@genesislcap/foundation-auth 15.50.2 → 15.50.3

package/dist/dts/config/config.d.ts

@@ -238,6 +238,15 @@ export interface AuthConfig extends PartialFASTElementDefinition {
      * The amount of seconds to display user feedback messages, such as "check your inbox" etc. Defaults to 3 seconds.
      */
     feedbackDelay?: number;
+    /**
+     * Session refresh timeout.
+     *
+     * @remarks
+     * How many milliseconds silent login waits to refresh an expired session with the refresh cookie (including
+     * waiting for another tab that is already refreshing) before showing the silent login error. Keep it above the
+     * cross-tab lock wait of about 31 seconds. Defaults to 35 seconds.
+     */
+    sessionRefreshTimeout?: number;
     /**
      * I18n resources.
      *

package/dist/dts/config/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAO,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAK9F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EAA0B,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE;;GAEG;AAEH;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,WAAW,CAAC;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,UAAW,SAAQ,4BAA4B;IAC9D;;;;;OAKG;IACH,eAAe,EAAE,eAAe,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACnD;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;OAeG;IACH,UAAU,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACzD;;;;;OAKG;IACH,eAAe,EAAE;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,YAAY,CAAC;KAChD,GAAG,IAAI,CAAC;IACT;;;;;;;;;;OAUG;IACH,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC;IACzD;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;OAKG;IACH,MAAM,EAAE,cAAc,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B;;;;;OAKG;IACH,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IACtB;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,qBAAqB,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAEnD;;OAEG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,UA2C/B,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,kEAOtB,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAO,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAK9F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EAA0B,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE;;GAEG;AAEH;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,WAAW,CAAC;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,UAAW,SAAQ,4BAA4B;IAC9D;;;;;OAKG;IACH,eAAe,EAAE,eAAe,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACnD;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;OAeG;IACH,UAAU,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACzD;;;;;OAKG;IACH,eAAe,EAAE;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,YAAY,CAAC;KAChD,GAAG,IAAI,CAAC;IACT;;;;;;;;;;OAUG;IACH,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC;IACzD;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;OAKG;IACH,MAAM,EAAE,cAAc,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B;;;;;OAKG;IACH,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IACtB;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,qBAAqB,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAEnD;;OAEG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,UA4C/B,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,kEAOtB,CAAC"}

package/dist/dts/machine/machine.d.ts

@@ -60,6 +60,54 @@ export declare class DefaultAuthMachine extends AbstractMachine<AuthMachineConte
         actions: string[];
         target: string;
     };
+    /**
+     * Fetches login details with the session cookie. A 401 goes to `unauthorizedTarget`.
+     */
+    protected loginDetailsStateNode: (unauthorizedTarget: string) => {
+        invoke: {
+            id: string;
+            src: import("xstate").StateMachine<import("@genesislcap/foundation-state-machine").FetchMachineContext, FetchMachineEvent, import("xstate").ParameterizedObject, import("xstate").ProvidedActor, any, import("xstate").ResolveTypegenMeta<import("xstate").TypegenDisabled, FetchMachineEvent, import("xstate").ParameterizedObject, import("xstate").ProvidedActor>>;
+            onDone: ({
+                actions: string[];
+                target: string;
+            } | {
+                guard: string;
+                target: string;
+            })[];
+            onError: ({
+                guard: string;
+                target: string;
+            } | {
+                target: string;
+                guard?: undefined;
+            })[];
+        };
+        entry: {
+            (_: import("xstate").ActionArgs<import("xstate").MachineContext, import("xstate").EventObject, import("xstate").ParameterizedObject>): void;
+            type: string;
+            to: string | import("xstate").AnyActorRef | ((args: import("xstate").UnifiedArg<import("xstate").MachineContext, import("xstate").EventObject>) => string | import("xstate").AnyActorRef);
+            event: any;
+            id: string | undefined;
+            delay: string | number | import("xstate").DelayExpr<import("xstate").MachineContext, import("xstate").EventObject>;
+            resolve: (actorContext: import("xstate").AnyActorContext, state: import("xstate").AnyState, args: import("xstate").ActionArgs<any, any>, { to, event: eventOrExpr, id, delay }: {
+                to: import("xstate").AnyActorRef | string | ((args: import("xstate").UnifiedArg<import("xstate").MachineContext, import("xstate").EventObject>) => import("xstate").AnyActorRef | string);
+                event: import("xstate").EventObject | import("xstate").SendExpr<import("xstate").MachineContext, import("xstate").EventObject, import("xstate").EventObject>;
+                id: string | undefined;
+                delay: string | number | import("xstate").DelayExpr<import("xstate").MachineContext, import("xstate").EventObject> | undefined;
+            }) => (import("xstate").AnyState | {
+                to: import("xstate").AnyActorRef;
+                event: import("xstate").EventObject;
+                id: string | undefined;
+                delay: number | undefined;
+            })[];
+            execute: (actorContext: import("xstate").AnyActorContext, params: {
+                to: import("xstate").AnyActorRef;
+                event: import("xstate").EventObject;
+                id: string | undefined;
+                delay: number | undefined;
+            }) => void;
+        }[];
+    };
 }
 /**
  * AuthMachine DI key.

package/dist/dts/machine/machine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../../src/machine/machine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAEf,YAAY,EACZ,iBAAiB,EAMjB,OAAO,EACR,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACpD,OAAO,EACL,IAAI,EASL,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAEL,iBAAiB,EAIlB,MAAM,eAAe,CAAC;AAIvB,OAAO,EACL,iBAAiB,EAQlB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,KAAK,EAEV,kBAAkB,EAClB,gBAAgB,EAGhB,WAAW,EACX,WAAW,EAEZ,MAAM,SAAS,CAAC;AAGjB;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,OAAO,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;CAAG;AAErF;;;GAGG;AACH,qBAAa,kBACX,SAAQ,eAAe,CAAC,kBAAkB,EAAE,gBAAgB,CAC5D,YAAW,WAAW;IAGd,OAAO,CAAC,IAAI;IACJ,OAAO,CAAC,YAAY;IACf,OAAO,CAAC,EAAE;IACvB,OAAO,CAAC,IAAI;IACC,OAAO,CAAC,aAAa;IAC5B,OAAO,CAAC,MAAM;IACb,OAAO,CAAC,OAAO;gBANd,IAAI,EAAE,IAAI,EACF,YAAY,EAAE,YAAY,EACrB,EAAE,EAAE,iBAAiB,EAClC,IAAI,EAAE,IAAI,EACG,aAAa,EAAE,iBAAiB,EACvC,MAAM,EAAE,UAAU,EACjB,OAAO,EAAE,WAAW;IAsyB3C,KAAK,CACH,OAAO,GAAE,kBAAkB,CAAC,OAAO,IAAI,CAAC,OAAO,CAM9C;IAKH;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAIxB,SAAS,CAAC,sBAAsB,IAAI,WAAW;IAQ/C,SAAS,CAAC,+BAA+B,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW;IAuB3E,SAAS,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,iBAAiB;IAgB3E,SAAS,CAAC,YAAY;;;;;;;;;;;;;;;;;;;;;MAwBpB;IAEF,SAAS,CAAC,aAAa;;;MAGpB;CACJ;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,mEAA0E,CAAC;AAEnG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C"}
+{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../../src/machine/machine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAEf,YAAY,EACZ,iBAAiB,EAMjB,OAAO,EACR,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACpD,OAAO,EACL,IAAI,EASL,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAEL,iBAAiB,EAIlB,MAAM,eAAe,CAAC;AAIvB,OAAO,EACL,iBAAiB,EAQlB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,OAAO,KAAK,EAEV,kBAAkB,EAClB,gBAAgB,EAGhB,WAAW,EACX,WAAW,EAEZ,MAAM,SAAS,CAAC;AAGjB;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,OAAO,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;CAAG;AAErF;;;GAGG;AACH,qBAAa,kBACX,SAAQ,eAAe,CAAC,kBAAkB,EAAE,gBAAgB,CAC5D,YAAW,WAAW;IAGd,OAAO,CAAC,IAAI;IACJ,OAAO,CAAC,YAAY;IACf,OAAO,CAAC,EAAE;IACvB,OAAO,CAAC,IAAI;IACC,OAAO,CAAC,aAAa;IAC5B,OAAO,CAAC,MAAM;IACb,OAAO,CAAC,OAAO;gBANd,IAAI,EAAE,IAAI,EACF,YAAY,EAAE,YAAY,EACrB,EAAE,EAAE,iBAAiB,EAClC,IAAI,EAAE,IAAI,EACG,aAAa,EAAE,iBAAiB,EACvC,MAAM,EAAE,UAAU,EACjB,OAAO,EAAE,WAAW;IA2yB3C,KAAK,CACH,OAAO,GAAE,kBAAkB,CAAC,OAAO,IAAI,CAAC,OAAO,CAM9C;IAKH;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAIxB,SAAS,CAAC,sBAAsB,IAAI,WAAW;IAQ/C,SAAS,CAAC,+BAA+B,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW;IAuB3E,SAAS,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,iBAAiB;IAgB3E,SAAS,CAAC,YAAY;;;;;;;;;;;;;;;;;;;;;MAwBpB;IAEF,SAAS,CAAC,aAAa;;;MAGpB;IAEH;;OAEG;IACH,SAAS,CAAC,qBAAqB,GAAI,oBAAoB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA0B1D;CACJ;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,mEAA0E,CAAC;AAEnG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C"}

