@geins/core 0.5.0 → 0.5.1

package/dist/logic/channel.d.ts

@@ -9,8 +9,6 @@ export declare class Channel {
     constructor(geinsSettings: GeinsSettings);
     private initApiClient;
     private initChannelService;
-    static getInstance(geinsSettings: GeinsSettings): Channel;
-    static destroy(): void;
     setKey(key: string, value: string): void;
     getKey(key: string): Promise<string>;
     private setChannel;

package/dist/services/cookieService.d.ts

@@ -22,6 +22,11 @@ export interface CookieServiceConfig {
      * If `true`, the cookie will only be sent over secure connections.
      */
     secure?: boolean;
+    /**
+     * Controls whether the cookie is sent with cross-site requests.
+     * Defaults to `'lax'`.
+     */
+    sameSite?: 'strict' | 'lax' | 'none';
     /**
      * Sets the maximum age of the cookie in seconds.
      * Can be a number or a string representation of a number.
@@ -49,6 +54,7 @@ export declare class CookieService {
     private domain;
     private secure;
     private httpOnly;
+    private sameSite;
     private maxAge;
     private cookie;
     /**

package/dist/services/graphQLService.d.ts

@@ -14,12 +14,12 @@ export declare class GraphQLService extends BaseApiService {
      * @param options - The options for the GraphQL query.
      * @returns A promise that resolves to the query result or null if an error occurs.
      */
-    query<T = any>(options: GraphQLQueryOptions): Promise<T | null>;
+    query<T = any>(options: GraphQLQueryOptions): Promise<T>;
     /**
      * Executes a GraphQL mutation with the provided options.
      * @param options - The options for the GraphQL mutation.
      * @returns A promise that resolves to the mutation result or null if an error occurs.
      */
-    mutation<T = any>(options: GraphQLQueryOptions): Promise<T | null>;
+    mutation<T = any>(options: GraphQLQueryOptions): Promise<T>;
     protected parseResult(result: any): any;
 }

package/dist/utils/jwtUtils.d.ts

@@ -1,6 +1,11 @@
 /**
  * Decodes a JWT token and optionally verifies its signature.
  *
+ * **Security warning:** When called without `secretKey`, this function performs NO
+ * signature verification. The returned payload MUST NOT be trusted for authorization
+ * decisions unless the token has been independently verified by the issuing authority.
+ * Use the `secretKey` parameter or an external verification step before relying on claims.
+ *
  * @param token - The JWT token to decode.
  * @param secretKey - The secret key to verify the signature (optional).
  * @returns An object containing the decoded header and payload.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geins/core",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "main": "dist/index.cjs",
   "module": "dist/index.esm.js",
   "types": "dist/index.d.ts",