@cloudbase/oauth 2.19.1 → 2.19.3

package/dist/esm/auth/consts.d.ts

@@ -1,55 +1,56 @@
+export declare const AUTH_API_PREFIX = "/auth";
 export declare enum ApiUrls {
-    AUTH_SIGN_UP_URL = "/auth/v1/signup",
-    AUTH_TOKEN_URL = "/auth/v1/token",
-    AUTH_REVOKE_URL = "/auth/v1/revoke",
-    WEDA_USER_URL = "/auth/v1/plugin/weda/userinfo",
-    AUTH_RESET_PASSWORD = "/auth/v1/reset",
-    AUTH_GET_DEVICE_CODE = "/auth/v1/device/code",
-    CHECK_USERNAME = "/auth/v1/checkUsername",
-    CHECK_IF_USER_EXIST = "/auth/v1/checkIfUserExist",
-    GET_PROVIDER_TYPE = "/auth/v1/mgr/provider/providerSubType",
-    AUTH_SIGN_IN_URL = "/auth/v1/signin",
-    AUTH_SIGN_IN_ANONYMOUSLY_URL = "/auth/v1/signin/anonymously",
-    AUTH_SIGN_IN_WITH_PROVIDER_URL = "/auth/v1/signin/with/provider",
-    AUTH_SIGN_IN_WITH_WECHAT_URL = "/auth/v1/signin/wechat/noauth",
-    AUTH_SIGN_IN_CUSTOM = "/auth/v1/signin/custom",
-    PROVIDER_TOKEN_URL = "/auth/v1/provider/token",
-    PROVIDER_URI_URL = "/auth/v1/provider/uri",
-    USER_ME_URL = "/auth/v1/user/me",
-    AUTH_SIGNOUT_URL = "/auth/v1/user/signout",
-    USER_QUERY_URL = "/auth/v1/user/query",
-    USER_PRIFILE_URL = "/auth/v1/user/profile",
-    USER_BASIC_EDIT_URL = "/auth/v1/user/basic/edit",
-    USER_TRANS_BY_PROVIDER_URL = "/auth/v1/user/trans/by/provider",
-    PROVIDER_LIST = "/auth/v1/user/provider",
-    PROVIDER_BIND_URL = "/auth/v1/user/provider/bind",
-    PROVIDER_UNBIND_URL = "/auth/v1/user/provider",
-    CHECK_PWD_URL = "/auth/v1/user/sudo",
-    SUDO_URL = "/auth/v1/user/sudo",
-    BIND_CONTACT_URL = "/auth/v1/user/contact",
-    AUTH_SET_PASSWORD = "/auth/v1/user/password",
-    AUTHORIZE_DEVICE_URL = "/auth/v1/user/device/authorize",
-    AUTHORIZE_URL = "/auth/v1/user/authorize",
-    AUTHORIZE_INFO_URL = "/auth/v1/user/authorize/info",
-    AUTHORIZED_DEVICES_DELETE_URL = "/auth/v1/user/authorized/devices/",
-    AUTH_REVOKE_ALL_URL = "/auth/v1/user/revoke/all",
-    GET_USER_BEHAVIOR_LOG = "/auth/v1/user/security/history",
-    VERIFICATION_URL = "/auth/v1/verification",
-    VERIFY_URL = "/auth/v1/verification/verify",
-    CAPTCHA_DATA_URL = "/auth/v1/captcha/data",
-    VERIFY_CAPTCHA_DATA_URL = "/auth/v1/captcha/data/verify",
-    GET_CAPTCHA_URL = "/auth/v1/captcha/init",
-    GET_MINIPROGRAM_QRCODE = "/auth/v1/qrcode/generate",
-    GET_MINIPROGRAM_QRCODE_STATUS = "/auth/v1/qrcode/get/status"
+    AUTH_SIGN_UP_URL = "/v1/signup",
+    AUTH_TOKEN_URL = "/v1/token",
+    AUTH_REVOKE_URL = "/v1/revoke",
+    WEDA_USER_URL = "/v1/plugin/weda/userinfo",
+    AUTH_RESET_PASSWORD = "/v1/reset",
+    AUTH_GET_DEVICE_CODE = "/v1/device/code",
+    CHECK_USERNAME = "/v1/checkUsername",
+    CHECK_IF_USER_EXIST = "/v1/checkIfUserExist",
+    GET_PROVIDER_TYPE = "/v1/mgr/provider/providerSubType",
+    AUTH_SIGN_IN_URL = "/v1/signin",
+    AUTH_SIGN_IN_ANONYMOUSLY_URL = "/v1/signin/anonymously",
+    AUTH_SIGN_IN_WITH_PROVIDER_URL = "/v1/signin/with/provider",
+    AUTH_SIGN_IN_WITH_WECHAT_URL = "/v1/signin/wechat/noauth",
+    AUTH_SIGN_IN_CUSTOM = "/v1/signin/custom",
+    PROVIDER_TOKEN_URL = "/v1/provider/token",
+    PROVIDER_URI_URL = "/v1/provider/uri",
+    USER_ME_URL = "/v1/user/me",
+    AUTH_SIGNOUT_URL = "/v1/user/signout",
+    USER_QUERY_URL = "/v1/user/query",
+    USER_PRIFILE_URL = "/v1/user/profile",
+    USER_BASIC_EDIT_URL = "/v1/user/basic/edit",
+    USER_TRANS_BY_PROVIDER_URL = "/v1/user/trans/by/provider",
+    PROVIDER_LIST = "/v1/user/provider",
+    PROVIDER_BIND_URL = "/v1/user/provider/bind",
+    PROVIDER_UNBIND_URL = "/v1/user/provider",
+    CHECK_PWD_URL = "/v1/user/sudo",
+    SUDO_URL = "/v1/user/sudo",
+    BIND_CONTACT_URL = "/v1/user/contact",
+    AUTH_SET_PASSWORD = "/v1/user/password",
+    AUTHORIZE_DEVICE_URL = "/v1/user/device/authorize",
+    AUTHORIZE_URL = "/v1/user/authorize",
+    AUTHORIZE_INFO_URL = "/v1/user/authorize/info",
+    AUTHORIZED_DEVICES_DELETE_URL = "/v1/user/authorized/devices/",
+    AUTH_REVOKE_ALL_URL = "/v1/user/revoke/all",
+    GET_USER_BEHAVIOR_LOG = "/v1/user/security/history",
+    VERIFICATION_URL = "/v1/verification",
+    VERIFY_URL = "/v1/verification/verify",
+    CAPTCHA_DATA_URL = "/v1/captcha/data",
+    VERIFY_CAPTCHA_DATA_URL = "/v1/captcha/data/verify",
+    GET_CAPTCHA_URL = "/v1/captcha/init",
+    GET_MINIPROGRAM_QRCODE = "/v1/qrcode/generate",
+    GET_MINIPROGRAM_QRCODE_STATUS = "/v1/qrcode/get/status"
 }
 export declare enum ApiUrlsV2 {
-    AUTH_SIGN_IN_URL = "/auth/v2/signin/username",
-    AUTH_TOKEN_URL = "/auth/v2/token",
-    USER_ME_URL = "/auth/v2/user/me",
-    VERIFY_URL = "/auth/v2/signin/verificationcode",
-    AUTH_SIGN_IN_WITH_PROVIDER_URL = "/auth/v2/signin/with/provider",
-    AUTH_PUBLIC_KEY = "/auth/v2/signin/publichkey",
-    AUTH_RESET_PASSWORD = "/auth/v2/signin/password/update"
+    AUTH_SIGN_IN_URL = "/v2/signin/username",
+    AUTH_TOKEN_URL = "/v2/token",
+    USER_ME_URL = "/v2/user/me",
+    VERIFY_URL = "/v2/signin/verificationcode",
+    AUTH_SIGN_IN_WITH_PROVIDER_URL = "/v2/signin/with/provider",
+    AUTH_PUBLIC_KEY = "/v2/signin/publichkey",
+    AUTH_RESET_PASSWORD = "/v2/signin/password/update"
 }
 export declare enum VerificationUsages {
     REGISTER = "REGISTER",

