@crossmint/client-sdk-auth 1.1.0 → 1.1.1

package/dist/CrossmintAuthClient.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkM4V2KE2Ycjs = require('./chunk-M4V2KE2Y.cjs');
+var _chunkWQOH66RUcjs = require('./chunk-WQOH66RU.cjs');
 require('./chunk-VQ3HTIQ3.cjs');
 require('./chunk-TIUX4OOQ.cjs');
 require('./chunk-BGMXXFQ4.cjs');
@@ -8,5 +8,5 @@ require('./chunk-QY4RIGNM.cjs');
 require('./chunk-F45I5NLI.cjs');
 
 
-exports.CrossmintAuthClient = _chunkM4V2KE2Ycjs.CrossmintAuthClient;
+exports.CrossmintAuthClient = _chunkWQOH66RUcjs.CrossmintAuthClient;
 //# sourceMappingURL=CrossmintAuthClient.cjs.map

package/dist/CrossmintAuthClient.d.cts

@@ -9,7 +9,7 @@ type CrossmintAuthClientConfig = CrossmintAuthOptions & {
 declare class CrossmintAuthClient extends CrossmintAuth {
     private callbacks;
     private refreshTask;
-    private isRefreshing;
+    private refreshPromise;
     private logoutRoute;
     private constructor();
     static from(crossmint: Crossmint, config?: CrossmintAuthClientConfig): CrossmintAuthClient;

package/dist/CrossmintAuthClient.d.ts

@@ -9,7 +9,7 @@ type CrossmintAuthClientConfig = CrossmintAuthOptions & {
 declare class CrossmintAuthClient extends CrossmintAuth {
     private callbacks;
     private refreshTask;
-    private isRefreshing;
+    private refreshPromise;
     private logoutRoute;
     private constructor();
     static from(crossmint: Crossmint, config?: CrossmintAuthClientConfig): CrossmintAuthClient;

package/dist/CrossmintAuthClient.js

@@ -1,6 +1,6 @@
 import {
   CrossmintAuthClient
-} from "./chunk-5H2QWRZD.js";
+} from "./chunk-5KJPKQDF.js";
 import "./chunk-TOXKCKTY.js";
 import "./chunk-BMYZMMVR.js";
 import "./chunk-5JXPQKM4.js";

package/dist/{chunk-5H2QWRZD.js → chunk-5KJPKQDF.js}

@@ -30,7 +30,7 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends CrossmintAuth {
     var _a, _b;
     super(crossmint, apiClient, config);
     this.refreshTask = null;
-    this.isRefreshing = false;
+    this.refreshPromise = null;
     this.callbacks = (_a = config.callbacks) != null ? _a : {};
     this.logoutRoute = (_b = config.logoutRoute) != null ? _b : null;
   }
@@ -84,12 +84,14 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends CrossmintAuth {
     return __async(this, null, function* () {
       var _a, _b;
       const refreshToken = refreshTokenSecret != null ? refreshTokenSecret : getCookie(REFRESH_TOKEN_PREFIX);
-      if (refreshToken == null && this.refreshRoute == null || this.isRefreshing) {
+      if (refreshToken == null && this.refreshRoute == null) {
         return;
       }
       try {
-        this.isRefreshing = true;
-        const authMaterial = yield this.refreshAuthMaterial(refreshToken);
+        if (this.refreshPromise == null) {
+          this.refreshPromise = this.refreshAuthMaterial(refreshToken);
+        }
+        const authMaterial = yield this.refreshPromise;
         if (this.refreshRoute == null) {
           this.storeAuthMaterial(authMaterial);
         }
@@ -99,7 +101,7 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends CrossmintAuth {
         console.error(error);
         this.logout();
       } finally {
-        this.isRefreshing = false;
+        this.refreshPromise = null;
       }
     });
   }
@@ -169,14 +171,14 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends CrossmintAuth {
       try {
         const queryParams = new URLSearchParams({
           signinAuthenticationMethod: "farcaster",
-          callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`
+          callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`
         });
         const response = yield this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify(__spreadProps(__spreadValues({}, data), {
             domain: data.signatureParams.domain,
             redirect: true,
-            callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`
+            callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`
           }))
         });
         if (!response.ok) {
@@ -267,4 +269,4 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends CrossmintAuth {
 export {
   CrossmintAuthClient
 };
-//# sourceMappingURL=chunk-5H2QWRZD.js.map
+//# sourceMappingURL=chunk-5KJPKQDF.js.map

