fix: auth post

[deardarlingoose]

User description

refs #626 now definitely non-flickering

---

PR Type

Bug fix, Enhancement

---

Description

• Fix authentication token handling in API requests

• Add token availability check mechanism

• Improve handling of loading state

• Prevent race conditions in auth configuration

---

Changes walkthrough 📝

	Relevant files
Bug fix	AuthProvider.tsx Improve auth token state handling                                                www/app/lib/AuthProvider.tsx Added comment explaining that auth configuration may not run before mutations Updated configureApiAuth call to handle three states: authenticated (token), loading (undefined), and unauthenticated (null) Improved conditional logic for token state handling +5/-1
Enhancement	apiClient.tsx Enhance API auth configuration mechanism                                  www/app/lib/apiClient.tsx Changed currentAuthToken initial value to undefined to detect unconfigured state Updated configureApiAuth function to accept undefined as a valid state Added logic to prevent overwriting token during loading state Improved function contract with better type definitions +3/-1

---

Need help?

Type /help how to ... in the comments thread for any questions about PR-Agent usage.

Check out the documentation for more information.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
reflector	Ready	Preview	Comment	Sep 9, 2025 8:46pm
reflector-media	Ready	Preview	Comment	Sep 9, 2025 8:46pm

[pr-agent-monadical]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🎫 Ticket compliance analysis 🔶 626 - Partially compliant Compliant requirements: Fix authentication token handling in API requests Improve error handling for auth configuration Non-compliant requirements: Add retry mechanism for token availability Requires further human verification: Ensure auth token is available before API calls

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Missing Retry Logic The ticket mentions adding a retry mechanism for token availability, but the implementation doesn't include any retry logic. The code only checks the token state once without attempting to retry if the token is not available. export const configureApiAuth = (token: string | null | undefined) => { // watch only for the initial loading; "reloading" state assumes token presence/absence if (token === undefined && currentAuthToken !== undefined) return; currentAuthToken = token; Incomplete Implementation The function waitForAuthTokenDefinitivePresenceOrAbscence mentioned in the ticket description is not present in the code diff. This function was supposed to ensure auth token state is determined. let currentAuthToken: string | null | undefined = undefined; // the function contract: lightweight, idempotent export const configureApiAuth = (token: string | null | undefined) => { // watch only for the initial loading; "reloading" state assumes token presence/absence if (token === undefined && currentAuthToken !== undefined) return; currentAuthToken = token; };