@coinlist-co/react 0.12.2-rc.726778a → 0.12.2-rc.9fb6364

package/dist/client/index.d.cts

@@ -1,9 +1,9 @@
 import * as react from 'react';
 import { ReactNode, ButtonHTMLAttributes } from 'react';
-import { A as AuthorizationCode, C as CodeVerifier, L as Logger, W as WalletError, E as Erc20Namespace, a as EthereumChain, b as EvmContractAddress, B as BlockchainAmount, c as CoinListTokenSaleNamespace, O as OfferId, d as OfferOptionId, e as AssetId, P as Participation, f as CoinListTokenSaleNamespaceImpl, U as UniversalNamespaceContext, g as OndoNamespace, h as AssetSymbol, i as OfferSwapContract, j as OndoBuyTransaction, k as OndoSellTransaction, l as OndoSwapTransactionCore, m as OrderBookSide, n as OndoNamespaceImpl, S as SuperstateSwapNamespace, o as WalletsNamespace, p as Bps, q as EvmWalletAddress, r as SuperstateSwapNamespaceImpl, R as RequirementsNamespace, s as Requirement, t as RequirementsNamespaceImpl, u as Config, v as OAuthAccessToken, w as OffersNamespace, T as TokensNamespace, x as StablecoinSymbol, y as Erc20Asset, z as OfferDetail, D as TokenMetadata, F as OfferType, G as OndoSwapOfferDetail, H as CoinListTokenSaleOfferDetail, I as SuperstateSwapOfferDetail, J as Offer, K as RequirementStatusInfo, M as RequirementType, N as RequirementStatusValue, Q as OfferOptionAddress, V as RequirementId, X as KycLevelName, Y as DocumentSubmission, Z as WalletChallengeType, _ as PinoLoggerOptions, $ as OndoTradingStatus, a0 as AssetDecimals, a1 as BuildOndoBuyParams, a2 as BuildOndoSellParams, a3 as OndoQuote, a4 as OndoQuoteSize, a5 as TokenIdentifier, a6 as OfferOptionAddressId, a7 as TokenLogo } from '../tokens-namespace-CIWBtgt2.cjs';
-export { a8 as DebugEvent, a9 as FrontlineEventId, aa as HttpError, ab as HttpResponse, ac as KycToken, ad as LogBinding, ae as LogBindings, af as LogCause, ag as LogLevel, ah as LogScope, ai as LogValue, aj as ProductionLogLevel, ak as RedactedWalletError, al as RequestId, am as RpcFailureReason, an as SafeEvent, ao as SafeFields, ap as UnredactedFields } from '../tokens-namespace-CIWBtgt2.cjs';
-import { P as PKCEConfig, E as EvmWallet, S as SwapQuote, A as AssetIconUrl, a as ShortenedWalletAddress, F as FormattedAmountAssetUi, b as FormattedPercentUi, T as TxExplorerUrl, C as ConnectWallet, N as NonEmptyArray, c as TokenRegistrySnapshot } from '../token-registry-snapshot-CqI6dXM_.cjs';
-export { B as BroadcastTxParams, d as EvmSigner, W as WriteContractParams } from '../token-registry-snapshot-CqI6dXM_.cjs';
+import { A as AuthorizationCode, C as CodeVerifier, L as Logger, W as WalletError, E as Erc20Namespace, a as EthereumChain, b as EvmContractAddress, B as BlockchainAmount, c as CoinListTokenSaleNamespace, O as OfferId, d as OfferOptionId, e as AssetId, P as Participation, f as CoinListTokenSaleNamespaceImpl, U as UniversalNamespaceContext, g as OndoNamespace, h as AssetSymbol, i as OfferSwapContract, j as OndoBuyTransaction, k as OndoSellTransaction, l as OndoSwapTransactionCore, m as OrderBookSide, n as OndoNamespaceImpl, S as SuperstateSwapNamespace, o as WalletsNamespace, p as Bps, q as EvmWalletAddress, r as SuperstateSwapNamespaceImpl, R as RequirementsNamespace, s as Requirement, t as RequirementsNamespaceImpl, u as Config, v as OAuthAccessToken, w as OffersNamespace, T as TokensNamespace, x as StablecoinSymbol, y as Erc20Asset, z as OfferDetail, D as TokenMetadata, F as OfferType, G as OndoSwapOfferDetail, H as CoinListTokenSaleOfferDetail, I as SuperstateSwapOfferDetail, J as Offer, K as RequirementStatusInfo, M as RequirementType, N as RequirementStatusValue, Q as OfferOptionAddress, V as RequirementId, X as KycLevelName, Y as DocumentSubmission, Z as WalletChallengeType, _ as PinoLoggerOptions, $ as OndoTradingStatus, a0 as AssetDecimals, a1 as BuildOndoBuyParams, a2 as BuildOndoSellParams, a3 as OndoQuote, a4 as OndoQuoteSize, a5 as TokenIdentifier, a6 as OfferOptionAddressId, a7 as TokenLogo } from '../tokens-namespace-BJfFeowE.cjs';
+export { a8 as DebugEvent, a9 as FrontlineEventId, aa as HttpError, ab as HttpResponse, ac as KycToken, ad as LogBinding, ae as LogBindings, af as LogCause, ag as LogLevel, ah as LogScope, ai as LogValue, aj as ProductionLogLevel, ak as RedactedWalletError, al as RequestId, am as RpcFailureReason, an as SafeEvent, ao as SafeFields, ap as UnredactedFields } from '../tokens-namespace-BJfFeowE.cjs';
+import { P as PKCEConfig, E as EvmWallet, S as SwapQuote, A as AssetIconUrl, a as ShortenedWalletAddress, F as FormattedAmountAssetUi, b as FormattedPercentUi, T as TxExplorerUrl, C as ConnectWallet, N as NonEmptyArray, c as TokenRegistrySnapshot } from '../token-registry-snapshot-DyjrA32p.cjs';
+export { B as BroadcastTxParams, d as EvmSigner, W as WriteContractParams } from '../token-registry-snapshot-DyjrA32p.cjs';
 import { Hash } from 'viem';
 import * as class_variance_authority_types from 'class-variance-authority/types';
 import { VariantProps } from 'class-variance-authority';
@@ -698,10 +698,24 @@ declare class ClientSupportNamespaceImpl implements ClientSupportNamespace {
 
 interface ClientConfig extends Config {
     /**
-     * The SDK user must provide this function. It is responsible for fetching a
-     * valid {@link OAuthAccessToken}, or **null** for logged-out users. If your
-     * backend is in TypeScript, it is recommended to use
-     * `CoinListServer#auth.getAccessToken` from `@/server/core/coinlist-server`.
+     * The SDK user must provide this function. It fetches a valid
+     * {@link OAuthAccessToken} from your backend. If your backend is in
+     * TypeScript, serve `CoinListServer#auth.getAccessToken` from it.
+     *
+     * Two answers, and they must not be confused:
+     *
+     * - **Resolve `null`** when there is no session - e.g. your endpoint
+     *   answered 204. After a 401 the SDK asks once more a second later before
+     *   it believes it, then signs the user out and calls
+     *   {@link Config.onSessionExpired}.
+     * - **Throw** when you could not find out - a 5xx, a network failure. The
+     *   SDK keeps its current auth state and fails only the request in hand.
+     *
+     * So a backend that answers "no session" for its own failures turns every
+     * outage into a logout. Map those to an error status and throw on it.
+     *
+     * The SDK calls this at most once at a time: concurrent requests that all
+     * need a new token share one call.
      */
     getAccessToken: () => Promise<OAuthAccessToken | null>;
     /**
@@ -810,6 +824,10 @@ interface CoinListClient {
      * the user's {@link AuthState}. This is called automatically by
      * {@link CoinListProvider}; you typically do not need to call it yourself
      * unless you are using the client outside of the provider.
+     *
+     * @throws whatever {@link ClientConfig.getAccessToken} throws. The auth
+     * state is then left as it was (`'unknown'` on a first call), since a
+     * failure to find out is not a logout.
      */
     init(): Promise<AuthState>;
 }

