volcano-sdk 0.6.0 → 0.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e1c358710803cb0542775a53699fda168e00aa0292d6fe0861287d4175373ecb
-  data.tar.gz: a1e9f5146e6fd06d956ff7a505f391a72eef8b65cc3a4cf39ae4599a9e1346a5
+  metadata.gz: 9d85e7ec311f812ca5267cec7b463ebd65ff82ba44f4ce06e71f23085f7932ea
+  data.tar.gz: 772266f8fe5398d085442a03bcf2544468016fc335eb61fb0c1ba04ba47dde35
 SHA512:
-  metadata.gz: e5a1dd2cf0df583e5b02d954aeaaa9c63f4d122658605dbf78dac8a4d6f9fade33422742fc54c6f8dae6d22b4019d91aac73519beb2de83913bc4a27cfe160a9
-  data.tar.gz: 6939426bd9514b8fe97c8e413c61c04acb1559efbcc33afbcf8e6102ac6b09aa96ecc7369859465b1b8f897ce4fe47d8d329ea4ea6fcdaf5aeaa7f52915e444e
+  metadata.gz: 2718f112a8e2264f826aa4f3bc89c61f4492ee6034c0913d0e8b64e3d5662e8b89579af0dfbe11a88b2c92fee01c8f7508f90e347a0a7b14f7e4aa3fd40433f4
+  data.tar.gz: 773a396b12e6c1b02ed03c5c3d8b4356b39bdac11a222bfecd2817ff0fe6ceee7644d367bb4255f6da90652cf45782efc4fc922e5d2501042ba07d1f1a2847b7

data/README.md

@@ -78,7 +78,10 @@ Snapshots contain deeply frozen JSON data. Plain `Time` timestamps become UTC
 ISO8601 strings with nanosecond precision; symbols become strings. Custom objects,
 container/string/time subclasses, non-finite numbers, duplicate JSON keys, and
 structures deeper than 100 levels raise `TypeError`. Use the typed `auth.user`
-profile when you need Ruby `Time` values.
+profile when you need Ruby `Time` values. Successful `user`, `update_user`,
+`convert_anonymous`, and `confirm_email_change` calls update this snapshot
+without changing credentials or emitting an authentication-state event.
+Previously returned sessions remain unchanged.
 
 ### Get the current user
 
@@ -89,8 +92,8 @@ raise "wrong user" unless user.id == session.user_id
 
 `user` sends the active access token to Volcano and returns an immutable,
 server-validated `Volcano::User`. The SDK recursively freezes its strings and
-metadata, but does not cache the profile or replace the session. A session
-change while the request is in flight raises
+metadata and updates `current_session.user`. A session change while the request
+is in flight raises
 `Volcano::Error::SessionChangedError` instead of returning a stale profile.
 `get_user` is available as a cross-SDK alias.
 
@@ -106,8 +109,8 @@ raise "wrong user" unless user.id == session.user_id
 
 `update_user` changes the current user's password, metadata, or both. Metadata
 is a shallow patch: omitted keys remain unchanged, and a `nil` value removes
-that key. The method returns an immutable `Volcano::User` without replacing the
-active session. It rejects a response if another authentication operation
+that key. The method returns an immutable `Volcano::User` and updates the local
+user snapshot. It rejects a response if another authentication operation
 replaces the session while the request is in flight.
 
 ### Request a password reset email
@@ -170,8 +173,8 @@ user = client.auth.confirm_email_change(token: "email-change-token")
 puts user.email
 ```
 
-The method returns the immutable updated user without replacing the active
-session. A successful stale response is rejected if another authentication
+The method returns the immutable updated user and updates the local user
+snapshot. A successful stale response is rejected if another authentication
 operation replaces that session in flight.
 
 ### List sessions
@@ -484,7 +487,8 @@ syntax. Both methods require an active user session.
 rows = client.database("main").from("items").select("*").eq("slug", "a").execute
 ```
 
-Database selects, inserts, updates, deletes, and log reads refresh the captured
+Database selects, inserts, updates, deletes, log reads, and authenticated storage
+requests (including upload sessions and parts) refresh the captured
 session after an HTTP 401 and retry the same request once. Concurrent requests reuse a successful
 refresh for that session.
 Replacing or signing out the session before replay, or while replay is in flight,

data/lib/volcano/auth_anonymous.rb

@@ -20,10 +20,7 @@ module Volcano
         anonymous_conversion_response(current.access_token, email, password, metadata),
         200
       )
-      user = build_user(user_payload(payload))
-      raise Error::SessionChangedError unless @client.capture_session.first == generation
-
-      user
+      cache_current_user(payload, generation)
     end
 
     private

data/lib/volcano/auth_email_change.rb

@@ -30,10 +30,7 @@ module Volcano
       raise Error::AuthenticationError, 'No active session' unless current
 
       payload = Transport.body(confirm_email_change_response(current.access_token, token), 200)
-      user = build_user(user_payload(payload))
-      raise Error::SessionChangedError unless @client.capture_session.first == generation
-
-      user
+      cache_current_user(payload, generation)
     end
 
