@digitaldefiance/express-suite-react-components 4.27.3 → 4.27.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@digitaldefiance/express-suite-react-components",
-  "version": "4.27.3",
+  "version": "4.27.4",
   "homepage": "https://github.com/Digital-Defiance/react-components",
   "description": "React MUI components for Digital Defiance Express Suite",
   "repository": {

package/src/wrappers/UserSettingsFormWrapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserSettingsFormWrapper.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-express-suite-react-components/src/wrappers/UserSettingsFormWrapper.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAA6C,MAAM,OAAO,CAAC;AACtE,OAAO,EAA4C,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAGjH,OAAO,EAA2B,UAAU,EAAsB,MAAM,iCAAiC,CAAC;AAG1G,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,MAAM,WAAW,4BAA4B;IAC3C,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB;;;OAGG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB;;;OAGG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,eAAe,GAAG,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC;CACnG;AAED,eAAO,MAAM,uBAAuB,EAAE,EAAE,CAAC,4BAA4B,CAqGpE,CAAC"}
+{"version":3,"file":"UserSettingsFormWrapper.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-express-suite-react-components/src/wrappers/UserSettingsFormWrapper.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAA6C,MAAM,OAAO,CAAC;AACtE,OAAO,EAA4C,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAGjH,OAAO,EAA2B,UAAU,EAAsB,MAAM,iCAAiC,CAAC;AAG1G,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,MAAM,WAAW,4BAA4B;IAC3C,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB;;;OAGG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB;;;OAGG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,eAAe,GAAG,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC;CACnG;AAED,eAAO,MAAM,uBAAuB,EAAE,EAAE,CAAC,4BAA4B,CA0GpE,CAAC"}

package/src/wrappers/UserSettingsFormWrapper.js

@@ -12,7 +12,6 @@ const authenticatedApi_1 = require("../services/authenticatedApi");
 const UserSettingsFormWrapper = ({ onSuccess, constants, eciesConfig, emailDomain = '', totpAvailable = false, componentProps = {}, }) => {
     const { settings, updateSettings } = (0, hooks_1.useUserSettingsPublic)();
     const { languages, baseUrl } = (0, contexts_1.useSuiteConfig)();
-    const { isAuthenticated } = (0, contexts_1.useAuth)();
     // Fetch totpEnabled from the settings API
     const [totpEnabled, setTotpEnabled] = (0, react_1.useState)(undefined);
     const authenticatedApi = (0, react_1.useMemo)(() => (0, authenticatedApi_1.createAuthenticatedApiClient)(baseUrl), [baseUrl]);
@@ -21,9 +20,15 @@ const UserSettingsFormWrapper = ({ onSuccess, constants, eciesConfig, emailDomai
             return null;
         return (0, authService_1.createAuthService)(constants, baseUrl, eciesConfig, emailDomain);
     }, [constants, eciesConfig, baseUrl, emailDomain]);
-    // Fetch totpEnabled from GET /user/settings
+    // Fetch totpEnabled from GET /user/settings.
+    // We gate on totpAvailable (no point fetching if TOTP isn't enabled on this
+    // deployment) but NOT on isAuthenticated — isAuthenticated can be false
+    // transiently (e.g. verify 403 on page refresh with a stale token) even
+    // when the user has a valid session token in localStorage. The
+    // authenticatedApi interceptor attaches the token automatically; if the
+    // call fails we leave totpEnabled undefined so no TOTP controls are shown.
     (0, react_1.useEffect)(() => {
-        if (!isAuthenticated)
+        if (!totpAvailable)
             return;
         authenticatedApi
             .get('/user/settings')
@@ -33,7 +38,7 @@ const UserSettingsFormWrapper = ({ onSuccess, constants, eciesConfig, emailDomai
             .catch(() => {
             // If the endpoint fails, leave totpEnabled undefined (no TOTP controls shown)
         });
-    }, [isAuthenticated, authenticatedApi]);
+    }, [totpAvailable, authenticatedApi]);
     const handleSubmit = async (values) => {
         const result = await updateSettings(values);
         if ('success' in result && result.success && onSuccess) {