@bounded-sh/client 0.0.22 → 0.0.23

package/dist/index.mjs

@@ -4225,6 +4225,14 @@ function tokenField(data, snake, camel) {
     const value = (_a = data === null || data === void 0 ? void 0 : data[snake]) !== null && _a !== void 0 ? _a : data === null || data === void 0 ? void 0 : data[camel];
     return typeof value === 'string' ? value : '';
 }
+function boundedRefreshTokenField(data) {
+    for (const key of ['bounded_refresh_token', 'boundedRefreshToken', 'refreshToken']) {
+        const value = data === null || data === void 0 ? void 0 : data[key];
+        if (typeof value === 'string' && value.length > 0)
+            return value;
+    }
+    return '';
+}
 async function issuerBase() {
     const cfg = await getConfig();
     return (cfg.humanAuthApiUrl || 'https://auth.bounded.sh').replace(/\/$/, '');
@@ -4329,7 +4337,7 @@ async function finishGuestLinkIfPending(socialIdToken) {
             return null; // link failed -> keep the plain social session
         const upgraded = userFromIdToken(idToken);
         const accessToken = tokenField(data, 'access_token', 'accessToken') || idToken;
-        const refreshToken = tokenField(data, 'refresh_token', 'refreshToken');
+        const refreshToken = boundedRefreshTokenField(data);
         await sessionManager().storeSession(String(upgraded.address || ''), accessToken, idToken, refreshToken, base);
         setCurrentUser(upgraded);
         return upgraded;
@@ -4470,7 +4478,7 @@ async function exchangeCode(code, verifier, redirectUri) {
     if (!idToken)
         throw new Error('No id_token returned from the token endpoint');
     const accessToken = tokenField(data, 'access_token', 'accessToken') || idToken;
-    const refreshToken = tokenField(data, 'refresh_token', 'refreshToken');
+    const refreshToken = boundedRefreshTokenField(data);
     const user = userFromIdToken(idToken);
     await sessionManager().storeSession(String(user.address || ''), accessToken, idToken, refreshToken, base);
     try {