@kawaiininja/fetch 1.0.7 → 1.0.8

package/dist/hooks/useFetch.d.ts

@@ -1,5 +1,10 @@
 import { BaseFetchOptions } from "./types";
 import { ApiSurface } from "./utils";
+/**
+ * 🔥 SECURITY UPGRADE: Clear Vault
+ * Call this on logout to ensure tokens are purged from memory.
+ */
+export declare const clearNativeAuthVault: () => void;
 /**
  * useFetch Hook
  *

package/dist/hooks/useFetch.js

@@ -5,6 +5,26 @@ import { isNative } from "./platform";
 import { useApiConfig } from "./useApiConfig";
 import { useCsrf } from "./useCsrf";
 import { createApiSurface } from "./utils";
+/**
+ * 🛡️ SESSION MEMORY VAULT
+ * Caches native tokens in memory for the lifetime of the JS process.
+ * This avoids expensive SecureStorage calls on every request.
+ */
+const nativeAuthVault = {
+    token: undefined,
+    sessionId: undefined,
+    loaded: false,
+};
+/**
+ * 🔥 SECURITY UPGRADE: Clear Vault
+ * Call this on logout to ensure tokens are purged from memory.
+ */
+export const clearNativeAuthVault = () => {
+    nativeAuthVault.loaded = false;
+    nativeAuthVault.token = undefined;
+    nativeAuthVault.sessionId = undefined;
+    console.log("[useFetch] [Native] Auth vault cleared.");
+};
 /**
  * useFetch Hook
  *
@@ -48,29 +68,35 @@ export const useFetch = (endpoint, baseOptions = {}) => {
         // 🔒 SECURITY STRATEGY: NATIVE (MOBILE)
         if (_isNative && isInternal) {
             // Mobile relies on manual headers ("Active Courier")
-            // 🛡️ S-RANK UPGRADE: Use Secure Storage (Async) instead of LocalStorage
+            // 🛡️ S-RANK UPGRADE: Use Session Memory Vault (In-Memory Singleton)
             console.log(`[useFetch] [Native] Strategy: Active Courier for ${url}`);
-            let authToken = null;
-            let sessionId = null;
-            try {
-                const { value: secureAuthToken } = await SecureStoragePlugin.get({
-                    key: "token",
-                });
-                const { value: secureSessionId } = await SecureStoragePlugin.get({
-                    key: "session_id",
-                });
-                authToken = secureAuthToken;
-                sessionId = secureSessionId;
-                if (authToken)
-                    console.log("[useFetch] [Native] Token retrieved from SecureStorage.");
-            }
-            catch (err) {
-                console.warn("[useFetch] [Native] SecureStorage failed or not present, trying localStorage:", err);
-                authToken = localStorage.getItem("token");
-                sessionId = localStorage.getItem("session_id");
-                if (authToken)
-                    console.log("[useFetch] [Native] Token retrieved from localStorage fallback.");
+            if (!nativeAuthVault.loaded) {
+                try {
+                    const { value: t } = await SecureStoragePlugin.get({ key: "token" });
+                    const { value: s } = await SecureStoragePlugin.get({
+                        key: "session_id",
+                    });
+                    nativeAuthVault.token = t || undefined;
+                    nativeAuthVault.sessionId = s || undefined;
+                    // Fallback to localStorage if SecureStorage is empty
+                    if (!nativeAuthVault.token) {
+                        nativeAuthVault.token = localStorage.getItem("token") || undefined;
+                        nativeAuthVault.sessionId =
+                            localStorage.getItem("session_id") || undefined;
+                    }
+                    nativeAuthVault.loaded = true;
+                    console.log("[useFetch] [Native] Auth vault initialized.");
+                }
+                catch (err) {
+                    console.warn("[useFetch] [Native] SecureStorage failed, falling back to localStorage:", err);
+                    nativeAuthVault.token = localStorage.getItem("token") || undefined;
+                    nativeAuthVault.sessionId =
+                        localStorage.getItem("session_id") || undefined;
+                    nativeAuthVault.loaded = true;
+                }
             }
+            const authToken = nativeAuthVault.token;
+            const sessionId = nativeAuthVault.sessionId;
             if (authToken)
                 headersConfig["Authorization"] = `Bearer ${authToken}`;
             if (sessionId)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@kawaiininja/fetch",
-    "version": "1.0.7",
+    "version": "1.0.8",
     "description": "Core fetch utility for Onyx Framework",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",