@23blocks/angular 14.4.0 → 14.5.0

package/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 14.5.0 (2026-03-14)
+
+### 🚀 Features
+
+- **@23blocks/angular:** integrate token lifecycle with AuthenticationService ([df3c6c3](https://github.com/23blocks-OS/frontend-sdk/commit/df3c6c3))
+
+### ❤️ Thank You
+
+- Claude Opus 4.6
+- Juan Pelaez
+
 ## 14.4.0 (2026-03-09)
 
 ### 🚀 Features

package/dist/fesm2022/23blocks-angular.mjs

@@ -1,8 +1,9 @@
 import * as i0 from '@angular/core';
 import { InjectionToken, makeEnvironmentProviders, Optional, Inject, Injectable } from '@angular/core';
 import { createHttpTransport } from '@23blocks/transport-http';
-import { from, tap } from 'rxjs';
+import { BlockErrorException } from '@23blocks/contracts';
 import { createAuthenticationBlock } from '@23blocks/block-authentication';
+import { from, tap } from 'rxjs';
 import { createSearchBlock } from '@23blocks/block-search';
 import { createProductsBlock } from '@23blocks/block-products';
 import { createCrmBlock } from '@23blocks/block-crm';
@@ -148,6 +149,10 @@ const WALLET_CONFIG = new InjectionToken('23blocks.wallet.config');
  */
 const RAG_CONFIG = new InjectionToken('23blocks.rag.config');
 
+/**
+ * Injection token for the token lifecycle manager
+ */
+const TOKEN_LIFECYCLE = new InjectionToken('23blocks.token-lifecycle');
 /**
  * Injection token for the token manager (internal use)
  */
@@ -287,6 +292,211 @@ function createTransportWithAuth(baseUrl, config, tokenManager) {
         },
     });
 }
+// ─────────────────────────────────────────────────────────────────────────────
+// Token Lifecycle Helpers
+// ─────────────────────────────────────────────────────────────────────────────
+function decodeJwtExp(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3)
+            return null;
+        let payload = parts[1].replace(/-/g, '+').replace(/_/g, '/');
+        const pad = payload.length % 4;
+        if (pad)
+            payload += '='.repeat(4 - pad);
+        let decoded;
+        if (typeof atob === 'function') {
+            decoded = atob(payload);
+        }
+        else if (typeof Buffer !== 'undefined') {
+            decoded = Buffer.from(payload, 'base64').toString('utf-8');
+        }
+        else {
+            return null;
+        }
+        const parsed = JSON.parse(decoded);
+        return typeof parsed.exp === 'number' ? parsed.exp : null;
+    }
+    catch {
+        return null;
+    }
+}
+function isBrowserEnv() {
+    try {
+        return typeof window !== 'undefined'
+            && typeof window.localStorage !== 'undefined'
+            && typeof window.localStorage.getItem === 'function';
+    }
+    catch {
+        return false;
+    }
+}
+function createLifecycleManager(tokenManager, refreshFn, config = {}) {
+    const { refreshBufferSeconds = 120, enableVisibilityRefresh = true, enableProactiveRefresh = true, } = config;
+    const listeners = new Set();
+    let refreshTimer = null;
+    let refreshPromise = null;
+    let visibilityHandler = null;
+    let destroyed = false;
+    let running = false;
+    function notify(event) {
+        listeners.forEach((l) => { try {
+            l(event);
+        }
+        catch { } });
+    }
+    function clearTimer() {
+        if (refreshTimer !== null) {
+            clearTimeout(refreshTimer);
+            refreshTimer = null;
+        }
+    }
+    function scheduleRefresh() {
+        if (!enableProactiveRefresh || destroyed || !running)
+            return;
+        clearTimer();
+        const accessToken = tokenManager.getAccessToken();
+        if (!accessToken)
+            return;
+        const exp = decodeJwtExp(accessToken);
+        if (!exp)
+            return;
+        const refreshInSeconds = (exp - Math.floor(Date.now() / 1000)) - refreshBufferSeconds;
+        if (refreshInSeconds <= 0) {
+            refreshNow().catch(() => { });
+            return;
+        }
+        refreshTimer = setTimeout(() => {
+            if (!destroyed && running)
+                refreshNow().catch(() => { });
+        }, refreshInSeconds * 1000);
+    }
+    function handleVisibilityChange() {
+        if (destroyed || !running || typeof document === 'undefined')
+            return;
