collective-lists

oier/collective-lists

Fork 0

Commit Graph

Author	SHA1	Message	Date
Oier Bravo Urtasun	b297d253d9	fix(auth+pwa): resolve stuck-loading race condition and PWA build error Auth: `getSession()` in a SvelteKit load function races with Supabase's async localStorage init and can return null for a valid session, triggering a spurious login() redirect. Moved auth redirect to (app)/+layout.svelte via $effect, which correctly waits for onAuthStateChange to fire. Also fixed collective data never loading on page refresh (INITIAL_SESSION event, not SIGNED_IN). PWA: SvelteKit blocks Workbox imports in src/service-worker.ts, preventing @vite-pwa/sveltekit from finding the compiled SW output. Switched to generateSW strategy (plugin auto-generates the SW). Custom SW deferred to Fase 2b using src/sw.ts (a filename SvelteKit does not intercept). Docs: added gotchas 6–8 to CLAUDE.md covering both root causes so they are not reintroduced. Updated plan/fase-2b with the sw.ts workaround note. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-12 21:44:14 +02:00
Oier Bravo Urtasun	7d91705fc2	feat(fase-1): auth, collective management, and DB migrations - SQL migrations: users, collectives, collective_members, collective_invitations, full RLS policies, is_active_member/is_member/is_admin helpers, accept_invitation SECURITY DEFINER function, admin auto-promote trigger, avatars storage bucket - Auth refactor: replace keycloak-js with Supabase OAuth (GoTrue OIDC proxy, Option B). signInWithOAuth({ provider: 'keycloak' }) + PKCE flow - GoTrue config: GOTRUE_EXTERNAL_KEYCLOAK_URL + GOTRUE_EXTERNAL_KEYCLOAK_REDIRECT_URI added to docker-compose.dev.yml; Keycloak realm updated with GoTrue callback URI - New routes: /auth/callback, /invitation/[token], /(app)/collective/manage - Functional onboarding: create collective or join via invite link - Full settings page: display name (debounced), avatar (initials/emoji/upload), language switcher, Keycloak account console link - Components: Avatar.svelte (initials/emoji/upload with fallback), ImageCropper.svelte (cropperjs, 1:1 crop, lazy-loaded) - i18n: added all Fase 1 message keys (en + es); renamed 'delete' → 'action_delete' (JS reserved word); fixed plugin-m-function-matcher major-version URL format - Database types: manually seeded packages/types/src/database.ts from migrations - .env.development: committed public dev defaults for SvelteKit type checking - CLAUDE.md: documented /etc/hosts requirement for keycloak hostname Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-12 15:29:29 +02:00

Author

SHA1

Message

Date

Oier Bravo Urtasun

b297d253d9

fix(auth+pwa): resolve stuck-loading race condition and PWA build error

Auth: `getSession()` in a SvelteKit load function races with Supabase's async
localStorage init and can return null for a valid session, triggering a spurious
login() redirect. Moved auth redirect to (app)/+layout.svelte via $effect, which
correctly waits for onAuthStateChange to fire. Also fixed collective data never
loading on page refresh (INITIAL_SESSION event, not SIGNED_IN).

PWA: SvelteKit blocks Workbox imports in src/service-worker.ts, preventing
@vite-pwa/sveltekit from finding the compiled SW output. Switched to generateSW
strategy (plugin auto-generates the SW). Custom SW deferred to Fase 2b using
src/sw.ts (a filename SvelteKit does not intercept).

Docs: added gotchas 6–8 to CLAUDE.md covering both root causes so they are not
reintroduced. Updated plan/fase-2b with the sw.ts workaround note.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-12 21:44:14 +02:00

Oier Bravo Urtasun

7d91705fc2

feat(fase-1): auth, collective management, and DB migrations

- SQL migrations: users, collectives, collective_members, collective_invitations,
  full RLS policies, is_active_member/is_member/is_admin helpers,
  accept_invitation SECURITY DEFINER function, admin auto-promote trigger,
  avatars storage bucket
- Auth refactor: replace keycloak-js with Supabase OAuth (GoTrue OIDC proxy,
  Option B). signInWithOAuth({ provider: 'keycloak' }) + PKCE flow
- GoTrue config: GOTRUE_EXTERNAL_KEYCLOAK_URL + GOTRUE_EXTERNAL_KEYCLOAK_REDIRECT_URI
  added to docker-compose.dev.yml; Keycloak realm updated with GoTrue callback URI
- New routes: /auth/callback, /invitation/[token], /(app)/collective/manage
- Functional onboarding: create collective or join via invite link
- Full settings page: display name (debounced), avatar (initials/emoji/upload),
  language switcher, Keycloak account console link
- Components: Avatar.svelte (initials/emoji/upload with fallback),
  ImageCropper.svelte (cropperjs, 1:1 crop, lazy-loaded)
- i18n: added all Fase 1 message keys (en + es); renamed 'delete' → 'action_delete'
  (JS reserved word); fixed plugin-m-function-matcher major-version URL format
- Database types: manually seeded packages/types/src/database.ts from migrations
- .env.development: committed public dev defaults for SvelteKit type checking
- CLAUDE.md: documented /etc/hosts requirement for keycloak hostname

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-12 15:29:29 +02:00

2 Commits