@etsoo/appscript 1.5.58 → 1.5.59

package/lib/cjs/app/CoreApp.js

@@ -14,6 +14,8 @@ const UserRole_1 = require("./UserRole");
 const AuthApi_1 = require("../erp/AuthApi");
 let CJ;
 const loadCrypto = () => import('crypto-js');
+// System API name
+const systemApi = 'system';
 /**
  * Core application
  */
@@ -201,12 +203,12 @@ class CoreApp {
         if (api) {
             // Base URL of the API
             api.baseUrl = this.settings.endpoint;
-            api.name = 'system';
+            api.name = systemApi;
             this.setApi(api, refresh);
             this.api = api;
         }
         else {
-            this.api = this.createApi('system', {
+            this.api = this.createApi(systemApi, {
                 endpoint: settings.endpoint,
                 webUrl: settings.webUrl
             }, refresh);
@@ -1476,6 +1478,10 @@ class CoreApp {
      * @returns Result
      */
     async exchangeToken(api, token) {
+        // Avoid to call the system API
+        if (api.name === systemApi) {
+            throw new Error('System API is not allowed to exchange token');
+        }
         // Call the API quietly, no loading bar and no error popup
         const data = await new AuthApi_1.AuthApi(this).exchangeToken({ token }, {
             showLoading: false,
@@ -1508,14 +1514,18 @@ class CoreApp {
     exchangeTokenAll(coreData, coreName) {
         coreName ?? (coreName = 'core');
         for (const name in this.apis) {
-            const api = this.apis[name];
+            // Ignore the system API as it has its own logic with refreshToken
+            if (name === systemApi)
+                continue;
+            const data = this.apis[name];
+            const api = data[0];
             // The core API
-            if (api[0].name === coreName) {
-                api[0].authorize(coreData.tokenType, coreData.accessToken);
-                this.updateApi(api, coreData.refreshToken, coreData.expiresIn);
+            if (name === coreName) {
+                api.authorize(coreData.tokenType, coreData.accessToken);
+                this.updateApi(data, coreData.refreshToken, coreData.expiresIn);
             }
             else {
-                this.exchangeToken(api[0], coreData.refreshToken);
+                this.exchangeToken(api, coreData.refreshToken);
             }
         }
     }

package/lib/mjs/app/CoreApp.js

@@ -11,6 +11,8 @@ import { UserRole } from './UserRole';
 import { AuthApi } from '../erp/AuthApi';
 let CJ;
 const loadCrypto = () => import('crypto-js');
+// System API name
+const systemApi = 'system';
 /**
  * Core application
  */
@@ -198,12 +200,12 @@ export class CoreApp {
         if (api) {
             // Base URL of the API
             api.baseUrl = this.settings.endpoint;
-            api.name = 'system';
+            api.name = systemApi;
             this.setApi(api, refresh);
             this.api = api;
         }
         else {
-            this.api = this.createApi('system', {
+            this.api = this.createApi(systemApi, {
                 endpoint: settings.endpoint,
                 webUrl: settings.webUrl
             }, refresh);
@@ -1473,6 +1475,10 @@ export class CoreApp {
      * @returns Result
      */
     async exchangeToken(api, token) {
+        // Avoid to call the system API
+        if (api.name === systemApi) {
+            throw new Error('System API is not allowed to exchange token');
+        }
         // Call the API quietly, no loading bar and no error popup
         const data = await new AuthApi(this).exchangeToken({ token }, {
             showLoading: false,
@@ -1505,14 +1511,18 @@ export class CoreApp {
     exchangeTokenAll(coreData, coreName) {
         coreName ?? (coreName = 'core');
         for (const name in this.apis) {
-            const api = this.apis[name];
+            // Ignore the system API as it has its own logic with refreshToken
+            if (name === systemApi)
+                continue;
+            const data = this.apis[name];
+            const api = data[0];
             // The core API
-            if (api[0].name === coreName) {
-                api[0].authorize(coreData.tokenType, coreData.accessToken);
-                this.updateApi(api, coreData.refreshToken, coreData.expiresIn);
+            if (name === coreName) {
+                api.authorize(coreData.tokenType, coreData.accessToken);
+                this.updateApi(data, coreData.refreshToken, coreData.expiresIn);
             }
             else {
-                this.exchangeToken(api[0], coreData.refreshToken);
+                this.exchangeToken(api, coreData.refreshToken);
             }
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@etsoo/appscript",
-    "version": "1.5.58",
+    "version": "1.5.59",
     "description": "Applications shared TypeScript framework",
     "main": "lib/cjs/index.js",
     "module": "lib/mjs/index.js",

package/src/app/CoreApp.ts

@@ -64,6 +64,9 @@ type ApiRefreshTokenFunction = (
 // API task data
 type ApiTaskData = [IApi, number, number, ApiRefreshTokenFunction, string?];
 
+// System API name
+const systemApi = 'system';
+
 /**
  * Core application interface
  */
@@ -375,12 +378,12 @@ export abstract class CoreApp<
         if (api) {
             // Base URL of the API
             api.baseUrl = this.settings.endpoint;
-            api.name = 'system';
+            api.name = systemApi;
             this.setApi(api, refresh);
             this.api = api;
         } else {
             this.api = this.createApi(
-                'system',
+                systemApi,
                 {
                     endpoint: settings.endpoint,
                     webUrl: settings.webUrl
@@ -2026,6 +2029,11 @@ export abstract class CoreApp<
      * @returns Result
      */
     async exchangeToken(api: IApi, token: string) {
+        // Avoid to call the system API
+        if (api.name === systemApi) {
+            throw new Error('System API is not allowed to exchange token');
+        }
+
         // Call the API quietly, no loading bar and no error popup
         const data = await new AuthApi(this).exchangeToken(
             { token },
@@ -2071,14 +2079,18 @@ export abstract class CoreApp<
         coreName ??= 'core';
 
         for (const name in this.apis) {
-            const api = this.apis[name];
+            // Ignore the system API as it has its own logic with refreshToken
+            if (name === systemApi) continue;
+
+            const data = this.apis[name];
+            const api = data[0];
 
             // The core API
-            if (api[0].name === coreName) {
-                api[0].authorize(coreData.tokenType, coreData.accessToken);
-                this.updateApi(api, coreData.refreshToken, coreData.expiresIn);
+            if (name === coreName) {
+                api.authorize(coreData.tokenType, coreData.accessToken);
+                this.updateApi(data, coreData.refreshToken, coreData.expiresIn);
             } else {
-                this.exchangeToken(api[0], coreData.refreshToken);
+                this.exchangeToken(api, coreData.refreshToken);
             }
         }
     }