+        if (document.visibilityState === 'visible') {
+            const accessToken = tokenManager.getAccessToken();
+            if (!accessToken)
+                return;
+            const exp = decodeJwtExp(accessToken);
+            if (!exp) {
+                refreshNow().catch(() => { });
+                return;
+            }
+            const secondsUntilExpiry = exp - Math.floor(Date.now() / 1000);
+            if (secondsUntilExpiry <= refreshBufferSeconds) {
+                refreshNow().catch(() => { });
+            }
+            else {
+                scheduleRefresh();
+            }
+        }
+    }
+    async function refreshNow() {
+        if (destroyed)
+            throw new Error('[23blocks] Lifecycle destroyed');
+        if (refreshPromise)
+            return refreshPromise;
+        refreshPromise = (async () => {
+            try {
+                const rt = tokenManager.getRefreshToken();
+                if (!rt)
+                    throw new Error('No refresh token');
+                const result = await refreshFn(rt);
+                tokenManager.setTokens(result.accessToken, result.refreshToken);
+                scheduleRefresh();
+                notify('TOKEN_REFRESHED');
+                return result.accessToken;
+            }
+            catch (error) {
+                clearTimer();
+                tokenManager.clearTokens();
+                running = false;
+                notify('SESSION_EXPIRED');
+                throw error;
+            }
+            finally {
+                refreshPromise = null;
+            }
+        })();
+        return refreshPromise;
+    }
+    return {
+        start() {
+            if (destroyed)
+                return;
+            running = true;
+            scheduleRefresh();
+            if (enableVisibilityRefresh && isBrowserEnv() && !visibilityHandler && typeof document !== 'undefined') {
+                visibilityHandler = handleVisibilityChange;
+                document.addEventListener('visibilitychange', visibilityHandler);
+            }
+        },
+        stop() {
+            running = false;
+            clearTimer();
+            refreshPromise = null;
+        },
+        onAuthStateChanged(listener) {
+            listeners.add(listener);
+            return () => { listeners.delete(listener); };
+        },
+        refreshNow,
+        destroy() {
+            destroyed = true;
+            running = false;
+            clearTimer();
+            refreshPromise = null;
+            if (visibilityHandler && typeof document !== 'undefined') {
+                document.removeEventListener('visibilitychange', visibilityHandler);
+                visibilityHandler = null;
+            }
+            listeners.clear();
+        },
+    };
+}
+function createRetryTransport(baseTransport, getLifecycle) {
+    async function withRetry(fn) {
+        try {
+            return await fn();
+        }
+        catch (error) {
+            if (error instanceof BlockErrorException && error.status === 401) {
+                const lc = getLifecycle();
+                if (lc) {
+                    try {
+                        await lc.refreshNow();
+                        return await fn();
+                    }
+                    catch {
+                        throw error;
+                    }
+                }
+            }
+            throw error;
+        }
+    }
+    return {
+        get(path, options) {
+            return withRetry(() => baseTransport.get(path, options));
+        },
+        post(path, body, options) {
+            return withRetry(() => baseTransport.post(path, body, options));
+        },
+        patch(path, body, options) {
+            return withRetry(() => baseTransport.patch(path, body, options));
+        },
+        put(path, body, options) {
+            return withRetry(() => baseTransport.put(path, body, options));
+        },
+        delete(path, options) {
+            return withRetry(() => baseTransport.delete(path, options));
+        },
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Providers
+// ─────────────────────────────────────────────────────────────────────────────
 /**
  * Provide 23blocks services with simplified configuration.
