@lukoweb/apitogo 0.1.70 → 0.1.72

package/dist/cli/cli.js

@@ -5644,7 +5644,7 @@ import {
 // package.json
 var package_default = {
   name: "@lukoweb/apitogo",
-  version: "0.1.70",
+  version: "0.1.72",
   type: "module",
   sideEffects: [
     "**/*.css",

package/dist/declarations/lib/authentication/providers/dev-portal.d.ts

@@ -34,6 +34,7 @@ export declare class DevPortalAuthenticationProvider extends CoreAuthenticationP
     onPageLoad: () => Promise<void>;
     private syncBackendAvailability;
     private setPreviewState;
+    private setLiveUnauthenticatedState;
     private setDemoAuthenticatedState;
     private ensureConfiguredBackend;
     refreshUserProfile(): Promise<boolean>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lukoweb/apitogo",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "type": "module",
   "sideEffects": [
     "**/*.css",

package/src/lib/authentication/providers/dev-portal-utils.ts

@@ -1,7 +1,6 @@
 import type { DevPortalAuthenticationConfig } from "../../../config/config.js";
 import {
   DEV_PORTAL_PLACEHOLDER_API_URL,
-  type DevPortalAuthStatusResponse,
   type UserMeResponse,
 } from "./dev-portal-constants.js";
 
@@ -220,12 +219,9 @@ export async function probeDevPortalBackend(
       signal: controller.signal,
     });
 
-    if (!response.ok) {
-      return false;
-    }
-
-    const body = (await response.json()) as DevPortalAuthStatusResponse;
-    return body.available === true;
+    // HTTP 200 means the portal API is reachable. `available` is whether
+    // sign-in methods are configured — do not treat empty auth as unpublished.
+    return response.ok;
   } catch {
     return false;
   } finally {

package/src/lib/authentication/providers/dev-portal.tsx

@@ -213,6 +213,28 @@ export class DevPortalAuthenticationProvider
     });
   }
 
+  private setLiveUnauthenticatedState(): void {
+    if (!this.apiBaseUrl) {
+      this.setPreviewState();
+      return;
+    }
+
+    useAuthState.setState({
+      isAuthenticated: false,
+      isPending: false,
+      sessionChecked: true,
+      profile: null,
+      providerData: {
+        type: "dev-portal",
+        apiBaseUrl: this.apiBaseUrl,
+        authMode: "live",
+        demoMode: this.demoMode,
+      },
+      isBackendAvailable: true,
+      authMode: "live",
+    });
+  }
+
   private setDemoAuthenticatedState(): void {
     activateDemoSession(this.apiBaseUrl);
   }
@@ -295,25 +317,12 @@ export class DevPortalAuthenticationProvider
         response.status === 302 ||
         response.status === 401
       ) {
-        useAuthState.setState({
-          isAuthenticated: false,
-          isPending: false,
-          sessionChecked: true,
-          profile: null,
-          providerData: {
-            type: "dev-portal",
-            apiBaseUrl: this.apiBaseUrl,
-            authMode: "live",
-            demoMode: this.demoMode,
-          },
-          isBackendAvailable: true,
-          authMode: "live",
-        });
+        this.setLiveUnauthenticatedState();
         return false;
       }
 
       if (!response.ok) {
-        this.setPreviewState();
+        this.setLiveUnauthenticatedState();
         return false;
       }
 
@@ -344,6 +353,11 @@ export class DevPortalAuthenticationProvider
         return useAuthState.getState().isAuthenticated;
       }
 
+      if (this.backendAvailable) {
+        this.setLiveUnauthenticatedState();
+        return false;
+      }
+
       this.setPreviewState();
       return false;
     }

package/src/lib/authentication/state.ts

@@ -94,32 +94,12 @@ function createAuthStateStore(): AuthStateStore {
           })),
       }),
       {
-        version: 1,
-        migrate: (persistedState, version) => {
-          const persisted =
-            typeof persistedState === "object" && persistedState !== null
-              ? (persistedState as Partial<AuthState>)
-              : {};
-
-          // v0 stored full auth identity in localStorage; keep only backend metadata.
-          if (version === 0) {
-            return {
-              isBackendAvailable: persisted.isBackendAvailable,
-              authMode: persisted.authMode,
-            };
-          }
-
-          return persisted;
-        },
-        merge: (persistedState, currentState) => {
-          const persisted =
-            typeof persistedState === "object" && persistedState !== null
-              ? (persistedState as Partial<AuthState>)
-              : {};
-
-          // Cookie/session auth is refreshed from the backend on load. Do not
-          // restore identity fields from localStorage or OIDC return looks logged out.
-          // Keep isPending true until the auth provider finishes /auth/me (or equivalent).
+        version: 2,
+        migrate: () => ({}),
+        merge: (_persistedState, currentState) => {
+          // Cookie/session auth is refreshed from the backend on load. Never
+          // restore preview flags — a prior empty Auth__ConfigJson used to
+          // persist isBackendAvailable: false and lock account routes.
           return {
             ...currentState,
             isPending: true,
@@ -127,15 +107,11 @@ function createAuthStateStore(): AuthStateStore {
             isAuthenticated: currentState.isAuthenticated,
             profile: currentState.profile,
             providerData: currentState.providerData,
-            isBackendAvailable:
-              persisted.isBackendAvailable ?? currentState.isBackendAvailable,
-            authMode: persisted.authMode ?? currentState.authMode,
+            isBackendAvailable: currentState.isBackendAvailable,
+            authMode: currentState.authMode,
           };
         },
-        partialize: (state) => ({
-          isBackendAvailable: state.isBackendAvailable,
-          authMode: state.authMode,
-        }),
+        partialize: () => ({}),
         name: "auth-state",
         storage: createJSONStorage(() => localStorage),
       },
@@ -158,9 +134,17 @@ export const waitForAuthStateHydration = (): Promise<void> => {
   }
 
   const { persist } = useAuthState;
+  if (!persist) {
+    return Promise.resolve();
+  }
 
   return new Promise((resolve) => {
+    let settled = false;
     const finish = () => {
+      if (settled) {
+        return;
+      }
+      settled = true;
       // Let hydration merge flush before /auth/me refresh runs.
       queueMicrotask(resolve);
     };
@@ -174,6 +158,15 @@ export const waitForAuthStateHydration = (): Promise<void> => {
       unsubscribe();
       finish();
     });
+
+    if (persist.hasHydrated()) {
+      unsubscribe();
+      finish();
+      return;
+    }
+
+    // happy-dom / some browsers never fire onFinishHydration.
+    setTimeout(finish, 50);
   });
 };