@livedesk/client 0.1.189 → 0.1.190

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/client",
-  "version": "0.1.189",
+  "version": "0.1.190",
   "description": "LiveDesk local remote client",
   "type": "module",
   "bin": {
@@ -41,10 +41,10 @@
     "ws": "^8.18.3"
   },
   "optionalDependencies": {
-    "@livedesk/fast-linux-x64": "0.1.396",
-    "@livedesk/fast-osx-arm64": "0.1.396",
-    "@livedesk/fast-osx-x64": "0.1.396",
-    "@livedesk/fast-win-x64": "0.1.396"
+    "@livedesk/fast-linux-x64": "0.1.397",
+    "@livedesk/fast-osx-arm64": "0.1.397",
+    "@livedesk/fast-osx-x64": "0.1.397",
+    "@livedesk/fast-win-x64": "0.1.397"
   },
   "publishConfig": {
     "access": "public"

package/src/runtime/client-runtime-server.js

@@ -49,7 +49,20 @@ function normalizeAccountAvatarUrl(value) {
   }
 }
 
+function readAccessTokenProfile(accessToken) {
+  const token = normalizeString(accessToken, 8192);
+  const payloadSegment = token.split('.')[1] || '';
+  if (!payloadSegment) return {};
+  try {
+    const payload = JSON.parse(Buffer.from(payloadSegment, 'base64url').toString('utf8'));
+    return payload && typeof payload === 'object' ? payload : {};
+  } catch {
+    return {};
+  }
+}
+
 function readClientAccountProfile(sessionOrUser) {
+  const tokenProfile = readAccessTokenProfile(sessionOrUser?.access_token);
   const user = sessionOrUser?.user && typeof sessionOrUser.user === 'object'
     ? sessionOrUser.user
     : sessionOrUser && typeof sessionOrUser === 'object'
@@ -58,12 +71,19 @@ function readClientAccountProfile(sessionOrUser) {
   const metadata = user.user_metadata && typeof user.user_metadata === 'object'
     ? user.user_metadata
     : {};
-  const email = normalizeString(user.email, 320);
+  const tokenMetadata = tokenProfile.user_metadata && typeof tokenProfile.user_metadata === 'object'
+    ? tokenProfile.user_metadata
+    : {};
+  const email = normalizeString(user.email || tokenProfile.email, 320);
   const name = normalizeString(
     metadata.full_name
       || metadata.name
       || metadata.preferred_username
+      || tokenMetadata.full_name
+      || tokenMetadata.name
+      || tokenMetadata.preferred_username
       || user.name
+      || tokenProfile.name
       || email
       || user.id,
     160
@@ -71,6 +91,8 @@ function readClientAccountProfile(sessionOrUser) {
   const avatarUrl = normalizeAccountAvatarUrl(
     metadata.avatar_url
       || metadata.picture
+      || tokenMetadata.avatar_url
+      || tokenMetadata.picture
       || user.avatar_url
       || user.picture
   );
@@ -79,7 +101,11 @@ function readClientAccountProfile(sessionOrUser) {
 
 function mergeClientAccountProfile(session, sourceUser) {
   const profile = readClientAccountProfile(sourceUser);
+  const existingUserMetadata = session?.user?.user_metadata && typeof session.user.user_metadata === 'object'
+    ? session.user.user_metadata
+    : {};
   const userMetadata = {
+    ...existingUserMetadata,
     ...(profile.name ? { full_name: profile.name } : {}),
     ...(profile.avatarUrl ? { avatar_url: profile.avatarUrl } : {})
   };
@@ -1275,7 +1301,11 @@ export function createClientRuntimeServer(options = {}) {
           setImmediate(() => {
             void (async () => {
               try {
-                const normalizedSession = mergeClientAccountProfile(saved.session, savedSession?.user);
+                // Older persisted sessions kept only id/email on `user`, while
+                // Supabase still carries Google name/avatar claims in the
+                // access-token payload. Recover those display-only claims
+                // locally before any best-effort network hydration.
+                const normalizedSession = mergeClientAccountProfile(saved.session, savedSession);
                 const hydratedSession = await hydrateClientAccountProfile(normalizedSession);
                 if (!writeSavedSession(hydratedSession)) throw new Error('refresh-token-required');
                 state.auth.persisted = true;