@auth-gate/core 0.15.0 → 0.15.1

package/dist/index.cjs

@@ -727,11 +727,13 @@ var AuthGateClient = class {
 	/**
 	* Exchange a refresh token for a new JWT.
 	*
-	* Refresh tokens are single-use — each call returns a new JWT and
-	* invalidates the previous refresh token (rotation).
+	* Refresh tokens are single-use: each call invalidates the token it was
+	* given, so callers must store the `refresh_token` it returns or their next
+	* refresh fails.
 	*
 	* @param refreshToken - The opaque refresh token.
-	* @returns A new JWT and its `expires_in` (seconds), or `null` if the refresh token is invalid.
+	* @returns A new JWT, its `expires_in` (seconds) and the rotated
+	* `refresh_token`, or `null` if the refresh token is invalid.
 	*/
 	async refreshToken(refreshToken) {
 		try {

package/dist/index.d.cts

@@ -360,14 +360,17 @@ declare class AuthGateClient {
   /**
    * Exchange a refresh token for a new JWT.
    *
-   * Refresh tokens are single-use — each call returns a new JWT and
-   * invalidates the previous refresh token (rotation).
+   * Refresh tokens are single-use: each call invalidates the token it was
+   * given, so callers must store the `refresh_token` it returns or their next
+   * refresh fails.
    *
    * @param refreshToken - The opaque refresh token.
-   * @returns A new JWT and its `expires_in` (seconds), or `null` if the refresh token is invalid.
+   * @returns A new JWT, its `expires_in` (seconds) and the rotated
+   * `refresh_token`, or `null` if the refresh token is invalid.
    */
   refreshToken(refreshToken: string): Promise<{
     token: string;
+    refresh_token?: string;
     expires_in: number;
   } | null>;
   /**

package/dist/index.d.ts

@@ -360,14 +360,17 @@ declare class AuthGateClient {
   /**
    * Exchange a refresh token for a new JWT.
    *
-   * Refresh tokens are single-use — each call returns a new JWT and
-   * invalidates the previous refresh token (rotation).
+   * Refresh tokens are single-use: each call invalidates the token it was
+   * given, so callers must store the `refresh_token` it returns or their next
+   * refresh fails.
    *
    * @param refreshToken - The opaque refresh token.
-   * @returns A new JWT and its `expires_in` (seconds), or `null` if the refresh token is invalid.
+   * @returns A new JWT, its `expires_in` (seconds) and the rotated
+   * `refresh_token`, or `null` if the refresh token is invalid.
    */
   refreshToken(refreshToken: string): Promise<{
     token: string;
+    refresh_token?: string;
     expires_in: number;
   } | null>;
   /**

package/dist/index.mjs

@@ -726,11 +726,13 @@ var AuthGateClient = class {
 	/**
 	* Exchange a refresh token for a new JWT.
 	*
-	* Refresh tokens are single-use — each call returns a new JWT and
-	* invalidates the previous refresh token (rotation).
+	* Refresh tokens are single-use: each call invalidates the token it was
+	* given, so callers must store the `refresh_token` it returns or their next
+	* refresh fails.
 	*
 	* @param refreshToken - The opaque refresh token.
-	* @returns A new JWT and its `expires_in` (seconds), or `null` if the refresh token is invalid.
+	* @returns A new JWT, its `expires_in` (seconds) and the rotated
+	* `refresh_token`, or `null` if the refresh token is invalid.
 	*/
 	async refreshToken(refreshToken) {
 		try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auth-gate/core",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "description": "Core client library for AuthGate — the OAuth proxy that handles provider configuration, token exchange, and user normalization so you don't have to.",
   "type": "module",
   "exports": {