@proveanything/smartlinks-auth-ui 0.1.17 → 0.1.19

package/dist/index.js

@@ -11245,6 +11245,8 @@ const AuthProvider = ({ children, proxyMode = false, accountCacheTTL = 5 * 60 *
     const [accountInfo, setAccountInfo] = React.useState(null);
     const [isLoading, setIsLoading] = React.useState(true);
     const callbacksRef = React.useRef(new Set());
+    // Initialization guard to prevent concurrent runs (NOT persisted across remounts)
+    const initializingRef = React.useRef(false);
     // Notify all subscribers of auth state changes
     const notifyAuthStateChange = React.useCallback((type, currentUser, currentToken, currentAccountData, currentAccountInfo) => {
         callbacksRef.current.forEach(callback => {
@@ -11264,6 +11266,13 @@ const AuthProvider = ({ children, proxyMode = false, accountCacheTTL = 5 * 60 *
     }, []);
     // Initialize auth state - different behavior for proxy mode vs standalone mode
     React.useEffect(() => {
+        // Prevent concurrent initialization only
+        if (initializingRef.current) {
+            console.log('[AuthContext] Skipping initialization - already in progress');
+            return;
+        }
+        let isMounted = true;
+        initializingRef.current = true;
         const initializeAuth = async () => {
             try {
                 if (proxyMode) {
@@ -11275,7 +11284,7 @@ const AuthProvider = ({ children, proxyMode = false, accountCacheTTL = 5 * 60 *
                         // empty/undefined if no user is logged in
                         const accountAny = accountResponse;
                         const hasValidSession = accountAny?.uid && accountAny.uid.length > 0;
-                        if (hasValidSession) {
+                        if (hasValidSession && isMounted) {
                             // User is logged in with valid account
                             const userFromAccount = {
                                 uid: accountAny.uid,
@@ -11289,14 +11298,17 @@ const AuthProvider = ({ children, proxyMode = false, accountCacheTTL = 5 * 60 *
                             console.log('[AuthContext] Proxy mode: initialized from parent account, uid:', accountAny.uid);
                             notifyAuthStateChange('LOGIN', userFromAccount, null, accountResponse, accountResponse);
                         }
-                        else {
+                        else if (isMounted) {
                             console.log('[AuthContext] Proxy mode: no valid session (no uid), awaiting login');
                         }
                     }
                     catch (error) {
                         console.log('[AuthContext] Proxy mode: auth.getAccount() failed, awaiting login:', error);
                     }
-                    setIsLoading(false);
+                    if (isMounted) {
+                        setIsLoading(false);
+                        initializingRef.current = false;
+                    }
                     return;
                 }
                 // STANDALONE MODE: Load from persistent storage
@@ -11304,28 +11316,47 @@ const AuthProvider = ({ children, proxyMode = false, accountCacheTTL = 5 * 60 *
                 const storedUser = await tokenStorage.getUser();
                 const storedAccountData = await tokenStorage.getAccountData();
                 if (storedToken && storedUser) {
-                    setToken(storedToken.token);
-                    setUser(storedUser);
-                    setAccountData(storedAccountData);
-                    // Set bearer token in global Smartlinks SDK via auth.verifyToken
-                    smartlinks__namespace.auth.verifyToken(storedToken.token).catch(err => {
-                        console.warn('Failed to restore bearer token on init:', err);
-                    });
+                    // Verify token FIRST before setting state
+                    try {
+                        console.log('[AuthContext] Verifying stored token...');
+                        await smartlinks__namespace.auth.verifyToken(storedToken.token);
+                        // Only set state if verification succeeded and component still mounted
+                        if (isMounted) {
+                            setToken(storedToken.token);
+                            setUser(storedUser);
+                            setAccountData(storedAccountData);
+                            console.log('[AuthContext] Session restored successfully');
+                        }
+                    }
+                    catch (err) {
+                        console.warn('[AuthContext] Token verification failed, clearing stored credentials:', err);
+                        await tokenStorage.clearAll();
+                        // Don't set user state - leave as logged out
+                    }
                 }
                 // Load cached account info if available
-                const cachedAccountInfo = await tokenStorage.getAccountInfo();
-                if (cachedAccountInfo && !cachedAccountInfo.isStale) {
-                    setAccountInfo(cachedAccountInfo.data);
+                if (isMounted) {
+                    const cachedAccountInfo = await tokenStorage.getAccountInfo();
+                    if (cachedAccountInfo && !cachedAccountInfo.isStale) {
+                        setAccountInfo(cachedAccountInfo.data);
+                    }
                 }
             }
             catch (error) {
-                console.error('Failed to initialize auth from storage:', error);
+                console.error('[AuthContext] Failed to initialize auth from storage:', error);
             }
             finally {
-                setIsLoading(false);
+                if (isMounted) {
+                    setIsLoading(false);
+                    initializingRef.current = false;
+                }
             }
         };
         initializeAuth();
+        // Cleanup for hot reload
+        return () => {
+            isMounted = false;
+        };
     }, [proxyMode, notifyAuthStateChange]);
     // Listen for parent auth state changes (proxy mode only)
     React.useEffect(() => {