@samebase/convex-auth-tanstack-start 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.1.2
+
+- `useSignOutSession` loads `landingUrl` with `location.replace`, so Back after a sign-out no longer
+  returns to the page of the session that ended.
+
+## 0.1.1
+
+- `useSignOutSession(url, landingUrl)` loads `landingUrl` after the sign-out instead of reloading
+  the page. A reload asked the server for the private page the visitor signed out on, and the app's
+  gate answered with its sign-in redirect, so the visitor landed on `/?next=/settings`.
+
 ## 0.1.0
 
 - The `convex-auth` entry of `@samebase/convex-hosting-tanstack-start` 0.10.2, as a package of its

package/README.md

@@ -130,11 +130,13 @@ Without `next`, the gate is `redirectWithoutSession(serverContext, { to: "/signi
   Convex's provider reports loading during the server render and the hydration, so the token that
   `SessionProvider` was given decides until it settles, and both renders agree, where Convex's
   `Authenticated` and `Unauthenticated` render nothing on the server.
-- `useSignOutSession(url)`: returns a function that posts to the app's sign-out route, such as
-  `/auth/signout`, and only after a 2xx calls Convex Auth's `signOut()`, which clears the stored
-  token in every tab, and reloads the page; otherwise it returns `false` and the session stays.
-  Convex Auth's `signOut()` resolves even when the route failed, so a reload after it alone signs
-  the user back in from the cookie.
+- `useSignOutSession(url, landingUrl)`: returns a function that posts to the app's sign-out route,
+  such as `/auth/signout`, and only after a 2xx calls Convex Auth's `signOut()`, which clears the
+  stored token in every tab, and loads `landingUrl`, such as `/`, in place of the current history
+  entry; otherwise it returns `false` and the session stays. A reload of the page the visitor signed
+  out on would ask the server for a private page without a session, and a gate would answer with its
+  sign-in redirect and `next`. Convex Auth's `signOut()` resolves even when the route failed, so a
+  reload after it alone signs the user back in from the cookie.
 
 `@convex-dev/auth` is a peer dependency pinned to 2.0.0-beta.0, because `convexAuth()` resolves a
 file inside that version. An app on Convex Auth 0.0.x stays on

package/dist/index.d.ts

@@ -54,10 +54,13 @@ export declare function SignedOut({ children }: {
  * to the route; when it fails or cannot be reached, it returns `false` and changes nothing, because
  * the cookie and the session stay. Convex Auth's `signOut()` resolves even when the route failed, so
  * the route's answer decides. After a 2xx, `signOut()` clears the stored access token and tells the
- * other tabs (its own call to the route is then redundant), and the page reloads, because
- * `expectAuth` holds queries only before the first authentication.
+ * other tabs (its own call to the route is then redundant), and the browser loads `landingUrl`,
+ * such as `/`, with a full load, because `expectAuth` holds queries only before the first
+ * authentication. Not a reload: the page the visitor signed out on is usually private, and a
+ * request for it without a session gets the gate's sign-in redirect with `next`. The load replaces
+ * the current history entry: Back after a sign-out skips the page of the session that ended.
  */
-export declare function useSignOutSession(url: string): () => Promise<boolean>;
+export declare function useSignOutSession(url: string, landingUrl: string): () => Promise<boolean>;
 /**
  * A gate's `beforeLoad`: a server render without a session throws `redirect(options)`, whether it
  * found none or knows nothing about one. Only the server render has the cookie; a browser

package/dist/index.js

@@ -77,17 +77,20 @@ export function SignedOut({ children }) {
  * to the route; when it fails or cannot be reached, it returns `false` and changes nothing, because
  * the cookie and the session stay. Convex Auth's `signOut()` resolves even when the route failed, so
  * the route's answer decides. After a 2xx, `signOut()` clears the stored access token and tells the
- * other tabs (its own call to the route is then redundant), and the page reloads, because
- * `expectAuth` holds queries only before the first authentication.
+ * other tabs (its own call to the route is then redundant), and the browser loads `landingUrl`,
+ * such as `/`, with a full load, because `expectAuth` holds queries only before the first
+ * authentication. Not a reload: the page the visitor signed out on is usually private, and a
+ * request for it without a session gets the gate's sign-in redirect with `next`. The load replaces
+ * the current history entry: Back after a sign-out skips the page of the session that ended.
  */
-export function useSignOutSession(url) {
+export function useSignOutSession(url, landingUrl) {
     const { signOut } = useAuthActions();
     return async () => {
         const response = await fetch(url, { method: "POST", credentials: "include" }).catch(() => null);
         if (!response?.ok)
             return false;
         await signOut();
-        location.reload();
+        location.replace(landingUrl);
         return true;
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@samebase/convex-auth-tanstack-start",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Convex Auth cookie sessions in TanStack Start, on any host.",
   "keywords": [
     "auth",