@auth0/auth0-spa-js 2.19.1 → 2.19.2

package/dist/typings/version.d.ts

@@ -1,2 +1,2 @@
-declare const _default: "2.19.1";
+declare const _default: "2.19.2";
 export default _default;

package/dist/typings/worker/worker.types.d.ts

@@ -23,5 +23,8 @@ export type WorkerRevokeTokenMessage = Omit<WorkerTokenMessage, 'auth'> & {
         audience: string;
     };
 };
-export type WorkerMessage = WorkerInitMessage | WorkerRefreshTokenMessage | WorkerRevokeTokenMessage;
+export type WorkerClearMessage = {
+    type: 'clear';
+};
+export type WorkerMessage = WorkerInitMessage | WorkerRefreshTokenMessage | WorkerRevokeTokenMessage | WorkerClearMessage;
 export {};

package/dist/typings/worker/worker.utils.d.ts

@@ -1,4 +1,4 @@
-import { WorkerRefreshTokenMessage, WorkerRevokeTokenMessage } from './worker.types';
+import { WorkerClearMessage, WorkerRefreshTokenMessage, WorkerRevokeTokenMessage } from './worker.types';
 /**
  * Sends a message to a Web Worker and returns a Promise that resolves with
  * the worker's response, or rejects if the worker replies with an error.
@@ -10,4 +10,4 @@ import { WorkerRefreshTokenMessage, WorkerRevokeTokenMessage } from './worker.ty
  * @param to      - The target {@link Worker} instance.
  * @returns A Promise that resolves with the worker's response payload.
  */
-export declare const sendMessage: <T = any>(message: WorkerRefreshTokenMessage | WorkerRevokeTokenMessage, to: Worker) => Promise<T>;
+export declare const sendMessage: <T = any>(message: WorkerRefreshTokenMessage | WorkerRevokeTokenMessage | WorkerClearMessage, to: Worker) => Promise<T>;

package/package.json

@@ -3,7 +3,7 @@
   "name": "@auth0/auth0-spa-js",
   "description": "Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE",
   "license": "MIT",
-  "version": "2.19.1",
+  "version": "2.19.2",
   "main": "dist/lib/auth0-spa-js.cjs.js",
   "types": "dist/typings/index.d.ts",
   "module": "dist/auth0-spa-js.production.esm.js",

package/src/Auth0Client.ts

@@ -96,6 +96,7 @@ import {
 
 // @ts-ignore
 import TokenWorker from './worker/token.worker.ts';
+import { sendMessage } from './worker/worker.utils';
 import { singlePromise, retryPromise } from './promise-utils';
 import { CacheKeyManifest } from './cache/key-manifest';
 import {
@@ -1247,6 +1248,15 @@ export class Auth0Client {
 
     await this.dpop?.clear();
 
+    if (this.worker) {
+      try {
+        await sendMessage({ type: 'clear' }, this.worker);
+      } catch {
+        // Worker is an internal, best-effort cleanup channel. If the ACK round-trip
+        // fails we still proceed with logout so the user is not left in a half-state.
+      }
+    }
+
     const url = this._buildLogoutUrl(logoutOptions);
 
     if (openUrl) {

package/src/version.ts

@@ -1 +1 @@
-export default '2.19.1';
+export default '2.19.2';

package/src/worker/token.worker.ts

@@ -316,6 +316,12 @@ const messageRouter = (event: MessageEvent<WorkerMessage>) => {
     return;
   }
 
+  if ('type' in data && data.type === 'clear') {
+    refreshTokens = {};
+    port?.postMessage({ ok: true });
+    return;
+  }
+
   if ('type' in data && data.type === 'revoke') {
     if (!isAuthorizedWorkerRequest(data as WorkerRevokeTokenMessage, '/oauth/revoke')) {
       port?.postMessage({

package/src/worker/worker.types.ts

@@ -28,7 +28,12 @@ export type WorkerRevokeTokenMessage = Omit<WorkerTokenMessage, 'auth'> & {
   };
 };
 
+export type WorkerClearMessage = {
+  type: 'clear';
+};
+
 export type WorkerMessage =
   | WorkerInitMessage
   | WorkerRefreshTokenMessage
-  | WorkerRevokeTokenMessage;
+  | WorkerRevokeTokenMessage
+  | WorkerClearMessage;

package/src/worker/worker.utils.ts

@@ -1,4 +1,5 @@
 import {
+  WorkerClearMessage,
   WorkerRefreshTokenMessage,
   WorkerRevokeTokenMessage
 } from './worker.types';
@@ -15,7 +16,10 @@ import {
  * @returns A Promise that resolves with the worker's response payload.
  */
 export const sendMessage = <T = any>(
-  message: WorkerRefreshTokenMessage | WorkerRevokeTokenMessage,
+  message:
+    | WorkerRefreshTokenMessage
+    | WorkerRevokeTokenMessage
+    | WorkerClearMessage,
   to: Worker
 ): Promise<T> =>
   new Promise<T>(function (resolve, reject) {