Mixing authenticated and unauthenticated LiveViews

Live sessions always require a reload, but you can do your auth check manually in mount instead of in a hook if youbreally want to avoid reloading.

As in only assign the user (allowing current user to be nil) and implement the security aspects based on the live action in mount.

Easy to foot gun yourself and forget and very repetetive so maybe worth asking yourself if it is worth it.

So if I understand correctly you mean something like this

scope "/", MunchWeb do
  pipe_through [:browser]
  live_session :current_user,
    on_mount: [{MunchWeb.UserAuth, :mount_current_user}] do
    live "/posts", PostLive.Index, :index
    live "/posts/new", PostLive.Form, :new
    live "/posts/:id", PostLive.Show, :show
    live "/posts/:id/edit", PostLive.Form, :edit
  end
end

and redirecting unauthenticated users in PostLive.Form.mount? What are the possible foot-guns?

That you forget

I was worried about security, but if it just means the user isn’t redirected sometimes when I forget to add the on_mount handler to a LiveView, then that’s not too bad.