@arex95/vue-core 1.1.26 → 1.1.29

package/dist/composables/auth/useAuth.d.ts

@@ -1,12 +1,12 @@
-import { AuthParams, AuthResponse } from "@/types";
+import { AuthParams, AuthResponse, AuthTokenPaths } from "@/types";
 import { SessionPreference } from "@config/global/sessionConfig";
 /**
  * @typedef {object} AuthHook
  * @property {function(): Promise<number | null>} getTokenExpiry - Retrieves the expiration time of the current token in milliseconds.
  * @property {function(): Promise<void>} cleanCredentials - Clears authentication credentials from storage.
  * @property {(params?: AuthParams) => Promise<void>} logout - Logs out the user, clears credentials, and reloads the page.
- * @property {(params: AuthParams, persistence: SessionPreference) => Promise<AuthResponse>} login - Logs in the user and stores tokens.
- * @property {function(): Promise<AuthResponse>} refresh - Refreshes authentication tokens.
+ * @property {(params: AuthParams, persistence: SessionPreference, tokenPaths?: AuthTokenPaths) => Promise<AuthResponse>} login - Logs in the user and stores tokens.
+ * @property {(tokenPaths?: AuthTokenPaths) => Promise<AuthResponse>} refresh - Refreshes authentication tokens.
  * @property {function(): Promise<boolean>} verifyAuth - Verifies the validity and expiration of the current authentication token.
  * @property {(preference: SessionPreference) => void} setSessionPersistencePreference - Sets the user's preferred storage for authentication data.
  * @property {function(): SessionPreference} getSessionPersistencePreference - Retrieves the user's current preferred storage for authentication data.
@@ -19,6 +19,6 @@ import { SessionPreference } from "@config/global/sessionConfig";
  */
 export declare function useAuth(secretKey?: string): {
     logout: (params?: AuthParams) => Promise<void>;
-    login: (params: AuthParams, persistence: SessionPreference) => Promise<AuthResponse>;
-    refresh: () => Promise<AuthResponse>;
+    login: (params: AuthParams, persistence: SessionPreference, tokenPaths?: AuthTokenPaths) => Promise<AuthResponse>;
+    refresh: (tokenPaths?: AuthTokenPaths) => Promise<AuthResponse>;
 };

package/dist/config/global/index.d.ts

@@ -1,3 +1,4 @@
 export * from './tokensConfig';
 export * from './endpointsConfig';
 export * from './sessionConfig';
+export * from './keyConfig';

package/dist/config/global/keyConfig.d.ts

@@ -0,0 +1,20 @@
+import { AppKeyConfig } from "../../types/AppKeyConfig";
+/**
+ * Sets the main application encryption key.
+ * This key is expected to be used for encryption purposes within the application.
+ *
+ * @param {AppKeyConfig} config - An object containing the application encryption key.
+ * @param {string} config.key - The new application encryption key.
+ *
+ * @returns {void} Does not return anything, but updates the application key.
+ * @throws {Error} If the provided key is null, undefined, or an empty string.
+ */
+export declare function configAppKey(config: AppKeyConfig): void;
+/**
+ * Retrieves the current application encryption key.
+ * Throws an error if the application key has not been configured.
+ *
+ * @returns {string} The configured application encryption key.
+ * @throws {Error} If the application encryption key has not been set.
+ */
+export declare function getAppKey(): string;

package/dist/config/global/sessionConfig.d.ts

@@ -8,6 +8,11 @@ interface SessionConfigObject {
     /** The storage preference: 'local' for localStorage, 'session' for sessionStorage. */
     persistencePreference?: SessionPreference;
 }
+/**
+ * Loads the session configuration from storage (local or session).
+ * This should be called once when the application initializes.
+ */
+export declare function loadSessionConfigFromStorage(): Promise<void>;
 /**
  * Configures the session identifier and/or the data persistence preference for the active browser session.
  * Once configured, the session ID cannot be modified. The persistence preference can be updated.

package/dist/config/global/tokensConfig.d.ts

@@ -23,18 +23,4 @@ export declare function configTokenKeys(config: TokenKeyConfig): void;
  * @returns {TokensConfig} The configuration of the access and refresh token keys.
  */
 export declare function getTokenConfig(): TokensConfig;
-/**
- * Sets the secret key for use in authentication.
- *
- * @param {string} key - The new secret key.
- *
- * @returns {void} Does not return anything, but updates the secret key.
- */
-export declare function setSecretKey(key: string): void;
-/**
- * Retrieves the current secret key.
- *
- * @returns {string} The configured secret key.
- */
-export declare function getSecretKey(): string;
 export {};

package/dist/index.mjs

@@ -538,7 +538,6 @@ function inferErrorType(error) {
     return 'error';
 }
 
-let secretKey = "12345678901234567890123456789012";
 let tokensConfig = Object.freeze({
     ACCESS_TOKEN: "access_token",
     REFRESH_TOKEN: "refresh_token",
@@ -567,24 +566,6 @@ function configTokenKeys(config) {
 function getTokenConfig() {
     return tokensConfig;
 }
-/**
- * Sets the secret key for use in authentication.
- *
- * @param {string} key - The new secret key.
- *
- * @returns {void} Does not return anything, but updates the secret key.
- */
-function setSecretKey(key) {
-    secretKey = key;
-}
-/**
- * Retrieves the current secret key.
- *
- * @returns {string} The configured secret key.
- */
-function getSecretKey() {
-    return secretKey;
-}
 
 let endpointsConfig = {
     LOGIN: "/login",
@@ -784,11 +765,219 @@ const createCustomAxiosInstance = (config) => {
     return new AxiosService(config.baseURL, config.headers).getAxiosInstance();
 };
 
