@iqauth/sdk 2.6.4 → 2.7.0

package/dist/hono.mjs

@@ -2,18 +2,19 @@ import {
   handleCallback,
   handleRefresh,
   handleSignout,
+  handleUserinfo,
   serializeCookie
-} from "./chunk-6TDJJER7.mjs";
+} from "./chunk-RUJXRTEW.mjs";
 import {
   assertPublishableKey
-} from "./chunk-WQWBJSSS.mjs";
+} from "./chunk-HVHNYPDC.mjs";
 import {
   IQAuthClient
-} from "./chunk-W3F4JYGP.mjs";
-import "./chunk-UNYDG2L4.mjs";
+} from "./chunk-JXQI62A7.mjs";
+import "./chunk-NUO2I65G.mjs";
 import {
   IQAuthError
-} from "./chunk-6I6RM4MN.mjs";
+} from "./chunk-6PJRLRB4.mjs";
 import "./chunk-Y6FXYEAI.mjs";
 
 // src/hono.ts
@@ -23,7 +24,10 @@ var KNOWN_AUTH_ERRORS = /* @__PURE__ */ new Set([
   "TOKEN_REVOKED",
   "SESSION_EXPIRED",
   "SESSION_INVALID",
-  "AUTH_REQUIRED"
+  "AUTH_REQUIRED",
+  // Task #127 — typed `IQAuthErrorCode` taxonomy.
+  "token_invalid",
+  "token_expired"
 ]);
 function readCookieFromHeader(header, name) {
   if (!header) return void 0;
@@ -62,6 +66,11 @@ function iqAuth(options) {
   return async (c, next) => {
     const url = new URL(c.req.url);
     const path = url.pathname;
+    if (options.mountUserinfo && path === `${mount}/me` && c.req.method === "GET") {
+      const auth2 = c.req.header("authorization");
+      const accessToken = auth2 && auth2.replace(/^Bearer /i, "") || readCookieFromHeader(c.req.header("cookie"), accessCookie);
+      return honoResponse(await handleUserinfo(helperConfig, { accessToken, req: c.req }));
+    }
     if (mountHelpers && path.startsWith(mount + "/") && c.req.method === "POST") {
       const body = await c.req.json().catch(() => ({}));
       const cookieHeader = c.req.header("cookie");
@@ -74,12 +83,15 @@ function iqAuth(options) {
       }
       if (path === `${mount}/refresh`) {
         const refreshToken = body.refreshToken || readCookieFromHeader(cookieHeader, refreshCookie);
-        return honoResponse(await handleRefresh(helperConfig, { refreshToken }));
+        const idempotencyToken = c.req.header("x-iqauth-idempotency") || body.idempotencyToken;
+        return honoResponse(await handleRefresh(helperConfig, { refreshToken, idempotencyToken }));
       }
       if (path === `${mount}/signout`) {
         const auth2 = c.req.header("authorization");
         const accessToken = auth2 && auth2.replace(/^Bearer /i, "") || readCookieFromHeader(cookieHeader, accessCookie);
-        return honoResponse(await handleSignout(helperConfig, { accessToken, ssoCookieHeader: cookieHeader }));
+        const refreshToken = readCookieFromHeader(cookieHeader, refreshCookie);
+        const idempotencyToken = c.req.header("x-iqauth-idempotency");
+        return honoResponse(await handleSignout(helperConfig, { accessToken, refreshToken, idempotencyToken, ssoCookieHeader: cookieHeader }));
       }
     }
     if (isPublic(path)) return next();