@snokam/auth 6.0.8 → 6.0.9

package/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [6.0.9](https://github.com/snokam/components/compare/@snokam/auth@6.0.8...@snokam/auth@6.0.9) (2026-11-07)
+
+### Bug Fixes
+
+- **web:** platform pages get the api base, so /manage works again ([#3270](https://github.com/snokam/components/issues/3270)) ([1f5ed27](https://github.com/snokam/components/commit/1f5ed279c6ddb80fc6733ea37c0322615bd7c64c))
+
 ## [6.0.8](https://github.com/snokam/components/compare/@snokam/auth@6.0.7...@snokam/auth@6.0.8) (2026-11-06)
 
 **Note:** Version bump only for package @snokam/auth

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@snokam/auth",
   "description": "Snøkam auth components",
-  "version": "6.0.8",
+  "version": "6.0.9",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "files": [
@@ -25,12 +25,12 @@
     "@mui/material": "^9.2.0",
     "next-auth": "4.24.15",
     "path-to-regexp": "^8.4.2",
+    "@snokam/api-client": "1.0.0",
     "@snokam/identity": "1.1.0",
     "@snokam/page-content": "6.9.7",
     "@snokam/react-query": "1.1.0",
-    "@snokam/ui": "7.2.2",
     "@snokam/tenant": "4.5.3",
-    "@snokam/api-client": "1.0.0"
+    "@snokam/ui": "7.2.2"
   },
   "peerDependencies": {
     "next": "16.3.8",

package/src/options/callbacks.ts

@@ -4,6 +4,7 @@ import {
   isColorScheme,
   type ColorScheme,
 } from "./employee-profile";
+import { profileIsStale } from "./profileAge";
 import { requestOrigin } from "./request";
 import { Auth } from "../types";
 
@@ -35,6 +36,7 @@ export function callbacks(config: Auth.Config): NextAuthOptions["callbacks"] {
         );
         if (employee.colorScheme) token.colorScheme = employee.colorScheme;
         token.picture = employee.imageUrl ?? null;
+        token.profileCheckedAt = Date.now();
       }
 
       const handoff = user as HandoffUser | undefined;
@@ -51,23 +53,28 @@ export function callbacks(config: Auth.Config): NextAuthOptions["callbacks"] {
         );
         if (employee.colorScheme) token.colorScheme = employee.colorScheme;
         if (employee.imageUrl) token.picture = employee.imageUrl;
+        token.profileCheckedAt = Date.now();
       }
 
-      if (trigger === "update") {
-        if (isColorScheme(session?.colorScheme))
-          token.colorScheme = session.colorScheme;
+      if (trigger === "update" && isColorScheme(session?.colorScheme))
+        token.colorScheme = session.colorScheme;
 
-        if (session?.refreshProfile && token.refreshToken) {
-          const employee = await fetchEmployeeProfile(
-            {
-              ...config,
-              tenantId: (token.tid as string | undefined) ?? config.tenantId,
-            },
-            token.refreshToken as string,
-            token.authMethod as string | undefined
-          );
-          if (employee.imageUrl) token.picture = employee.imageUrl;
-        }
+      const refreshRequested =
+        trigger === "update" && !!session?.refreshProfile;
+      if (
+        token.refreshToken &&
+        (refreshRequested || profileIsStale(token.profileCheckedAt, Date.now()))
+      ) {
+        const employee = await fetchEmployeeProfile(
+          {
+            ...config,
+            tenantId: (token.tid as string | undefined) ?? config.tenantId,
+          },
+          token.refreshToken as string,
+          token.authMethod as string | undefined
+        );
+        if (employee.imageUrl) token.picture = employee.imageUrl;
+        token.profileCheckedAt = Date.now();
       }
 
       return token;

package/src/options/profileAge.test.ts

@@ -0,0 +1,19 @@
+import assert from "node:assert/strict";
+import { describe, it } from "node:test";
+import { PROFILE_MAX_AGE_MS, profileIsStale } from "./profileAge.ts";
+
+describe("the profile a session carries", () => {
+  const now = 1_800_000_000_000;
+
+  it("is fetched again when the session never recorded when it was read", () => {
+    assert.equal(profileIsStale(undefined, now), true);
+  });
+
+  it("is kept while it is younger than a day", () => {
+    assert.equal(profileIsStale(now - PROFILE_MAX_AGE_MS + 1, now), false);
+  });
+
+  it("is fetched again once it is a day old", () => {
+    assert.equal(profileIsStale(now - PROFILE_MAX_AGE_MS, now), true);
+  });
+});

package/src/options/profileAge.ts

@@ -0,0 +1,5 @@
+export const PROFILE_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+
+export function profileIsStale(checkedAt: unknown, now: number): boolean {
+  return typeof checkedAt !== "number" || now - checkedAt >= PROFILE_MAX_AGE_MS;
+}