@elementor/editor-audits 4.4.0-1073 → 4.4.0-1075

package/dist/index.mjs

@@ -39,18 +39,66 @@ function getWindowConfig() {
   return config;
 }
 
+// src/utils/session-expiration.ts
+var NONCE_INVALID_CODE = "rest_cookie_invalid_nonce";
+var DEFAULT_AJAX_URL = "/wp-admin/admin-ajax.php";
+var SessionExpiredError = class extends Error {
+};
+var nonceRefreshPromise = null;
+function isNonceInvalidError(error) {
+  const response = error?.response;
+  return response?.status === 403 && response?.data?.code === NONCE_INVALID_CODE;
+}
+async function refreshAuditsNonce() {
+  if (nonceRefreshPromise) {
+    return nonceRefreshPromise;
+  }
+  nonceRefreshPromise = requestFreshNonce();
+  try {
+    return await nonceRefreshPromise;
+  } finally {
+    nonceRefreshPromise = null;
+  }
+}
+async function requestFreshNonce() {
+  const ajaxUrl = window.elementorCommon?.ajax?.config?.url ?? DEFAULT_AJAX_URL;
+  const url = new URL(ajaxUrl, window.location.origin);
+  url.searchParams.set("action", "rest-nonce");
+  const response = await fetch(url.toString(), { credentials: "same-origin" });
+  if (!response.ok) {
+    throw new Error(`Failed to refresh audits nonce: HTTP ${response.status}`);
+  }
+  const nonce = await response.text();
+  if (!nonce || "0" === nonce) {
+    throw new SessionExpiredError("Session expired \u2014 received invalid nonce");
+  }
+  window.elementorAudits = { ...getWindowConfig(), nonce };
+  return nonce;
+}
+
 // src/api/page-context-client.ts
 async function fetchPageContext(documentId, attachmentIds) {
+  return requestPageContext(documentId, attachmentIds, true);
+}
+async function requestPageContext(documentId, attachmentIds, allowNonceRetry) {
   const { restNamespace, nonce } = getWindowConfig();
   const url = `${restNamespace}/audits/page-context`;
-  const response = await httpService().get(url, {
-    params: {
-      document_id: documentId,
-      attachment_ids: attachmentIds
-    },
-    headers: { "X-WP-Nonce": nonce }
-  });
-  return response.data;
+  try {
+    const response = await httpService().get(url, {
+      params: {
+        document_id: documentId,
+        attachment_ids: attachmentIds
+      },
+      headers: { "X-WP-Nonce": nonce }
+    });
+    return response.data;
+  } catch (error) {
+    if (!allowNonceRetry || !isNonceInvalidError(error)) {
+      throw error;
+    }
+    await refreshAuditsNonce();
+    return requestPageContext(documentId, attachmentIds, false);
+  }
 }
 
 // src/registry.ts
@@ -422,6 +470,9 @@ var slice = __createSlice({
       state.status = "error";
       state.error = action.payload;
     },
+    runAborted(state) {
+      state.status = state.report ? "ready" : "idle";
+    },
     reportRestored(state, action) {
       state.status = "ready";
       state.report = action.payload;
@@ -483,6 +534,10 @@ function useAuditReport() {
       dispatch(slice.actions.runSucceeded(nextReport));
       persistReport(documentIdToRun, nextReport);
     } catch (e) {
+      if (e instanceof SessionExpiredError) {
+        dispatch(slice.actions.runAborted());
+        return;
+      }
       dispatch(slice.actions.runFailed(e instanceof Error ? e.message : "Unknown error"));
     }
   };