@cmarket/partner-sdk 9.2.0 → 9.4.0

package/token-manager.ts

@@ -0,0 +1,59 @@
+import axios from 'axios';
+
+/** 토큰 만료 skew (ms). 만료 60초 전 미리 갱신. */
+const SKEW_MS = 60_000;
+
+export interface TokenManagerOptions {
+  baseUrl: string;
+  clientId: string;
+  clientSecret: string;
+  scope?: string;
+  /** DPoP 사용 시 토큰 엔드포인트용 proof(htu=/oauth/token, ath 없음)를 생성. */
+  dpopProof?: () => Promise<string>;
+}
+
+export interface TokenManager {
+  getValidToken(): Promise<string>;
+  forceRefresh(): void;
+}
+
+export function createTokenManager(opts: TokenManagerOptions): TokenManager {
+  let token: string | null = null;
+  let expiresAt = 0;
+  let inflight: Promise<string> | null = null;
+
+  async function fetchToken(): Promise<string> {
+    const body: Record<string, string> = {
+      grant_type: 'client_credentials',
+      client_id: opts.clientId,
+      client_secret: opts.clientSecret,
+    };
+    if (opts.scope) body.scope = opts.scope;
+    const headers: Record<string, string> = {
+      'Content-Type': 'application/json',
+    };
+    if (opts.dpopProof) headers.DPoP = await opts.dpopProof();
+    const { data } = await axios.post(`${opts.baseUrl}/oauth/token`, body, {
+      headers,
+    });
+    token = data.access_token as string;
+    expiresAt = Date.now() + (data.expires_in as number) * 1000;
+    return token;
+  }
+
+  return {
+    async getValidToken(): Promise<string> {
+      if (token && Date.now() < expiresAt - SKEW_MS) return token;
+      if (!inflight) {
+        inflight = fetchToken().finally(() => {
+          inflight = null;
+        });
+      }
+      return inflight;
+    },
+    forceRefresh(): void {
+      token = null;
+      expiresAt = 0;
+    },
+  };
+}