@everystack/api 0.4.1 → 0.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everystack/api",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "PostgREST-compatible HTTP handler + typed fetch client for Drizzle ORM",
   "license": "AGPL-3.0-only",
   "author": "Scalable Technology, Inc. <licensing@scalable.technology>",

package/src/client/index.ts

@@ -13,6 +13,8 @@ export interface ClientOptions {
   getToken?: () => string | null | Promise<string | null>;
   /** Called on 401 — return a new token to retry, or null to fail */
   onTokenExpired?: () => Promise<string | null>;
+  /** Called when a 401 could not be recovered — refresh failed, or the retry with the refreshed token also 401/403'd */
+  onAuthFailure?: () => void;
   /** Client credentials sent with every request */
   clientCredentials?: {
     id: string;
@@ -296,6 +298,8 @@ async function fetchWithRetry(
       const retryResponse = await fetch(url, { ...init, headers: retryHeaders });
 
       if (!retryResponse.ok) {
+        // Refreshed token was still rejected — unrecoverable.
+        options.onAuthFailure?.();
         return { retried: { data: null, error: await parseError(retryResponse) } };
       }
 
@@ -303,7 +307,8 @@ async function fetchWithRetry(
       return { response: retryResponse };
     }
 
-    // Refresh failed
+    // Refresh failed — unrecoverable.
+    options.onAuthFailure?.();
     return { retried: { data: null, error: await parseError(response) } };
   }