package/dist/client/index.d.ts

@@ -1,9 +1,9 @@
 import * as react from 'react';
 import { ReactNode, ButtonHTMLAttributes } from 'react';
-import { A as AuthorizationCode, C as CodeVerifier, L as Logger, W as WalletError, E as Erc20Namespace, a as EthereumChain, b as EvmContractAddress, B as BlockchainAmount, c as CoinListTokenSaleNamespace, O as OfferId, d as OfferOptionId, e as AssetId, P as Participation, f as CoinListTokenSaleNamespaceImpl, U as UniversalNamespaceContext, g as OndoNamespace, h as AssetSymbol, i as OfferSwapContract, j as OndoBuyTransaction, k as OndoSellTransaction, l as OndoSwapTransactionCore, m as OrderBookSide, n as OndoNamespaceImpl, S as SuperstateSwapNamespace, o as WalletsNamespace, p as Bps, q as EvmWalletAddress, r as SuperstateSwapNamespaceImpl, R as RequirementsNamespace, s as Requirement, t as RequirementsNamespaceImpl, u as Config, v as OAuthAccessToken, w as OffersNamespace, T as TokensNamespace, x as StablecoinSymbol, y as Erc20Asset, z as OfferDetail, D as TokenMetadata, F as OfferType, G as OndoSwapOfferDetail, H as CoinListTokenSaleOfferDetail, I as SuperstateSwapOfferDetail, J as Offer, K as RequirementStatusInfo, M as RequirementType, N as RequirementStatusValue, Q as OfferOptionAddress, V as RequirementId, X as KycLevelName, Y as DocumentSubmission, Z as WalletChallengeType, _ as PinoLoggerOptions, $ as OndoTradingStatus, a0 as AssetDecimals, a1 as BuildOndoBuyParams, a2 as BuildOndoSellParams, a3 as OndoQuote, a4 as OndoQuoteSize, a5 as TokenIdentifier, a6 as OfferOptionAddressId, a7 as TokenLogo } from '../tokens-namespace-CIWBtgt2.js';
-export { a8 as DebugEvent, a9 as FrontlineEventId, aa as HttpError, ab as HttpResponse, ac as KycToken, ad as LogBinding, ae as LogBindings, af as LogCause, ag as LogLevel, ah as LogScope, ai as LogValue, aj as ProductionLogLevel, ak as RedactedWalletError, al as RequestId, am as RpcFailureReason, an as SafeEvent, ao as SafeFields, ap as UnredactedFields } from '../tokens-namespace-CIWBtgt2.js';
-import { P as PKCEConfig, E as EvmWallet, S as SwapQuote, A as AssetIconUrl, a as ShortenedWalletAddress, F as FormattedAmountAssetUi, b as FormattedPercentUi, T as TxExplorerUrl, C as ConnectWallet, N as NonEmptyArray, c as TokenRegistrySnapshot } from '../token-registry-snapshot-BNBNuDu1.js';
-export { B as BroadcastTxParams, d as EvmSigner, W as WriteContractParams } from '../token-registry-snapshot-BNBNuDu1.js';
+import { A as AuthorizationCode, C as CodeVerifier, L as Logger, W as WalletError, E as Erc20Namespace, a as EthereumChain, b as EvmContractAddress, B as BlockchainAmount, c as CoinListTokenSaleNamespace, O as OfferId, d as OfferOptionId, e as AssetId, P as Participation, f as CoinListTokenSaleNamespaceImpl, U as UniversalNamespaceContext, g as OndoNamespace, h as AssetSymbol, i as OfferSwapContract, j as OndoBuyTransaction, k as OndoSellTransaction, l as OndoSwapTransactionCore, m as OrderBookSide, n as OndoNamespaceImpl, S as SuperstateSwapNamespace, o as WalletsNamespace, p as Bps, q as EvmWalletAddress, r as SuperstateSwapNamespaceImpl, R as RequirementsNamespace, s as Requirement, t as RequirementsNamespaceImpl, u as Config, v as OAuthAccessToken, w as OffersNamespace, T as TokensNamespace, x as StablecoinSymbol, y as Erc20Asset, z as OfferDetail, D as TokenMetadata, F as OfferType, G as OndoSwapOfferDetail, H as CoinListTokenSaleOfferDetail, I as SuperstateSwapOfferDetail, J as Offer, K as RequirementStatusInfo, M as RequirementType, N as RequirementStatusValue, Q as OfferOptionAddress, V as RequirementId, X as KycLevelName, Y as DocumentSubmission, Z as WalletChallengeType, _ as PinoLoggerOptions, $ as OndoTradingStatus, a0 as AssetDecimals, a1 as BuildOndoBuyParams, a2 as BuildOndoSellParams, a3 as OndoQuote, a4 as OndoQuoteSize, a5 as TokenIdentifier, a6 as OfferOptionAddressId, a7 as TokenLogo } from '../tokens-namespace-BJfFeowE.js';
+export { a8 as DebugEvent, a9 as FrontlineEventId, aa as HttpError, ab as HttpResponse, ac as KycToken, ad as LogBinding, ae as LogBindings, af as LogCause, ag as LogLevel, ah as LogScope, ai as LogValue, aj as ProductionLogLevel, ak as RedactedWalletError, al as RequestId, am as RpcFailureReason, an as SafeEvent, ao as SafeFields, ap as UnredactedFields } from '../tokens-namespace-BJfFeowE.js';
+import { P as PKCEConfig, E as EvmWallet, S as SwapQuote, A as AssetIconUrl, a as ShortenedWalletAddress, F as FormattedAmountAssetUi, b as FormattedPercentUi, T as TxExplorerUrl, C as ConnectWallet, N as NonEmptyArray, c as TokenRegistrySnapshot } from '../token-registry-snapshot-C1NxdBmF.js';
+export { B as BroadcastTxParams, d as EvmSigner, W as WriteContractParams } from '../token-registry-snapshot-C1NxdBmF.js';
 import { Hash } from 'viem';
 import * as class_variance_authority_types from 'class-variance-authority/types';
 import { VariantProps } from 'class-variance-authority';
@@ -698,10 +698,24 @@ declare class ClientSupportNamespaceImpl implements ClientSupportNamespace {
 
