@finueva/auth 0.16.0 → 0.16.1

package/dist/index.js

@@ -4472,7 +4472,7 @@ function createAuthClient(options) {
 		baseURL: authOrigin,
 		basePath: "/api/v1/auth",
 		fetchOptions: {
-			customFetchImpl: fetchImpl,
+			customFetchImpl: fetchBetterAuth,
 			credentials: "include",
 			retry: 0,
 			timeout: timeoutMs
@@ -4508,6 +4508,15 @@ function createAuthClient(options) {
 	let signalRefreshPending = false;
 	let signalRefreshScheduled = false;
 	let signalRefreshRequest;
+	let betterAuthTransportSequence = 0;
+	async function fetchBetterAuth(input, init) {
+		const request = new Request(input, init);
+		const url = new URL(request.url);
+		if (!authStateStarted || request.method !== "GET" || url.origin !== authOrigin || url.pathname !== "/api/v1/auth/get-session" || signOutRequest || activeAccountMutationGeneration !== void 0) return fetchImpl(input, init);
+		betterAuthTransportSequence += 1;
+		const response = await readAuthoritySession(authorityGeneration, request);
+		return new Response(JSON.stringify(response.value), { headers: { "content-type": "application/json" } });
+	}
 	function advanceAuthorityGeneration() {
 		recentAuthenticationStartAttempt = void 0;
 		return ++authorityGeneration;
@@ -4569,12 +4578,13 @@ function createAuthClient(options) {
 				authoritative: false
 			});
 		});
-		getSession().catch(() => void 0);
+		if (typeof window === "undefined") getSession().catch(() => void 0);
 	}
 	function subscribeToSessionSignals() {
 		if (sessionSignalSubscribed) return;
 		sessionSignalSubscribed = true;
 		let initialized = false;
+		let transportSequence = betterAuthTransportSequence;
 		betterAuth.useSession.subscribe((state) => {
 			const refetching = state.isRefetching === true;
 			if (!initialized) {
@@ -4583,6 +4593,7 @@ function createAuthClient(options) {
 				return;
 			}
 			const settled = betterAuthRefetching && !refetching;
+			if (refetching && !betterAuthRefetching) transportSequence = betterAuthTransportSequence;
 			betterAuthRefetching = refetching;
 			if (refetching && signOutRequest) suppressBetterAuthSettlement = true;
 			if (!settled) return;
@@ -4590,6 +4601,7 @@ function createAuthClient(options) {
 				suppressBetterAuthSettlement = false;
 				return;
 			}
+			if (transportSequence !== betterAuthTransportSequence) return;
 			queueSignalRefresh();
 		});
 	}
@@ -4626,24 +4638,35 @@ function createAuthClient(options) {
 		sessionUserId = session?.user.id;
 		return session;
 	}
-	async function refreshAuthoritySession(generation) {
+	async function readAuthoritySession(generation, request) {
 		const readEpoch = ++sessionReadEpoch;
 		try {
-			const response = await requestJsonResponse(joinURL(authOrigin, "api/v1/auth/get-session"), {
+			const response = await requestJsonResponse(request?.url ?? joinURL(authOrigin, "api/v1/auth/get-session"), {
 				fetch: fetchImpl,
 				timeoutMs,
-				method: "GET"
+				method: "GET",
+				...request ? {
+					headers: request.headers,
+					signal: request.signal
+				} : {}
 			});
 			if (generation !== authorityGeneration || readEpoch !== sessionReadEpoch) throw new AuthError("state_conflict", 409);
-			return acceptAuthoritySession(normalizeSession(response.value), generation);
+			return {
+				...response,
+				session: acceptAuthoritySession(normalizeSession(response.value), generation)
+			};
 		} catch (error) {
 			if (generation !== authorityGeneration || readEpoch !== sessionReadEpoch) throw new AuthError("state_conflict", 409);
 			if (error instanceof AuthError && error.code === "state_conflict") throw error;
-			unavailable();
+			if (error instanceof AuthError && error.status === 401) acceptAuthoritySession(null, generation);
+			else unavailable();
 			if (error instanceof AuthError) throw error;
 			throw authorityUnavailable();
 		}
 	}
+	async function refreshAuthoritySession(generation) {
+		return (await readAuthoritySession(generation)).session;
+	}
 	function getSession() {
 		if (signOutRequest || activeAccountMutationGeneration !== void 0) return Promise.reject(new AuthError("state_conflict", 409));
 		return refreshAuthoritySession(authorityGeneration);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finueva/auth",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "Public browser and server SDK for Finueva Auth",
   "type": "module",
   "sideEffects": false,