@lenne.tech/nuxt-extensions 1.11.1 → 1.11.2

package/dist/module.d.mts

@@ -3,7 +3,7 @@ import { LtExtensionsModuleOptions } from '../dist/runtime/types/index.js';
 export * from '../dist/runtime/types/index.js';
 
 declare const name = "@lenne.tech/nuxt-extensions";
-declare const version = "1.11.1";
+declare const version = "1.11.2";
 declare const configKey = "ltExtensions";
 declare const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 declare const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "configKey": "ltExtensions",
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.11.1",
+  "version": "1.11.2",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -1,7 +1,7 @@
 import { defineNuxtModule, createResolver, tryResolveModule, addImports, addComponent, addPlugin, addRouteMiddleware } from '@nuxt/kit';
 
 const name = "@lenne.tech/nuxt-extensions";
-const version = "1.11.1";
+const version = "1.11.2";
 const configKey = "ltExtensions";
 const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/runtime/composables/auth/use-lt-auth.js

@@ -110,7 +110,7 @@ export function useLtAuth() {
     if (!isJwtMode.value || !jwtToken.value) return false;
     return switchToJwtMode();
   }
-  const PATHS_REQUIRING_COOKIES = ["/passkey/", "/two-factor/", "/2fa/"];
+  const PATHS_REQUIRING_COOKIES = ["/passkey/", "/two-factor/", "/2fa/", "/get-session"];
   function urlRequiresCookies(url) {
     return PATHS_REQUIRING_COOKIES.some((path) => url.includes(path));
   }

package/dist/runtime/lib/auth-client.js

@@ -39,7 +39,8 @@ export function getOrCreateLtAuthClient(config) {
 }
 export function createLtAuthClient(config = {}) {
   const useProxy = isLocalDevApiProxy();
-  const defaultBaseURL = useProxy ? "" : import.meta.env?.VITE_API_URL || process.env.API_URL || "";
+  const envApiUrl = typeof import.meta.env?.VITE_API_URL === "string" ? import.meta.env.VITE_API_URL : void 0;
+  const defaultBaseURL = useProxy ? "" : envApiUrl || process.env.API_URL || "";
   const defaultBasePath = useProxy ? "/api/iam" : "/iam";
   const {
     baseURL = defaultBaseURL,

