@mehdad67/apitogo 0.1.28 → 0.1.30

package/dist/cli/cli.js

@@ -4121,7 +4121,7 @@ import {
 // package.json
 var package_default = {
   name: "@mehdad67/apitogo",
-  version: "0.1.28",
+  version: "0.1.30",
   type: "module",
   sideEffects: [
     "**/*.css",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mehdad67/apitogo",
-  "version": "0.1.28",
+  "version": "0.1.30",
   "type": "module",
   "sideEffects": [
     "**/*.css",

package/src/lib/authentication/providers/dev-portal.tsx

@@ -58,6 +58,11 @@ export class DevPortalAuthenticationProvider
   }
 
   async initialize(_context: ZudokuContext): Promise<void> {
+    // Node SSR cannot reach local HTTPS backends with self-signed certs.
+    if (typeof window === "undefined") {
+      return;
+    }
+
     await this.syncBackendAvailability();
     if (!this.backendAvailable) {
       this.setPreviewState();
@@ -68,6 +73,11 @@ export class DevPortalAuthenticationProvider
   }
 
   onPageLoad = async () => {
+    if (typeof window === "undefined") {
+      return;
+    }
+
+    await this.syncBackendAvailability();
     if (!this.backendAvailable) {
       this.setPreviewState();
       return;
@@ -134,9 +144,15 @@ export class DevPortalAuthenticationProvider
         method: "GET",
         headers: { Accept: "application/json" },
         credentials: "include",
+        redirect: "manual",
       });
 
-      if (response.status === 401) {
+      // Backends may still respond with 302 to the IdP; treat as unauthenticated.
+      if (
+        response.type === "opaqueredirect" ||
+        response.status === 302 ||
+        response.status === 401
+      ) {
         useAuthState.setState({
           isAuthenticated: false,
           isPending: false,

package/src/lib/authentication/state.ts

@@ -77,12 +77,25 @@ export const authState = create<AuthState>()(
     }),
     {
       merge: (persistedState, currentState) => {
+        const persisted =
+          typeof persistedState === "object" && persistedState !== null
+            ? (persistedState as Partial<AuthState>)
+            : {};
+
+        // Cookie/session auth is refreshed from the backend on load. Do not
+        // restore identity fields from localStorage or OIDC return looks logged out.
         return {
           ...currentState,
           isPending: false,
-          ...(typeof persistedState === "object" ? persistedState : {}),
+          isBackendAvailable:
+            persisted.isBackendAvailable ?? currentState.isBackendAvailable,
+          authMode: persisted.authMode ?? currentState.authMode,
         };
       },
+      partialize: (state) => ({
+        isBackendAvailable: state.isBackendAvailable,
+        authMode: state.authMode,
+      }),
       name: "auth-state",
       storage: createJSONStorage(() => localStorage),
     },