@inrupt/solid-client-authn-browser 2.1.0 → 2.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inrupt/solid-client-authn-browser",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "license": "MIT",
   "types": "dist/index.d.ts",
   "browser": "dist/index.js",
@@ -25,12 +25,12 @@
     "build-docs-preview-site": "npm run build-api-docs; cd docs/api; make html"
   },
   "devDependencies": {
-    "@types/node": "^20.11.27",
+    "@types/node": "^20.14.0",
     "@types/uuid": "^9.0.8"
   },
   "dependencies": {
-    "@inrupt/oidc-client-ext": "^2.1.0",
-    "@inrupt/solid-client-authn-core": "^2.1.0",
+    "@inrupt/oidc-client-ext": "^2.2.1",
+    "@inrupt/solid-client-authn-core": "^2.2.1",
     "events": "^3.3.0",
     "jose": "^5.1.3",
     "uuid": "^9.0.1"
@@ -38,5 +38,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "259a56701e0e1f6d602055efcf8eb3ab26c792fd"
+  "gitHead": "f8a7a135da9896beea3c16aa1e6a99fccfdf1e08"
 }

package/src/ClientAuthentication.spec.ts

@@ -424,6 +424,7 @@ describe("ClientAuthentication", () => {
       expect(defaultMocks.redirectHandler.handle).toHaveBeenCalledWith(
         url,
         mockEmitter,
+        undefined,
       );
 
       // Calling the redirect handler should have updated the fetch.

package/src/ClientAuthentication.ts

@@ -101,7 +101,11 @@ export default class ClientAuthentication extends ClientAuthenticationBase {
     eventEmitter: EventEmitter,
   ): Promise<ISessionInfo | undefined> => {
     try {
-      const redirectInfo = await this.redirectHandler.handle(url, eventEmitter);
+      const redirectInfo = await this.redirectHandler.handle(
+        url,
+        eventEmitter,
+        undefined,
+      );
       // The `FallbackRedirectHandler` directly returns the global `fetch` for
       // his value, so we should ensure it's bound to `window` rather than to
       // ClientAuthentication, to avoid the following error:

package/src/Session.ts

@@ -115,7 +115,7 @@ function isLoggedIn(
 }
 
 /**
- * A {@link Session} object represents a user's session on an application. The session holds state, as it stores information enabling acces to private resources after login for instance.
+ * A {@link Session} object represents a user's session on an application. The session holds state, as it stores information enabling access to private resources after login for instance.
  */
 export class Session implements IHasSessionEventListener {
   /**

package/src/login/oidc/refresh/TokenRefresher.spec.ts

@@ -272,5 +272,26 @@ describe("TokenRefresher", () => {
       );
       expect(result.refreshToken).toBe("Some rotated refresh token");
     });
+
+    it("does not store the rotated refresh token", async () => {
+      const mockedStorage = mockRefresherDefaultStorageUtility();
+      await mockOidcModule({
+        ...mockDpopTokens(),
+        refreshToken: "Some rotated refresh token",
+        dpopKey: await mockKeyPair(),
+        webId: mockWebId(),
+      });
+      const refresher = getTokenRefresher({
+        storageUtility: mockedStorage,
+      });
+      await refresher.refresh(
+        "mySession",
+        "some refresh token",
+        await mockKeyPair(),
+      );
+      await expect(
+        mockedStorage.getForUser("mySession", "refreshToken"),
+      ).resolves.toBeUndefined();
+    });
   });
 });

package/src/login/oidc/refresh/TokenRefresher.ts

@@ -97,9 +97,6 @@ export default class TokenRefresher implements ITokenRefresher {
 
     if (tokenSet.refreshToken !== undefined) {
       eventEmitter?.emit(EVENTS.NEW_REFRESH_TOKEN, tokenSet.refreshToken);
-      await this.storageUtility.setForUser(sessionId, {
-        refreshToken: tokenSet.refreshToken,
-      });
     }
     return tokenSet;
   }