@classic-homes/auth 1.42.0 → 1.42.1

package/dist/{auth.svelte-XY4FQFZQ.js → auth.svelte-FUCU4DYP.js}

@@ -1,3 +1,3 @@
-export { authActions, authStore, currentUser, isAuthenticated } from './chunk-MBVOLE5U.js';
-import './chunk-7AQYLLTA.js';
+export { authActions, authStore, currentUser, isAuthenticated } from './chunk-IR6DVUUF.js';
+import './chunk-QV3DUSP5.js';
 import './chunk-K6TV3ZVS.js';

package/dist/{chunk-LPQKZRPC.js → chunk-A6JJQCBU.js}

@@ -1,4 +1,4 @@
-import { authApi, InvalidAuthResponseError, RoleDeniedError } from './chunk-7AQYLLTA.js';
+import { authApi, InvalidAuthResponseError, RoleDeniedError } from './chunk-QV3DUSP5.js';
 import { hasAnyRole, getUserRoles } from './chunk-K6TV3ZVS.js';
 
 // src/core/guards.ts
@@ -19,7 +19,7 @@ function getAvailableMethods(response) {
 async function setStoreAuth(response) {
   let store;
   try {
-    store = (await import('./auth.svelte-XY4FQFZQ.js')).authStore;
+    store = (await import('./auth.svelte-FUCU4DYP.js')).authStore;
   } catch {
     return;
   }

package/dist/{chunk-7JLCFRUU.js → chunk-G6UH4HBI.js}

@@ -1,5 +1,5 @@
-import { authService } from './chunk-LPQKZRPC.js';
-import { authStore, currentUser, isAuthenticated, authActions } from './chunk-MBVOLE5U.js';
+import { authService } from './chunk-A6JJQCBU.js';
+import { authStore, currentUser, isAuthenticated, authActions } from './chunk-IR6DVUUF.js';
 import { isInitialized, initAuth, getUserRoles } from './chunk-K6TV3ZVS.js';
 
 // src/svelte/guards/auth-guard.ts

package/dist/{chunk-MBVOLE5U.js → chunk-IR6DVUUF.js}

@@ -1,4 +1,4 @@
-import { InvalidAuthResponseError, bumpSessionGeneration, authApi } from './chunk-7AQYLLTA.js';
+import { InvalidAuthResponseError, bumpSessionGeneration, authApi } from './chunk-QV3DUSP5.js';
 import { isInitialized, getConfig, isValidSSOLogoutUrl, hasRole, hasAnyRole, hasAllRoles, decodeJWT, getStorage, getDefaultStorage } from './chunk-K6TV3ZVS.js';
 
 // src/svelte/stores/auth.svelte.ts

package/dist/{chunk-7AQYLLTA.js → chunk-QV3DUSP5.js}

@@ -218,7 +218,7 @@ function writeStoredTokens(accessToken, refreshToken) {
 }
 async function syncSvelteStore(apply) {
   try {
-    const { authStore } = await import('./auth.svelte-XY4FQFZQ.js');
+    const { authStore } = await import('./auth.svelte-FUCU4DYP.js');
     apply(authStore);
   } catch {
   }
@@ -439,7 +439,6 @@ async function apiRequestInternal(endpoint, options, isRetry, startedIn) {
       body: body ? JSON.stringify(body) : void 0,
       signal: controller.signal
     });
-    clearTimeout(timeoutId);
     if (response.status === 401 && authenticated && !noAuthRetry && typeof window !== "undefined") {
       await assertSameSession();
       if (isRetry) {
@@ -462,13 +461,17 @@ async function apiRequestInternal(endpoint, options, isRetry, startedIn) {
       try {
         data = await response.json();
       } catch (parseError) {
+        if (controller.signal.aborted) throw parseError;
         if (!response.ok) {
           throw new Error(`Server error (${response.status}): Invalid JSON response`);
         }
         throw parseError;
       }
     } else {
-      const responseText = await response.text().catch(() => "");
+      const responseText = await response.text().catch((readError) => {
+        if (controller.signal.aborted) throw readError;
+        return "";
+      });
       if (responseText) {
         try {
           data = JSON.parse(responseText);
@@ -499,7 +502,6 @@ async function apiRequestInternal(endpoint, options, isRetry, startedIn) {
     }
     return data;
   } catch (error) {
-    clearTimeout(timeoutId);
     if (error instanceof DOMException && error.name === "AbortError") {
       if (signal?.aborted) throw error;
       throw new Error(`Request timed out after ${timeoutMs}ms`);
@@ -509,6 +511,7 @@ async function apiRequestInternal(endpoint, options, isRetry, startedIn) {
     }
     throw new Error("API request failed");
   } finally {
+    clearTimeout(timeoutId);
     signal?.removeEventListener("abort", onCallerAbort);
   }
 }
@@ -553,16 +556,19 @@ var api = {
 };
 