package/dist/esm/auth/consts.js

@@ -1,57 +1,58 @@
+export const AUTH_API_PREFIX = '/auth';
 export var ApiUrls;
 (function (ApiUrls) {
-    ApiUrls["AUTH_SIGN_UP_URL"] = "/auth/v1/signup";
-    ApiUrls["AUTH_TOKEN_URL"] = "/auth/v1/token";
-    ApiUrls["AUTH_REVOKE_URL"] = "/auth/v1/revoke";
-    ApiUrls["WEDA_USER_URL"] = "/auth/v1/plugin/weda/userinfo";
-    ApiUrls["AUTH_RESET_PASSWORD"] = "/auth/v1/reset";
-    ApiUrls["AUTH_GET_DEVICE_CODE"] = "/auth/v1/device/code";
-    ApiUrls["CHECK_USERNAME"] = "/auth/v1/checkUsername";
-    ApiUrls["CHECK_IF_USER_EXIST"] = "/auth/v1/checkIfUserExist";
-    ApiUrls["GET_PROVIDER_TYPE"] = "/auth/v1/mgr/provider/providerSubType";
-    ApiUrls["AUTH_SIGN_IN_URL"] = "/auth/v1/signin";
-    ApiUrls["AUTH_SIGN_IN_ANONYMOUSLY_URL"] = "/auth/v1/signin/anonymously";
-    ApiUrls["AUTH_SIGN_IN_WITH_PROVIDER_URL"] = "/auth/v1/signin/with/provider";
-    ApiUrls["AUTH_SIGN_IN_WITH_WECHAT_URL"] = "/auth/v1/signin/wechat/noauth";
-    ApiUrls["AUTH_SIGN_IN_CUSTOM"] = "/auth/v1/signin/custom";
-    ApiUrls["PROVIDER_TOKEN_URL"] = "/auth/v1/provider/token";
-    ApiUrls["PROVIDER_URI_URL"] = "/auth/v1/provider/uri";
-    ApiUrls["USER_ME_URL"] = "/auth/v1/user/me";
-    ApiUrls["AUTH_SIGNOUT_URL"] = "/auth/v1/user/signout";
-    ApiUrls["USER_QUERY_URL"] = "/auth/v1/user/query";
-    ApiUrls["USER_PRIFILE_URL"] = "/auth/v1/user/profile";
-    ApiUrls["USER_BASIC_EDIT_URL"] = "/auth/v1/user/basic/edit";
-    ApiUrls["USER_TRANS_BY_PROVIDER_URL"] = "/auth/v1/user/trans/by/provider";
-    ApiUrls["PROVIDER_LIST"] = "/auth/v1/user/provider";
-    ApiUrls["PROVIDER_BIND_URL"] = "/auth/v1/user/provider/bind";
-    ApiUrls["PROVIDER_UNBIND_URL"] = "/auth/v1/user/provider";
-    ApiUrls["CHECK_PWD_URL"] = "/auth/v1/user/sudo";
-    ApiUrls["SUDO_URL"] = "/auth/v1/user/sudo";
-    ApiUrls["BIND_CONTACT_URL"] = "/auth/v1/user/contact";
-    ApiUrls["AUTH_SET_PASSWORD"] = "/auth/v1/user/password";
-    ApiUrls["AUTHORIZE_DEVICE_URL"] = "/auth/v1/user/device/authorize";
-    ApiUrls["AUTHORIZE_URL"] = "/auth/v1/user/authorize";
-    ApiUrls["AUTHORIZE_INFO_URL"] = "/auth/v1/user/authorize/info";
-    ApiUrls["AUTHORIZED_DEVICES_DELETE_URL"] = "/auth/v1/user/authorized/devices/";
-    ApiUrls["AUTH_REVOKE_ALL_URL"] = "/auth/v1/user/revoke/all";
-    ApiUrls["GET_USER_BEHAVIOR_LOG"] = "/auth/v1/user/security/history";
-    ApiUrls["VERIFICATION_URL"] = "/auth/v1/verification";
-    ApiUrls["VERIFY_URL"] = "/auth/v1/verification/verify";
-    ApiUrls["CAPTCHA_DATA_URL"] = "/auth/v1/captcha/data";
-    ApiUrls["VERIFY_CAPTCHA_DATA_URL"] = "/auth/v1/captcha/data/verify";
-    ApiUrls["GET_CAPTCHA_URL"] = "/auth/v1/captcha/init";
-    ApiUrls["GET_MINIPROGRAM_QRCODE"] = "/auth/v1/qrcode/generate";
-    ApiUrls["GET_MINIPROGRAM_QRCODE_STATUS"] = "/auth/v1/qrcode/get/status";
+    ApiUrls["AUTH_SIGN_UP_URL"] = "/v1/signup";
+    ApiUrls["AUTH_TOKEN_URL"] = "/v1/token";
+    ApiUrls["AUTH_REVOKE_URL"] = "/v1/revoke";
+    ApiUrls["WEDA_USER_URL"] = "/v1/plugin/weda/userinfo";
+    ApiUrls["AUTH_RESET_PASSWORD"] = "/v1/reset";
+    ApiUrls["AUTH_GET_DEVICE_CODE"] = "/v1/device/code";
+    ApiUrls["CHECK_USERNAME"] = "/v1/checkUsername";
+    ApiUrls["CHECK_IF_USER_EXIST"] = "/v1/checkIfUserExist";
+    ApiUrls["GET_PROVIDER_TYPE"] = "/v1/mgr/provider/providerSubType";
+    ApiUrls["AUTH_SIGN_IN_URL"] = "/v1/signin";
+    ApiUrls["AUTH_SIGN_IN_ANONYMOUSLY_URL"] = "/v1/signin/anonymously";
+    ApiUrls["AUTH_SIGN_IN_WITH_PROVIDER_URL"] = "/v1/signin/with/provider";
+    ApiUrls["AUTH_SIGN_IN_WITH_WECHAT_URL"] = "/v1/signin/wechat/noauth";
+    ApiUrls["AUTH_SIGN_IN_CUSTOM"] = "/v1/signin/custom";
+    ApiUrls["PROVIDER_TOKEN_URL"] = "/v1/provider/token";
+    ApiUrls["PROVIDER_URI_URL"] = "/v1/provider/uri";
+    ApiUrls["USER_ME_URL"] = "/v1/user/me";
+    ApiUrls["AUTH_SIGNOUT_URL"] = "/v1/user/signout";
+    ApiUrls["USER_QUERY_URL"] = "/v1/user/query";
+    ApiUrls["USER_PRIFILE_URL"] = "/v1/user/profile";
+    ApiUrls["USER_BASIC_EDIT_URL"] = "/v1/user/basic/edit";
+    ApiUrls["USER_TRANS_BY_PROVIDER_URL"] = "/v1/user/trans/by/provider";
+    ApiUrls["PROVIDER_LIST"] = "/v1/user/provider";
+    ApiUrls["PROVIDER_BIND_URL"] = "/v1/user/provider/bind";
+    ApiUrls["PROVIDER_UNBIND_URL"] = "/v1/user/provider";
+    ApiUrls["CHECK_PWD_URL"] = "/v1/user/sudo";
+    ApiUrls["SUDO_URL"] = "/v1/user/sudo";
+    ApiUrls["BIND_CONTACT_URL"] = "/v1/user/contact";
+    ApiUrls["AUTH_SET_PASSWORD"] = "/v1/user/password";
+    ApiUrls["AUTHORIZE_DEVICE_URL"] = "/v1/user/device/authorize";
+    ApiUrls["AUTHORIZE_URL"] = "/v1/user/authorize";
+    ApiUrls["AUTHORIZE_INFO_URL"] = "/v1/user/authorize/info";
+    ApiUrls["AUTHORIZED_DEVICES_DELETE_URL"] = "/v1/user/authorized/devices/";
+    ApiUrls["AUTH_REVOKE_ALL_URL"] = "/v1/user/revoke/all";
+    ApiUrls["GET_USER_BEHAVIOR_LOG"] = "/v1/user/security/history";
+    ApiUrls["VERIFICATION_URL"] = "/v1/verification";
+    ApiUrls["VERIFY_URL"] = "/v1/verification/verify";
+    ApiUrls["CAPTCHA_DATA_URL"] = "/v1/captcha/data";
+    ApiUrls["VERIFY_CAPTCHA_DATA_URL"] = "/v1/captcha/data/verify";
+    ApiUrls["GET_CAPTCHA_URL"] = "/v1/captcha/init";
+    ApiUrls["GET_MINIPROGRAM_QRCODE"] = "/v1/qrcode/generate";
+    ApiUrls["GET_MINIPROGRAM_QRCODE_STATUS"] = "/v1/qrcode/get/status";
 })(ApiUrls || (ApiUrls = {}));
 export var ApiUrlsV2;
 (function (ApiUrlsV2) {
-    ApiUrlsV2["AUTH_SIGN_IN_URL"] = "/auth/v2/signin/username";
-    ApiUrlsV2["AUTH_TOKEN_URL"] = "/auth/v2/token";
-    ApiUrlsV2["USER_ME_URL"] = "/auth/v2/user/me";
-    ApiUrlsV2["VERIFY_URL"] = "/auth/v2/signin/verificationcode";
-    ApiUrlsV2["AUTH_SIGN_IN_WITH_PROVIDER_URL"] = "/auth/v2/signin/with/provider";
-    ApiUrlsV2["AUTH_PUBLIC_KEY"] = "/auth/v2/signin/publichkey";
-    ApiUrlsV2["AUTH_RESET_PASSWORD"] = "/auth/v2/signin/password/update";
+    ApiUrlsV2["AUTH_SIGN_IN_URL"] = "/v2/signin/username";
+    ApiUrlsV2["AUTH_TOKEN_URL"] = "/v2/token";
+    ApiUrlsV2["USER_ME_URL"] = "/v2/user/me";
+    ApiUrlsV2["VERIFY_URL"] = "/v2/signin/verificationcode";
+    ApiUrlsV2["AUTH_SIGN_IN_WITH_PROVIDER_URL"] = "/v2/signin/with/provider";
+    ApiUrlsV2["AUTH_PUBLIC_KEY"] = "/v2/signin/publichkey";
+    ApiUrlsV2["AUTH_RESET_PASSWORD"] = "/v2/signin/password/update";
 })(ApiUrlsV2 || (ApiUrlsV2 = {}));
 export var VerificationUsages;
 (function (VerificationUsages) {