+/**
+ * Converts an ArrayBuffer or Uint8Array to a hexadecimal string.
+ * @param buffer The ArrayBuffer or Uint8Array to convert.
+ * @returns The hexadecimal string.
+ */
+function ab2hex(buffer) {
+    return Array.from(new Uint8Array(buffer))
+        .map((byte) => byte.toString(16).padStart(2, "0"))
+        .join("");
+}
+/**
+ * Converts a hexadecimal string to a Uint8Array.
+ * @param hex The hexadecimal string to convert.
+ * @returns The Uint8Array.
+ * @throws {TypeError} If the input is not a string.
+ * @throws {Error} If the hexadecimal string format is invalid or has an odd length.
+ */
+function hex2ab(hex) {
+    if (typeof hex !== "string") {
+        throw new TypeError("Input must be a string.");
+    }
+    if (hex.length === 0) {
+        return new Uint8Array();
+    }
+    if (!/^[0-9a-fA-F]*$/.test(hex) || hex.length % 2 !== 0) {
+        throw new Error("Invalid hexadecimal string format or odd length.");
+    }
+    const array = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        array[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+    }
+    return array;
+}
+/**
+ * Derives an encryption key from a secret key.
+ * @param secretKey The secret key in plain text.
+ * @returns A promise that resolves with the derived CryptoKey.
+ * @throws {Error} If the secretKey is null or empty.
+ */
+async function importKey(secretKey) {
+    if (!secretKey) {
+        throw new Error("Secret key cannot be null or empty.");
+    }
+    const keyMaterial = new TextEncoder().encode(secretKey);
+    const digest = await crypto.subtle.digest("SHA-256", keyMaterial);
+    return crypto.subtle.importKey("raw", digest, { name: "AES-CBC", length: 256 }, false, ["encrypt", "decrypt"]);
+}
+/**
+ * Encrypts a value with the provided secret key.
+ * @param value The value to encrypt.
+ * @param secretKey The secret key for encryption.
+ * @returns A promise that resolves with the IV (hex) + ciphertext (hex) string.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
+ */
+async function encrypt(value, secretKey) {
+    const key = await importKey(secretKey);
+    const iv = crypto.getRandomValues(new Uint8Array(16));
+    const encodedValue = new TextEncoder().encode(value);
+    const ciphertext = await crypto.subtle.encrypt({ name: "AES-CBC", iv: iv }, key, encodedValue);
+    return ab2hex(iv) + ab2hex(new Uint8Array(ciphertext));
+}
+/**
+ * Decrypts an encrypted value.
+ * @param encryptedValue The encrypted string (IV_hex + ciphertext_hex).
+ * @param secretKey The secret key for decryption.
+ * @returns A promise that resolves with the decrypted value.
+ * @throws {Error} If encryptedValue is null or empty, too short,
+ * or if the IV/ciphertext have incorrect lengths after conversion.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
+ * @throws {TypeError} If hex2ab receives an invalid input type.
+ */
+async function decrypt(encryptedValue, secretKey) {
+    if (!encryptedValue) {
+        throw new Error("Encrypted value cannot be null or empty.");
+    }
+    // For AES-CBC, the IV is ALWAYS 16 bytes.
+    // 16 bytes * 2 hex characters/byte = 32 hex characters for the IV.
+    if (encryptedValue.length < 32) {
+        throw new Error("Encrypted value is too short. Expected at least 32 hexadecimal characters for the IV.");
+    }
+    const key = await importKey(secretKey);
+    const ivHex = encryptedValue.substring(0, 32);
+    const ciphertextHex = encryptedValue.substring(32);
+    const iv = hex2ab(ivHex);
+    const ciphertext = hex2ab(ciphertextHex);
+    if (iv.byteLength !== 16) {
+        throw new Error(`Converted IV has incorrect length: ${iv.byteLength} bytes. Expected 16 bytes.`);
+    }
+    if (ciphertext.byteLength === 0) {
+        throw new Error("Ciphertext is empty. No data to decrypt.");
+    }
+    const decryptedBuffer = await crypto.subtle.decrypt({ name: "AES-CBC", iv: iv }, key, ciphertext);
+    return new TextDecoder().decode(decryptedBuffer);
+}
+
+/**
+ * Encrypts and stores an item in local or session storage.
+ * Assumes the `window` environment is available.
+ * @param key The key under which to store the value.
+ * @param value The value to encrypt and store.
+ * @param secretKey The secret key for encryption.
+ * @param persistent If true, uses localStorage; otherwise, uses sessionStorage.
+ * @returns A promise that resolves when the item is stored. Throws an error if it fails.
+ */
+async function storeEncryptedItem(key, value, secretKey, persistent) {
+    if (typeof window === "undefined") {
+        throw new Error("Cannot access storage: window is not defined.");
+    }
+    const storage = persistent ? window.localStorage : window.sessionStorage;
+    const encryptedValue = await encrypt(value, secretKey);
+    storage.setItem(key, encryptedValue);
+}
+/**
+ * Retrieves and decrypts a value from local or session storage.
+ * Assumes the `window` environment is available.
+ * @param key The key of the item to retrieve.
+ * @param secretKey The secret key for decryption.
+ * @param persistent If true, searches localStorage; otherwise, sessionStorage.
+ * @returns A promise that resolves with the decrypted value or null if not found or decryption fails.
+ */
+async function getDecryptedItem(key, secretKey, persistent) {
+    if (typeof window === "undefined") {
+        return null;
+    }
+    const storage = persistent ? window.localStorage : window.sessionStorage;
+    const encryptedData = storage.getItem(key);
+    if (!encryptedData) {
+        return null;
+    }
+    try {
+        return await decrypt(encryptedData, secretKey);
+    }
+    catch (error) {
+        return null;
+    }
+}
+
+let appKey = null;
+/**
+ * Sets the main application encryption key.
+ * This key is expected to be used for encryption purposes within the application.
+ *
+ * @param {AppKeyConfig} config - An object containing the application encryption key.
+ * @param {string} config.key - The new application encryption key.
+ *
+ * @returns {void} Does not return anything, but updates the application key.
+ * @throws {Error} If the provided key is null, undefined, or an empty string.
+ */
+function configAppKey(config) {
+    if (!config || !config.appKey || config.appKey.trim() === "") {
+        throw new Error("The application encryption key cannot be null or empty.");
+    }
+    appKey = config.appKey;
+}
+/**
+ * Retrieves the current application encryption key.
+ * Throws an error if the application key has not been configured.
+ *
+ * @returns {string} The configured application encryption key.
+ * @throws {Error} If the application encryption key has not been set.
+ */
+function getAppKey() {
+    if (appKey === null) {
+        throw new Error("The application encryption key has not been configured. Please call 'configAppKey()' before attempting to access it.");
+    }
+    return appKey;
+}
+
 let sessionId = v4();
 let sessionConfig = Object.freeze({
     SESSION_ID: sessionId,
 });
 let persistencePreference = "session";
+/**
+ * Loads the session configuration from storage (local or session).
+ * This should be called once when the application initializes.
+ */
+async function loadSessionConfigFromStorage() {
+    const isPersistent = persistencePreference === "local";
+    const storedConfig = await getDecryptedItem("sessionConfig", getAppKey(), isPersistent);
+    if (storedConfig) {
+        try {
+            const parsedConfig = JSON.parse(storedConfig);
+            sessionConfig = Object.freeze({
+                ...sessionConfig,
+                ...parsedConfig,
+            });
+            if (parsedConfig.SESSION_ID) {
+                sessionId = parsedConfig.SESSION_ID;
+            }
+        }
+        catch (error) {
+            console.error("Error parsing stored session config:", error);
+            regenerateSessionId();
+        }
+    }
+    else {
+        regenerateSessionId();
+    }
+    await saveSessionConfigToStorage();
+}
+/**
+ * Saves the current session configuration to local or session storage.
+ */
+async function saveSessionConfigToStorage() {
+    const isPersistent = persistencePreference === "local";
+    try {
+        await storeEncryptedItem("sessionConfig", JSON.stringify(sessionConfig), getAppKey(), isPersistent);
+    }
+    catch (error) {
+        console.error("Error saving session config to storage:", error);
+    }
+}
 /**
  * Configures the session identifier and/or the data persistence preference for the active browser session.
  * Once configured, the session ID cannot be modified. The persistence preference can be updated.
@@ -798,15 +987,19 @@ let persistencePreference = "session";
  * @returns {void} Does not return anything, but freezes the session configuration (for ID) and updates preference.
  */
 function configSession(config) {
-    if (config.sessionId) {
-        sessionConfig = Object.freeze({
-            ...sessionConfig,
+    let updatedConfig = { ...sessionConfig };
+    if (config.sessionId && sessionConfig.SESSION_ID === sessionId) {
+        updatedConfig = {
+            ...updatedConfig,
             SESSION_ID: config.sessionId,
-        });
+        };
+        sessionId = config.sessionId;
     }
     if (config.persistencePreference) {
         persistencePreference = config.persistencePreference;
     }
+    sessionConfig = Object.freeze(updatedConfig);
+    saveSessionConfigToStorage();
 }
 /**
  * Retrieves the current session identifier configuration.
@@ -2504,143 +2697,6 @@ function isValidHexNumber(hex) {
 // console.log(isValidHexNumber('1A3F')); // true
 // console.log(isValidHexNumber('GHIJ')); // false
 
-/**
- * Converts an ArrayBuffer or Uint8Array to a hexadecimal string.
- * @param buffer The ArrayBuffer or Uint8Array to convert.
- * @returns The hexadecimal string.
- */
-function ab2hex(buffer) {
-    return Array.from(new Uint8Array(buffer))
-        .map((byte) => byte.toString(16).padStart(2, "0"))
-        .join("");
-}
-/**
- * Converts a hexadecimal string to a Uint8Array.
- * @param hex The hexadecimal string to convert.
- * @returns The Uint8Array.
- * @throws {TypeError} If the input is not a string.
- * @throws {Error} If the hexadecimal string format is invalid or has an odd length.
- */
-function hex2ab(hex) {
-    if (typeof hex !== "string") {
-        throw new TypeError("Input must be a string.");
-    }
-    if (hex.length === 0) {
-        return new Uint8Array();
-    }
-    if (!/^[0-9a-fA-F]*$/.test(hex) || hex.length % 2 !== 0) {
-        throw new Error("Invalid hexadecimal string format or odd length.");
-    }
-    const array = new Uint8Array(hex.length / 2);
-    for (let i = 0; i < hex.length; i += 2) {
-        array[i / 2] = parseInt(hex.substring(i, i + 2), 16);
-    }
-    return array;
-}
-/**
- * Derives an encryption key from a secret key.
- * @param secretKey The secret key in plain text.
- * @returns A promise that resolves with the derived CryptoKey.
- * @throws {Error} If the secretKey is null or empty.
- */
-async function importKey(secretKey) {
-    if (!secretKey) {
-        throw new Error("Secret key cannot be null or empty.");
-    }
-    const keyMaterial = new TextEncoder().encode(secretKey);
-    const digest = await crypto.subtle.digest("SHA-256", keyMaterial);
-    return crypto.subtle.importKey("raw", digest, { name: "AES-CBC", length: 256 }, false, ["encrypt", "decrypt"]);
-}
-/**
- * Encrypts a value with the provided secret key.
- * @param value The value to encrypt.
- * @param secretKey The secret key for encryption.
- * @returns A promise that resolves with the IV (hex) + ciphertext (hex) string.
- * @throws {Error} If the secretKey is null or empty (via importKey).
- */
-async function encrypt(value, secretKey) {
-    const key = await importKey(secretKey);
-    const iv = crypto.getRandomValues(new Uint8Array(16));
-    const encodedValue = new TextEncoder().encode(value);
-    const ciphertext = await crypto.subtle.encrypt({ name: "AES-CBC", iv: iv }, key, encodedValue);
-    return ab2hex(iv) + ab2hex(new Uint8Array(ciphertext));
-}
-/**
- * Decrypts an encrypted value.
- * @param encryptedValue The encrypted string (IV_hex + ciphertext_hex).
- * @param secretKey The secret key for decryption.
- * @returns A promise that resolves with the decrypted value.
- * @throws {Error} If encryptedValue is null or empty, too short,
- * or if the IV/ciphertext have incorrect lengths after conversion.
- * @throws {Error} If the secretKey is null or empty (via importKey).
- * @throws {TypeError} If hex2ab receives an invalid input type.
- */
-async function decrypt(encryptedValue, secretKey) {
-    if (!encryptedValue) {
-        throw new Error("Encrypted value cannot be null or empty.");
-    }
-    // For AES-CBC, the IV is ALWAYS 16 bytes.
-    // 16 bytes * 2 hex characters/byte = 32 hex characters for the IV.
-    if (encryptedValue.length < 32) {
-        throw new Error("Encrypted value is too short. Expected at least 32 hexadecimal characters for the IV.");
-    }
-    const key = await importKey(secretKey);
-    const ivHex = encryptedValue.substring(0, 32);
-    const ciphertextHex = encryptedValue.substring(32);
-    const iv = hex2ab(ivHex);
-    const ciphertext = hex2ab(ciphertextHex);
-    if (iv.byteLength !== 16) {
-        throw new Error(`Converted IV has incorrect length: ${iv.byteLength} bytes. Expected 16 bytes.`);
-    }
-    if (ciphertext.byteLength === 0) {
-        throw new Error("Ciphertext is empty. No data to decrypt.");
-    }
-    const decryptedBuffer = await crypto.subtle.decrypt({ name: "AES-CBC", iv: iv }, key, ciphertext);
-    return new TextDecoder().decode(decryptedBuffer);
-}
-
-/**
- * Encrypts and stores an item in local or session storage.
- * Assumes the `window` environment is available.
- * @param key The key under which to store the value.
- * @param value The value to encrypt and store.
- * @param secretKey The secret key for encryption.
- * @param isRememberMe If true, uses localStorage; otherwise, uses sessionStorage.
- * @returns A promise that resolves when the item is stored. Throws an error if it fails.
- */
-async function storeEncryptedItem(key, value, secretKey, isRememberMe) {
-    if (typeof window === "undefined") {
-        throw new Error("Cannot access storage: window is not defined.");
-    }
-    const storage = isRememberMe ? window.localStorage : window.sessionStorage;
-    const encryptedValue = await encrypt(value, secretKey);
-    storage.setItem(key, encryptedValue);
-}
-/**
- * Retrieves and decrypts a value from local or session storage.
- * Assumes the `window` environment is available.
- * @param key The key of the item to retrieve.
- * @param secretKey The secret key for decryption.
- * @param isRememberMe If true, searches localStorage; otherwise, sessionStorage.
- * @returns A promise that resolves with the decrypted value or null if not found or decryption fails.
- */
-async function getDecryptedItem(key, secretKey, isRememberMe) {
-    if (typeof window === "undefined") {
-        return null;
-    }
-    const storage = isRememberMe ? window.localStorage : window.sessionStorage;
-    const encryptedData = storage.getItem(key);
-    if (!encryptedData) {
-        return null;
-    }
-    try {
-        return await decrypt(encryptedData, secretKey);
-    }
-    catch (error) {
-        return null;
-    }
-}
-
 /**
  * Clears all stored authentication data (access and refresh tokens)
  * from either sessionStorage or localStorage based on the provided preference.
@@ -2715,9 +2771,10 @@ const storeAuthRefreshToken = async (token, secretKey, preference) => {
  * @throws {Error} "TOKEN_MISSING" if no token is found, "TOKEN_EXPIRED" if the token has expired,
  * "TOKEN_INVALID" if the token format is invalid.
  */
-const verifyAuth = async (secretKey = getSecretKey(), preference = getSessionPersistencePreference()) => {
+const verifyAuth = async () => {
+    const preference = getSessionPersistencePreference();
     try {
-        const token = await getAuthToken(secretKey, preference);
+        const token = await getAuthToken(getAppKey(), preference);
         if (!token) {
             handleError("TOKEN_MISSING: No valid token found", false);
             await cleanCredentials(preference);
@@ -3305,8 +3362,8 @@ function useSorter(items, criteriaList, selectedCriteria) {
  * @property {function(): Promise<number | null>} getTokenExpiry - Retrieves the expiration time of the current token in milliseconds.
  * @property {function(): Promise<void>} cleanCredentials - Clears authentication credentials from storage.
  * @property {(params?: AuthParams) => Promise<void>} logout - Logs out the user, clears credentials, and reloads the page.
- * @property {(params: AuthParams, persistence: SessionPreference) => Promise<AuthResponse>} login - Logs in the user and stores tokens.
- * @property {function(): Promise<AuthResponse>} refresh - Refreshes authentication tokens.
+ * @property {(params: AuthParams, persistence: SessionPreference, tokenPaths?: AuthTokenPaths) => Promise<AuthResponse>} login - Logs in the user and stores tokens.
+ * @property {(tokenPaths?: AuthTokenPaths) => Promise<AuthResponse>} refresh - Refreshes authentication tokens.
  * @property {function(): Promise<boolean>} verifyAuth - Verifies the validity and expiration of the current authentication token.
  * @property {(preference: SessionPreference) => void} setSessionPersistencePreference - Sets the user's preferred storage for authentication data.
  * @property {function(): SessionPreference} getSessionPersistencePreference - Retrieves the user's current preferred storage for authentication data.
@@ -3317,7 +3374,7 @@ function useSorter(items, criteriaList, selectedCriteria) {
  * @param {string} secretKey - The secret key used for token encryption/decryption.
  * @returns {AuthHook} An object containing authentication functions.
  */
-function useAuth(secretKey = getSecretKey()) {
+function useAuth(secretKey = getAppKey()) {
     const axiosInstance = getAxiosInstance();
     const endpoints = getEndpointsConfig();
     const currentPersistencePreference = getSessionPersistencePreference();
@@ -3347,26 +3404,33 @@ function useAuth(secretKey = getSecretKey()) {
      *
      * @param {AuthParams} params - The authentication parameters (e.g., username, password).
      * @param {SessionPreference} persistence - The storage preference: 'local' for localStorage, 'session' for sessionStorage.
-     * @returns {Promise<AuthResponse>} The authentication response containing tokens and user information.
-     * @throws {Error} If the login request fails.
+     * @param {AuthTokenPaths} [tokenPaths] - Configuración opcional para las rutas (en notación de punto) donde se encuentran los tokens en la respuesta de la API.
+     * @returns {Promise<AuthResponse>} La respuesta de autenticación que contiene los tokens e información del usuario.
+     * @throws {Error} Si la solicitud de login falla, o si los tokens de acceso/refresco no se encuentran o no son válidos en la respuesta.
      */
-    const login = async (params, persistence) => {
+    const login = async (params, persistence, tokenPaths) => {
         try {
             const { data } = await axiosInstance.post(endpoints.LOGIN, params);
+            const accessTokenPath = tokenPaths?.accessTokenPath || "access_token";
+            const refreshTokenPath = tokenPaths?.refreshTokenPath || "refresh_token";
+            const accessTokenPathArray = accessTokenPath.split(".");
+            const refreshTokenPathArray = refreshTokenPath.split(".");
             if (!data) {
                 throw new Error("LOGIN_ERROR: No data received from login endpoint.");
             }
-            if (!data.access_token) {
-                throw new Error("LOGIN_ERROR: Access token not found in response.");
+            const accessToken = safeGet(data, accessTokenPathArray);
+            const refreshToken = safeGet(data, refreshTokenPathArray);
+            if (!accessToken || typeof accessToken !== "string") {
+                throw new Error(`LOGIN_ERROR: Access token not found or invalid at path '${accessTokenPath}' in response.`);
             }
-            if (!data.refresh_token) {
-                throw new Error("LOGIN_ERROR: Refresh token not found in response.");
+            if (!refreshToken || typeof refreshToken !== "string") {
+                throw new Error(`LOGIN_ERROR: Refresh token not found or invalid at path '${refreshTokenPath}' in response.`);
             }
             configSession({
                 persistencePreference: persistence,
             });
-            await storeAuthToken(data.access_token, secretKey, persistence);
-            await storeAuthRefreshToken(data.refresh_token, secretKey, persistence);
+            await storeAuthToken(accessToken, secretKey, persistence);
+            await storeAuthRefreshToken(refreshToken, secretKey, persistence);
             return data;
         }
         catch (error) {
@@ -3376,20 +3440,40 @@ function useAuth(secretKey = getSecretKey()) {
     };
     /**
      * Refreshes the authentication tokens using the stored refresh token.
+     * This function can also accept optional token paths if the refresh endpoint
+     * returns tokens with a different structure than the default login.
      * If no refresh token is found, it throws an error and initiates a logout.
      *
+     * @param {AuthTokenPaths} [tokenPaths] - Configuración opcional para las rutas (en notación de punto) de los tokens de acceso y refresco en la respuesta del endpoint de refresco.
      * @returns {Promise<AuthResponse>} The new authentication response with refreshed tokens.
      * @throws {Error} If the refresh token is missing or the refresh request fails.
      */
-    const refresh = async () => {
+    const refresh = async (tokenPaths) => {
         try {
-            const refreshToken = await getAuthRefreshToken(secretKey, currentPersistencePreference);
-            if (!refreshToken) {
-                throw new Error("TOKEN_MISSING: No refresh token found");
+            const refreshTokenFromStorage = await getAuthRefreshToken(secretKey, currentPersistencePreference);
+            if (!refreshTokenFromStorage) {
+                throw new Error("TOKEN_MISSING: No refresh token found in storage.");
+            }
+            const { data } = await axiosInstance.post(endpoints.REFRESH, { refresh_token: refreshTokenFromStorage });
+            const accessTokenPath = tokenPaths?.accessTokenPath || "access_token";
+            const refreshTokenPath = tokenPaths?.refreshTokenPath || "refresh_token";
+            const accessTokenPathArray = accessTokenPath.split(".");
+            const refreshTokenPathArray = refreshTokenPath.split(".");
+            if (!data) {
+                throw new Error("REFRESH_ERROR: No data received from refresh endpoint.");
             }
-            const { data } = await axiosInstance.post(endpoints.REFRESH, { refresh_token: refreshToken });
-            await storeAuthToken(data.access_token, secretKey, currentPersistencePreference);
-            await storeAuthRefreshToken(data.refresh_token, secretKey, currentPersistencePreference);
+            const accessTokenAfterRefresh = safeGet(data, accessTokenPathArray);
+            const refreshTokenAfterRefresh = safeGet(data, refreshTokenPathArray);
+            if (!accessTokenAfterRefresh ||
+                typeof accessTokenAfterRefresh !== "string") {
+                throw new Error(`REFRESH_ERROR: Access token not found or invalid at path '${accessTokenPath}' in refresh response.`);
+            }
+            if (!refreshTokenAfterRefresh ||
+                typeof refreshTokenAfterRefresh !== "string") {
+                throw new Error(`REFRESH_ERROR: Refresh token not found or invalid at path '${refreshTokenPath}' in refresh response.`);
+            }
+            await storeAuthToken(accessTokenAfterRefresh, secretKey, currentPersistencePreference);
+            await storeAuthRefreshToken(refreshTokenAfterRefresh, secretKey, currentPersistencePreference);
             return data;
         }
         catch (error) {
@@ -3401,7 +3485,7 @@ function useAuth(secretKey = getSecretKey()) {
     return {
         logout,
         login,
-        refresh
+        refresh,
     };
 }
 
