@jsforce/jsforce-node 3.10.8 → 3.10.10

package/lib/VERSION.d.ts

@@ -1,2 +1,2 @@
-declare const _default: "3.10.8";
+declare const _default: "3.10.10";
 export default _default;

package/lib/VERSION.js

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = '3.10.8';
+exports.default = '3.10.10';

package/lib/http-api.js

@@ -226,10 +226,22 @@ class HttpApi extends events_1.EventEmitter {
      * @protected
      */
     isSessionExpired(response) {
-        // TODO:
-        // The connected app msg only applies to Agent API requests, we should move this to a separate SFAP/Agent API class later.
-        return (response.statusCode === 401 &&
-            !response.body.includes('Connected app is not attached to Agent'));
+        // REST API status codes: https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/errorcodes.htm
+        //
+        // "401 - The session ID or OAuth token used has expired or is invalid. The response body contains the message and errorCode."
+        if (response.statusCode === 401) {
+            // Known list of 401 responses that shouldn't be considered as "session expired".
+            //
+            // These usualy come from an CA/ECA, OAuth, IP restriction change in the org that block connections, we need to skip these
+            // org jsforce will enter into an infinite loop trying to get a valid token.
+            const responsesToSkip = ['Connected app is not attached to Agent', 'This session is not valid for use with the REST API'];
+            for (const p of responsesToSkip) {
+                if (response.body.includes(p))
+                    return false;
+            }
+            return true;
+        }
+        return false;
     }
     /**
      * Detect error response

package/lib/oauth2.d.ts

@@ -24,6 +24,14 @@ export type AuthzRequestParams = {
 };
 export type TokenResponse = {
     token_type: 'Bearer';
+    /**
+     * Space-separated list of OAuth scopes associated with the access token
+     *
+     * For the OAuth 2.0 Web Server Flow, this can be a subset of the registered scopes if specified when requesting the auth code.
+     *
+     * See: https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_tokens_scopes.htm&type=5
+     */
+    scope: string;
     /**
      * Identity URL
      *

package/package.json

@@ -10,7 +10,7 @@
     "database.com"
   ],
   "homepage": "http://github.com/jsforce/jsforce",
-  "version": "3.10.8",
+  "version": "3.10.10",
   "repository": {
     "type": "git",
     "url": "git://github.com/jsforce/jsforce.git"