@crossmint/client-sdk-auth 1.0.0 → 1.1.1

package/dist/chunk-WQOH66RU.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/CrossmintAuthClient.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AACA;AAAA,EACI;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACG;AAEP,SAA+B,iBAAiB;AAQzC,IAAM,sBAAN,MAAM,6BAA4B,cAAc;AAAA,EAM3C,YAAY,WAAsB,WAA+B,SAAoC,CAAC,GAAG;AA3BrH;AA4BQ,UAAM,WAAW,WAAW,MAAM;AALtC,SAAQ,cAAsC;AAC9C,SAAQ,iBAAuD;AAK3D,SAAK,aAAY,YAAO,cAAP,YAAoB,CAAC;AACtC,SAAK,eAAc,YAAO,gBAAP,YAAsB;AAAA,EAC7C;AAAA,EAEA,OAAc,KAAK,WAAsB,SAAoC,CAAC,GAAwB;AAClG,UAAM,aAAa,IAAI,qBAAoB,WAAW,cAAc,iBAAiB,SAAS,GAAG,MAAM;AAEvG,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,0BAA0B;AAAA,IACzC;AACA,WAAO;AAAA,EACX;AAAA,EAEa,UAAU;AAAA;AACnB,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,OAAO,qBAAqB,kBAAkB;AAAA,UACpF,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,yBAAyB,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACrF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEO,kBAAkB,cAAoC;AACzD,cAAU,gBAAgB,aAAa,GAAG;AAC1C,cAAU,sBAAsB,aAAa,aAAa,QAAQ,aAAa,aAAa,SAAS;AAAA,EACzG;AAAA,EAEa,SAAS;AAAA;AAjE1B;AAmEQ,YAAM,kBAAkB,UAAU,oBAAoB;AAGtD,mBAAa,oBAAoB;AACjC,mBAAa,cAAc;AAC3B,uBAAK,WAAU,aAAf;AACA,UAAI;AACA,YAAI,KAAK,eAAe,MAAM;AAC1B,gBAAM,KAAK,sBAAsB;AAAA,QACrC,WAAW,mBAAmB,MAAM;AAChC,gBAAM,KAAK,uBAAuB,eAAe;AAAA,QACrD;AAAA,MACJ,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AAAA,MACvB;AAAA,IACJ;AAAA;AAAA,EAEa,0BAA0B,oBAA4C;AAAA;AApFvF;AAqFQ,YAAM,eAAe,kDAAsB,UAAU,oBAAoB;AAEzE,UAAI,gBAAgB,QAAQ,KAAK,gBAAgB,MAAM;AACnD;AAAA,MACJ;AAEA,UAAI;AAEA,YAAI,KAAK,kBAAkB,MAAM;AAC7B,eAAK,iBAAiB,KAAK,oBAAoB,YAAY;AAAA,QAC/D;AACA,cAAM,eAAe,MAAM,KAAK;AAGhC,YAAI,KAAK,gBAAgB,MAAM;AAC3B,eAAK,kBAAkB,YAAY;AAAA,QACvC;AAEA,yBAAK,WAAU,mBAAf,4BAAgC;AAEhC,aAAK,oBAAoB,aAAa,GAAG;AAAA,MAC7C,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AACnB,aAAK,OAAO;AAAA,MAChB,UAAE;AACE,aAAK,iBAAiB;AAAA,MAC1B;AAAA,IACJ;AAAA;AAAA,EAEa,YAAY,UAAyB;AAAA;AAC9C,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,GAAG,sBAAsB,WAAW,QAAQ,UAAU;AAAA,UAC5F,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,eAAO,KAAK;AAAA,MAChB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,QAAQ,KAAK,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjH;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,aAAa,OAAe;AAAA;AACrC,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,cAAc;AAAA,UAC9E,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,QAClC,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACzF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,gBAAgB,OAAe,SAAiB,OAAe;AAAA;AACxE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC;AAAA,UACA,4BAA4B;AAAA,UAC5B;AAAA,UACA,QAAQ;AAAA,UACR,OAAO;AAAA,QACX,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,gCAAgC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QAC5F;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,oBAAoB,MAAqB;AAAA;AAClD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC,4BAA4B;AAAA,UAC5B,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,QACpE,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,iCACd,OADc;AAAA,YAEjB,QAAQ,KAAK,gBAAgB;AAAA,YAC7B,UAAU;AAAA,YACV,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,UACpE,EAAC;AAAA,QACL,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,sBAAsB,SAAiB;AAAA;AAChD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,sCAAsC,WAAW;AAAA,UAC1E;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,QAAQ,CAAC;AAAA,UACnD;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,4CAA4C,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACxG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,wBAAwB,SAAiB,WAAmB;AAAA;AACrE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,gCAAgC,WAAW;AAAA,UACpE;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,SAAS,UAAU,CAAC;AAAA,UAC9D;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACpG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEc,wBAA2C;AAAA;AACrD,UAAI,CAAC,KAAK,aAAa;AACnB,cAAM,IAAI,MAAM,gCAAgC;AAAA,MACpD;AAEA,aAAO,MAAM,MAAM,KAAK,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC3D;AAAA;AAAA,EAEQ,oBAAoB,KAAmB;AAC3C,UAAM,gBAAgB,iBAAiB,GAAG;AAC1C,QAAI,CAAC,eAAe;AAChB,YAAM,IAAI,MAAM,aAAa;AAAA,IACjC;AAEA,UAAM,cAAc,KAAK,IAAI,IAAI;AACjC,UAAM,eAAe,gBAAgB,cAAc;AAEnD,QAAI,eAAe,GAAG;AAClB,YAAM,UAAU,KAAK,IAAI,IAAI,eAAe;AAC5C,WAAK,uBAAuB;AAC5B,WAAK,cAAc,UAAU,MAAM,KAAK,0BAA0B,GAAG,OAAO;AAAA,IAChF;AAAA,EACJ;AAAA,EAEQ,yBAA+B;AACnC,QAAI,KAAK,aAAa;AAClB,WAAK,YAAY,OAAO;AACxB,WAAK,cAAc;AAAA,IACvB;AAAA,EACJ;AACJ","sourcesContent":["import type { UseSignInData } from \"@farcaster/auth-kit\";\nimport {\n    AUTH_SDK_ROOT_ENDPOINT,\n    type AuthMaterialWithUser,\n    CROSSMINT_API_VERSION,\n    CrossmintAuth,\n    CrossmintAuthenticationError,\n    type CrossmintAuthOptions,\n    type OAuthProvider,\n    REFRESH_TOKEN_PREFIX,\n    SESSION_PREFIX,\n} from \"@crossmint/common-sdk-auth\";\nimport type { Crossmint, CrossmintApiClient } from \"@crossmint/common-sdk-base\";\nimport { type CancellableTask, queueTask } from \"@crossmint/client-sdk-base\";\nimport { deleteCookie, getCookie, getJWTExpiration, setCookie, TIME_BEFORE_EXPIRING_JWT_IN_SECONDS } from \"./utils\";\n\ntype CrossmintAuthClientConfig = CrossmintAuthOptions & {\n    callbacks?: CrossmintAuthClientCallbacks;\n    logoutRoute?: string;\n};\n\nexport class CrossmintAuthClient extends CrossmintAuth {\n    private callbacks: CrossmintAuthClientCallbacks;\n    private refreshTask: CancellableTask | null = null;\n    private refreshPromise: Promise<AuthMaterialWithUser> | null = null;\n    private logoutRoute: string | null;\n\n    private constructor(crossmint: Crossmint, apiClient: CrossmintApiClient, config: CrossmintAuthClientConfig = {}) {\n        super(crossmint, apiClient, config);\n        this.callbacks = config.callbacks ?? {};\n        this.logoutRoute = config.logoutRoute ?? null;\n    }\n\n    public static from(crossmint: Crossmint, config: CrossmintAuthClientConfig = {}): CrossmintAuthClient {\n        const authClient = new CrossmintAuthClient(crossmint, CrossmintAuth.defaultApiClient(crossmint), config);\n        // In case an instance is created on the server, we can't refresh as this stores cookies\n        if (typeof window !== \"undefined\") {\n            authClient.handleRefreshAuthMaterial();\n        }\n        return authClient;\n    }\n\n    public async getUser() {\n        try {\n            const response = await this.apiClient.get(`api/${CROSSMINT_API_VERSION}/sdk/auth/user`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to fetch user: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public storeAuthMaterial(authMaterial: AuthMaterialWithUser) {\n        setCookie(SESSION_PREFIX, authMaterial.jwt);\n        setCookie(REFRESH_TOKEN_PREFIX, authMaterial.refreshToken.secret, authMaterial.refreshToken.expiresAt);\n    }\n\n    public async logout() {\n        // Store the old refresh token to pass it to the logout route before deleting the cookies\n        const oldRefreshToken = getCookie(REFRESH_TOKEN_PREFIX);\n\n        // Even if there's a server error, we want to clear the cookies and we do it first to load faster\n        deleteCookie(REFRESH_TOKEN_PREFIX);\n        deleteCookie(SESSION_PREFIX);\n        this.callbacks.onLogout?.();\n        try {\n            if (this.logoutRoute != null) {\n                await this.logoutFromCustomRoute();\n            } else if (oldRefreshToken != null) {\n                await this.logoutFromDefaultRoute(oldRefreshToken);\n            }\n        } catch (error) {\n            console.error(error);\n        }\n    }\n\n    public async handleRefreshAuthMaterial(refreshTokenSecret?: string): Promise<void> {\n        const refreshToken = refreshTokenSecret ?? getCookie(REFRESH_TOKEN_PREFIX);\n        // If there is a custom refresh route, that endpoint will fetch the cookies itself\n        if (refreshToken == null && this.refreshRoute == null) {\n            return;\n        }\n\n        try {\n            // Create new refresh promise if none exists\n            if (this.refreshPromise == null) {\n                this.refreshPromise = this.refreshAuthMaterial(refreshToken);\n            }\n            const authMaterial = await this.refreshPromise;\n\n            // If a custom refresh route is set, storing in cookies is handled in the server\n            if (this.refreshRoute == null) {\n                this.storeAuthMaterial(authMaterial);\n            }\n\n            this.callbacks.onTokenRefresh?.