@salesforce/ui-bundle-template-app-angular-template-b2x 12.4.1 → 12.4.2

package/dist/CHANGELOG.md

@@ -3,6 +3,15 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [12.4.2](https://github.com/salesforce-experience-platform-emu/webapps/compare/v12.4.1...v12.4.2) (2026-09-02)
+
+
+### Bug Fixes
+
+* **ui-bundle:** use UI API GraphQL instead of Chatter for current-user lookup ([#951](https://github.com/salesforce-experience-platform-emu/webapps/issues/951)) ([47c28c1](https://github.com/salesforce-experience-platform-emu/webapps/commit/47c28c10a0b838eacef6c4a3e45e3a4fe587d20a))
+
+
+
 ## [12.4.1](https://github.com/salesforce-experience-platform-emu/webapps/compare/v12.4.0...v12.4.1) (2026-09-02)
 
 **Note:** Version bump only for package @salesforce/ui-bundle-template-base-sfdx-project

package/dist/force-app/main/default/uiBundles/angularextapp/package.json

@@ -28,8 +28,8 @@
     "@angular/router": "^21.2.0",
     "@ng-icons/core": "^32.2.0",
     "@ng-icons/lucide": "^32.2.0",
-    "@salesforce/angular-plugin-ui-bundle": "^12.4.1",
-    "@salesforce/platform-sdk": "^12.4.1",
+    "@salesforce/angular-plugin-ui-bundle": "^12.4.2",
+    "@salesforce/platform-sdk": "^12.4.2",
     "@spartan-ng/brain": "^1.3.1",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
@@ -61,7 +61,7 @@
     "typescript": "~5.9.2",
     "typescript-eslint": "^8.0.0",
     "vitest": "^4.1.0",
-    "@salesforce/graphiti": "^12.4.1"
+    "@salesforce/graphiti": "^12.4.2"
   },
   "overrides": {
     "undici": "^7.28.0"

package/dist/force-app/main/default/uiBundles/angularextapp/src/app/features/authentication/auth/auth.service.ts

@@ -4,6 +4,7 @@
  * For full license text, see the LICENSE.txt file
  */
 import { computed, inject, Injectable, signal } from "@angular/core";
+import { gql } from "@salesforce/platform-sdk";
 import { DataClient } from "../../../api/data-client.service";
 import { API_ROUTES } from "../config/authentication.config";
 
@@ -13,9 +14,31 @@ export interface AuthUser {
 	readonly name: string;
 }
 
-// UI API version used for the Chatter current-user lookup. Mirrors the constant
-// baked into @salesforce/ui-bundle's getCurrentUser helper.
-const API_VERSION = "65.0";
+const CURRENT_USER_QUERY = gql`
+	query GetCurrentUser {
+		uiapi {
+			currentUser {
+				Id
+				Name @optional {
+					value
+				}
+				UserType {
+					value
+				}
+			}
+		}
+	}
+`;
+
+interface CurrentUserGraphQLResult {
+	uiapi?: {
+		currentUser?: {
+			Id?: string;
+			Name?: { value?: string };
+			UserType?: { value?: string | null } | null;
+		};
+	};
+}
 
 /**
  * Angular signal-based replacement for the React `AuthProvider` / `useAuth`.
@@ -28,8 +51,8 @@ const API_VERSION = "65.0";
  * Authentication is checked on construction (equivalent to the React mount
  * `useEffect`). `checkAuth()` re-runs the lookup on demand.
  *
- * The current-user lookup goes through the base app's `DataClient.fetch` to the
- * Chatter `/users/me` endpoint — the exact call `@salesforce/ui-bundle`'s
+ * The current-user lookup goes through the base app's `DataClient.execute` to
+ * UI API GraphQL (`uiapi.currentUser`) — the same call `@salesforce/ui-bundle`'s
  * `getCurrentUser` makes — so the feature reuses the base app's existing
  * `@salesforce/platform-sdk` dependency and adds no new package.
  */
@@ -102,25 +125,34 @@ export class AuthService {
 	}
 
