const firstActiveTenant = tenants.value.find((t) => t.status === "active");
         if (firstActiveTenant !== void 0) {
+          console.log("[Auth] Auto-selecting tenant:", firstActiveTenant.id);
           setTenant(firstActiveTenant.id);
+          console.log("[Auth] Tenant set. Current tenant ID in API:", api.getTenantId());
         }
       }
       return tenants.value;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bagelink/auth",
   "type": "module",
-  "version": "1.7.96",
+  "version": "1.7.101",
   "description": "Bagelink auth package",
   "author": {
     "name": "Bagel Studio",

package/src/api.ts

@@ -74,8 +74,10 @@ export class AuthApi {
 			}
 
 			// Add tenant ID header if set
+			console.log('[AuthApi] Interceptor - currentTenantId:', this.currentTenantId)
 			if (this.currentTenantId !== null) {
 				config.headers['X-Tenant-ID'] = this.currentTenantId
+				console.log('[AuthApi] Added X-Tenant-ID header:', this.currentTenantId)
 			}
 
 			return config
@@ -90,14 +92,14 @@ export class AuthApi {
 	 * Get available authentication methods
 	 */
 	async getAuthMethods(): Promise<GetMethodsResponse> {
-		return this.api.get('/authentication/methods')
+		return this.api.get('authentication/methods')
 	}
 
 	/**
 	 * Register a new account
 	 */
 	async register(data: RegisterRequest): Promise<RegisterResponse> {
-		return this.api.post('/authentication/register', {
+		return this.api.post('authentication/register', {
 			...data,
 			email: data.email.toLowerCase(),
 		})
@@ -107,7 +109,7 @@ export class AuthApi {
 	 * Login with password
 	 */
 	async login(email: string, password: string): Promise<LoginResponse> {
-		return this.api.post('/authentication/login/password', {
+		return this.api.post('authentication/login/password', {
 			email: email.toLowerCase(),
 			password,
 		})
@@ -117,14 +119,14 @@ export class AuthApi {
 	 * Logout and clear session
 	 */
 	async logout(): Promise<LogoutResponse> {
-		return this.api.post('/authentication/logout', {})
+		return this.api.post('authentication/logout', {})
 	}
 
 	/**
 	 * Refresh current session
 	 */
 	async refreshSession(): Promise<RefreshSessionResponse> {
-		return this.api.post('/authentication/refresh', {})
+		return this.api.post('authentication/refresh', {})
 	}
 
 	// ============================================
@@ -136,7 +138,7 @@ export class AuthApi {
 	 * Returns authorization URL to redirect user to
 	 */
 	async initiateSSO(data: SSOInitiateRequest): Promise<SSOInitiateResponse> {
-		return this.api.post(`/authentication/sso/${data.provider}/initiate`, {
+		return this.api.post(`authentication/sso/${data.provider}/initiate`, {
 			redirect_uri: data.redirect_uri,
 			state: data.state,
 		})
@@ -146,7 +148,7 @@ export class AuthApi {
 	 * Complete SSO login after callback from provider
 	 */
 	async ssoCallback(data: SSOCallbackRequest): Promise<SSOCallbackResponse> {
-		return this.api.post(`/authentication/sso/${data.provider}/callback`, {
+		return this.api.post(`authentication/sso/${data.provider}/callback`, {
 			code: data.code,
 			state: data.state,
 		})
@@ -156,7 +158,7 @@ export class AuthApi {
 	 * Link an SSO provider to existing account
 	 */
 	async linkSSOProvider(data: SSOLinkRequest): Promise<SSOLinkResponse> {
-		return this.api.post(`/authentication/sso/${data.provider}/link`, {
+		return this.api.post(`authentication/sso/${data.provider}/link`, {
 			code: data.code,
 			state: data.state,
 		})
@@ -166,7 +168,7 @@ export class AuthApi {
 	 * Unlink an SSO provider from account
 	 */
 	async unlinkSSOProvider(provider: SSOProvider): Promise<SSOUnlinkResponse> {
-		return this.api.delete(`/authentication/sso/${provider}/unlink`)
+		return this.api.delete(`authentication/sso/${provider}/unlink`)
 	}
 
