@visns-studio/visns-components 6.5.1 → 6.5.3

package/package.json

@@ -91,7 +91,7 @@
         "react-dom": "^17.0.0 || ^18.0.0"
     },
     "name": "@visns-studio/visns-components",
-    "version": "6.5.1",
+    "version": "6.5.3",
     "description": "Various packages to assist in the development of our Custom Applications.",
     "main": "src/index.js",
     "files": [

package/src/components/auth/Login.jsx

@@ -147,6 +147,11 @@ const Login = ({
                                 window.location.href = result.previous;
                             } else {
                                 setSystemAuth(true);
+                                // Move now, with the profile the server just
+                                // returned — waiting for the background
+                                // re-check to navigate leaves the login form
+                                // on screen for a beat after success.
+                                navigate('/', { replace: true });
                             }
                         }
                     } else {

package/src/components/generic/GenericAuth.jsx

@@ -121,6 +121,17 @@ const GenericAuth = ({
     const [isClientAuthenticated, setIsClientAuthenticated] = useState(false);
 
     const updateAuthStatus = async () => {
+        // Guards must not act while the FIRST profile check is in flight:
+        // evaluated against empty state they bounced dashboard → /login →
+        // dashboard after sign-in. But only block when there is no usable
+        // profile — raising loading over an already-authenticated tree swaps
+        // the whole page for a spinner on every background re-check, which
+        // is its own flicker. With a profile in hand the re-check is
+        // invisible.
+        if (!userProfile.id) {
+            setIsLoading(true);
+        }
+
         try {
             const { data } = await CustomFetch('/ajax/user/profile', 'GET');
 
@@ -135,7 +146,15 @@ const GenericAuth = ({
             }
         } catch (error) {
             setIsLoading(false);
-            if (['Unauthenticatdata.'].includes(error)) {
+            // Was `'Unauthenticatdata.'` — a typo no server response ever
+            // matches, so this redirect had been dead code since it was
+            // written and unauthenticated bounces were left to the route
+            // guard alone.
+            if (
+                ['Unauthenticated.', 'CSRF token mismatch.'].includes(
+                    String(error)
+                )
+            ) {
                 const currentUrl = window.location.pathname;
 
                 setIsAuthenticated(false);

package/src/components/styles/Navigation.module.scss

@@ -888,6 +888,15 @@
     display: flex;
     flex-direction: column;
 
+    /* The rail is `position: fixed` with no z-index, so its notification /
+       switch-account panels — stacked inside it — lost to the content's own
+       contexts (grid dropdowns sit at 1000+) and painted underneath the
+       page. Desktop only: above the content chrome, below modal overlays.
+       The ≤1024px drawer keeps its own 600-under-the-header stacking. */
+    @media (min-width: 1025px) {
+        z-index: 1050;
+    }
+
     /* The rail clips itself so a long nav list can't spill; the panels that
        open from the action rows — the notification list, the account
        switcher — would be cut off by that. The nav list keeps its own