@hexclave/js 1.0.115 → 1.0.117

package/dist/esm/lib/hexclave-app/apps/implementations/client-app-impl.next-server-session.test.js

@@ -23,16 +23,6 @@ function createClientApp() {
 	});
 }
 describe("StackClientApp Next.js server sessions", () => {
-	it("shares one token store and session across cookie helpers from the same request", () => {
-		const clientApp = createClientApp();
-		const getTokenStore = Reflect.get(clientApp, "_getOrCreateTokenStore");
-		const getSession = Reflect.get(clientApp, "_getSessionFromTokenStore");
-		const requestIdentity = {};
-		const firstStore = getTokenStore.call(clientApp, createCookieHelper(requestIdentity), "nextjs-cookie");
-		const secondStore = getTokenStore.call(clientApp, createCookieHelper(requestIdentity), "nextjs-cookie");
-		expect(secondStore).toBe(firstStore);
-		expect(getSession.call(clientApp, secondStore)).toBe(getSession.call(clientApp, firstStore));
-	});
 	it("isolates token stores belonging to different requests", () => {
 		const clientApp = createClientApp();
 		const getTokenStore = Reflect.get(clientApp, "_getOrCreateTokenStore");

package/dist/esm/lib/hexclave-app/apps/implementations/client-app-impl.next-server-session.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-app-impl.next-server-session.test.js","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/client-app-impl.next-server-session.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { describe, expect, it } from \"vitest\";\nimport { CookieHelper } from \"../../../cookie\";\nimport { StackClientApp } from \"../interfaces/client-app\";\n\nfunction createCookieHelper(identity: object): CookieHelper {\n  return {\n    identity,\n    get: () => null,\n    getAll: () => ({}),\n    set: () => {},\n    setOrDelete: () => {},\n    delete: () => {},\n  };\n}\n\nfunction createClientApp() {\n  return new StackClientApp({\n    baseUrl: \"http://localhost:12345\",\n    projectId: \"00000000-0000-4000-8000-000000000000\",\n    publishableClientKey: \"stack-pk-test\",\n    tokenStore: \"memory\",\n    redirectMethod: \"none\",\n    noAutomaticPrefetch: true,\n    devTool: false,\n  });\n}\n\ndescribe(\"StackClientApp Next.js server sessions\", () => {\n  it(\"shares one token store and session across cookie helpers from the same request\", () => {\n    const clientApp = createClientApp();\n    const getTokenStore = Reflect.get(clientApp, \"_getOrCreateTokenStore\");\n    const getSession = Reflect.get(clientApp, \"_getSessionFromTokenStore\");\n    const requestIdentity = {};\n\n    const firstStore = getTokenStore.call(clientApp, createCookieHelper(requestIdentity), \"nextjs-cookie\");\n    const secondStore = getTokenStore.call(clientApp, createCookieHelper(requestIdentity), \"nextjs-cookie\");\n\n    expect(secondStore).toBe(firstStore);\n    expect(getSession.call(clientApp, secondStore)).toBe(getSession.call(clientApp, firstStore));\n  });\n\n  it(\"isolates token stores belonging to different requests\", () => {\n    const clientApp = createClientApp();\n    const getTokenStore = Reflect.get(clientApp, \"_getOrCreateTokenStore\");\n\n    const firstStore = getTokenStore.call(clientApp, createCookieHelper({}), \"nextjs-cookie\");\n    const secondStore = getTokenStore.call(clientApp, createCookieHelper({}), \"nextjs-cookie\");\n\n    expect(secondStore).not.toBe(firstStore);\n  });\n});\n"],"mappings":";;;AAQA,SAAS,mBAAmB,UAAgC;CAC1D,OAAO;EACL;EACA,WAAW;EACX,eAAe,CAAC;EAChB,WAAW,CAAC;EACZ,mBAAmB,CAAC;EACpB,cAAc,CAAC;CACjB;AACF;AAEA,SAAS,kBAAkB;CACzB,OAAO,IAAI,eAAe;EACxB,SAAS;EACT,WAAW;EACX,sBAAsB;EACtB,YAAY;EACZ,gBAAgB;EAChB,qBAAqB;EACrB,SAAS;CACX,CAAC;AACH;AAEA,SAAS,gDAAgD;CACvD,GAAG,wFAAwF;EACzF,MAAM,YAAY,gBAAgB;EAClC,MAAM,gBAAgB,QAAQ,IAAI,WAAW,wBAAwB;EACrE,MAAM,aAAa,QAAQ,IAAI,WAAW,2BAA2B;EACrE,MAAM,kBAAkB,CAAC;EAEzB,MAAM,aAAa,cAAc,KAAK,WAAW,mBAAmB,eAAe,GAAG,eAAe;EACrG,MAAM,cAAc,cAAc,KAAK,WAAW,mBAAmB,eAAe,GAAG,eAAe;EAEtG,OAAO,WAAW,CAAC,CAAC,KAAK,UAAU;EACnC,OAAO,WAAW,KAAK,WAAW,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,KAAK,WAAW,UAAU,CAAC;CAC7F,CAAC;CAED,GAAG,+DAA+D;EAChE,MAAM,YAAY,gBAAgB;EAClC,MAAM,gBAAgB,QAAQ,IAAI,WAAW,wBAAwB;EAErE,MAAM,aAAa,cAAc,KAAK,WAAW,mBAAmB,CAAC,CAAC,GAAG,eAAe;EAGxF,OAFoB,cAAc,KAAK,WAAW,mBAAmB,CAAC,CAAC,GAAG,eAEzD,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU;CACzC,CAAC;AACH,CAAC"}
