AOSSIE-Org / AOSSIE-Org/Resonate

AuthStateController calls account.get() on init causing 401 for guest users

Open
#746 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Dart
Stars
344
Forks
350
PR merge metrics
No merged PRs in 30d

Description

### 🐛 Describe the bug

### Bug
AuthStateController.onInit() unconditionally calls setUserProfileData(), which internally calls account.get().

When the user is not logged in, this results in:
401 general_unauthorized_scope (guest missing account scope)

### Steps to Reproduce
1. Launch app as a logged-out user
2. AuthStateController initializes
3. account.get() is called
4. Appwrite throws 401

### Expected Behavior
account.get() should only be called when a valid session exists.

### Actual Behavior
account.get() is called for guest users, causing auth failure.

### Fix
Guard setUserProfileData() with a login/session check:
```dart
if (await getLoginState) {
await setUserProfileData();
}

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.