@franzzemen/brokenstock-shell 0.0.42 → 0.1.0

package/fesm2022/franzzemen-brokenstock-shell.mjs

@@ -5,7 +5,7 @@ import { Router, RouterLink, RouterLinkActive, ActivatedRoute, RouterOutlet } fr
 import { HttpHeader, BEARER_TOKEN_REGEX, USERNAME_REGEX, PASSWORD_REGEX } from '@franzzemen/utility';
 import { validateCredentials } from '@franzzemen/identity';
 import { HttpClient } from '@angular/common/http';
-import { tap, catchError, from, switchMap, throwError, firstValueFrom } from 'rxjs';
+import { catchError, from, switchMap, throwError, firstValueFrom } from 'rxjs';
 import * as i3 from '@angular/forms';
 import { NG_VALIDATORS, FormsModule } from '@angular/forms';
 import { Marked } from 'marked';
@@ -84,9 +84,7 @@ class AuthenticationService {
         ...(ngDevMode ? [{ debugName: "authenticating" }] : /* istanbul ignore next */ []));
         this.userSession = signal(undefined, /* @ts-ignore */
         ...(ngDevMode ? [{ debugName: "userSession" }] : /* istanbul ignore next */ []));
-        this.effectivePermissions = signal({}, /* @ts-ignore */
-        ...(ngDevMode ? [{ debugName: "effectivePermissions" }] : /* istanbul ignore next */ []));
-        /** First-class plan-feature grants for the current session (supersedes effectivePermissions). */
+        /** Plan-feature grants for the current session. Absent key = not granted. */
         this.features = signal({}, /* @ts-ignore */
         ...(ngDevMode ? [{ debugName: "features" }] : /* istanbul ignore next */ []));
         this.conflictSessions = signal(undefined, /* @ts-ignore */
@@ -186,7 +184,6 @@ class AuthenticationService {
                         // @ts-ignore
                         delete authResponse.session.token;
                         this.userSession.set(authResponse.session);
-                        this.effectivePermissions.set(authResponse.effectivePermissions ?? {});
                         this.features.set(authResponse.features ?? {});
                         const auth = response.headers.get(HttpHeader.Authorization);
                         if (!auth || !BEARER_TOKEN_REGEX.test(auth)) {
@@ -245,7 +242,6 @@ class AuthenticationService {
             const body = await response.json();
             this.#auth = auth;
             this.userSession.set(body.session);
-            this.effectivePermissions.set(body.effectivePermissions ?? {});
             this.features.set(body.features ?? {});
             return true;
         }
@@ -256,7 +252,6 @@ class AuthenticationService {
     #clearSession() {
         this.authenticated.set(false);
         this.userSession.set(undefined);
-        this.effectivePermissions.set({});
         this.features.set({});
         this.conflictSessions.set(undefined);
         this.pendingCredentials.set(undefined);
@@ -297,13 +292,7 @@ const authInterceptor = (req, next) => {
     const thinkingService = inject(ThinkingService);
     const authUrls = inject(SHELL_AUTH_URLS);
     const router = inject(Router);
-    return next(req).pipe(tap({
-        next: (event) => {
-            if ('headers' in event && event.headers?.get('x-permissions-stale') === 'true') {
-                authService.refresh();
-            }
-        },
-    }), catchError((error) => {
+    return next(req).pipe(catchError((error) => {
         const isRefreshOrLogin = req.url === authUrls.refresh || req.url === authUrls.login;
         if (error.status === 401 && !isRefreshOrLogin) {
             return from(authService.refresh()).pipe(switchMap((refreshed) => {