+{"version":3,"file":"client-app-impl.next-server-session.test.js","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/client-app-impl.next-server-session.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { describe, expect, it } from \"vitest\";\nimport { CookieHelper } from \"../../../cookie\";\nimport { StackClientApp } from \"../interfaces/client-app\";\n\nfunction createCookieHelper(identity: object): CookieHelper {\n  return {\n    identity,\n    get: () => null,\n    getAll: () => ({}),\n    set: () => {},\n    setOrDelete: () => {},\n    delete: () => {},\n  };\n}\n\nfunction createClientApp() {\n  return new StackClientApp({\n    baseUrl: \"http://localhost:12345\",\n    projectId: \"00000000-0000-4000-8000-000000000000\",\n    publishableClientKey: \"stack-pk-test\",\n    tokenStore: \"memory\",\n    redirectMethod: \"none\",\n    noAutomaticPrefetch: true,\n    devTool: false,\n  });\n}\n\ndescribe(\"StackClientApp Next.js server sessions\", () => {\n  // Only the Next.js SDK keys server token stores by the request's cookies() identity.\n\n  it(\"isolates token stores belonging to different requests\", () => {\n    const clientApp = createClientApp();\n    const getTokenStore = Reflect.get(clientApp, \"_getOrCreateTokenStore\");\n\n    const firstStore = getTokenStore.call(clientApp, createCookieHelper({}), \"nextjs-cookie\");\n    const secondStore = getTokenStore.call(clientApp, createCookieHelper({}), \"nextjs-cookie\");\n\n    expect(secondStore).not.toBe(firstStore);\n  });\n});\n"],"mappings":";;;AAQA,SAAS,mBAAmB,UAAgC;CAC1D,OAAO;EACL;EACA,WAAW;EACX,eAAe,CAAC;EAChB,WAAW,CAAC;EACZ,mBAAmB,CAAC;EACpB,cAAc,CAAC;CACjB;AACF;AAEA,SAAS,kBAAkB;CACzB,OAAO,IAAI,eAAe;EACxB,SAAS;EACT,WAAW;EACX,sBAAsB;EACtB,YAAY;EACZ,gBAAgB;EAChB,qBAAqB;EACrB,SAAS;CACX,CAAC;AACH;AAEA,SAAS,gDAAgD;CAGvD,GAAG,+DAA+D;EAChE,MAAM,YAAY,gBAAgB;EAClC,MAAM,gBAAgB,QAAQ,IAAI,WAAW,wBAAwB;EAErE,MAAM,aAAa,cAAc,KAAK,WAAW,mBAAmB,CAAC,CAAC,GAAG,eAAe;EAGxF,OAFoB,cAAc,KAAK,WAAW,mBAAmB,CAAC,CAAC,GAAG,eAEzD,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU;CACzC,CAAC;AACH,CAAC"}

package/dist/esm/lib/hexclave-app/apps/implementations/common.js

@@ -12,8 +12,8 @@ import { resolveHandlerUrls } from "../../url-targets.js";
 import { AsyncCache } from "@hexclave/shared/dist/utils/caches";
 import { createGlobal, getGlobal } from "@hexclave/shared/dist/utils/globals";
 //#region src/lib/hexclave-app/apps/implementations/common.ts
-const clientVersion = "js @hexclave/js@1.0.115";
-if ("js @hexclave/js@1.0.115".startsWith("STACK_COMPILE_TIME"));
+const clientVersion = "js @hexclave/js@1.0.117";
+if ("js @hexclave/js@1.0.117".startsWith("STACK_COMPILE_TIME"));
 const replaceHexclavePortPrefix = (input) => {
 	if (!input) return input;
 	const prefix = envVars.HEXCLAVE_PORT_PREFIX;

package/dist/lib/hexclave-app/apps/implementations/admin-app-impl.d.ts

@@ -1,2 +1,2 @@
-import { t as _HexclaveAdminAppImplIncomplete } from "../../../../admin-app-impl-BlUeKEd3.js";
+import { t as _HexclaveAdminAppImplIncomplete } from "../../../../admin-app-impl-C6zvB2sD.js";
 export { _HexclaveAdminAppImplIncomplete };

package/dist/lib/hexclave-app/apps/implementations/client-app-impl.cookie.test.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/lib/hexclave-app/apps/implementations/client-app-impl.cookie.test.js

@@ -0,0 +1,165 @@
+let vitest = require("vitest");
+let _hexclave_shared_dist_utils_redirect_urls = require("@hexclave/shared/dist/utils/redirect-urls");
+let _hexclave_shared_dist_utils_bytes = require("@hexclave/shared/dist/utils/bytes");
+let ___interfaces_client_app_js = require("../interfaces/client-app.js");
+let util = require("util");
+//#region src/lib/hexclave-app/apps/implementations/client-app-impl.cookie.test.ts
+const serverCookieState = vitest.vi.hoisted(() => ({ values: /* @__PURE__ */ new Map() }));
