@mohasinac/appkit 4.5.1 → 4.5.2

package/dist/_internal/client/features/layout/RoleGuard.d.ts

@@ -1,4 +1,4 @@
-import type { ReactNode } from "react";
+import { type ReactNode } from "react";
 import type { LayoutRole } from "../../../shared/features/layout/types";
 export interface RoleGuardProps {
     /** Single role or array. Omit for auth-only (any signed-in user). */

package/dist/_internal/client/features/layout/RoleGuard.js

@@ -12,13 +12,34 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * route overrides. Everything else defaults to appkit's ROUTES.
  */
 import { useRouter } from "next/navigation";
+import { useEffect, useRef, useState } from "react";
 import { ProtectedRoute } from "../../../../features/auth/components/Guards";
 import { useSession } from "../../../../react/contexts/SessionContext";
 import { ROUTES } from "../../../../next/routing/route-map";
 export function RoleGuard({ role, requireAuth = true, loginPath, unauthorizedPath, loadingComponent, children, }) {
-    const { user, loading } = useSession();
+    const { user, loading, refreshUser } = useSession();
     const router = useRouter();
-    return (_jsx(ProtectedRoute, { user: user, loading: loading, requireAuth: requireAuth, requireRole: role, onNavigate: (path) => router.push(path), routes: {
+    // SessionContext only refreshes role/disabled periodically (every 5
+    // minutes) or on a hard reload/re-login — never on ordinary client-side
+    // navigation. A user just approved as a seller, or just un-banned, would
+    // otherwise keep getting redirected to /unauthorized by this exact guard
+    // for up to 5 minutes even though the same check against live Firestore
+    // data would already pass. Force one fresh check per mount (i.e. once per
+    // navigation into a role-gated layout, since Next.js layouts persist
+    // across sibling route changes) before trusting a denial.
+    const hasRefreshedRef = useRef(false);
+    const [verifying, setVerifying] = useState(true);
+    useEffect(() => {
+        if (loading || hasRefreshedRef.current)
+            return;
+        hasRefreshedRef.current = true;
+        if (!user) {
+            setVerifying(false);
+            return;
+        }
+        refreshUser().finally(() => setVerifying(false));
+    }, [loading, user, refreshUser]);
+    return (_jsx(ProtectedRoute, { user: user, loading: loading || verifying, requireAuth: requireAuth, requireRole: role, onNavigate: (path) => router.push(path), routes: {
             loginPath: loginPath ?? String(ROUTES.AUTH.LOGIN),
             unauthorizedPath: unauthorizedPath ?? String(ROUTES.ERRORS.UNAUTHORIZED),
         }, loadingComponent: loadingComponent, children: children }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.5.1",
+  "version": "4.5.2",
   "license": "MIT",
   "publishConfig": {
     "access": "public"