@cemiar/auth-sdk 1.0.19 → 1.0.21

package/dist/browser/CemiarAuthClient.d.ts

@@ -6,9 +6,6 @@ export declare class CemiarAuthClient implements CemiarAuthClientInstance {
     private readonly auds;
     private readonly redirectUrl?;
     private storage;
-    private readonly onTokenChange?;
-    private readonly onAuthFailure?;
-    private readonly logoutRedirectUrl?;
     private loginMethod;
     private refreshPromise;
     constructor(config: CemiarAuthClientConfig);
@@ -26,7 +23,6 @@ export declare class CemiarAuthClient implements CemiarAuthClientInstance {
     private addAuthHeader;
     private handleResponseError;
     private queueTokenRefresh;
-    private handleAuthFailure;
     private loadLoginMethodFromStorage;
     private persistLoginMethod;
     private getCurrentLoginMethod;

package/dist/browser/CemiarAuthClient.js

@@ -15,7 +15,7 @@ function extractAccessToken(data) {
 }
 export class CemiarAuthClient {
     constructor(config) {
-        var _a, _b, _c;
+        var _a, _b;
         this.storage = createDefaultTokenStorage();
         this.refreshPromise = null;
         this.baseUrl = normalizeBaseUrl(config.baseUrl || "http://localhost:3000") + "/auth";
@@ -23,23 +23,17 @@ export class CemiarAuthClient {
         this.auds = parseAuds(config.auds);
         this.redirectUrl =
             (_a = config.redirectUrl) !== null && _a !== void 0 ? _a : (isBrowser ? `${window.location.origin}/auth/microsoft/callback` : undefined);
-        this.onTokenChange = config.onTokenChange;
-        this.onAuthFailure = config.onAuthFailure;
-        this.logoutRedirectUrl =
-            (_b = config.logoutRedirectUrl) !== null && _b !== void 0 ? _b : (isBrowser ? `${window.location.origin}/login` : undefined);
-        this.storage = (_c = config.storage) !== null && _c !== void 0 ? _c : createDefaultTokenStorage();
+        this.storage = (_b = config.storage) !== null && _b !== void 0 ? _b : createDefaultTokenStorage();
         this.loginMethod = this.loadLoginMethodFromStorage();
     }
     getAccessToken() {
         return this.storage.getToken();
     }
     setAccessToken(token) {
-        var _a;
         this.storage.setToken(token);
         if (token === null) {
             this.persistLoginMethod(null);
         }
-        (_a = this.onTokenChange) === null || _a === void 0 ? void 0 : _a.call(this, token);
     }
     async authPost(path, body, withCredentials = true) {
         const url = `${this.baseUrl}${path}`;
@@ -149,7 +143,7 @@ export class CemiarAuthClient {
             return instance(originalRequest);
         }
         catch (refreshError) {
-            this.handleAuthFailure();
+            this.setAccessToken(null);
             return Promise.reject(refreshError);
         }
     }
@@ -163,11 +157,6 @@ export class CemiarAuthClient {
         }
         return this.refreshPromise;
     }
-    handleAuthFailure() {
-        var _a;
-        this.setAccessToken(null);
-        (_a = this.onAuthFailure) === null || _a === void 0 ? void 0 : _a.call(this);
-    }
     loadLoginMethodFromStorage() {
         if (!isBrowser || !("localStorage" in globalThis)) {
             return null;

package/dist/server/AuthorizationHandler.d.ts

@@ -1,5 +1,20 @@
 import { ReqRefDefaults, ResponseToolkit } from "@hapi/hapi";
 import { Action } from "../shared/constants/AuthzConstants.js";
+export interface AuthorizationContext {
+    tenantId: string;
+    email?: string;
+    domain?: string;
+    clientId?: string;
+    roles?: string[];
+}
+/**
+ * Authorization request structure
+ */
+export interface AuthorizationRequest {
+    resource: string;
+    action: Action;
+    context: AuthorizationContext;
+}
 export declare function authorizeRoute({ resource, action }: {
     resource: string;
     action: Action;

package/dist/server/AuthorizationHandler.js

@@ -7,7 +7,6 @@ export function authorizeRoute({ resource, action }) {
             return h.response({ error: "Unauthorized: Invalid token or missing context" }).code(401).takeover();
         }
         const authzRequest = {
-            tenantId: context.tenantId,
             resource,
             action,
             context
@@ -47,6 +46,6 @@ function buildContextFromRequest(request) {
     return {
         email: claim.sub,
         roles: [],
-        tenantId: process.env.CEMIAR_AUTH_TENANT_ID || ""
+        tenantId: claim.tenantId
     };
 }

package/dist/server/index.d.ts

@@ -1,3 +1,3 @@
 export { registerCemiarAuthHapi, createSigningKeyResolver } from "./ServerHandler.js";
 export type { JwtValidateFn, JwtValidateResult, JwtParts, HapiJwtStrategyOptions } from "../shared/Types.js";
-export { authorizeRoute } from "./AuthorizationHandler.js";
+export { authorizeRoute, AuthorizationContext, AuthorizationRequest } from "./AuthorizationHandler.js";

package/dist/shared/Types.d.ts

@@ -17,7 +17,6 @@ export interface CemiarAuthClientConfig {
     storage?: TokenStorage;
     onTokenChange?: (token: string | null) => void;
     onAuthFailure?: () => void;
-    logoutRedirectUrl?: string;
 }
 export interface AuthTokens {
     accessToken: string;

package/dist/shared/models/Claim.d.ts

@@ -4,6 +4,7 @@ export interface Claim {
     iss: string;
     raw: Record<string, any>;
     actor_type: ActorType;
+    tenantId: string;
 }
 export declare enum ActorType {
     INTERNAL_USER = "internal_user",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@cemiar/auth-sdk",
-    "version": "1.0.19",
+    "version": "1.0.21",
     "description": "Cemiar Auth integration helpers for web apps and APIs.",
     "type": "module",
     "main": "dist/index.js",