 	// ============================================
@@ -177,21 +179,21 @@ export class AuthApi {
 	 * Get current user account info
 	 */
 	async getCurrentUser(): Promise<GetMeResponse> {
-		return this.api.get('/authentication/me')
+		return this.api.get('authentication/me')
 	}
 
 	/**
 	 * Update current user profile
 	 */
 	async updateCurrentUser(data: UpdateAccountRequest): Promise<UpdateMeResponse> {
-		return this.api.patch('/authentication/me', data)
+		return this.api.patch('authentication/me', data)
 	}
 
 	/**
 	 * Delete current user account
 	 */
 	async deleteCurrentUser(): Promise<DeleteMeResponse> {
-		return this.api.delete('/authentication/me')
+		return this.api.delete('authentication/me')
 	}
 
 	// ============================================
@@ -202,7 +204,7 @@ export class AuthApi {
 	 * Get account information by ID
 	 */
 	async getAccount(accountId: string): Promise<GetAccountResponse> {
-		return this.api.get(`/authentication/account/${accountId}`)
+		return this.api.get(`authentication/account/${accountId}`)
 	}
 
 	/**
@@ -212,21 +214,21 @@ export class AuthApi {
 		accountId: string,
 		data: UpdateAccountRequest
 	): Promise<UpdateAccountResponse> {
-		return this.api.patch(`/authentication/account/${accountId}`, data)
+		return this.api.patch(`authentication/account/${accountId}`, data)
 	}
 
 	/**
 	 * Delete account by ID
 	 */
 	async deleteAccount(accountId: string): Promise<DeleteAccountResponse> {
-		return this.api.delete(`/authentication/account/${accountId}`)
+		return this.api.delete(`authentication/account/${accountId}`)
 	}
 
 	/**
 	 * Activate account by ID
 	 */
 	async activateAccount(accountId: string): Promise<ActivateAccountResponse> {
-		return this.api.post(`/authentication/account/${accountId}/activate`, {})
+		return this.api.post(`authentication/account/${accountId}/activate`, {})
 	}
 
 	/**
@@ -235,7 +237,7 @@ export class AuthApi {
 	async deactivateAccount(
 		accountId: string
 	): Promise<DeactivateAccountResponse> {
-		return this.api.post(`/authentication/account/${accountId}/deactivate`, {})
+		return this.api.post(`authentication/account/${accountId}/deactivate`, {})
 	}
 
 	// ============================================
@@ -246,14 +248,14 @@ export class AuthApi {
 	 * Change password (requires current password)
 	 */
 	async changePassword(data: ChangePasswordRequest): Promise<ChangePasswordResponse> {
-		return this.api.post('/authentication/password/change', data)
+		return this.api.post('authentication/password/change', data)
 	}
 
 	/**
 	 * Initiate forgot password flow
 	 */
 	async forgotPassword(email: string): Promise<ForgotPasswordResponse> {
-		return this.api.post('/authentication/password/forgot', {
+		return this.api.post('authentication/password/forgot', {
 			email: email.toLowerCase(),
 		})
 	}
@@ -262,14 +264,14 @@ export class AuthApi {
 	 * Verify password reset token
 	 */
 	async verifyResetToken(token: string): Promise<VerifyResetTokenResponse> {
-		return this.api.get(`/authentication/password/verify-reset-token/${token}`)
+		return this.api.get(`authentication/password/verify-reset-token/${token}`)
 	}
 
 	/**
 	 * Reset password with token
 	 */
 	async resetPassword(data: ResetPasswordRequest): Promise<ResetPasswordResponse> {
-		return this.api.post('/authentication/password/reset', data)
+		return this.api.post('authentication/password/reset', data)
 	}
 
 	// ============================================
@@ -283,7 +285,7 @@ export class AuthApi {
 		data: SendVerificationRequest = {},
 		user?: AuthenticationAccount
 	): Promise<SendVerificationResponse> {
-		return this.api.post('/authentication/verify/send', data, {
+		return this.api.post('authentication/verify/send', data, {
 			params: user ? { user } : undefined,
 		})
 	}
@@ -292,7 +294,7 @@ export class AuthApi {
 	 * Verify email with token
 	 */
 	async verifyEmail(token: string): Promise<VerifyEmailResponse> {
-		return this.api.post('/authentication/verify/email', { token })
+		return this.api.post('authentication/verify/email', { token })
 	}
 
