@visns-studio/visns-components 6.5.1 → 6.5.2

package/package.json

@@ -91,7 +91,7 @@
         "react-dom": "^17.0.0 || ^18.0.0"
     },
     "name": "@visns-studio/visns-components",
-    "version": "6.5.1",
+    "version": "6.5.2",
     "description": "Various packages to assist in the development of our Custom Applications.",
     "main": "src/index.js",
     "files": [

package/src/components/generic/GenericAuth.jsx

@@ -121,6 +121,13 @@ const GenericAuth = ({
     const [isClientAuthenticated, setIsClientAuthenticated] = useState(false);
 
     const updateAuthStatus = async () => {
+        // Guards must not act while the profile check is in flight: after a
+        // login flips isAuthenticated this re-runs, and a route evaluated
+        // against the half-updated state bounced dashboard → /login →
+        // dashboard. Loading renders AuthLoading instead, so the user sees
+        // one spinner and one navigation.
+        setIsLoading(true);
+
         try {
             const { data } = await CustomFetch('/ajax/user/profile', 'GET');
 
@@ -135,7 +142,15 @@ const GenericAuth = ({
             }
         } catch (error) {
             setIsLoading(false);
-            if (['Unauthenticatdata.'].includes(error)) {
+            // Was `'Unauthenticatdata.'` — a typo no server response ever
+            // matches, so this redirect had been dead code since it was
+            // written and unauthenticated bounces were left to the route
+            // guard alone.
+            if (
+                ['Unauthenticated.', 'CSRF token mismatch.'].includes(
+                    String(error)
+                )
+            ) {
                 const currentUrl = window.location.pathname;
 
                 setIsAuthenticated(false);