+vitest.vi.mock("../../../cookie", () => {
+	const getAll = () => Object.fromEntries(serverCookieState.values);
+	const remove = (name) => {
+		serverCookieState.values.delete(name);
+	};
+	const setOrDelete = (name, value) => {
+		if (value === null) remove(name);
+		else serverCookieState.values.set(name, value);
+	};
+	const helper = {
+		identity: {},
+		get: (name) => serverCookieState.values.get(name) ?? null,
+		getAll,
+		set: (name, value) => setOrDelete(name, value),
+		setOrDelete,
+		delete: remove
+	};
+	return {
+		createBrowserCookieHelper: () => helper,
+		createCookieHelper: async () => helper,
+		createPlaceholderCookieHelper: async () => helper,
+		deleteCookie: async (name) => remove(name),
+		deleteCookieClient: remove,
+		getCookieClient: (name) => serverCookieState.values.get(name) ?? null,
+		isSecure: async () => true,
+		saveVerifierAndState: async () => {
+			throw new Error("saveVerifierAndState is not used in this test");
+		},
+		setOrDeleteCookie: async (name, value) => setOrDelete(name, value),
+		setOrDeleteCookieClient: setOrDelete
+	};
+});
+(0, vitest.describe)("StackClientApp custom refresh cookie updates", () => {
+	(0, vitest.it)("preserves the existing custom and default cookies without a server hostname", async () => {
+		(0, vitest.expect)((0, _hexclave_shared_dist_utils_redirect_urls.getTrustedParentDomain)("_.example.com", ["https://example.com", "https://**.example.com"])).toBe("example.com");
+		const projectId = "00000000-0000-4000-8000-000000000000";
+		const customCookieName = `hexclave-refresh-${projectId}--custom-${(0, _hexclave_shared_dist_utils_bytes.encodeBase32)(new util.TextEncoder().encode("example.com"))}`;
+		const defaultCookieName = `__Host-hexclave-refresh-${projectId}--default`;
+		serverCookieState.values.clear();
+		serverCookieState.values.set(defaultCookieName, JSON.stringify({
+			refresh_token: "old-refresh",
+			updated_at_millis: 1
+		}));
+		serverCookieState.values.set(customCookieName, JSON.stringify({
+			refresh_token: "old-refresh",
+			updated_at_millis: 1
+		}));
+		const clientApp = new ___interfaces_client_app_js.StackClientApp({
+			baseUrl: "http://localhost:12345",
+			projectId,
+			publishableClientKey: "stack-pk-test",
+			tokenStore: "memory",
+			redirectMethod: "none",
+			noAutomaticPrefetch: true,
+			devTool: false
+		});
+		const trustedParentLookups = [];
+		Reflect.set(clientApp, "_getTrustedParentDomain", async (domain) => {
+			trustedParentLookups.push(domain);
+			return domain === "_.example.com" ? "example.com" : null;
+		});
+		const tokenStore = Reflect.get(clientApp, "_getOrCreateTokenStore").call(clientApp, {
+			identity: {},
+			get: (name) => serverCookieState.values.get(name) ?? null,
+			getAll: () => Object.fromEntries(serverCookieState.values),
+			set: (name, value) => serverCookieState.values.set(name, value),
+			setOrDelete: (name, value) => {
+				if (value === null) serverCookieState.values.delete(name);
+				else serverCookieState.values.set(name, value);
+			},
+			delete: (name) => serverCookieState.values.delete(name)
+		}, "nextjs-cookie");
+		const warnSpy = vitest.vi.spyOn(console, "warn").mockImplementation(() => {});
+		tokenStore.set({
+			accessToken: "new-access",
+			refreshToken: "new-refresh"
+		});
+		await new Promise((resolve) => setTimeout(resolve, 0));
+		vitest.expect.soft(warnSpy).not.toHaveBeenCalled();
+		const customCookieValue = serverCookieState.values.get(customCookieName);
+		vitest.expect.soft(customCookieValue).toBeDefined();
+		if (customCookieValue != null) vitest.expect.soft(JSON.parse(customCookieValue)).toEqual({
+			refresh_token: "new-refresh",
+			updated_at_millis: vitest.expect.any(Number)
+		});
+		vitest.expect.soft(serverCookieState.values.has(defaultCookieName)).toBe(true);
+		vitest.expect.soft(trustedParentLookups).toEqual(["_.example.com"]);
+		warnSpy.mockRestore();
+	});
+	(0, vitest.it)("recovers the custom cookie after overlapping server updates", async () => {
