@bodhiapp/bodhi-js-core 0.0.37 → 0.0.39

package/dist/direct-client-base.d.ts

@@ -55,6 +55,17 @@ export declare abstract class DirectClientBase implements IDirectClient {
     protected authServerUrl: string;
     protected authEndpoints: OAuthEndpoints;
     protected storage: IStorage | null;
+    /**
+     * Base prefix for OAuth storage keys (pre-serverUrl scope).
+     * Captured from config; combined with current serverUrl to build `storageKeys`.
+     */
+    private basePrefix;
+    /**
+     * OAuth storage keys scoped by (basePrefix, serverUrl). Rebuilt in `init()` whenever
+     * serverUrl is committed — tokens are namespaced per server to avoid presenting
+     * tokens issued by server A as though they were valid for server B.
+     * Undefined until `serverUrl` is set; guard auth-path access with `this.serverUrl`.
+     */
     protected storageKeys: StorageKeys;
     protected state: DirectState;
     private onStateChange;
@@ -137,8 +148,22 @@ export declare abstract class DirectClientBase implements IDirectClient {
      */
     protected _storeRefreshedTokens(tokens: RefreshTokenResponse): Promise<void>;
     protected exchangeCodeForTokens(code: string): Promise<void>;
-    protected revokeRefreshToken(): Promise<void>;
-    protected clearAuthStorage(): Promise<void>;
+    protected revokeRefreshToken(keys?: StorageKeys): Promise<void>;
+    protected clearAuthStorage(keys?: StorageKeys): Promise<void>;
+    /**
+     * Rebuild OAuth storage keys using the current serverUrl.
+     * Called after serverUrl is committed in `init()`. No-op if serverUrl is null.
+     */
+    protected rebuildStorageKeys(): void;
+    /**
+     * Revoke + purge OAuth tokens from a previous server URL's namespace. Called
+     * when the user switches servers: the new server would not recognize the old
+     * tokens anyway, and leaving them in storage is a security risk.
+     *
+     * Best-effort — if the old server is unreachable the revoke call fails silently
+     * (see `revokeRefreshToken`); storage is cleared regardless.
+     */
+    private clearPreviousServerTokens;
     private _bootstrapInitialTokens;
     protected _storageGet(key: string): Promise<string | null>;
     protected _storageSet(items: Record<string, string | number>): Promise<void>;

package/dist/storage.d.ts

@@ -31,17 +31,34 @@ export declare const STORAGE_PREFIXES: {
     readonly WEB_EXT: "bodhi-js-sdk:web:ext:";
 };
 /**
- * Create storage prefix with basePath for path isolation
+ * Compose a storage prefix by joining a scope with an inner namespace segment.
  *
- * @param basePath - Base path of app (e.g., '/', '/app1/')
- * @param prefix - Storage prefix (e.g., 'bodhi:web', 'bodhijs:')
- * @returns Combined prefix with basePath isolation
+ * Generic namespace composer — used for any namespace dimension (basePath, serverUrl,
+ * tenant, etc.). The first segment is appended with ':' and then the inner namespace
+ * segment is appended as-is. Callers are responsible for ensuring the inner segment
+ * ends with ':' if it is intended to be consumed as a `createStorageKeys` prefix.
  *
  * Examples:
- * - createStoragePrefixWithBasePath('/', 'bodhi:web') => '/:bodhi:web'
- * - createStoragePrefixWithBasePath('/app1/', 'bodhi:web') => '/app1/:bodhi:web'
+ * - createStoragePrefixWithNamespace('/', 'bodhi:web:')         => '/:bodhi:web:'
+ * - createStoragePrefixWithNamespace('/app1/', 'bodhi:web:')    => '/app1/:bodhi:web:'
  */
-export declare function createStoragePrefixWithBasePath(basePath: string, prefix: string): string;
+export declare function createStoragePrefixWithNamespace(scope: string, namespace: string): string;
+/**
+ * Extend a storage prefix with an encoded server URL segment for per-server isolation.
+ *
+ * Uses '::' as a unique boundary marker between the base namespace and the server URL
+ * segment, so the URL segment is unambiguously parseable even when other segments contain
+ * ':'. The URL is normalized (trailing slashes stripped, percent-encoded) so that ':' /
+ * '/' inside the URL do not collide with the prefix separators.
+ *
+ * Example:
+ * - createStoragePrefixWithServerUrl('/:bodhi-js-sdk:web:direct:', 'http://localhost:1135')
+ *   => '/:bodhi-js-sdk:web:direct::http%3A%2F%2Flocalhost%3A1135:'
+ *
+ * @param basePrefix - Base prefix built with createStoragePrefixWithNamespace (ends with ':')
+ * @param serverUrl  - Raw backend server URL (e.g., 'http://localhost:1135')
+ */
+export declare function createStoragePrefixWithServerUrl(basePrefix: string, serverUrl: string): string;
 /**
  * User Preferences Storage Manager
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bodhiapp/bodhi-js-core",
-  "version": "0.0.37",
+  "version": "0.0.39",
   "description": "Core types and interfaces for Bodhi Browser SDK",
   "type": "module",
   "main": "dist/bodhi-core.cjs.js",
@@ -85,10 +85,10 @@
     }
   },
   "dependencies": {
-    "@bodhiapp/bodhi-browser-types": "0.0.37",
-    "@bodhiapp/setup-modal-types": "0.0.37",
-    "@bodhiapp/setup-modal-v2-types": "0.0.37",
-    "@bodhiapp/ts-client": "0.1.31",
+    "@bodhiapp/bodhi-browser-types": "0.0.39",
+    "@bodhiapp/setup-modal-types": "0.0.39",
+    "@bodhiapp/setup-modal-v2-types": "0.0.39",
+    "@bodhiapp/ts-client": "0.1.32",
     "ua-parser-js": "^1.0.40"
   },
   "devDependencies": {