  *
@@ -335,15 +545,20 @@ function createTransportWithAuth(baseUrl, config, tokenManager) {
 function provideBlocks23(config) {
     // Block config for all services
     const blockConfig = { apiKey: config.apiKey, tenantId: config.tenantId };
+    const lifecycleEnabled = config.authMode !== 'cookie' && config.tokenLifecycle !== false;
     // Helper to create transport provider for a service URL
     const createTransportProvider = (token, url) => ({
         provide: token,
-        useFactory: (tokenManager) => {
+        useFactory: (tokenManager, lifecycle) => {
             if (!url)
                 return null;
-            return createTransportWithAuth(url, config, tokenManager);
+            const base = createTransportWithAuth(url, config, tokenManager);
+            if (lifecycleEnabled && lifecycle) {
+                return createRetryTransport(base, () => lifecycle);
+            }
+            return base;
         },
-        deps: [TOKEN_MANAGER],
+        deps: [TOKEN_MANAGER, TOKEN_LIFECYCLE],
     });
     const providers = [
         // Store config for injection
@@ -356,7 +571,34 @@ function provideBlocks23(config) {
                 return createTokenManager(config.apiKey, storage, config.tenantId);
             },
         },
-        // Per-service transport factories (null if URL not configured)
+        // Token lifecycle manager - uses a dedicated refresh transport (avoids circular retry)
+        {
+            provide: TOKEN_LIFECYCLE,
+            useFactory: (tokenManager) => {
+                if (!lifecycleEnabled || !config.urls.authentication)
+                    return null;
+                // Dedicated transport for refresh calls — NOT wrapped with retry
+                const refreshTransport = createTransportWithAuth(config.urls.authentication, config, tokenManager);
+                const authBlock = createAuthenticationBlock(refreshTransport, blockConfig);
+                const refreshFn = async (refreshToken) => {
+                    const response = await authBlock.auth.refreshToken({ refreshToken });
+                    return {
+                        accessToken: response.accessToken,
+                        refreshToken: response.refreshToken,
+                        expiresIn: response.expiresIn,
+                    };
+                };
+                const lcConfig = typeof config.tokenLifecycle === 'object' ? config.tokenLifecycle : {};
+                const lc = createLifecycleManager(tokenManager, refreshFn, lcConfig);
+                // Auto-start if tokens exist (page reload)
+                if (tokenManager.getAccessToken() && tokenManager.getRefreshToken()) {
+                    lc.start();
+                }
+                return lc;
+            },
+            deps: [TOKEN_MANAGER],
+        },
+        // Per-service transport factories (null if URL not configured, wrapped with retry if lifecycle enabled)
         createTransportProvider(AUTHENTICATION_TRANSPORT, config.urls.authentication),
         createTransportProvider(SEARCH_TRANSPORT, config.urls.search),
         createTransportProvider(PRODUCTS_TRANSPORT, config.urls.products),
@@ -448,15 +690,20 @@ function provideBlocks23(config) {
 function getBlocks23Providers(config) {
     // Block config for all services
     const blockConfig = { apiKey: config.apiKey, tenantId: config.tenantId };
+    const lifecycleEnabled = config.authMode !== 'cookie' && config.tokenLifecycle !== false;
     // Helper to create transport provider for a service URL
     const createTransportProvider = (token, url) => ({
         provide: token,
-        useFactory: (tokenManager) => {
+        useFactory: (tokenManager, lifecycle) => {
             if (!url)
                 return null;
-            return createTransportWithAuth(url, config, tokenManager);
+            const base = createTransportWithAuth(url, config, tokenManager);
+            if (lifecycleEnabled && lifecycle) {
+                return createRetryTransport(base, () => lifecycle);
+            }
+            return base;
         },
-        deps: [TOKEN_MANAGER],
+        deps: [TOKEN_MANAGER, TOKEN_LIFECYCLE],
     });
     return [
         // Store config for injection
@@ -469,7 +716,28 @@ function getBlocks23Providers(config) {
                 return createTokenManager(config.apiKey, storage, config.tenantId);
             },
         },
-        // Per-service transport factories (null if URL not configured)
+        // Token lifecycle manager
+        {
+            provide: TOKEN_LIFECYCLE,
+            useFactory: (tokenManager) => {
+                if (!lifecycleEnabled || !config.urls.authentication)
+                    return null;
+                const refreshTransport = createTransportWithAuth(config.urls.authentication, config, tokenManager);
+                const authBlock = createAuthenticationBlock(refreshTransport, blockConfig);
+                const refreshFn = async (refreshToken) => {
+                    const response = await authBlock.auth.refreshToken({ refreshToken });
+                    return { accessToken: response.accessToken, refreshToken: response.refreshToken, expiresIn: response.expiresIn };
+                };
+                const lcConfig = typeof config.tokenLifecycle === 'object' ? config.tokenLifecycle : {};
+                const lc = createLifecycleManager(tokenManager, refreshFn, lcConfig);
+                if (tokenManager.getAccessToken() && tokenManager.getRefreshToken()) {
+                    lc.start();
+                }
+                return lc;
+            },
+            deps: [TOKEN_MANAGER],
+        },
+        // Per-service transport factories (null if URL not configured, wrapped with retry if lifecycle enabled)
         createTransportProvider(AUTHENTICATION_TRANSPORT, config.urls.authentication),
         createTransportProvider(SEARCH_TRANSPORT, config.urls.search),
         createTransportProvider(PRODUCTS_TRANSPORT, config.urls.products),
@@ -729,11 +997,13 @@ class AuthenticationService {
     block;
     tokenManager;
     simpleConfig;
-    constructor(serviceTransport, legacyTransport, config, tokenManager, simpleConfig) {
+    lifecycle;
+    constructor(serviceTransport, legacyTransport, config, tokenManager, simpleConfig, lifecycle) {
         const transport = serviceTransport ?? legacyTransport;
         this.block = transport ? createAuthenticationBlock(transport, config) : null;
         this.tokenManager = tokenManager;
         this.simpleConfig = simpleConfig;
+        this.lifecycle = lifecycle;
     }
     ensureConfigured() {
         if (!this.block) {
@@ -768,7 +1038,11 @@ class AuthenticationService {
      * ```
      */
     signIn(request) {
-        return from(this.ensureConfigured().auth.signIn(request)).pipe(tap((response) => this.storeTokens(response)));
+        return from(this.ensureConfigured().auth.signIn(request)).pipe(tap((response) => {
+            this.storeTokens(response);
+            if (response.accessToken)
+                this.lifecycle?.start();
+        }));
     }
     /**
      * Sign up a new user.
@@ -784,6 +1058,7 @@ class AuthenticationService {
         return from(this.ensureConfigured().auth.signUp(request)).pipe(tap((response) => {
             if (this.isTokenMode && this.tokenManager && response.accessToken) {
                 this.tokenManager.setTokens(response.accessToken);
+                this.lifecycle?.start();
             }
         }));
     }
@@ -795,6 +1070,7 @@ class AuthenticationService {
      */
     signOut() {
         return from(this.ensureConfigured().auth.signOut()).pipe(tap(() => {
+            this.lifecycle?.stop();
             if (this.isTokenMode && this.tokenManager) {
                 this.tokenManager.clearTokens();
             }
@@ -819,7 +1095,11 @@ class AuthenticationService {
      * @returns Observable emitting SignInResponse with `user`, `accessToken`, optional `refreshToken`
      */
     verifyMagicLink(request) {
-        return from(this.ensureConfigured().auth.verifyMagicLink(request)).pipe(tap((response) => this.storeTokens(response)));
+        return from(this.ensureConfigured().auth.verifyMagicLink(request)).pipe(tap((response) => {
+            this.storeTokens(response);
+            if (response.accessToken)
+                this.lifecycle?.start();
+        }));
     }
     /**
      * Accept an invitation and create the user's account.
@@ -830,7 +1110,11 @@ class AuthenticationService {
      *   optional `refreshToken`
      */
     acceptInvitation(request) {
-        return from(this.ensureConfigured().auth.acceptInvitation(request)).pipe(tap((response) => this.storeTokens(response)));
+        return from(this.ensureConfigured().auth.acceptInvitation(request)).pipe(tap((response) => {
+            this.storeTokens(response);
+            if (response.accessToken)
+                this.lifecycle?.start();
+        }));
     }
     /**
      * Sign in via Facebook OAuth.
@@ -935,6 +1219,28 @@ class AuthenticationService {
         return !!this.tokenManager.getAccessToken();
     }
     // ─────────────────────────────────────────────────────────────────────────────
+    // Token Lifecycle
+    // ─────────────────────────────────────────────────────────────────────────────
+    /**
+     * Subscribe to auth state changes (token refreshed, session expired, etc.).
+     * Returns an unsubscribe function.
+     * Only active when tokenLifecycle is enabled.
+     */
+    onAuthStateChanged(listener) {
+        return this.lifecycle?.onAuthStateChanged(listener) ?? (() => { });
+    }
+    /**
+     * Force an immediate token refresh.
+     * Returns the new access token. Throws if lifecycle is unavailable or refresh fails.
+     */
+    refreshSession() {
+        if (!this.lifecycle) {
+            return Promise.reject(new Error('[23blocks] Token lifecycle is not available. ' +
+                'Ensure authMode is "token" and tokenLifecycle is not disabled.'));
+        }
+        return this.lifecycle.refreshNow();
+    }
+    // ─────────────────────────────────────────────────────────────────────────────
     // Delegated sub-services (Promise-based, auto-sync with block API)
     // ─────────────────────────────────────────────────────────────────────────────
     /** Core auth operations (signIn, signUp, signOut, password reset link+OTP, magic links, invitations). Promise-based. */
@@ -999,7 +1305,7 @@ class AuthenticationService {
     get oidc() { return this.ensureConfigured().oidc; }
     /** Direct access to the underlying AuthenticationBlock instance */
     get authenticationBlock() { return this.ensureConfigured(); }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.16", ngImport: i0, type: AuthenticationService, deps: [{ token: AUTHENTICATION_TRANSPORT, optional: true }, { token: TRANSPORT, optional: true }, { token: AUTHENTICATION_CONFIG }, { token: TOKEN_MANAGER, optional: true }, { token: SIMPLE_CONFIG, optional: true }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.16", ngImport: i0, type: AuthenticationService, deps: [{ token: AUTHENTICATION_TRANSPORT, optional: true }, { token: TRANSPORT, optional: true }, { token: AUTHENTICATION_CONFIG }, { token: TOKEN_MANAGER, optional: true }, { token: SIMPLE_CONFIG, optional: true }, { token: TOKEN_LIFECYCLE, optional: true }], target: i0.ɵɵFactoryTarget.Injectable });
     static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.16", ngImport: i0, type: AuthenticationService, providedIn: 'root' });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.16", ngImport: i0, type: AuthenticationService, decorators: [{
@@ -1028,6 +1334,11 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.16", ngImpo
                 }, {
                     type: Inject,
                     args: [SIMPLE_CONFIG]
+                }] }, { type: undefined, decorators: [{
+                    type: Optional
+                }, {
+                    type: Inject,
+                    args: [TOKEN_LIFECYCLE]
                 }] }] });
 
 /**
@@ -2130,5 +2441,5 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.16", ngImpo
  * Generated bundle index. Do not edit.
  */
 
-export { ASSETS_CONFIG, ASSETS_TRANSPORT, AUTHENTICATION_CONFIG, AUTHENTICATION_TRANSPORT, AssetsService, AuthenticationService, CAMPAIGNS_CONFIG, CAMPAIGNS_TRANSPORT, COMPANY_CONFIG, COMPANY_TRANSPORT, CONTENT_CONFIG, CONTENT_TRANSPORT, CONVERSATIONS_CONFIG, CONVERSATIONS_TRANSPORT, CRM_CONFIG, CRM_TRANSPORT, CampaignsService, CompanyService, ContentService, ConversationsService, CrmService, FILES_CONFIG, FILES_TRANSPORT, FORMS_CONFIG, FORMS_TRANSPORT, FilesService, FormsService, GEOLOCATION_CONFIG, GEOLOCATION_TRANSPORT, GeolocationService, JARVIS_CONFIG, JARVIS_TRANSPORT, JarvisService, ONBOARDING_CONFIG, ONBOARDING_TRANSPORT, OnboardingService, PRODUCTS_CONFIG, PRODUCTS_TRANSPORT, PROVIDER_CONFIG, ProductsService, RAG_CONFIG, RAG_TRANSPORT, REWARDS_CONFIG, REWARDS_TRANSPORT, RagService, RewardsService, SALES_CONFIG, SALES_TRANSPORT, SEARCH_CONFIG, SEARCH_TRANSPORT, SIMPLE_CONFIG, SalesService, SearchService, TOKEN_MANAGER, TRANSPORT, UNIVERSITY_CONFIG, UNIVERSITY_TRANSPORT, UniversityService, WALLET_CONFIG, WALLET_TRANSPORT, WalletService, get23BlocksProviders, getBlocks23Providers, provide23Blocks, provideBlocks23 };
+export { ASSETS_CONFIG, ASSETS_TRANSPORT, AUTHENTICATION_CONFIG, AUTHENTICATION_TRANSPORT, AssetsService, AuthenticationService, CAMPAIGNS_CONFIG, CAMPAIGNS_TRANSPORT, COMPANY_CONFIG, COMPANY_TRANSPORT, CONTENT_CONFIG, CONTENT_TRANSPORT, CONVERSATIONS_CONFIG, CONVERSATIONS_TRANSPORT, CRM_CONFIG, CRM_TRANSPORT, CampaignsService, CompanyService, ContentService, ConversationsService, CrmService, FILES_CONFIG, FILES_TRANSPORT, FORMS_CONFIG, FORMS_TRANSPORT, FilesService, FormsService, GEOLOCATION_CONFIG, GEOLOCATION_TRANSPORT, GeolocationService, JARVIS_CONFIG, JARVIS_TRANSPORT, JarvisService, ONBOARDING_CONFIG, ONBOARDING_TRANSPORT, OnboardingService, PRODUCTS_CONFIG, PRODUCTS_TRANSPORT, PROVIDER_CONFIG, ProductsService, RAG_CONFIG, RAG_TRANSPORT, REWARDS_CONFIG, REWARDS_TRANSPORT, RagService, RewardsService, SALES_CONFIG, SALES_TRANSPORT, SEARCH_CONFIG, SEARCH_TRANSPORT, SIMPLE_CONFIG, SalesService, SearchService, TOKEN_LIFECYCLE, TOKEN_MANAGER, TRANSPORT, UNIVERSITY_CONFIG, UNIVERSITY_TRANSPORT, UniversityService, WALLET_CONFIG, WALLET_TRANSPORT, WalletService, get23BlocksProviders, getBlocks23Providers, provide23Blocks, provideBlocks23 };
 //# sourceMappingURL=23blocks-angular.mjs.map