 // src/core/api.ts
-async function fetchWithTimeout(url, init) {
+async function fetchWithTimeout(url, init, read) {
   const config = getConfig();
   const fetchFn = config.fetch ?? fetch;
   const timeoutMs = config.requestTimeout ?? 3e4;
   const controller = new AbortController();
   const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
   try {
-    return await fetchFn(url, { ...init, signal: controller.signal });
+    const response = await fetchFn(url, { ...init, signal: controller.signal });
+    const result = await read(response);
+    if (controller.signal.aborted) throw new Error("aborted");
+    return result;
   } catch (error) {
-    if (error instanceof DOMException && error.name === "AbortError") {
+    if (controller.signal.aborted) {
       throw new Error(`Request timed out after ${timeoutMs}ms`);
     }
     throw error;
@@ -814,19 +820,24 @@ var authApi = {
       type: data.method === "backup" || data.method === "email" ? data.method : "totp",
       trustDevice: data.trustDevice
     };
-    const response = await fetchWithTimeout(`${config.baseUrl}/auth/mfa/challenge`, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${data.mfaToken}`
+    const result = await fetchWithTimeout(
+      `${config.baseUrl}/auth/mfa/challenge`,
+      {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${data.mfaToken}`
+        },
+        body: JSON.stringify(requestBody)
       },
-      body: JSON.stringify(requestBody)
-    });
-    if (!response.ok) {
-      const error = await response.json().catch(() => ({ message: "Verification failed" }));
-      throw new Error(error.error?.message || error.message || "Invalid verification code");
-    }
-    const result = await response.json();
+      async (response) => {
+        if (!response.ok) {
+          const error = await response.json().catch(() => ({ message: "Verification failed" }));
+          throw new Error(error.error?.message || error.message || "Invalid verification code");
+        }
+        return response.json();
+      }
+    );
     return extractData(result);
   },
   /**
@@ -837,11 +848,14 @@ var authApi = {
    */
   async sendMFAChallengeEmail(mfaToken) {
     const config = getConfig();
-    const response = await fetchWithTimeout(`${config.baseUrl}/auth/mfa/challenge/email/send`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${mfaToken}` }
-    });
-    const body = await response.json().catch(() => ({}));
+    const { response, body } = await fetchWithTimeout(
+      `${config.baseUrl}/auth/mfa/challenge/email/send`,
+      {
+        method: "POST",
+        headers: { Authorization: `Bearer ${mfaToken}` }
+      },
+      async (response2) => ({ response: response2, body: await response2.json().catch(() => ({})) })
+    );
     if (!response.ok) {
       const details = body?.error?.details;
       const retryAfter = typeof details?.retryAfterSeconds === "number" ? details.retryAfterSeconds : typeof body?.retryAfterSeconds === "number" ? body.retryAfterSeconds : void 0;
@@ -969,19 +983,24 @@ var authApi = {
       throw new Error("Not authenticated");
     }
     const config = getConfig();
-    const response = await fetchWithTimeout(`${config.baseUrl}/auth/sso/link`, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${accessToken}`
+    const result = await fetchWithTimeout(
+      `${config.baseUrl}/auth/sso/link`,
+      {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${accessToken}`
+        },
+        body: JSON.stringify({ provider })
       },
-      body: JSON.stringify({ provider })
-    });
-    if (!response.ok) {
-      const error = await response.json().catch(() => ({ message: "Failed to link SSO account" }));
-      throw new Error(error.error?.message || error.message || "Failed to link SSO account");
-    }
-    const result = await response.json();
+      async (response) => {
+        if (!response.ok) {
+          const error = await response.json().catch(() => ({ message: "Failed to link SSO account" }));
+          throw new Error(error.error?.message || error.message || "Failed to link SSO account");
+        }
+        return response.json();
+      }
+    );
     const authorizationUrl = extractData(result).authorizationUrl;
     if (authorizationUrl) {
       if (!isValidRedirectUrl(authorizationUrl)) {

