@graph8/sdk 0.11.0 → 0.12.0

package/dist/index.mjs

@@ -2267,12 +2267,181 @@ var G8 = class {
   }
 };
 var g8 = new G8();
+
+// src/appTokens.ts
+var DEFAULT_APP_API = "https://be.graph8.com";
+function createTokenManager(args) {
+  const now = args.now ?? (() => Date.now());
+  const skewMs = args.refreshSkewMs ?? 6e4;
+  let token = null;
+  let expiresAtMs = 0;
+  let inflight = null;
+  const doRefresh = async () => {
+    const resp = await args.refresh();
+    token = resp.access_token;
+    expiresAtMs = now() + Math.max(0, resp.expires_in) * 1e3;
+    return token;
+  };
+  return {
+    async getToken(force = false) {
+      const stillFresh = !force && token !== null && now() < expiresAtMs - skewMs;
+      if (stillFresh) return token;
+      if (!inflight) {
+        inflight = doRefresh().finally(() => {
+          inflight = null;
+        });
+      }
+      return inflight;
+    },
+    expiresAt() {
+      return expiresAtMs;
+    }
+  };
+}
+function createAppRequester(args) {
+  const { baseUrl, tokens, extraHeaders, fetchImpl, sleepImpl } = args;
+  const appRequest = async (path, opts = {}) => {
+    const headers = { ...extraHeaders ?? {}, ...opts.headers ?? {} };
+    const reqOpts = { ...opts, headers, fetchImpl, sleepImpl };
+    const token = await tokens.getToken();
+    try {
+      return await request(baseUrl, path, token, reqOpts);
+    } catch (err) {
+      if (err instanceof G8Error && err.status === 401) {
+        const fresh = await tokens.getToken(true);
+        return await request(baseUrl, path, fresh, reqOpts);
+      }
+      throw err;
+    }
+  };
+  return appRequest;
+}
+async function exchangeBrowserToken(args) {
+  const propelToken = await Promise.resolve(args.getPropelAuthToken());
+  if (!propelToken) {
+    throw new G8Error({
+      message: "getPropelAuthToken() returned no token \u2014 cannot exchange a browser app session",
+      status: 401,
+      type: "app_token_invalid",
+      code: "app_token_invalid"
+    });
+  }
+  const resp = await request(
+    args.baseUrl,
+    "/api/v1/app-sessions/exchange",
+    propelToken,
+    {
+      method: "POST",
+      body: { app_id: args.appId, scopes: args.scopes ?? [] },
+      fetchImpl: args.fetchImpl,
+      sleepImpl: args.sleepImpl
+    }
+  );
+  return resp.data ?? resp;
+}
+async function exchangeServiceToken(args) {
+  const resp = await request(
+    args.baseUrl,
+    "/api/v1/service-token",
+    "",
+    {
+      method: "POST",
+      body: {
+        client_id: args.clientId,
+        client_secret: args.clientSecret,
+        scopes: args.scopes ?? [],
+        ttl_seconds: args.ttlSeconds ?? null
+      },
+      fetchImpl: args.fetchImpl,
+      sleepImpl: args.sleepImpl
+    }
+  );
+  return resp.data ?? resp;
+}
+
+// src/appClient.ts
+function createGraph8AppClient(config) {
+  if (typeof config?.getPropelAuthToken !== "function") {
+    throw new Error(
+      "createGraph8AppClient requires getPropelAuthToken() \u2014 a function returning the caller's PropelAuth token"
+    );
+  }
+  const asRecord = config;
+  if ("apiKey" in asRecord || "writeKey" in asRecord) {
+    throw new Error(
+      "createGraph8AppClient does not accept an org API key or write key in the browser \u2014 pass getPropelAuthToken() instead"
+    );
+  }
+  const baseUrl = config.apiUrl || DEFAULT_APP_API;
+  const tokens = createTokenManager({
+    now: config.now,
+    refreshSkewMs: config.refreshSkewMs,
+    refresh: () => exchangeBrowserToken({
+      baseUrl,
+      appId: config.appId,
+      scopes: config.scopes,
+      getPropelAuthToken: config.getPropelAuthToken,
+      fetchImpl: config.fetchImpl,
+      sleepImpl: config.sleepImpl
+    })
+  });
+  const req = createAppRequester({ baseUrl, tokens, fetchImpl: config.fetchImpl, sleepImpl: config.sleepImpl });
+  return {
+    appId: config.appId,
+    tenantOrgId: config.tenantOrgId,
+    request: req,
+    getAppToken: (force = false) => tokens.getToken(force)
+  };
+}
+function createGraph8ServiceClient(config) {
+  if (!config?.clientId || !config?.clientSecret) {
+    throw new Error("createGraph8ServiceClient requires clientId and clientSecret");
+  }
+  if (!config?.tenantOrgId) {
+    throw new Error(
+      "createGraph8ServiceClient requires tenantOrgId \u2014 the single consented client org this backend acts for"
+    );
+  }
+  const baseUrl = config.apiUrl || DEFAULT_APP_API;
+  const tokens = createTokenManager({
+    now: config.now,
+    refreshSkewMs: config.refreshSkewMs,
+    refresh: () => exchangeServiceToken({
+      baseUrl,
+      clientId: config.clientId,
+      clientSecret: config.clientSecret,
+      scopes: config.scopes,
+      ttlSeconds: config.ttlSeconds,
+      fetchImpl: config.fetchImpl,
+      sleepImpl: config.sleepImpl
+    })
+  });
+  const req = createAppRequester({
+    baseUrl,
+    tokens,
+    extraHeaders: { "X-Target-Org-Id": config.tenantOrgId },
+    fetchImpl: config.fetchImpl,
+    sleepImpl: config.sleepImpl
+  });
+  return {
+    tenantOrgId: config.tenantOrgId,
+    request: req,
+    getServiceToken: (force = false) => tokens.getToken(force)
+  };
+}
 export {
+  DEFAULT_APP_API,
   G8Error,
   KNOWN_WEBHOOK_EVENTS,
   WebhookSignatureError,
   backoffDelayMs,
   constructEvent,
+  createAppRequester,
+  createGraph8AppClient,
+  createGraph8ServiceClient,
+  createTokenManager,
+  exchangeBrowserToken,
+  exchangeServiceToken,
   g8,
   isRetryableStatus,
   paginate,