fixes and functions

static/js/auth-ui.js

@@ -19,6 +19,12 @@ const clearAuthSession = sessionStore.clearAuthSession || (() => {
   localStorage.removeItem("rustpad:nickname");
   sessionStorage.removeItem("rustpad:nickname");
 });
+const clearResourceAccessState = sessionStore.clearResourceAccessState || (() => {
+  for (let i = localStorage.length - 1; i >= 0; i--) {
+    const key = localStorage.key(i);
+    if (key?.startsWith("rustpad:access:")) localStorage.removeItem(key);
+  }
+});
 
 function configureCredentialFields({ emailLabel, email, password, loginMode, externalAuth }) {
   const directoryLogin = loginMode && externalAuth;
@@ -324,6 +330,7 @@ export async function logoutCurrentSession() {
   try {
     await api("/api/auth/logout", { method: "POST" });
   } catch { }
+  clearResourceAccessState();
   clearAuthSession();
 }
 

static/js/session.js

@@ -28,6 +28,12 @@ export function setAccessToken(resourceKind, resourceSlug, granted) {
   if (granted) localStorage.setItem(key, "1");
   else localStorage.removeItem(key);
 }
+export function clearResourceAccessState() {
+  for (let i = localStorage.length - 1; i >= 0; i--) {
+    const key = localStorage.key(i);
+    if (key?.startsWith("rustpad:access:")) localStorage.removeItem(key);
+  }
+}
 // Remove plaintext passwords saved by the previous frontend version.
 for (let i = localStorage.length - 1; i >= 0; i--) {
   const key = localStorage.key(i);