fix(auth): stabilize header session state and retry team token errors

app/composables/useAuth.ts

@@ -7,7 +7,8 @@
 export const useAuth = () => {
   const { getToken, initTokens, idToken } = useLogtoTokens()
   const me = useState<{ id?: string | null } | null>('me', () => null)
-  const isAuthenticated = computed(() => !!me.value?.id)
+  const logtoUser = useState<Record<string, unknown> | null>('logto-user', () => null)
+  const isAuthenticated = computed(() => !!(me.value?.id || logtoUser.value))
   const loggedIn = isAuthenticated
 
   /**

app/composables/useGraphQL.ts

@@ -27,6 +27,7 @@ const CLIENT_MAP: Record<string, string> = {
 export const useGraphQL = () => {
   const auth = useAuth()
   const { activeLogtoOrgId } = useActiveTeam()
+  const { refreshTokens } = useLogtoTokens()
 
   const getClientId = (endpoint: Endpoint, api: Api): string => {
     return CLIENT_MAP[`${endpoint}:${api}`] || 'default'
@@ -77,8 +78,8 @@ export const useGraphQL = () => {
   ): Promise<TResult> => {
     const clientId = getClientId(endpoint, api)
     const { client } = useApolloClient(clientId)
+    const executeOnce = async () => {
       const context = await getAuthContext(endpoint, api)
-
       const result = await client.query({
         query: document,
         variables,
@@ -93,6 +94,23 @@ export const useGraphQL = () => {
       return result.data as TResult
     }
 
+    try {
+      return await executeOnce()
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error)
+      const isAuthContextFailure = message.includes('Invalid Compact JWS')
+        || message.includes('Context creation failed')
+        || message.includes('Received status code 500')
+
+      if (endpoint === 'team' && isAuthContextFailure) {
+        await refreshTokens()
+        return await executeOnce()
+      }
+
+      throw error
+    }
+  }
+
   const mutate = async <TResult, TVariables extends Record<string, unknown>>(
     document: TypedDocumentNode<TResult, TVariables>,
     variables: TVariables,
@@ -101,8 +119,8 @@ export const useGraphQL = () => {
   ): Promise<TResult> => {
     const clientId = getClientId(endpoint, api)
     const { client } = useApolloClient(clientId)
+    const mutateOnce = async () => {
       const context = await getAuthContext(endpoint, api)
-
       const result = await client.mutate({
         mutation: document,
         variables,
@@ -116,5 +134,22 @@ export const useGraphQL = () => {
       return result.data as TResult
     }
 
+    try {
+      return await mutateOnce()
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error)
+      const isAuthContextFailure = message.includes('Invalid Compact JWS')
+        || message.includes('Context creation failed')
+        || message.includes('Received status code 500')
+
+      if (endpoint === 'team' && isAuthContextFailure) {
+        await refreshTokens()
+        return await mutateOnce()
+      }
+
+      throw error
+    }
+  }
+
   return { execute, mutate }
 }

app/plugins/00-apollo-console-filter.client.ts

@@ -2,14 +2,28 @@ export default defineNuxtPlugin(() => {
   const originalConsoleError = console.error
 
   console.error = (...args: unknown[]) => {
-    const hasApolloDevtoolsWarning = args.some((arg) => {
-      if (typeof arg !== 'string') return false
-
-      return (
-        arg.includes('connectToDevTools') &&
-        arg.includes('devtools.enabled')
-      )
+    const serializedArgs = args
+      .map((arg) => {
+        if (typeof arg === 'string') return arg
+        if (arg instanceof Error) return `${arg.message}\n${arg.stack || ''}`
+        try {
+          return JSON.stringify(arg)
+        } catch {
+          return String(arg)
+        }
       })
+      .join(' ')
+
+    const hasApolloDevtoolsWarning = (
+      (
+        serializedArgs.includes('connectToDevTools')
+        && serializedArgs.includes('devtools.enabled')
+      )
+      || (
+        serializedArgs.includes('go.apollo.dev/c/err')
+        && serializedArgs.includes('"message":104')
+      )
+    )
 
     if (hasApolloDevtoolsWarning) {
       return

server/middleware/me.ts

@@ -37,10 +37,10 @@ export default defineEventHandler(async (event) => {
 
   let token: string | null = null
   try {
-    token = await client.getAccessToken('https://teams.optovia.ru', organizationId)
+    token = await client.getIdToken()
   } catch {
     try {
-      token = await client.getIdToken()
+      token = await client.getAccessToken('https://teams.optovia.ru', organizationId)
     } catch {
       return
     }