 interface ClientConfig extends Config {
     /**
-     * The SDK user must provide this function. It is responsible for fetching a
-     * valid {@link OAuthAccessToken}, or **null** for logged-out users. If your
-     * backend is in TypeScript, it is recommended to use
-     * `CoinListServer#auth.getAccessToken` from `@/server/core/coinlist-server`.
+     * The SDK user must provide this function. It fetches a valid
+     * {@link OAuthAccessToken} from your backend. If your backend is in
+     * TypeScript, serve `CoinListServer#auth.getAccessToken` from it.
+     *
+     * Two answers, and they must not be confused:
+     *
+     * - **Resolve `null`** when there is no session - e.g. your endpoint
+     *   answered 204. After a 401 the SDK asks once more a second later before
+     *   it believes it, then signs the user out and calls
+     *   {@link Config.onSessionExpired}.
+     * - **Throw** when you could not find out - a 5xx, a network failure. The
+     *   SDK keeps its current auth state and fails only the request in hand.
+     *
+     * So a backend that answers "no session" for its own failures turns every
+     * outage into a logout. Map those to an error status and throw on it.
+     *
+     * The SDK calls this at most once at a time: concurrent requests that all
+     * need a new token share one call.
      */
     getAccessToken: () => Promise<OAuthAccessToken | null>;
     /**
@@ -810,6 +824,10 @@ interface CoinListClient {
      * the user's {@link AuthState}. This is called automatically by
      * {@link CoinListProvider}; you typically do not need to call it yourself
      * unless you are using the client outside of the provider.
+     *
+     * @throws whatever {@link ClientConfig.getAccessToken} throws. The auth
+     * state is then left as it was (`'unknown'` on a first call), since a
+     * failure to find out is not a logout.
      */
     init(): Promise<AuthState>;
 }

package/dist/client/index.js

@@ -4,8 +4,10 @@ import {
   PINO_LEVEL,
   SDK_LOGGER_NAME,
   loggerOverPino,
-  publicClients
-} from "../chunk-C6F5FOFP.js";
+  notifySessionExpired,
+  publicClients,
+  systemDelay
+} from "../chunk-STAHYDLY.js";
 import {
   AuthorizationCode,
   CodeVerifier,
@@ -39,7 +41,7 @@ import {
   ondoQuoteOfferDeadline,
   superstateSwapContractAddress,
   swapSpender
-} from "../chunk-3UQPCAU4.js";
+} from "../chunk-KRA6EM2L.js";
 import {
   API_VERSION,
   AssetDecimals,
@@ -58,6 +60,7 @@ import {
   HEADER_USER_AGENT,
   HttpError,
   KycToken,
+  Millis,
   NA_AMOUNT_ASSET_UI,
   NotAuthenticatedError,
   OAUTH_PAGE_PATH,
@@ -67,6 +70,7 @@ import {
   RequirementsNamespaceImpl,
   SUPERSTATE_SWAP_ABI,
   SUPPORT_NEW_TICKET_URL,
+  SentWith,
   SuperstateSwapNamespaceImpl,
   TokensNamespaceImpl,
   VERIFY_IDENTITY_ACCREDITATION_PATH,
@@ -85,11 +89,12 @@ import {
   getNetworkName,
   getUUIDv4,
   internalLogger,
+  isRejectedToken,
   parseBlockchainAmount,
   shortenAddress,
   txExplorerUrl,
   usdAmount
-} from "../chunk-IRV5YU42.js";
+} from "../chunk-BNMF2HMW.js";
 
