@robosystems/core 0.7.0 → 0.7.2

package/auth-components/AuthProvider.js

@@ -131,17 +131,22 @@ export function AuthProvider({ children, apiUrl = process.env.NEXT_PUBLIC_ROBOSY
                 Promise.allSettled([clearGraphSelection(), clearEntitySelection()]),
                 new Promise((resolve) => setTimeout(resolve, 2000)),
             ]);
-            // Clear auth client cache and local user/session state
+            // Clear auth client cache and local storage state. Deliberately NO
+            // setUser(null) here: the hard navigation below tears the tree down
+            // anyway, and nulling the user first wakes AuthGuard, whose
+            // client-side redirect (→ /login → LoginRedirector → login home)
+            // can outrace the queued /logout navigation — the anchor session
+            // then survives and silently signs the user back in, undoing the
+            // logout (observed E2E under centralized login).
             authClient.clearAuthCache();
-            setUser(null);
             setSessionWarning({ show: false, timeLeft: 0 });
             // Perform comprehensive cleanup of all user-specific data
             performLogoutCleanup();
             debugLog('Logout cleanup completed');
             // Always hard-redirect out of the authenticated area. A full-page
             // navigation (not a client-side router.push) guarantees the
-            // authenticated tree tears down instead of AuthGuard flashing a blank
-            // screen once user state clears. A forced logout (reason set, e.g.
+            // authenticated tree tears down without AuthGuard racing it (see
+            // above). A forced logout (reason set, e.g.
             // session_expired) goes to the login page so it can explain why the
             // session ended and let the user sign back in. A manual logout on a
             // product app chains through the login home's /logout so the anchor

package/auth-core/client.d.ts

@@ -1,4 +1,4 @@
-import type { APIKey, AuthResponse, AuthUser, CreateAPIKeyRequest, SSOTokenResponse } from './types';
+import type { APIKey, AuthProviders, AuthResponse, AuthUser, CreateAPIKeyRequest, SSOTokenResponse } from './types';
 export declare class TokenExpiredError extends Error {
     constructor(message?: string);
 }
@@ -55,6 +55,14 @@ export declare class RoboSystemsAuthClient {
     }>;
     ssoComplete(sessionId: string): Promise<AuthResponse>;
     checkAuthentication(): Promise<AuthUser | null>;
+    /**
+     * Fetch the deployment's auth posture (which sign-in methods to render).
+     *
+     * A rendering hint, not a security boundary — the backend enforces every
+     * flag regardless of what the page shows. Any failure returns null and
+     * the caller renders the default password posture.
+     */
+    getAuthProviders(): Promise<AuthProviders | null>;
     clearAuthCache(): void;
     /**
      * Send password reset email

package/auth-core/client.js

@@ -1,5 +1,5 @@
 var _a;
-import { checkPasswordStrength, client, completeSsoAuth, createUserApiKey, forgotPassword, generateSsoToken, getCurrentAuthUser, getInvitationPreview, getPasswordPolicy, listUserApiKeys, loginUser, logoutUser, refreshAuthSession, registerUser, resendVerificationEmail, resetPassword, revokeUserApiKey, ssoTokenExchange, validateResetToken, verifyEmail, } from '@robosystems/client';
+import { checkPasswordStrength, client, completeSsoAuth, createUserApiKey, forgotPassword, generateSsoToken, getAuthProviders, getCurrentAuthUser, getInvitationPreview, getPasswordPolicy, listUserApiKeys, loginUser, logoutUser, refreshAuthSession, registerUser, resendVerificationEmail, resetPassword, revokeUserApiKey, ssoTokenExchange, validateResetToken, verifyEmail, } from '@robosystems/client';
 import * as sdkClientsModule from '@robosystems/client/clients';
 import { getToken, getValidToken } from './token-storage';
 // Global config hook for the clients package's lazy default singleton
@@ -491,6 +491,26 @@ export class RoboSystemsAuthClient {
             return null;
         }
     }
+    /**
+     * Fetch the deployment's auth posture (which sign-in methods to render).
+     *
+     * A rendering hint, not a security boundary — the backend enforces every
+     * flag regardless of what the page shows. Any failure returns null and
+     * the caller renders the default password posture.
+     */
+    async getAuthProviders() {
+        try {
+            const response = await getAuthProviders({ client: this.client });
+            const data = response.data;
+            if (!data || typeof data.password_auth !== 'boolean') {
+                return null;
+            }
+            return data;
+        }
+        catch (_a) {
+            return null;
+        }
+    }
     // Clear request deduplication cache (useful after login/logout)
     clearAuthCache() {
         this.lastAuthCheck = null;

package/auth-core/types.d.ts

@@ -14,6 +14,23 @@ export interface AuthResponse {
     expires_in?: number;
     refresh_threshold?: number;
 }
+/**
+ * Deployment auth posture from `GET /v1/auth/providers`.
+ *
+ * A rendering hint, not a security boundary — the backend enforces every
+ * flag regardless of what the login surface shows. One byte-identical
+ * frontend build renders password-primary (managed), OIDC-primary
+ * (tenant), or closed-registration postures from this payload.
+ */
+export interface AuthProviders {
+    password_auth: boolean;
+    oidc: {
+        enabled: boolean;
+        provider_label?: string | null;
+    };
+    registration: boolean;
+    passkeys: boolean;
+}
 export interface LoginRequest {
     email: string;
     password: string;

package/index.d.ts

@@ -26,7 +26,7 @@ export type { TaskCreateResponse, TaskMonitorState, TaskPollingOptions, TaskStat
 export { useGraphCreation, useOperationMonitoring, useRepositorySubscription, type OperationMonitorState, type UseOperationMonitoringResult, } from './task-monitoring/operationHooks';
 import { client } from '@robosystems/client';
 export { client };
-export type { APIKey, AppName, AuthContextType, AuthUser } from './auth-core';
+export type { APIKey, AppName, AuthContextType, AuthProviders, AuthUser, } from './auth-core';
 export { CURRENT_APP } from './auth-core/config';
 export { getLoginHomeUrl, isLoginHome, LOGIN_HOME_APP, } from './auth-core/config';
 export { buildLoginHomeUrl, buildReturnTo, isSafeRelativePath, parseReturnTo, } from './auth-core/login-home';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@robosystems/core",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Shared RoboSystems frontend core library (auth, contexts, task monitoring, UI components) for the RoboSystems Next.js apps",
   "license": "MIT",
   "private": false,
@@ -27,7 +27,7 @@
     "tailwind-merge": "^3"
   },
   "peerDependencies": {
-    "@robosystems/client": ">=1.2 <2",
+    "@robosystems/client": ">=1.9 <2",
     "flowbite-react": "^0.12.5",
     "next": ">=15 <17",
     "react": ">=18 <20",