@insforge/sdk 1.3.0-ssr.1 → 1.3.0-ssr.3

package/dist/ssr.d.mts

@@ -1,4 +1,4 @@
-import { a as InsForgeConfig, I as InsForgeClient, l as AuthRefreshResponse, d as InsForgeError } from './client-B8ykVESe.mjs';
+import { a as InsForgeConfig, I as InsForgeClient, m as AuthRefreshResponse, e as InsForgeError } from './client-CQfw9UsO.mjs';
 import '@insforge/shared-schemas';
 import '@supabase/postgrest-js';
 
@@ -24,10 +24,21 @@ interface AuthCookieOptions {
 type CookieStoreValue = string | {
     value?: string | null;
 } | undefined | null;
-interface CookieStore {
+interface CookieReader {
     get(name: string): CookieStoreValue;
+}
+interface CookieWriter {
     set?(name: string, value: string, options?: CookieOptions): unknown;
-    delete?(name: string, options?: CookieOptions): unknown;
+    set?(options: {
+        name: string;
+        value: string;
+    } & CookieOptions): unknown;
+    delete?(name: string): unknown;
+    delete?(options: {
+        name: string;
+    } & CookieOptions): unknown;
+}
+interface CookieStore extends CookieReader, CookieWriter {
 }
 interface AuthCookieSettings {
     names?: AuthCookieNames;
@@ -37,11 +48,11 @@ declare function getAccessTokenCookieName(names?: AuthCookieNames): string;
 declare function getRefreshTokenCookieName(names?: AuthCookieNames): string;
 declare function accessTokenCookieOptions(token: string, overrides?: CookieOptions): CookieOptions;
 declare function refreshTokenCookieOptions(token: string, overrides?: CookieOptions): CookieOptions;
-declare function setAuthCookies(target: Headers | CookieStore | undefined, tokens: {
+declare function setAuthCookies(cookies: CookieWriter | undefined, tokens: {
     accessToken: string;
     refreshToken?: string | null;
 }, settings?: AuthCookieSettings): void;
-declare function clearAuthCookies(target: Headers | CookieStore | undefined, settings?: AuthCookieSettings): void;
+declare function clearAuthCookies(cookies: CookieWriter | undefined, settings?: AuthCookieSettings): void;
 
 interface CreateBrowserClientOptions extends Omit<InsForgeConfig, 'edgeFunctionToken' | 'isServerMode' | 'auth'>, AuthCookieSettings {
     refreshUrl?: string;
@@ -85,4 +96,4 @@ interface UpdateSessionResult {
 }
 declare function updateSession(options: UpdateSessionOptions): Promise<UpdateSessionResult>;
 
-export { type AuthCookieNames, type AuthCookieOptions, type AuthCookieSettings, type CookieOptions, type CookieStore, type CreateBrowserClientOptions, type CreateServerClientOptions, DEFAULT_ACCESS_TOKEN_COOKIE, DEFAULT_REFRESH_TOKEN_COOKIE, type RefreshAuthOptions, type RefreshAuthResult, type RefreshAuthRouteHandler, type UpdateSessionOptions, type UpdateSessionResult, accessTokenCookieOptions, clearAuthCookies, createBrowserClient, createRefreshAuthRouter, createServerClient, getAccessTokenCookieName, getRefreshTokenCookieName, refreshAuth, refreshTokenCookieOptions, setAuthCookies, updateSession };
+export { type AuthCookieNames, type AuthCookieOptions, type AuthCookieSettings, type CookieOptions, type CookieReader, type CookieStore, type CookieWriter, type CreateBrowserClientOptions, type CreateServerClientOptions, DEFAULT_ACCESS_TOKEN_COOKIE, DEFAULT_REFRESH_TOKEN_COOKIE, type RefreshAuthOptions, type RefreshAuthResult, type RefreshAuthRouteHandler, type UpdateSessionOptions, type UpdateSessionResult, accessTokenCookieOptions, clearAuthCookies, createBrowserClient, createRefreshAuthRouter, createServerClient, getAccessTokenCookieName, getRefreshTokenCookieName, refreshAuth, refreshTokenCookieOptions, setAuthCookies, updateSession };

package/dist/ssr.d.ts

@@ -1,4 +1,4 @@
-import { a as InsForgeConfig, I as InsForgeClient, l as AuthRefreshResponse, d as InsForgeError } from './client-B8ykVESe.js';
+import { a as InsForgeConfig, I as InsForgeClient, m as AuthRefreshResponse, e as InsForgeError } from './client-CQfw9UsO.js';
 import '@insforge/shared-schemas';
 import '@supabase/postgrest-js';
 