package/dist/dts/machine/session-refresh.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Long enough for a lock left by another tab to go stale and be cleared by `tryRefreshSession`.
+ */
+export declare const DEFAULT_LOCK_WAIT_MS: number;
+/**
+ * Refreshes an expired cookie session using the refresh cookie (`EVENT_LOGIN_AUTH` with empty details).
+ *
+ * @remarks
+ * Shares foundation-comms' cross-tab lock, so tabs restored together don't race to refresh. While another tab holds
+ * the lock, keeps retrying until it is released or goes stale (e.g. left behind by a reload mid-refresh); the retry
+ * re-checks the session first, so a refresh done by the other tab is picked up without refreshing again.
+ *
+ * @param options.lockWaitMs - How long to wait for another tab's lock before giving up.
+ * @returns true when the session is valid afterwards; false when the server rejected the refresh (NACK or 4xx) or the
+ * lock was still held at the deadline.
+ * @throws When the refresh could not complete (network error, 5xx, storage unavailable), so callers can tell a
+ * transient failure from an expired refresh cookie.
+ * @internal
+ */
+export declare function refreshCookieSession({ lockWaitMs, }?: {
+    lockWaitMs?: number;
+}): Promise<boolean>;
+//# sourceMappingURL=session-refresh.d.ts.map

package/dist/dts/machine/session-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-refresh.d.ts","sourceRoot":"","sources":["../../../src/machine/session-refresh.ts"],"names":[],"mappings":"AAcA;;GAEG;AACH,eAAO,MAAM,oBAAoB,QAA2C,CAAC;AAoC7E;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,UAAiC,GAClC,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAWjD"}

package/dist/esm/config/config.js

@@ -53,6 +53,7 @@ export const defaultAuthConfig = {
         toggled: false,
     },
     feedbackDelay: 3000,
+    sessionRefreshTimeout: 35000,
     localizationResources,
 };
 /**

