Explain Authenticated Task Queries End to End without relying on framework buzzwords.
Connect the lesson to the phase outcome: Use TanStack Query as the owner of asynchronous server state with deliberate query keys, freshness, invalidation, mutations, and pagination behavior.
Reproduce the relevant behavior and verify it with evidence.
Diagnose at least one representative failure instead of guessing.
Figure 22.5 — TaskFlow boundary map
component
→
query key/options
→
cache
→
HTTP fetch
→
server
→
cache update/invalidation
→
render
This lesson belongs to Phase 22. Keep the full request/data path visible even when today's code changes only one box.
Instructor workflow: predict first → implement the smallest slice → run it → inspect evidence → break one assumption → diagnose → explain it back. Do not copy the whole code block before understanding the first failing boundary.
Authenticated Task Queries End
to End
Connect query functions to the real protected NestJS API
Phase 22 - TanStack Query
Volume 06 - Professional Frontend
Build an authenticated Task API client
TanStack Query does not perform HTTP requests itself. The query function calls TaskFlow's existing
authenticated API client. This keeps authentication, error parsing and HTTP semantics outside React
components.
export async function fetchTasks(query: TaskListQuery) {
const params = new URLSearchParams();
params.set("page", String(query.page));
params.set("pageSize", String(query.pageSize));
if (query.search) params.set("search", query.search);
if (query.status) params.set("status", query.status);
if (query.priority) params.set("priority", query.priority);
Server Components, TanStack Query hooks and form mutations should reuse the same transport contract where
practical. Do not create a new fetch wrapper inside every component.
Preserve the Phase 13 error contract
The API client should throw the structured ApiClientError created earlier, including status, stable error
code and requestId when available. TanStack Query stores that error as query state; it should not
flatten every failure into a generic fetch string.
Transport boundary checklist
Concern Owner
Acquire current access token Supabase auth helper
Attach Authorization header authenticatedFetch / API client
Verify token NestJS AuthGuard
Parse non-2xx error envelope API client
Cache successful response TanStack Query
Render state React component
Executable lesson studio · query
Now turn the explanation into engineering skill.
TanStack Query is a server-state synchronization system, not merely a fetch helper. Cache identity, freshness, invalidation, and mutation semantics are the core model.
By the end, you should be able to
Explain Authenticated Task Queries End to End in terms of concrete inputs, ownership, outputs, and evidence.
Implement or reproduce the smallest TaskFlow slice that demonstrates this query concept.
Diagnose one representative query failure using observable evidence instead of trial-and-error.
Figure 22.5B — Mental model
component
→
query key
→
cache state
→
fetch/mutation
→
reconciliation
Read left-to-right while implementing. When debugging, walk right-to-left until the first observed fact differs from your prediction.
Code-along sequence
One coherent change at a time
01
Restate the goal of “Authenticated Task Queries End to End” as one observable behavior. Write the success signal before touching code.
02
Trace the boundary map: component → query key → cache state → fetch/mutation → reconciliation. Mark the one boundary this lesson changes.
03
Inspect the current repository state and record the exact files, route, table, or runtime involved. Avoid creating an abstraction before you can name the existing owner.
04
Implement the smallest vertical slice. Add one coherent change, run the narrowest verification command, and read the output before continuing.
05
Connect the slice to TaskFlow’s phase artifact: TaskFlow query/mutation layer with stable keys, list/detail caching, invalidation, filters, and debugging via devtools/logs.. Verify behavior from the outside as a user or API client would.
06
Create one controlled failure that is safe to reproduce. Predict the symptom first, capture evidence, locate the earliest broken boundary, then fix only that cause.
07
Close the reference and rebuild or explain the core change from memory. Record what you would monitor or test before trusting the same change in production.
tsCache identity should mirror resource identity
export const taskKeys = {
all: ["tasks"] as const,
list: (filters: TaskFilters) => ["tasks", "list", filters] as const,
detail: (id: string) => ["tasks", "detail", id] as const,
};
Do not copy this as a finished answer. Predict what each boundary does, type the smallest useful slice, run it, then compare the result with your prediction.
Verification
Prove the happy path
Run the narrowest relevant command or request and require a clean exit/status.
Inspect the boundary-specific evidence: terminal output, Network panel, database row/query plan, test report, container health, or deployment logs.
Repeat the behavior once after the change so a one-off cached or stale result cannot masquerade as success.
Break it on purpose
Build debugging memory
Random query-key arrays scattered through components
Change one assumption in the query example—identity, input, configuration, ordering, connectivity, or state—and predict the exact symptom before running it.
SymptomInvestigation path
Expected result does not appear
Return to the nearest observable boundary: input, network, process log, database, or rendered UI. Compare actual evidence with the predicted path.
A shortcut appears to fix it
Change one variable at a time and reproduce the original failure after the fix; otherwise you have correlation, not diagnosis.
Closed-reference challenge
Can you transfer the idea?
Without copying the final source, create a second small scenario that applies “Authenticated Task Queries End to End” to a different TaskFlow resource or input. Write the acceptance criteria first, implement it, and provide the evidence that each criterion is satisfied.
Explain-back
Answer these without reopening the solution
What problem does Authenticated Task Queries End to End solve in TaskFlow, and what would be observably wrong without it?
Which part of the query boundary owns the decision, and which neighboring layer must not own it?
What evidence proves the happy path instead of merely suggesting it worked?
Name one realistic failure or abuse case and the first place you would inspect.
If requirements doubled tomorrow, which part of this design should stay stable and which part is allowed to change?
Lesson studio
Turn the reading into skill
01
Do it
Implement create/update mutations and choose between invalidation and direct cache updates deliberately.
Use the smallest change that demonstrates this lesson. Stop after it works and capture evidence.02
Break it safely
Random query-key arrays scattered through components
Predict the symptom before causing the failure. Then locate the earliest boundary where reality diverges from expectation.03
Explain it back
Why does this responsibility live here, what input does it trust, what output proves success, and what would go wrong if another layer owned it?
If your explanation is vague, repeat the boundary trace before moving on.
Exit ticket
Before marking complete
Close the reference. Reproduce the core idea from memory or explain the exact request/data flow aloud. Then check your diff or notes for accidental shortcuts that bypass validation, authorization, error handling, or verification earned in earlier phases.