package/dist/esm/index.d.ts

@@ -1,6 +1,7 @@
 import { OAuth2Client } from './oauth2client/oauth2client';
 import { AuthOptions, Auth } from './auth/apis';
 export { Auth } from './auth/apis';
+export { AUTH_API_PREFIX } from './auth/consts';
 export * as authModels from './auth/models';
 export type { ProviderProfile } from './auth/models';
 export type { Credentials, OAuth2ClientOptions, ResponseError, AuthClientRequestOptions } from './oauth2client/models';

package/dist/esm/index.js

@@ -1,19 +1,25 @@
 import { OAuth2Client } from './oauth2client/oauth2client';
 import { Auth } from './auth/apis';
+import { AUTH_API_PREFIX } from './auth/consts';
 export { Auth } from './auth/apis';
+export { AUTH_API_PREFIX } from './auth/consts';
 import * as authModels_1 from './auth/models';
 export { authModels_1 as authModels };
 export class CloudbaseOAuth {
     constructor(authOptions) {
-        const { apiOrigin, clientId, env, storage, request, baseRequest, anonymousSignInFunc, wxCloud, adapter } = authOptions;
+        const { apiOrigin, apiPath = AUTH_API_PREFIX, clientId, env, storage, request, baseRequest, anonymousSignInFunc, wxCloud, adapter, onCredentialsError, headers, i18n } = authOptions;
         this.oauth2client = new OAuth2Client({
             apiOrigin,
+            apiPath,
             clientId,
             env,
             storage,
             baseRequest: baseRequest || request,
             anonymousSignInFunc,
             wxCloud,
+            onCredentialsError,
+            headers: headers || {},
+            i18n,
         });
         this.authApi = new Auth({
             credentialsClient: this.oauth2client,

package/dist/esm/oauth2client/models.d.ts

@@ -1,5 +1,7 @@
 import { SimpleStorage } from './interface';
 import { ErrorType } from './consts';
+import { AuthOptions } from '../auth/apis';
+import { ICloudbaseConfig } from '@cloudbase/types';
 export interface Credentials {
     token_type?: string | null;
     access_token?: string | null;
@@ -38,6 +40,7 @@ export interface AuthClientRequestOptions extends RequestOptions {
 export interface OAuth2ClientOptions {
     devMode?: boolean;
     apiOrigin: string;
+    apiPath?: string;
     clientId: string;
     env: string;
     retry?: number;
@@ -51,4 +54,6 @@ export interface OAuth2ClientOptions {
     };
     anonymousSignInFunc?: (Credentials: any) => Promise<Credentials | void>;
     wxCloud?: any;
+    onCredentialsError?: AuthOptions['onCredentialsError'];
+    i18n?: ICloudbaseConfig['i18n'];
 }

package/dist/esm/oauth2client/oauth2client.d.ts

@@ -29,7 +29,9 @@ export declare class OAuth2Client implements AuthClient {
     private static maxRetry;
     private static retryInterval;
     private apiOrigin;
+    private apiPath;
     private clientId;
+    private i18n;
     private retry;
     private clientSecret?;
     private baseRequest;
@@ -43,6 +45,7 @@ export declare class OAuth2Client implements AuthClient {
     private anonymousSignInFunc;
     private wxCloud;
     private basicAuth;
+    private onCredentialsError;
     constructor(options: OAuth2ClientOptions);
     setCredentials(credentials?: Credentials): Promise<void>;
     getAccessToken(): Promise<string>;