package/dist/esm/machine/machine.js

@@ -4,13 +4,14 @@ import { User } from '@genesislcap/foundation-user';
 import { UUID, LOGIN_DETAILS_URL, LOGIN_URL, ACCEPT_TERMS_URL, LOGOUT_URL, FORGOT_PASSWORD_URL, CHANGE_PASSWORD_URL, RESET_PASSWORD_URL, createErrorMap, } from '@genesislcap/foundation-utils';
 import { DI } from '@microsoft/fast-foundation';
 import { and, assign, createMachine, fromPromise, not, or, raise, sendTo } from 'xstate';
-import { AuthConfig } from '../config/config';
+import { AuthConfig, defaultAuthConfig } from '../config/config';
 import { CredentialManager, CredentialType, } from '../credential';
 import { MESSAGE_TYPE } from '../dto';
 import { AuthMessageMapper, createHTTPHeadersFromDTO, isLoginAckEntity, isLoginDetailsAckEntity, isLoginNackEntity, isLogoutAckEntity, isLogoutNackEntity, isNackDTO, } from '../mapper';
 import { AuthRouting } from '../routes/routing';
 import { logger } from '../utils';
 import { setError } from './actions';
+import { refreshCookieSession } from './session-refresh';
 import { defaultAuthMachineContext, isLoginParams, isQueryParams } from './types';
 /**
  * Default AuthMachine.
@@ -18,6 +19,7 @@ import { defaultAuthMachineContext, isLoginParams, isQueryParams } from './types
  */
 let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
     constructor(user, fetchMachine, cm, uuid, messageMapper, config, routing) {
+        var _a;
         super();
         this.user = user;
         this.fetchMachine = fetchMachine;
@@ -53,7 +55,37 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
         };
         this.dtoTransition = () => ({
             actions: ['setDTO'],
-            target: 'mapEntity',
+            target: '#authMachine.mapEntity',
+        });
+        /**
+         * Fetches login details with the session cookie. A 401 goes to `unauthorizedTarget`.
+         */
+        this.loginDetailsStateNode = (unauthorizedTarget) => ({
+            invoke: {
+                id: 'loginDetailsFetcher',
+                src: this.fetchMachine.machine,
+                onDone: [
+                    {
+                        guard: 'isUnauthorizedError',
+                        target: unauthorizedTarget,
+                    },
+                    {
+                        guard: 'isFetchError',
+                        target: '#authMachine.error.silentLogin',
+                    },
+                    this.dtoTransition(),
+                ],
+                onError: [
+                    {
+                        guard: 'isUnauthorizedError',
+                        target: unauthorizedTarget,
+                    },
+                    {
+                        target: '#authMachine.error.silentLogin',
+                    },
+                ],
+            },
+            entry: [sendTo('loginDetailsFetcher', this.createFetchMachineEvent(LOGIN_DETAILS_URL))],
         });
         this.machine = createMachine({
             id: 'authMachine',
@@ -112,38 +144,38 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
                     on: this.onIdleEvents(),
                 },
                 /**
-                 * Attempt silent login via cookies (details endpoint returns the same user information as login when authorised)
+                 * Attempt silent login via cookies (details endpoint returns the same user information as login when authorised).
+                 * When the session cookie has expired, try once to refresh the session with the refresh cookie before
+                 * falling back to the login form.
                  */
                 silentLogin: {
                     tags: ['silentLogin', 'pending'],
                     meta: {
                         content: 'Attempting silent login, please wait.',
                     },
-                    invoke: {
-                        id: 'loginDetailsFetcher',
-                        src: fetchMachine.machine,
-                        onDone: [
-                            {
-                                guard: 'isUnauthorizedError',
-                                target: 'loggedOut',
-                            },
-                            {
-                                guard: 'isFetchError',
-                                target: 'error.silentLogin',
-                            },
-                            this.dtoTransition(),
-                        ],
-                        onError: [
-                            {
-                                guard: 'isUnauthorizedError',
-                                target: 'loggedOut',
+                    initial: 'fetchingDetails',
+                    states: {
+                        fetchingDetails: this.loginDetailsStateNode('#authMachine.silentLogin.refreshingSession'),
+                        refreshingSession: {
+                            invoke: {
+                                src: 'sessionRefresher',
+                                onDone: [
+                                    {
+                                        guard: ({ event }) => event.output === true,
+                                        target: '#authMachine.silentLogin.fetchingRefreshedDetails',
+                                    },
+                                    {
+                                        target: '#authMachine.loggedOut',
+                                    },
+                                ],
+                                onError: '#authMachine.error.silentLogin',
                             },
-                            {
-                                target: 'error.silentLogin',
+                            after: {
+                                sessionRefreshTimeout: '#authMachine.error.silentLogin',
                             },
-                        ],
+                        },
+                        fetchingRefreshedDetails: this.loginDetailsStateNode('#authMachine.loggedOut'),
                     },
-                    entry: [sendTo('loginDetailsFetcher', this.createFetchMachineEvent(LOGIN_DETAILS_URL))],
                 },
                 /**
                  * Login with user credentials or tokens
@@ -678,6 +710,7 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
         }, {
             actors: {
                 mapper: fromPromise((_a) => __awaiter(this, [_a], void 0, function* ({ input }) { return input.mapper(input.dto); })),
+                sessionRefresher: fromPromise(() => refreshCookieSession()),
             },
             actions: {
                 setParams: assign(({ event }) => {
@@ -826,6 +859,7 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
                 feedbackDelay: this.config.feedbackDelay,
                 logoutFeedbackDelay: 1000,
                 mfaSessionExpiredRedirectDelay: 5000,
+                sessionRefreshTimeout: (_a = this.config.sessionRefreshTimeout) !== null && _a !== void 0 ? _a : defaultAuthConfig.sessionRefreshTimeout,
             },
         });
         this.start();

