@insforge/sdk 1.3.0-ssr.3 → 1.3.1

package/dist/ssr.mjs

@@ -1009,21 +1009,43 @@ var Auth = class {
       };
     }
   }
-  // ============================================================================
-  // OAuth Authentication
-  // ============================================================================
-  /**
-   * Sign in with OAuth provider using PKCE flow
-   */
-  async signInWithOAuth(options) {
+  async signInWithOAuth(providerOrOptions, options) {
     try {
-      const { provider, redirectTo, skipBrowserRedirect } = options;
+      let signInOptions;
+      if (typeof providerOrOptions === "object") {
+        signInOptions = providerOrOptions;
+      } else if (options) {
+        signInOptions = { provider: providerOrOptions, ...options };
+      } else {
+        return {
+          data: {},
+          error: new InsForgeError(
+            "OAuth sign-in options are required",
+            400,
+            ERROR_CODES.INVALID_INPUT
+          )
+        };
+      }
+      if (!signInOptions || !signInOptions.redirectTo) {
+        return {
+          data: {},
+          error: new InsForgeError(
+            "Redirect URI is required",
+            400,
+            ERROR_CODES.INVALID_INPUT
+          )
+        };
+      }
+      const { provider } = signInOptions;
       const providerKey = encodeURIComponent(provider.toLowerCase());
       const codeVerifier = generateCodeVerifier();
       const codeChallenge = await generateCodeChallenge(codeVerifier);
       storePkceVerifier(codeVerifier);
-      const params = { code_challenge: codeChallenge };
-      if (redirectTo) params.redirect_uri = redirectTo;
+      const params = {
+        ...signInOptions.additionalParams ?? {},
+        redirect_uri: signInOptions.redirectTo,
+        code_challenge: codeChallenge
+      };
       const isBuiltInProvider = oAuthProvidersSchema.options.includes(
         providerKey
       );
@@ -1032,7 +1054,7 @@ var Auth = class {
         params,
         skipAuthRefresh: true
       });
-      if (!this.isServerMode() && typeof window !== "undefined" && !skipBrowserRedirect) {
+      if (!this.isServerMode() && typeof window !== "undefined" && !signInOptions.skipBrowserRedirect) {
         window.location.href = response.authUrl;
         return { data: {}, error: null };
       }
@@ -2622,8 +2644,9 @@ function getJwtExpiration(token) {
   }
 }
 function isJwtExpiredOrExpiring(token, leewaySeconds = 60) {
+  if (!token) return false;
   const expires = getJwtExpiration(token);
-  if (!expires) return false;
+  if (!expires) return true;
   return expires.getTime() <= Date.now() + leewaySeconds * 1e3;
 }
 
@@ -2690,11 +2713,12 @@ function refreshTokenCookieOptions(token, overrides) {
   };
 }
 function expiredCookieOptions(overrides) {
+  const { expires: _expires, maxAge: _maxAge, ...safeOverrides } = overrides ?? {};
   return {
     ...defaultCookieOptions(),
+    ...safeOverrides,
     expires: EXPIRED_DATE,
-    maxAge: 0,
-    ...overrides
+    maxAge: 0
   };
 }
 function setCookie(cookies, name, value, options) {
@@ -2835,6 +2859,13 @@ function withAuthHeader(init, token) {
     headers
   };
 }
+function getRequestUrl(input) {
+  if (typeof input === "string") return input;
+  if (typeof Request !== "undefined" && input instanceof Request) {
+    return input.url;
+  }
+  return input.toString();
+}
 function createBrowserClient(options = {}) {
   let { baseUrl, anonKey } = options;
   try {
@@ -2891,7 +2922,7 @@ function createBrowserClient(options = {}) {
     return refreshPromise;
   };
   const shouldSkipRefresh = (input) => {
-    const url = typeof input === "string" ? input : input.toString();
+    const url = getRequestUrl(input);
     return url === refreshUrl || url.endsWith(refreshUrl);
   };
   const ssrFetch = async (input, init) => {