@loka-sms/sso 1.1.6 → 1.1.7

package/dist/oauthRedirect.js

@@ -11,14 +11,52 @@ function getCookie(name) {
     const match = document.cookie.match(new RegExp(`(^| )${escaped}=([^;]+)`));
     return match ? decodeURIComponent(match[2]) : '';
 }
+function decodeJwt(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3)
+            return null;
+        return JSON.parse(atob(parts[1]));
+    }
+    catch {
+        return null;
+    }
+}
+function isTokenExpired(token) {
+    const payload = decodeJwt(token);
+    if (!payload?.exp)
+        return false;
+    return payload.exp * 1000 <= Date.now();
+}
+function hasCompleteAuth() {
+    return hasSsoToken();
+}
 function hasSsoToken() {
-    return Boolean(getCookie('sms_ac_token') || localStorage.getItem('sms_ac_token'));
+    const token = getCookie('sms_ac_token') || localStorage.getItem('sms_ac_token');
+    if (!token)
+        return false;
+    if (isTokenExpired(token))
+        return false;
+    return true;
 }
 async function redirectToOAuthLogin({ clientId, apiBase = '/api', callbackPath = '/auth/callback', authenticatedPath = '/', }) {
-    if (hasSsoToken()) {
+    if (hasCompleteAuth()) {
         window.location.href = authenticatedPath;
         return;
     }
+    // Only clear an expired token. A valid token without a cached profile can
+    // still bootstrap the target app through /auth/me.
+    const staleToken = getCookie('sms_ac_token') || localStorage.getItem('sms_ac_token');
+    if (staleToken && isTokenExpired(staleToken)) {
+        localStorage.removeItem('sms_ac_token');
+        localStorage.removeItem('sms_refresh_token');
+        localStorage.removeItem('lms_user');
+        localStorage.removeItem('user_role');
+        localStorage.removeItem('user_id');
+        localStorage.removeItem('school_sms_id');
+        document.cookie = 'sms_ac_token=; path=/; Max-Age=0; SameSite=Lax';
+        document.cookie = 'sms_refresh_token=; path=/; Max-Age=0; SameSite=Lax';
+    }
     const state = (0, pkce_1.generateState)();
     const codeVerifier = (0, pkce_1.generateCodeVerifier)();
     const codeChallenge = await (0, pkce_1.generateCodeChallenge)(codeVerifier);

package/dist/ticket.d.ts

@@ -18,7 +18,7 @@ export interface ExchangeTicketOptions {
 }
 export interface ExchangeTicketResponse {
     accessToken: string;
-    refreshToken: string;
+    refreshToken?: string;
     user?: any;
 }
 export declare function getStoredAccessToken(): string;

package/dist/ticket.js

@@ -67,7 +67,7 @@ async function exchangeTicket(options) {
     const data = await parseJsonResponse(response);
     const accessToken = data.accessToken || data.token || data.access_token;
     const refreshToken = data.refreshToken || data.refresh_token;
-    if (!accessToken || !refreshToken)
+    if (!accessToken)
         throw new Error('Token tidak ditemukan dalam response exchange.');
     return { accessToken, refreshToken, user: data.user };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loka-sms/sso",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "description": "SSO utilities, hooks, and components for Loka SMS modules (OAuth2 PKCE, cross-app logout)",
   "license": "MIT",
   "type": "commonjs",