@flashbacktech/tsclient 0.4.72 → 0.4.73

package/dist/index.d.cts

@@ -1,5 +1,13 @@
 type TokenProvider = () => string | null | Promise<string | null>;
-type UnauthorizedHandler = () => void | Promise<void>;
+/**
+ * Called when a request comes back 401. Typically refreshes the access token.
+ * Return `true` when the refresh succeeded so the BaseClient transparently
+ * retries the original request once with the new token. Return `false` when
+ * the session is unrecoverable (e.g. a dead refresh token) so the original
+ * 401 is surfaced without a wasted retry. Returning `void` is treated as
+ * "retry once" for backwards compatibility.
+ */
+type UnauthorizedHandler = () => void | boolean | Promise<void | boolean>;
 
 /**
  * Returns the org id the platform admin is currently impersonating, or
@@ -45,7 +53,7 @@ declare class BaseClient {
     put<T>(path: string, options?: RequestOptions): Promise<T>;
     patch<T>(path: string, options?: RequestOptions): Promise<T>;
     delete<T>(path: string, options?: RequestOptions): Promise<T>;
-    request<T>(method: string, path: string, options?: RequestOptions): Promise<T>;
+    request<T>(method: string, path: string, options?: RequestOptions, retrying?: boolean): Promise<T>;
     private buildUrl;
 }
 

package/dist/index.d.ts

@@ -1,5 +1,13 @@
 type TokenProvider = () => string | null | Promise<string | null>;
-type UnauthorizedHandler = () => void | Promise<void>;
+/**
+ * Called when a request comes back 401. Typically refreshes the access token.
+ * Return `true` when the refresh succeeded so the BaseClient transparently
+ * retries the original request once with the new token. Return `false` when
+ * the session is unrecoverable (e.g. a dead refresh token) so the original
+ * 401 is surfaced without a wasted retry. Returning `void` is treated as
+ * "retry once" for backwards compatibility.
+ */
+type UnauthorizedHandler = () => void | boolean | Promise<void | boolean>;
 
 /**
  * Returns the org id the platform admin is currently impersonating, or
@@ -45,7 +53,7 @@ declare class BaseClient {
     put<T>(path: string, options?: RequestOptions): Promise<T>;
     patch<T>(path: string, options?: RequestOptions): Promise<T>;
     delete<T>(path: string, options?: RequestOptions): Promise<T>;
-    request<T>(method: string, path: string, options?: RequestOptions): Promise<T>;
+    request<T>(method: string, path: string, options?: RequestOptions, retrying?: boolean): Promise<T>;
     private buildUrl;
 }
 

package/dist/index.js

@@ -59,7 +59,7 @@ var BaseClient = class {
   delete(path, options) {
     return this.request("DELETE", path, options);
   }
-  async request(method, path, options = {}) {
+  async request(method, path, options = {}, retrying = false) {
     const url = this.buildUrl(path, options.query);
     const headers = { ...this.defaultHeaders, ...options.headers ?? {} };
     if (!options.skipAuth && this.getToken) {
@@ -98,11 +98,15 @@ var BaseClient = class {
       console.debug("[flashbacktech/tsclient] \u2190", res.status, url, parsed);
     }
     if (!res.ok) {
-      if (res.status === 401 && this.onUnauthorized) {
+      if (res.status === 401 && this.onUnauthorized && !options.skipAuth && !retrying) {
+        let refreshed = false;
         try {
-          await this.onUnauthorized();
+          refreshed = await this.onUnauthorized() !== false;
         } catch {
         }
+        if (refreshed) {
+          return this.request(method, path, options, true);
+        }
       }
       throw new HttpError(res.status, res.statusText, parsed);
     }