fix: load /login instead of root so premature auth detection is prevented

Loading https://claude.ai as the start URL caused didFinish to fire on the landing page while stale/tracking cookies were already in WKWebsiteDataStore. The 'any claude.ai cookie' check then fired immediately, closing the login sheet before the user could sign in. Loading /login ensures the URL-guard catches the initial page load and only checks cookies after the real post-login redirect.
Beta release v1.2.1-beta.4
2026-05-11 09:25:45 +02:00 · 2026-05-11 06:59:20 +00:00
5 changed files with 7 additions and 8 deletions
@@ -15,9 +15,9 @@
    <key>CFBundlePackageType</key>
    <string>APPL</string>
    <key>CFBundleShortVersionString</key>
-    <string>1.2.1-beta.4</string>
+    <string>1.2.1-beta.5</string>
    <key>CFBundleVersion</key>
-    <string>52</string>
+    <string>53</string>
    <key>LSMinimumSystemVersion</key>
    <string>13.0</string>
    <key>LSUIElement</key>
@@ -12,7 +12,7 @@ struct LoginWebView: NSViewRepresentable {

        let webView = WKWebView(frame: .zero, configuration: config)
        webView.navigationDelegate = context.coordinator
-        webView.load(URLRequest(url: URL(string: "https://claude.ai")!))
+        webView.load(URLRequest(url: URL(string: "https://claude.ai/login")!))
        return webView
    }

@@ -10,7 +10,7 @@
 [![Swift](https://img.shields.io/badge/Swift-5.9-F05138?style=flat&logo=swift&logoColor=white)](https://swift.org)
 [![Version](https://img.shields.io/badge/version-1.2.0-orange?style=flat)](https://github.com/superdooper86/claudechecker/releases)
 [![License](https://img.shields.io/badge/license-MIT-blue?style=flat)](LICENSE)
-[![Beta](https://img.shields.io/badge/beta-1.2.1--beta.3-orange?style=flat)](https://github.com/superdooper86/claudechecker/releases/tag/v1.2.1-beta.3) <!-- BETA_BADGE -->
+[![Beta](https://img.shields.io/badge/beta-1.2.1--beta.4-orange?style=flat)](https://github.com/superdooper86/claudechecker/releases/tag/v1.2.1-beta.4) <!-- BETA_BADGE -->

 </div>

@@ -3,7 +3,6 @@
 ### Bug fixes
 - Fixed "Not signed in" showing incorrectly on launch when the session was already active
 - Sign-in state is now detected immediately from stored cookies on startup, before the first data refresh completes
- Fixed Re-authenticate (and Sign In) not detecting an existing session — the login window now loads `claude.ai` directly so already-signed-in users are detected correctly and the window auto-dismisses
+- Fixed login window auto-closing before the user could sign in — the login window now correctly loads the `/login` page so it only detects auth after the actual sign-in redirect
 - Fixed "No API key configured" showing after signing out — now correctly shows "Not signed in" with a prompt to sign in
 - Added `/api/organizations` as a final fallback for org ID resolution when the bootstrap API response doesn't include it
- Session cookie detection now checks both `sessionKey` and `__Secure-next-auth.session-token` cookie names
@@ -1,5 +1,5 @@
 {
-  "version": "1.2.1-beta.3",
-  "url": "https://github.com/superdooper86/claudechecker/releases/download/v1.2.1-beta.3/ClaudeChecker.zip",
+  "version": "1.2.1-beta.4",
+  "url": "https://github.com/superdooper86/claudechecker/releases/download/v1.2.1-beta.4/ClaudeChecker.zip",
  "notes": "## What's new in v1.2.1\n\n### Bug fixes\n- Fixed \"Not signed in\" showing incorrectly on launch when the session was already active\n- Sign-in state is now detected immediately from stored cookies on startup, before the first data refresh completes\n- Fixed Re-authenticate (and Sign In) not detecting an existing session — the login window now loads `claude.ai` directly so already-signed-in users are detected correctly and the window auto-dismisses\n- Fixed \"No API key configured\" showing after signing out — now correctly shows \"Not signed in\" with a prompt to sign in\n- Added `/api/organizations` as a final fallback for org ID resolution when the bootstrap API response doesn't include it\n- Session cookie detection now checks both `sessionKey` and `__Secure-next-auth.session-token` cookie names"
 }