@insforge/sdk 1.3.0-ssr.1 → 1.3.0-ssr.2

package/dist/ssr.mjs

@@ -2697,11 +2697,11 @@ function setCookie(cookies, name, value, options) {
 }
 function deleteCookie(cookies, name, options) {
   if (!cookies) return;
-  if (cookies.delete) {
-    cookies.delete(name, options);
+  if (cookies.set) {
+    cookies.set(name, "", expiredCookieOptions(options));
     return;
   }
-  cookies.set?.(name, "", expiredCookieOptions(options));
+  cookies.delete?.(name);
 }
 function serializeCookie(name, value, options = {}) {
   const parts = [`${encodeURIComponent(name)}=${encodeURIComponent(value)}`];
@@ -2720,32 +2720,17 @@ function serializeCookie(name, value, options = {}) {
 function appendSetCookie(headers, name, value, options) {
   headers.append("Set-Cookie", serializeCookie(name, value, options));
 }
-function setAuthCookies(target, tokens, settings = {}) {
+function setAuthCookies(cookies, tokens, settings = {}) {
   const accessName = getAccessTokenCookieName(settings.names);
   const refreshName = getRefreshTokenCookieName(settings.names);
   const accessOptions = accessTokenCookieOptions(
     tokens.accessToken,
     settings.options?.accessToken
   );
-  if (target instanceof Headers) {
-    appendSetCookie(target, accessName, tokens.accessToken, accessOptions);
-    if (tokens.refreshToken) {
-      appendSetCookie(
-        target,
-        refreshName,
-        tokens.refreshToken,
-        refreshTokenCookieOptions(
-          tokens.refreshToken,
-          settings.options?.refreshToken
-        )
-      );
-    }
-    return;
-  }
-  setCookie(target, accessName, tokens.accessToken, accessOptions);
+  setCookie(cookies, accessName, tokens.accessToken, accessOptions);
   if (tokens.refreshToken) {
     setCookie(
-      target,
+      cookies,
       refreshName,
       tokens.refreshToken,
       refreshTokenCookieOptions(
@@ -2755,18 +2740,48 @@ function setAuthCookies(target, tokens, settings = {}) {
     );
   }
 }
-function clearAuthCookies(target, settings = {}) {
+function clearAuthCookies(cookies, settings = {}) {
   const accessName = getAccessTokenCookieName(settings.names);
   const refreshName = getRefreshTokenCookieName(settings.names);
   const accessOptions = expiredCookieOptions(settings.options?.accessToken);
   const refreshOptions = expiredCookieOptions(settings.options?.refreshToken);
-  if (target instanceof Headers) {
-    appendSetCookie(target, accessName, "", accessOptions);
-    appendSetCookie(target, refreshName, "", refreshOptions);
-    return;
+  deleteCookie(cookies, accessName, accessOptions);
+  deleteCookie(cookies, refreshName, refreshOptions);
+}
+function setAuthCookieHeaders(headers, tokens, settings = {}) {
+  const accessName = getAccessTokenCookieName(settings.names);
+  const refreshName = getRefreshTokenCookieName(settings.names);
+  appendSetCookie(
+    headers,
+    accessName,
+    tokens.accessToken,
+    accessTokenCookieOptions(tokens.accessToken, settings.options?.accessToken)
+  );
+  if (tokens.refreshToken) {
+    appendSetCookie(
+      headers,
+      refreshName,
+      tokens.refreshToken,
+      refreshTokenCookieOptions(
+        tokens.refreshToken,
+        settings.options?.refreshToken
+      )
+    );
   }
-  deleteCookie(target, accessName, accessOptions);
-  deleteCookie(target, refreshName, refreshOptions);
+}
+function clearAuthCookieHeaders(headers, settings = {}) {
+  appendSetCookie(
+    headers,
+    getAccessTokenCookieName(settings.names),
+    "",
+    expiredCookieOptions(settings.options?.accessToken)
+  );
+  appendSetCookie(
+    headers,
+    getRefreshTokenCookieName(settings.names),
+    "",
+    expiredCookieOptions(settings.options?.refreshToken)
+  );
 }
 
 // src/ssr/browser-client.ts
@@ -2991,7 +3006,7 @@ async function refreshAuth(options = {}) {
   const headers = new Headers();
   const refreshToken = readRefreshToken(options);
   if (!refreshToken) {
-    clearAuthCookies(headers, options);
+    clearAuthCookieHeaders(headers, options);
     const error2 = new InsForgeError(
       "Refresh token cookie is missing",
       401,
@@ -3061,7 +3076,7 @@ async function refreshAuth(options = {}) {
     error = normalizeError(caught);
   }
   if (error || !data?.accessToken) {
-    clearAuthCookies(headers, options);
+    clearAuthCookieHeaders(headers, options);
     const normalized = normalizeError(error);
     return {
       response: jsonResponse(
@@ -3080,7 +3095,7 @@ async function refreshAuth(options = {}) {
     };
   }
   const nextRefreshToken = data.refreshToken ?? refreshToken;
-  setAuthCookies(
+  setAuthCookieHeaders(
     headers,
     {
       accessToken: data.accessToken,