@@ -24,10 +24,21 @@ interface AuthCookieOptions {
 type CookieStoreValue = string | {
     value?: string | null;
 } | undefined | null;
-interface CookieStore {
+interface CookieReader {
     get(name: string): CookieStoreValue;
+}
+interface CookieWriter {
     set?(name: string, value: string, options?: CookieOptions): unknown;
-    delete?(name: string, options?: CookieOptions): unknown;
+    set?(options: {
+        name: string;
+        value: string;
+    } & CookieOptions): unknown;
+    delete?(name: string): unknown;
+    delete?(options: {
+        name: string;
+    } & CookieOptions): unknown;
+}
+interface CookieStore extends CookieReader, CookieWriter {
 }
 interface AuthCookieSettings {
     names?: AuthCookieNames;
@@ -37,11 +48,11 @@ declare function getAccessTokenCookieName(names?: AuthCookieNames): string;
 declare function getRefreshTokenCookieName(names?: AuthCookieNames): string;
 declare function accessTokenCookieOptions(token: string, overrides?: CookieOptions): CookieOptions;
 declare function refreshTokenCookieOptions(token: string, overrides?: CookieOptions): CookieOptions;
-declare function setAuthCookies(target: Headers | CookieStore | undefined, tokens: {
+declare function setAuthCookies(cookies: CookieWriter | undefined, tokens: {
     accessToken: string;
     refreshToken?: string | null;
 }, settings?: AuthCookieSettings): void;
-declare function clearAuthCookies(target: Headers | CookieStore | undefined, settings?: AuthCookieSettings): void;
+declare function clearAuthCookies(cookies: CookieWriter | undefined, settings?: AuthCookieSettings): void;
 
 interface CreateBrowserClientOptions extends Omit<InsForgeConfig, 'edgeFunctionToken' | 'isServerMode' | 'auth'>, AuthCookieSettings {
     refreshUrl?: string;
@@ -85,4 +96,4 @@ interface UpdateSessionResult {
 }
 declare function updateSession(options: UpdateSessionOptions): Promise<UpdateSessionResult>;
 
-export { type AuthCookieNames, type AuthCookieOptions, type AuthCookieSettings, type CookieOptions, type CookieStore, type CreateBrowserClientOptions, type CreateServerClientOptions, DEFAULT_ACCESS_TOKEN_COOKIE, DEFAULT_REFRESH_TOKEN_COOKIE, type RefreshAuthOptions, type RefreshAuthResult, type RefreshAuthRouteHandler, type UpdateSessionOptions, type UpdateSessionResult, accessTokenCookieOptions, clearAuthCookies, createBrowserClient, createRefreshAuthRouter, createServerClient, getAccessTokenCookieName, getRefreshTokenCookieName, refreshAuth, refreshTokenCookieOptions, setAuthCookies, updateSession };
+export { type AuthCookieNames, type AuthCookieOptions, type AuthCookieSettings, type CookieOptions, type CookieReader, type CookieStore, type CookieWriter, type CreateBrowserClientOptions, type CreateServerClientOptions, DEFAULT_ACCESS_TOKEN_COOKIE, DEFAULT_REFRESH_TOKEN_COOKIE, type RefreshAuthOptions, type RefreshAuthResult, type RefreshAuthRouteHandler, type UpdateSessionOptions, type UpdateSessionResult, accessTokenCookieOptions, clearAuthCookies, createBrowserClient, createRefreshAuthRouter, createServerClient, getAccessTokenCookieName, getRefreshTokenCookieName, refreshAuth, refreshTokenCookieOptions, setAuthCookies, updateSession };

package/dist/ssr.js

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/ssr.ts
@@ -2215,7 +2225,6 @@ var Functions = class _Functions {
 };
 
 // src/modules/realtime.ts
-var import_socket = require("socket.io-client");
 var CONNECT_TIMEOUT = 1e4;
 var Realtime = class {
   constructor(baseUrl, tokenManager, anonKey) {
@@ -2250,61 +2259,69 @@ var Realtime = class {
     if (this.connectPromise) {
       return this.connectPromise;
     }
-    this.connectPromise = new Promise((resolve, reject) => {
-      const token = this.tokenManager.getAccessToken() ?? this.anonKey;
-      this.socket = (0, import_socket.io)(this.baseUrl, {
-        transports: ["websocket"],
-        auth: token ? { token } : void 0
-      });
-      let initialConnection = true;
-      let timeoutId = null;
-      const cleanup = () => {
-        if (timeoutId) {
-          clearTimeout(timeoutId);
-          timeoutId = null;
-        }
-      };
-      timeoutId = setTimeout(() => {
-        if (initialConnection) {
-          initialConnection = false;
-          this.connectPromise = null;
-          this.socket?.disconnect();
-          this.socket = null;
-          reject(new Error(`Connection timeout after ${CONNECT_TIMEOUT}ms`));
-        }
-      }, CONNECT_TIMEOUT);
-      this.socket.on("connect", () => {
-        cleanup();
-        for (const channel of this.subscribedChannels) {
-          this.socket.emit("realtime:subscribe", { channel });
-        }
-        this.notifyListeners("connect");
-        if (initialConnection) {
-          initialConnection = false;
-          this.connectPromise = null;
-          resolve();
-        }
-      });
-      this.socket.on("connect_error", (error) => {
-        cleanup();
-        this.notifyListeners("connect_error", error);
-        if (initialConnection) {
-          initialConnection = false;
-          this.connectPromise = null;
-          reject(error);
-        }
-      });
-      this.socket.on("disconnect", (reason) => {
-        this.notifyListeners("disconnect", reason);
-      });
-      this.socket.on("realtime:error", (error) => {
-        this.notifyListeners("error", error);
-      });
-      this.socket.onAny((event, message) => {
-        if (event === "realtime:error") return;
-        this.notifyListeners(event, message);
-      });
-    });
+    this.connectPromise = (async () => {
+      try {
+        const { io } = await import("socket.io-client");
+        await new Promise((resolve, reject) => {
+          const token = this.tokenManager.getAccessToken() ?? this.anonKey;
+          this.socket = io(this.baseUrl, {
+            transports: ["websocket"],
+            auth: token ? { token } : void 0
+          });
+          let initialConnection = true;
+          let timeoutId = null;
+          const cleanup = () => {
+            if (timeoutId) {
+              clearTimeout(timeoutId);
+              timeoutId = null;
+            }
+          };
+          timeoutId = setTimeout(() => {
+            if (initialConnection) {
+              initialConnection = false;
+              this.connectPromise = null;
+              this.socket?.disconnect();
+              this.socket = null;
+              reject(new Error(`Connection timeout after ${CONNECT_TIMEOUT}ms`));
+            }
+          }, CONNECT_TIMEOUT);
+          this.socket.on("connect", () => {
+            cleanup();
+            for (const channel of this.subscribedChannels) {
+              this.socket.emit("realtime:subscribe", { channel });
+            }
+            this.notifyListeners("connect");
+            if (initialConnection) {
+              initialConnection = false;
+              this.connectPromise = null;
+              resolve();
+            }
+          });
+          this.socket.on("connect_error", (error) => {
+            cleanup();
+            this.notifyListeners("connect_error", error);
+            if (initialConnection) {
+              initialConnection = false;
+              this.connectPromise = null;
+              reject(error);
+            }
+          });
+          this.socket.on("disconnect", (reason) => {
+            this.notifyListeners("disconnect", reason);
+          });
+          this.socket.on("realtime:error", (error) => {
+            this.notifyListeners("error", error);
+          });
+          this.socket.onAny((event, message) => {
+            if (event === "realtime:error") return;
+            this.notifyListeners(event, message);
+          });
+        });
+      } catch (error) {
+        this.connectPromise = null;
+        throw error;
+      }
+    })();
     return this.connectPromise;
   }
   /**
@@ -2634,10 +2651,9 @@ function decodeBase64Url(input) {
     normalized.length + (4 - normalized.length % 4) % 4,
     "="
   );
-  if (typeof atob === "function") {
-    return atob(padded);
-  }
-  return Buffer.from(padded, "base64").toString("utf8");
+  const binary = atob(padded);
+  const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));
+  return new TextDecoder().decode(bytes);
 }
 function getJwtExpiration(token) {
   if (!token) return null;
@@ -2735,11 +2751,11 @@ function setCookie(cookies, name, value, options) {
 }
 function deleteCookie(cookies, name, options) {
   if (!cookies) return;
-  if (cookies.delete) {
-    cookies.delete(name, options);
+  if (cookies.set) {
+    cookies.set(name, "", expiredCookieOptions(options));
     return;
   }
-  cookies.set?.(name, "", expiredCookieOptions(options));
+  cookies.delete?.(name);
 }
 function serializeCookie(name, value, options = {}) {
   const parts = [`${encodeURIComponent(name)}=${encodeURIComponent(value)}`];
@@ -2758,32 +2774,17 @@ function serializeCookie(name, value, options = {}) {
 function appendSetCookie(headers, name, value, options) {
   headers.append("Set-Cookie", serializeCookie(name, value, options));
 }
-function setAuthCookies(target, tokens, settings = {}) {
+function setAuthCookies(cookies, tokens, settings = {}) {
   const accessName = getAccessTokenCookieName(settings.names);
   const refreshName = getRefreshTokenCookieName(settings.names);
   const accessOptions = accessTokenCookieOptions(
     tokens.accessToken,
     settings.options?.accessToken
   );
-  if (target instanceof Headers) {
-    appendSetCookie(target, accessName, tokens.accessToken, accessOptions);
-    if (tokens.refreshToken) {
-      appendSetCookie(
-        target,
-        refreshName,
-        tokens.refreshToken,
-        refreshTokenCookieOptions(
-          tokens.refreshToken,
-          settings.options?.refreshToken
-        )
-      );
-    }
-    return;
-  }
-  setCookie(target, accessName, tokens.accessToken, accessOptions);
+  setCookie(cookies, accessName, tokens.accessToken, accessOptions);
   if (tokens.refreshToken) {
     setCookie(
-      target,
+      cookies,
       refreshName,
       tokens.refreshToken,
       refreshTokenCookieOptions(
@@ -2793,18 +2794,48 @@ function setAuthCookies(target, tokens, settings = {}) {
     );
   }
 }
-function clearAuthCookies(target, settings = {}) {
+function clearAuthCookies(cookies, settings = {}) {
   const accessName = getAccessTokenCookieName(settings.names);
   const refreshName = getRefreshTokenCookieName(settings.names);
   const accessOptions = expiredCookieOptions(settings.options?.accessToken);
   const refreshOptions = expiredCookieOptions(settings.options?.refreshToken);
-  if (target instanceof Headers) {
-    appendSetCookie(target, accessName, "", accessOptions);
-    appendSetCookie(target, refreshName, "", refreshOptions);
-    return;
+  deleteCookie(cookies, accessName, accessOptions);
+  deleteCookie(cookies, refreshName, refreshOptions);
+}
+function setAuthCookieHeaders(headers, tokens, settings = {}) {
+  const accessName = getAccessTokenCookieName(settings.names);
+  const refreshName = getRefreshTokenCookieName(settings.names);
+  appendSetCookie(
+    headers,
+    accessName,
+    tokens.accessToken,
+    accessTokenCookieOptions(tokens.accessToken, settings.options?.accessToken)
+  );
+  if (tokens.refreshToken) {
+    appendSetCookie(
+      headers,
+      refreshName,
+      tokens.refreshToken,
+      refreshTokenCookieOptions(
+        tokens.refreshToken,
+        settings.options?.refreshToken
+      )
+    );
   }
-  deleteCookie(target, accessName, accessOptions);
-  deleteCookie(target, refreshName, refreshOptions);
+}
+function clearAuthCookieHeaders(headers, settings = {}) {
+  appendSetCookie(
+    headers,
+    getAccessTokenCookieName(settings.names),
+    "",
+    expiredCookieOptions(settings.options?.accessToken)
+  );
+  appendSetCookie(
+    headers,
+    getRefreshTokenCookieName(settings.names),
+    "",
+    expiredCookieOptions(settings.options?.refreshToken)
+  );
 }
 
 // src/ssr/browser-client.ts
@@ -3029,7 +3060,7 @@ async function refreshAuth(options = {}) {
   const headers = new Headers();
   const refreshToken = readRefreshToken(options);
   if (!refreshToken) {
-    clearAuthCookies(headers, options);
+    clearAuthCookieHeaders(headers, options);
     const error2 = new InsForgeError(
       "Refresh token cookie is missing",
       401,
@@ -3099,7 +3130,7 @@ async function refreshAuth(options = {}) {
     error = normalizeError(caught);
   }
   if (error || !data?.accessToken) {
-    clearAuthCookies(headers, options);
+    clearAuthCookieHeaders(headers, options);
     const normalized = normalizeError(error);
     return {
       response: jsonResponse(
@@ -3118,7 +3149,7 @@ async function refreshAuth(options = {}) {
     };
   }
   const nextRefreshToken = data.refreshToken ?? refreshToken;
-  setAuthCookies(
+  setAuthCookieHeaders(
     headers,
     {
       accessToken: data.accessToken,