+		const projectId = "00000000-0000-4000-8000-000000000001";
+		const customCookieName = `hexclave-refresh-${projectId}--custom-${(0, _hexclave_shared_dist_utils_bytes.encodeBase32)(new util.TextEncoder().encode("example.com"))}`;
+		const defaultCookieName = `__Host-hexclave-refresh-${projectId}--default`;
+		serverCookieState.values.clear();
+		serverCookieState.values.set(defaultCookieName, JSON.stringify({
+			refresh_token: "old-refresh",
+			updated_at_millis: 1
+		}));
+		serverCookieState.values.set(customCookieName, JSON.stringify({
+			refresh_token: "old-refresh",
+			updated_at_millis: 1
+		}));
+		const clientApp = new ___interfaces_client_app_js.StackClientApp({
+			baseUrl: "http://localhost:12345",
+			projectId,
+			publishableClientKey: "stack-pk-test",
+			tokenStore: "memory",
+			redirectMethod: "none",
+			noAutomaticPrefetch: true,
+			devTool: false
+		});
+		let releaseTrustedParentLookup;
+		let shouldBlockTrustedParentLookup = true;
+		Reflect.set(clientApp, "_getTrustedParentDomain", async (domain) => {
+			if (shouldBlockTrustedParentLookup) {
+				shouldBlockTrustedParentLookup = false;
+				await new Promise((resolve) => {
+					releaseTrustedParentLookup = resolve;
+				});
+			}
+			return domain === "_.example.com" ? "example.com" : null;
+		});
+		const tokenStore = Reflect.get(clientApp, "_getOrCreateTokenStore").call(clientApp, {
+			identity: {},
+			get: (name) => serverCookieState.values.get(name) ?? null,
+			getAll: () => Object.fromEntries(serverCookieState.values),
+			set: (name, value) => serverCookieState.values.set(name, value),
+			setOrDelete: (name, value) => {
+				if (value === null) serverCookieState.values.delete(name);
+				else serverCookieState.values.set(name, value);
+			},
+			delete: (name) => serverCookieState.values.delete(name)
+		}, "nextjs-cookie");
+		tokenStore.set({
+			accessToken: "first-access",
+			refreshToken: "first-refresh"
+		});
+		await new Promise((resolve) => setTimeout(resolve, 0));
+		if (releaseTrustedParentLookup == null) throw new Error("Expected the first custom cookie recovery lookup to be pending.");
+		tokenStore.set({
+			accessToken: "second-access",
+			refreshToken: "second-refresh"
+		});
+		releaseTrustedParentLookup();
+		await new Promise((resolve) => setTimeout(resolve, 0));
+		const customCookieValue = serverCookieState.values.get(customCookieName);
+		(0, vitest.expect)(customCookieValue).toBeDefined();
+		if (customCookieValue == null) throw new Error("Expected the custom refresh cookie to be recovered.");
+		(0, vitest.expect)(JSON.parse(customCookieValue)).toMatchObject({
+			refresh_token: "second-refresh",
+			updated_at_millis: vitest.expect.any(Number)
+		});
+		(0, vitest.expect)(serverCookieState.values.has(defaultCookieName)).toBe(true);
+	});
+});
+//#endregion
+
+//# sourceMappingURL=client-app-impl.cookie.test.js.map

package/dist/lib/hexclave-app/apps/implementations/client-app-impl.cookie.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-app-impl.cookie.test.js","names":["vi","TextEncoder","StackClientApp","expect"],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/client-app-impl.cookie.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { describe, expect, it, vi } from \"vitest\";\nimport { encodeBase32 } from \"@hexclave/shared/dist/utils/bytes\";\nimport { getTrustedParentDomain } from \"@hexclave/shared/dist/utils/redirect-urls\";\nimport { TextEncoder } from \"util\";\nimport type { CookieHelper } from \"../../../cookie\";\nimport { StackClientApp } from \"../interfaces/client-app\";\n\nconst serverCookieState = vi.hoisted(() => ({\n  values: new Map<string, string>(),\n}));\n\nvi.mock(\"../../../cookie\", () => {\n  const getAll = () => Object.fromEntries(serverCookieState.values);\n  const remove = (name: string) => {\n    serverCookieState.values.delete(name);\n  };\n  const setOrDelete = (name: string, value: string | null) => {\n    if (value === null) {\n      remove(name);\n    } else {\n      serverCookieState.values.set(name, value);\n    }\n  };\n  const helper = {\n    identity: {},\n    get: (name: string) => serverCookieState.values.get(name) ?? null,\n    getAll,\n    set: (name: string, value: string) => setOrDelete(name, value),\n    setOrDelete,\n    delete: remove,\n  };\n  return {\n    createBrowserCookieHelper: () => helper,\n    createCookieHelper: async () => helper,\n    createPlaceholderCookieHelper: async () => helper,\n    deleteCookie: async (name: string) => remove(name),\n    deleteCookieClient: remove,\n    getCookieClient: (name: string) => serverCookieState.values.get(name) ?? null,\n    isSecure: async () => true,\n    saveVerifierAndState: async () => {\n      throw new Error(\"saveVerifierAndState is not used in this test\");\n    },\n    setOrDeleteCookie: async (name: string, value: string | null) => setOrDelete(name, value),\n    setOrDeleteCookieClient: setOrDelete,\n  };\n});\n\ndescribe(\"StackClientApp custom refresh cookie updates\", () => {\n  it(\"preserves the existing custom and default cookies without a server hostname\", async () => {\n    expect(getTrustedParentDomain(\"_.example.com\", [\"https://example.com\", \"https://**.example.com\"])).toBe(\"example.com\");\n    const projectId = \"00000000-0000-4000-8000-000000000000\";\n    const customCookieName = `hexclave-refresh-${projectId}--custom-${encodeBase32(new TextEncoder().encode(\"example.com\"))}`;\n    const defaultCookieName = `__Host-hexclave-refresh-${projectId}--default`;\n    serverCookieState.values.clear();\n    serverCookieState.values.set(defaultCookieName, JSON.stringify({ refresh_token: \"old-refresh\", updated_at_millis: 1 }));\n    serverCookieState.values.set(customCookieName, JSON.stringify({ refresh_token: \"old-refresh\", updated_at_millis: 1 }));\n\n    const clientApp = new StackClientApp({\n      baseUrl: \"http://localhost:12345\",\n      projectId,\n      publishableClientKey: \"stack-pk-test\",\n      tokenStore: \"memory\",\n      redirectMethod: \"none\",\n      noAutomaticPrefetch: true,\n      devTool: false,\n    });\n    const trustedParentLookups: string[] = [];\n    Reflect.set(clientApp, \"_getTrustedParentDomain\", async (domain: string) => {\n      trustedParentLookups.push(domain);\n      return domain === \"_.example.com\" ? \"example.com\" : null;\n    });\n    const getOrCreateTokenStore = Reflect.get(clientApp, \"_getOrCreateTokenStore\");\n    const cookieHelper: CookieHelper = {\n      identity: {},\n      get: (name: string) => serverCookieState.values.get(name) ?? null,\n      getAll: () => Object.fromEntries(serverCookieState.values),\n      set: (name: string, value: string) => serverCookieState.values.set(name, value),\n      setOrDelete: (name: string, value: string | null) => {\n        if (value === null) {\n          serverCookieState.values.delete(name);\n        } else {\n          serverCookieState.values.set(name, value);\n        }\n      },\n      delete: (name: string) => serverCookieState.values.delete(name),\n    };\n    const tokenStore = getOrCreateTokenStore.call(clientApp, cookieHelper, \"nextjs-cookie\");\n    const warnSpy = vi.spyOn(console, \"warn\").mockImplementation(() => {});\n\n    tokenStore.set({ accessToken: \"new-access\", refreshToken: \"new-refresh\" });\n    await new Promise((resolve) => setTimeout(resolve, 0));\n\n    expect.soft(warnSpy).not.toHaveBeenCalled();\n    const customCookieValue = serverCookieState.values.get(customCookieName);\n    expect.soft(customCookieValue).toBeDefined();\n    if (customCookieValue != null) {\n      expect.soft(JSON.parse(customCookieValue)).toEqual({\n        refresh_token: \"new-refresh\",\n        updated_at_millis: expect.any(Number),\n      });\n    }\n    expect.soft(serverCookieState.values.has(defaultCookieName)).toBe(true);\n    expect.soft(trustedParentLookups).toEqual([\"_.example.com\"]);\n    warnSpy.mockRestore();\n  });\n\n  it(\"recovers the custom cookie after overlapping server updates\", async () => {\n    const projectId = \"00000000-0000-4000-8000-000000000001\";\n    const customCookieName = `hexclave-refresh-${projectId}--custom-${encodeBase32(new TextEncoder().encode(\"example.com\"))}`;\n    const defaultCookieName = `__Host-hexclave-refresh-${projectId}--default`;\n    serverCookieState.values.clear();\n    serverCookieState.values.set(defaultCookieName, JSON.stringify({ refresh_token: \"old-refresh\", updated_at_millis: 1 }));\n    serverCookieState.values.set(customCookieName, JSON.stringify({ refresh_token: \"old-refresh\", updated_at_millis: 1 }));\n\n    const clientApp = new StackClientApp({\n      baseUrl: \"http://localhost:12345\",\n      projectId,\n      publishableClientKey: \"stack-pk-test\",\n      tokenStore: \"memory\",\n      redirectMethod: \"none\",\n      noAutomaticPrefetch: true,\n      devTool: false,\n    });\n    let releaseTrustedParentLookup: (() => void) | undefined;\n    let shouldBlockTrustedParentLookup = true;\n    Reflect.set(clientApp, \"_getTrustedParentDomain\", async (domain: string) => {\n      if (shouldBlockTrustedParentLookup) {\n        shouldBlockTrustedParentLookup = false;\n        await new Promise<void>((resolve) => {\n          releaseTrustedParentLookup = resolve;\n        });\n      }\n      return domain === \"_.example.com\" ? \"example.com\" : null;\n    });\n    const getOrCreateTokenStore = Reflect.get(clientApp, \"_getOrCreateTokenStore\");\n    const cookieHelper: CookieHelper = {\n      identity: {},\n      get: (name: string) => serverCookieState.values.get(name) ?? null,\n      getAll: () => Object.fromEntries(serverCookieState.values),\n      set: (name: string, value: string) => serverCookieState.values.set(name, value),\n      setOrDelete: (name: string, value: string | null) => {\n        if (value === null) {\n          serverCookieState.values.delete(name);\n        } else {\n          serverCookieState.values.set(name, value);\n        }\n      },\n      delete: (name: string) => serverCookieState.values.delete(name),\n    };\n    const tokenStore = getOrCreateTokenStore.call(clientApp, cookieHelper, \"nextjs-cookie\");\n\n    tokenStore.set({ accessToken: \"first-access\", refreshToken: \"first-refresh\" });\n    await new Promise((resolve) => setTimeout(resolve, 0));\n    if (releaseTrustedParentLookup == null) {\n      throw new Error(\"Expected the first custom cookie recovery lookup to be pending.\");\n    }\n    tokenStore.set({ accessToken: \"second-access\", refreshToken: \"second-refresh\" });\n    releaseTrustedParentLookup();\n    await new Promise((resolve) => setTimeout(resolve, 0));\n\n    const customCookieValue = serverCookieState.values.get(customCookieName);\n    expect(customCookieValue).toBeDefined();\n    if (customCookieValue == null) {\n      throw new Error(\"Expected the custom refresh cookie to be recovered.\");\n    }\n    expect(JSON.parse(customCookieValue)).toMatchObject({\n      refresh_token: \"second-refresh\",\n      updated_at_millis: expect.any(Number),\n    });\n    expect(serverCookieState.values.has(defaultCookieName)).toBe(true);\n  });\n});\n"],"mappings":";;;;;;AAWA,MAAM,oBAAoBA,OAAAA,GAAG,eAAe,EAC1C,wBAAQ,IAAI,IAAoB,EAClC,EAAE;AAEFA,OAAAA,GAAG,KAAK,yBAAyB;CAC/B,MAAM,eAAe,OAAO,YAAY,kBAAkB,MAAM;CAChE,MAAM,UAAU,SAAiB;EAC/B,kBAAkB,OAAO,OAAO,IAAI;CACtC;CACA,MAAM,eAAe,MAAc,UAAyB;EAC1D,IAAI,UAAU,MACZ,OAAO,IAAI;OAEX,kBAAkB,OAAO,IAAI,MAAM,KAAK;CAE5C;CACA,MAAM,SAAS;EACb,UAAU,CAAC;EACX,MAAM,SAAiB,kBAAkB,OAAO,IAAI,IAAI,KAAK;EAC7D;EACA,MAAM,MAAc,UAAkB,YAAY,MAAM,KAAK;EAC7D;EACA,QAAQ;CACV;CACA,OAAO;EACL,iCAAiC;EACjC,oBAAoB,YAAY;EAChC,+BAA+B,YAAY;EAC3C,cAAc,OAAO,SAAiB,OAAO,IAAI;EACjD,oBAAoB;EACpB,kBAAkB,SAAiB,kBAAkB,OAAO,IAAI,IAAI,KAAK;EACzE,UAAU,YAAY;EACtB,sBAAsB,YAAY;GAChC,MAAM,IAAI,MAAM,+CAA+C;EACjE;EACA,mBAAmB,OAAO,MAAc,UAAyB,YAAY,MAAM,KAAK;EACxF,yBAAyB;CAC3B;AACF,CAAC;qBAEQ,sDAAsD;CAC7D,CAAA,GAAA,OAAA,GAAA,CAAG,+EAA+E,YAAY;EAC5F,CAAA,GAAA,OAAA,OAAA,EAAA,GAAA,0CAAA,uBAAA,CAA8B,iBAAiB,CAAC,uBAAuB,wBAAwB,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa;EACrH,MAAM,YAAY;EAClB,MAAM,mBAAmB,oBAAoB,UAAU,YAAA,GAAA,kCAAA,aAAA,CAAwB,IAAIC,KAAAA,YAAY,CAAC,CAAC,OAAO,aAAa,CAAC;EACtH,MAAM,oBAAoB,2BAA2B,UAAU;EAC/D,kBAAkB,OAAO,MAAM;EAC/B,kBAAkB,OAAO,IAAI,mBAAmB,KAAK,UAAU;GAAE,eAAe;GAAe,mBAAmB;EAAE,CAAC,CAAC;EACtH,kBAAkB,OAAO,IAAI,kBAAkB,KAAK,UAAU;GAAE,eAAe;GAAe,mBAAmB;EAAE,CAAC,CAAC;EAErH,MAAM,YAAY,IAAIC,4BAAAA,eAAe;GACnC,SAAS;GACT;GACA,sBAAsB;GACtB,YAAY;GACZ,gBAAgB;GAChB,qBAAqB;GACrB,SAAS;EACX,CAAC;EACD,MAAM,uBAAiC,CAAC;EACxC,QAAQ,IAAI,WAAW,2BAA2B,OAAO,WAAmB;GAC1E,qBAAqB,KAAK,MAAM;GAChC,OAAO,WAAW,kBAAkB,gBAAgB;EACtD,CAAC;EAgBD,MAAM,aAfwB,QAAQ,IAAI,WAAW,wBAed,CAAC,CAAC,KAAK,WAAW;GAbvD,UAAU,CAAC;GACX,MAAM,SAAiB,kBAAkB,OAAO,IAAI,IAAI,KAAK;GAC7D,cAAc,OAAO,YAAY,kBAAkB,MAAM;GACzD,MAAM,MAAc,UAAkB,kBAAkB,OAAO,IAAI,MAAM,KAAK;GAC9E,cAAc,MAAc,UAAyB;IACnD,IAAI,UAAU,MACZ,kBAAkB,OAAO,OAAO,IAAI;SAEpC,kBAAkB,OAAO,IAAI,MAAM,KAAK;GAE5C;GACA,SAAS,SAAiB,kBAAkB,OAAO,OAAO,IAAI;EAEI,GAAG,eAAe;EACtF,MAAM,UAAUF,OAAAA,GAAG,MAAM,SAAS,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;EAErE,WAAW,IAAI;GAAE,aAAa;GAAc,cAAc;EAAc,CAAC;EACzE,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,CAAC,CAAC;EAErD,OAAA,OAAO,KAAK,OAAO,CAAC,CAAC,IAAI,iBAAiB;EAC1C,MAAM,oBAAoB,kBAAkB,OAAO,IAAI,gBAAgB;EACvE,OAAA,OAAO,KAAK,iBAAiB,CAAC,CAAC,YAAY;EAC3C,IAAI,qBAAqB,MACvB,OAAA,OAAO,KAAK,KAAK,MAAM,iBAAiB,CAAC,CAAC,CAAC,QAAQ;GACjD,eAAe;GACf,mBAAmBG,OAAAA,OAAO,IAAI,MAAM;EACtC,CAAC;EAEH,OAAA,OAAO,KAAK,kBAAkB,OAAO,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI;EACtE,OAAA,OAAO,KAAK,oBAAoB,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;EAC3D,QAAQ,YAAY;CACtB,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,+DAA+D,YAAY;EAC5E,MAAM,YAAY;EAClB,MAAM,mBAAmB,oBAAoB,UAAU,YAAA,GAAA,kCAAA,aAAA,CAAwB,IAAIF,KAAAA,YAAY,CAAC,CAAC,OAAO,aAAa,CAAC;EACtH,MAAM,oBAAoB,2BAA2B,UAAU;EAC/D,kBAAkB,OAAO,MAAM;EAC/B,kBAAkB,OAAO,IAAI,mBAAmB,KAAK,UAAU;GAAE,eAAe;GAAe,mBAAmB;EAAE,CAAC,CAAC;EACtH,kBAAkB,OAAO,IAAI,kBAAkB,KAAK,UAAU;GAAE,eAAe;GAAe,mBAAmB;EAAE,CAAC,CAAC;EAErH,MAAM,YAAY,IAAIC,4BAAAA,eAAe;GACnC,SAAS;GACT;GACA,sBAAsB;GACtB,YAAY;GACZ,gBAAgB;GAChB,qBAAqB;GACrB,SAAS;EACX,CAAC;EACD,IAAI;EACJ,IAAI,iCAAiC;EACrC,QAAQ,IAAI,WAAW,2BAA2B,OAAO,WAAmB;GAC1E,IAAI,gCAAgC;IAClC,iCAAiC;IACjC,MAAM,IAAI,SAAe,YAAY;KACnC,6BAA6B;IAC/B,CAAC;GACH;GACA,OAAO,WAAW,kBAAkB,gBAAgB;EACtD,CAAC;EAgBD,MAAM,aAfwB,QAAQ,IAAI,WAAW,wBAed,CAAC,CAAC,KAAK,WAAW;GAbvD,UAAU,CAAC;GACX,MAAM,SAAiB,kBAAkB,OAAO,IAAI,IAAI,KAAK;GAC7D,cAAc,OAAO,YAAY,kBAAkB,MAAM;GACzD,MAAM,MAAc,UAAkB,kBAAkB,OAAO,IAAI,MAAM,KAAK;GAC9E,cAAc,MAAc,UAAyB;IACnD,IAAI,UAAU,MACZ,kBAAkB,OAAO,OAAO,IAAI;SAEpC,kBAAkB,OAAO,IAAI,MAAM,KAAK;GAE5C;GACA,SAAS,SAAiB,kBAAkB,OAAO,OAAO,IAAI;EAEI,GAAG,eAAe;EAEtF,WAAW,IAAI;GAAE,aAAa;GAAgB,cAAc;EAAgB,CAAC;EAC7E,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,CAAC,CAAC;EACrD,IAAI,8BAA8B,MAChC,MAAM,IAAI,MAAM,iEAAiE;EAEnF,WAAW,IAAI;GAAE,aAAa;GAAiB,cAAc;EAAiB,CAAC;EAC/E,2BAA2B;EAC3B,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,CAAC,CAAC;EAErD,MAAM,oBAAoB,kBAAkB,OAAO,IAAI,gBAAgB;EACvE,CAAA,GAAA,OAAA,OAAA,CAAO,iBAAiB,CAAC,CAAC,YAAY;EACtC,IAAI,qBAAqB,MACvB,MAAM,IAAI,MAAM,qDAAqD;EAEvE,CAAA,GAAA,OAAA,OAAA,CAAO,KAAK,MAAM,iBAAiB,CAAC,CAAC,CAAC,cAAc;GAClD,eAAe;GACf,mBAAmBC,OAAAA,OAAO,IAAI,MAAM;EACtC,CAAC;EACD,CAAA,GAAA,OAAA,OAAA,CAAO,kBAAkB,OAAO,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI;CACnE,CAAC;AACH,CAAC"}

package/dist/lib/hexclave-app/apps/implementations/client-app-impl.d.ts

@@ -1,2 +1,2 @@
-import { i as stripBrowserActionQueryParam, r as _HexclaveClientAppImplIncomplete } from "../../../../admin-app-impl-BlUeKEd3.js";
+import { i as stripBrowserActionQueryParam, r as _HexclaveClientAppImplIncomplete } from "../../../../admin-app-impl-C6zvB2sD.js";
 export { _HexclaveClientAppImplIncomplete, stripBrowserActionQueryParam };

package/dist/lib/hexclave-app/apps/implementations/client-app-impl.js

@@ -443,6 +443,7 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 		});
 		this._convexPartialUserCache = (0, __common_js.createCache)(async ([ctx]) => await this._getPartialUserFromConvex(ctx));
 		this._trustedParentDomainCache = (0, __common_js.createCache)(async ([domain]) => await this._getTrustedParentDomain(domain));
+		this._knownCustomRefreshCookieDomains = /* @__PURE__ */ new Set();