@@ -3422,10 +3506,8 @@ const ArexVueCore = {
             console.warn("ArexVueCore: No configuration options were provided. The library may not function correctly.");
             return;
         }
-        configEndpoints({
-            loginEndpoint: options.endpoints.login,
-            refreshEndpoint: options.endpoints.refresh,
-            logoutEndpoint: options.endpoints.logout
+        configAppKey({
+            appKey: options.appKey
         });
         configTokenKeys({
             accessTokenKey: options.tokenKeys.accessToken,
@@ -3434,7 +3516,12 @@ const ArexVueCore = {
         configAxios({
             baseURL: options.apiUrl,
         });
+        configEndpoints({
+            loginEndpoint: options.endpoints.login,
+            refreshEndpoint: options.endpoints.refresh,
+            logoutEndpoint: options.endpoints.logout,
+        });
     },
 };
 
-export { AppTypes, ArchiveTypes, ArexVueCore, AudioTypes, AxiosService, ContentTypeEnum, DocumentTypes, ERROR_MESSAGES, ERROR_STYLES, ErrorEnum, ErrorMessages, ErrorStyles, ExceptionEnum, FontTypes, ImageTypes, KeyCodeEnum, OtherTypes, RestStd, ScreenBreakpoint, ScreenSize, StorageKeyEnum, StorageTypeEnum, TextTypes, VideoTypes, ab2hex, addCustomKeyboardShortcut, addDays, addDoubleClickListener, addKeyListener, ageAtDate, axiosFetch, blobToFormData, bufferToBlob, calculateAge, cleanCredentials, clickOutside, compareObject, configAxios, configEndpoints, configSession, configTokenKeys, copyToClipboard, countWords, createCustomAxiosInstance, createFetch, createKeyMap, customShortcut, daysBetween, daysToNextBirthday, debounce, debounceAsync, debounceAsyncValidator, debounceAsyncWithImmediate, debounceLeading, debounceLeadingTrailing, debounceTrailing, decrypt, deepClone, deepEqual, deepMerge, detectKeyHold, disableCopy, disableF12Key, disableMouseButtons, disableRightClick, disableSpecificKeys, downloadBlob, enableMouseButtons, enableRightClick, enableSpecificKeys, encrypt, exportToCSV, exportToExcel, exportToJSON, exportToText, exportToXML, filterObjectByKeys, flattenObject, formDataToObject, formatDate, generateRandomString, getAuthRefreshToken, getAuthToken, getAxiosInstance, getDecryptedItem, getEndOfMonth, getEndpointsConfig, getObjectDifferences, getObjectKeys, getQueryParam, getSecretKey, getSessionConfig, getSessionId, getSessionPersistencePreference, getStartOfMonth, getTokenConfig, handleError, hasNestedProperties, hex2ab, importKey, isEmptyObject, isLeapYear, isStrongPassword, isValidAge, isValidCreditCard, isValidDate, isValidEmail, isValidExpiryDate, isValidHexColor, isValidHexColorAlpha, isValidHexNumber, isValidIP, isValidPhoneNumber, isValidSSN, isValidTime, isValidURL, isValidUsername, isValidZIP, lowerFirst, objectToFormData, objectToFormDataEnhanced, objectToQueryString, openWindow, parseDate, proxyToPlainObject, readFileAsDataURL, readFileAsText, regenerateSessionId, registerKeyboardShortcuts, removeAccent, removeClickOutside, removeCustomKeyboardShortcut, removeCustomShortcuts, removeDoubleClickListener, removeEmptyProperties, removeKeyListeners, replaceAll, reverseString, safeGet, screenMap, scrollToTop, setSecretKey, simulateKeyPress, stopDetectingKeyHold, storeAuthRefreshToken, storeAuthToken, storeEncryptedItem, stringToBlob, subtractDays, throttle, toCamelCase, toKebabCase, toggleTabNavigation, truncateString, unregisterKeyboardShortcuts, upperFirst, useAuth, useBreakpoint, useFilter, usePagination, useSorter, useVueQuery, validateAlphanumeric, validateLetters, validateNumbers, verifyAuth };
+export { AppTypes, ArchiveTypes, ArexVueCore, AudioTypes, AxiosService, ContentTypeEnum, DocumentTypes, ERROR_MESSAGES, ERROR_STYLES, ErrorEnum, ErrorMessages, ErrorStyles, ExceptionEnum, FontTypes, ImageTypes, KeyCodeEnum, OtherTypes, RestStd, ScreenBreakpoint, ScreenSize, StorageKeyEnum, StorageTypeEnum, TextTypes, VideoTypes, ab2hex, addCustomKeyboardShortcut, addDays, addDoubleClickListener, addKeyListener, ageAtDate, axiosFetch, blobToFormData, bufferToBlob, calculateAge, cleanCredentials, clickOutside, compareObject, configAppKey, configAxios, configEndpoints, configSession, configTokenKeys, copyToClipboard, countWords, createCustomAxiosInstance, createFetch, createKeyMap, customShortcut, daysBetween, daysToNextBirthday, debounce, debounceAsync, debounceAsyncValidator, debounceAsyncWithImmediate, debounceLeading, debounceLeadingTrailing, debounceTrailing, decrypt, deepClone, deepEqual, deepMerge, detectKeyHold, disableCopy, disableF12Key, disableMouseButtons, disableRightClick, disableSpecificKeys, downloadBlob, enableMouseButtons, enableRightClick, enableSpecificKeys, encrypt, exportToCSV, exportToExcel, exportToJSON, exportToText, exportToXML, filterObjectByKeys, flattenObject, formDataToObject, formatDate, generateRandomString, getAppKey, getAuthRefreshToken, getAuthToken, getAxiosInstance, getDecryptedItem, getEndOfMonth, getEndpointsConfig, getObjectDifferences, getObjectKeys, getQueryParam, getSessionConfig, getSessionId, getSessionPersistencePreference, getStartOfMonth, getTokenConfig, handleError, hasNestedProperties, hex2ab, importKey, isEmptyObject, isLeapYear, isStrongPassword, isValidAge, isValidCreditCard, isValidDate, isValidEmail, isValidExpiryDate, isValidHexColor, isValidHexColorAlpha, isValidHexNumber, isValidIP, isValidPhoneNumber, isValidSSN, isValidTime, isValidURL, isValidUsername, isValidZIP, loadSessionConfigFromStorage, lowerFirst, objectToFormData, objectToFormDataEnhanced, objectToQueryString, openWindow, parseDate, proxyToPlainObject, readFileAsDataURL, readFileAsText, regenerateSessionId, registerKeyboardShortcuts, removeAccent, removeClickOutside, removeCustomKeyboardShortcut, removeCustomShortcuts, removeDoubleClickListener, removeEmptyProperties, removeKeyListeners, replaceAll, reverseString, safeGet, screenMap, scrollToTop, simulateKeyPress, stopDetectingKeyHold, storeAuthRefreshToken, storeAuthToken, storeEncryptedItem, stringToBlob, subtractDays, throttle, toCamelCase, toKebabCase, toggleTabNavigation, truncateString, unregisterKeyboardShortcuts, upperFirst, useAuth, useBreakpoint, useFilter, usePagination, useSorter, useVueQuery, validateAlphanumeric, validateLetters, validateNumbers, verifyAuth };

