@snokam/auth 5.4.5 → 5.5.0

package/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [5.5.0](https://github.com/snokam/components/compare/@snokam/auth@5.4.5...@snokam/auth@5.5.0) (2026-10-22)
+
+### Features
+
+- **lint:** ban code comments + fix mobile fill in the Olaf host ([#3015](https://github.com/snokam/components/issues/3015)) ([938549b](https://github.com/snokam/components/commit/938549b8c1ed68cdc49be19cc168c1440c371199))
+
 ## [5.4.5](https://github.com/snokam/components/compare/@snokam/auth@5.4.4...@snokam/auth@5.4.5) (2026-10-22)
 
 **Note:** Version bump only for package @snokam/auth

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@snokam/auth",
   "description": "Snøkam auth components",
-  "version": "5.4.5",
+  "version": "5.5.0",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "files": [
@@ -26,12 +26,12 @@
     "@snokam/employees-client": "^1.3.0",
     "next-auth": "4.24.15",
     "path-to-regexp": "^8.4.2",
-    "@snokam/platform-client": "5.3.1",
-    "@snokam/react-query": "1.1.0",
-    "@snokam/sanity-page-content": "6.5.6",
     "@snokam/identity": "1.1.0",
-    "@snokam/tenant": "4.3.1",
-    "@snokam/ui": "6.3.0"
+    "@snokam/react-query": "1.1.0",
+    "@snokam/sanity-page-content": "6.6.0",
+    "@snokam/tenant": "4.4.0",
+    "@snokam/ui": "6.4.0",
+    "@snokam/platform-client": "5.3.1"
   },
   "peerDependencies": {
     "next": "16.3.8",

package/src/hooks.ts

@@ -102,7 +102,6 @@ export function useAuth() {
   const { data: rawSession, status, update } = useSession();
   const { active } = useImpersonation();
 
-  // A host of another business holds only the Vis som session, never the actor's own sign-in.
   const session = useMemo(() => {
     if (!active) return rawSession;
     return {

package/src/impersonation/pass.ts

@@ -2,8 +2,6 @@ import { open, seal } from "../ticket/seal.ts";
 
 const PURPOSE = "impersonation-pass";
 
-// A host of another business never gets the actor's own sign-in, so this sealed, host-bound pass
-// is what tells the auth middleware that the host holds a Vis som session.
 export function sealPass(
   host: string,
   tokenId: string,

package/src/options/request.ts

@@ -17,7 +17,6 @@ export function requestHost(req?: { headers?: HeaderBag }): string | undefined {
 export function requestClientIp(req?: {
   headers?: HeaderBag;
 }): string | undefined {
-  // Trusted edge headers first (Front Door, unspoofable); rightmost XFF entry as a fallback.
   const edge =
     first(req?.headers, "x-azure-clientip") ??
     first(req?.headers, "x-azure-socketip");

package/src/route-handler/token.ts

@@ -12,11 +12,6 @@ import { exchangeSsoToken } from "../sso/exchange";
 export type TokenResult =
   { accessToken: string; expiresOn: number } | { error: Response };
 
-/**
- * Resolves the SIGNED-IN admin's own product access token (never the impersonation token). Shared
- * by the token handler and the impersonation start/end handlers so the mint/end calls to the
- * platform are authenticated as the real admin.
- */
 export async function resolveAccessToken(
   authConfig: Auth.Config,
   request: Request

package/src/session/callback-url.ts

@@ -16,7 +16,6 @@ export function safeCallbackTarget(
   return AUTH_FLOW.test(target) ? "/" : target;
 }
 
-// A callbackUrl already carries the app's basePath; the Next router would add it again.
 export function callbackDestination(
   callbackUrl: string | null,
   origin: string

package/src/theme/employee-theme-sync.tsx

@@ -15,11 +15,6 @@ function isMode(value: unknown): value is ColorSchemeMode {
   return MODES.includes(value as ColorSchemeMode);
 }
 
-/**
- * Seeds the page theme from the effective user's saved settings.colorScheme. The token handler
- * swaps in the impersonation token during a view-as session, so /me is already the target's
- * record and their theme applies without any impersonation-specific code here.
- */
 export function EmployeeThemeSync() {
   const { isAuthenticated, getToken } = useAuth();
   const { setMode } = useAdminTheme();
@@ -38,7 +33,6 @@ export function EmployeeThemeSync() {
     [basePath, isAuthenticated, getToken]
   );
 
-  // Same client name and param as every app's useEmployeesQuery, so this shares their cache entry.
   const { data } = useClientQuery({
     name: "Employees",
     client,