(authMaterial);\n\n            this.scheduleNextRefresh(authMaterial.jwt);\n        } catch (error) {\n            console.error(error);\n            this.logout();\n        } finally {\n            this.refreshPromise = null;\n        }\n    }\n\n    public async getOAuthUrl(provider: OAuthProvider) {\n        try {\n            const response = await this.apiClient.get(`${AUTH_SDK_ROOT_ENDPOINT}/social/${provider}/start`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const data = await response.json();\n            return data.oauthUrl;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to get OAuth URL for provider ${provider}: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async sendEmailOtp(email: string) {\n        try {\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/otps/send`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({ email }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to send email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async confirmEmailOtp(email: string, emailId: string, token: string) {\n        try {\n            const queryParams = new URLSearchParams({\n                email,\n                signinAuthenticationMethod: \"email\",\n                token,\n                locale: \"en\",\n                state: emailId,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to confirm email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithFarcaster(data: UseSignInData) {\n        try {\n            const queryParams = new URLSearchParams({\n                signinAuthenticationMethod: \"farcaster\",\n                callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({\n                    ...data,\n                    domain: data.signatureParams.domain,\n                    redirect: true,\n                    callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,\n                }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to sign in with Farcaster: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithSmartWallet(address: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate/start?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to initiate smart wallet sign in: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async authenticateSmartWallet(address: string, signature: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address, signature }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to authenticate smart wallet: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    private async logoutFromCustomRoute(): Promise<Response> {\n        if (!this.logoutRoute) {\n            throw new Error(\"Custom logout route is not set\");\n        }\n\n        return await fetch(this.logoutRoute, { method: \"POST\" });\n    }\n\n    private scheduleNextRefresh(jwt: string): void {\n        const jwtExpiration = getJWTExpiration(jwt);\n        if (!jwtExpiration) {\n            throw new Error(\"Invalid JWT\");\n        }\n\n        const currentTime = Date.now() / 1000;\n        const timeToExpire = jwtExpiration - currentTime - TIME_BEFORE_EXPIRING_JWT_IN_SECONDS;\n\n        if (timeToExpire > 0) {\n            const endTime = Date.now() + timeToExpire * 1000;\n            this.cancelScheduledRefresh();\n            this.refreshTask = queueTask(() => this.handleRefreshAuthMaterial(), endTime);\n        }\n    }\n\n    private cancelScheduledRefresh(): void {\n        if (this.refreshTask) {\n            this.refreshTask.cancel();\n            this.refreshTask = null;\n        }\n    }\n}\n\ntype CrossmintAuthClientCallbacks = {\n    onTokenRefresh?: (authMaterial: AuthMaterialWithUser) => void;\n    onLogout?: () => void;\n};\n"]}