package/dist/esm/machine/session-refresh.js

@@ -0,0 +1,66 @@
+import { __awaiter } from "tslib";
+import { onOtherTabReauthComplete, REAUTH_LOCK_TIMEOUT_MS, SessionRefreshResult, tryRefreshSession, } from '@genesislcap/foundation-comms';
+import { logger } from '../utils';
+/**
+ * Upper bound between lock checks, so a lock abandoned without a storage event is still picked up once it goes stale.
+ */
+const LOCK_RECHECK_MS = 1000;
+/**
+ * Long enough for a lock left by another tab to go stale and be cleared by `tryRefreshSession`.
+ */
+export const DEFAULT_LOCK_WAIT_MS = REAUTH_LOCK_TIMEOUT_MS + LOCK_RECHECK_MS;
+const HTTP_CLIENT_ERROR_MIN = 400;
+const HTTP_SERVER_ERROR_MIN = 500;
+const isRefreshed = (result) => result === SessionRefreshResult.SUCCESS || result === SessionRefreshResult.ALREADY_VALID;
+const isRejectedByServer = (error) => {
+    const status = error === null || error === void 0 ? void 0 : error.status;
+    return (typeof status === 'number' && status >= HTTP_CLIENT_ERROR_MIN && status < HTTP_SERVER_ERROR_MIN);
+};
+const waitForLockRelease = (timeoutMs) => new Promise((resolve) => {
+    const timeout = setTimeout(() => {
+        unsubscribe();
+        resolve();
+    }, timeoutMs);
+    const unsubscribe = onOtherTabReauthComplete(() => {
+        clearTimeout(timeout);
+        resolve();
+    });
+});
+const refreshOnceLockIsFree = (deadline) => __awaiter(void 0, void 0, void 0, function* () {
+    const result = yield tryRefreshSession({ reloadOnFailure: false });
+    if (result !== SessionRefreshResult.HANDLED_BY_OTHER_TAB || Date.now() >= deadline) {
+        return result;
+    }
+    yield waitForLockRelease(Math.min(LOCK_RECHECK_MS, Math.max(0, deadline - Date.now())));
+    return refreshOnceLockIsFree(deadline);
+});
+/**
+ * Refreshes an expired cookie session using the refresh cookie (`EVENT_LOGIN_AUTH` with empty details).
+ *
+ * @remarks
+ * Shares foundation-comms' cross-tab lock, so tabs restored together don't race to refresh. While another tab holds
+ * the lock, keeps retrying until it is released or goes stale (e.g. left behind by a reload mid-refresh); the retry
+ * re-checks the session first, so a refresh done by the other tab is picked up without refreshing again.
+ *
+ * @param options.lockWaitMs - How long to wait for another tab's lock before giving up.
+ * @returns true when the session is valid afterwards; false when the server rejected the refresh (NACK or 4xx) or the
+ * lock was still held at the deadline.
+ * @throws When the refresh could not complete (network error, 5xx, storage unavailable), so callers can tell a
+ * transient failure from an expired refresh cookie.
+ * @internal
+ */
+export function refreshCookieSession() {
+    return __awaiter(this, arguments, void 0, function* ({ lockWaitMs = DEFAULT_LOCK_WAIT_MS, } = {}) {
+        try {
+            return isRefreshed(yield refreshOnceLockIsFree(Date.now() + lockWaitMs));
+        }
+        catch (error) {
+            if (isRejectedByServer(error)) {
+                logger.debug('Session refresh rejected.', error);
+                return false;
+            }
+            logger.warn('Session refresh could not complete.', error);
+            throw error;
+        }
+    });
+}

package/dist/foundation-auth.api.json

@@ -606,6 +606,33 @@
                 "endIndex": 2
               }
             },
+            {
+              "kind": "PropertySignature",
+              "canonicalReference": "@genesislcap/foundation-auth!AuthConfig#sessionRefreshTimeout:member",
+              "docComment": "/**\n * Session refresh timeout.\n *\n * @remarks\n *\n * How many milliseconds silent login waits to refresh an expired session with the refresh cookie (including waiting for another tab that is already refreshing) before showing the silent login error. Keep it above the cross-tab lock wait of about 31 seconds. Defaults to 35 seconds.\n */\n",
+              "excerptTokens": [
+                {
+                  "kind": "Content",
+                  "text": "sessionRefreshTimeout?: "
+                },
+                {
+                  "kind": "Content",
+                  "text": "number"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";"
+                }
+              ],
+              "isReadonly": false,
+              "isOptional": true,
+              "releaseTag": "Public",
+              "name": "sessionRefreshTimeout",
+              "propertyTypeTokenRange": {
+                "startIndex": 1,
+                "endIndex": 2
+              }
+            },
             {
               "kind": "PropertySignature",
               "canonicalReference": "@genesislcap/foundation-auth!AuthConfig#showChangePasswordLink:member",
@@ -6085,6 +6112,441 @@
               "isAbstract": false,
               "name": "getFromContainer"
             },
+            {
+              "kind": "Property",
+              "canonicalReference": "@genesislcap/foundation-auth!DefaultAuthMachine#loginDetailsStateNode:member",
+              "docComment": "/**\n * Fetches login details with the session cookie. A 401 goes to `unauthorizedTarget`.\n */\n",
+              "excerptTokens": [
+                {
+                  "kind": "Content",
+                  "text": "protected loginDetailsStateNode: "
+                },
+                {
+                  "kind": "Content",
+                  "text": "(unauthorizedTarget: string) => {\n        invoke: {\n            id: string;\n            src: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "StateMachine",
+                  "canonicalReference": "xstate!StateMachine:class"
+                },
+                {
+                  "kind": "Content",
+                  "text": "<import(\"@genesislcap/foundation-state-machine\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "FetchMachineContext",
+                  "canonicalReference": "@genesislcap/foundation-state-machine!FetchMachineContext:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", "
+                },
+                {
+                  "kind": "Reference",
+                  "text": "FetchMachineEvent",
+                  "canonicalReference": "@genesislcap/foundation-state-machine!FetchMachineEvent:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "ParameterizedObject",
+                  "canonicalReference": "xstate!ParameterizedObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "ProvidedActor",
+                  "canonicalReference": "xstate!ProvidedActor:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", any, import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "ResolveTypegenMeta",
+                  "canonicalReference": "xstate!ResolveTypegenMeta:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": "<import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "TypegenDisabled",
+                  "canonicalReference": "xstate!TypegenDisabled:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", "
+                },
+                {
+                  "kind": "Reference",
+                  "text": "FetchMachineEvent",
+                  "canonicalReference": "@genesislcap/foundation-state-machine!FetchMachineEvent:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "ParameterizedObject",
+                  "canonicalReference": "xstate!ParameterizedObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "ProvidedActor",
+                  "canonicalReference": "xstate!ProvidedActor:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ">>;\n            onDone: ({\n                actions: string[];\n                target: string;\n            } | {\n                guard: string;\n                target: string;\n            })[];\n            onError: ({\n                guard: string;\n                target: string;\n            } | {\n                target: string;\n                guard?: undefined;\n            })[];\n        };\n        entry: {\n            (_: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "ActionArgs",
+                  "canonicalReference": "xstate!ActionArgs:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": "<import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "MachineContext",
+                  "canonicalReference": "xstate!MachineContext:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "ParameterizedObject",
+                  "canonicalReference": "xstate!ParameterizedObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ">): void;\n            type: string;\n            to: string | import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyActorRef",
+                  "canonicalReference": "xstate!AnyActorRef:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": " | ((args: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "UnifiedArg",
+                  "canonicalReference": "xstate!UnifiedArg:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": "<import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "MachineContext",
+                  "canonicalReference": "xstate!MachineContext:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ">) => string | import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyActorRef",
+                  "canonicalReference": "xstate!AnyActorRef:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ");\n            event: any;\n            id: string | undefined;\n            delay: string | number | import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "DelayExpr",
+                  "canonicalReference": "xstate!DelayExpr:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": "<import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "MachineContext",
+                  "canonicalReference": "xstate!MachineContext:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ">;\n            resolve: (actorContext: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyActorContext",
+                  "canonicalReference": "xstate!AnyActorContext:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", state: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyState",
+                  "canonicalReference": "xstate!AnyState:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", args: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "ActionArgs",
+                  "canonicalReference": "xstate!ActionArgs:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": "<any, any>, { to, "
+                },
+                {
+                  "kind": "Reference",
+                  "text": "event",
+                  "canonicalReference": "@genesislcap/foundation-auth!~__type#event"
+                },
+                {
+                  "kind": "Content",
+                  "text": ": eventOrExpr, id, delay }: {\n                to: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyActorRef",
+                  "canonicalReference": "xstate!AnyActorRef:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": " | string | ((args: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "UnifiedArg",
+                  "canonicalReference": "xstate!UnifiedArg:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": "<import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "MachineContext",
+                  "canonicalReference": "xstate!MachineContext:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ">) => import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyActorRef",
+                  "canonicalReference": "xstate!AnyActorRef:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": " | string);\n                event: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": " | import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "SendExpr",
+                  "canonicalReference": "xstate!SendExpr:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": "<import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "MachineContext",
+                  "canonicalReference": "xstate!MachineContext:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ">;\n                id: string | undefined;\n                delay: string | number | import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "DelayExpr",
+                  "canonicalReference": "xstate!DelayExpr:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": "<import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "MachineContext",
+                  "canonicalReference": "xstate!MachineContext:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": "> | undefined;\n            }) => (import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyState",
+                  "canonicalReference": "xstate!AnyState:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": " | {\n                to: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyActorRef",
+                  "canonicalReference": "xstate!AnyActorRef:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";\n                event: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";\n                id: string | undefined;\n                delay: number | undefined;\n            })[];\n            execute: (actorContext: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyActorContext",
+                  "canonicalReference": "xstate!AnyActorContext:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ", params: {\n                to: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "AnyActorRef",
+                  "canonicalReference": "xstate!AnyActorRef:type"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";\n                event: import(\"xstate\")."
+                },
+                {
+                  "kind": "Reference",
+                  "text": "EventObject",
+                  "canonicalReference": "xstate!EventObject:interface"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";\n                id: string | undefined;\n                delay: number | undefined;\n            }) => void;\n        }[];\n    }"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";"
+                }
+              ],
+              "isReadonly": false,
+              "isOptional": false,
+              "releaseTag": "Public",
+              "name": "loginDetailsStateNode",
+              "propertyTypeTokenRange": {
+                "startIndex": 1,
+                "endIndex": 92
+              },
+              "isStatic": false,
+              "isProtected": true,
+              "isAbstract": false
+            },
             {
               "kind": "Property",
               "canonicalReference": "@genesislcap/foundation-auth!DefaultAuthMachine#onIdleEvents:member",