 	// ============================================
@@ -303,28 +305,28 @@ export class AuthApi {
 	 * Get sessions for an account
 	 */
 	async getSessions(accountId: string): Promise<GetSessionsResponse> {
-		return this.api.get(`/authentication/sessions/${accountId}`)
+		return this.api.get(`authentication/sessions/${accountId}`)
 	}
 
 	/**
 	 * Revoke a specific session
 	 */
 	async revokeSession(sessionToken: string): Promise<DeleteSessionResponse> {
-		return this.api.delete(`/authentication/sessions/${sessionToken}`)
+		return this.api.delete(`authentication/sessions/${sessionToken}`)
 	}
 
 	/**
 	 * Revoke all sessions for an account
 	 */
 	async revokeAllSessions(accountId: string): Promise<DeleteAllSessionsResponse> {
-		return this.api.delete(`/authentication/sessions/account/${accountId}`)
+		return this.api.delete(`authentication/sessions/account/${accountId}`)
 	}
 
 	/**
 	 * Cleanup expired sessions (admin)
 	 */
 	async cleanupSessions(): Promise<CleanupSessionsResponse> {
-		return this.api.post('/authentication/cleanup-sessions', {})
+		return this.api.post('authentication/cleanup-sessions', {})
 	}
 
 	// ============================================
@@ -335,6 +337,6 @@ export class AuthApi {
 	 * Get list of tenants the authenticated user belongs to
 	 */
 	async getTenants(): Promise<GetTenantsResponse> {
-		return this.api.get('/tenants')
+		return this.api.get('tenants')
 	}
 }

package/src/useAuth.ts

@@ -284,6 +284,9 @@ export function useAuth() {
 		})
 		// Clear local state regardless of API result
 		accountInfo.value = null
+		tenants.value = []
+		currentTenant.value = null
+		api.setTenantId(null)
 		// Emit logout event
 		emitter.emit(AuthState.LOGOUT)
 	}
@@ -294,9 +297,10 @@ export function useAuth() {
 			credentials.password
 		)
 
-		// If successful and not requiring verification, fetch user data
+		// If successful and not requiring verification, fetch user data and tenants
 		if (data.success === true && data.requires_verification !== true) {
 			await checkAuth()
+			// checkAuth now calls loadTenants automatically
 		}
 
 		emitter.emit(AuthState.LOGIN)
@@ -309,6 +313,10 @@ export function useAuth() {
 			accountInfo.value = data
 			if (getIsLoggedIn()) {
 				emitter.emit(AuthState.AUTH_CHECK)
+				// Auto-load tenants after successful auth check
+				await loadTenants().catch(() => {
+					// Silently fail if tenants not supported
+				})
 			}
 			return true
 		} catch {
@@ -322,11 +330,15 @@ export function useAuth() {
 			const { data } = await api.getTenants()
 			tenants.value = data
 
+			console.log('[Auth] Loaded tenants:', tenants.value)
+
 			// Auto-select first tenant if none selected and tenants available
 			if (currentTenant.value === null && tenants.value.length > 0) {
 				const firstActiveTenant = tenants.value.find(t => t.status === 'active')
 				if (firstActiveTenant !== undefined) {
+					console.log('[Auth] Auto-selecting tenant:', firstActiveTenant.id)
 					setTenant(firstActiveTenant.id)
+					console.log('[Auth] Tenant set. Current tenant ID in API:', api.getTenantId())
 				}
 			}
 
@@ -492,9 +504,10 @@ export function useAuth() {
 	async function loginWithSSO(params: SSOCallbackRequest) {
 		const { data } = await api.ssoCallback(params)
 
-		// If successful and not requiring verification, fetch user data
+		// If successful and not requiring verification, fetch user data and tenants
 		if (data.success === true && data.requires_verification !== true) {
 			await checkAuth()
+			// checkAuth now calls loadTenants automatically
 		}
 
 		emitter.emit(AuthState.LOGIN)