package/dist/index.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkILL57KWXcjs = require('./chunk-ILL57KWX.cjs');
+var _chunkWQOH66RUcjs = require('./chunk-WQOH66RU.cjs');
 require('./chunk-VQ3HTIQ3.cjs');
 
 
@@ -25,5 +25,5 @@ var _commonsdkbase = require('@crossmint/common-sdk-base');
 
 
 
-exports.CrossmintAuth = _chunkILL57KWXcjs.CrossmintAuthClient; exports.TIME_BEFORE_EXPIRING_JWT_IN_SECONDS = _chunkTIUX4OOQcjs.TIME_BEFORE_EXPIRING_JWT_IN_SECONDS; exports.createCrossmint = _commonsdkbase.createCrossmint; exports.deleteCookie = _chunkBGMXXFQ4cjs.deleteCookie; exports.getCookie = _chunkBGMXXFQ4cjs.getCookie; exports.getJWTExpiration = _chunkQY4RIGNMcjs.getJWTExpiration; exports.setCookie = _chunkBGMXXFQ4cjs.setCookie;
+exports.CrossmintAuth = _chunkWQOH66RUcjs.CrossmintAuthClient; exports.TIME_BEFORE_EXPIRING_JWT_IN_SECONDS = _chunkTIUX4OOQcjs.TIME_BEFORE_EXPIRING_JWT_IN_SECONDS; exports.createCrossmint = _commonsdkbase.createCrossmint; exports.deleteCookie = _chunkBGMXXFQ4cjs.deleteCookie; exports.getCookie = _chunkBGMXXFQ4cjs.getCookie; exports.getJWTExpiration = _chunkQY4RIGNMcjs.getJWTExpiration; exports.setCookie = _chunkBGMXXFQ4cjs.setCookie;
 //# sourceMappingURL=index.cjs.map

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   CrossmintAuthClient
-} from "./chunk-7YATBCAU.js";
+} from "./chunk-5KJPKQDF.js";
 import "./chunk-TOXKCKTY.js";
 import {
   TIME_BEFORE_EXPIRING_JWT_IN_SECONDS

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossmint/client-sdk-auth",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "repository": "https://github.com/Crossmint/crossmint-sdk",
   "license": "Apache-2.0",
   "author": "Paella Labs Inc",
@@ -22,12 +22,12 @@
     "jwt-decode": "4.0.0",
     "@farcaster/auth-kit": "0.6.0",
     "@crossmint/client-sdk-base": "1.3.2",
-    "@crossmint/common-sdk-auth": "1.0.0",
+    "@crossmint/common-sdk-auth": "1.0.1",
     "@crossmint/common-sdk-base": "0.3.0"
   },
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
-    "test": "vitest run"
+    "test:vitest": "vitest run"
   }
 }

package/src/CrossmintAuthClient.test.ts

@@ -53,6 +53,7 @@ describe("CrossmintAuthClient", () => {
             const mockUserData = { id: "user123", email: "user@example.com" };
             mockApiClient.get.mockResolvedValue({
                 json: () => Promise.resolve(mockUserData),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.getUser();
@@ -145,6 +146,7 @@ describe("CrossmintAuthClient", () => {
             vi.spyOn(crossmintAuthClient as any, "storeAuthMaterial").mockImplementation(() => {});
             vi.mocked(getJWTExpiration).mockReturnValue(Date.now() / 1000 + 3600); // 1 hour from now
             vi.mocked(queueTask).mockReturnValue({ cancel: vi.fn() } as any);
+            (crossmintAuthClient as any).refreshPromise = null;
         });
 
         it("should refresh auth material and schedule next refresh", async () => {
@@ -161,11 +163,13 @@ describe("CrossmintAuthClient", () => {
             expect(queueTask).toHaveBeenCalledWith(expect.any(Function), expect.any(Number));
         });
 
-        it("should not refresh if already refreshing", async () => {
-            (crossmintAuthClient as any).isRefreshing = true;
-            await crossmintAuthClient.handleRefreshAuthMaterial(mockRefreshToken);
+        it("should not refresh when called twice in a row", async () => {
+            const promise1 = crossmintAuthClient.handleRefreshAuthMaterial(mockRefreshToken);
+            const promise2 = crossmintAuthClient.handleRefreshAuthMaterial(mockRefreshToken);
 
-            expect(crossmintAuthClient["refreshAuthMaterial"]).not.toHaveBeenCalled();
+            await Promise.all([promise1, promise2]);
+
+            expect(crossmintAuthClient["refreshAuthMaterial"]).toHaveBeenCalledTimes(1);
         });
 
         it("should call onTokenRefresh callback if provided", async () => {
@@ -249,6 +253,7 @@ describe("CrossmintAuthClient", () => {
             const mockOAuthUrl = "https://oauth.example.com/auth";
             mockApiClient.get.mockResolvedValue({
                 json: () => Promise.resolve({ oauthUrl: mockOAuthUrl }),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.getOAuthUrl(mockProvider);
@@ -267,6 +272,7 @@ describe("CrossmintAuthClient", () => {
             const mockResponse = { success: true };
             mockApiClient.post.mockResolvedValue({
                 json: () => Promise.resolve(mockResponse),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.sendEmailOtp(mockEmail);
@@ -288,7 +294,8 @@ describe("CrossmintAuthClient", () => {
             const mockToken = "otp-token-456";
             const mockOneTimeSecret = "one-time-secret-789";
             mockApiClient.post.mockResolvedValue({
-                json: () => Promise.resolve({ callbackUrl: `https://example.com?oneTimeSecret=${mockOneTimeSecret}` }),
+                json: () => Promise.resolve({ oneTimeSecret: mockOneTimeSecret }),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.confirmEmailOtp(mockEmail, mockEmailId, mockToken);
@@ -310,13 +317,14 @@ describe("CrossmintAuthClient", () => {
             };
             const mockOneTimeSecret = "farcaster-one-time-secret-123";
             mockApiClient.post.mockResolvedValue({
-                json: () => Promise.resolve({ callbackUrl: `https://example.com?oneTimeSecret=${mockOneTimeSecret}` }),
+                json: () => Promise.resolve({ oneTimeSecret: mockOneTimeSecret }),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.signInWithFarcaster(mockFarcasterData as StatusAPIResponse);
 