 		this._anonymousSignUpInProgress = null;
 		this._prefetchedCrossDomainHandoffParams = null;
 		this._prefetchedCrossDomainHandoffParamsFetchedAt = 0;
@@ -944,18 +945,13 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 			});
 		});
 	}
-	_queueCustomRefreshCookieUpdate(refreshToken, updatedAt, context) {
+	_queueCustomRefreshCookieUpdate(refreshToken, updatedAt, context, previousCustomDomains) {
 		(0, _hexclave_shared_dist_utils_promises.runAsynchronously)(async () => {
 			this._mostRecentQueuedCookieRefreshIndex++;
 			const updateIndex = this._mostRecentQueuedCookieRefreshIndex;
 			let hostname;
 			if ((0, _hexclave_shared_dist_utils_env.isBrowserLike)()) hostname = window.location.hostname;
 			else hostname = await getServerRequestHost();
-			if (!hostname) {
-				console.warn("No hostname found when queueing custom refresh cookie update");
-				return;
-			}
-			const domain = await this._trustedParentDomainCache.getOrWait([hostname], "read-write");
 			const cookieOptions = {
 				maxAge: 3600 * 24 * 365,
 				noOpIfServerComponent: true
@@ -969,9 +965,22 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 				if (context === "browser") (0, _________cookie_js.setOrDeleteCookieClient)(name, value, options);
 				else await (0, _________cookie_js.setOrDeleteCookie)(name, value, options);
 			};
-			if (domain.status === "error" || !domain.data || updateIndex !== this._mostRecentQueuedCookieRefreshIndex) return;
 			const value = refreshToken && updatedAt ? this._formatRefreshCookieValue(refreshToken, updatedAt) : null;
+			if (!hostname) {
+				const domains = /* @__PURE__ */ new Set();
+				for (const previousDomain of new Set(previousCustomDomains)) {
+					const domain = await this._trustedParentDomainCache.getOrWait([`_.${previousDomain}`], "read-write");
+					if (updateIndex !== this._mostRecentQueuedCookieRefreshIndex) return;
+					if (domain.status !== "error" && domain.data != null) domains.add(domain.data);
+				}
+				if (updateIndex !== this._mostRecentQueuedCookieRefreshIndex) return;
+				await Promise.all([...domains].map((domain) => setCookie(domain, value)));
+				return;
+			}
+			const domain = await this._trustedParentDomainCache.getOrWait([hostname], "read-write");
+			if (domain.status === "error" || !domain.data || updateIndex !== this._mostRecentQueuedCookieRefreshIndex) return;
 			await setCookie(domain.data, value);
+			this._knownCustomRefreshCookieDomains.add(domain.data);
 			const isSecure = await (0, _________cookie_js.isSecure)();
 			const defaultName = this._getRefreshTokenDefaultCookieNameForSecure(isSecure);
 			if (context === "browser") (0, _________cookie_js.setOrDeleteCookieClient)(defaultName, null, cookieOptions);
@@ -1023,7 +1032,8 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 						const domain = this._getDomainFromCustomRefreshCookieName(name);
 						(0, _________cookie_js.deleteCookieClient)(name, domain ? { domain } : {});
 					});
-					this._queueCustomRefreshCookieUpdate(refreshToken, updatedAt, "browser");
+					cookieNamesToDelete.map((name) => this._getDomainFromCustomRefreshCookieName(name)).filter((domain) => domain !== null).forEach((domain) => this._knownCustomRefreshCookieDomains.add(domain));
+					this._queueCustomRefreshCookieUpdate(refreshToken, updatedAt, "browser", [...this._knownCustomRefreshCookieDomains]);
 					hasSucceededInWriting = true;
 				} catch (e) {
 					if (!(0, _hexclave_shared_dist_utils_env.isBrowserLike)()) hasSucceededInWriting = false;
@@ -1064,7 +1074,8 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 								...domain ? { domain } : {}
 							});
 						}));
-						this._queueCustomRefreshCookieUpdate(refreshToken, updatedAt, "server");
+						cookieNamesToDelete.map((name) => this._getDomainFromCustomRefreshCookieName(name)).filter((domain) => domain !== null).forEach((domain) => this._knownCustomRefreshCookieDomains.add(domain));
+						this._queueCustomRefreshCookieUpdate(refreshToken, updatedAt, "server", [...this._knownCustomRefreshCookieDomains]);
 					});
 				});
 				return store;