@atlasauth/expo 0.1.2 → 0.2.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @atlasauth/expo changelog
 
+## 0.2.0
+- **Signing out clears the stored session token.** `createCacheFetch()` now clears the token in the
+  `TokenCache` when `POST /v1/client/sessions/:id/revoke` succeeds (2xx, or 404 — already gone) for the
+  session the token belongs to (its `sid`), before the response is returned. Previously a sign-out left
+  the token in the cache. A failed revoke keeps the token, so the background re-try can still
+  authenticate; a `jwt` a revoke response carries is still persisted.
+- **A failed sign-out survives an app restart.** `<AtlasProvider>` passes `@atlasauth/react` a
+  `tombstoneStore` backed by the same `TokenCache`, so the ids of sessions the app signed out of persist
+  (React Native has no `localStorage`; they were memory-only). After a restart a session whose revoke
+  failed is refused — and its revoke re-tried — instead of re-adopted from the token.
+- **Added `tombstoneStoreFor(cache: TokenCache): TombstoneStore`** — the adapter (`getItem` →
+  `cache.getToken`, `setItem` → `cache.saveToken`; the key is rewritten to `[A-Za-z0-9._-]` for
+  `expo-secure-store`).
+- **Added `tombstoneStore?: TombstoneStore` to `AtlasProviderProps`** (inherited from `@atlasauth/react`
+  0.7.0); defaults to `tombstoneStoreFor(tokenCache)`.
+
 ## 0.1.2
 - Picks up `@atlasauth/react` 0.6.0 / `@atlasauth/js` 0.7.0: popup sign-in completes when the opener page
   sends `Cross-Origin-Opener-Policy: same-origin`; a tab opened after a failed sign-out stays signed out

package/dist/AtlasProvider.d.ts

@@ -11,6 +11,12 @@ import { type TokenCache } from './token-cache';
  * {@link createCacheFetch} that bearer-authenticates from, and persists rotated
  * tokens into, an `expo-secure-store`-backed {@link TokenCache}.
  *
+ * Sign-out: a confirmed revoke clears the stored token (see
+ * {@link createCacheFetch}), and the sessions this app signed out of are kept in
+ * the same token cache (`tombstoneStore`), so after an app restart a session
+ * whose revoke failed is still refused — and its revoke re-tried — rather than
+ * re-adopted from the token the failed revoke left behind.
+ *
  * Expo Router friendly: mount it once at the app root (e.g. in `app/_layout.tsx`)
  * and read auth anywhere with `useAuth()` / `useUser()` / `<SignedIn>` — the
  * token cache, not a cookie, is what carries the session across a cold start.
@@ -18,6 +24,8 @@ import { type TokenCache } from './token-cache';
 /**
  * Props mirror `@atlasauth/react`'s provider (publishableKey, frontendApi,
  * appearance, localization, oauthMode, onSignedIn) and add the two Expo knobs.
+ * `tombstoneStore` defaults to the token cache; pass one to keep sign-out
+ * tombstones elsewhere.
  * `fetchImpl` is replaced by the cache-backed fetch, so it is not forwardable.
  */
 export interface AtlasProviderProps extends Omit<ReactAtlasProviderProps, 'fetchImpl'> {

package/dist/AtlasProvider.js

@@ -10,11 +10,18 @@ function AtlasProvider(props) {
     // Built exactly once — the initializer runs on first render only, so the cache
     // (and the default in-memory one, when no adapter is passed) survives
     // re-renders rather than being re-created and losing the session every render.
-    const [cacheFetch] = (0, react_1.useState)(() => (0, cache_fetch_1.createCacheFetch)({
-        cache: tokenCache ?? (0, token_cache_1.createInMemoryTokenCache)(),
-        key: tokenKey,
-        fetchImpl: fetchImpl ?? fetch,
-    }));
-    return (0, react_1.createElement)(react_2.AtlasProvider, { ...rest, fetchImpl: cacheFetch });
+    const [wiring] = (0, react_1.useState)(() => {
+        const cache = tokenCache ?? (0, token_cache_1.createInMemoryTokenCache)();
+        return {
+            cacheFetch: (0, cache_fetch_1.createCacheFetch)({ cache, key: tokenKey, fetchImpl: fetchImpl ?? fetch }),
+            // Sign-out tombstones persist beside the token (there is no localStorage).
+            tombstoneStore: (0, token_cache_1.tombstoneStoreFor)(cache),
+        };
+    });
+    return (0, react_1.createElement)(react_2.AtlasProvider, {
+        ...rest,
+        tombstoneStore: rest.tombstoneStore ?? wiring.tombstoneStore,
+        fetchImpl: wiring.cacheFetch,
+    });
 }
 //# sourceMappingURL=AtlasProvider.js.map

package/dist/AtlasProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"AtlasProvider.js","sourceRoot":"","sources":["../src/AtlasProvider.tsx"],"names":[],"mappings":";;AA6CA,sCAeC;AA5DD,iCAAmE;AACnE,4CAG0B;AAC1B,+CAAiD;AACjD,+CAIuB;AAmCvB,SAAgB,aAAa,CAAC,KAAyB;IACrD,MAAM,EAAE,UAAU,EAAE,QAAQ,GAAG,iCAAmB,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAEjF,+EAA+E;IAC/E,sEAAsE;IACtE,+EAA+E;IAC/E,MAAM,CAAC,UAAU,CAAC,GAAG,IAAA,gBAAQ,EAAC,GAAG,EAAE,CACjC,IAAA,8BAAgB,EAAC;QACf,KAAK,EAAE,UAAU,IAAI,IAAA,sCAAwB,GAAE;QAC/C,GAAG,EAAE,QAAQ;QACb,SAAS,EAAE,SAAS,IAAI,KAAK;KAC9B,CAAC,CACH,CAAC;IAEF,OAAO,IAAA,qBAAa,EAAC,qBAAkB,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;AAC/E,CAAC"}
+{"version":3,"file":"AtlasProvider.js","sourceRoot":"","sources":["../src/AtlasProvider.tsx"],"names":[],"mappings":";;AAsDA,sCAoBC;AA1ED,iCAAmE;AACnE,4CAG0B;AAC1B,+CAAiD;AACjD,+CAKuB;AA2CvB,SAAgB,aAAa,CAAC,KAAyB;IACrD,MAAM,EAAE,UAAU,EAAE,QAAQ,GAAG,iCAAmB,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAEjF,+EAA+E;IAC/E,sEAAsE;IACtE,+EAA+E;IAC/E,MAAM,CAAC,MAAM,CAAC,GAAG,IAAA,gBAAQ,EAAC,GAAG,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,IAAI,IAAA,sCAAwB,GAAE,CAAC;QACvD,OAAO;YACL,UAAU,EAAE,IAAA,8BAAgB,EAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,IAAI,KAAK,EAAE,CAAC;YACrF,2EAA2E;YAC3E,cAAc,EAAE,IAAA,+BAAiB,EAAC,KAAK,CAAC;SACzC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,IAAA,qBAAa,EAAC,qBAAkB,EAAE;QACvC,GAAG,IAAI;QACP,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc;QAC5D,SAAS,EAAE,MAAM,CAAC,UAAU;KAC7B,CAAC,CAAC;AACL,CAAC"}

package/dist/cache-fetch.d.ts

@@ -17,6 +17,14 @@ import type { TokenCache } from './token-cache';
  *      durable copy native needs. Reading the body is done on a `clone()` so the
  *      provider still gets to consume the original.
  *
+ *   3. SIGN-OUT — a successful `POST /v1/client/sessions/:id/revoke` (2xx, or
+ *      404: already gone) of the session the stored token belongs to clears the
+ *      token, so a sign-out actually drops the credential and a restart boots
+ *      signed out. The clear is awaited before the response is handed back, so
+ *      no later request can still carry the token. A FAILED revoke keeps it: the
+ *      provider remembers the session as signed out (its tombstone) and re-tries
+ *      the revoke in the background, which needs the token to authenticate.
+ *
  * The persist is fire-and-forget: a secure-store write failure must not break a
  * live, already-parsed response.
  */

package/dist/cache-fetch.js

@@ -19,6 +19,14 @@ exports.createCacheFetch = createCacheFetch;
  *      durable copy native needs. Reading the body is done on a `clone()` so the
  *      provider still gets to consume the original.
  *
+ *   3. SIGN-OUT — a successful `POST /v1/client/sessions/:id/revoke` (2xx, or
+ *      404: already gone) of the session the stored token belongs to clears the
+ *      token, so a sign-out actually drops the credential and a restart boots
+ *      signed out. The clear is awaited before the response is handed back, so
+ *      no later request can still carry the token. A FAILED revoke keeps it: the
+ *      provider remembers the session as signed out (its tombstone) and re-tries
+ *      the revoke in the background, which needs the token to authenticate.
+ *
  * The persist is fire-and-forget: a secure-store write failure must not break a
  * live, already-parsed response.
  */
@@ -30,6 +38,15 @@ function createCacheFetch(opts) {
         if (token)
             headers.set('authorization', `Bearer ${token}`);
         const response = await fetchImpl(input, { ...init, headers });
+        const revoked = revokedSessionId(input, init);
+        if (revoked && token && (response.ok || response.status === 404) && tokenBelongsTo(token, revoked)) {
+            try {
+                await cache.clearToken(key);
+            }
+            catch {
+                // A secure-store failure must not break the sign-out response.
+            }
+        }
         // Capture a rotated session token for persistence, without consuming the
         // body the caller still needs.
         const contentType = response.headers.get('content-type') ?? '';
@@ -50,4 +67,40 @@ function createCacheFetch(opts) {
         return response;
     };
 }
+const REVOKE_PATH = /\/v1\/client\/sessions\/([^/?#]+)\/revoke(?:[?#]|$)/;
+/** The session id a `POST …/v1/client/sessions/:id/revoke` targets, else null. */
+function revokedSessionId(input, init) {
+    const isRequest = typeof Request !== 'undefined' && input instanceof Request;
+    const method = (init?.method ?? (isRequest ? input.method : 'GET')).toUpperCase();
+    if (method !== 'POST')
+        return null;
+    const url = isRequest ? input.url : String(input);
+    const match = REVOKE_PATH.exec(url);
+    if (!match)
+        return null;
+    try {
+        return decodeURIComponent(match[1]);
+    }
+    catch {
+        return match[1];
+    }
+}
+/**
+ * Whether the stored token is the revoked session's: its `sid` claim matches.
+ * A token whose claims cannot be read is treated as the session's own (the
+ * provider only revokes the session it is signed in to, or one it refuses).
+ */
+function tokenBelongsTo(token, sessionId) {
+    const payload = token.split('.')[1];
+    const decode = globalThis.atob;
+    if (!payload || !decode)
+        return true;
+    try {
+        const claims = JSON.parse(decode(payload.replace(/-/g, '+').replace(/_/g, '/')));
+        return typeof claims.sid !== 'string' || claims.sid === sessionId;
+    }
+    catch {
+        return true;
+    }
+}
 //# sourceMappingURL=cache-fetch.js.map

package/dist/cache-fetch.js.map

@@ -1 +1 @@
-{"version":3,"file":"cache-fetch.js","sourceRoot":"","sources":["../src/cache-fetch.ts"],"names":[],"mappings":";;AAuBA,4CAiCC;AAtDD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,gBAAgB,CAAC,IAIhC;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAEvC,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAqB,EAAE;QAC/E,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAE9D,yEAAyE;QACzE,+BAA+B;QAC/B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,QAAQ,CAAC,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAsB,CAAC;oBAClE,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;wBAC7C,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,sEAAsE;oBACtE,0BAA0B;gBAC5B,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cache-fetch.js","sourceRoot":"","sources":["../src/cache-fetch.ts"],"names":[],"mappings":";;AA+BA,4CA0CC;AAvED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,SAAgB,gBAAgB,CAAC,IAIhC;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAEvC,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAqB,EAAE;QAC/E,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAE9D,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,OAAO,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACnG,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,+BAA+B;QAC/B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,QAAQ,CAAC,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAsB,CAAC;oBAClE,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;wBAC7C,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,sEAAsE;oBACtE,0BAA0B;gBAC5B,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,qDAAqD,CAAC;AAE1E,kFAAkF;AAClF,SAAS,gBAAgB,CAAC,KAAwB,EAAE,IAAkB;IACpE,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,KAAK,YAAY,OAAO,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAClF,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAa,EAAE,SAAiB;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,MAAM,GAAI,UAA+C,CAAC,IAAI,CAAC;IACrE,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAsB,CAAC;QACtG,OAAO,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/token-cache.d.ts

@@ -14,6 +14,7 @@
  * structurally ({@link SecureStore}) and the app passes the real module in — the
  * package compiles, typechecks and tests without `expo-secure-store` installed.
  */
+import type { TombstoneStore } from '@atlasauth/js';
 /**
  * A key→token cache, the shape `<AtlasProvider tokenCache>` and the native
  * session wiring both consume. Mirrors Clerk's Expo `tokenCache` contract
@@ -85,5 +86,16 @@ export interface TokenStorage {
 export declare function tokenStorageFor(cache: TokenCache, key: string): TokenStorage;
 /** A process-memory {@link TokenStorage}. Non-persistent — see note above. */
 export declare function createInMemoryStorage(): TokenStorage;
+/**
+ * View a {@link TokenCache} as the `TombstoneStore` `@atlasauth/react` keeps its
+ * sign-out tombstones in (the ids of sessions this app signed out of — never a
+ * token). React Native has no `localStorage`, so without this the tombstones are
+ * memory-only and an app restart could re-adopt a session whose revoke failed.
+ *
+ * The tombstone key (`atlas:signed-out-sessions:<frontend api origin>`) is
+ * rewritten to the characters `expo-secure-store` accepts in a key
+ * (`A–Z a–z 0–9 . - _`), so the same adapter fits every cache.
+ */
+export declare function tombstoneStoreFor(cache: TokenCache): TombstoneStore;
 /** The default cache key the `<AtlasProvider>` session is stored under. */
 export declare const DEFAULT_SESSION_KEY = "atlas.session";

package/dist/token-cache.js

@@ -21,6 +21,7 @@ exports.createSecureStoreTokenCache = createSecureStoreTokenCache;
 exports.createInMemoryTokenCache = createInMemoryTokenCache;
 exports.tokenStorageFor = tokenStorageFor;
 exports.createInMemoryStorage = createInMemoryStorage;
+exports.tombstoneStoreFor = tombstoneStoreFor;
 /**
  * Build a {@link TokenCache} backed by `expo-secure-store` (hardware-backed
  * Keychain / Keystore). The app imports the module and passes it in — the SDK
@@ -79,6 +80,25 @@ function createInMemoryStorage() {
         },
     };
 }
+/**
+ * View a {@link TokenCache} as the `TombstoneStore` `@atlasauth/react` keeps its
+ * sign-out tombstones in (the ids of sessions this app signed out of — never a
+ * token). React Native has no `localStorage`, so without this the tombstones are
+ * memory-only and an app restart could re-adopt a session whose revoke failed.
+ *
+ * The tombstone key (`atlas:signed-out-sessions:<frontend api origin>`) is
+ * rewritten to the characters `expo-secure-store` accepts in a key
+ * (`A–Z a–z 0–9 . - _`), so the same adapter fits every cache.
+ */
+function tombstoneStoreFor(cache) {
+    return {
+        getItem: (key) => cache.getToken(storeKey(key)),
+        setItem: (key, value) => cache.saveToken(storeKey(key), value),
+    };
+}
+function storeKey(key) {
+    return key.replace(/[^A-Za-z0-9._-]/g, '_');
+}
 /** The default cache key the `<AtlasProvider>` session is stored under. */
 exports.DEFAULT_SESSION_KEY = 'atlas.session';
 //# sourceMappingURL=token-cache.js.map

package/dist/token-cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-cache.js","sourceRoot":"","sources":["../src/token-cache.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAsDH,kEAUC;AAOD,4DAWC;AAeD,0CAMC;AAGD,sDAWC;AA3ED;;;;;;;;;;;GAWG;AACH,SAAgB,2BAA2B,CACzC,KAAkB,EAClB,UAAwC,EAAE;IAE1C,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACxC,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC;QAChD,SAAS,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC;QAC/D,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI;QACvC,SAAS,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACxB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAcD,iFAAiF;AACjF,SAAgB,eAAe,CAAC,KAAiB,EAAE,GAAW;IAC5D,OAAO;QACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI;QACzD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC;QAChD,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAgB,qBAAqB;IACnC,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;YACzB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,UAAU,EAAE,GAAG,EAAE;YACf,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC9D,QAAA,mBAAmB,GAAG,eAAe,CAAC"}
+{"version":3,"file":"token-cache.js","sourceRoot":"","sources":["../src/token-cache.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAwDH,kEAUC;AAOD,4DAWC;AAeD,0CAMC;AAGD,sDAWC;AAYD,8CAKC;AA5FD;;;;;;;;;;;GAWG;AACH,SAAgB,2BAA2B,CACzC,KAAkB,EAClB,UAAwC,EAAE;IAE1C,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACxC,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC;QAChD,SAAS,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC;QAC/D,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI;QACvC,SAAS,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACxB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAcD,iFAAiF;AACjF,SAAgB,eAAe,CAAC,KAAiB,EAAE,GAAW;IAC5D,OAAO;QACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI;QACzD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC;QAChD,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAgB,qBAAqB;IACnC,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;YACzB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,UAAU,EAAE,GAAG,EAAE;YACf,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,iBAAiB,CAAC,KAAiB;IACjD,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,2EAA2E;AAC9D,QAAA,mBAAmB,GAAG,eAAe,CAAC"}

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@atlasauth/expo",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "dependencies": {
-    "@atlasauth/js": "0.7.0",
-    "@atlasauth/react": "0.6.0"
+    "@atlasauth/react": "0.7.0",
+    "@atlasauth/js": "0.8.0"
   },
   "peerDependencies": {
     "react": ">=18",