 // src/client/CoinListProvider.tsx
 import {
@@ -149,6 +154,159 @@ var ApiClient = class {
   }
 };
 
+// src/client/core/auth/client-access-token.ts
+var CONFIRM_DELAY = Millis.of(1e3);
+var Generation = {
+  initial: 0,
+  next: (generation) => generation + 1
+};
+var ClientAccessToken = class {
+  constructor(env) {
+    this.env = env;
+    this.state = { type: "unknown" };
+    this.hostCall = null;
+    /**
+     * Bumped by {@link clear}. A host call that started before a logout must not
+     * log the user back in when it lands, so every write checks it first. A 401
+     * that arrives after the logout never starts one: `'logged-out'` refuses it.
+     */
+    this.generation = Generation.initial;
+    this.log = internalLogger(env.logger, "AUTH").child({
+      op: "getAccessToken"
+    });
+  }
+  authState() {
+    return this.state.type;
+  }
+  /**
+   * Asks the host for the current token, whatever is cached.
+   *
+   * Never answers from a host call already in flight: one started before a
+   * login (the mount's `init()`, racing the OAuth callback's) would hand back
+   * the answer from before the session cookie existed. It waits for that call
+   * to settle instead, so that call's verdict still lands, then asks afresh.
+   * A logout while it waits still wins.
+   *
+   * @throws whatever the host's `getAccessToken` throws.
+   */
+  async load() {
+    const generation = this.generation;
+    if (this.hostCall !== null) {
+      await this.hostCall.catch(() => null);
+    }
+    await this.ask(SentWith.noUserToken, generation);
+    return this.authState();
+  }
+  /**
+   * The HTTP pipeline's token source: see {@link TokenTrigger}.
+   *
+   * @throws whatever the host's `getAccessToken` throws.
+   */
+  async get(trigger) {
+    const decision = decideToken(this.state, trigger);
+    switch (decision.type) {
+      case "serve":
+        return decision.token;
+      case "ask":
+        return this.ask(decision.rejected, this.generation);
+    }
+  }
+  /** Forgets the token: `auth.logout()`. Never an expiry, so never notifies. */
+  clear() {
+    this.generation = Generation.next(this.generation);
+    this.hostCall = null;
+    this.state = { type: "logged-out" };
+  }
+  /**
+   * A request that carried no user token was not refused for a token, so the
+   * host's first answer stands. One that was is confirmed before it is
+   * believed.
+   */
+  async ask(rejected, generation) {
+    if (generation !== this.generation) {
+      return currentToken(this.state);
+    }
+    const first = await this.callHost();
+    switch (rejected.type) {
+      case "no-user-token":
+        return this.commit(first, generation);
+      case "user-token":
+        return isFresh(first, rejected) ? this.commit(first, generation) : this.confirm(rejected, generation);
+    }
+  }
+  async confirm(rejected, generation) {
+    this.log.warn(() => ({
+      msg: "host returned no fresh token; asking again before signing out"
+    }));
+    await this.env.delay(CONFIRM_DELAY);
+    const second = await this.callHost();
+    return isFresh(second, rejected) ? this.commit(second, generation) : this.expire(generation);
+  }
+  /** The host's `getAccessToken`, joining a call already in flight. */
+  callHost() {
+    if (this.hostCall !== null) {
+      this.log.debug(() => ({ msg: "joined a host call already in flight" }));
+      return this.hostCall;
+    }
+    const call = (async () => this.env.getAccessToken())().finally(() => {
+      if (this.hostCall === call) {
+        this.hostCall = null;
+      }
+    });
+    this.hostCall = call;
+    return call;
+  }
+  commit(token, generation) {
+    if (generation !== this.generation) {
+      return currentToken(this.state);
+    }
+    this.state = token === null ? { type: "logged-out" } : { type: "logged-in", token };
+    return token;
+  }
+  expire(generation) {
+    if (generation !== this.generation) {
+      return null;
+    }
+    const wasLoggedIn = this.state.type === "logged-in";
+    this.state = { type: "logged-out" };
+    if (wasLoggedIn) {
+      this.log.info(() => ({ msg: "session expired" }));
+      notifySessionExpired(this.env.onSessionExpired, this.log);
+    }
+    return null;
+  }
+};
+function decideToken(state, trigger) {
+  switch (trigger.type) {
+    case "before-request":
+      return state.type === "unknown" ? { type: "ask", rejected: SentWith.noUserToken } : { type: "serve", token: currentToken(state) };
+    case "after-401":
+      switch (state.type) {
+        // A logout or an expiry verdict: only `load()` may log back in, so a
+        // 401 to a request sent before it must not ask the host again.
+        case "logged-out":
+          return { type: "serve", token: null };
+        // Another request may already have renewed since this one was sent.
+        case "logged-in":
+          return isRejectedToken(state.token, trigger.rejected) ? { type: "ask", rejected: trigger.rejected } : { type: "serve", token: state.token };
+        case "unknown":
+          return { type: "ask", rejected: trigger.rejected };
+      }
+  }
+}
+function currentToken(state) {
+  switch (state.type) {
+    case "logged-in":
+      return state.token;
+    case "unknown":
+    case "logged-out":
+      return null;
+  }
+}
+function isFresh(token, rejected) {
+  return token !== null && !isRejectedToken(token, rejected);
+}
+
 // src/client/core/auth/client-auth-namespace.ts
 var OAUTH_STATE_KEY = "coinlist.oauth_state";
 var OAUTH_CODE_VERIFIER_KEY = "coinlist.oauth_code_verifier";
@@ -963,35 +1121,38 @@ var ClientSupportNamespaceImpl = class {
 