             expect(result).toBe(mockOneTimeSecret);
-            const expectedCallbackUrl = `https://api.crossmint.com/api/2024-09-26/session/sdk/auth/callback?isPopup=false`;
+            const expectedCallbackUrl = `https://api.crossmint.com/api/2024-09-26/session/sdk/auth/callback`;
             const queryParams = new URLSearchParams({
                 signinAuthenticationMethod: "farcaster",
                 callbackUrl: expectedCallbackUrl,
@@ -347,6 +355,7 @@ describe("CrossmintAuthClient", () => {
             };
             mockApiClient.post.mockResolvedValue({
                 json: () => Promise.resolve(mockResponse),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.signInWithSmartWallet(mockAddress);
@@ -356,7 +365,7 @@ describe("CrossmintAuthClient", () => {
                 signinAuthenticationMethod: "evm",
             });
             expect(mockApiClient.post).toHaveBeenCalledWith(
-                `https://api.crossmint.com/api/2024-09-26/session/sdk/auth/crypto_wallets/authenticate/start?${queryParams}`,
+                `api/2024-09-26/session/sdk/auth/crypto_wallets/authenticate/start?${queryParams}`,
                 expect.objectContaining({
                     body: JSON.stringify({ walletAddress: mockAddress }),
                     headers: {
@@ -380,6 +389,7 @@ describe("CrossmintAuthClient", () => {
             };
             mockApiClient.post.mockResolvedValue({
                 json: () => Promise.resolve(mockResponse),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.authenticateSmartWallet(mockAddress, mockSignature);
@@ -387,7 +397,6 @@ describe("CrossmintAuthClient", () => {
             expect(result).toEqual(mockResponse);
             const queryParams = new URLSearchParams({
                 signinAuthenticationMethod: "evm",
-                callbackUrl: `https://api.crossmint.com/api/2024-09-26/session/sdk/auth/we-dont-actually-use-this-anymore`,
             });
             expect(mockApiClient.post).toHaveBeenCalledWith(
                 `api/2024-09-26/session/sdk/auth/crypto_wallets/authenticate?${queryParams}`,

package/src/CrossmintAuthClient.ts

@@ -4,6 +4,7 @@ import {
     type AuthMaterialWithUser,
     CROSSMINT_API_VERSION,
     CrossmintAuth,
+    CrossmintAuthenticationError,
     type CrossmintAuthOptions,
     type OAuthProvider,
     REFRESH_TOKEN_PREFIX,
@@ -21,7 +22,7 @@ type CrossmintAuthClientConfig = CrossmintAuthOptions & {
 export class CrossmintAuthClient extends CrossmintAuth {
     private callbacks: CrossmintAuthClientCallbacks;
     private refreshTask: CancellableTask | null = null;
-    private isRefreshing = false;
+    private refreshPromise: Promise<AuthMaterialWithUser> | null = null;
     private logoutRoute: string | null;
 
     private constructor(crossmint: Crossmint, apiClient: CrossmintApiClient, config: CrossmintAuthClientConfig = {}) {
@@ -40,14 +41,21 @@ export class CrossmintAuthClient extends CrossmintAuth {
     }
 
     public async getUser() {
-        const result = await this.apiClient.get(`api/${CROSSMINT_API_VERSION}/sdk/auth/user`, {
-            headers: {
-                "Content-Type": "application/json",
-            },
-        });
-
-        const user = await result.json();
-        return user;
+        try {
+            const response = await this.apiClient.get(`api/${CROSSMINT_API_VERSION}/sdk/auth/user`, {
+                headers: { "Content-Type": "application/json" },
+            });
+
+            if (!response.ok) {
+                throw await response.text();
+            }
+
+            return await response.json();
+        } catch (error) {
+            throw new CrossmintAuthenticationError(
+                `Failed to fetch user: ${error instanceof Error ? error.message : "Unknown error"}`
+            );
+        }
     }
 
     public storeAuthMaterial(authMaterial: AuthMaterialWithUser) {
@@ -56,32 +64,37 @@ export class CrossmintAuthClient extends CrossmintAuth {
     }
 
