@arcote.tech/arc-adapter-db-postgres 0.8.3 → 0.8.5

package/dist/index.js

@@ -1350,9 +1350,74 @@ function apply(state, patches, applyOptions) {
 var constructorString = Object.prototype.constructor.toString();
 
 // ../../../core/dist/index.js
-var TOKEN_PREFIX = "arc:token:";
-function hasLocalStorage() {
-  return typeof localStorage !== "undefined";
+var COOKIE_PREFIX = "arc_token";
+var TOKEN_BUMP_KEY = "arc:token-bump";
+function hasDocument() {
+  return typeof document !== "undefined";
+}
+function signalCrossTabChange() {
+  if (typeof localStorage === "undefined")
+    return;
+  try {
+    localStorage.setItem(TOKEN_BUMP_KEY, String(Date.now()));
+  } catch {}
+}
+function isSecureContext() {
+  return typeof location !== "undefined" && location.protocol === "https:";
+}
+function tokenCookieName(scopeKey) {
+  return scopeKey === "default" ? COOKIE_PREFIX : `${COOKIE_PREFIX}_${scopeKey.replace(/:/g, ".")}`;
+}
+function scopeKeyFromCookieName(name) {
+  if (name === COOKIE_PREFIX)
+    return "default";
+  if (!name.startsWith(`${COOKIE_PREFIX}_`))
+    return null;
+  return name.slice(COOKIE_PREFIX.length + 1).replace(/\./g, ":");
+}
+function maxAgeFromExp(exp) {
+  const THIRTY_DAYS = 30 * 24 * 60 * 60;
+  if (typeof exp !== "number" || !Number.isFinite(exp))
+    return THIRTY_DAYS;
+  const expMs = exp > 1000000000000 ? exp : exp * 1000;
+  const secs = Math.floor((expMs - Date.now()) / 1000);
+  return secs > 0 ? secs : THIRTY_DAYS;
+}
+function writeTokenCookie(scopeKey, jwt, exp) {
+  if (!hasDocument())
+    return;
+  const attrs = [
+    "Path=/",
+    "SameSite=Lax",
+    `Max-Age=${maxAgeFromExp(exp)}`
+  ];
+  if (isSecureContext())
+    attrs.push("Secure");
+  document.cookie = `${tokenCookieName(scopeKey)}=${encodeURIComponent(jwt)}; ${attrs.join("; ")}`;
+  signalCrossTabChange();
+}
+function removeTokenCookie(scopeKey) {
+  if (!hasDocument())
+    return;
+  document.cookie = `${tokenCookieName(scopeKey)}=; Path=/; SameSite=Lax; Max-Age=0`;
+  signalCrossTabChange();
+}
+function readAllTokenCookies() {
+  if (!hasDocument() || !document.cookie)
+    return [];
+  const out = [];
+  for (const part of document.cookie.split(";")) {
+    const eq = part.indexOf("=");
+    if (eq < 0)
+      continue;
+    const scopeKey = scopeKeyFromCookieName(part.slice(0, eq).trim());
+    if (scopeKey === null)
+      continue;
+    const jwt = decodeURIComponent(part.slice(eq + 1).trim());
+    if (jwt)
+      out.push({ scopeKey, jwt });
+  }
+  return out;
 }
 function notifyTokenChange(scope) {
   if (typeof window !== "undefined") {
@@ -1368,24 +1433,21 @@ class AuthAdapter {
   constructor(options) {
     this.namespace = options?.storageNamespace || undefined;
   }
-  storageKey(scope) {
-    return this.namespace ? `${TOKEN_PREFIX}${this.namespace}:${scope}` : TOKEN_PREFIX + scope;
+  scopeKey(scope) {
+    return this.namespace ? `${this.namespace}:${scope}` : scope;
   }
   setToken(token, scope = "default") {
     if (!token) {
       this.scopes.delete(scope);
-      if (hasLocalStorage()) {
-        localStorage.removeItem(this.storageKey(scope));
-        notifyTokenChange(scope);
-      }
+      removeTokenCookie(this.scopeKey(scope));
+      notifyTokenChange(scope);
       return;
     }
     try {
       const parts = token.split(".");
       if (parts.length !== 3) {
         this.scopes.delete(scope);
-        if (hasLocalStorage())
