@base44-preview/sdk 0.8.18-pr.123.a060ee3 → 0.8.18-pr.124.92d0a7a

package/dist/client.js

@@ -50,6 +50,8 @@ import { createAnalyticsModule } from "./modules/analytics.js";
  */
 export function createClient(config) {
     const { serverUrl = "https://base44.app", appId, token, serviceToken, requiresAuth = false, appBaseUrl, options, functionsVersion, headers: optionalHeaders, } = config;
+    // Normalize appBaseUrl to always be a string (empty if not provided or invalid)
+    const normalizedAppBaseUrl = typeof appBaseUrl === "string" ? appBaseUrl : "";
     const socketConfig = {
         serverUrl,
         mountPath: "/ws-user-apps/socket.io/",
@@ -102,7 +104,7 @@ export function createClient(config) {
         interceptResponses: false,
     });
     const userAuthModule = createAuthModule(axiosClient, functionsAxiosClient, appId, {
-        appBaseUrl,
+        appBaseUrl: normalizedAppBaseUrl,
         serverUrl,
     });
     const userModules = {

package/dist/modules/auth.js

@@ -20,7 +20,6 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
         },
         // Redirects the user to the app's login page
         redirectToLogin(nextUrl) {
-            var _a;
             // This function only works in a browser environment
             if (typeof window === "undefined") {
                 throw new Error("Login method can only be used in a browser environment");
@@ -30,7 +29,7 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
                 ? new URL(nextUrl, window.location.origin).toString()
                 : window.location.href;
             // Build the login URL
-            const loginUrl = `${(_a = options.appBaseUrl) !== null && _a !== void 0 ? _a : ""}/login?from_url=${encodeURIComponent(redirectUrl)}`;
+            const loginUrl = `${options.appBaseUrl}/login?from_url=${encodeURIComponent(redirectUrl)}`;
             // Redirect to the login page
             window.location.href = loginUrl;
         },
@@ -40,34 +39,32 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
             const redirectUrl = new URL(fromUrl, window.location.origin).toString();
             // Build the provider login URL (google is the default, so no provider path needed)
             const providerPath = provider === "google" ? "" : `/${provider}`;
-            const loginUrl = `${options.serverUrl}/api/apps/auth${providerPath}/login?app_id=${appId}&from_url=${encodeURIComponent(redirectUrl)}`;
+            const loginUrl = `${options.appBaseUrl}/api/apps/auth${providerPath}/login?app_id=${appId}&from_url=${encodeURIComponent(redirectUrl)}`;
             // Redirect to the provider login page
             window.location.href = loginUrl;
         },
         // Logout the current user
-        // Removes the token from localStorage and optionally redirects to a URL or reloads the page
         logout(redirectUrl) {
-            // Remove token from axios headers
+            // Remove token from axios headers (always do this)
             delete axios.defaults.headers.common["Authorization"];
-            // Remove token from localStorage
-            if (typeof window !== "undefined" && window.localStorage) {
-                try {
-                    window.localStorage.removeItem("base44_access_token");
-                    // Remove "token" that is set by the built-in SDK of platform version 2
-                    window.localStorage.removeItem("token");
-                }
-                catch (e) {
-                    console.error("Failed to remove token from localStorage:", e);
-                }
-            }
-            // Redirect if a URL is provided
+            // Only do the rest if in a browser environment
             if (typeof window !== "undefined") {
-                if (redirectUrl) {
-                    window.location.href = redirectUrl;
-                }
-                else {
-                    window.location.reload();
+                // Remove token from localStorage
+                if (window.localStorage) {
+                    try {
+                        window.localStorage.removeItem("base44_access_token");
+                        // Remove "token" that is set by the built-in SDK of platform version 2
+                        window.localStorage.removeItem("token");
+                    }
+                    catch (e) {
+                        console.error("Failed to remove token from localStorage:", e);
+                    }
                 }
+                // Determine the from_url parameter
+                const fromUrl = redirectUrl || window.location.href;
+                // Redirect to server-side logout endpoint to clear HTTP-only cookies
+                const logoutUrl = `${options.appBaseUrl}/api/apps/auth/logout?from_url=${encodeURIComponent(fromUrl)}`;
+                window.location.href = logoutUrl;
             }
         },
         // Set authentication token

package/dist/modules/auth.types.d.ts

@@ -90,8 +90,8 @@ export interface ResetPasswordParams {
 export interface AuthModuleOptions {
     /** Server URL for API requests. */
     serverUrl: string;
-    /** Optional base URL for the app (used for login redirects). */
-    appBaseUrl?: string;
+    /** Base URL for the app (used for login redirects). */
+    appBaseUrl: string;
 }
 /**
  * Authentication module for managing user authentication and authorization. The module automatically stores tokens in local storage when available and manages authorization headers for API requests.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@base44-preview/sdk",
-  "version": "0.8.18-pr.123.a060ee3",
+  "version": "0.8.18-pr.124.92d0a7a",
   "description": "JavaScript SDK for Base44 API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",