@faable/sdk-base 1.1.2 → 1.1.3

package/.github/workflows/release.yml

@@ -1,4 +1,9 @@
 name: Release
+permissions:
+  contents: write # necesario para push de commits y tags
+  pull-requests: write
+  issues: write
+  id-token: write # OIDC: npm trusted publishing (sin NPM_TOKEN)
 "on":
   push:
     branches:
@@ -7,15 +12,18 @@ jobs:
   release:
     name: release
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
-          cache: npm
           node-version: lts/*
+          registry-url: https://registry.npmjs.org/
+          always-auth: true
       - run: npm ci
       - run: npm run build
-      - run: npm run release
+      - run: npm audit signatures
+      - name: Release
+        run: npx semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package/dist/auth/client_credentials/client_credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client_credentials.d.ts","sourceRoot":"","sources":["../../../src/auth/client_credentials/client_credentials.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAKrE,KAAK,MAAM,GAAG;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAMrE,eAAO,MAAM,uBAAuB,EAAE,iBAAiB,CACrD,2BAA2B,CAwF5B,CAAC"}
+{"version":3,"file":"client_credentials.d.ts","sourceRoot":"","sources":["../../../src/auth/client_credentials/client_credentials.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAKrE,KAAK,MAAM,GAAG;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAWrE,eAAO,MAAM,uBAAuB,EAAE,iBAAiB,CACrD,2BAA2B,CAgG5B,CAAC"}

package/dist/auth/client_credentials/client_credentials.js

@@ -4,6 +4,10 @@ import PQueue from "p-queue";
 const CLIENT_ID_ENV = "FAABLEAUTH_CLIENT_ID";
 const CLIENT_SECRET_ENV = "FAABLEAUTH_CLIENT_SECRET";
 const AUTH_DOMAIN = "FAABLEAUTH_DOMAIN";
+// Refresh the cached token this many seconds before its real expiry, so a
+// request that starts just before the boundary doesn't ship a token that
+// expires mid-flight.
+const EXPIRY_SKEW_SECONDS = 60;
 export const createClientCredentials = (params) => {
     const client_id = params?.client_id || process.env[CLIENT_ID_ENV];
     const client_secret = params?.client_secret || process.env[CLIENT_SECRET_ENV];
@@ -22,7 +26,15 @@ export const createClientCredentials = (params) => {
     const queue = new PQueue({ concurrency: 1, timeout: 20 * 1000 });
     const isTokenExpired = (token, issued_at) => {
         const { expires_in } = token;
-        return issued_at + expires_in < Date.now();
+        // `expires_in` is in SECONDS (OAuth 2.0 §5.1), but `issued_at` and
+        // `Date.now()` are in MILLISECONDS. The previous code compared
+        // `issued_at + expires_in` (ms + s) against `Date.now()` (ms), so a
+        // 24h (86400s) token was treated as expired after ~86s — causing the
+        // SDK to re-request a token ~1000× more often than needed and hammer
+        // the /oauth/token endpoint. Convert to ms and refresh a bit early
+        // (skew) so an in-flight request never ships an about-to-expire token.
+        const expires_at = issued_at + (expires_in - EXPIRY_SKEW_SECONDS) * 1000;
+        return expires_at < Date.now();
     };
     const fetcher = fetcher_axios({
         baseURL: auth_domain,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/sdk-base",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -24,7 +24,7 @@
     "nock": "^13.5.5",
     "openapi-typescript": "^7.4.0",
     "rimraf": "^6.0.1",
-    "semantic-release": "^24.1.1",
+    "semantic-release": "^25.0.3",
     "tsimp": "^2.0.11",
     "tsx": "^4.19.1",
     "typescript": "^5.6.2",
@@ -42,10 +42,15 @@
       "main"
     ],
     "plugins": [
+      "@semantic-release/commit-analyzer",
       "@semantic-release/release-notes-generator",
       "@semantic-release/github",
       [
-        "@semantic-release/npm"
+        "@semantic-release/npm",
+        {
+          "npmPublish": true,
+          "useOidc": true
+        }
       ]
     ]
   }