@emilgroup/accounting-sdk 1.34.1-beta.47 → 1.34.1-beta.49

package/README.md

@@ -17,11 +17,11 @@ Although this package can be used in both TypeScript and JavaScript, it is inten
 Navigate to the folder of your consuming project and run one of the following commands:
 
 ```
-npm install @emilgroup/accounting-sdk@1.34.1-beta.47 --save
+npm install @emilgroup/accounting-sdk@1.34.1-beta.49 --save
 ```
 or 
 ```
-yarn add @emilgroup/accounting-sdk@1.34.1-beta.47
+yarn add @emilgroup/accounting-sdk@1.34.1-beta.49
 ```
 
 And then you can import `FinancialAccountsApi`.

package/base.ts

@@ -102,10 +102,14 @@ export class BaseAPI {
             this.configuration = configuration;
             this.basePath = configuration.basePath || this.basePath;
 
-            // Use config token if provided, otherwise use tokenData token
-            const configToken = this.configuration.accessToken;
-            const storedToken = accessToken ? `Bearer ${accessToken}` : '';
-            this.configuration.accessToken = configToken || storedToken;
+            if (configuration.cookieAuth) {
+                this.useCookieAuth();
+            } else {
+                // Use config token if provided, otherwise use tokenData token
+                const configToken = this.configuration.accessToken;
+                const storedToken = accessToken ? `Bearer ${accessToken}` : '';
+                this.configuration.accessToken = configToken || storedToken;
+            }
         } else {
             const { accessToken, username } = this.tokenData;
 
@@ -119,6 +123,12 @@ export class BaseAPI {
         this.attachInterceptor(axios);
     }
 
+    // Cookie mode: the browser sends the HttpOnly access cookie, so no token is read from storage.
+    private useCookieAuth() {
+        this.configuration.username = this.configuration.username || this.tokenData.username;
+        this.configuration.baseOptions = { ...this.configuration.baseOptions, withCredentials: true };
+    }
+
     selectEnvironment(env: Environment) {
         this.selectBasePath(env);
     }
@@ -152,10 +162,12 @@ export class BaseAPI {
         const { data: { accessToken, permissions } } = response;
 
         this.configuration.username = username;
-        this.configuration.accessToken = `Bearer ${accessToken}`;
         this.tokenData.username = username;
-        this.tokenData.accessToken = accessToken;
         this.tokenData.permissions = permissions;
+        if (!this.configuration.cookieAuth) {
+            this.configuration.accessToken = `Bearer ${accessToken}`;
+            this.tokenData.accessToken = accessToken;
+        }
 
         // Switch workspace if provided
         if (targetWorkspace) {
@@ -178,7 +190,7 @@ export class BaseAPI {
             url: `${this.configuration.basePath}/authservice/v1/workspaces/switch`,
             headers: {
                 'Content-Type': 'application/json',
-                'Authorization': `Bearer ${this.configuration.accessToken}`,
+                ...(this.configuration.cookieAuth ? {} : { 'Authorization': `Bearer ${this.configuration.accessToken}` }),
             },
             data: {
                 username: this.configuration.username,
@@ -190,10 +202,12 @@ export class BaseAPI {
         const response = await globalAxios.request<SwitchWorkspaceResponseClass>(options);
 
         const { data: { accessToken, permissions } } = response;
-        
-        this.configuration.accessToken = `Bearer ${accessToken}`;
-        this.tokenData.accessToken = accessToken;
+
         this.tokenData.permissions = permissions;
+        if (!this.configuration.cookieAuth) {
+            this.configuration.accessToken = `Bearer ${accessToken}`;
+            this.tokenData.accessToken = accessToken;
+        }
 
         this.storeTokenData({
             ...this.tokenData
@@ -233,6 +247,11 @@ export class BaseAPI {
 
     private storeTokenData(tokenData?: TokenData) {
         if (typeof window !== 'undefined') {
+            if (tokenData && this.configuration?.cookieAuth) {
+                // Cookie mode saves who is logged in, never the token; a token saved by apps not yet migrated stays.
+                const { username, permissions } = tokenData;
+                tokenData = { ...(defaultStorage().get<TokenData>(TOKEN_DATA) || {}), username, permissions };
+            }
             defaultStorage().set<TokenData>(TOKEN_DATA, tokenData);
         }
     }
@@ -263,15 +282,17 @@ export class BaseAPI {
                         originalConfig._retry = true;
                         try {
                             const { accessToken: tokenString, permissions } = await this.refreshTokenInternal();
-                            const accessToken = `Bearer ${tokenString}`;
                             this.tokenData.permissions = permissions;
 
                             delete originalConfig.headers['Authorization']
 
-                            originalConfig.headers['Authorization'] = accessToken;
-
-                            this.configuration.accessToken = accessToken;
-                            this.tokenData.accessToken = tokenString;
+                            // In cookie mode the refresh reply renewed the access cookie, so retry without a header.
+                            if (!this.configuration.cookieAuth) {
+                                const accessToken = `Bearer ${tokenString}`;
+                                originalConfig.headers['Authorization'] = accessToken;
+                                this.configuration.accessToken = accessToken;
+                                this.tokenData.accessToken = tokenString;
+                            }
 
                             this.storeTokenData(this.tokenData);
 

package/configuration.ts

@@ -21,6 +21,7 @@ export interface ConfigurationParameters {
     basePath?: string;
     baseOptions?: any;
     formDataCtor?: new () => any;
+    cookieAuth?: boolean;
 }
 
 export class Configuration {
@@ -74,6 +75,15 @@ export class Configuration {
      */
     formDataCtor?: new () => any;
 
+    /**
+     * Authenticate with the HttpOnly access cookie instead of a stored token: every call sends credentials.
+     * The browser holds one cookie, so use it with one logged-in account; log out through the auth service.
+     *
+     * @type {boolean}
+     * @memberof Configuration
+     */
+    cookieAuth?: boolean;
+
     constructor(param: ConfigurationParameters = {}) {
         this.apiKey = param.apiKey;
         this.username = param.username;
@@ -82,6 +92,7 @@ export class Configuration {
         this.basePath = param.basePath;
         this.baseOptions = param.baseOptions;
         this.formDataCtor = param.formDataCtor;
+        this.cookieAuth = param.cookieAuth;
     }
 
     /**

package/dist/base.d.ts

@@ -63,6 +63,7 @@ export declare class BaseAPI {
     protected configuration: Configuration | undefined;
     private tokenData?;
     constructor(configuration?: Configuration, basePath?: string, axios?: AxiosInstance);
+    private useCookieAuth;
     selectEnvironment(env: Environment): void;
     selectBasePath(path: string): void;
     getPermissions(): Array<string>;