package/dist/foundation-auth.d.ts

@@ -3,6 +3,7 @@ import { AbstractStore } from '@genesislcap/foundation-store';
 import { AbstractStoreRoot } from '@genesislcap/foundation-store';
 import { ActionArgs } from 'xstate';
 import { AnyActorContext } from 'xstate';
+import { AnyActorRef } from 'xstate';
 import { AnyState } from 'xstate';
 import { Assigner } from 'xstate';
 import { BindingObserver } from '@microsoft/fast-element';
@@ -12,6 +13,7 @@ import { Container } from '@microsoft/fast-foundation';
 import { Controller } from '@microsoft/fast-element';
 import { DefaultUser } from '@genesislcap/foundation-user';
 import { defaultUserConfig } from '@genesislcap/foundation-user';
+import { DelayExpr } from 'xstate';
 import { DoneInvokeEvent } from 'xstate';
 import { ElementStyles } from '@microsoft/fast-element';
 import { EmitOptions } from '@genesislcap/foundation-events';
@@ -19,6 +21,7 @@ import { EmitReturn } from '@genesislcap/foundation-events';
 import type { ErrorEvent as ErrorEvent_2 } from 'xstate';
 import { EventObject } from 'xstate';
 import { FetchMachine } from '@genesislcap/foundation-state-machine';
+import { FetchMachineContext } from '@genesislcap/foundation-state-machine';
 import { FetchMachineEvent } from '@genesislcap/foundation-state-machine';
 import { getUser } from '@genesislcap/foundation-user';
 import { I18nextConfig } from '@genesislcap/foundation-i18n';
@@ -31,13 +34,19 @@ import { MachineContext as MachineContext_2 } from 'xstate';
 import { ParameterizedObject } from 'xstate';
 import { PartialFASTElementDefinition } from '@microsoft/fast-element';
 import { PropertyAssigner } from 'xstate';
+import { ProvidedActor } from 'xstate';
+import { ResolveTypegenMeta } from 'xstate';
 import { RouterConfiguration } from '@microsoft/fast-router';
+import { SendExpr } from 'xstate';
 import type { SetUserProperties } from '@genesislcap/foundation-user';
+import { StateMachine } from 'xstate';
 import { Store } from '@genesislcap/foundation-store';
 import { StoreRoot } from '@genesislcap/foundation-store';
 import { StoreRootEventDetailMap } from '@genesislcap/foundation-store';
 import { SyntheticViewTemplate } from '@microsoft/fast-element';
 import { TemplateElementDependency } from '@genesislcap/foundation-ui';
+import { TypegenDisabled } from 'xstate';
+import { UnifiedArg } from 'xstate';
 import { User } from '@genesislcap/foundation-user';
 import { UserActionHistory } from '@genesislcap/foundation-user';
 import { UserAuthenticationChangeEvent } from '@genesislcap/foundation-user';
@@ -258,6 +267,15 @@ export declare interface AuthConfig extends PartialFASTElementDefinition {
      * The amount of seconds to display user feedback messages, such as "check your inbox" etc. Defaults to 3 seconds.
      */
     feedbackDelay?: number;
+    /**
+     * Session refresh timeout.
+     *
+     * @remarks
+     * How many milliseconds silent login waits to refresh an expired session with the refresh cookie (including
+     * waiting for another tab that is already refreshing) before showing the silent login error. Keep it above the
+     * cross-tab lock wait of about 31 seconds. Defaults to 35 seconds.
+     */
+    sessionRefreshTimeout?: number;
     /**
      * I18n resources.
      *
@@ -1040,6 +1058,54 @@ export declare class DefaultAuthMachine extends AbstractMachine<AuthMachineConte
         actions: string[];
         target: string;
     };
+    /**
+     * Fetches login details with the session cookie. A 401 goes to `unauthorizedTarget`.
+     */
+    protected loginDetailsStateNode: (unauthorizedTarget: string) => {
+        invoke: {
+            id: string;
+            src: StateMachine<FetchMachineContext, FetchMachineEvent, ParameterizedObject, ProvidedActor, any, ResolveTypegenMeta<TypegenDisabled, FetchMachineEvent, ParameterizedObject, ProvidedActor>>;
+            onDone: ({
+                actions: string[];
+                target: string;
+            } | {
+                guard: string;
+                target: string;
+            })[];
+            onError: ({
+                guard: string;
+                target: string;
+            } | {
+                target: string;
+                guard?: undefined;
+            })[];
+        };
+        entry: {
+            (_: ActionArgs<MachineContext_2, EventObject, ParameterizedObject>): void;
+            type: string;
+            to: string | AnyActorRef | ((args: UnifiedArg<MachineContext_2, EventObject>) => string | AnyActorRef);
+            event: any;
+            id: string | undefined;
+            delay: string | number | DelayExpr<MachineContext_2, EventObject>;
+            resolve: (actorContext: AnyActorContext, state: AnyState, args: ActionArgs<any, any>, { to, event: eventOrExpr, id, delay }: {
+                to: AnyActorRef | string | ((args: UnifiedArg<MachineContext_2, EventObject>) => AnyActorRef | string);
+                event: EventObject | SendExpr<MachineContext_2, EventObject, EventObject>;
+                id: string | undefined;
+                delay: string | number | DelayExpr<MachineContext_2, EventObject> | undefined;
+            }) => (AnyState | {
+                to: AnyActorRef;
+                event: EventObject;
+                id: string | undefined;
+                delay: number | undefined;
+            })[];
+            execute: (actorContext: AnyActorContext, params: {
+                to: AnyActorRef;
+                event: EventObject;
+                id: string | undefined;
+                delay: number | undefined;
+            }) => void;
+        }[];
+    };
 }
 
