The user is logged out if the logged status is 'pending' due to a data refetch

[clcoco]

Environment

• Operating System: Darwin
• Node Version: v23.9.0
• Nuxt Version: 3.15.4
• CLI Version: 3.21.1
• Nitro Version: 2.10.4
• Package Manager: npm@10.9.2
• Builder: -
• User Config: devtools, experimental, app, runtimeConfig, routeRules, build, vite, modules, hotjar, gtag, gtm, auth, eslint, pinia, i18n, imports, svgo, compatibilityDate
• Runtime Modules: @sidebase/nuxt-auth@0.10.0, @nuxtjs/tailwindcss@6.13.1, nuxt-module-hotjar@1.3.2, @vueuse/nuxt@10.11.1, @nuxt/eslint@0.3.13, @nuxtjs/i18n@8.5.6, @pinia/nuxt@0.5.5, nuxt-plotly@1.0.14, nuxt-svgo@4.0.11, nuxt-gtag@2.1.0
• Build Modules: -

Reproduction

• use the local provider
• add some external backend
• trigger a refetch (either change your focused window, add a refresh interval, add a refresh token with a short lifespan)
• perform any action while the data is being fetched

Describe the bug

The user shouldn't be thrown out when the session data is being fetched, especially if the refreshToken isn't actually expired

Additional context

No response

Logs

[phoenix-ru]

Hi @clcoco , thanks for your report. I don't have an external backend to reproduce the issue at the moment, but there's a lot of bug-fixes and feature work planned for the local provider in Q2 2025, so I will definitely revisit this issue in the coming weeks.

[phoenix-ru]

Similar issue: #621

[abolix]

Same issue here, if the status is pending and we suddenly refresh the page or navigate to other page, it's gonna get logged out.
didn't had time for reproduction but this is my config if it helps.

    auth: {
        isEnabled: true,
        globalAppMiddleware: true,
        baseURL: process.env.NUXT_PUBLIC_BASE_URL
        ? `${process.env.NUXT_PUBLIC_BASE_URL}/userarea/`
        : 'http://127.0.0.1:8000/userarea/',
        provider: {
        type: 'local',
        pages: {
            login: '/auth/login',
        },
        token: {
            signInResponseTokenPointer: '/access',
            type: 'Bearer',
            cookieName: 'auth.access',
            headerName: 'Authorization',
            maxAgeInSeconds: 60 * 3,
            sameSiteAttribute: 'lax',
            secureCookieAttribute: false,
            httpOnlyCookieAttribute: false,
        },
        endpoints: {
            signIn: { path: 'login/', method: 'POST' },
            signOut: { path: 'logout/', method: 'POST' },
            signUp: { path: 'register/', method: 'POST' },
            getSession: { path: 'profile/', method: 'GET' },
        },
        refresh: {
                isEnabled:true,
                refreshOnlyToken: true,
                token: {
                signInResponseRefreshTokenPointer: '/refresh',
                refreshRequestTokenPointer: '/refresh',
                cookieName: 'auth.refresh',
                maxAgeInSeconds: 60 * 60 * 24 * 24,
                sameSiteAttribute: 'lax',
                secureCookieAttribute: false,
                httpOnlyCookieAttribute: false,
            },
            endpoint: {
                path: 'refresh',
                method: 'POST',
            },
        },
        },
        sessionRefresh: {
            enablePeriodically: 1000 * 60,
            enableOnWindowFocus: false,
        },
    },

[phoenix-ru]

Please try if #1033 solves the issue for you:

npm i https://pkg.pr.new/@sidebase/nuxt-auth@1033