 // src/client/core/coinlist-client.ts
 var CoinListClientImpl = class {
-  constructor(_config) {
-    this._config = _config;
-    /** Cached access token: undefined = loading, null = no token, AccessToken = logged in */
-    this._accessToken = void 0;
-    const logger = _config.logger ?? null;
+  constructor(config) {
+    this.config = config;
+    const logger = config.logger ?? null;
+    const accessToken = new ClientAccessToken({
+      getAccessToken: () => config.getAccessToken(),
+      onSessionExpired: config.onSessionExpired,
+      logger,
+      ...systemDelay
+    });
+    this.accessToken = accessToken;
     this.api = new ApiClient(
       {
-        baseUrl: _config.baseUrl || PUBLIC_API_BASE_URL,
+        baseUrl: config.baseUrl || PUBLIC_API_BASE_URL,
         xApiVersion: API_VERSION
       },
-      this.fetchAccessToken.bind(this),
+      (trigger) => accessToken.get(trigger),
       logger
     );
     const ctx = {
       api: this.api,
-      rpc: publicClients(this.api, _config.rpc, _config.logger ?? null),
+      rpc: publicClients(this.api, config.rpc, config.logger ?? null),
       logger,
       ensureUserAuthenticated: async () => this.ensureAuthenticated()
     };
-    this.auth = new ClientAuthNamespaceImpl(_config, {
-      getState: () => this.getAuthState(),
-      clearAccessToken: () => {
-        this._accessToken = null;
-      }
+    this.auth = new ClientAuthNamespaceImpl(config, {
+      getState: () => accessToken.authState(),
+      clearAccessToken: () => accessToken.clear()
     });
     this.offers = new OffersNamespaceImpl(ctx);
     this.requirements = new ClientRequirementsNamespaceImpl(
       ctx,
-      _config.coinlistBaseUrl
+      config.coinlistBaseUrl
     );
     this.wallets = new WalletsNamespaceImpl(ctx);
     this.erc20 = new Erc20NamespaceImpl(ctx);
@@ -1003,34 +1164,16 @@ var CoinListClientImpl = class {
     );
     this.ondo = new ClientOndoNamespaceImpl(ctx, this.erc20);
     this.tokens = new TokensNamespaceImpl(
-      _config.tokensBaseUrl ?? NABU_BASE_URL,
+      config.tokensBaseUrl ?? NABU_BASE_URL,
       logger
     );
     this.support = new ClientSupportNamespaceImpl(logger);
   }
   async init() {
-    await this.fetchAccessToken(true);
-    return this.getAuthState();
-  }
-  async fetchAccessToken(refresh) {
-    if (!refresh && this._accessToken !== void 0) return this._accessToken;
-    try {
-      const accessToken = await this._config.getAccessToken();
-      this._accessToken = accessToken;
-      return accessToken;
-    } catch (_) {
-      this._accessToken = null;
-      return null;
-    }
-  }
-  getAuthState() {
-    if (this._accessToken === void 0) {
-      return "unknown";
-    }
-    return this._accessToken !== null ? "logged-in" : "logged-out";
+    return this.accessToken.load();
   }
   ensureAuthenticated() {
-    if (this.getAuthState() !== "logged-in") {
+    if (this.accessToken.authState() !== "logged-in") {
       throw new NotAuthenticatedError();
     }
   }