     private

data/lib/volcano/auth_get_user.rb

@@ -19,16 +19,21 @@ module Volcano
       raise Error::AuthenticationError, 'No active session' unless current
 
       payload = Transport.body(get_user_response(current.access_token), 200)
-      user = build_user(user_payload(payload))
-      raise Error::SessionChangedError unless @client.capture_session.first == generation
-
-      user
+      cache_current_user(payload, generation)
     end
 
     alias get_user user
 
     private
 
+    def cache_current_user(payload, generation)
+      profile = user_payload(payload)
+      user = build_user(profile)
+      raise Error::SessionChangedError unless @client.update_session_user_if_current?(profile, generation)
+
+      user
+    end
+
     def get_user_response(access_token)
       Transport.invoke do
         @transport.auth_get_user(authorization: access_token)

data/lib/volcano/auth_refresh.rb

@@ -10,10 +10,10 @@ module Volcano
       refresh_captured_session(binding)
     end
 
-    def session_request
-      binding = @client.capture_session_binding
+    def session_request(binding: @client.capture_session_binding)
       raise Error::AuthenticationError, 'No active session' unless binding.last
 
+      binding = owned_session_binding(binding)
       response = yield(binding.last.access_token)
       return response unless response.status == 401
 
@@ -65,10 +65,10 @@ module Volcano
       active = @client.capture_session_binding
       raise Error::AuthenticationError, 'No active session' if rejected_refresh?(binding, active)
 
-      generation, active_lineage, current = active
+      _, active_lineage, current = active
       raise Error::SessionChangedError unless current && active_lineage == binding[1]
 
-      [generation, current]
+      active
     end
 
     def rejected_refresh?(binding, active)

data/lib/volcano/auth_state.rb

@@ -50,10 +50,9 @@ module Volcano
 
     def store_if_current?(session, generation, event: :signed_in, notifications: nil)
       dispatch = @mutex.synchronize do
-        callbacks = replace_if_current(session, generation, event)
-        return false unless callbacks
+        return false unless generation == @generation
 
-        enqueue_notification(callbacks, event, session)
+        enqueue_notification(replace(session, event), event, session)
       end
       return true unless dispatch
 
@@ -61,6 +60,16 @@ module Volcano
       true
     end
 
+    def update_user_if_current?(user, generation)
+      @mutex.synchronize do
+        return false unless generation == @generation && @session
+        raise Error::AuthenticationError, 'Profile belongs to a different user' unless user['id'] == @session.user_id
+
+        @session = Session.new(**@session.to_h, user: user)
+        true
+      end
+    end
+
     def subscribe(&callback)
       callback_id, dispatch = @mutex.synchronize do
         id, current = register(callback)
@@ -79,12 +88,6 @@ module Volcano
       @callbacks.keys
     end
 
-    def replace_if_current(session, generation, event)
-      return unless generation == @generation
-
-      replace(session, event)
-    end
-
     def register(callback)
       callback_id = @next_callback_id
       @next_callback_id += 1
@@ -130,7 +133,7 @@ module Volcano
     def notify(callback_ids, event, session)
       failure = nil
       callback_ids.each do |callback_id|
-        notify_callback(callback_id, event, session)
+        @mutex.synchronize { @callbacks[callback_id] }&.call(event, session)
       rescue StandardError => e
         Warning.warn("Volcano auth-state callback failed (#{e.class})\n")
       rescue *CALLBACK_FAILURES => e
@@ -139,10 +142,5 @@ module Volcano
       end
       failure
     end
-
-    def notify_callback(callback_id, event, session)
-      callback = @mutex.synchronize { @callbacks[callback_id] }
-      callback&.call(event, session)
-    end
   end
 end

data/lib/volcano/auth_update_user.rb

@@ -11,10 +11,7 @@ module Volcano
         update_user_response(current.access_token, password:, metadata:),
         200
       )
-      user = build_user(user_payload(payload))
-      raise Error::SessionChangedError unless @client.capture_session.first == generation
-
-      user
+      cache_current_user(payload, generation)
     end
 
     private

data/lib/volcano/client.rb

@@ -49,8 +49,8 @@ module Volcano
       session.access_token
     end
 
-    def session_request(&)
-      @auth.session_request(&)
+    def session_request(...)
+      @auth.session_request(...)
     end
 
     alias session_read session_request
@@ -89,6 +89,10 @@ module Volcano
       @auth_state.subscribe(...)
     end
 
