Skip to content

0.1.0 rc.0 - #14

Open
monarcode wants to merge 24 commits into
mainfrom
0.1.0-rc.0
Open

monarcode wants to merge 24 commits into
mainfrom
0.1.0-rc.0

Conversation

@monarcode

Copy link
Copy Markdown
Owner
  • feat(http)!: authFetch accepts a URL or a Request; createAuthFetch takes an options object
  • feat!: unwrap mirror sign-in errors, take options in useMirrorAuth, add connectSession
  • feat!: hooks without a hooks file, typed by one Register in the main entry point
  • feat(server)!: one request-scoped session object, with startAuth, routerAuth, SessionOf and UserOf
  • feat(server): middleware and server guards for Start, React Router and Next; export loginHref
  • feat(server): add a session route that the mirror client calls
  • feat(server): session route for the browser client, with sessionHandler, sessionRoute and createMirrorAuth's endpoint
  • feat: add isSignedIn, loader guards and a deep link handler
  • refactor(react-router): split the loader guards into their own functions
  • docs: revise the guides and examples to match the current API
  • docs: add a Hybrid server-rendering page and fill gaps in hovers
  • docs(react-router): explain when to use requireSessionLoader or requireSession
  • refactor(examples): lay out the effetch example as the Effect guide does
  • docs: check the hovers and guides against the code
  • fix!: fix sign-out, guard and session-route edge cases
  • feat(next): add signIn, signOut and updateUser to NextSession
  • feat(site): rewrite the landing page's pitch and features
  • feat(site): retitle the landing page's tour around the typed user

…kes an

options object

An HTTP client with a fetch option (ky, axios's fetch adapter,
openapi-fetch) can now send its requests through authFetch.

BREAKING CHANGE: createAuthFetch(auth, baseUrl, options?) is now
createAuthFetch(auth, { baseUrl, ...options }). AuthFetch's first
parameter is string | URL | Request.
connectSession

BREAKING CHANGE: a createMirrorAuth client's signIn rejects with the app's
own error instead of a USER_VALIDATION_FAILED AuthError. useMirrorAuth
takes { create, session, onChange }. TanStack Start's connectSession(router)
replaces sessionHydration(auth) and connectAuth(router); sessionHydration,
SessionHydration and DehydratedSession are removed.
- Add sessionHandler and per-framework sessionRoute (Start, React Router, Next)
- Make createMirrorAuth's revalidate, signOut and credentials optional with
  endpoint
- Move the SSR examples and guides to the session route
- Add isSignedIn(state), a selector that narrows user
- Let React Router's guards be loaders, and default loginPath to "/login"
- Add deepLinkHandler to Expo for app/+native-intent.tsx
- Add requireSessionLoader and redirectIfSignedInLoader in place of the loader
  overloads of requireSession and redirectIfSignedIn
- Update the examples, the React Router guide and the reference
- Stop navigating from sign-in pages, since the sign-in page's guard redirects
- Call the API with createAuthFetch over the request's session in the
  server-rendering guides
- Add the profile screen to the Expo guide and tidy wording across the site's
  pages
- Add a page for apps where the browser signs in with your backend and the
  server keeps the session
- Document signIn, updateUser and createMirrorAuth's endpoint, revalidate and
  signOut in hovers
- Make check-docs check members of unexported aliases and skip overloads without
  their own JSDoc
…reSession

- Use requireSessionLoader as a whole loader, usually a layout's
- Use requireSession inside a loader that also loads data, since React Router
  runs nested loaders at the same time
- Split it into backend, refresh, auth, layer, api and runtime modules
- Remove FetchLive: the API and refresh clients turn off Effect's tracing
  headers themselves
- Turn off tracing headers in the guide's refresh client too, since they fail
  CORS preflight
- Name the error codes each hover left out, and correct wrong statements
- Add sections the guides lacked, such as Sign out for TanStack Start
- Fix the Expo locking and Effect sign-in examples
- Revoke tokens on signOut() before restore, and drop INVALID_SESSION for an
  expired or outdated saved session
- Reject bad loginPath, missing auth context and foreign Request objects with
  INVALID_OPTIONS, and answer 500 for setup errors in the session route
- Add AuthRouter, and align example apps and docs with their guides
- Keep the ServerAuth, RequestAuth and NextSession names in declaration files
  for token users, fixing TS4023
- Call login on its own line before signIn in the guides and examples
- Change the pitch, and add a lead naming the supported setups
- Lead the features with one refresh at a time, and say what each one gives
- Add the test suite to the closing's evidence
- Let the Release workflow and prepare-release accept -rc.N versions
- Wait for the cookie to unseal in a mirror test instead of a fixed number of
  turns
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Nov 14, 2026 •

Copy link
Copy Markdown

Deploying session-kit with  Cloudflare Pages  Cloudflare Pages

Latest commit: 6b1ceae
Status: ✅  Deploy successful!
Preview URL: https://d63d476c.session-kit.pages.dev
Branch Preview URL: https://0-1-0-rc-0.session-kit.pages.dev

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant