@arex95/vue-core 1.1.27 → 1.1.30

package/dist/composables/auth/useAuth.d.ts

@@ -1,5 +1,4 @@
-import { AuthParams, AuthResponse, AuthTokenPaths } from "@/types";
-import { SessionPreference } from "@config/global/sessionConfig";
+import { AuthParams, AuthResponse, AuthTokenPaths, SessionPreference } from "@/types";
 /**
  * @typedef {object} AuthHook
  * @property {function(): Promise<number | null>} getTokenExpiry - Retrieves the expiration time of the current token in milliseconds.
@@ -9,7 +8,7 @@ import { SessionPreference } from "@config/global/sessionConfig";
  * @property {(tokenPaths?: AuthTokenPaths) => Promise<AuthResponse>} refresh - Refreshes authentication tokens.
  * @property {function(): Promise<boolean>} verifyAuth - Verifies the validity and expiration of the current authentication token.
  * @property {(preference: SessionPreference) => void} setSessionPersistencePreference - Sets the user's preferred storage for authentication data.
- * @property {function(): SessionPreference} getSessionPersistencePreference - Retrieves the user's current preferred storage for authentication data.
+ * @property {function(): SessionPreference} getSessionPersistence - Retrieves the user's current preferred storage for authentication data.
  */
 /**
  * Custom hook for authentication logic, including login, logout, token management, and session preference.

package/dist/config/global/index.d.ts

@@ -1,3 +1,4 @@
 export * from './tokensConfig';
 export * from './endpointsConfig';
 export * from './sessionConfig';
+export * from './keyConfig';

package/dist/config/global/keyConfig.d.ts

@@ -0,0 +1,20 @@
+import { AppKeyConfig } from "../../types/AppKeyConfig";
+/**
+ * Sets the main application encryption key.
+ * This key is expected to be used for encryption purposes within the application.
+ *
+ * @param {AppKeyConfig} config - An object containing the application encryption key.
+ * @param {string} config.key - The new application encryption key.
+ *
+ * @returns {void} Does not return anything, but updates the application key.
+ * @throws {Error} If the provided key is null, undefined, or an empty string.
+ */
+export declare function configAppKey(config: AppKeyConfig): void;
+/**
+ * Retrieves the current application encryption key.
+ * Throws an error if the application key has not been configured.
+ *
+ * @returns {string} The configured application encryption key.
+ * @throws {Error} If the application encryption key has not been set.
+ */
+export declare function getAppKey(): string;

package/dist/config/global/sessionConfig.d.ts

@@ -1,44 +1,34 @@
-export type SessionPreference = "local" | "session";
+import { SessionPreference, SessionConfigObject, SessionConfig } from "@/types/SessionConfig";
 /**
- * Configuration object for the session.
- */
-interface SessionConfigObject {
-    /** The unique session identifier. */
-    sessionId?: string;
-    /** The storage preference: 'local' for localStorage, 'session' for sessionStorage. */
-    persistencePreference?: SessionPreference;
-}
-/**
- * Configures the session identifier and/or the data persistence preference for the active browser session.
- * Once configured, the session ID cannot be modified. The persistence preference can be updated.
+ * Configures the session identifier and/or data persistence preference
+ * for the active browser session.
  *
- * @param {SessionConfigObject} config - An object containing the unique session identifier and/or persistence preference.
+ * This function is asynchronous because it will always attempt to load the current configuration
+ * before applying changes and then saving them.
  *
- * @returns {void} Does not return anything, but freezes the session configuration (for ID) and updates preference.
+ * @param {SessionConfigObject} config - An object containing the unique session identifier and/or
+ * the persistence preference.
+ * @returns {Promise<void>} A promise that resolves when the session has been configured and saved.
  */
-export declare function configSession(config: SessionConfigObject): void;
+export declare function configSession(config: SessionConfigObject): Promise<void>;
 /**
- * Retrieves the current session identifier configuration.
+ * Retrieves the current session identifier.
+ * Always attempts to load the configuration from storage. If it fails, it uses the internal state.
  *
- * @returns {string} The unique session identifier.
+ * @returns {Promise<string>} A promise that resolves with the unique session identifier.
  */
-export declare function getSessionConfig(): string;
+export declare function getSessionId(): Promise<string>;
 /**
  * Retrieves the current data persistence preference.
+ * Always attempts to load the configuration from storage. If it fails, it uses the internal state.
  *
- * @returns {SessionPreference} The configured persistence preference ('local' or 'session').
+ * @returns {Promise<SessionPreference>} A promise that resolves with the configured persistence preference ('local' or 'session').
  */
-export declare function getSessionPersistencePreference(): SessionPreference;
+export declare function getSessionPersistence(): Promise<SessionPreference>;
 /**
- * Generates a new UUID for the current session.
- *
- * @returns {void} Does not return anything, but updates the session identifier.
- */
-export declare function regenerateSessionId(): void;
-/**
- * Retrieves the current session identifier.
+ * Retrieves the complete session configuration.
+ * Always attempts to load the configuration from storage. If it fails, it uses the internal state.
  *
- * @returns {string} The unique session identifier.
+ * @returns {Promise<SessionConfig>} A promise that resolves with the session configuration object.
  */
-export declare function getSessionId(): string;
-export {};
+export declare function getSessionConfig(): Promise<SessionConfig>;

package/dist/config/global/tokensConfig.d.ts

@@ -23,18 +23,4 @@ export declare function configTokenKeys(config: TokenKeyConfig): void;
  * @returns {TokensConfig} The configuration of the access and refresh token keys.
  */
 export declare function getTokenConfig(): TokensConfig;
-/**
- * Sets the secret key for use in authentication.
- *
- * @param {string} key - The new secret key.
- *
- * @returns {void} Does not return anything, but updates the secret key.
- */
-export declare function setSecretKey(key: string): void;
-/**
- * Retrieves the current secret key.
- *
- * @returns {string} The configured secret key.
- */
-export declare function getSecretKey(): string;
 export {};

package/dist/index.mjs

@@ -538,7 +538,6 @@ function inferErrorType(error) {
     return 'error';
 }
 
-let secretKey = "12345678901234567890123456789012";
 let tokensConfig = Object.freeze({
     ACCESS_TOKEN: "access_token",
     REFRESH_TOKEN: "refresh_token",
@@ -567,24 +566,6 @@ function configTokenKeys(config) {
 function getTokenConfig() {
     return tokensConfig;
 }
-/**
- * Sets the secret key for use in authentication.
- *
- * @param {string} key - The new secret key.
- *
- * @returns {void} Does not return anything, but updates the secret key.
- */
-function setSecretKey(key) {
-    secretKey = key;
-}
-/**
- * Retrieves the current secret key.
- *
- * @returns {string} The configured secret key.
- */
-function getSecretKey() {
-    return secretKey;
-}
 
 let endpointsConfig = {
     LOGIN: "/login",
@@ -784,62 +765,277 @@ const createCustomAxiosInstance = (config) => {
     return new AxiosService(config.baseURL, config.headers).getAxiosInstance();
 };
 
-let sessionId = v4();
-let sessionConfig = Object.freeze({
-    SESSION_ID: sessionId,
-});
-let persistencePreference = "session";
 /**
- * Configures the session identifier and/or the data persistence preference for the active browser session.
- * Once configured, the session ID cannot be modified. The persistence preference can be updated.
+ * Converts an ArrayBuffer or Uint8Array to a hexadecimal string.
+ * @param buffer The ArrayBuffer or Uint8Array to convert.
+ * @returns The hexadecimal string.
+ */
+function ab2hex(buffer) {
+    return Array.from(new Uint8Array(buffer))
+        .map((byte) => byte.toString(16).padStart(2, "0"))
+        .join("");
+}
+/**
+ * Converts a hexadecimal string to a Uint8Array.
+ * @param hex The hexadecimal string to convert.
+ * @returns The Uint8Array.
+ * @throws {TypeError} If the input is not a string.
+ * @throws {Error} If the hexadecimal string format is invalid or has an odd length.
+ */
+function hex2ab(hex) {
+    if (typeof hex !== "string") {
+        throw new TypeError("Input must be a string.");
+    }
+    if (hex.length === 0) {
+        return new Uint8Array();
+    }
+    if (!/^[0-9a-fA-F]*$/.test(hex) || hex.length % 2 !== 0) {
+        throw new Error("Invalid hexadecimal string format or odd length.");
+    }
+    const array = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        array[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+    }
+    return array;
+}
+/**
+ * Derives an encryption key from a secret key.
+ * @param secretKey The secret key in plain text.
+ * @returns A promise that resolves with the derived CryptoKey.
+ * @throws {Error} If the secretKey is null or empty.
+ */
+async function importKey(secretKey) {
+    if (!secretKey) {
+        throw new Error("Secret key cannot be null or empty.");
+    }
+    const keyMaterial = new TextEncoder().encode(secretKey);
+    const digest = await crypto.subtle.digest("SHA-256", keyMaterial);
+    return crypto.subtle.importKey("raw", digest, { name: "AES-CBC", length: 256 }, false, ["encrypt", "decrypt"]);
+}
+/**
+ * Encrypts a value with the provided secret key.
+ * @param value The value to encrypt.
+ * @param secretKey The secret key for encryption.
+ * @returns A promise that resolves with the IV (hex) + ciphertext (hex) string.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
+ */
+async function encrypt(value, secretKey) {
+    const key = await importKey(secretKey);
+    const iv = crypto.getRandomValues(new Uint8Array(16));
+    const encodedValue = new TextEncoder().encode(value);
+    const ciphertext = await crypto.subtle.encrypt({ name: "AES-CBC", iv: iv }, key, encodedValue);
+    return ab2hex(iv) + ab2hex(new Uint8Array(ciphertext));
+}
+/**
+ * Decrypts an encrypted value.
+ * @param encryptedValue The encrypted string (IV_hex + ciphertext_hex).
+ * @param secretKey The secret key for decryption.
+ * @returns A promise that resolves with the decrypted value.
+ * @throws {Error} If encryptedValue is null or empty, too short,
+ * or if the IV/ciphertext have incorrect lengths after conversion.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
+ * @throws {TypeError} If hex2ab receives an invalid input type.
+ */
+async function decrypt(encryptedValue, secretKey) {
+    if (!encryptedValue) {
+        throw new Error("Encrypted value cannot be null or empty.");
+    }
+    // For AES-CBC, the IV is ALWAYS 16 bytes.
+    // 16 bytes * 2 hex characters/byte = 32 hex characters for the IV.
+    if (encryptedValue.length < 32) {
+        throw new Error("Encrypted value is too short. Expected at least 32 hexadecimal characters for the IV.");
+    }
+    const key = await importKey(secretKey);
+    const ivHex = encryptedValue.substring(0, 32);
+    const ciphertextHex = encryptedValue.substring(32);
+    const iv = hex2ab(ivHex);
+    const ciphertext = hex2ab(ciphertextHex);
+    if (iv.byteLength !== 16) {
+        throw new Error(`Converted IV has incorrect length: ${iv.byteLength} bytes. Expected 16 bytes.`);
+    }
+    if (ciphertext.byteLength === 0) {
+        throw new Error("Ciphertext is empty. No data to decrypt.");
+    }
+    const decryptedBuffer = await crypto.subtle.decrypt({ name: "AES-CBC", iv: iv }, key, ciphertext);
+    return new TextDecoder().decode(decryptedBuffer);
+}
+
+/**
+ * Encrypts and stores an item in local or session storage.
+ * Assumes the `window` environment is available.
+ * @param key The key under which to store the value.
+ * @param value The value to encrypt and store.
+ * @param secretKey The secret key for encryption.
+ * @param persistent If true, uses localStorage; otherwise, uses sessionStorage.
+ * @returns A promise that resolves when the item is stored. Throws an error if it fails.
+ */
+async function storeEncryptedItem(key, value, secretKey, persistent) {
+    if (typeof window === "undefined") {
+        throw new Error("Cannot access storage: window is not defined.");
+    }
+    const storage = persistent ? window.localStorage : window.sessionStorage;
+    const encryptedValue = await encrypt(value, secretKey);
+    storage.setItem(key, encryptedValue);
+}
+/**
+ * Retrieves and decrypts a value from local or session storage.
+ * Assumes the `window` environment is available.
+ * @param key The key of the item to retrieve.
+ * @param secretKey The secret key for decryption.
+ * @param persistent If true, searches localStorage; otherwise, sessionStorage.
+ * @returns A promise that resolves with the decrypted value or null if not found or decryption fails.
+ */
+async function getDecryptedItem(key, secretKey, persistent) {
+    if (typeof window === "undefined") {
+        return null;
+    }
+    const storage = persistent ? window.localStorage : window.sessionStorage;
+    const encryptedData = storage.getItem(key);
+    if (!encryptedData) {
+        return null;
+    }
+    try {
+        return await decrypt(encryptedData, secretKey);
+    }
+    catch (error) {
+        return null;
+    }
+}
+
+let appKey = null;
+/**
+ * Sets the main application encryption key.
+ * This key is expected to be used for encryption purposes within the application.
  *
- * @param {SessionConfigObject} config - An object containing the unique session identifier and/or persistence preference.
+ * @param {AppKeyConfig} config - An object containing the application encryption key.
+ * @param {string} config.key - The new application encryption key.
  *
- * @returns {void} Does not return anything, but freezes the session configuration (for ID) and updates preference.
+ * @returns {void} Does not return anything, but updates the application key.
+ * @throws {Error} If the provided key is null, undefined, or an empty string.
  */
-function configSession(config) {
-    if (config.sessionId) {
-        sessionConfig = Object.freeze({
-            ...sessionConfig,
-            SESSION_ID: config.sessionId,
-        });
-    }
-    if (config.persistencePreference) {
-        persistencePreference = config.persistencePreference;
+function configAppKey(config) {
+    if (!config || !config.appKey || config.appKey.trim() === "") {
+        throw new Error("The application encryption key cannot be null or empty.");
     }
+    appKey = config.appKey;
 }
 /**
- * Retrieves the current session identifier configuration.
+ * Retrieves the current application encryption key.
+ * Throws an error if the application key has not been configured.
  *
- * @returns {string} The unique session identifier.
+ * @returns {string} The configured application encryption key.
+ * @throws {Error} If the application encryption key has not been set.
  */
-function getSessionConfig() {
-    return sessionConfig.SESSION_ID;
+function getAppKey() {
+    if (appKey === null) {
+        throw new Error("The application encryption key has not been configured. Please call 'configAppKey()' before attempting to access it.");
+    }
+    return appKey;
 }
+
+const SESSION_KEY = "session_config_";
+const internalSessionState = {
+    sessionId: v4(),
+    persistencePreference: "session",
+};
+let _sessionConfig = Object.freeze({
+    SESSION_ID: internalSessionState.sessionId,
+    PERSISTENCE: internalSessionState.persistencePreference,
+});
 /**
- * Retrieves the current data persistence preference.
+ * Updates the immutable `_sessionConfig` object with the current state of `internalSessionState`
+ * and freezes it.
+ */
+function updateSessionConfig() {
+    _sessionConfig = Object.freeze({
+        SESSION_ID: internalSessionState.sessionId,
+        PERSISTENCE: internalSessionState.persistencePreference,
+    });
+}
+/**
+ * Saves the current session configuration to local or session storage.
+ * @returns {Promise<void>} A promise that resolves when the session configuration has been saved.
+ */
+async function saveSessionConfig() {
+    const isPersistent = internalSessionState.persistencePreference === "local";
+    try {
+        await storeEncryptedItem(SESSION_KEY, JSON.stringify(_sessionConfig), getAppKey(), isPersistent);
+    }
+    catch (error) {
+        console.error("Error saving session configuration to storage:", error);
+    }
+}
+/**
+ * Attempts to load the configuration from storage.
+ * If it fails or is not found, `internalSessionState` will retain its current values (initial or last configured).
+ * Then, it updates `_sessionConfig`.
  *
- * @returns {SessionPreference} The configured persistence preference ('local' or 'session').
+ * @returns {Promise<void>} A promise that resolves when the state has been loaded and updated.
  */
-function getSessionPersistencePreference() {
-    return persistencePreference;
+async function loadSessionConfig() {
+    try {
+        const storedConfig = await getDecryptedItem(SESSION_KEY, getAppKey(), true);
+        if (storedConfig) {
+            const parsedConfig = JSON.parse(storedConfig);
+            internalSessionState.sessionId = parsedConfig.SESSION_ID;
+            internalSessionState.persistencePreference = parsedConfig.PERSISTENCE;
+            updateSessionConfig();
+        }
+    }
+    catch (error) {
+        console.warn(`Error loading or parsing from storage`, error);
+    }
 }
 /**
- * Generates a new UUID for the current session.
+ * Configures the session identifier and/or data persistence preference
+ * for the active browser session.
+ *
+ * This function is asynchronous because it will always attempt to load the current configuration
+ * before applying changes and then saving them.
  *
- * @returns {void} Does not return anything, but updates the session identifier.
+ * @param {SessionConfigObject} config - An object containing the unique session identifier and/or
+ * the persistence preference.
+ * @returns {Promise<void>} A promise that resolves when the session has been configured and saved.
  */
-function regenerateSessionId() {
-    sessionId = v4();
-    configSession({ sessionId: sessionId });
+async function configSession(config) {
+    if (config.sessionId) {
+        internalSessionState.sessionId = config.sessionId;
+    }
+    if (config.persistencePreference) {
+        internalSessionState.persistencePreference = config.persistencePreference;
+    }
+    updateSessionConfig();
+    await saveSessionConfig();
 }
 /**
  * Retrieves the current session identifier.
+ * Always attempts to load the configuration from storage. If it fails, it uses the internal state.
+ *
+ * @returns {Promise<string>} A promise that resolves with the unique session identifier.
+ */
+async function getSessionId() {
+    await loadSessionConfig();
+    return _sessionConfig.SESSION_ID;
+}
+/**
+ * Retrieves the current data persistence preference.
+ * Always attempts to load the configuration from storage. If it fails, it uses the internal state.
  *
- * @returns {string} The unique session identifier.
+ * @returns {Promise<SessionPreference>} A promise that resolves with the configured persistence preference ('local' or 'session').
  */
-function getSessionId() {
-    return sessionId;
+async function getSessionPersistence() {
+    await loadSessionConfig();
+    return _sessionConfig.PERSISTENCE;
+}
+/**
+ * Retrieves the complete session configuration.
+ * Always attempts to load the configuration from storage. If it fails, it uses the internal state.
+ *
+ * @returns {Promise<SessionConfig>} A promise that resolves with the session configuration object.
+ */
+async function getSessionConfig() {
+    await loadSessionConfig();
+    return _sessionConfig;
 }
 
 /**
@@ -2504,143 +2700,6 @@ function isValidHexNumber(hex) {
 // console.log(isValidHexNumber('1A3F')); // true
 // console.log(isValidHexNumber('GHIJ')); // false
 
-/**
- * Converts an ArrayBuffer or Uint8Array to a hexadecimal string.
- * @param buffer The ArrayBuffer or Uint8Array to convert.
- * @returns The hexadecimal string.
- */
-function ab2hex(buffer) {
-    return Array.from(new Uint8Array(buffer))
-        .map((byte) => byte.toString(16).padStart(2, "0"))
-        .join("");
-}
-/**
- * Converts a hexadecimal string to a Uint8Array.
- * @param hex The hexadecimal string to convert.
- * @returns The Uint8Array.
- * @throws {TypeError} If the input is not a string.
- * @throws {Error} If the hexadecimal string format is invalid or has an odd length.
- */
-function hex2ab(hex) {
-    if (typeof hex !== "string") {
-        throw new TypeError("Input must be a string.");
-    }
-    if (hex.length === 0) {
-        return new Uint8Array();
-    }
-    if (!/^[0-9a-fA-F]*$/.test(hex) || hex.length % 2 !== 0) {
-        throw new Error("Invalid hexadecimal string format or odd length.");
-    }
-    const array = new Uint8Array(hex.length / 2);
-    for (let i = 0; i < hex.length; i += 2) {
-        array[i / 2] = parseInt(hex.substring(i, i + 2), 16);
-    }
-    return array;
-}
-/**
- * Derives an encryption key from a secret key.
- * @param secretKey The secret key in plain text.
- * @returns A promise that resolves with the derived CryptoKey.
- * @throws {Error} If the secretKey is null or empty.
- */
-async function importKey(secretKey) {
-    if (!secretKey) {
-        throw new Error("Secret key cannot be null or empty.");
-    }
-    const keyMaterial = new TextEncoder().encode(secretKey);
-    const digest = await crypto.subtle.digest("SHA-256", keyMaterial);
-    return crypto.subtle.importKey("raw", digest, { name: "AES-CBC", length: 256 }, false, ["encrypt", "decrypt"]);
-}
-/**
- * Encrypts a value with the provided secret key.
- * @param value The value to encrypt.
- * @param secretKey The secret key for encryption.
- * @returns A promise that resolves with the IV (hex) + ciphertext (hex) string.
- * @throws {Error} If the secretKey is null or empty (via importKey).
- */
-async function encrypt(value, secretKey) {
-    const key = await importKey(secretKey);
-    const iv = crypto.getRandomValues(new Uint8Array(16));
-    const encodedValue = new TextEncoder().encode(value);
-    const ciphertext = await crypto.subtle.encrypt({ name: "AES-CBC", iv: iv }, key, encodedValue);
-    return ab2hex(iv) + ab2hex(new Uint8Array(ciphertext));
-}
-/**
- * Decrypts an encrypted value.
- * @param encryptedValue The encrypted string (IV_hex + ciphertext_hex).
- * @param secretKey The secret key for decryption.
- * @returns A promise that resolves with the decrypted value.
- * @throws {Error} If encryptedValue is null or empty, too short,
- * or if the IV/ciphertext have incorrect lengths after conversion.
- * @throws {Error} If the secretKey is null or empty (via importKey).
- * @throws {TypeError} If hex2ab receives an invalid input type.
- */
-async function decrypt(encryptedValue, secretKey) {
-    if (!encryptedValue) {
-        throw new Error("Encrypted value cannot be null or empty.");
-    }
-    // For AES-CBC, the IV is ALWAYS 16 bytes.
-    // 16 bytes * 2 hex characters/byte = 32 hex characters for the IV.
-    if (encryptedValue.length < 32) {
-        throw new Error("Encrypted value is too short. Expected at least 32 hexadecimal characters for the IV.");
-    }
-    const key = await importKey(secretKey);
-    const ivHex = encryptedValue.substring(0, 32);
-    const ciphertextHex = encryptedValue.substring(32);
-    const iv = hex2ab(ivHex);
-    const ciphertext = hex2ab(ciphertextHex);
-    if (iv.byteLength !== 16) {
-        throw new Error(`Converted IV has incorrect length: ${iv.byteLength} bytes. Expected 16 bytes.`);
-    }
-    if (ciphertext.byteLength === 0) {
-        throw new Error("Ciphertext is empty. No data to decrypt.");
-    }
-    const decryptedBuffer = await crypto.subtle.decrypt({ name: "AES-CBC", iv: iv }, key, ciphertext);
-    return new TextDecoder().decode(decryptedBuffer);
-}
-
-/**
- * Encrypts and stores an item in local or session storage.
- * Assumes the `window` environment is available.
- * @param key The key under which to store the value.
- * @param value The value to encrypt and store.
- * @param secretKey The secret key for encryption.
- * @param isRememberMe If true, uses localStorage; otherwise, uses sessionStorage.
- * @returns A promise that resolves when the item is stored. Throws an error if it fails.
- */
-async function storeEncryptedItem(key, value, secretKey, isRememberMe) {
-    if (typeof window === "undefined") {
-        throw new Error("Cannot access storage: window is not defined.");
-    }
-    const storage = isRememberMe ? window.localStorage : window.sessionStorage;
-    const encryptedValue = await encrypt(value, secretKey);
-    storage.setItem(key, encryptedValue);
-}
-/**
- * Retrieves and decrypts a value from local or session storage.
- * Assumes the `window` environment is available.
- * @param key The key of the item to retrieve.
- * @param secretKey The secret key for decryption.
- * @param isRememberMe If true, searches localStorage; otherwise, sessionStorage.
- * @returns A promise that resolves with the decrypted value or null if not found or decryption fails.
- */
-async function getDecryptedItem(key, secretKey, isRememberMe) {
-    if (typeof window === "undefined") {
-        return null;
-    }
-    const storage = isRememberMe ? window.localStorage : window.sessionStorage;
-    const encryptedData = storage.getItem(key);
-    if (!encryptedData) {
-        return null;
-    }
-    try {
-        return await decrypt(encryptedData, secretKey);
-    }
-    catch (error) {
-        return null;
-    }
-}
-
 /**
  * Clears all stored authentication data (access and refresh tokens)
  * from either sessionStorage or localStorage based on the provided preference.
@@ -2709,43 +2768,42 @@ const storeAuthRefreshToken = async (token, secretKey, preference) => {
  * Verifies the validity and expiration of the current authentication token.
  * If the token is missing, invalid, or expired, appropriate errors are thrown and credentials are cleaned.
  *
- * @param {string} secretKey - The secret key used for token decryption.
- * @param {SessionPreference} preference - The current session persistence preference.
  * @returns {Promise<boolean>} True if the token is valid and unexpired.
  * @throws {Error} "TOKEN_MISSING" if no token is found, "TOKEN_EXPIRED" if the token has expired,
  * "TOKEN_INVALID" if the token format is invalid.
  */
-const verifyAuth = async (secretKey = getSecretKey(), preference = getSessionPersistencePreference()) => {
+const verifyAuth = async () => {
+    const sessionPersistence = await getSessionPersistence();
+    const handleAuthError = async (message, shouldClean = true) => {
+        handleError(message, false);
+        if (shouldClean) {
+            await cleanCredentials(sessionPersistence);
+        }
+        return false;
+    };
     try {
-        const token = await getAuthToken(secretKey, preference);
+        const token = await getAuthToken(getAppKey(), sessionPersistence);
         if (!token) {
-            handleError("TOKEN_MISSING: No valid token found", false);
-            await cleanCredentials(preference);
-            return false;
+            return await handleAuthError("TOKEN_MISSING: No valid token found");
+        }
+        let decoded;
+        try {
+            decoded = jwtDecode(token);
+        }
+        catch (decodeError) {
+            return await handleAuthError("TOKEN_INVALID: Invalid token format");
         }
-        const decoded = jwtDecode(token);
         const currentTime = Date.now() / 1000;
         if (typeof decoded.exp !== "number") {
-            handleError("TOKEN_INVALID: Invalid expiration format", false);
-            await cleanCredentials(preference);
-            return false;
+            return await handleAuthError("TOKEN_INVALID: Invalid expiration format");
         }
         if (decoded.exp <= currentTime) {
-            handleError("TOKEN_EXPIRED: Token is expired", false);
-            await cleanCredentials(preference);
-            return false;
+            return await handleAuthError("TOKEN_EXPIRED: Token is expired");
         }
         return true;
     }
     catch (error) {
-        if (error instanceof Error && error.message.includes("Invalid")) {
-            handleError("TOKEN_INVALID: Invalid token format", false);
-            await cleanCredentials(preference);
-            return false;
-        }
-        handleError("AUTH_ERROR: An unexpected error occurred", false);
-        await cleanCredentials(preference);
-        return false;
+        return await handleAuthError("AUTH_ERROR: An unexpected error occurred", true);
     }
 };
 
@@ -3309,7 +3367,7 @@ function useSorter(items, criteriaList, selectedCriteria) {
  * @property {(tokenPaths?: AuthTokenPaths) => Promise<AuthResponse>} refresh - Refreshes authentication tokens.
  * @property {function(): Promise<boolean>} verifyAuth - Verifies the validity and expiration of the current authentication token.
  * @property {(preference: SessionPreference) => void} setSessionPersistencePreference - Sets the user's preferred storage for authentication data.
- * @property {function(): SessionPreference} getSessionPersistencePreference - Retrieves the user's current preferred storage for authentication data.
+ * @property {function(): SessionPreference} getSessionPersistence - Retrieves the user's current preferred storage for authentication data.
  */
 /**
  * Custom hook for authentication logic, including login, logout, token management, and session preference.
@@ -3317,10 +3375,9 @@ function useSorter(items, criteriaList, selectedCriteria) {
  * @param {string} secretKey - The secret key used for token encryption/decryption.
  * @returns {AuthHook} An object containing authentication functions.
  */
-function useAuth(secretKey = getSecretKey()) {
+function useAuth(secretKey = getAppKey()) {
     const axiosInstance = getAxiosInstance();
     const endpoints = getEndpointsConfig();
-    const currentPersistencePreference = getSessionPersistencePreference();
     /**
      * Logs out the user by making a POST request to the logout endpoint,
      * cleaning all stored credentials, and reloading the page.
@@ -3337,7 +3394,7 @@ function useAuth(secretKey = getSecretKey()) {
             handleError(error, false);
         }
         finally {
-            await cleanCredentials(currentPersistencePreference);
+            await cleanCredentials(await getSessionPersistence());
             window.location.reload();
         }
     };
@@ -3393,7 +3450,7 @@ function useAuth(secretKey = getSecretKey()) {
      */
     const refresh = async (tokenPaths) => {
         try {
-            const refreshTokenFromStorage = await getAuthRefreshToken(secretKey, currentPersistencePreference);
+            const refreshTokenFromStorage = await getAuthRefreshToken(secretKey, await getSessionPersistence());
             if (!refreshTokenFromStorage) {
                 throw new Error("TOKEN_MISSING: No refresh token found in storage.");
             }
@@ -3415,8 +3472,8 @@ function useAuth(secretKey = getSecretKey()) {
                 typeof refreshTokenAfterRefresh !== "string") {
                 throw new Error(`REFRESH_ERROR: Refresh token not found or invalid at path '${refreshTokenPath}' in refresh response.`);
             }
-            await storeAuthToken(accessTokenAfterRefresh, secretKey, currentPersistencePreference);
-            await storeAuthRefreshToken(refreshTokenAfterRefresh, secretKey, currentPersistencePreference);
+            await storeAuthToken(accessTokenAfterRefresh, secretKey, await getSessionPersistence());
+            await storeAuthRefreshToken(refreshTokenAfterRefresh, secretKey, await getSessionPersistence());
             return data;
         }
         catch (error) {
@@ -3449,10 +3506,8 @@ const ArexVueCore = {
             console.warn("ArexVueCore: No configuration options were provided. The library may not function correctly.");
             return;
         }
-        configEndpoints({
-            loginEndpoint: options.endpoints.login,
-            refreshEndpoint: options.endpoints.refresh,
-            logoutEndpoint: options.endpoints.logout
+        configAppKey({
+            appKey: options.appKey
         });
         configTokenKeys({
             accessTokenKey: options.tokenKeys.accessToken,
@@ -3461,7 +3516,12 @@ const ArexVueCore = {
         configAxios({
             baseURL: options.apiUrl,
         });
+        configEndpoints({
+            loginEndpoint: options.endpoints.login,
+            refreshEndpoint: options.endpoints.refresh,
+            logoutEndpoint: options.endpoints.logout,
+        });
     },
 };
 
-export { AppTypes, ArchiveTypes, ArexVueCore, AudioTypes, AxiosService, ContentTypeEnum, DocumentTypes, ERROR_MESSAGES, ERROR_STYLES, ErrorEnum, ErrorMessages, ErrorStyles, ExceptionEnum, FontTypes, ImageTypes, KeyCodeEnum, OtherTypes, RestStd, ScreenBreakpoint, ScreenSize, StorageKeyEnum, StorageTypeEnum, TextTypes, VideoTypes, ab2hex, addCustomKeyboardShortcut, addDays, addDoubleClickListener, addKeyListener, ageAtDate, axiosFetch, blobToFormData, bufferToBlob, calculateAge, cleanCredentials, clickOutside, compareObject, configAxios, configEndpoints, configSession, configTokenKeys, copyToClipboard, countWords, createCustomAxiosInstance, createFetch, createKeyMap, customShortcut, daysBetween, daysToNextBirthday, debounce, debounceAsync, debounceAsyncValidator, debounceAsyncWithImmediate, debounceLeading, debounceLeadingTrailing, debounceTrailing, decrypt, deepClone, deepEqual, deepMerge, detectKeyHold, disableCopy, disableF12Key, disableMouseButtons, disableRightClick, disableSpecificKeys, downloadBlob, enableMouseButtons, enableRightClick, enableSpecificKeys, encrypt, exportToCSV, exportToExcel, exportToJSON, exportToText, exportToXML, filterObjectByKeys, flattenObject, formDataToObject, formatDate, generateRandomString, getAuthRefreshToken, getAuthToken, getAxiosInstance, getDecryptedItem, getEndOfMonth, getEndpointsConfig, getObjectDifferences, getObjectKeys, getQueryParam, getSecretKey, getSessionConfig, getSessionId, getSessionPersistencePreference, getStartOfMonth, getTokenConfig, handleError, hasNestedProperties, hex2ab, importKey, isEmptyObject, isLeapYear, isStrongPassword, isValidAge, isValidCreditCard, isValidDate, isValidEmail, isValidExpiryDate, isValidHexColor, isValidHexColorAlpha, isValidHexNumber, isValidIP, isValidPhoneNumber, isValidSSN, isValidTime, isValidURL, isValidUsername, isValidZIP, lowerFirst, objectToFormData, objectToFormDataEnhanced, objectToQueryString, openWindow, parseDate, proxyToPlainObject, readFileAsDataURL, readFileAsText, regenerateSessionId, registerKeyboardShortcuts, removeAccent, removeClickOutside, removeCustomKeyboardShortcut, removeCustomShortcuts, removeDoubleClickListener, removeEmptyProperties, removeKeyListeners, replaceAll, reverseString, safeGet, screenMap, scrollToTop, setSecretKey, simulateKeyPress, stopDetectingKeyHold, storeAuthRefreshToken, storeAuthToken, storeEncryptedItem, stringToBlob, subtractDays, throttle, toCamelCase, toKebabCase, toggleTabNavigation, truncateString, unregisterKeyboardShortcuts, upperFirst, useAuth, useBreakpoint, useFilter, usePagination, useSorter, useVueQuery, validateAlphanumeric, validateLetters, validateNumbers, verifyAuth };
+export { AppTypes, ArchiveTypes, ArexVueCore, AudioTypes, AxiosService, ContentTypeEnum, DocumentTypes, ERROR_MESSAGES, ERROR_STYLES, ErrorEnum, ErrorMessages, ErrorStyles, ExceptionEnum, FontTypes, ImageTypes, KeyCodeEnum, OtherTypes, RestStd, ScreenBreakpoint, ScreenSize, StorageKeyEnum, StorageTypeEnum, TextTypes, VideoTypes, ab2hex, addCustomKeyboardShortcut, addDays, addDoubleClickListener, addKeyListener, ageAtDate, axiosFetch, blobToFormData, bufferToBlob, calculateAge, cleanCredentials, clickOutside, compareObject, configAppKey, configAxios, configEndpoints, configSession, configTokenKeys, copyToClipboard, countWords, createCustomAxiosInstance, createFetch, createKeyMap, customShortcut, daysBetween, daysToNextBirthday, debounce, debounceAsync, debounceAsyncValidator, debounceAsyncWithImmediate, debounceLeading, debounceLeadingTrailing, debounceTrailing, decrypt, deepClone, deepEqual, deepMerge, detectKeyHold, disableCopy, disableF12Key, disableMouseButtons, disableRightClick, disableSpecificKeys, downloadBlob, enableMouseButtons, enableRightClick, enableSpecificKeys, encrypt, exportToCSV, exportToExcel, exportToJSON, exportToText, exportToXML, filterObjectByKeys, flattenObject, formDataToObject, formatDate, generateRandomString, getAppKey, getAuthRefreshToken, getAuthToken, getAxiosInstance, getDecryptedItem, getEndOfMonth, getEndpointsConfig, getObjectDifferences, getObjectKeys, getQueryParam, getSessionConfig, getSessionId, getSessionPersistence, getStartOfMonth, getTokenConfig, handleError, hasNestedProperties, hex2ab, importKey, isEmptyObject, isLeapYear, isStrongPassword, isValidAge, isValidCreditCard, isValidDate, isValidEmail, isValidExpiryDate, isValidHexColor, isValidHexColorAlpha, isValidHexNumber, isValidIP, isValidPhoneNumber, isValidSSN, isValidTime, isValidURL, isValidUsername, isValidZIP, lowerFirst, objectToFormData, objectToFormDataEnhanced, objectToQueryString, openWindow, parseDate, proxyToPlainObject, readFileAsDataURL, readFileAsText, registerKeyboardShortcuts, removeAccent, removeClickOutside, removeCustomKeyboardShortcut, removeCustomShortcuts, removeDoubleClickListener, removeEmptyProperties, removeKeyListeners, replaceAll, reverseString, safeGet, screenMap, scrollToTop, simulateKeyPress, stopDetectingKeyHold, storeAuthRefreshToken, storeAuthToken, storeEncryptedItem, stringToBlob, subtractDays, throttle, toCamelCase, toKebabCase, toggleTabNavigation, truncateString, unregisterKeyboardShortcuts, upperFirst, useAuth, useBreakpoint, useFilter, usePagination, useSorter, useVueQuery, validateAlphanumeric, validateLetters, validateNumbers, verifyAuth };

package/dist/types/AppKeyConfig.d.ts

@@ -0,0 +1,3 @@
+export interface AppKeyConfig {
+    appKey: string;
+}

package/dist/types/ArexVueCoreOptions.d.ts

@@ -1,26 +1,13 @@
 export interface ArexVueCoreOptions {
-    /**
-     * The authentication endpoints.
-     */
+    appKey: string;
     endpoints: {
-        /** The login endpoint. */
         login: string;
-        /** The token refresh endpoint. */
         refresh: string;
-        /** The logout endpoint. */
         logout: string;
     };
-    /**
-     * The key prefixes for storing tokens.
-     */
     tokenKeys: {
-        /** The access token key prefix. */
         accessToken: string;
-        /** The refresh token key prefix. */
         refreshToken: string;
     };
-    /**
-     * The base URL for the API.
-     */
     apiUrl: string;
 }

package/dist/types/SessionConfig.d.ts

@@ -1,3 +1,13 @@
+export type SessionPreference = "local" | "session";
 export type SessionConfig = {
     SESSION_ID: string;
+    PERSISTENCE: SessionPreference;
 };
+export interface InternalSessionState {
+    sessionId: string;
+    persistencePreference: SessionPreference;
+}
+export interface SessionConfigObject {
+    sessionId?: string;
+    persistencePreference?: SessionPreference;
+}

package/dist/types/index.d.ts

@@ -7,3 +7,4 @@ export * from './Auth';
 export * from './SessionConfig';
 export * from './DecodedJwtPayload';
 export * from './ArexVueCoreOptions';
+export * from './AppKeyConfig';

package/dist/utils/credentials.d.ts

@@ -1,4 +1,4 @@
-import { SessionPreference } from "@config/global/sessionConfig";
+import { SessionPreference } from "@/types/SessionConfig";
 /**
  * Clears all stored authentication data (access and refresh tokens)
  * from either sessionStorage or localStorage based on the provided preference.
@@ -49,10 +49,8 @@ export declare const storeAuthRefreshToken: (token: string, secretKey: string, p
  * Verifies the validity and expiration of the current authentication token.
  * If the token is missing, invalid, or expired, appropriate errors are thrown and credentials are cleaned.
  *
- * @param {string} secretKey - The secret key used for token decryption.
- * @param {SessionPreference} preference - The current session persistence preference.
  * @returns {Promise<boolean>} True if the token is valid and unexpired.
  * @throws {Error} "TOKEN_MISSING" if no token is found, "TOKEN_EXPIRED" if the token has expired,
  * "TOKEN_INVALID" if the token format is invalid.
  */
-export declare const verifyAuth: (secretKey?: string, preference?: SessionPreference) => Promise<boolean>;
+export declare const verifyAuth: () => Promise<boolean>;

package/dist/utils/storage.d.ts

@@ -4,16 +4,16 @@
  * @param key The key under which to store the value.
  * @param value The value to encrypt and store.
  * @param secretKey The secret key for encryption.
- * @param isRememberMe If true, uses localStorage; otherwise, uses sessionStorage.
+ * @param persistent If true, uses localStorage; otherwise, uses sessionStorage.
  * @returns A promise that resolves when the item is stored. Throws an error if it fails.
  */
-export declare function storeEncryptedItem(key: string, value: string, secretKey: string, isRememberMe: boolean): Promise<void>;
+export declare function storeEncryptedItem(key: string, value: string, secretKey: string, persistent: boolean): Promise<void>;
 /**
  * Retrieves and decrypts a value from local or session storage.
  * Assumes the `window` environment is available.
  * @param key The key of the item to retrieve.
  * @param secretKey The secret key for decryption.
- * @param isRememberMe If true, searches localStorage; otherwise, sessionStorage.
+ * @param persistent If true, searches localStorage; otherwise, sessionStorage.
  * @returns A promise that resolves with the decrypted value or null if not found or decryption fails.
  */
-export declare function getDecryptedItem(key: string, secretKey: string, isRememberMe: boolean): Promise<string | null>;
+export declare function getDecryptedItem(key: string, secretKey: string, persistent: boolean): Promise<string | null>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arex95/vue-core",
-  "version": "1.1.27",
+  "version": "1.1.30",
   "description": "Opinionated Vue Core",
   "main": "dist/index.js",
   "module": "dist/index.mjs",