package/dist/chunk-5KJPKQDF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/CrossmintAuthClient.ts"],"sourcesContent":["import type { UseSignInData } from \"@farcaster/auth-kit\";\nimport {\n    AUTH_SDK_ROOT_ENDPOINT,\n    type AuthMaterialWithUser,\n    CROSSMINT_API_VERSION,\n    CrossmintAuth,\n    CrossmintAuthenticationError,\n    type CrossmintAuthOptions,\n    type OAuthProvider,\n    REFRESH_TOKEN_PREFIX,\n    SESSION_PREFIX,\n} from \"@crossmint/common-sdk-auth\";\nimport type { Crossmint, CrossmintApiClient } from \"@crossmint/common-sdk-base\";\nimport { type CancellableTask, queueTask } from \"@crossmint/client-sdk-base\";\nimport { deleteCookie, getCookie, getJWTExpiration, setCookie, TIME_BEFORE_EXPIRING_JWT_IN_SECONDS } from \"./utils\";\n\ntype CrossmintAuthClientConfig = CrossmintAuthOptions & {\n    callbacks?: CrossmintAuthClientCallbacks;\n    logoutRoute?: string;\n};\n\nexport class CrossmintAuthClient extends CrossmintAuth {\n    private callbacks: CrossmintAuthClientCallbacks;\n    private refreshTask: CancellableTask | null = null;\n    private refreshPromise: Promise<AuthMaterialWithUser> | null = null;\n    private logoutRoute: string | null;\n\n    private constructor(crossmint: Crossmint, apiClient: CrossmintApiClient, config: CrossmintAuthClientConfig = {}) {\n        super(crossmint, apiClient, config);\n        this.callbacks = config.callbacks ?? {};\n        this.logoutRoute = config.logoutRoute ?? null;\n    }\n\n    public static from(crossmint: Crossmint, config: CrossmintAuthClientConfig = {}): CrossmintAuthClient {\n        const authClient = new CrossmintAuthClient(crossmint, CrossmintAuth.defaultApiClient(crossmint), config);\n        // In case an instance is created on the server, we can't refresh as this stores cookies\n        if (typeof window !== \"undefined\") {\n            authClient.handleRefreshAuthMaterial();\n        }\n        return authClient;\n    }\n\n    public async getUser() {\n        try {\n            const response = await this.apiClient.get(`api/${CROSSMINT_API_VERSION}/sdk/auth/user`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to fetch user: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public storeAuthMaterial(authMaterial: AuthMaterialWithUser) {\n        setCookie(SESSION_PREFIX, authMaterial.jwt);\n        setCookie(REFRESH_TOKEN_PREFIX, authMaterial.refreshToken.secret, authMaterial.refreshToken.expiresAt);\n    }\n\n    public async logout() {\n        // Store the old refresh token to pass it to the logout route before deleting the cookies\n        const oldRefreshToken = getCookie(REFRESH_TOKEN_PREFIX);\n\n        // Even if there's a server error, we want to clear the cookies and we do it first to load faster\n        deleteCookie(REFRESH_TOKEN_PREFIX);\n        deleteCookie(SESSION_PREFIX);\n        this.callbacks.onLogout?.();\n        try {\n            if (this.logoutRoute != null) {\n                await this.logoutFromCustomRoute();\n            } else if (oldRefreshToken != null) {\n                await this.logoutFromDefaultRoute(oldRefreshToken);\n            }\n        } catch (error) {\n            console.error(error);\n        }\n    }\n\n    public async handleRefreshAuthMaterial(refreshTokenSecret?: string): Promise<void> {\n        const refreshToken = refreshTokenSecret ?? getCookie(REFRESH_TOKEN_PREFIX);\n        // If there is a custom refresh route, that endpoint will fetch the cookies itself\n        if (refreshToken == null && this.refreshRoute == null) {\n            return;\n        }\n\n        try {\n            // Create new refresh promise if none exists\n            if (this.refreshPromise == null) {\n                this.refreshPromise = this.refreshAuthMaterial(refreshToken);\n            }\n            const authMaterial = await this.refreshPromise;\n\n            // If a custom refresh route is set, storing in cookies is handled in the server\n            if (this.refreshRoute == null) {\n                this.storeAuthMaterial(authMaterial);\n            }\n\n            this.callbacks.onTokenRefresh?.(authMaterial);\n\n            this.scheduleNextRefresh(authMaterial.jwt);\n        } catch (error) {\n            console.error(error);\n            this.logout();\n        } finally {\n            this.refreshPromise = null;\n        }\n    }\n\n    public async getOAuthUrl(provider: OAuthProvider) {\n        try {\n            const response = await this.apiClient.get(`${AUTH_SDK_ROOT_ENDPOINT}/social/${provider}/start`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const data = await response.json();\n            return data.oauthUrl;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to get OAuth URL for provider ${provider}: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async sendEmailOtp(email: string) {\n        try {\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/otps/send`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({ email }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to send email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async confirmEmailOtp(email: string, emailId: string, token: string) {\n        try {\n            const queryParams = new URLSearchParams({\n                email,\n                signinAuthenticationMethod: \"email\",\n                token,\n                locale: \"en\",\n                state: emailId,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to confirm email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithFarcaster(data: UseSignInData) {\n        try {\n            const queryParams = new URLSearchParams({\n                signinAuthenticationMethod: \"farcaster\",\n                callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({\n                    ...data,\n                    domain: data.signatureParams.domain,\n                    redirect: true,\n                    callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,\n                }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to sign in with Farcaster: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithSmartWallet(address: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate/start?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to initiate smart wallet sign in: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async authenticateSmartWallet(address: string, signature: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address, signature }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to authenticate smart wallet: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    private async logoutFromCustomRoute(): Promise<Response> {\n        if (!this.logoutRoute) {\n            throw new Error(\"Custom logout route is not set\");\n        }\n\n        return await fetch(this.logoutRoute, { method: \"POST\" });\n    }\n\n    private scheduleNextRefresh(jwt: string): void {\n        const jwtExpiration = getJWTExpiration(jwt);\n        if (!jwtExpiration) {\n            throw new Error(\"Invalid JWT\");\n        }\n\n        const currentTime = Date.now() / 1000;\n        const timeToExpire = jwtExpiration - currentTime - TIME_BEFORE_EXPIRING_JWT_IN_SECONDS;\n\n        if (timeToExpire > 0) {\n            const endTime = Date.now() + timeToExpire * 1000;\n            this.cancelScheduledRefresh();\n            this.refreshTask = queueTask(() => this.handleRefreshAuthMaterial(), endTime);\n        }\n    }\n\n    private cancelScheduledRefresh(): void {\n        if (this.refreshTask) {\n            this.refreshTask.cancel();\n            this.refreshTask = null;\n        }\n    }\n}\n\ntype CrossmintAuthClientCallbacks = {\n    onTokenRefresh?: (authMaterial: AuthMaterialWithUser) => void;\n    onLogout?: () => void;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AACA;AAAA,EACI;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACG;AAEP,SAA+B,iBAAiB;AAQzC,IAAM,sBAAN,MAAM,6BAA4B,cAAc;AAAA,EAM3C,YAAY,WAAsB,WAA+B,SAAoC,CAAC,GAAG;AA3BrH;AA4BQ,UAAM,WAAW,WAAW,MAAM;AALtC,SAAQ,cAAsC;AAC9C,SAAQ,iBAAuD;AAK3D,SAAK,aAAY,YAAO,cAAP,YAAoB,CAAC;AACtC,SAAK,eAAc,YAAO,gBAAP,YAAsB;AAAA,EAC7C;AAAA,EAEA,OAAc,KAAK,WAAsB,SAAoC,CAAC,GAAwB;AAClG,UAAM,aAAa,IAAI,qBAAoB,WAAW,cAAc,iBAAiB,SAAS,GAAG,MAAM;AAEvG,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,0BAA0B;AAAA,IACzC;AACA,WAAO;AAAA,EACX;AAAA,EAEa,UAAU;AAAA;AACnB,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,OAAO,qBAAqB,kBAAkB;AAAA,UACpF,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,yBAAyB,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACrF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEO,kBAAkB,cAAoC;AACzD,cAAU,gBAAgB,aAAa,GAAG;AAC1C,cAAU,sBAAsB,aAAa,aAAa,QAAQ,aAAa,aAAa,SAAS;AAAA,EACzG;AAAA,EAEa,SAAS;AAAA;AAjE1B;AAmEQ,YAAM,kBAAkB,UAAU,oBAAoB;AAGtD,mBAAa,oBAAoB;AACjC,mBAAa,cAAc;AAC3B,uBAAK,WAAU,aAAf;AACA,UAAI;AACA,YAAI,KAAK,eAAe,MAAM;AAC1B,gBAAM,KAAK,sBAAsB;AAAA,QACrC,WAAW,mBAAmB,MAAM;AAChC,gBAAM,KAAK,uBAAuB,eAAe;AAAA,QACrD;AAAA,MACJ,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AAAA,MACvB;AAAA,IACJ;AAAA;AAAA,EAEa,0BAA0B,oBAA4C;AAAA;AApFvF;AAqFQ,YAAM,eAAe,kDAAsB,UAAU,oBAAoB;AAEzE,UAAI,gBAAgB,QAAQ,KAAK,gBAAgB,MAAM;AACnD;AAAA,MACJ;AAEA,UAAI;AAEA,YAAI,KAAK,kBAAkB,MAAM;AAC7B,eAAK,iBAAiB,KAAK,oBAAoB,YAAY;AAAA,QAC/D;AACA,cAAM,eAAe,MAAM,KAAK;AAGhC,YAAI,KAAK,gBAAgB,MAAM;AAC3B,eAAK,kBAAkB,YAAY;AAAA,QACvC;AAEA,yBAAK,WAAU,mBAAf,4BAAgC;AAEhC,aAAK,oBAAoB,aAAa,GAAG;AAAA,MAC7C,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AACnB,aAAK,OAAO;AAAA,MAChB,UAAE;AACE,aAAK,iBAAiB;AAAA,MAC1B;AAAA,IACJ;AAAA;AAAA,EAEa,YAAY,UAAyB;AAAA;AAC9C,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,GAAG,sBAAsB,WAAW,QAAQ,UAAU;AAAA,UAC5F,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,eAAO,KAAK;AAAA,MAChB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,QAAQ,KAAK,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjH;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,aAAa,OAAe;AAAA;AACrC,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,cAAc;AAAA,UAC9E,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,QAClC,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACzF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,gBAAgB,OAAe,SAAiB,OAAe;AAAA;AACxE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC;AAAA,UACA,4BAA4B;AAAA,UAC5B;AAAA,UACA,QAAQ;AAAA,UACR,OAAO;AAAA,QACX,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,gCAAgC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QAC5F;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,oBAAoB,MAAqB;AAAA;AAClD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC,4BAA4B;AAAA,UAC5B,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,QACpE,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,iCACd,OADc;AAAA,YAEjB,QAAQ,KAAK,gBAAgB;AAAA,YAC7B,UAAU;AAAA,YACV,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,UACpE,EAAC;AAAA,QACL,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,sBAAsB,SAAiB;AAAA;AAChD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,sCAAsC,WAAW;AAAA,UAC1E;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,QAAQ,CAAC;AAAA,UACnD;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,4CAA4C,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACxG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,wBAAwB,SAAiB,WAAmB;AAAA;AACrE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,gCAAgC,WAAW;AAAA,UACpE;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,SAAS,UAAU,CAAC;AAAA,UAC9D;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACpG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEc,wBAA2C;AAAA;AACrD,UAAI,CAAC,KAAK,aAAa;AACnB,cAAM,IAAI,MAAM,gCAAgC;AAAA,MACpD;AAEA,aAAO,MAAM,MAAM,KAAK,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC3D;AAAA;AAAA,EAEQ,oBAAoB,KAAmB;AAC3C,UAAM,gBAAgB,iBAAiB,GAAG;AAC1C,QAAI,CAAC,eAAe;AAChB,YAAM,IAAI,MAAM,aAAa;AAAA,IACjC;AAEA,UAAM,cAAc,KAAK,IAAI,IAAI;AACjC,UAAM,eAAe,gBAAgB,cAAc;AAEnD,QAAI,eAAe,GAAG;AAClB,YAAM,UAAU,KAAK,IAAI,IAAI,eAAe;AAC5C,WAAK,uBAAuB;AAC5B,WAAK,cAAc,UAAU,MAAM,KAAK,0BAA0B,GAAG,OAAO;AAAA,IAChF;AAAA,EACJ;AAAA,EAEQ,yBAA+B;AACnC,QAAI,KAAK,aAAa;AAClB,WAAK,YAAY,OAAO;AACxB,WAAK,cAAc;AAAA,IACvB;AAAA,EACJ;AACJ;","names":[]}