package/dist/base.js

@@ -128,10 +128,15 @@ var BaseAPI = /** @class */ (function () {
             var accessToken = this.tokenData.accessToken;
             this.configuration = configuration;
             this.basePath = configuration.basePath || this.basePath;
-            // Use config token if provided, otherwise use tokenData token
-            var configToken = this.configuration.accessToken;
-            var storedToken = accessToken ? "Bearer ".concat(accessToken) : '';
-            this.configuration.accessToken = configToken || storedToken;
+            if (configuration.cookieAuth) {
+                this.useCookieAuth();
+            }
+            else {
+                // Use config token if provided, otherwise use tokenData token
+                var configToken = this.configuration.accessToken;
+                var storedToken = accessToken ? "Bearer ".concat(accessToken) : '';
+                this.configuration.accessToken = configToken || storedToken;
+            }
         }
         else {
             var _a = this.tokenData, accessToken = _a.accessToken, username = _a.username;
@@ -143,6 +148,11 @@ var BaseAPI = /** @class */ (function () {
         }
         this.attachInterceptor(axios);
     }
+    // Cookie mode: the browser sends the HttpOnly access cookie, so no token is read from storage.
+    BaseAPI.prototype.useCookieAuth = function () {
+        this.configuration.username = this.configuration.username || this.tokenData.username;
+        this.configuration.baseOptions = __assign(__assign({}, this.configuration.baseOptions), { withCredentials: true });
+    };
     BaseAPI.prototype.selectEnvironment = function (env) {
         this.selectBasePath(env);
     };
@@ -177,10 +187,12 @@ var BaseAPI = /** @class */ (function () {
                         response = _b.sent();
                         _a = response.data, accessToken = _a.accessToken, permissions = _a.permissions;
                         this.configuration.username = username;
-                        this.configuration.accessToken = "Bearer ".concat(accessToken);
                         this.tokenData.username = username;
-                        this.tokenData.accessToken = accessToken;
                         this.tokenData.permissions = permissions;
+                        if (!this.configuration.cookieAuth) {
+                            this.configuration.accessToken = "Bearer ".concat(accessToken);
+                            this.tokenData.accessToken = accessToken;
+                        }
                         if (!targetWorkspace) return [3 /*break*/, 3];
                         return [4 /*yield*/, this.switchWorkspace(targetWorkspace)];
                     case 2:
@@ -206,10 +218,7 @@ var BaseAPI = /** @class */ (function () {
                         options = {
                             method: 'POST',
                             url: "".concat(this.configuration.basePath, "/authservice/v1/workspaces/switch"),
-                            headers: {
-                                'Content-Type': 'application/json',
-                                'Authorization': "Bearer ".concat(this.configuration.accessToken),
-                            },
+                            headers: __assign({ 'Content-Type': 'application/json' }, (this.configuration.cookieAuth ? {} : { 'Authorization': "Bearer ".concat(this.configuration.accessToken) })),
                             data: {
                                 username: this.configuration.username,
                                 targetWorkspace: targetWorkspace,
@@ -220,9 +229,11 @@ var BaseAPI = /** @class */ (function () {
                     case 1:
                         response = _b.sent();
                         _a = response.data, accessToken = _a.accessToken, permissions = _a.permissions;
-                        this.configuration.accessToken = "Bearer ".concat(accessToken);
-                        this.tokenData.accessToken = accessToken;
                         this.tokenData.permissions = permissions;
+                        if (!this.configuration.cookieAuth) {
+                            this.configuration.accessToken = "Bearer ".concat(accessToken);
+                            this.tokenData.accessToken = accessToken;
+                        }
                         this.storeTokenData(__assign({}, this.tokenData));
                         return [2 /*return*/];
                 }
@@ -265,7 +276,13 @@ var BaseAPI = /** @class */ (function () {
         });
     };
     BaseAPI.prototype.storeTokenData = function (tokenData) {
+        var _a;
         if (typeof window !== 'undefined') {
+            if (tokenData && ((_a = this.configuration) === null || _a === void 0 ? void 0 : _a.cookieAuth)) {
+                // Cookie mode saves who is logged in, never the token; a token saved by apps not yet migrated stays.
+                var username = tokenData.username, permissions = tokenData.permissions;
+                tokenData = __assign(__assign({}, ((0, common_1.defaultStorage)().get(TOKEN_DATA) || {})), { username: username, permissions: permissions });
+            }
             (0, common_1.defaultStorage)().set(TOKEN_DATA, tokenData);
         }
     };
@@ -300,12 +317,15 @@ var BaseAPI = /** @class */ (function () {
                         return [4 /*yield*/, this.refreshTokenInternal()];
                     case 2:
                         _a = _c.sent(), tokenString = _a.accessToken, permissions = _a.permissions;
-                        accessToken = "Bearer ".concat(tokenString);
                         this.tokenData.permissions = permissions;
                         delete originalConfig.headers['Authorization'];
-                        originalConfig.headers['Authorization'] = accessToken;
-                        this.configuration.accessToken = accessToken;
-                        this.tokenData.accessToken = tokenString;
+                        // In cookie mode the refresh reply renewed the access cookie, so retry without a header.
+                        if (!this.configuration.cookieAuth) {
+                            accessToken = "Bearer ".concat(tokenString);
+                            originalConfig.headers['Authorization'] = accessToken;
+                            this.configuration.accessToken = accessToken;
+                            this.tokenData.accessToken = tokenString;
+                        }
                         this.storeTokenData(this.tokenData);
                         return [2 /*return*/, axios(originalConfig)];
                     case 3:

package/dist/configuration.d.ts

@@ -17,6 +17,7 @@ export interface ConfigurationParameters {
     basePath?: string;
     baseOptions?: any;
     formDataCtor?: new () => any;
+    cookieAuth?: boolean;
 }
 export declare class Configuration {
     /**
@@ -68,6 +69,14 @@ export declare class Configuration {
      * @type {new () => FormData}
      */
     formDataCtor?: new () => any;
+    /**
+     * Authenticate with the HttpOnly access cookie instead of a stored token: every call sends credentials.
+     * The browser holds one cookie, so use it with one logged-in account; log out through the auth service.
+     *
+     * @type {boolean}
+     * @memberof Configuration
+     */
+    cookieAuth?: boolean;
     constructor(param?: ConfigurationParameters);
     /**
      * Check if the given MIME is a JSON MIME.

package/dist/configuration.js

@@ -24,6 +24,7 @@ var Configuration = /** @class */ (function () {
         this.basePath = param.basePath;
         this.baseOptions = param.baseOptions;
         this.formDataCtor = param.formDataCtor;
+        this.cookieAuth = param.cookieAuth;
     }
     /**
      * Check if the given MIME is a JSON MIME.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emilgroup/accounting-sdk",
-  "version": "1.34.1-beta.47",
+  "version": "1.34.1-beta.49",
   "description": "OpenAPI client for @emilgroup/accounting-sdk",
   "author": "OpenAPI-Generator Contributors",
   "keywords": [