@robosystems/core 0.7.0 → 0.7.1

package/auth-components/AuthProvider.js

@@ -131,17 +131,22 @@ export function AuthProvider({ children, apiUrl = process.env.NEXT_PUBLIC_ROBOSY
                 Promise.allSettled([clearGraphSelection(), clearEntitySelection()]),
                 new Promise((resolve) => setTimeout(resolve, 2000)),
             ]);
-            // Clear auth client cache and local user/session state
+            // Clear auth client cache and local storage state. Deliberately NO
+            // setUser(null) here: the hard navigation below tears the tree down
+            // anyway, and nulling the user first wakes AuthGuard, whose
+            // client-side redirect (→ /login → LoginRedirector → login home)
+            // can outrace the queued /logout navigation — the anchor session
+            // then survives and silently signs the user back in, undoing the
+            // logout (observed E2E under centralized login).
             authClient.clearAuthCache();
-            setUser(null);
             setSessionWarning({ show: false, timeLeft: 0 });
             // Perform comprehensive cleanup of all user-specific data
             performLogoutCleanup();
             debugLog('Logout cleanup completed');
             // Always hard-redirect out of the authenticated area. A full-page
             // navigation (not a client-side router.push) guarantees the
-            // authenticated tree tears down instead of AuthGuard flashing a blank
-            // screen once user state clears. A forced logout (reason set, e.g.
+            // authenticated tree tears down without AuthGuard racing it (see
+            // above). A forced logout (reason set, e.g.
             // session_expired) goes to the login page so it can explain why the
             // session ended and let the user sign back in. A manual logout on a
             // product app chains through the login home's /logout so the anchor

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@robosystems/core",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Shared RoboSystems frontend core library (auth, contexts, task monitoring, UI components) for the RoboSystems Next.js apps",
   "license": "MIT",
   "private": false,