package/dist/types/AppKeyConfig.d.ts

@@ -0,0 +1,3 @@
+export interface AppKeyConfig {
+    appKey: string;
+}

package/dist/types/ArexVueCoreOptions.d.ts

@@ -1,26 +1,13 @@
 export interface ArexVueCoreOptions {
-    /**
-     * The authentication endpoints.
-     */
+    appKey: string;
     endpoints: {
-        /** The login endpoint. */
         login: string;
-        /** The token refresh endpoint. */
         refresh: string;
-        /** The logout endpoint. */
         logout: string;
     };
-    /**
-     * The key prefixes for storing tokens.
-     */
     tokenKeys: {
-        /** The access token key prefix. */
         accessToken: string;
-        /** The refresh token key prefix. */
         refreshToken: string;
     };
-    /**
-     * The base URL for the API.
-     */
     apiUrl: string;
 }

package/dist/types/Auth.d.ts

@@ -0,0 +1,16 @@
+import { TokensConfig, EndpointsConfig } from "@/types";
+export type AuthConfig = {
+    endpoints: EndpointsConfig;
+    storageKeys: TokensConfig;
+};
+export interface AuthParams {
+    username?: string;
+    password?: string;
+}
+export interface AuthTokenPaths {
+    accessTokenPath?: string;
+    refreshTokenPath?: string;
+}
+export interface AuthResponse {
+    [key: string]: any;
+}

package/dist/types/index.d.ts

@@ -3,9 +3,8 @@ export * from './ExtendedQueryOptions';
 export * from './ErrorType';
 export * from './EndpointsConfig';
 export * from './TokenConfig';
-export * from './AuthConfig';
+export * from './Auth';
 export * from './SessionConfig';
 export * from './DecodedJwtPayload';
-export * from './AuthResponse';
-export * from './AuthParams';
 export * from './ArexVueCoreOptions';
+export * from './AppKeyConfig';

package/dist/utils/credentials.d.ts

@@ -55,4 +55,4 @@ export declare const storeAuthRefreshToken: (token: string, secretKey: string, p
  * @throws {Error} "TOKEN_MISSING" if no token is found, "TOKEN_EXPIRED" if the token has expired,
  * "TOKEN_INVALID" if the token format is invalid.
  */
-export declare const verifyAuth: (secretKey?: string, preference?: SessionPreference) => Promise<boolean>;
+export declare const verifyAuth: () => Promise<boolean>;

package/dist/utils/storage.d.ts

@@ -4,16 +4,16 @@
  * @param key The key under which to store the value.
  * @param value The value to encrypt and store.
  * @param secretKey The secret key for encryption.
- * @param isRememberMe If true, uses localStorage; otherwise, uses sessionStorage.
+ * @param persistent If true, uses localStorage; otherwise, uses sessionStorage.
  * @returns A promise that resolves when the item is stored. Throws an error if it fails.
  */
-export declare function storeEncryptedItem(key: string, value: string, secretKey: string, isRememberMe: boolean): Promise<void>;
+export declare function storeEncryptedItem(key: string, value: string, secretKey: string, persistent: boolean): Promise<void>;
 /**
  * Retrieves and decrypts a value from local or session storage.
  * Assumes the `window` environment is available.
  * @param key The key of the item to retrieve.
  * @param secretKey The secret key for decryption.
- * @param isRememberMe If true, searches localStorage; otherwise, sessionStorage.
+ * @param persistent If true, searches localStorage; otherwise, sessionStorage.
  * @returns A promise that resolves with the decrypted value or null if not found or decryption fails.
  */
-export declare function getDecryptedItem(key: string, secretKey: string, isRememberMe: boolean): Promise<string | null>;
+export declare function getDecryptedItem(key: string, secretKey: string, persistent: boolean): Promise<string | null>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arex95/vue-core",
-  "version": "1.1.26",
+  "version": "1.1.29",
   "description": "Opinionated Vue Core",
   "main": "dist/index.js",
   "module": "dist/index.mjs",