package/dist/esm/oauth2client/oauth2client.js

@@ -1,10 +1,11 @@
 import { ErrorType } from './consts';
-import { ApiUrls, ApiUrlsV2 } from '../auth/consts';
+import { ApiUrls, ApiUrlsV2, AUTH_API_PREFIX } from '../auth/consts';
 import { uuidv4 } from '../utils/uuid';
 import { getPathName } from '../utils/index';
 import { SinglePromise } from '../utils/function/single-promise';
 import { weBtoa } from '../utils/base64';
 import { isMatch } from '../utils/cloudbase-adapter-wx_mp';
+import { langEvent } from '@cloudbase/utilities';
 const RequestIdHeaderName = 'x-request-id';
 const DeviceIdHeaderName = 'x-device-id';
 const DeviceIdSectionName = 'device_id';
@@ -181,7 +182,9 @@ class OAuth2Client {
             options.clientId = options.env;
         }
         this.apiOrigin = options.apiOrigin;
+        this.apiPath = options.apiPath || AUTH_API_PREFIX;
         this.clientId = options.clientId;
+        this.i18n = options.i18n;
         this.singlePromise = new SinglePromise({ clientId: this.clientId });
         this.retry = this.formatRetry(options.retry, OAuth2Client.defaultRetry);
         if (options.baseRequest) {
@@ -213,6 +216,10 @@ class OAuth2Client {
         }
         this.refreshTokenFunc = options.refreshTokenFunc || this.defaultRefreshTokenFunc;
         this.anonymousSignInFunc = options.anonymousSignInFunc;
+        this.onCredentialsError = options.onCredentialsError;
+        langEvent.bus.on(langEvent.LANG_CHANGE_EVENT, (params) => {
+            this.i18n = params.data?.i18n || this.i18n;
+        });
     }
     setCredentials(credentials) {
         return this.localCredentials.setCredentials(credentials);
@@ -230,7 +237,7 @@ class OAuth2Client {
             options = {};
         }
         const retry = this.formatRetry(options.retry, this.retry);
-        options.headers = options.headers || {};
+        options.headers = { ...options.headers, [this.i18n?.LANG_HEADER_KEY]: this.i18n?.lang };
         if (this.headers) {
             options.headers = {
                 ...this.headers,
@@ -268,7 +275,7 @@ class OAuth2Client {
             }
         }
         if (url.startsWith('/')) {
-            url = this.apiOrigin + url;
+            url = `${this.apiOrigin}${this.apiPath}${url}`;
         }
         let response = null;
         const maxRequestTimes = retry + 1;
@@ -342,7 +349,9 @@ class OAuth2Client {
     async getCredentials() {
         let credentials = await this.localCredentials.getCredentials();
         if (!credentials) {
-            return this.unAuthenticatedError('credentials not found');
+            const msg = 'credentials not found';
+            this.onCredentialsError?.({ msg });
+            return this.unAuthenticatedError(msg);
         }
         if (isCredentialsExpired(credentials)) {
             if (credentials.refresh_token) {
@@ -354,6 +363,7 @@ class OAuth2Client {
                         credentials = await this.anonymousLogin(credentials);
                     }
                     else {
+                        this.onCredentialsError?.({ msg: error.error_description });
                         return Promise.reject(error);
                     }
                 }
@@ -362,7 +372,9 @@ class OAuth2Client {
                 credentials = await this.anonymousLogin(credentials);
             }
             else {
-                return this.unAuthenticatedError('no refresh token found in credentials');
+                const msg = 'no refresh token found in credentials';
+                this.onCredentialsError?.({ msg });
+                return this.unAuthenticatedError(msg);
             }
         }
         return credentials;
@@ -377,21 +389,27 @@ class OAuth2Client {
     async getScope() {
         const credentials = await this.localCredentials.getCredentials();
         if (!credentials) {
-            return this.unAuthenticatedError('credentials not found');
+            const msg = 'credentials not found';
+            this.onCredentialsError?.({ msg });
+            return this.unAuthenticatedError(msg);
         }
         return credentials.scope;
     }
     async getGroups() {
         const credentials = await this.localCredentials.getCredentials();
         if (!credentials) {
-            return this.unAuthenticatedError('credentials not found');
+            const msg = 'credentials not found';
+            this.onCredentialsError?.({ msg });
+            return this.unAuthenticatedError(msg);
         }
         return credentials.groups;
     }
     async refreshToken(credentials) {
         return this.singlePromise.run('_refreshToken', async () => {
             if (!credentials || !credentials.refresh_token) {
-                return this.unAuthenticatedError('no refresh token found in credentials');
+                const msg = 'no refresh token found in credentials';
+                this.onCredentialsError?.({ msg });
+                return this.unAuthenticatedError(msg);
             }
             try {
                 const newCredentials = await this.refreshTokenFunc(credentials.refresh_token, credentials);
@@ -401,8 +419,11 @@ class OAuth2Client {
             catch (error) {
                 if (error.error === ErrorType.INVALID_GRANT) {
                     await this.localCredentials.setCredentials(null);
-                    return this.unAuthenticatedError(error.error_description);
+                    const msg = error.error_description;
+                    this.onCredentialsError?.({ msg });
+                    return this.unAuthenticatedError(msg);
                 }
+                this.onCredentialsError?.({ msg: error.error_description });
                 return Promise.reject(error);
             }
         });
@@ -470,7 +491,9 @@ class OAuth2Client {
     }
     async defaultRefreshTokenFunc(refreshToken, credentials) {
         if (refreshToken === undefined || refreshToken === '') {
-            return this.unAuthenticatedError('refresh token not found');
+            const msg = 'refresh token not found';
+            this.onCredentialsError?.({ msg });
+            return this.unAuthenticatedError(msg);
         }
         let url = ApiUrls.AUTH_TOKEN_URL;
         if (credentials?.version === 'v2') {