+    def update_session_user_if_current?(...)
+      @auth_state.update_user_if_current?(...)
+    end
+
     private
 
     def database_with_token(name, token)

data/lib/volcano/storage.rb

@@ -28,7 +28,7 @@ module Volcano
     def initialize(client, transport, name, api_url:, anon_key:)
       @client = client
       @transport = transport
-      @name = name
+      @name = name.dup.freeze
       @api_url = api_url.dup.freeze
       @anon_key = anon_key.dup.freeze
       freeze
@@ -36,12 +36,16 @@ module Volcano
 
     def upload(path, value, content_type: nil)
       mime_type = upload_content_type(content_type)
-      response = Transport.invoke do
+      path = storage_paths(path).first
+      binding = @client.capture_session_binding
+      @client.session_token
+      content = upload_bytes(value).freeze
+      response = storage_request(binding: binding) do |token|
         @transport.upload_storage_object(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           path: path,
-          data: upload_bytes(value),
+          data: content,
           content_type: mime_type
         )
       end
@@ -49,9 +53,11 @@ module Volcano
     end
 
     def download(path, range: nil)
-      response = Transport.invoke do
+      path = storage_paths(path).first
+      range = range&.dup&.freeze
+      response = storage_request do |token|
         @transport.download_storage_object(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           path: path,
           byte_range: range
@@ -63,9 +69,11 @@ module Volcano
     end
 
     def list(prefix = '', limit: nil, cursor: nil)
-      response = Transport.invoke do
+      prefix = prefix.dup.freeze
+      cursor = cursor&.dup&.freeze
+      response = storage_request do |token|
         @transport.list_storage_objects(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           prefix: prefix,
           limit: limit,
@@ -82,6 +90,10 @@ module Volcano
 
     private
 
+    def storage_request(binding: @client.capture_session_binding)
+      @client.session_request(binding: binding) { |token| Transport.invoke { yield(token) } }
+    end
+
     def upload_content_type(value)
       return if value.nil?
       return value.dup.freeze if value.is_a?(String) && value.match?(/\A[\x20-\x7e]+\z/) && !value.strip.empty?

data/lib/volcano/storage_mutations.rb

@@ -5,16 +5,16 @@ module Volcano
   class StorageBucket
     def remove(paths)
       deleted = storage_paths(paths)
-      authorization = @client.session_token
-      deleted.each { |path| delete_path(path, authorization) }
+      binding = @client.capture_session_binding
+      deleted.each { |path| delete_path(path, binding) }
       deleted
     end
 
     def move(from_path, to_path)
       source, destination = storage_paths([from_path, to_path])
-      response = Transport.invoke do
+      response = storage_request do |token|
         @transport.move_storage_object(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           from_path: source,
           to_path: destination
@@ -25,9 +25,9 @@ module Volcano
 
     def copy(from_path, to_path)
       source, destination = storage_paths([from_path, to_path])
-      response = Transport.invoke do
+      response = storage_request do |token|
         @transport.copy_storage_object(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           from_path: source,
           to_path: destination
@@ -39,9 +39,9 @@ module Volcano
     def update_visibility(path, public:)
       object_path = storage_paths(path).fetch(0)
       visibility = visibility_value(public)
-      response = Transport.invoke do
+      response = storage_request do |token|
         @transport.update_storage_object_visibility(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           path: object_path,
           is_public: visibility
@@ -61,10 +61,10 @@ module Volcano
       path_list.map { |path| path.dup.freeze }.freeze
     end
 
-    def delete_path(path, authorization)
-      response = Transport.invoke do
+    def delete_path(path, binding)
+      response = storage_request(binding: binding) do |token|
         @transport.delete_storage_object(
-          authorization: authorization,
+          authorization: token,
           bucket_name: @name,
           path: path
         )

data/lib/volcano/storage_upload_sessions.rb

@@ -15,9 +15,9 @@ module Volcano
         total_size: total_size,
         part_size: part_size
       )
-      response = Transport.invoke do
+      response = storage_request do |token|
         @transport.create_upload_session(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           request: request
         )
@@ -32,9 +32,9 @@ module Volcano
         part_number: part_number,
         data: upload_bytes(data)
       )
-      response = Transport.invoke do
+      response = storage_request do |token|
         @transport.upload_part(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           request: request
         )
@@ -44,9 +44,9 @@ module Volcano
 
     def complete_upload_session(path, session_id:)
       request = UploadSessionReference.new(path: path, session_id: session_id)
-      response = Transport.invoke do
+      response = storage_request do |token|
         @transport.complete_upload_session(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           request: request
         )
@@ -56,9 +56,9 @@ module Volcano
 
     def get_upload_session(path, session_id:)
       request = UploadSessionReference.new(path: path, session_id: session_id)
-      response = Transport.invoke do
+      response = storage_request do |token|
         @transport.get_upload_session(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           request: request
         )
@@ -68,9 +68,9 @@ module Volcano
 
     def abort_upload_session(path, session_id:)
       request = UploadSessionReference.new(path: path, session_id: session_id)
-      response = Transport.invoke do
+      response = storage_request do |token|
         @transport.abort_upload_session(
-          authorization: @client.session_token,
+          authorization: token,
           bucket_name: @name,
           request: request
         )

data/lib/volcano/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Volcano
-  VERSION = '0.6.0'
+  VERSION = '0.7.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: volcano-sdk
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.7.1
 platform: ruby
 authors:
 - Kong