package/dist/core/index.js

@@ -1,3 +1,3 @@
-export { AuthService, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse } from '../chunk-LPQKZRPC.js';
-export { InvalidAuthResponseError, MFAChallengeEmailError, RoleDeniedError, SSO_CLIENT_STATE_PARAM, SSO_CLIENT_STATE_TTL_MS, SessionChangedError, api, apiRequest, authApi, clearStoredAuth, consumeSsoClientState, createSsoClientState, extractData, getAccessToken, getRefreshToken, getSessionToken, initCrossTabSync, isRoleDeniedError, isSessionChangedError, refreshSession, updateStoredTokens, verifySsoClientState } from '../chunk-7AQYLLTA.js';
+export { AuthService, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse } from '../chunk-A6JJQCBU.js';
+export { InvalidAuthResponseError, MFAChallengeEmailError, RoleDeniedError, SSO_CLIENT_STATE_PARAM, SSO_CLIENT_STATE_TTL_MS, SessionChangedError, api, apiRequest, authApi, clearStoredAuth, consumeSsoClientState, createSsoClientState, extractData, getAccessToken, getRefreshToken, getSessionToken, initCrossTabSync, isRoleDeniedError, isSessionChangedError, refreshSession, updateStoredTokens, verifySsoClientState } from '../chunk-QV3DUSP5.js';
 export { ROLE_HIERARCHY, ROLE_NAMES, computePrimaryRole, createMemoryStorage, createSessionStorage, decodeJWT, extractClaims, getConfig, getDefaultStorage, getEffectiveLevel, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, getUserRoles, hasAllRoles, hasAnyRole, hasRole, initAuth, isInitialized, isTokenExpired, resetConfig } from '../chunk-K6TV3ZVS.js';

package/dist/index.js

@@ -1,5 +1,5 @@
-export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from './chunk-7JLCFRUU.js';
-export { AuthService, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse } from './chunk-LPQKZRPC.js';
-export { authActions, authStore, currentUser, isAuthenticated } from './chunk-MBVOLE5U.js';
-export { InvalidAuthResponseError, MFAChallengeEmailError, RoleDeniedError, SSO_CLIENT_STATE_PARAM, SSO_CLIENT_STATE_TTL_MS, SessionChangedError, api, apiRequest, authApi, clearStoredAuth, consumeSsoClientState, createSsoClientState, extractData, getAccessToken, getRefreshToken, getSessionToken, initCrossTabSync, isRoleDeniedError, isSessionChangedError, refreshSession, updateStoredTokens, verifySsoClientState } from './chunk-7AQYLLTA.js';
+export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from './chunk-G6UH4HBI.js';
+export { AuthService, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse } from './chunk-A6JJQCBU.js';
+export { authActions, authStore, currentUser, isAuthenticated } from './chunk-IR6DVUUF.js';
+export { InvalidAuthResponseError, MFAChallengeEmailError, RoleDeniedError, SSO_CLIENT_STATE_PARAM, SSO_CLIENT_STATE_TTL_MS, SessionChangedError, api, apiRequest, authApi, clearStoredAuth, consumeSsoClientState, createSsoClientState, extractData, getAccessToken, getRefreshToken, getSessionToken, initCrossTabSync, isRoleDeniedError, isSessionChangedError, refreshSession, updateStoredTokens, verifySsoClientState } from './chunk-QV3DUSP5.js';
 export { ROLE_HIERARCHY, ROLE_NAMES, computePrimaryRole, createMemoryStorage, createSessionStorage, decodeJWT, extractClaims, getConfig, getDefaultStorage, getEffectiveLevel, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, getUserRoles, hasAllRoles, hasAnyRole, hasRole, initAuth, isInitialized, isTokenExpired, resetConfig } from './chunk-K6TV3ZVS.js';

package/dist/svelte/index.js

@@ -1,5 +1,5 @@
-export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from '../chunk-7JLCFRUU.js';
-export { formatUserRoles, getAvatarFallback, getDisplayName, getGreeting, getUserEmail, getUserInitials } from '../chunk-LPQKZRPC.js';
-export { authActions, authStore, currentUser, isAuthenticated } from '../chunk-MBVOLE5U.js';
-export { InvalidAuthResponseError, RoleDeniedError, SessionChangedError, isRoleDeniedError, isSessionChangedError } from '../chunk-7AQYLLTA.js';
+export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from '../chunk-G6UH4HBI.js';
+export { formatUserRoles, getAvatarFallback, getDisplayName, getGreeting, getUserEmail, getUserInitials } from '../chunk-A6JJQCBU.js';
+export { authActions, authStore, currentUser, isAuthenticated } from '../chunk-IR6DVUUF.js';
+export { InvalidAuthResponseError, RoleDeniedError, SessionChangedError, isRoleDeniedError, isSessionChangedError } from '../chunk-QV3DUSP5.js';
 export { initAuth, isInitialized } from '../chunk-K6TV3ZVS.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classic-homes/auth",
-  "version": "1.42.0",
+  "version": "1.42.1",
   "description": "Authentication services and Svelte bindings for Classic Theme apps",
   "type": "module",
   "main": "dist/index.js",