@salesforce/ui-bundle-template-feature-react-authentication 12.4.0 → 12.4.2

package/README.md

@@ -8,7 +8,7 @@ This feature provides authentication functionality for Salesforce UI Bundles, in
 
 ## Features
 
-- Checks authentication status via Salesforce Chatter API (`/chatter/users/me`)
+- Checks authentication status via UI API GraphQL (`uiapi.currentUser`)
 - Protects routes with automatic redirect to login
 - Supports return URL (`retUrl`) query parameter for post-login navigation
 - Displays user profile information from Salesforce
@@ -77,16 +77,16 @@ dev server proxies `sdk.fetch` to the org **outside the Experience site's
 guest/community context**, so `Site.getBaseUrl()` is blank and the site session does
 not exist.
 
-| Surface                              | Local preview (`localhost`)                                                                           | Deployed site                                            |
-| ------------------------------------ | ----------------------------------------------------------------------------------------------------- | -------------------------------------------------------- |
-| **Social Login buttons**             | Not shown — `/auth/social-login-config` returns `{"authProviders":[],"samlProviders":[]}`.            | Renders configured providers                             |
-| **MFA challenge** (`ForceTwoFactor`) | `Site.login()` cannot establish the site session, so login returns _"Your login attempt has failed…"_ | Works — platform renders and completes the MFA challenge |
-| **`/chatter/users/me`**              | May return `401` (no site session)                                                                    | Works                                                    |
+| Surface                                      | Local preview (`localhost`)                                                                            | Deployed site                                            |
+| -------------------------------------------- | ------------------------------------------------------------------------------------------------------ | -------------------------------------------------------- |
+| **Social Login buttons**                     | Not shown — `/auth/social-login-config` returns `{"authProviders":[],"samlProviders":[]}`.             | Renders configured providers                             |
+| **MFA challenge** (`ForceTwoFactor`)         | `Site.login()` cannot establish the site session, so login returns _"Your login attempt has failed…"_  | Works — platform renders and completes the MFA challenge |
+| **Current-user check** (`uiapi.currentUser`) | Works — the local dev proxy forwards `/services/data/**` GraphQL calls with the CLI-authenticated user | Works                                                    |
 
 **How to test these:** open the **published site** login page, e.g.
-`https://<your-domain>.site.com/<site-path>/login`. The empty responses and `401`s
-above are expected locally and are **not** a misconfiguration — the deploy and
-provider linking (`AuthConfigProviders`) are verified server-side.
+`https://<your-domain>.site.com/<site-path>/login`. The empty response and login
+failure above are expected locally and are **not** a misconfiguration — the deploy
+and provider linking (`AuthConfigProviders`) are verified server-side.
 
 ## Notes
 

package/dist/CHANGELOG.md

@@ -3,6 +3,23 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [12.4.2](https://github.com/salesforce-experience-platform-emu/webapps/compare/v12.4.1...v12.4.2) (2026-09-02)
+
+
+### Bug Fixes
+
+* **ui-bundle:** use UI API GraphQL instead of Chatter for current-user lookup ([#951](https://github.com/salesforce-experience-platform-emu/webapps/issues/951)) ([47c28c1](https://github.com/salesforce-experience-platform-emu/webapps/commit/47c28c10a0b838eacef6c4a3e45e3a4fe587d20a))
+
+
+
+## [12.4.1](https://github.com/salesforce-experience-platform-emu/webapps/compare/v12.4.0...v12.4.1) (2026-09-02)
+
+**Note:** Version bump only for package @salesforce/ui-bundle-template-base-sfdx-project
+
+
+
+
+
 ## [12.4.0](https://github.com/salesforce-experience-platform-emu/webapps/compare/v12.3.13...v12.4.0) (2026-09-02)
 
 **Note:** Version bump only for package @salesforce/ui-bundle-template-base-sfdx-project

package/dist/force-app/main/default/uiBundles/feature-react-authentication/package.json