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@genesislcap/foundation-auth",
   "description": "Genesis Foundation Auth",
-  "version": "15.50.2",
+  "version": "15.50.3",
   "license": "SEE LICENSE IN license.txt",
   "main": "dist/esm/index.js",
   "types": "dist/foundation-auth.d.ts",
@@ -134,24 +134,24 @@
     }
   },
   "devDependencies": {
-    "@genesislcap/foundation-testing": "15.50.2",
-    "@genesislcap/genx": "15.50.2",
-    "@genesislcap/ts-builder": "15.50.2",
-    "@genesislcap/uvu-playwright-builder": "15.50.2",
-    "@genesislcap/vite-builder": "15.50.2",
-    "@genesislcap/webpack-builder": "15.50.2"
+    "@genesislcap/foundation-testing": "15.50.3",
+    "@genesislcap/genx": "15.50.3",
+    "@genesislcap/ts-builder": "15.50.3",
+    "@genesislcap/uvu-playwright-builder": "15.50.3",
+    "@genesislcap/vite-builder": "15.50.3",
+    "@genesislcap/webpack-builder": "15.50.3"
   },
   "dependencies": {
-    "@genesislcap/foundation-comms": "15.50.2",
-    "@genesislcap/foundation-events": "15.50.2",
-    "@genesislcap/foundation-i18n": "15.50.2",
-    "@genesislcap/foundation-logger": "15.50.2",
-    "@genesislcap/foundation-state-machine": "15.50.2",
-    "@genesislcap/foundation-store": "15.50.2",
-    "@genesislcap/foundation-ui": "15.50.2",
-    "@genesislcap/foundation-user": "15.50.2",
-    "@genesislcap/foundation-utils": "15.50.2",
-    "@genesislcap/foundation-zero": "15.50.2",
+    "@genesislcap/foundation-comms": "15.50.3",
+    "@genesislcap/foundation-events": "15.50.3",
+    "@genesislcap/foundation-i18n": "15.50.3",
+    "@genesislcap/foundation-logger": "15.50.3",
+    "@genesislcap/foundation-state-machine": "15.50.3",
+    "@genesislcap/foundation-store": "15.50.3",
+    "@genesislcap/foundation-ui": "15.50.3",
+    "@genesislcap/foundation-user": "15.50.3",
+    "@genesislcap/foundation-utils": "15.50.3",
+    "@genesislcap/foundation-zero": "15.50.3",
     "@microsoft/fast-components": "2.30.6",
     "@microsoft/fast-element": "1.14.0",
     "@microsoft/fast-foundation": "2.50.0",