@isomorph.ai/app-sdk 1.5.2 → 1.5.3

package/README.md

@@ -88,3 +88,10 @@ the host mints a fresh identity cookie from its sign-in session and redirects
 to the identity GET. When that refresh does not end in a 200 with the user —
 the session is gone, the network failed — the original 401 is surfaced
 without a resend, and the page's sign-in handling takes over.
+
+On a separate API host the identity GET itself (`identity.current()`, and the
+background refresh every 60 s that drives `identity.onChange`) is renewed the
+same way: its refresh ends at the identity GET, so that answer is the identity
+and no second GET is sent. When the refresh fails, `identity.current()`
+answers `null` and listeners hear `null`, as before. On the page's own origin
+the identity GET is never renewed (it is the renewal). (1.5.3)

package/dist/index.d.ts

@@ -250,7 +250,7 @@ interface Query {
 }
 interface IdentityRenewal {
     renewals(): number;
-    renew(sentAt: number): Promise<void | boolean>;
+    renew(sentAt: number): Promise<void | false | IsomorphUser>;
 }
 declare class Transport {
     private readonly onUnauthorized?;

package/dist/index.js

@@ -133,9 +133,11 @@ const CONTEXT_REFRESH_PATH = `/__harbour/context/refresh?return_to=${encodeURICo
 // database: the handler never ran, so the retry is the first and only write.
 // The body is a JSON string, FormData or Blob — all replayable as-is.
 //
-// The identity GET itself is never renewed (it IS the renewal), and under Node
-// the runner's identity is a static token no GET can renew, so a refusal there
-// surfaces at once.
+// The identity GET itself is never renewed on the page-relative path (it IS
+// the renewal), and under Node the runner's identity is a static token no GET
+// can renew, so a refusal there surfaces at once. On a separate API host the
+// renewal is the context refresh instead, so the identity GET is renewed too
+// (Transport.json, ADR 0027).
 function renewableOnUnauthorized(path) {
     if (typeof location === 'undefined')
         return false;
@@ -163,7 +165,7 @@ class Transport {
         this.identity = options.identity;
     }
     json(path, init = {}) {
-        return this.request(path, init, renewableOnUnauthorized(path));
+        return this.request(path, init, renewableOnUnauthorized(path) || (this.separateApiHost && path === IDENTITY_PATH));
     }
     async request(path, init, renewOnUnauthorized) {
         const sentAt = this.renewal?.renewals() ?? 0;
@@ -184,6 +186,10 @@ class Transport {
                     // exception is an API-host refresh that failed: the original 401
                     // surfaces, and the page's shim takes over with its login hop.
                     const renewed = await this.renewal.renew(sentAt).catch(() => undefined);
+                    // The API host's refresh is followed to the identity GET, so its
+                    // answer IS the identity: the GET is not sent a second time.
+                    if (renewed && path === IDENTITY_PATH)
+                        return renewed;
                     if (renewed !== false)
                         return this.request(path, init, false);
                 }
@@ -356,7 +362,10 @@ export function createClient(options = {}) {
         refreshesStarted += 1;
         refreshInFlight = transport.json(IDENTITY_PATH)
             .then((user) => {
-            notifyIdentity(user, true);
+            // A user answered by the API host's context refresh was announced by
+            // that refresh already (it is the same object): once is enough.
+            if (user === null || user !== currentUser)
+                notifyIdentity(user, true);
             return user;
         })
             .catch((error) => {
@@ -384,9 +393,11 @@ export function createClient(options = {}) {
     };
     // On a separate API host the same sharing rule holds, but the renewal is
     // the host's context refresh, credentialed and followed to the identity
-    // GET. It succeeds only on a 200 carrying the signed-in user; a network or
-    // CORS failure (no gateway session: governance redirects to the IdP), a
-    // non-200 or an HTML page answers false.
+    // GET. It succeeds only on a 200 carrying the signed-in user, and answers
+    // that user; a network or CORS failure (no gateway session: governance
+    // redirects to the IdP), a non-200 or an HTML page answers false. The
+    // identity GET itself is renewed this way too (ADR 0027), so the periodic
+    // refresh behind identity.onChange survives a lapsed context.
     if (transport.separateApiHost) {
         let contextRefreshes = 0;
         let contextRefreshInFlight;
@@ -402,7 +413,7 @@ export function createClient(options = {}) {
                 if (typeof user?.id !== 'string')
                     return false;
                 notifyIdentity(user, true);
-                return true;
+                return user;
             })
                 .catch(() => false)
                 .finally(() => { contextRefreshInFlight = undefined; });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isomorph.ai/app-sdk",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "type": "module",
   "repository": {
     "type": "git",