-          localStorage.removeItem(this.storageKey(scope));
+        removeTokenCookie(this.scopeKey(scope));
         return;
       }
       const payload = JSON.parse(atob(parts[1]));
@@ -1398,49 +1460,45 @@ class AuthAdapter {
           exp: payload.exp
         }
       });
-      if (hasLocalStorage()) {
-        localStorage.setItem(this.storageKey(scope), token);
-        notifyTokenChange(scope);
-      }
+      writeTokenCookie(this.scopeKey(scope), token, payload.exp);
+      notifyTokenChange(scope);
     } catch {
       this.scopes.delete(scope);
-      if (hasLocalStorage())
-        localStorage.removeItem(this.storageKey(scope));
+      removeTokenCookie(this.scopeKey(scope));
     }
   }
   setDecoded(decoded, scope = "default") {
     this.scopes.set(scope, { raw: "", decoded });
   }
   loadPersisted() {
-    if (!hasLocalStorage())
-      return;
-    const prefix = this.namespace ? `${TOKEN_PREFIX}${this.namespace}:` : TOKEN_PREFIX;
-    for (let i = 0;i < localStorage.length; i++) {
-      const key = localStorage.key(i);
-      if (key?.startsWith(prefix)) {
-        const scope = key.slice(prefix.length);
-        if (!this.namespace && scope.includes(":"))
+    const nsPrefix = this.namespace ? `${this.namespace}:` : "";
+    for (const { scopeKey, jwt } of readAllTokenCookies()) {
+      let scope;
+      if (this.namespace) {
+        if (!scopeKey.startsWith(nsPrefix))
           continue;
-        const raw = localStorage.getItem(key);
-        if (raw) {
-          try {
-            const parts = raw.split(".");
-            if (parts.length !== 3)
-              continue;
-            const payload = JSON.parse(atob(parts[1]));
-            this.scopes.set(scope, {
-              raw,
-              decoded: {
-                tokenName: payload.tokenName,
-                params: payload.params || {},
-                iat: payload.iat,
-                exp: payload.exp
-              }
-            });
-          } catch {
-            localStorage.removeItem(key);
+        scope = scopeKey.slice(nsPrefix.length);
+      } else {
+        if (scopeKey.includes(":"))
+          continue;
+        scope = scopeKey;
+      }
+      try {
+        const parts = jwt.split(".");
+        if (parts.length !== 3)
+          continue;
+        const payload = JSON.parse(atob(parts[1]));
+        this.scopes.set(scope, {
+          raw: jwt,
+          decoded: {
+            tokenName: payload.tokenName,
+            params: payload.params || {},
+            iat: payload.iat,
+            exp: payload.exp
           }
-        }
+        });
+      } catch {
+        removeTokenCookie(scopeKey);
       }
     }
   }
@@ -1472,10 +1530,8 @@ class AuthAdapter {
     return Array.from(this.scopes.keys());
   }
   clear() {
-    if (hasLocalStorage()) {
-      for (const scope of this.scopes.keys()) {
-        localStorage.removeItem(this.storageKey(scope));
-      }
+    for (const scope of this.scopes.keys()) {
+      removeTokenCookie(this.scopeKey(scope));
     }
     this.scopes.clear();
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcote.tech/arc-adapter-db-postgres",
-  "version": "0.8.3",
+  "version": "0.8.5",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -23,7 +23,7 @@
     "postgres": "^3.4.4"
   },
   "peerDependencies": {
-    "@arcote.tech/arc": "^0.8.3"
+    "@arcote.tech/arc": "^0.8.5"
   },
   "devDependencies": {
     "@types/pg": "^8.11.0",