package/dist/runtime/plugins/auth-interceptor.client.js

@@ -29,7 +29,17 @@ export default (nuxtApp) => {
       "/forgot-password",
       "/reset-password",
       "/verify-email",
-      "/session",
+      // Better Auth's session routes, spelled out. A generic '/session' entry
+      // used to stand here and never matched anything: the routes are
+      // `get-session`, `list-sessions`, `revoke-session`, … — in every one of
+      // them the character before `session` is `-`, not `/`, so `url.includes`
+      // returned false. `/get-session` matters most: it is the URL the session
+      // probe below calls, and exempting it is what keeps a 401 from the probe
+      // out of this handler.
+      "/get-session",
+      "/list-sessions",
+      "/revoke-session",
+      "/revoke-other-sessions",
       "/token",
       // Passkey endpoints - handled by authFetch with JWT fallback
       "/passkey/",
@@ -43,19 +53,38 @@ export default (nuxtApp) => {
     ];
     return authEndpoints.some((endpoint) => url.includes(endpoint));
   }
+  const ALIVE_VERDICT_TTL_MS = 1e3;
+  let aliveVerdictValidUntil = 0;
   async function isSessionStillAlive() {
     try {
-      const { fetchWithAuth } = getAuth();
+      const { fetchWithAuth, isJwtMode, switchToJwtMode } = getAuth();
       const response = await fetchWithAuth(`${getLtApiBase()}/get-session`, { method: "GET" });
-      if (!response.ok) {
+      if (response.status === 401 || response.status === 403) {
         return false;
       }
+      if (!response.ok) {
+        return null;
+      }
       const data = await response.json().catch(() => null);
-      return Boolean(data && (data.user || data.session));
+      const alive = Boolean(data && (data.user || data.session));
+      if (alive && isJwtMode.value) {
+        await switchToJwtMode().catch(() => false);
+      }
+      return alive;
     } catch {
       return null;
     }
   }
+  async function probeSessionAlive() {
+    if (Date.now() < aliveVerdictValidUntil) {
+      return true;
+    }
+    const verdict = await isSessionStillAlive();
+    if (verdict === true) {
+      aliveVerdictValidUntil = Date.now() + ALIVE_VERDICT_TTL_MS;
+    }
+    return verdict;
+  }
   async function handleUnauthorized(requestUrl) {
     if (isHandling401) {
       return;
@@ -66,28 +95,35 @@ export default (nuxtApp) => {
     if (isPublicAuthRoute()) {
       return;
     }
+    const { clearUser, isAuthenticated } = getAuth();
+    if (!isAuthenticated.value) {
+      return;
+    }
     isHandling401 = true;
+    let loggingOut = false;
     try {
-      const { clearUser, isAuthenticated } = getAuth();
-      if (isAuthenticated.value) {
-        const sessionAlive = await isSessionStillAlive();
-        if (sessionAlive !== false) {
-          console.debug(
-            sessionAlive ? `[LtAuth Interceptor] 401 from ${requestUrl ?? "unknown URL"} but session is still valid \u2014 treating it as a permission error, not logging out` : "[LtAuth Interceptor] 401 received but session state could not be verified \u2014 not logging out"
-          );
-          return;
-        }
-        console.debug("[LtAuth Interceptor] Session expired, logging out...");
-        clearUser();
-        const router = nuxtApp.$router;
-        const currentPath = router?.currentRoute?.value?.fullPath;
-        const redirectQuery = currentPath && currentPath !== loginPath ? `?redirect=${encodeURIComponent(currentPath)}` : "";
-        window.location.href = loginPath + redirectQuery;
+      const sessionAlive = await probeSessionAlive();
+      if (sessionAlive !== false) {
+        console.debug(
+          sessionAlive ? `[LtAuth Interceptor] 401 from ${requestUrl ?? "unknown URL"} but session is still valid \u2014 treating it as a permission error, not logging out` : "[LtAuth Interceptor] 401 received but session state could not be verified \u2014 not logging out"
+        );
+        return;
       }
+      console.debug("[LtAuth Interceptor] Session expired, logging out...");
+      loggingOut = true;
+      clearUser();
+      const router = nuxtApp.$router;
+      const currentPath = router?.currentRoute?.value?.fullPath;
+      const redirectQuery = currentPath && currentPath !== loginPath ? `?redirect=${encodeURIComponent(currentPath)}` : "";
+      window.location.href = loginPath + redirectQuery;
     } finally {
-      setTimeout(() => {
+      if (loggingOut) {
+        setTimeout(() => {
+          isHandling401 = false;
+        }, 1e3);
+      } else {
         isHandling401 = false;
-      }, 1e3);
+      }
     }
   }
   const wrapMarker = "__ltAuthFetchWrapped";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.11.1",
+  "version": "1.11.2",
   "description": "Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.tech projects",
   "repository": {
     "type": "git",
@@ -101,13 +101,13 @@
   "devDependencies": {
     "@better-auth/passkey": "1.6.23",
     "@nuxt/module-builder": "1.0.2",
-    "@nuxt/schema": "4.4.8",
+    "@nuxt/schema": "4.5.2",
     "@playwright/test": "1.61.1",
     "@types/node": "26.1.1",
     "@vitest/coverage-v8": "4.1.10",
     "better-auth": "1.6.23",
     "happy-dom": "20.10.6",
-    "nuxt": "4.4.8",
+    "nuxt": "4.5.2",
     "oxfmt": "0.59.0",
     "oxlint": "1.74.0",
     "tus-js-client": "4.3.1",