@imtbl/auth-next-server 2.17.1-alpha.1 → 2.17.1

package/dist/node/index.cjs

@@ -124,8 +124,7 @@ function extractZkEvmFromIdToken(idToken) {
   }
   return void 0;
 }
-var refreshPromises = /* @__PURE__ */ new Map();
-async function doRefreshAccessToken(refreshToken, clientId, authDomain) {
+async function refreshAccessToken(refreshToken, clientId, authDomain = DEFAULT_AUTH_DOMAIN) {
   const tokenUrl = `${authDomain}/oauth/token`;
   const response = await fetch(tokenUrl, {
     method: "POST",
@@ -164,16 +163,6 @@ async function doRefreshAccessToken(refreshToken, clientId, authDomain) {
     accessTokenExpires: decodeJwtExpiry(tokenData.access_token)
   };
 }
-async function refreshAccessToken(refreshToken, clientId, authDomain = DEFAULT_AUTH_DOMAIN) {
-  const cacheKey = `${clientId}:${refreshToken}`;
-  const inflight = refreshPromises.get(cacheKey);
-  if (inflight) return inflight;
-  const promise = doRefreshAccessToken(refreshToken, clientId, authDomain).finally(() => {
-    refreshPromises.delete(cacheKey);
-  });
-  refreshPromises.set(cacheKey, promise);
-  return promise;
-}
 
 // src/config.ts
 var Credentials = import_credentials.default.default || import_credentials.default;

package/dist/node/index.js

@@ -67,8 +67,7 @@ function extractZkEvmFromIdToken(idToken) {
   }
   return void 0;
 }
-var refreshPromises = /* @__PURE__ */ new Map();
-async function doRefreshAccessToken(refreshToken, clientId, authDomain) {
+async function refreshAccessToken(refreshToken, clientId, authDomain = DEFAULT_AUTH_DOMAIN) {
   const tokenUrl = `${authDomain}/oauth/token`;
   const response = await fetch(tokenUrl, {
     method: "POST",
@@ -107,16 +106,6 @@ async function doRefreshAccessToken(refreshToken, clientId, authDomain) {
     accessTokenExpires: decodeJwtExpiry(tokenData.access_token)
   };
 }
-async function refreshAccessToken(refreshToken, clientId, authDomain = DEFAULT_AUTH_DOMAIN) {
-  const cacheKey = `${clientId}:${refreshToken}`;
-  const inflight = refreshPromises.get(cacheKey);
-  if (inflight) return inflight;
-  const promise = doRefreshAccessToken(refreshToken, clientId, authDomain).finally(() => {
-    refreshPromises.delete(cacheKey);
-  });
-  refreshPromises.set(cacheKey, promise);
-  return promise;
-}
 
 // src/config.ts
 var Credentials = CredentialsImport.default || CredentialsImport;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@imtbl/auth-next-server",
-  "version": "2.17.1-alpha.1",
+  "version": "2.17.1",
   "description": "Immutable Auth.js v5 integration for Next.js - Server-side utilities",
   "author": "Immutable",
   "license": "Apache-2.0",

package/src/refresh.ts

@@ -85,16 +85,20 @@ export function extractZkEvmFromIdToken(idToken?: string): ZkEvmData | undefined
   return undefined;
 }
 
-// Deduplicates concurrent refresh calls for the same refresh token.
-// OAuth refresh tokens are single-use: if two requests arrive simultaneously
-// with the same expired token, only the first call reaches the provider.
-// Subsequent callers await the same promise and receive the same result.
-const refreshPromises = new Map<string, Promise<RefreshedTokens>>();
-
-async function doRefreshAccessToken(
+/**
+ * Refresh access token using the refresh token.
+ * This is called server-side in the JWT callback when the access token is expired.
+ *
+ * @param refreshToken - The refresh token to use
+ * @param clientId - The OAuth client ID
+ * @param authDomain - The authentication domain (default: https://auth.immutable.com)
+ * @returns The refreshed tokens
+ * @throws Error if refresh fails
+ */
+export async function refreshAccessToken(
   refreshToken: string,
   clientId: string,
-  authDomain: string,
+  authDomain: string = DEFAULT_AUTH_DOMAIN,
 ): Promise<RefreshedTokens> {
   const tokenUrl = `${authDomain}/oauth/token`;
 
@@ -137,29 +141,3 @@ async function doRefreshAccessToken(
     accessTokenExpires: decodeJwtExpiry(tokenData.access_token),
   };
 }
-
-/**
- * Refresh access token using the refresh token.
- * This is called server-side in the JWT callback when the access token is expired.
- *
- * @param refreshToken - The refresh token to use
- * @param clientId - The OAuth client ID
- * @param authDomain - The authentication domain (default: https://auth.immutable.com)
- * @returns The refreshed tokens
- * @throws Error if refresh fails
- */
-export async function refreshAccessToken(
-  refreshToken: string,
-  clientId: string,
-  authDomain: string = DEFAULT_AUTH_DOMAIN,
-): Promise<RefreshedTokens> {
-  const cacheKey = `${clientId}:${refreshToken}`;
-  const inflight = refreshPromises.get(cacheKey);
-  if (inflight) return inflight;
-
-  const promise = doRefreshAccessToken(refreshToken, clientId, authDomain).finally(() => {
-    refreshPromises.delete(cacheKey);
-  });
-  refreshPromises.set(cacheKey, promise);
-  return promise;
-}