     public async logout() {
-        // Even if there's a server error, we want to clear the cookies
+        // Store the old refresh token to pass it to the logout route before deleting the cookies
+        const oldRefreshToken = getCookie(REFRESH_TOKEN_PREFIX);
+
+        // Even if there's a server error, we want to clear the cookies and we do it first to load faster
+        deleteCookie(REFRESH_TOKEN_PREFIX);
+        deleteCookie(SESSION_PREFIX);
+        this.callbacks.onLogout?.();
         try {
             if (this.logoutRoute != null) {
                 await this.logoutFromCustomRoute();
-            } else {
-                await this.logoutFromDefaultRoute(getCookie(REFRESH_TOKEN_PREFIX));
+            } else if (oldRefreshToken != null) {
+                await this.logoutFromDefaultRoute(oldRefreshToken);
             }
         } catch (error) {
             console.error(error);
-        } finally {
-            deleteCookie(REFRESH_TOKEN_PREFIX);
-            deleteCookie(SESSION_PREFIX);
-            this.callbacks.onLogout?.();
         }
     }
 
     public async handleRefreshAuthMaterial(refreshTokenSecret?: string): Promise<void> {
         const refreshToken = refreshTokenSecret ?? getCookie(REFRESH_TOKEN_PREFIX);
         // If there is a custom refresh route, that endpoint will fetch the cookies itself
-        if ((refreshToken == null && this.refreshRoute == null) || this.isRefreshing) {
+        if (refreshToken == null && this.refreshRoute == null) {
             return;
         }
 
         try {
-            this.isRefreshing = true;
-            const authMaterial = await this.refreshAuthMaterial(refreshToken);
+            // Create new refresh promise if none exists
+            if (this.refreshPromise == null) {
+                this.refreshPromise = this.refreshAuthMaterial(refreshToken);
+            }
+            const authMaterial = await this.refreshPromise;
 
             // If a custom refresh route is set, storing in cookies is handled in the server
             if (this.refreshRoute == null) {
@@ -95,112 +108,149 @@ export class CrossmintAuthClient extends CrossmintAuth {
             console.error(error);
             this.logout();
         } finally {
-            this.isRefreshing = false;
+            this.refreshPromise = null;
         }
     }
 
     public async getOAuthUrl(provider: OAuthProvider) {
-        const result = await this.apiClient.get(`${AUTH_SDK_ROOT_ENDPOINT}/social/${provider}/start`, {
-            headers: {
-                "Content-Type": "application/json",
-            },
-        });
-
-        const data = (await result.json()) as { oauthUrl: string };
-        return data.oauthUrl;
+        try {
+            const response = await this.apiClient.get(`${AUTH_SDK_ROOT_ENDPOINT}/social/${provider}/start`, {
+                headers: { "Content-Type": "application/json" },
+            });
+
+            if (!response.ok) {
+                throw await response.text();
+            }
+
+            const data = await response.json();
+            return data.oauthUrl;
+        } catch (error) {
+            throw new CrossmintAuthenticationError(
+                `Failed to get OAuth URL for provider ${provider}: ${error instanceof Error ? error.message : "Unknown error"}`
+            );
+        }
     }
 
     public async sendEmailOtp(email: string) {
-        const result = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/otps/send`, {
-            headers: {
-                "Content-Type": "application/json",
-            },
-            body: JSON.stringify({ email }),
-        });
-
-        return await result.json();
+        try {
+            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/otps/send`, {
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ email }),
+            });
+
+            if (!response.ok) {
+                throw await response.text();
+            }
+
+            return await response.json();
+        } catch (error) {
+            throw new CrossmintAuthenticationError(
+                `Failed to send email OTP: ${error instanceof Error ? error.message : "Unknown error"}`
+            );
+        }
     }
 
     public async confirmEmailOtp(email: string, emailId: string, token: string) {
-        const queryParams = new URLSearchParams({
-            email,
-            signinAuthenticationMethod: "email",
-            token,
-            locale: "en",
-            state: emailId,
-            callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/we-dont-actually-use-this-anymore`,
-        });
-        const result = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {
-            headers: {
-                "Content-Type": "application/json",
-            },
-        });
-
-        const resData = await result.json();
-        const callbackUrl = new URL(resData.callbackUrl);
-
-        // parse the oneTimeSecret from the callbackUrl response
-        return callbackUrl.searchParams.get("oneTimeSecret");
+        try {
+            const queryParams = new URLSearchParams({
+                email,
+                signinAuthenticationMethod: "email",
+                token,
+                locale: "en",
+                state: emailId,
+            });
+
+            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {
+                headers: { "Content-Type": "application/json" },
+            });
+
+            if (!response.ok) {
+                throw await response.text();
+            }
+
+            const resData = await response.json();
+            return resData.oneTimeSecret;
+        } catch (error) {
+            throw new CrossmintAuthenticationError(
+                `Failed to confirm email OTP: ${error instanceof Error ? error.message : "Unknown error"}`
+            );
+        }
     }
 
     public async signInWithFarcaster(data: UseSignInData) {
-        const queryParams = new URLSearchParams({
-            signinAuthenticationMethod: "farcaster",
-            callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`,
-        });
-
-        const result = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {
-            headers: {
-                "Content-Type": "application/json",
-            },
-            body: JSON.stringify({
-                ...data,
-                domain: data.signatureParams.domain,
-                redirect: true,
-                callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`,
-            }),
-        });
-
-        const resData = await result.json();
-        const callbackUrl = new URL(resData.callbackUrl);
-
-        // parse the oneTimeSecret from the callbackUrl response
-        return callbackUrl.searchParams.get("oneTimeSecret");
+        try {
+            const queryParams = new URLSearchParams({
+                signinAuthenticationMethod: "farcaster",
+                callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,
+            });
+
+            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    ...data,
+                    domain: data.signatureParams.domain,
+                    redirect: true,
+                    callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,
+                }),
+            });
+
+            if (!response.ok) {
+                throw await response.text();
+            }
+
+            const resData = await response.json();
+            return resData.oneTimeSecret;
+        } catch (error) {
+            throw new CrossmintAuthenticationError(
+                `Failed to sign in with Farcaster: ${error instanceof Error ? error.message : "Unknown error"}`
+            );
+        }
     }
 
     public async signInWithSmartWallet(address: string) {
-        const queryParams = new URLSearchParams({
-            signinAuthenticationMethod: "evm",
-        });
-
-        const result = await this.apiClient.post(
-            `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate/start?${queryParams}`,
-            {
-                headers: {
-                    "Content-Type": "application/json",
-                },
-                body: JSON.stringify({ walletAddress: address }),
+        try {
+            const queryParams = new URLSearchParams({ signinAuthenticationMethod: "evm" });
+            const response = await this.apiClient.post(
+                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate/start?${queryParams}`,
+                {
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({ walletAddress: address }),
+                }
+            );
+
+            if (!response.ok) {
+                throw await response.text();
             }
-        );
-        return await result.json();
+
+            return await response.json();
+        } catch (error) {
+            throw new CrossmintAuthenticationError(
+                `Failed to initiate smart wallet sign in: ${error instanceof Error ? error.message : "Unknown error"}`
+            );
+        }
     }
 
     public async authenticateSmartWallet(address: string, signature: string) {
-        const queryParams = new URLSearchParams({
-            signinAuthenticationMethod: "evm",
-            callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/we-dont-actually-use-this-anymore`,
-        });
-
-        const result = await this.apiClient.post(
-            `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate?${queryParams}`,
-            {
-                headers: {
-                    "Content-Type": "application/json",
-                },
-                body: JSON.stringify({ walletAddress: address, signature }),
+        try {
+            const queryParams = new URLSearchParams({ signinAuthenticationMethod: "evm" });
+            const response = await this.apiClient.post(
+                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate?${queryParams}`,
+                {
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({ walletAddress: address, signature }),
+                }
+            );
+
+            if (!response.ok) {
+                throw await response.text();
             }
-        );
-        return await result.json();
+
+            return await response.json();
+        } catch (error) {
+            throw new CrossmintAuthenticationError(
+                `Failed to authenticate smart wallet: ${error instanceof Error ? error.message : "Unknown error"}`
+            );
+        }
     }
 
     private async logoutFromCustomRoute(): Promise<Response> {