 	/**
-	 * Fetches the current user via the Chatter `/users/me` endpoint. Reproduces
+	 * Fetches the current user via UI API GraphQL. Reproduces
 	 * `@salesforce/ui-bundle`'s `getCurrentUser` so we don't add ui-bundle as a
-	 * dependency (base app only ships @salesforce/platform-sdk).
+	 * dependency (base app only ships @salesforce/platform-sdk). Guest sessions
+	 * also resolve to a running user record, so they're filtered out via
+	 * `UserType` rather than relying on a fetch failure — a confirmed guest
+	 * resolves to `null` rather than throwing, so `checkAuth` doesn't record it
+	 * as an error the guard would retry on the next navigation. A missing/null/
+	 * empty UserType is treated as an error rather than assumed non-guest, since
+	 * that's an unexpected shape we can't safely authenticate against.
 	 */
-	private async getCurrentUser(): Promise<AuthUser> {
-		const response = await this.dataClient.fetch(
-			`/services/data/v${API_VERSION}/chatter/users/me`,
-			{
-				method: "GET",
-				headers: { Accept: "application/json" },
-			},
-		);
-		if (!response.ok) {
-			throw new Error(`Failed to fetch current user: HTTP ${response.status}`);
+	private async getCurrentUser(): Promise<AuthUser | null> {
+		const data = await this.dataClient.execute<CurrentUserGraphQLResult>(CURRENT_USER_QUERY);
+		const currentUser = data.uiapi?.currentUser;
+
+		if (!currentUser?.Id) {
+			return null;
 		}
-		const data = (await response.json()) as { id?: string; name?: string };
-		if (!data?.id) {
-			throw new Error("Current user response missing id");
+
+		const userType = currentUser.UserType?.value;
+
+		if (!userType) {
+			throw new Error("Current user response missing UserType");
 		}
-		return { id: data.id, name: data.name || "User" };
+
+		if (userType === "Guest") {
+			return null;
+		}
+
+		return { id: currentUser.Id, name: currentUser.Name?.value || "User" };
 	}
 }

package/dist/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@salesforce/ui-bundle-template-base-sfdx-project",
-  "version": "12.4.1",
+  "version": "12.4.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@salesforce/ui-bundle-template-base-sfdx-project",
-      "version": "12.4.1",
+      "version": "12.4.2",
       "license": "SEE LICENSE IN LICENSE.txt",
       "dependencies": {
         "fast-xml-parser": "^5.9.3",

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/ui-bundle-template-base-sfdx-project",
-  "version": "12.4.1",
+  "version": "12.4.2",
   "description": "Base SFDX project template",
   "license": "SEE LICENSE IN LICENSE.txt",
   "publishConfig": {

package/dist/scripts/org-setup-config-schema.mjs

@@ -72,8 +72,8 @@ export const ConfigSchema = z
         // Required because React (Site Container) sites hide SSO config in Admin UI.
         authProviderNames: z.array(z.string().min(1)).min(1),
         // Permission set to assign to community users created via SSO.
-        // Required because getCurrentUser() calls /chatter/users/me which needs
-        // API access (PermissionsApiEnabled) that the community profile lacks.
+        // Required because getCurrentUser() calls UI API GraphQL (uiapi.currentUser)
+        // which needs API access (PermissionsApiEnabled) that the community profile lacks.
         // Typically the app's "*_Guest_User_Api_Access" permset.
         communityUserPermset: z.string().min(1).optional(),
       })

package/dist/scripts/org-setup.mjs

@@ -546,7 +546,7 @@ function loadSelfRegConfig(config) {
  * - communityMemberProfile: profile added to NetworkMemberGroup (required for access)
  * - authProviderNames: DeveloperNames of AuthProvider (OAuth) or SamlSsoConfig (SAML) records to link to site
  * - communityUserPermset: permset assigned to community users so getCurrentUser()
- *   works (requires PermissionsApiEnabled for /chatter/users/me via /sf/api/)
+ *   works (requires PermissionsApiEnabled for UI API GraphQL via /sf/api/)
  *
  * Returns null if no "socialLogin" section exists in config (the step is hidden).
  */
@@ -937,7 +937,7 @@ function addCommunityMemberProfile(profileName, siteName, targetOrg) {
  * Assign a permission set to all existing community users with a given profile.
  *
  * After SSO login, community users need the app's API-enabled permset so that
- * getCurrentUser() (which calls /chatter/users/me via the /sf/api/ proxy) works.
+ * getCurrentUser() (which calls UI API GraphQL via the /sf/api/ proxy) works.
  * Without PermissionsApiEnabled the proxy returns API_DISABLED_FOR_ORG and the
  * React app treats the user as unauthenticated.
  *
@@ -2309,7 +2309,7 @@ async function main() {
       addCommunityMemberProfile(socialLoginConfig.communityMemberProfile, siteName, targetOrg);
 
       // Sub-step 4 (optional): Assign API-enabled permset to community users.
-      // Without this, getCurrentUser() fails because /chatter/users/me requires
+      // Without this, getCurrentUser() fails because UI API GraphQL requires
       // PermissionsApiEnabled which the standard community profile lacks.
       if (socialLoginConfig.communityUserPermset) {
         console.log(`  [4/${totalSubSteps}] Assigning API permset to community users...`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/ui-bundle-template-app-angular-template-b2x",
-  "version": "12.4.1",
+  "version": "12.4.2",
   "description": "Salesforce Angular external app template",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "",