@insforge/sdk 1.2.9 → 1.3.0-ssr.0

package/dist/index.mjs

@@ -628,7 +628,9 @@ var HttpClient = class {
       try {
         await this.refreshAndSaveSession();
       } catch (error2) {
-        this.clearAuthSession();
+        if (error2 instanceof InsForgeError && (error2.statusCode === 401 || error2.statusCode === 403)) {
+          this.clearAuthSession();
+        }
         throw error2;
       }
       return await this.handleRequest(method, path, {
@@ -734,7 +736,9 @@ var HttpClient = class {
     try {
       newTokenData = await this.refreshAndSaveSession();
     } catch (error) {
-      this.clearAuthSession();
+      if (error instanceof InsForgeError && (error.statusCode === 401 || error.statusCode === 403)) {
+        this.clearAuthSession();
+      }
       throw error;
     }
     const retryHeaders = new Headers(initHeaders);
@@ -882,7 +886,7 @@ function cleanUrlParams(...params) {
 }
 
 // src/modules/auth/auth.ts
-import { oAuthProvidersSchema } from "@insforge/shared-schemas";
+import { ERROR_CODES, oAuthProvidersSchema } from "@insforge/shared-schemas";
 var Auth = class {
   constructor(http, tokenManager, options = {}) {
     this.http = http;
@@ -1127,8 +1131,11 @@ var Auth = class {
    * Browser mode:
    * - Uses httpOnly refresh cookie and optional CSRF header.
    *
-   * Server mode (`isServerMode: true`):
+   * Legacy server mode (`isServerMode: true`):
    * - Uses mobile auth flow and requires `refreshToken` in request body.
+   *
+   * SSR apps should prefer `createRefreshAuthRouter()` / `refreshAuth()` from
+   * `@insforge/sdk/ssr`.
    */
   async refreshSession(options) {
     try {
@@ -1138,7 +1145,7 @@ var Auth = class {
           error: new InsForgeError(
             "refreshToken is required when refreshing session in server mode",
             400,
-            "REFRESH_TOKEN_REQUIRED"
+            ERROR_CODES.AUTH_UNAUTHORIZED
           )
         };
       }
@@ -1600,10 +1607,23 @@ var StorageBucket = class {
    */
   async download(path) {
     try {
-      const strategyResponse = await this.http.post(
-        `/api/storage/buckets/${this.bucketName}/objects/${encodeURIComponent(path)}/download-strategy`,
-        { expiresIn: 3600 }
-      );
+      const encodedKey = encodeURIComponent(path);
+      let strategyResponse;
+      try {
+        strategyResponse = await this.http.get(
+          `/api/storage/buckets/${this.bucketName}/download-strategy/objects/${encodedKey}`
+        );
+      } catch (err) {
+        const status = err instanceof InsForgeError ? err.statusCode : void 0;
+        if (status === 404 || status === 405) {
+          strategyResponse = await this.http.post(
+            `/api/storage/buckets/${this.bucketName}/objects/${encodedKey}/download-strategy`,
+            {}
+          );
+        } else {
+          throw err;
+        }
+      }
       const downloadUrl = strategyResponse.url;
       const headers = {};
       if (strategyResponse.method === "direct") {