package/dist/{chunk-M4V2KE2Y.cjs → chunk-WQOH66RU.cjs}

@@ -30,7 +30,7 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends _commonsdkauth.Cros
     var _a, _b;
     super(crossmint, apiClient, config);
     this.refreshTask = null;
-    this.isRefreshing = false;
+    this.refreshPromise = null;
     this.callbacks = (_a = config.callbacks) != null ? _a : {};
     this.logoutRoute = (_b = config.logoutRoute) != null ? _b : null;
   }
@@ -84,12 +84,14 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends _commonsdkauth.Cros
     return _chunkF45I5NLIcjs.__async.call(void 0, this, null, function* () {
       var _a, _b;
       const refreshToken = refreshTokenSecret != null ? refreshTokenSecret : _chunkBGMXXFQ4cjs.getCookie.call(void 0, _commonsdkauth.REFRESH_TOKEN_PREFIX);
-      if (refreshToken == null && this.refreshRoute == null || this.isRefreshing) {
+      if (refreshToken == null && this.refreshRoute == null) {
         return;
       }
       try {
-        this.isRefreshing = true;
-        const authMaterial = yield this.refreshAuthMaterial(refreshToken);
+        if (this.refreshPromise == null) {
+          this.refreshPromise = this.refreshAuthMaterial(refreshToken);
+        }
+        const authMaterial = yield this.refreshPromise;
         if (this.refreshRoute == null) {
           this.storeAuthMaterial(authMaterial);
         }
@@ -99,7 +101,7 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends _commonsdkauth.Cros
         console.error(error);
         this.logout();
       } finally {
-        this.isRefreshing = false;
+        this.refreshPromise = null;
       }
     });
   }
@@ -169,14 +171,14 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends _commonsdkauth.Cros
       try {
         const queryParams = new URLSearchParams({
           signinAuthenticationMethod: "farcaster",
-          callbackUrl: `${this.apiClient.baseUrl}/${_commonsdkauth.AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`
+          callbackUrl: `${this.apiClient.baseUrl}/${_commonsdkauth.AUTH_SDK_ROOT_ENDPOINT}/callback`
         });
         const response = yield this.apiClient.post(`${_commonsdkauth.AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify(_chunkF45I5NLIcjs.__spreadProps.call(void 0, _chunkF45I5NLIcjs.__spreadValues.call(void 0, {}, data), {
             domain: data.signatureParams.domain,
             redirect: true,
-            callbackUrl: `${this.apiClient.baseUrl}/${_commonsdkauth.AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`
+            callbackUrl: `${this.apiClient.baseUrl}/${_commonsdkauth.AUTH_SDK_ROOT_ENDPOINT}/callback`
           }))
         });
         if (!response.ok) {
@@ -267,4 +269,4 @@ var CrossmintAuthClient = class _CrossmintAuthClient extends _commonsdkauth.Cros
 
 
 exports.CrossmintAuthClient = CrossmintAuthClient;
-//# sourceMappingURL=chunk-M4V2KE2Y.cjs.map
+//# sourceMappingURL=chunk-WQOH66RU.cjs.map

package/dist/chunk-WQOH66RU.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/CrossmintAuthClient.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AACA;AAAA,EACI;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACG;AAEP,SAA+B,iBAAiB;AAQzC,IAAM,sBAAN,MAAM,6BAA4B,cAAc;AAAA,EAM3C,YAAY,WAAsB,WAA+B,SAAoC,CAAC,GAAG;AA3BrH;AA4BQ,UAAM,WAAW,WAAW,MAAM;AALtC,SAAQ,cAAsC;AAC9C,SAAQ,iBAAuD;AAK3D,SAAK,aAAY,YAAO,cAAP,YAAoB,CAAC;AACtC,SAAK,eAAc,YAAO,gBAAP,YAAsB;AAAA,EAC7C;AAAA,EAEA,OAAc,KAAK,WAAsB,SAAoC,CAAC,GAAwB;AAClG,UAAM,aAAa,IAAI,qBAAoB,WAAW,cAAc,iBAAiB,SAAS,GAAG,MAAM;AAEvG,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,0BAA0B;AAAA,IACzC;AACA,WAAO;AAAA,EACX;AAAA,EAEa,UAAU;AAAA;AACnB,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,OAAO,qBAAqB,kBAAkB;AAAA,UACpF,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,yBAAyB,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACrF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEO,kBAAkB,cAAoC;AACzD,cAAU,gBAAgB,aAAa,GAAG;AAC1C,cAAU,sBAAsB,aAAa,aAAa,QAAQ,aAAa,aAAa,SAAS;AAAA,EACzG;AAAA,EAEa,SAAS;AAAA;AAjE1B;AAmEQ,YAAM,kBAAkB,UAAU,oBAAoB;AAGtD,mBAAa,oBAAoB;AACjC,mBAAa,cAAc;AAC3B,uBAAK,WAAU,aAAf;AACA,UAAI;AACA,YAAI,KAAK,eAAe,MAAM;AAC1B,gBAAM,KAAK,sBAAsB;AAAA,QACrC,WAAW,mBAAmB,MAAM;AAChC,gBAAM,KAAK,uBAAuB,eAAe;AAAA,QACrD;AAAA,MACJ,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AAAA,MACvB;AAAA,IACJ;AAAA;AAAA,EAEa,0BAA0B,oBAA4C;AAAA;AApFvF;AAqFQ,YAAM,eAAe,kDAAsB,UAAU,oBAAoB;AAEzE,UAAI,gBAAgB,QAAQ,KAAK,gBAAgB,MAAM;AACnD;AAAA,MACJ;AAEA,UAAI;AAEA,YAAI,KAAK,kBAAkB,MAAM;AAC7B,eAAK,iBAAiB,KAAK,oBAAoB,YAAY;AAAA,QAC/D;AACA,cAAM,eAAe,MAAM,KAAK;AAGhC,YAAI,KAAK,gBAAgB,MAAM;AAC3B,eAAK,kBAAkB,YAAY;AAAA,QACvC;AAEA,yBAAK,WAAU,mBAAf,4BAAgC;AAEhC,aAAK,oBAAoB,aAAa,GAAG;AAAA,MAC7C,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AACnB,aAAK,OAAO;AAAA,MAChB,UAAE;AACE,aAAK,iBAAiB;AAAA,MAC1B;AAAA,IACJ;AAAA;AAAA,EAEa,YAAY,UAAyB;AAAA;AAC9C,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,GAAG,sBAAsB,WAAW,QAAQ,UAAU;AAAA,UAC5F,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,eAAO,KAAK;AAAA,MAChB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,QAAQ,KAAK,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjH;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,aAAa,OAAe;AAAA;AACrC,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,cAAc;AAAA,UAC9E,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,QAClC,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACzF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,gBAAgB,OAAe,SAAiB,OAAe;AAAA;AACxE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC;AAAA,UACA,4BAA4B;AAAA,UAC5B;AAAA,UACA,QAAQ;AAAA,UACR,OAAO;AAAA,QACX,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,gCAAgC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QAC5F;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,oBAAoB,MAAqB;AAAA;AAClD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC,4BAA4B;AAAA,UAC5B,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,QACpE,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,iCACd,OADc;AAAA,YAEjB,QAAQ,KAAK,gBAAgB;AAAA,YAC7B,UAAU;AAAA,YACV,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,UACpE,EAAC;AAAA,QACL,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,sBAAsB,SAAiB;AAAA;AAChD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,sCAAsC,WAAW;AAAA,UAC1E;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,QAAQ,CAAC;AAAA,UACnD;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,4CAA4C,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACxG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,wBAAwB,SAAiB,WAAmB;AAAA;AACrE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,gCAAgC,WAAW;AAAA,UACpE;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,SAAS,UAAU,CAAC;AAAA,UAC9D;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACpG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEc,wBAA2C;AAAA;AACrD,UAAI,CAAC,KAAK,aAAa;AACnB,cAAM,IAAI,MAAM,gCAAgC;AAAA,MACpD;AAEA,aAAO,MAAM,MAAM,KAAK,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC3D;AAAA;AAAA,EAEQ,oBAAoB,KAAmB;AAC3C,UAAM,gBAAgB,iBAAiB,GAAG;AAC1C,QAAI,CAAC,eAAe;AAChB,YAAM,IAAI,MAAM,aAAa;AAAA,IACjC;AAEA,UAAM,cAAc,KAAK,IAAI,IAAI;AACjC,UAAM,eAAe,gBAAgB,cAAc;AAEnD,QAAI,eAAe,GAAG;AAClB,YAAM,UAAU,KAAK,IAAI,IAAI,eAAe;AAC5C,WAAK,uBAAuB;AAC5B,WAAK,cAAc,UAAU,MAAM,KAAK,0BAA0B,GAAG,OAAO;AAAA,IAChF;AAAA,EACJ;AAAA,EAEQ,yBAA+B;AACnC,QAAI,KAAK,aAAa;AAClB,WAAK,YAAY,OAAO;AACxB,WAAK,cAAc;AAAA,IACvB;AAAA,EACJ;AACJ","sourcesContent":["import type { UseSignInData } from \"@farcaster/auth-kit\";\nimport {\n    AUTH_SDK_ROOT_ENDPOINT,\n    type AuthMaterialWithUser,\n    CROSSMINT_API_VERSION,\n    CrossmintAuth,\n    CrossmintAuthenticationError,\n    type CrossmintAuthOptions,\n    type OAuthProvider,\n    REFRESH_TOKEN_PREFIX,\n    SESSION_PREFIX,\n} from \"@crossmint/common-sdk-auth\";\nimport type { Crossmint, CrossmintApiClient } from \"@crossmint/common-sdk-base\";\nimport { type CancellableTask, queueTask } from \"@crossmint/client-sdk-base\";\nimport { deleteCookie, getCookie, getJWTExpiration, setCookie, TIME_BEFORE_EXPIRING_JWT_IN_SECONDS } from \"./utils\";\n\ntype CrossmintAuthClientConfig = CrossmintAuthOptions & {\n    callbacks?: CrossmintAuthClientCallbacks;\n    logoutRoute?: string;\n};\n\nexport class CrossmintAuthClient extends CrossmintAuth {\n    private callbacks: CrossmintAuthClientCallbacks;\n    private refreshTask: CancellableTask | null = null;\n    private refreshPromise: Promise<AuthMaterialWithUser> | null = null;\n    private logoutRoute: string | null;\n\n    private constructor(crossmint: Crossmint, apiClient: CrossmintApiClient, config: CrossmintAuthClientConfig = {}) {\n        super(crossmint, apiClient, config);\n        this.callbacks = config.callbacks ?? {};\n        this.logoutRoute = config.logoutRoute ?? null;\n    }\n\n    public static from(crossmint: Crossmint, config: CrossmintAuthClientConfig = {}): CrossmintAuthClient {\n        const authClient = new CrossmintAuthClient(crossmint, CrossmintAuth.defaultApiClient(crossmint), config);\n        // In case an instance is created on the server, we can't refresh as this stores cookies\n        if (typeof window !== \"undefined\") {\n            authClient.handleRefreshAuthMaterial();\n        }\n        return authClient;\n    }\n\n    public async getUser() {\n        try {\n            const response = await this.apiClient.get(`api/${CROSSMINT_API_VERSION}/sdk/auth/user`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to fetch user: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public storeAuthMaterial(authMaterial: AuthMaterialWithUser) {\n        setCookie(SESSION_PREFIX, authMaterial.jwt);\n        setCookie(REFRESH_TOKEN_PREFIX, authMaterial.refreshToken.secret, authMaterial.refreshToken.expiresAt);\n    }\n\n    public async logout() {\n        // Store the old refresh token to pass it to the logout route before deleting the cookies\n        const oldRefreshToken = getCookie(REFRESH_TOKEN_PREFIX);\n\n        // Even if there's a server error, we want to clear the cookies and we do it first to load faster\n        deleteCookie(REFRESH_TOKEN_PREFIX);\n        deleteCookie(SESSION_PREFIX);\n        this.callbacks.onLogout?.();\n        try {\n            if (this.logoutRoute != null) {\n                await this.logoutFromCustomRoute();\n            } else if (oldRefreshToken != null) {\n                await this.logoutFromDefaultRoute(oldRefreshToken);\n            }\n        } catch (error) {\n            console.error(error);\n        }\n    }\n\n    public async handleRefreshAuthMaterial(refreshTokenSecret?: string): Promise<void> {\n        const refreshToken = refreshTokenSecret ?? getCookie(REFRESH_TOKEN_PREFIX);\n        // If there is a custom refresh route, that endpoint will fetch the cookies itself\n        if (refreshToken == null && this.refreshRoute == null) {\n            return;\n        }\n\n        try {\n            // Create new refresh promise if none exists\n            if (this.refreshPromise == null) {\n                this.refreshPromise = this.refreshAuthMaterial(refreshToken);\n            }\n            const authMaterial = await this.refreshPromise;\n\n            // If a custom refresh route is set, storing in cookies is handled in the server\n            if (this.refreshRoute == null) {\n                this.storeAuthMaterial(authMaterial);\n            }\n\n            this.callbacks.onTokenRefresh?.(authMaterial);\n\n            this.scheduleNextRefresh(authMaterial.jwt);\n        } catch (error) {\n            console.error(error);\n            this.logout();\n        } finally {\n            this.refreshPromise = null;\n        }\n    }\n\n    public async getOAuthUrl(provider: OAuthProvider) {\n        try {\n            const response = await this.apiClient.get(`${AUTH_SDK_ROOT_ENDPOINT}/social/${provider}/start`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const data = await response.json();\n            return data.oauthUrl;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to get OAuth URL for provider ${provider}: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async sendEmailOtp(email: string) {\n        try {\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/otps/send`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({ email }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to send email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async confirmEmailOtp(email: string, emailId: string, token: string) {\n        try {\n            const queryParams = new URLSearchParams({\n                email,\n                signinAuthenticationMethod: \"email\",\n                token,\n                locale: \"en\",\n                state: emailId,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to confirm email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithFarcaster(data: UseSignInData) {\n        try {\n            const queryParams = new URLSearchParams({\n                signinAuthenticationMethod: \"farcaster\",\n                callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({\n                    ...data,\n                    domain: data.signatureParams.domain,\n                    redirect: true,\n                    callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,\n                }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to sign in with Farcaster: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithSmartWallet(address: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate/start?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to initiate smart wallet sign in: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async authenticateSmartWallet(address: string, signature: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address, signature }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to authenticate smart wallet: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    private async logoutFromCustomRoute(): Promise<Response> {\n        if (!this.logoutRoute) {\n            throw new Error(\"Custom logout route is not set\");\n        }\n\n        return await fetch(this.logoutRoute, { method: \"POST\" });\n    }\n\n    private scheduleNextRefresh(jwt: string): void {\n        const jwtExpiration = getJWTExpiration(jwt);\n        if (!jwtExpiration) {\n            throw new Error(\"Invalid JWT\");\n        }\n\n        const currentTime = Date.now() / 1000;\n        const timeToExpire = jwtExpiration - currentTime - TIME_BEFORE_EXPIRING_JWT_IN_SECONDS;\n\n        if (timeToExpire > 0) {\n            const endTime = Date.now() + timeToExpire * 1000;\n            this.cancelScheduledRefresh();\n            this.refreshTask = queueTask(() => this.handleRefreshAuthMaterial(), endTime);\n        }\n    }\n\n    private cancelScheduledRefresh(): void {\n        if (this.refreshTask) {\n            this.refreshTask.cancel();\n            this.refreshTask = null;\n        }\n    }\n}\n\ntype CrossmintAuthClientCallbacks = {\n    onTokenRefresh?: (authMaterial: AuthMaterialWithUser) => void;\n    onLogout?: () => void;\n};\n"]}

package/dist/index.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkM4V2KE2Ycjs = require('./chunk-M4V2KE2Y.cjs');
+var _chunkWQOH66RUcjs = require('./chunk-WQOH66RU.cjs');
 require('./chunk-VQ3HTIQ3.cjs');
 
 
@@ -25,5 +25,5 @@ var _commonsdkbase = require('@crossmint/common-sdk-base');
 
 
 
-exports.CrossmintAuth = _chunkM4V2KE2Ycjs.CrossmintAuthClient; exports.TIME_BEFORE_EXPIRING_JWT_IN_SECONDS = _chunkTIUX4OOQcjs.TIME_BEFORE_EXPIRING_JWT_IN_SECONDS; exports.createCrossmint = _commonsdkbase.createCrossmint; exports.deleteCookie = _chunkBGMXXFQ4cjs.deleteCookie; exports.getCookie = _chunkBGMXXFQ4cjs.getCookie; exports.getJWTExpiration = _chunkQY4RIGNMcjs.getJWTExpiration; exports.setCookie = _chunkBGMXXFQ4cjs.setCookie;
+exports.CrossmintAuth = _chunkWQOH66RUcjs.CrossmintAuthClient; exports.TIME_BEFORE_EXPIRING_JWT_IN_SECONDS = _chunkTIUX4OOQcjs.TIME_BEFORE_EXPIRING_JWT_IN_SECONDS; exports.createCrossmint = _commonsdkbase.createCrossmint; exports.deleteCookie = _chunkBGMXXFQ4cjs.deleteCookie; exports.getCookie = _chunkBGMXXFQ4cjs.getCookie; exports.getJWTExpiration = _chunkQY4RIGNMcjs.getJWTExpiration; exports.setCookie = _chunkBGMXXFQ4cjs.setCookie;
 //# sourceMappingURL=index.cjs.map

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   CrossmintAuthClient
-} from "./chunk-5H2QWRZD.js";
+} from "./chunk-5KJPKQDF.js";
 import "./chunk-TOXKCKTY.js";
 import {
   TIME_BEFORE_EXPIRING_JWT_IN_SECONDS

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossmint/client-sdk-auth",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "repository": "https://github.com/Crossmint/crossmint-sdk",
   "license": "Apache-2.0",
   "author": "Paella Labs Inc",
@@ -28,6 +28,6 @@
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
-    "test": "vitest run"
+    "test:vitest": "vitest run"
   }
 }

package/src/CrossmintAuthClient.test.ts

@@ -53,6 +53,7 @@ describe("CrossmintAuthClient", () => {
             const mockUserData = { id: "user123", email: "user@example.com" };
             mockApiClient.get.mockResolvedValue({
                 json: () => Promise.resolve(mockUserData),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.getUser();
@@ -145,6 +146,7 @@ describe("CrossmintAuthClient", () => {
             vi.spyOn(crossmintAuthClient as any, "storeAuthMaterial").mockImplementation(() => {});
             vi.mocked(getJWTExpiration).mockReturnValue(Date.now() / 1000 + 3600); // 1 hour from now
             vi.mocked(queueTask).mockReturnValue({ cancel: vi.fn() } as any);
+            (crossmintAuthClient as any).refreshPromise = null;
         });
 
         it("should refresh auth material and schedule next refresh", async () => {
@@ -161,11 +163,13 @@ describe("CrossmintAuthClient", () => {
             expect(queueTask).toHaveBeenCalledWith(expect.any(Function), expect.any(Number));
         });
 
-        it("should not refresh if already refreshing", async () => {
-            (crossmintAuthClient as any).isRefreshing = true;
-            await crossmintAuthClient.handleRefreshAuthMaterial(mockRefreshToken);
+        it("should not refresh when called twice in a row", async () => {
+            const promise1 = crossmintAuthClient.handleRefreshAuthMaterial(mockRefreshToken);
+            const promise2 = crossmintAuthClient.handleRefreshAuthMaterial(mockRefreshToken);
 
-            expect(crossmintAuthClient["refreshAuthMaterial"]).not.toHaveBeenCalled();
+            await Promise.all([promise1, promise2]);
+
+            expect(crossmintAuthClient["refreshAuthMaterial"]).toHaveBeenCalledTimes(1);
         });
 
         it("should call onTokenRefresh callback if provided", async () => {
@@ -249,6 +253,7 @@ describe("CrossmintAuthClient", () => {
             const mockOAuthUrl = "https://oauth.example.com/auth";
             mockApiClient.get.mockResolvedValue({
                 json: () => Promise.resolve({ oauthUrl: mockOAuthUrl }),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.getOAuthUrl(mockProvider);
@@ -267,6 +272,7 @@ describe("CrossmintAuthClient", () => {
             const mockResponse = { success: true };
             mockApiClient.post.mockResolvedValue({
                 json: () => Promise.resolve(mockResponse),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.sendEmailOtp(mockEmail);
@@ -288,7 +294,8 @@ describe("CrossmintAuthClient", () => {
             const mockToken = "otp-token-456";
             const mockOneTimeSecret = "one-time-secret-789";
             mockApiClient.post.mockResolvedValue({
-                json: () => Promise.resolve({ callbackUrl: `https://example.com?oneTimeSecret=${mockOneTimeSecret}` }),
+                json: () => Promise.resolve({ oneTimeSecret: mockOneTimeSecret }),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.confirmEmailOtp(mockEmail, mockEmailId, mockToken);
@@ -310,13 +317,14 @@ describe("CrossmintAuthClient", () => {
             };
             const mockOneTimeSecret = "farcaster-one-time-secret-123";
             mockApiClient.post.mockResolvedValue({
-                json: () => Promise.resolve({ callbackUrl: `https://example.com?oneTimeSecret=${mockOneTimeSecret}` }),
+                json: () => Promise.resolve({ oneTimeSecret: mockOneTimeSecret }),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.signInWithFarcaster(mockFarcasterData as StatusAPIResponse);
 
             expect(result).toBe(mockOneTimeSecret);
-            const expectedCallbackUrl = `https://api.crossmint.com/api/2024-09-26/session/sdk/auth/callback?isPopup=false`;
+            const expectedCallbackUrl = `https://api.crossmint.com/api/2024-09-26/session/sdk/auth/callback`;
             const queryParams = new URLSearchParams({
                 signinAuthenticationMethod: "farcaster",
                 callbackUrl: expectedCallbackUrl,
@@ -347,6 +355,7 @@ describe("CrossmintAuthClient", () => {
             };
             mockApiClient.post.mockResolvedValue({
                 json: () => Promise.resolve(mockResponse),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.signInWithSmartWallet(mockAddress);
@@ -356,7 +365,7 @@ describe("CrossmintAuthClient", () => {
                 signinAuthenticationMethod: "evm",
             });
             expect(mockApiClient.post).toHaveBeenCalledWith(
-                `https://api.crossmint.com/api/2024-09-26/session/sdk/auth/crypto_wallets/authenticate/start?${queryParams}`,
+                `api/2024-09-26/session/sdk/auth/crypto_wallets/authenticate/start?${queryParams}`,
                 expect.objectContaining({
                     body: JSON.stringify({ walletAddress: mockAddress }),
                     headers: {
@@ -380,6 +389,7 @@ describe("CrossmintAuthClient", () => {
             };
             mockApiClient.post.mockResolvedValue({
                 json: () => Promise.resolve(mockResponse),
+                ok: true,
             });
 
             const result = await crossmintAuthClient.authenticateSmartWallet(mockAddress, mockSignature);
@@ -387,7 +397,6 @@ describe("CrossmintAuthClient", () => {
             expect(result).toEqual(mockResponse);
             const queryParams = new URLSearchParams({
                 signinAuthenticationMethod: "evm",
-                callbackUrl: `https://api.crossmint.com/api/2024-09-26/session/sdk/auth/we-dont-actually-use-this-anymore`,
             });
             expect(mockApiClient.post).toHaveBeenCalledWith(
                 `api/2024-09-26/session/sdk/auth/crypto_wallets/authenticate?${queryParams}`,

package/src/CrossmintAuthClient.ts

@@ -22,7 +22,7 @@ type CrossmintAuthClientConfig = CrossmintAuthOptions & {
 export class CrossmintAuthClient extends CrossmintAuth {
     private callbacks: CrossmintAuthClientCallbacks;
     private refreshTask: CancellableTask | null = null;
-    private isRefreshing = false;
+    private refreshPromise: Promise<AuthMaterialWithUser> | null = null;
     private logoutRoute: string | null;
 
     private constructor(crossmint: Crossmint, apiClient: CrossmintApiClient, config: CrossmintAuthClientConfig = {}) {
@@ -85,13 +85,16 @@ export class CrossmintAuthClient extends CrossmintAuth {
     public async handleRefreshAuthMaterial(refreshTokenSecret?: string): Promise<void> {
         const refreshToken = refreshTokenSecret ?? getCookie(REFRESH_TOKEN_PREFIX);
         // If there is a custom refresh route, that endpoint will fetch the cookies itself
-        if ((refreshToken == null && this.refreshRoute == null) || this.isRefreshing) {
+        if (refreshToken == null && this.refreshRoute == null) {
             return;
         }
 
         try {
-            this.isRefreshing = true;
-            const authMaterial = await this.refreshAuthMaterial(refreshToken);
+            // Create new refresh promise if none exists
+            if (this.refreshPromise == null) {
+                this.refreshPromise = this.refreshAuthMaterial(refreshToken);
+            }
+            const authMaterial = await this.refreshPromise;
 
             // If a custom refresh route is set, storing in cookies is handled in the server
             if (this.refreshRoute == null) {
@@ -105,7 +108,7 @@ export class CrossmintAuthClient extends CrossmintAuth {
             console.error(error);
             this.logout();
         } finally {
-            this.isRefreshing = false;
+            this.refreshPromise = null;
         }
     }
 
@@ -178,7 +181,7 @@ export class CrossmintAuthClient extends CrossmintAuth {
         try {
             const queryParams = new URLSearchParams({
                 signinAuthenticationMethod: "farcaster",
-                callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`,
+                callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,
             });
 
             const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {
@@ -187,7 +190,7 @@ export class CrossmintAuthClient extends CrossmintAuth {
                     ...data,
                     domain: data.signatureParams.domain,
                     redirect: true,
-                    callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`,
+                    callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback`,
                 }),
             });
 

