Use native login
Constraint-backed email and password fields feed one application-owned async handler.
0.12.2AUGUST 2026
SESSION · PERMISSION · RELEASE
Show the role.
Enforce the boundary.
Native login and layout-owned session state now compose with server-authorized reads, mutations, rejection recovery, and logout.
1.4 msNavigation median
432 BAdded session gzip
0 BStatic help JavaScript
0.12.2Own the session.
AUTH OWNERSHIP
Own the session.
Authorize the action.
Validate stored tokens
The shared layout restores identity only after the server accepts the token.
Shape the interface
Admin controls follow authenticated role state without pretending UI is security.
Authorize every action
Protected reads reject missing tokens and mutations reject insufficient roles.
Clear invalid sessions
A 401 removes the stored token before replacement navigation returns to login.
End both owners
Server logout and local state cleanup complete before the next document.
UPGRADE
Keep authorization server-owned.
$
npm install @kudzujs/core@^0.12.2