@darkauth/client 0.2.1 → 1.4.4

package/dist/index.js

@@ -29,9 +29,19 @@ let cfg = {
 };
 const OBFUSCATION_KEY = "DarkAuth-Storage-Protection-2025";
 const EMPTY_DRK = new Uint8Array(0);
+const ID_TOKEN_KEY = "id_token";
 export function setConfig(next) {
     cfg = { ...cfg, ...next };
 }
+function setStoredIdToken(token) {
+    localStorage.setItem(ID_TOKEN_KEY, token);
+}
+function getStoredIdToken() {
+    return localStorage.getItem(ID_TOKEN_KEY);
+}
+function clearStoredIdToken() {
+    localStorage.removeItem(ID_TOKEN_KEY);
+}
 function bytesToBase64Url(bytes) {
     let s = "";
     for (const b of bytes)
@@ -158,7 +168,7 @@ export async function handleCallback() {
             history.replaceState(null, "", location.origin + location.pathname);
         }
         catch { }
-        sessionStorage.setItem("id_token", idToken);
+        setStoredIdToken(idToken);
         localStorage.removeItem("drk_protected");
         if (refreshToken)
             localStorage.setItem("refresh_token", refreshToken);
@@ -182,7 +192,7 @@ export async function handleCallback() {
         history.replaceState(null, "", location.origin + location.pathname);
     }
     catch { }
-    sessionStorage.setItem("id_token", idToken);
+    setStoredIdToken(idToken);
     const obfuscatedDrk = obfuscateKey(drk);
     localStorage.setItem("drk_protected", bytesToBase64Url(obfuscatedDrk));
     if (refreshToken)
@@ -190,7 +200,7 @@ export async function handleCallback() {
     return { idToken, drk, refreshToken };
 }
 export function getStoredSession() {
-    const idToken = sessionStorage.getItem("id_token");
+    const idToken = getStoredIdToken();
     const obfuscatedDrkBase64 = localStorage.getItem("drk_protected");
     if (!idToken)
         return null;
@@ -224,14 +234,17 @@ export async function refreshSession() {
     });
     if (!response.ok) {
         if (response.status === 401) {
-            localStorage.removeItem("refresh_token");
+            const latestRefreshToken = localStorage.getItem("refresh_token");
+            if (latestRefreshToken === refreshToken) {
+                localStorage.removeItem("refresh_token");
+            }
         }
         return null;
     }
     const tokenResponse = await response.json();
     const idToken = tokenResponse.id_token;
     const newRefreshToken = tokenResponse.refresh_token;
-    sessionStorage.setItem("id_token", idToken);
+    setStoredIdToken(idToken);
     if (newRefreshToken)
         localStorage.setItem("refresh_token", newRefreshToken);
     const obfuscatedDrkBase64 = localStorage.getItem("drk_protected");
@@ -242,14 +255,14 @@ export async function refreshSession() {
     return { idToken, drk, refreshToken: newRefreshToken || refreshToken };
 }
 export function logout() {
-    sessionStorage.removeItem("id_token");
+    clearStoredIdToken();
     localStorage.removeItem("drk_protected");
     sessionStorage.removeItem("zk_eph_priv_jwk");
     sessionStorage.removeItem("pkce_verifier");
     localStorage.removeItem("refresh_token");
 }
 export function getCurrentUser() {
-    const idToken = sessionStorage.getItem("id_token");
+    const idToken = getStoredIdToken();
     if (!idToken)
         return null;
     return parseJwt(idToken);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darkauth/client",
-  "version": "0.2.1",
+  "version": "1.4.4",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",