spine-framework 0.3.90 → 0.3.91

package/.framework/src/contexts/AuthContext.tsx

@@ -163,8 +163,10 @@ export function AuthProvider({ children }: AuthProviderProps) {
     }
   }
 
-  const [user, setUser] = useState<User | null>(getStoredUser)
-  const [isLoading, setIsLoading] = useState(false) // Start with false, will set to true only if we need to check
+  const storedUser = getStoredUser()
+  const [user, setUser] = useState<User | null>(storedUser)
+  // If we have a stored user, start loading to verify context before rendering routes
+  const [isLoading, setIsLoading] = useState(!!storedUser)
   const [isLoggingIn, setIsLoggingIn] = useState(false)
 
   // Save user to sessionStorage whenever it changes
@@ -269,10 +271,10 @@ export function AuthProvider({ children }: AuthProviderProps) {
     // Check initial auth state
     const checkAuth = async () => {
       try {
-        // If user is loaded from sessionStorage, skip the loading state but
-        // still refresh context in the background to pick up role changes
+        // If user is loaded from sessionStorage, verify context from server
+        // before rendering routes (isLoading starts true in this case)
         if (user) {
-          console.log('User already loaded, refreshing context in background:', user.id)
+          console.log('User loaded from storage, verifying context:', user.id)
           const { data: { session } } = await supabase.auth.getSession()
           if (session?.user) {
             const userContext = await fetchUserContext()
@@ -280,13 +282,15 @@ export function AuthProvider({ children }: AuthProviderProps) {
               setUserWithStorage(userContext)
               setAccountId(userContext.account_id)
             }
+          } else {
+            // Session expired — clear stored user
+            setUserWithStorage(null)
+            setAccountId(null)
           }
-          setIsLoading(false)
-          console.log('Auth check completed, loading set to false')
           return
         }
         
-        // Only show loading if we actually need to check auth
+        // No stored user — show loading spinner while checking
         setIsLoading(true)
         console.log('Checking initial auth state...')
         const { data: { session } } = await supabase.auth.getSession()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.90",
+  "version": "0.3.91",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {