@fluid-app/rep-sdk 0.1.0 → 0.1.2

package/dist/index.js

@@ -23,6 +23,45 @@ var HTTP_METHODS = {
   DELETE: "DELETE"
 };
 
+// src/auth/auth-redirect.ts
+var DEFAULT_AUTH_URL = "https://auth.fluid.app";
+var AUTH_REDIRECT_TOKEN_KEY = "jwt";
+var REDIRECT_TIMESTAMP_KEY = "__fluid_auth_redirect_ts";
+var REDIRECT_COOLDOWN_S = 10;
+function isRedirectLoop() {
+  try {
+    const ts = sessionStorage.getItem(REDIRECT_TIMESTAMP_KEY);
+    if (!ts) return false;
+    const elapsed = (Date.now() - Number(ts)) / 1e3;
+    return elapsed < REDIRECT_COOLDOWN_S;
+  } catch {
+    return false;
+  }
+}
+function markRedirect() {
+  try {
+    sessionStorage.setItem(REDIRECT_TIMESTAMP_KEY, String(Date.now()));
+  } catch {
+  }
+}
+function createDefaultAuthRedirect(authUrl) {
+  return () => {
+    if (isRedirectLoop()) {
+      console.warn(
+        "[FluidAuth] Auth redirect suppressed \u2014 possible redirect loop. Check that your auth server returns a token accepted by the API."
+      );
+      return;
+    }
+    markRedirect();
+    const base = authUrl ?? DEFAULT_AUTH_URL;
+    const currentUrl = encodeURIComponent(window.location.href);
+    window.location.href = `${base}/?redirect_url=${currentUrl}`;
+  };
+}
+function resolveAuthFailureHandler(onAuthFailure, authUrl) {
+  return onAuthFailure ?? createDefaultAuthRedirect(authUrl);
+}
+
 // src/client/fluid-client.ts
 var ApiError = class _ApiError extends Error {
   status;
@@ -66,6 +105,7 @@ function extractErrorMessage(data, fallback) {
 }
 function createFluidClient(config) {
   const { baseUrl, getAuthToken, onAuthError, defaultHeaders = {} } = config;
+  const effectiveOnAuthError = onAuthError ?? createDefaultAuthRedirect();
   async function buildHeaders(customHeaders) {
     const headers = {
       "Content-Type": "application/json",
@@ -151,8 +191,9 @@ function createFluidClient(config) {
         null
       );
     }
-    if (response.status === 401 && onAuthError) {
-      onAuthError();
+    if (response.status === 401) {
+      effectiveOnAuthError();
+      return null;
     }
     if (!response.ok) {
       try {
@@ -313,6 +354,16 @@ function createFluidClient(config) {
 var ThemeContext = createContext(null);
 function applyThemeVariables(theme, container) {
   const target = container ?? document.documentElement;
+  const toRemove = [];
+  for (let i = 0; i < target.style.length; i++) {
+    const prop = target.style[i];
+    if (prop.startsWith("--fluid-")) {
+      toRemove.push(prop);
+    }
+  }
+  for (const prop of toRemove) {
+    target.style.removeProperty(prop);
+  }
   for (const [key, value] of Object.entries(theme.config)) {
     target.style.setProperty(`--fluid-${key}`, value);
   }
@@ -379,7 +430,11 @@ function FluidProvider({
   const configRef = useRef(config);
   configRef.current = config;
   const client = useMemo(
-    () => createFluidClient(configRef.current),
+    () => createFluidClient({
+      ...configRef.current,
+      getAuthToken: () => configRef.current.getAuthToken?.() ?? null,
+      onAuthError: () => configRef.current.onAuthError?.()
+    }),
     // eslint-disable-next-line react-hooks/exhaustive-deps
     [config.baseUrl]
   );
@@ -432,10 +487,12 @@ var URL_PARAMS = {
   COMPANY_TOKEN: "fluidCompanyToken"
 };
 
-// src/auth/url-token.ts
+// src/auth/browser-utils.ts
 function isBrowser() {
-  return typeof window !== "undefined";
+  return typeof window !== "undefined" && typeof document !== "undefined";
 }
+
+// src/auth/url-token.ts
 function extractTokenFromUrl(tokenKey = URL_PARAMS.USER_TOKEN) {
   if (!isBrowser()) {
     return null;
@@ -506,11 +563,8 @@ function extractAllTokensFromUrl(userTokenKey = URL_PARAMS.USER_TOKEN, companyTo
 }
 
 // src/auth/token-storage.ts
-function isBrowser2() {
-  return typeof window !== "undefined" && typeof document !== "undefined";
-}
 function parseCookies() {
-  if (!isBrowser2()) {
+  if (!isBrowser()) {
     return {};
   }
   const cookies = {};
@@ -527,7 +581,7 @@ function parseCookies() {
   return cookies;
 }
 function setCookie(name, value, options = {}) {
-  if (!isBrowser2()) {
+  if (!isBrowser()) {
     return;
   }
   const {
@@ -546,13 +600,13 @@ function setCookie(name, value, options = {}) {
   document.cookie = cookieString;
 }
 function deleteCookie(name, path = "/") {
-  if (!isBrowser2()) {
+  if (!isBrowser()) {
     return;
   }
   document.cookie = `${name}=; path=${path}; max-age=0`;
 }
 function getStoredToken(config) {
-  if (!isBrowser2()) {
+  if (!isBrowser()) {
     return null;
   }
   const cookieKey = config?.cookieKey ?? STORAGE_KEYS.AUTH_COOKIE;
@@ -569,7 +623,7 @@ function getStoredToken(config) {
   }
 }
 function storeToken(token, config) {
-  if (!isBrowser2()) {
+  if (!isBrowser()) {
     return;
   }
   const cookieKey = config?.cookieKey ?? STORAGE_KEYS.AUTH_COOKIE;
@@ -592,7 +646,7 @@ function storeToken(token, config) {
   }
 }
 function clearTokens(config) {
-  if (!isBrowser2()) {
+  if (!isBrowser()) {
     return;
   }
   const cookieKey = config?.cookieKey ?? STORAGE_KEYS.AUTH_COOKIE;
@@ -609,16 +663,31 @@ function clearTokens(config) {
 function hasStoredToken(config) {
   return getStoredToken(config) !== null;
 }
+
+// src/auth/types.ts
+var USER_TYPES = {
+  admin: "admin",
+  rep: "rep",
+  root_admin: "root_admin",
+  customer: "customer"
+};
+function isUserType(value) {
+  return Object.values(USER_TYPES).includes(value);
+}
+
+// src/auth/token-utils.ts
 function extractPayloadFromJose(decoded) {
+  const rawUserType = decoded.user_type;
+  const rawOgUserType = decoded.og_user_type;
   return {
-    id: decoded.id,
-    email: decoded.email,
-    full_name: decoded.full_name,
-    user_type: decoded.user_type ?? "rep",
-    og_user_type: decoded.og_user_type,
-    company_id: decoded.company_id,
+    id: typeof decoded.id === "number" ? decoded.id : void 0,
+    email: typeof decoded.email === "string" ? decoded.email : void 0,
+    full_name: typeof decoded.full_name === "string" ? decoded.full_name : void 0,
+    user_type: typeof rawUserType === "string" && isUserType(rawUserType) ? rawUserType : "rep",
+    og_user_type: typeof rawOgUserType === "string" && isUserType(rawOgUserType) ? rawOgUserType : void 0,
+    company_id: typeof decoded.company_id === "number" ? decoded.company_id : void 0,
     exp: decoded.exp,
-    auth_type: decoded.auth_type
+    auth_type: typeof decoded.auth_type === "string" ? decoded.auth_type : void 0
   };
 }
 function decodeToken(token) {
@@ -708,17 +777,6 @@ async function verifyToken(token, jwksUrl) {
   }
 }
 
-// src/auth/types.ts
-var USER_TYPES = {
-  admin: "admin",
-  rep: "rep",
-  root_admin: "root_admin",
-  customer: "customer"
-};
-function isUserType(value) {
-  return Object.values(USER_TYPES).includes(value);
-}
-
 // src/auth/dev-utils.ts
 function isDevBypassActive(devBypass) {
   if (!devBypass) return false;
@@ -730,12 +788,14 @@ function isDevBypassActive(devBypass) {
 }
 function createDevUser() {
   return {
-    id: 0,
+    id: 99999,
+    // Dev placeholder — avoids falsy 0
     email: "dev@localhost",
     full_name: "Dev User",
     user_type: USER_TYPES.rep,
     og_user_type: void 0,
-    company_id: 0,
+    company_id: 99999,
+    // Dev placeholder — avoids falsy 0
     exp: void 0,
     // Never expires
     auth_type: "dev_bypass"
@@ -754,6 +814,11 @@ function FluidAuthProvider({
   const [error, setError] = useState(null);
   useEffect(() => {
     const initializeAuth = async () => {
+      const handleAuthFailure = () => {
+        const current = configRef.current;
+        const handler = resolveAuthFailureHandler(current?.onAuthFailure, current?.authUrl);
+        handler();
+      };
       try {
         if (isDevBypassActive(config?.devBypass)) {
           const envToken = import.meta.env.VITE_DEV_TOKEN;
@@ -781,7 +846,11 @@ function FluidAuthProvider({
         }
         const tokenKey = config?.tokenKey ?? "fluidUserToken";
         let candidateToken = extractTokenFromUrl(tokenKey);
+        if (!candidateToken && tokenKey !== AUTH_REDIRECT_TOKEN_KEY) {
+          candidateToken = extractTokenFromUrl(AUTH_REDIRECT_TOKEN_KEY);
+        }
         cleanTokenFromUrl(tokenKey);
+        cleanTokenFromUrl(AUTH_REDIRECT_TOKEN_KEY);
         if (!candidateToken) {
           candidateToken = getStoredToken(config);
         }
@@ -794,7 +863,7 @@ function FluidAuthProvider({
               setToken(null);
               setUser(null);
               setError(new Error("JWT signature verification failed"));
-              config?.onAuthFailure?.();
+              handleAuthFailure();
               return;
             }
             if (isTokenExpired(candidateToken, config?.gracePeriodMs)) {
@@ -802,7 +871,7 @@ function FluidAuthProvider({
               setToken(null);
               setUser(null);
               setError(new Error("Token has expired"));
-              config?.onAuthFailure?.();
+              handleAuthFailure();
               return;
             }
           } else {
@@ -817,7 +886,7 @@ function FluidAuthProvider({
               setToken(null);
               setUser(null);
               setError(new Error(validation.error ?? "Invalid token"));
-              config?.onAuthFailure?.();
+              handleAuthFailure();
               return;
             }
           }
@@ -829,14 +898,14 @@ function FluidAuthProvider({
           setToken(null);
           setUser(null);
           setError(new Error("No authentication token found"));
-          config?.onAuthFailure?.();
+          handleAuthFailure();
         }
       } catch (err) {
         const error2 = err instanceof Error ? err : new Error("Authentication error");
         setError(error2);
         setToken(null);
         setUser(null);
-        config?.onAuthFailure?.();
+        handleAuthFailure();
       } finally {
         setIsLoading(false);
       }
@@ -1872,7 +1941,19 @@ function AuthError({
     }
   );
 }
+var SPIN_STYLE_ID = "fluid-auth-loading-spin";
+function ensureSpinStyle() {
+  if (typeof document === "undefined") return;
+  if (document.getElementById(SPIN_STYLE_ID)) return;
+  const style = document.createElement("style");
+  style.id = SPIN_STYLE_ID;
+  style.textContent = `@keyframes spin { to { transform: rotate(360deg); } }`;
+  document.head.appendChild(style);
+}
 function AuthLoading() {
+  useEffect(() => {
+    ensureSpinStyle();
+  }, []);
   return /* @__PURE__ */ jsxs(
     "div",
     {
@@ -1909,12 +1990,7 @@ function AuthLoading() {
             },
             children: "Authenticating..."
           }
-        ),
-        /* @__PURE__ */ jsx("style", { children: `
-        @keyframes spin {
-          to { transform: rotate(360deg); }
-        }
-      ` })
+        )
       ]
     }
   );
@@ -2074,6 +2150,6 @@ var export_toDarkMode = themes_exports.toDarkMode;
 var export_toLightMode = themes_exports.toLightMode;
 var export_tokyoNight = themes_exports.tokyoNight;
 
-export { ACTIVITY_SLUGS, AUTH_CONSTANTS, ApiError, AuthError, AuthLoading, export_BUILT_IN_THEMES as BUILT_IN_THEMES, export_CORE_COLOR_KEYS as CORE_COLOR_KEYS, CORE_PAGE_IDS, CURRENT_REP_QUERY_KEY, export_DEFAULT_CORE_COLORS as DEFAULT_CORE_COLORS, FluidAuthProvider, FluidProvider, FluidThemeProvider, PAGE_CATEGORIES, PERMISSIONS_QUERY_KEY, PROFILE_QUERY_KEY, PageTemplateProvider, PageTemplateRegistry, RequireAuth, STORAGE_KEYS, URL_PARAMS, USER_TYPES, export_catppuccinMocha as catppuccinMocha, export_clampChroma as clampChroma, cleanTokenFromUrl, clearTokens, createFluidClient, decodeToken, export_defaultTheme as defaultTheme, export_detectThemeMode as detectThemeMode, export_dracula as dracula, export_everforest as everforest, extractAllTokensFromUrl, extractCompanyTokenFromUrl, extractTokenFromUrl, export_generateColorSwatches as generateColorSwatches, export_generateDualTheme as generateDualTheme, export_generateSmartDualTheme as generateSmartDualTheme, export_generateTheme as generateTheme, export_generateThemeCssVars as generateThemeCssVars, getAvailablePageTemplates, getCorePageTemplates, getOptionalPageTemplates, getProperty, getStoredToken, getTokenExpiration, getTokenTimeRemaining, export_gruvbox as gruvbox, hasData, hasStoredToken, hasTokenInUrl, isActivitySlug, isApiError, isContactStatus, isErrorResult, isIdle, isLoading, isTokenExpired, isUserType, isValidToken, export_mod as mod, export_monokai as monokai, export_nord as nord, export_oklchString as oklchString, export_parseOklch as parseOklch, resolveNavigationPages, export_rosePine as rosePine, export_rotateHue as rotateHue, export_rotateSoft as rotateSoft, screenPropertySchemas, selectProperty, export_solarized as solarized, storeToken, export_toDarkMode as toDarkMode, export_toLightMode as toLightMode, export_tokyoNight as tokyoNight, useActivities, useCalendarEvents, useCatchUps, useContact, useContacts, useConversationMessages, useConversations, useCurrentRep, useFluidApi, useFluidAuth, useFluidAuthContext, useFluidContext, useFluidPermissions, useFluidProfile, useFluidTheme, useMySite, usePageTemplates, useResolvedPages, useThemeContext, useTodos, validateNavigationPages, validateToken };
+export { ACTIVITY_SLUGS, AUTH_CONSTANTS, ApiError, AuthError, AuthLoading, export_BUILT_IN_THEMES as BUILT_IN_THEMES, export_CORE_COLOR_KEYS as CORE_COLOR_KEYS, CORE_PAGE_IDS, CURRENT_REP_QUERY_KEY, DEFAULT_AUTH_URL, export_DEFAULT_CORE_COLORS as DEFAULT_CORE_COLORS, FluidAuthProvider, FluidProvider, FluidThemeProvider, PAGE_CATEGORIES, PERMISSIONS_QUERY_KEY, PROFILE_QUERY_KEY, PageTemplateProvider, PageTemplateRegistry, RequireAuth, STORAGE_KEYS, URL_PARAMS, USER_TYPES, export_catppuccinMocha as catppuccinMocha, export_clampChroma as clampChroma, cleanTokenFromUrl, clearTokens, createDefaultAuthRedirect, createFluidClient, decodeToken, export_defaultTheme as defaultTheme, export_detectThemeMode as detectThemeMode, export_dracula as dracula, export_everforest as everforest, extractAllTokensFromUrl, extractCompanyTokenFromUrl, extractTokenFromUrl, export_generateColorSwatches as generateColorSwatches, export_generateDualTheme as generateDualTheme, export_generateSmartDualTheme as generateSmartDualTheme, export_generateTheme as generateTheme, export_generateThemeCssVars as generateThemeCssVars, getAvailablePageTemplates, getCorePageTemplates, getOptionalPageTemplates, getProperty, getStoredToken, getTokenExpiration, getTokenTimeRemaining, export_gruvbox as gruvbox, hasData, hasStoredToken, hasTokenInUrl, isActivitySlug, isApiError, isContactStatus, isErrorResult, isIdle, isLoading, isTokenExpired, isUserType, isValidToken, export_mod as mod, export_monokai as monokai, export_nord as nord, export_oklchString as oklchString, export_parseOklch as parseOklch, resolveNavigationPages, export_rosePine as rosePine, export_rotateHue as rotateHue, export_rotateSoft as rotateSoft, screenPropertySchemas, selectProperty, export_solarized as solarized, storeToken, export_toDarkMode as toDarkMode, export_toLightMode as toLightMode, export_tokyoNight as tokyoNight, useActivities, useCalendarEvents, useCatchUps, useContact, useContacts, useConversationMessages, useConversations, useCurrentRep, useFluidApi, useFluidAuth, useFluidAuthContext, useFluidContext, useFluidPermissions, useFluidProfile, useFluidTheme, useMySite, usePageTemplates, useResolvedPages, useThemeContext, useTodos, validateNavigationPages, validateToken };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map