@faable/sdk-base 1.1.1 → 1.1.3

package/.github/workflows/release.yml

@@ -1,4 +1,9 @@
 name: Release
+permissions:
+  contents: write # necesario para push de commits y tags
+  pull-requests: write
+  issues: write
+  id-token: write # OIDC: npm trusted publishing (sin NPM_TOKEN)
 "on":
   push:
     branches:
@@ -7,15 +12,18 @@ jobs:
   release:
     name: release
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
-          cache: npm
           node-version: lts/*
+          registry-url: https://registry.npmjs.org/
+          always-auth: true
       - run: npm ci
       - run: npm run build
-      - run: npm run release
+      - run: npm audit signatures
+      - name: Release
+        run: npx semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package/dist/FaableApi.d.ts

@@ -9,7 +9,7 @@ export type ApiParams = {
     paginator?: Partial<PaginatorOptions>;
 };
 export declare abstract class FaableApi<Params extends ApiParams = ApiParams> {
-    protected fetcher: Fetcher;
+    fetcher: Fetcher;
     protected paginator: Paginator;
     protected constructor(params?: Params);
     static create<T extends abstract new (args: Params) => any, Params = any>(this: T, params?: Params): InstanceType<T>;

package/dist/FaableApi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FaableApi.d.ts","sourceRoot":"","sources":["../src/FaableApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAEL,SAAS,EACT,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,IAAI,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACvC,CAAC;AAEF,8BAAsB,SAAS,CAAC,MAAM,SAAS,SAAS,GAAG,SAAS;IAClE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/B,SAAS,aAAa,MAAM,CAAC,EAAE,MAAM;IAMrC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,QAAQ,MAAM,IAAI,EAAE,MAAM,KAAK,GAAG,EAAE,MAAM,GAAG,GAAG,EACtE,IAAI,EAAE,CAAC,EACP,MAAM,CAAC,EAAE,MAAM,GACd,YAAY,CAAC,CAAC,CAAC;CAInB"}
+{"version":3,"file":"FaableApi.d.ts","sourceRoot":"","sources":["../src/FaableApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAEL,SAAS,EACT,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,IAAI,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACvC,CAAC;AAEF,8BAAsB,SAAS,CAAC,MAAM,SAAS,SAAS,GAAG,SAAS;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/B,SAAS,aAAa,MAAM,CAAC,EAAE,MAAM;IAMrC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,QAAQ,MAAM,IAAI,EAAE,MAAM,KAAK,GAAG,EAAE,MAAM,GAAG,GAAG,EACtE,IAAI,EAAE,CAAC,EACP,MAAM,CAAC,EAAE,MAAM,GACd,YAAY,CAAC,CAAC,CAAC;CAInB"}

package/dist/auth/client_credentials/client_credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client_credentials.d.ts","sourceRoot":"","sources":["../../../src/auth/client_credentials/client_credentials.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAKrE,KAAK,MAAM,GAAG;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAMrE,eAAO,MAAM,uBAAuB,EAAE,iBAAiB,CACrD,2BAA2B,CAwF5B,CAAC"}
+{"version":3,"file":"client_credentials.d.ts","sourceRoot":"","sources":["../../../src/auth/client_credentials/client_credentials.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAKrE,KAAK,MAAM,GAAG;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAWrE,eAAO,MAAM,uBAAuB,EAAE,iBAAiB,CACrD,2BAA2B,CAgG5B,CAAC"}

package/dist/auth/client_credentials/client_credentials.js

@@ -4,6 +4,10 @@ import PQueue from "p-queue";
 const CLIENT_ID_ENV = "FAABLEAUTH_CLIENT_ID";
 const CLIENT_SECRET_ENV = "FAABLEAUTH_CLIENT_SECRET";
 const AUTH_DOMAIN = "FAABLEAUTH_DOMAIN";
+// Refresh the cached token this many seconds before its real expiry, so a
+// request that starts just before the boundary doesn't ship a token that
+// expires mid-flight.
+const EXPIRY_SKEW_SECONDS = 60;
 export const createClientCredentials = (params) => {
     const client_id = params?.client_id || process.env[CLIENT_ID_ENV];
     const client_secret = params?.client_secret || process.env[CLIENT_SECRET_ENV];
@@ -22,7 +26,15 @@ export const createClientCredentials = (params) => {
     const queue = new PQueue({ concurrency: 1, timeout: 20 * 1000 });
     const isTokenExpired = (token, issued_at) => {
         const { expires_in } = token;
-        return issued_at + expires_in < Date.now();
+        // `expires_in` is in SECONDS (OAuth 2.0 §5.1), but `issued_at` and
+        // `Date.now()` are in MILLISECONDS. The previous code compared
+        // `issued_at + expires_in` (ms + s) against `Date.now()` (ms), so a
+        // 24h (86400s) token was treated as expired after ~86s — causing the
+        // SDK to re-request a token ~1000× more often than needed and hammer
+        // the /oauth/token endpoint. Convert to ms and refresh a bit early
+        // (skew) so an in-flight request never ships an about-to-expire token.
+        const expires_at = issued_at + (expires_in - EXPIRY_SKEW_SECONDS) * 1000;
+        return expires_at < Date.now();
     };
     const fetcher = fetcher_axios({
         baseURL: auth_domain,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/sdk-base",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -24,7 +24,7 @@
     "nock": "^13.5.5",
     "openapi-typescript": "^7.4.0",
     "rimraf": "^6.0.1",
-    "semantic-release": "^24.1.1",
+    "semantic-release": "^25.0.3",
     "tsimp": "^2.0.11",
     "tsx": "^4.19.1",
     "typescript": "^5.6.2",
@@ -42,10 +42,15 @@
       "main"
     ],
     "plugins": [
+      "@semantic-release/commit-analyzer",
       "@semantic-release/release-notes-generator",
       "@semantic-release/github",
       [
-        "@semantic-release/npm"
+        "@semantic-release/npm",
+        {
+          "npmPublish": true,
+          "useOidc": true
+        }
       ]
     ]
   }