spine-framework 0.3.89 → 0.3.91

package/.framework/src/contexts/AppContext.tsx

@@ -116,10 +116,11 @@ export function AppsRegistryProvider({ children }: AppsRegistryProviderProps) {
     }
   }
 
-  // Fetch once when user changes (login/logout), not on every render
+  // Fetch when user identity or roles change (roles may update after registration)
+  const rolesKey = user?.roles?.join(',') || ''
   useEffect(() => {
     fetchApps()
-  }, [user?.id, user?.account_id])
+  }, [user?.id, user?.account_id, rolesKey])
 
   const routableApps = apps.filter(
     app => app.route_prefix != null && app.renderer !== 'none'

package/.framework/src/contexts/AuthContext.tsx

@@ -163,8 +163,10 @@ export function AuthProvider({ children }: AuthProviderProps) {
     }
   }
 
-  const [user, setUser] = useState<User | null>(getStoredUser)
-  const [isLoading, setIsLoading] = useState(false) // Start with false, will set to true only if we need to check
+  const storedUser = getStoredUser()
+  const [user, setUser] = useState<User | null>(storedUser)
+  // If we have a stored user, start loading to verify context before rendering routes
+  const [isLoading, setIsLoading] = useState(!!storedUser)
   const [isLoggingIn, setIsLoggingIn] = useState(false)
 
   // Save user to sessionStorage whenever it changes
@@ -269,13 +271,26 @@ export function AuthProvider({ children }: AuthProviderProps) {
     // Check initial auth state
     const checkAuth = async () => {
       try {
-        // Early exit if user is already loaded
+        // If user is loaded from sessionStorage, verify context from server
+        // before rendering routes (isLoading starts true in this case)
         if (user) {
-          console.log('User already loaded, skipping auth check:', user.id)
+          console.log('User loaded from storage, verifying context:', user.id)
+          const { data: { session } } = await supabase.auth.getSession()
+          if (session?.user) {
+            const userContext = await fetchUserContext()
+            if (userContext) {
+              setUserWithStorage(userContext)
+              setAccountId(userContext.account_id)
+            }
+          } else {
+            // Session expired — clear stored user
+            setUserWithStorage(null)
+            setAccountId(null)
+          }
           return
         }
         
-        // Only show loading if we actually need to check auth
+        // No stored user — show loading spinner while checking
         setIsLoading(true)
         console.log('Checking initial auth state...')
         const { data: { session } } = await supabase.auth.getSession()

package/.framework/src/pages/auth/RegisterPage.tsx

@@ -34,6 +34,7 @@
 import React, { useState, useEffect, useCallback } from 'react'
 import { Link, useNavigate, useSearchParams } from 'react-router-dom'
 import { LoadingSpinner } from '../../components/ui/LoadingSpinner'
+import { useAuth } from '../../contexts/AuthContext'
 import { supabase } from '../../lib/supabase'
 
 // ─── TYPES ────────────────────────────────────────────────────────────────────
@@ -132,6 +133,7 @@ function getPostRegistrationRedirect(
 export function RegisterPage() {
   const [searchParams] = useSearchParams()
   const navigate = useNavigate()
+  const { refreshUser } = useAuth()
   const inviteToken = searchParams.get('t')
 
   // Registration config
@@ -342,6 +344,10 @@ export function RegisterPage() {
         return
       }
 
+      // Re-fetch user context so roles are populated (complete-registration
+      // sets role_id, but the initial auth fetch may have raced ahead of it)
+      await refreshUser()
+
       // Navigate to configured post-registration destination
       const redirectPath = getPostRegistrationRedirect(regConfig, searchParams, false)
       navigate(redirectPath, { replace: true })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.89",
+  "version": "0.3.91",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {