@atlasauth/svelte 0.2.0 → 0.2.1

package/dist/accessors.d.ts

@@ -1,5 +1,5 @@
 import { type Readable } from 'svelte/store';
-import { type FlowState, type ProviderToken } from '@atlasauth/js';
+import { type FlowState, type ProviderToken, type SignOutOptions } from '@atlasauth/js';
 import { type AuthStatus } from './context';
 import { type ProtectCondition } from './protect';
 import type { AtlasOrganizationMembership, AtlasSession, AtlasUser } from './types';
@@ -48,7 +48,7 @@ export interface UseAuth {
     getToken(): Promise<string | null>;
     /** §6.6 the user's own live access token at a connected social provider. */
     getProviderToken(provider: string): Promise<ProviderToken | null>;
-    signOut(): Promise<void>;
+    signOut(options?: SignOutOptions): Promise<void>;
     /** Mirrors `<Protect>`, for logic that is not a render decision. */
     has(condition: ProtectCondition): boolean;
 }
@@ -64,7 +64,7 @@ export declare function getOrganization(): Readable<UseOrganization>;
 /** Refresh-if-stale, then hand over the JWT. The `useAuth().getToken` shortcut. */
 export declare function getToken(): Promise<string | null>;
 /** Revoke the session and drop all in-memory state. */
-export declare function signOut(): Promise<void>;
+export declare function signOut(options?: SignOutOptions): Promise<void>;
 /**
  * A running sign-in / sign-up attempt: a reactive `state` store plus `submit`.
  *

package/dist/accessors.js

@@ -54,8 +54,8 @@ export function getToken() {
     return useAtlas().getToken();
 }
 /** Revoke the session and drop all in-memory state. */
-export function signOut() {
-    return useAtlas().signOut();
+export function signOut(options) {
+    return useAtlas().signOut(options);
 }
 function createFlow() {
     const atlas = useAtlas();

package/dist/context.d.ts

@@ -1,5 +1,5 @@
 import { type Readable } from 'svelte/store';
-import { type ProviderToken } from '@atlasauth/js';
+import { type ProviderToken, type SignOutOptions } from '@atlasauth/js';
 import { type Catalog } from './i18n';
 import { type Appearance, type InstanceDesign } from './appearance';
 import type { AtlasOrganizationMembership, AtlasSession, AtlasUser, SessionClaims } from './types';
@@ -71,7 +71,7 @@ export interface AtlasClient extends AtlasStores {
      * exposed; the server refreshes a stale token on read.
      */
     getProviderToken(provider: string): Promise<ProviderToken | null>;
-    signOut(): Promise<void>;
+    signOut(options?: SignOutOptions): Promise<void>;
     setActiveOrganization(organizationId: string | null): Promise<void>;
     reload(): Promise<void>;
     /**

package/dist/context.js

@@ -1,6 +1,6 @@
 import { getContext, setContext } from 'svelte';
 import { derived, get, writable } from 'svelte/store';
-import { FapiClient, TokenCache, getProviderToken as fetchProviderToken, msUntilRefresh, readExpiry, readRedirectResult, stripRedirectParams, } from '@atlasauth/js';
+import { FapiClient, TokenCache, getProviderToken as fetchProviderToken, msUntilRefresh, readExpiry, readRedirectResult, stripRedirectParams, runFrontChannelLogoutFromResponse, } from '@atlasauth/js';
 import { EN_US, withFallback } from './i18n';
 import { instanceDesignFrom } from './appearance';
 /** The context key. A `Symbol` so it cannot collide with an app's own context. */
@@ -148,10 +148,16 @@ export function createAtlasClient(options) {
     function getProviderToken(provider) {
         return fetchProviderToken(fapiClient, provider);
     }
-    async function signOut() {
+    async function signOut(options) {
         const current = cache.peek();
         if (current) {
-            await call(`/v1/client/sessions/${current.sessionId}/revoke`, { method: 'POST' }).catch(() => undefined);
+            const revoked = await call(`/v1/client/sessions/${current.sessionId}/revoke`, {
+                method: 'POST',
+            }).catch(() => undefined);
+            // OIDC Front-Channel Logout: let the apps signed in through this session
+            // clear theirs in this browser (hidden iframes, capped at 5 s). Best-effort.
+            if (options?.frontchannel !== false)
+                await runFrontChannelLogoutFromResponse(revoked);
         }
         if (timer)
             clearTimeout(timer);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/svelte",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "type": "module",
   "svelte": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -21,10 +21,10 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@atlasauth/design": "0.1.0",
+    "@atlasauth/backend": "0.5.0",
     "@atlasauth/authz": "0.1.1",
-    "@atlasauth/js": "0.4.0",
-    "@atlasauth/backend": "0.3.0"
+    "@atlasauth/js": "0.5.0",
+    "@atlasauth/design": "0.1.0"
   },
   "peerDependencies": {
     "svelte": ">=4",