@@ -19,8 +19,8 @@
     "graphql:schema": "node scripts/get-graphql-schema.mjs"
   },
   "dependencies": {
-    "@salesforce/platform-sdk": "^12.4.0",
-    "@salesforce/ui-bundle": "^12.4.0",
+    "@salesforce/platform-sdk": "^12.4.2",
+    "@salesforce/ui-bundle": "^12.4.2",
     "@tailwindcss/vite": "^4.1.17",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
@@ -47,8 +47,8 @@
     "@graphql-eslint/eslint-plugin": "^4.1.0",
     "@graphql-tools/utils": "^11.0.0",
     "@playwright/test": "^1.49.0",
-    "@salesforce/graphiti": "^12.4.0",
-    "@salesforce/vite-plugin-ui-bundle": "^12.4.0",
+    "@salesforce/graphiti": "^12.4.2",
+    "@salesforce/vite-plugin-ui-bundle": "^12.4.2",
     "@testing-library/jest-dom": "^6.6.3",
     "@testing-library/react": "^16.1.0",
     "@testing-library/user-event": "^14.5.2",

package/dist/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@salesforce/ui-bundle-template-base-sfdx-project",
-  "version": "12.4.0",
+  "version": "12.4.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@salesforce/ui-bundle-template-base-sfdx-project",
-      "version": "12.4.0",
+      "version": "12.4.2",
       "license": "SEE LICENSE IN LICENSE.txt",
       "dependencies": {
         "fast-xml-parser": "^5.9.3",

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/ui-bundle-template-base-sfdx-project",
-  "version": "12.4.0",
+  "version": "12.4.2",
   "description": "Base SFDX project template",
   "license": "SEE LICENSE IN LICENSE.txt",
   "publishConfig": {

package/dist/scripts/org-setup-config-schema.mjs

@@ -72,8 +72,8 @@ export const ConfigSchema = z
         // Required because React (Site Container) sites hide SSO config in Admin UI.
         authProviderNames: z.array(z.string().min(1)).min(1),
         // Permission set to assign to community users created via SSO.
-        // Required because getCurrentUser() calls /chatter/users/me which needs
-        // API access (PermissionsApiEnabled) that the community profile lacks.
+        // Required because getCurrentUser() calls UI API GraphQL (uiapi.currentUser)
+        // which needs API access (PermissionsApiEnabled) that the community profile lacks.
         // Typically the app's "*_Guest_User_Api_Access" permset.
         communityUserPermset: z.string().min(1).optional(),
       })

package/dist/scripts/org-setup.mjs

@@ -546,7 +546,7 @@ function loadSelfRegConfig(config) {
  * - communityMemberProfile: profile added to NetworkMemberGroup (required for access)
  * - authProviderNames: DeveloperNames of AuthProvider (OAuth) or SamlSsoConfig (SAML) records to link to site
  * - communityUserPermset: permset assigned to community users so getCurrentUser()
- *   works (requires PermissionsApiEnabled for /chatter/users/me via /sf/api/)
+ *   works (requires PermissionsApiEnabled for UI API GraphQL via /sf/api/)
  *
  * Returns null if no "socialLogin" section exists in config (the step is hidden).
  */
@@ -937,7 +937,7 @@ function addCommunityMemberProfile(profileName, siteName, targetOrg) {
  * Assign a permission set to all existing community users with a given profile.
  *
  * After SSO login, community users need the app's API-enabled permset so that
- * getCurrentUser() (which calls /chatter/users/me via the /sf/api/ proxy) works.
+ * getCurrentUser() (which calls UI API GraphQL via the /sf/api/ proxy) works.
  * Without PermissionsApiEnabled the proxy returns API_DISABLED_FOR_ORG and the
  * React app treats the user as unauthenticated.
  *
@@ -2309,7 +2309,7 @@ async function main() {
       addCommunityMemberProfile(socialLoginConfig.communityMemberProfile, siteName, targetOrg);
 
       // Sub-step 4 (optional): Assign API-enabled permset to community users.
-      // Without this, getCurrentUser() fails because /chatter/users/me requires
+      // Without this, getCurrentUser() fails because UI API GraphQL requires
       // PermissionsApiEnabled which the standard community profile lacks.
       if (socialLoginConfig.communityUserPermset) {
         console.log(`  [4/${totalSubSteps}] Assigning API permset to community users...`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/ui-bundle-template-feature-react-authentication",
-  "version": "12.4.0",
+  "version": "12.4.2",
   "description": "Authentication feature for UI Bundles",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "",
@@ -16,7 +16,7 @@
     "clean": "rm -rf dist"
   },
   "devDependencies": {
-    "@salesforce/ui-bundle": "^12.4.0",
+    "@salesforce/ui-bundle": "^12.4.2",
     "@tanstack/react-form": "^1.27.7",
     "@types/react": "^19.2.7",
     "@types/react-dom": "^19.2.3",