The problem here was that although the showcase was checking if the auth config existed it wasn't waiting for it to be initialised. This resulted in mutations firing before the app was authenticated.

The fix applied was to check if auth config existed and then also await on the auth service to be initialised.