@insforge/sdk 1.0.1-refresh.5 → 1.0.1-refresh.7

package/dist/index.mjs

@@ -513,13 +513,19 @@ var Auth = class {
    * @internal
    */
   _switchToSecureStorage() {
-    if (this.tokenManager.getStrategyId() === "secure") return;
+    console.log("[InsForge:Auth] _switchToSecureStorage() called, current strategy:", this.tokenManager.getStrategyId());
+    if (this.tokenManager.getStrategyId() === "secure") {
+      console.log("[InsForge:Auth] _switchToSecureStorage() - already in secure mode, skipping");
+      return;
+    }
     const currentSession = this.tokenManager.getSession();
     this.tokenManager.setStrategy(new SecureSessionStorage());
     if (typeof localStorage !== "undefined") {
+      console.log("[InsForge:Auth] _switchToSecureStorage() - clearing localStorage");
       localStorage.removeItem(TOKEN_KEY);
       localStorage.removeItem(USER_KEY);
     }
+    console.log("[InsForge:Auth] _switchToSecureStorage() - setting isAuthenticated cookie");
     this.setAuthenticatedCookie();
     if (currentSession) {
       this.tokenManager.saveSession(currentSession);
@@ -545,8 +551,11 @@ var Auth = class {
    * @internal
    */
   _detectStorageFromResponse(sessionMode) {
+    console.log("[InsForge:Auth] _detectStorageFromResponse() - sessionMode:", sessionMode);
     if (sessionMode === "secure") {
       this._switchToSecureStorage();
+    } else {
+      this._switchToLocalStorage();
     }
   }
   /**
@@ -711,18 +720,25 @@ var Auth = class {
    * In modern mode, also calls backend to clear the refresh token cookie
    */
   async signOut() {
+    console.log("[InsForge:Auth] signOut() called");
+    console.log("[InsForge:Auth] signOut() stack trace:", new Error().stack);
     try {
       if (this.tokenManager.getStrategyId() === "secure") {
+        console.log("[InsForge:Auth] signOut() - calling backend /api/auth/logout");
         try {
           await this.http.post("/api/auth/logout");
-        } catch {
+          console.log("[InsForge:Auth] signOut() - backend logout successful");
+        } catch (e) {
+          console.log("[InsForge:Auth] signOut() - backend logout failed (ignored):", e);
         }
       }
       this.tokenManager.clearSession();
       this.http.setAuthToken(null);
       this.clearAuthenticatedCookie();
+      console.log("[InsForge:Auth] signOut() - completed");
       return { error: null };
     } catch (error) {
+      console.error("[InsForge:Auth] signOut() - error:", error);
       return {
         error: new InsForgeError(
           "Failed to sign out",
@@ -739,10 +755,12 @@ var Auth = class {
    * @returns New access token or throws an error
    */
   async refreshToken() {
+    console.log("[InsForge:Auth] refreshToken() called");
     try {
       const response = await this.http.post(
         "/api/auth/refresh"
       );
+      console.log("[InsForge:Auth] refreshToken() - response received, hasAccessToken:", !!response.accessToken);
       if (response.accessToken) {
         this._detectStorageFromResponse(response.sessionMode);
         this.tokenManager.setAccessToken(response.accessToken);
@@ -750,6 +768,7 @@ var Auth = class {
         if (response.user) {
           this.tokenManager.setUser(response.user);
         }
+        console.log("[InsForge:Auth] refreshToken() - success");
         return response.accessToken;
       }
       throw new InsForgeError(
@@ -758,8 +777,16 @@ var Auth = class {
         "REFRESH_FAILED"
       );
     } catch (error) {
+      console.error("[InsForge:Auth] refreshToken() - error:", error);
       if (error instanceof InsForgeError) {
+        if (error.statusCode === 404) {
+          console.log("[InsForge:Auth] refreshToken() - 404 detected, backend does not support refresh endpoint");
+          console.log("[InsForge:Auth] refreshToken() - switching to LocalSessionStorage for backward compatibility");
+          this._switchToLocalStorage();
+          this.clearAuthenticatedCookie();
+        }
         if (error.statusCode === 401 || error.statusCode === 403) {
+          console.log("[InsForge:Auth] refreshToken() - clearing session due to 401/403");
           this.tokenManager.clearSession();
           this.http.setAuthToken(null);
           this.clearAuthenticatedCookie();
@@ -818,12 +845,17 @@ var Auth = class {
    * to refresh the session if no access token is available (e.g., after page reload).
    */
   async getCurrentUser() {
+    console.log("[InsForge:Auth] getCurrentUser() called");
     try {
       let accessToken = this.tokenManager.getAccessToken();
-      if (!accessToken && this.tokenManager.shouldAttemptRefresh()) {
+      const shouldRefresh = this.tokenManager.shouldAttemptRefresh();
+      console.log("[InsForge:Auth] getCurrentUser() - hasAccessToken:", !!accessToken, "shouldAttemptRefresh:", shouldRefresh);
+      if (!accessToken && shouldRefresh) {
+        console.log("[InsForge:Auth] getCurrentUser() - attempting refresh");
         try {
           accessToken = await this.refreshToken();
         } catch (error) {
+          console.log("[InsForge:Auth] getCurrentUser() - refresh failed:", error);
           if (error instanceof InsForgeError && (error.statusCode === 401 || error.statusCode === 403)) {
             return { data: null, error };
           }
@@ -831,14 +863,17 @@ var Auth = class {
         }
       }
       if (!accessToken) {
+        console.log("[InsForge:Auth] getCurrentUser() - no access token, returning null");
         return { data: null, error: null };
       }
       this.http.setAuthToken(accessToken);
+      console.log("[InsForge:Auth] getCurrentUser() - fetching user from API");
       const authResponse = await this.http.get("/api/auth/sessions/current");
       const { data: profile, error: profileError } = await this.database.from("users").select("*").eq("id", authResponse.user.id).single();
       if (profileError && profileError.code !== "PGRST116") {
         return { data: null, error: profileError };
       }
+      console.log("[InsForge:Auth] getCurrentUser() - success");
       return {
         data: {
           user: authResponse.user,
@@ -847,8 +882,12 @@ var Auth = class {
         error: null
       };
     } catch (error) {
+      console.error("[InsForge:Auth] getCurrentUser() - catch error:", error);
       if (error instanceof InsForgeError && error.statusCode === 401) {
-        await this.signOut();
+        console.log("[InsForge:Auth] getCurrentUser() - 401 error, clearing local session only (NOT calling signOut)");
+        this.tokenManager.clearSession();
+        this.http.setAuthToken(null);
+        this.clearAuthenticatedCookie();
         return { data: null, error: null };
       }
       if (error instanceof InsForgeError) {
@@ -1656,9 +1695,14 @@ function hasAuthenticatedCookie() {
 }
 var InsForgeClient = class {
   constructor(config = {}) {
+    console.log("[InsForge:Client] Initializing SDK");
     this.http = new HttpClient(config);
     this.tokenManager = new TokenManager(config.storage);
-    if (hasAuthenticatedCookie()) {
+    const hasAuthCookie = hasAuthenticatedCookie();
+    console.log("[InsForge:Client] hasAuthenticatedCookie:", hasAuthCookie);
+    console.log("[InsForge:Client] document.cookie:", typeof document !== "undefined" ? document.cookie : "N/A (SSR)");
+    if (hasAuthCookie) {
+      console.log("[InsForge:Client] Switching to SecureSessionStorage");
       this.tokenManager.setStrategy(new SecureSessionStorage());
     }
     if (config.edgeFunctionToken) {
@@ -1670,25 +1714,31 @@ var InsForgeClient = class {
       });
     }
     this.http.setRefreshCallback(async () => {
+      console.log("[InsForge:Client] HTTP 401 refresh callback triggered");
       try {
         return await this.auth.refreshToken();
-      } catch {
+      } catch (e) {
+        console.log("[InsForge:Client] Refresh callback failed:", e);
         if (this.tokenManager.getStrategyId() === "secure") {
+          console.log("[InsForge:Client] Falling back to LocalSessionStorage");
           this.auth._switchToLocalStorage();
         }
         return null;
       }
     });
     const existingSession = this.tokenManager.getSession();
+    console.log("[InsForge:Client] existingSession:", !!existingSession, "strategyId:", this.tokenManager.getStrategyId());
     if (existingSession?.accessToken) {
       this.http.setAuthToken(existingSession.accessToken);
     } else if (this.tokenManager.getStrategyId() === "secure") {
+      console.log("[InsForge:Client] Secure mode, no session in memory - will refresh on first API call");
     }
     this.auth = new Auth(this.http, this.tokenManager);
     this.database = new Database(this.http, this.tokenManager);
     this.storage = new Storage(this.http);
     this.ai = new AI(this.http);
     this.functions = new Functions(this.http);
+    console.log("[InsForge:Client] SDK initialized");
   }
   /**
    * Get the underlying HTTP client for custom requests