package/dist/chunk-5H2QWRZD.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/CrossmintAuthClient.ts"],"sourcesContent":["import type { UseSignInData } from \"@farcaster/auth-kit\";\nimport {\n    AUTH_SDK_ROOT_ENDPOINT,\n    type AuthMaterialWithUser,\n    CROSSMINT_API_VERSION,\n    CrossmintAuth,\n    CrossmintAuthenticationError,\n    type CrossmintAuthOptions,\n    type OAuthProvider,\n    REFRESH_TOKEN_PREFIX,\n    SESSION_PREFIX,\n} from \"@crossmint/common-sdk-auth\";\nimport type { Crossmint, CrossmintApiClient } from \"@crossmint/common-sdk-base\";\nimport { type CancellableTask, queueTask } from \"@crossmint/client-sdk-base\";\nimport { deleteCookie, getCookie, getJWTExpiration, setCookie, TIME_BEFORE_EXPIRING_JWT_IN_SECONDS } from \"./utils\";\n\ntype CrossmintAuthClientConfig = CrossmintAuthOptions & {\n    callbacks?: CrossmintAuthClientCallbacks;\n    logoutRoute?: string;\n};\n\nexport class CrossmintAuthClient extends CrossmintAuth {\n    private callbacks: CrossmintAuthClientCallbacks;\n    private refreshTask: CancellableTask | null = null;\n    private isRefreshing = false;\n    private logoutRoute: string | null;\n\n    private constructor(crossmint: Crossmint, apiClient: CrossmintApiClient, config: CrossmintAuthClientConfig = {}) {\n        super(crossmint, apiClient, config);\n        this.callbacks = config.callbacks ?? {};\n        this.logoutRoute = config.logoutRoute ?? null;\n    }\n\n    public static from(crossmint: Crossmint, config: CrossmintAuthClientConfig = {}): CrossmintAuthClient {\n        const authClient = new CrossmintAuthClient(crossmint, CrossmintAuth.defaultApiClient(crossmint), config);\n        // In case an instance is created on the server, we can't refresh as this stores cookies\n        if (typeof window !== \"undefined\") {\n            authClient.handleRefreshAuthMaterial();\n        }\n        return authClient;\n    }\n\n    public async getUser() {\n        try {\n            const response = await this.apiClient.get(`api/${CROSSMINT_API_VERSION}/sdk/auth/user`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to fetch user: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public storeAuthMaterial(authMaterial: AuthMaterialWithUser) {\n        setCookie(SESSION_PREFIX, authMaterial.jwt);\n        setCookie(REFRESH_TOKEN_PREFIX, authMaterial.refreshToken.secret, authMaterial.refreshToken.expiresAt);\n    }\n\n    public async logout() {\n        // Store the old refresh token to pass it to the logout route before deleting the cookies\n        const oldRefreshToken = getCookie(REFRESH_TOKEN_PREFIX);\n\n        // Even if there's a server error, we want to clear the cookies and we do it first to load faster\n        deleteCookie(REFRESH_TOKEN_PREFIX);\n        deleteCookie(SESSION_PREFIX);\n        this.callbacks.onLogout?.();\n        try {\n            if (this.logoutRoute != null) {\n                await this.logoutFromCustomRoute();\n            } else if (oldRefreshToken != null) {\n                await this.logoutFromDefaultRoute(oldRefreshToken);\n            }\n        } catch (error) {\n            console.error(error);\n        }\n    }\n\n    public async handleRefreshAuthMaterial(refreshTokenSecret?: string): Promise<void> {\n        const refreshToken = refreshTokenSecret ?? getCookie(REFRESH_TOKEN_PREFIX);\n        // If there is a custom refresh route, that endpoint will fetch the cookies itself\n        if ((refreshToken == null && this.refreshRoute == null) || this.isRefreshing) {\n            return;\n        }\n\n        try {\n            this.isRefreshing = true;\n            const authMaterial = await this.refreshAuthMaterial(refreshToken);\n\n            // If a custom refresh route is set, storing in cookies is handled in the server\n            if (this.refreshRoute == null) {\n                this.storeAuthMaterial(authMaterial);\n            }\n\n            this.callbacks.onTokenRefresh?.(authMaterial);\n\n            this.scheduleNextRefresh(authMaterial.jwt);\n        } catch (error) {\n            console.error(error);\n            this.logout();\n        } finally {\n            this.isRefreshing = false;\n        }\n    }\n\n    public async getOAuthUrl(provider: OAuthProvider) {\n        try {\n            const response = await this.apiClient.get(`${AUTH_SDK_ROOT_ENDPOINT}/social/${provider}/start`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const data = await response.json();\n            return data.oauthUrl;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to get OAuth URL for provider ${provider}: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async sendEmailOtp(email: string) {\n        try {\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/otps/send`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({ email }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to send email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async confirmEmailOtp(email: string, emailId: string, token: string) {\n        try {\n            const queryParams = new URLSearchParams({\n                email,\n                signinAuthenticationMethod: \"email\",\n                token,\n                locale: \"en\",\n                state: emailId,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to confirm email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithFarcaster(data: UseSignInData) {\n        try {\n            const queryParams = new URLSearchParams({\n                signinAuthenticationMethod: \"farcaster\",\n                callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({\n                    ...data,\n                    domain: data.signatureParams.domain,\n                    redirect: true,\n                    callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`,\n                }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to sign in with Farcaster: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithSmartWallet(address: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate/start?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to initiate smart wallet sign in: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async authenticateSmartWallet(address: string, signature: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address, signature }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to authenticate smart wallet: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    private async logoutFromCustomRoute(): Promise<Response> {\n        if (!this.logoutRoute) {\n            throw new Error(\"Custom logout route is not set\");\n        }\n\n        return await fetch(this.logoutRoute, { method: \"POST\" });\n    }\n\n    private scheduleNextRefresh(jwt: string): void {\n        const jwtExpiration = getJWTExpiration(jwt);\n        if (!jwtExpiration) {\n            throw new Error(\"Invalid JWT\");\n        }\n\n        const currentTime = Date.now() / 1000;\n        const timeToExpire = jwtExpiration - currentTime - TIME_BEFORE_EXPIRING_JWT_IN_SECONDS;\n\n        if (timeToExpire > 0) {\n            const endTime = Date.now() + timeToExpire * 1000;\n            this.cancelScheduledRefresh();\n            this.refreshTask = queueTask(() => this.handleRefreshAuthMaterial(), endTime);\n        }\n    }\n\n    private cancelScheduledRefresh(): void {\n        if (this.refreshTask) {\n            this.refreshTask.cancel();\n            this.refreshTask = null;\n        }\n    }\n}\n\ntype CrossmintAuthClientCallbacks = {\n    onTokenRefresh?: (authMaterial: AuthMaterialWithUser) => void;\n    onLogout?: () => void;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AACA;AAAA,EACI;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACG;AAEP,SAA+B,iBAAiB;AAQzC,IAAM,sBAAN,MAAM,6BAA4B,cAAc;AAAA,EAM3C,YAAY,WAAsB,WAA+B,SAAoC,CAAC,GAAG;AA3BrH;AA4BQ,UAAM,WAAW,WAAW,MAAM;AALtC,SAAQ,cAAsC;AAC9C,SAAQ,eAAe;AAKnB,SAAK,aAAY,YAAO,cAAP,YAAoB,CAAC;AACtC,SAAK,eAAc,YAAO,gBAAP,YAAsB;AAAA,EAC7C;AAAA,EAEA,OAAc,KAAK,WAAsB,SAAoC,CAAC,GAAwB;AAClG,UAAM,aAAa,IAAI,qBAAoB,WAAW,cAAc,iBAAiB,SAAS,GAAG,MAAM;AAEvG,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,0BAA0B;AAAA,IACzC;AACA,WAAO;AAAA,EACX;AAAA,EAEa,UAAU;AAAA;AACnB,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,OAAO,qBAAqB,kBAAkB;AAAA,UACpF,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,yBAAyB,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACrF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEO,kBAAkB,cAAoC;AACzD,cAAU,gBAAgB,aAAa,GAAG;AAC1C,cAAU,sBAAsB,aAAa,aAAa,QAAQ,aAAa,aAAa,SAAS;AAAA,EACzG;AAAA,EAEa,SAAS;AAAA;AAjE1B;AAmEQ,YAAM,kBAAkB,UAAU,oBAAoB;AAGtD,mBAAa,oBAAoB;AACjC,mBAAa,cAAc;AAC3B,uBAAK,WAAU,aAAf;AACA,UAAI;AACA,YAAI,KAAK,eAAe,MAAM;AAC1B,gBAAM,KAAK,sBAAsB;AAAA,QACrC,WAAW,mBAAmB,MAAM;AAChC,gBAAM,KAAK,uBAAuB,eAAe;AAAA,QACrD;AAAA,MACJ,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AAAA,MACvB;AAAA,IACJ;AAAA;AAAA,EAEa,0BAA0B,oBAA4C;AAAA;AApFvF;AAqFQ,YAAM,eAAe,kDAAsB,UAAU,oBAAoB;AAEzE,UAAK,gBAAgB,QAAQ,KAAK,gBAAgB,QAAS,KAAK,cAAc;AAC1E;AAAA,MACJ;AAEA,UAAI;AACA,aAAK,eAAe;AACpB,cAAM,eAAe,MAAM,KAAK,oBAAoB,YAAY;AAGhE,YAAI,KAAK,gBAAgB,MAAM;AAC3B,eAAK,kBAAkB,YAAY;AAAA,QACvC;AAEA,yBAAK,WAAU,mBAAf,4BAAgC;AAEhC,aAAK,oBAAoB,aAAa,GAAG;AAAA,MAC7C,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AACnB,aAAK,OAAO;AAAA,MAChB,UAAE;AACE,aAAK,eAAe;AAAA,MACxB;AAAA,IACJ;AAAA;AAAA,EAEa,YAAY,UAAyB;AAAA;AAC9C,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,GAAG,sBAAsB,WAAW,QAAQ,UAAU;AAAA,UAC5F,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,eAAO,KAAK;AAAA,MAChB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,QAAQ,KAAK,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjH;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,aAAa,OAAe;AAAA;AACrC,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,cAAc;AAAA,UAC9E,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,QAClC,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACzF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,gBAAgB,OAAe,SAAiB,OAAe;AAAA;AACxE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC;AAAA,UACA,4BAA4B;AAAA,UAC5B;AAAA,UACA,QAAQ;AAAA,UACR,OAAO;AAAA,QACX,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,gCAAgC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QAC5F;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,oBAAoB,MAAqB;AAAA;AAClD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC,4BAA4B;AAAA,UAC5B,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,QACpE,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,iCACd,OADc;AAAA,YAEjB,QAAQ,KAAK,gBAAgB;AAAA,YAC7B,UAAU;AAAA,YACV,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,UACpE,EAAC;AAAA,QACL,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,sBAAsB,SAAiB;AAAA;AAChD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,sCAAsC,WAAW;AAAA,UAC1E;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,QAAQ,CAAC;AAAA,UACnD;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,4CAA4C,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACxG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,wBAAwB,SAAiB,WAAmB;AAAA;AACrE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,gCAAgC,WAAW;AAAA,UACpE;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,SAAS,UAAU,CAAC;AAAA,UAC9D;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACpG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEc,wBAA2C;AAAA;AACrD,UAAI,CAAC,KAAK,aAAa;AACnB,cAAM,IAAI,MAAM,gCAAgC;AAAA,MACpD;AAEA,aAAO,MAAM,MAAM,KAAK,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC3D;AAAA;AAAA,EAEQ,oBAAoB,KAAmB;AAC3C,UAAM,gBAAgB,iBAAiB,GAAG;AAC1C,QAAI,CAAC,eAAe;AAChB,YAAM,IAAI,MAAM,aAAa;AAAA,IACjC;AAEA,UAAM,cAAc,KAAK,IAAI,IAAI;AACjC,UAAM,eAAe,gBAAgB,cAAc;AAEnD,QAAI,eAAe,GAAG;AAClB,YAAM,UAAU,KAAK,IAAI,IAAI,eAAe;AAC5C,WAAK,uBAAuB;AAC5B,WAAK,cAAc,UAAU,MAAM,KAAK,0BAA0B,GAAG,OAAO;AAAA,IAChF;AAAA,EACJ;AAAA,EAEQ,yBAA+B;AACnC,QAAI,KAAK,aAAa;AAClB,WAAK,YAAY,OAAO;AACxB,WAAK,cAAc;AAAA,IACvB;AAAA,EACJ;AACJ;","names":[]}

package/dist/chunk-M4V2KE2Y.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/CrossmintAuthClient.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AACA;AAAA,EACI;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACG;AAEP,SAA+B,iBAAiB;AAQzC,IAAM,sBAAN,MAAM,6BAA4B,cAAc;AAAA,EAM3C,YAAY,WAAsB,WAA+B,SAAoC,CAAC,GAAG;AA3BrH;AA4BQ,UAAM,WAAW,WAAW,MAAM;AALtC,SAAQ,cAAsC;AAC9C,SAAQ,eAAe;AAKnB,SAAK,aAAY,YAAO,cAAP,YAAoB,CAAC;AACtC,SAAK,eAAc,YAAO,gBAAP,YAAsB;AAAA,EAC7C;AAAA,EAEA,OAAc,KAAK,WAAsB,SAAoC,CAAC,GAAwB;AAClG,UAAM,aAAa,IAAI,qBAAoB,WAAW,cAAc,iBAAiB,SAAS,GAAG,MAAM;AAEvG,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,0BAA0B;AAAA,IACzC;AACA,WAAO;AAAA,EACX;AAAA,EAEa,UAAU;AAAA;AACnB,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,OAAO,qBAAqB,kBAAkB;AAAA,UACpF,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,yBAAyB,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACrF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEO,kBAAkB,cAAoC;AACzD,cAAU,gBAAgB,aAAa,GAAG;AAC1C,cAAU,sBAAsB,aAAa,aAAa,QAAQ,aAAa,aAAa,SAAS;AAAA,EACzG;AAAA,EAEa,SAAS;AAAA;AAjE1B;AAmEQ,YAAM,kBAAkB,UAAU,oBAAoB;AAGtD,mBAAa,oBAAoB;AACjC,mBAAa,cAAc;AAC3B,uBAAK,WAAU,aAAf;AACA,UAAI;AACA,YAAI,KAAK,eAAe,MAAM;AAC1B,gBAAM,KAAK,sBAAsB;AAAA,QACrC,WAAW,mBAAmB,MAAM;AAChC,gBAAM,KAAK,uBAAuB,eAAe;AAAA,QACrD;AAAA,MACJ,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AAAA,MACvB;AAAA,IACJ;AAAA;AAAA,EAEa,0BAA0B,oBAA4C;AAAA;AApFvF;AAqFQ,YAAM,eAAe,kDAAsB,UAAU,oBAAoB;AAEzE,UAAK,gBAAgB,QAAQ,KAAK,gBAAgB,QAAS,KAAK,cAAc;AAC1E;AAAA,MACJ;AAEA,UAAI;AACA,aAAK,eAAe;AACpB,cAAM,eAAe,MAAM,KAAK,oBAAoB,YAAY;AAGhE,YAAI,KAAK,gBAAgB,MAAM;AAC3B,eAAK,kBAAkB,YAAY;AAAA,QACvC;AAEA,yBAAK,WAAU,mBAAf,4BAAgC;AAEhC,aAAK,oBAAoB,aAAa,GAAG;AAAA,MAC7C,SAAS,OAAO;AACZ,gBAAQ,MAAM,KAAK;AACnB,aAAK,OAAO;AAAA,MAChB,UAAE;AACE,aAAK,eAAe;AAAA,MACxB;AAAA,IACJ;AAAA;AAAA,EAEa,YAAY,UAAyB;AAAA;AAC9C,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,IAAI,GAAG,sBAAsB,WAAW,QAAQ,UAAU;AAAA,UAC5F,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,eAAO,KAAK;AAAA,MAChB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,QAAQ,KAAK,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjH;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,aAAa,OAAe;AAAA;AACrC,UAAI;AACA,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,cAAc;AAAA,UAC9E,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,QAClC,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACzF;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,gBAAgB,OAAe,SAAiB,OAAe;AAAA;AACxE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC;AAAA,UACA,4BAA4B;AAAA,UAC5B;AAAA,UACA,QAAQ;AAAA,UACR,OAAO;AAAA,QACX,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAClD,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,gCAAgC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QAC5F;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,oBAAoB,MAAqB;AAAA;AAClD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB;AAAA,UACpC,4BAA4B;AAAA,UAC5B,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,QACpE,CAAC;AAED,cAAM,WAAW,MAAM,KAAK,UAAU,KAAK,GAAG,sBAAsB,iBAAiB,WAAW,IAAI;AAAA,UAChG,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,iCACd,OADc;AAAA,YAEjB,QAAQ,KAAK,gBAAgB;AAAA,YAC7B,UAAU;AAAA,YACV,aAAa,GAAG,KAAK,UAAU,OAAO,IAAI,sBAAsB;AAAA,UACpE,EAAC;AAAA,QACL,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,cAAM,UAAU,MAAM,SAAS,KAAK;AACpC,eAAO,QAAQ;AAAA,MACnB,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACjG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,sBAAsB,SAAiB;AAAA;AAChD,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,sCAAsC,WAAW;AAAA,UAC1E;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,QAAQ,CAAC;AAAA,UACnD;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,4CAA4C,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACxG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEa,wBAAwB,SAAiB,WAAmB;AAAA;AACrE,UAAI;AACA,cAAM,cAAc,IAAI,gBAAgB,EAAE,4BAA4B,MAAM,CAAC;AAC7E,cAAM,WAAW,MAAM,KAAK,UAAU;AAAA,UAClC,GAAG,sBAAsB,gCAAgC,WAAW;AAAA,UACpE;AAAA,YACI,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,YAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,SAAS,UAAU,CAAC;AAAA,UAC9D;AAAA,QACJ;AAEA,YAAI,CAAC,SAAS,IAAI;AACd,gBAAM,MAAM,SAAS,KAAK;AAAA,QAC9B;AAEA,eAAO,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACZ,cAAM,IAAI;AAAA,UACN,wCAAwC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACpG;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA,EAEc,wBAA2C;AAAA;AACrD,UAAI,CAAC,KAAK,aAAa;AACnB,cAAM,IAAI,MAAM,gCAAgC;AAAA,MACpD;AAEA,aAAO,MAAM,MAAM,KAAK,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC3D;AAAA;AAAA,EAEQ,oBAAoB,KAAmB;AAC3C,UAAM,gBAAgB,iBAAiB,GAAG;AAC1C,QAAI,CAAC,eAAe;AAChB,YAAM,IAAI,MAAM,aAAa;AAAA,IACjC;AAEA,UAAM,cAAc,KAAK,IAAI,IAAI;AACjC,UAAM,eAAe,gBAAgB,cAAc;AAEnD,QAAI,eAAe,GAAG;AAClB,YAAM,UAAU,KAAK,IAAI,IAAI,eAAe;AAC5C,WAAK,uBAAuB;AAC5B,WAAK,cAAc,UAAU,MAAM,KAAK,0BAA0B,GAAG,OAAO;AAAA,IAChF;AAAA,EACJ;AAAA,EAEQ,yBAA+B;AACnC,QAAI,KAAK,aAAa;AAClB,WAAK,YAAY,OAAO;AACxB,WAAK,cAAc;AAAA,IACvB;AAAA,EACJ;AACJ","sourcesContent":["import type { UseSignInData } from \"@farcaster/auth-kit\";\nimport {\n    AUTH_SDK_ROOT_ENDPOINT,\n    type AuthMaterialWithUser,\n    CROSSMINT_API_VERSION,\n    CrossmintAuth,\n    CrossmintAuthenticationError,\n    type CrossmintAuthOptions,\n    type OAuthProvider,\n    REFRESH_TOKEN_PREFIX,\n    SESSION_PREFIX,\n} from \"@crossmint/common-sdk-auth\";\nimport type { Crossmint, CrossmintApiClient } from \"@crossmint/common-sdk-base\";\nimport { type CancellableTask, queueTask } from \"@crossmint/client-sdk-base\";\nimport { deleteCookie, getCookie, getJWTExpiration, setCookie, TIME_BEFORE_EXPIRING_JWT_IN_SECONDS } from \"./utils\";\n\ntype CrossmintAuthClientConfig = CrossmintAuthOptions & {\n    callbacks?: CrossmintAuthClientCallbacks;\n    logoutRoute?: string;\n};\n\nexport class CrossmintAuthClient extends CrossmintAuth {\n    private callbacks: CrossmintAuthClientCallbacks;\n    private refreshTask: CancellableTask | null = null;\n    private isRefreshing = false;\n    private logoutRoute: string | null;\n\n    private constructor(crossmint: Crossmint, apiClient: CrossmintApiClient, config: CrossmintAuthClientConfig = {}) {\n        super(crossmint, apiClient, config);\n        this.callbacks = config.callbacks ?? {};\n        this.logoutRoute = config.logoutRoute ?? null;\n    }\n\n    public static from(crossmint: Crossmint, config: CrossmintAuthClientConfig = {}): CrossmintAuthClient {\n        const authClient = new CrossmintAuthClient(crossmint, CrossmintAuth.defaultApiClient(crossmint), config);\n        // In case an instance is created on the server, we can't refresh as this stores cookies\n        if (typeof window !== \"undefined\") {\n            authClient.handleRefreshAuthMaterial();\n        }\n        return authClient;\n    }\n\n    public async getUser() {\n        try {\n            const response = await this.apiClient.get(`api/${CROSSMINT_API_VERSION}/sdk/auth/user`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to fetch user: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public storeAuthMaterial(authMaterial: AuthMaterialWithUser) {\n        setCookie(SESSION_PREFIX, authMaterial.jwt);\n        setCookie(REFRESH_TOKEN_PREFIX, authMaterial.refreshToken.secret, authMaterial.refreshToken.expiresAt);\n    }\n\n    public async logout() {\n        // Store the old refresh token to pass it to the logout route before deleting the cookies\n        const oldRefreshToken = getCookie(REFRESH_TOKEN_PREFIX);\n\n        // Even if there's a server error, we want to clear the cookies and we do it first to load faster\n        deleteCookie(REFRESH_TOKEN_PREFIX);\n        deleteCookie(SESSION_PREFIX);\n        this.callbacks.onLogout?.();\n        try {\n            if (this.logoutRoute != null) {\n                await this.logoutFromCustomRoute();\n            } else if (oldRefreshToken != null) {\n                await this.logoutFromDefaultRoute(oldRefreshToken);\n            }\n        } catch (error) {\n            console.error(error);\n        }\n    }\n\n    public async handleRefreshAuthMaterial(refreshTokenSecret?: string): Promise<void> {\n        const refreshToken = refreshTokenSecret ?? getCookie(REFRESH_TOKEN_PREFIX);\n        // If there is a custom refresh route, that endpoint will fetch the cookies itself\n        if ((refreshToken == null && this.refreshRoute == null) || this.isRefreshing) {\n            return;\n        }\n\n        try {\n            this.isRefreshing = true;\n            const authMaterial = await this.refreshAuthMaterial(refreshToken);\n\n            // If a custom refresh route is set, storing in cookies is handled in the server\n            if (this.refreshRoute == null) {\n                this.storeAuthMaterial(authMaterial);\n            }\n\n            this.callbacks.onTokenRefresh?.(authMaterial);\n\n            this.scheduleNextRefresh(authMaterial.jwt);\n        } catch (error) {\n            console.error(error);\n            this.logout();\n        } finally {\n            this.isRefreshing = false;\n        }\n    }\n\n    public async getOAuthUrl(provider: OAuthProvider) {\n        try {\n            const response = await this.apiClient.get(`${AUTH_SDK_ROOT_ENDPOINT}/social/${provider}/start`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const data = await response.json();\n            return data.oauthUrl;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to get OAuth URL for provider ${provider}: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async sendEmailOtp(email: string) {\n        try {\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/otps/send`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({ email }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to send email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async confirmEmailOtp(email: string, emailId: string, token: string) {\n        try {\n            const queryParams = new URLSearchParams({\n                email,\n                signinAuthenticationMethod: \"email\",\n                token,\n                locale: \"en\",\n                state: emailId,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to confirm email OTP: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithFarcaster(data: UseSignInData) {\n        try {\n            const queryParams = new URLSearchParams({\n                signinAuthenticationMethod: \"farcaster\",\n                callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`,\n            });\n\n            const response = await this.apiClient.post(`${AUTH_SDK_ROOT_ENDPOINT}/authenticate?${queryParams}`, {\n                headers: { \"Content-Type\": \"application/json\" },\n                body: JSON.stringify({\n                    ...data,\n                    domain: data.signatureParams.domain,\n                    redirect: true,\n                    callbackUrl: `${this.apiClient.baseUrl}/${AUTH_SDK_ROOT_ENDPOINT}/callback?isPopup=false`,\n                }),\n            });\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            const resData = await response.json();\n            return resData.oneTimeSecret;\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to sign in with Farcaster: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async signInWithSmartWallet(address: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate/start?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to initiate smart wallet sign in: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    public async authenticateSmartWallet(address: string, signature: string) {\n        try {\n            const queryParams = new URLSearchParams({ signinAuthenticationMethod: \"evm\" });\n            const response = await this.apiClient.post(\n                `${AUTH_SDK_ROOT_ENDPOINT}/crypto_wallets/authenticate?${queryParams}`,\n                {\n                    headers: { \"Content-Type\": \"application/json\" },\n                    body: JSON.stringify({ walletAddress: address, signature }),\n                }\n            );\n\n            if (!response.ok) {\n                throw await response.text();\n            }\n\n            return await response.json();\n        } catch (error) {\n            throw new CrossmintAuthenticationError(\n                `Failed to authenticate smart wallet: ${error instanceof Error ? error.message : \"Unknown error\"}`\n            );\n        }\n    }\n\n    private async logoutFromCustomRoute(): Promise<Response> {\n        if (!this.logoutRoute) {\n            throw new Error(\"Custom logout route is not set\");\n        }\n\n        return await fetch(this.logoutRoute, { method: \"POST\" });\n    }\n\n    private scheduleNextRefresh(jwt: string): void {\n        const jwtExpiration = getJWTExpiration(jwt);\n        if (!jwtExpiration) {\n            throw new Error(\"Invalid JWT\");\n        }\n\n        const currentTime = Date.now() / 1000;\n        const timeToExpire = jwtExpiration - currentTime - TIME_BEFORE_EXPIRING_JWT_IN_SECONDS;\n\n        if (timeToExpire > 0) {\n            const endTime = Date.now() + timeToExpire * 1000;\n            this.cancelScheduledRefresh();\n            this.refreshTask = queueTask(() => this.handleRefreshAuthMaterial(), endTime);\n        }\n    }\n\n    private cancelScheduledRefresh(): void {\n        if (this.refreshTask) {\n            this.refreshTask.cancel();\n            this.refreshTask = null;\n        }\n    }\n}\n\ntype CrossmintAuthClientCallbacks = {\n    onTokenRefresh?: (authMaterial: AuthMaterialWithUser) => void;\n    onLogout?: () => void;\n};\n"]}