@stevederico/skateboard-ui 1.2.13 → 1.2.15

package/CHANGELOG.md

@@ -1,4 +1,8 @@
 # CHANGELOG
+1.2.14
+
+  Fix isAuthenticated validation
+
 1.2.13
 
   Fix CSRF localStorage sync

package/ProtectedRoute.jsx

@@ -1,8 +1,34 @@
+import { useState, useEffect } from 'react';
 import { Navigate, Outlet } from 'react-router-dom';
-import { isAuthenticated } from './Utilities';
+import { isAuthenticated, apiRequest, getAppKey } from './Utilities';
 
 const ProtectedRoute = () => {
-    return isAuthenticated() ? <Outlet /> : <Navigate to="/signin" replace />;
+    const [status, setStatus] = useState('checking'); // 'checking' | 'valid' | 'invalid'
+
+    useEffect(() => {
+        if (!isAuthenticated()) {
+            setStatus('invalid');
+            return;
+        }
+
+        // Validate session with backend
+        apiRequest('/me')
+            .then(() => setStatus('valid'))
+            .catch(() => {
+                // Clear stale localStorage data
+                const csrfKey = getAppKey('csrf');
+                const userKey = getAppKey('user');
+                localStorage.removeItem(csrfKey);
+                localStorage.removeItem(userKey);
+                setStatus('invalid');
+            });
+    }, []);
+
+    if (status === 'checking') {
+        return null; // Or a loading spinner
+    }
+
+    return status === 'valid' ? <Outlet /> : <Navigate to="/signin" replace />;
 };
 
 export default ProtectedRoute;

package/Utilities.js

@@ -118,7 +118,8 @@ export function isAuthenticated() {
         return true;
     }
     const csrfKey = getAppKey('csrf');
-    return Boolean(safeGetItem(csrfKey));
+    const userKey = getAppKey('user');
+    return Boolean(safeGetItem(csrfKey)) && Boolean(safeGetItem(userKey));
 }
 
 export function getBackendURL() {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stevederico/skateboard-ui",
   "private": false,
-  "version": "1.2.13",
+  "version": "1.2.15",
   "type": "module",
   "exports": {
     "./AppSidebar": {