@makolabs/ripple 1.6.7 → 1.6.9

package/dist/funcs/user-management.remote.js

@@ -88,43 +88,58 @@ async function makeAuthRequest(endpoint, options = {}) {
             ...options.headers
         }
     });
-    const data = await response.json();
-    // Return both status and data for verification purposes
+    const text = await response.text();
+    let data;
+    try {
+        data = JSON.parse(text);
+    }
+    catch {
+        // Not JSON, treat as plain text error (e.g., "404 page not found")
+        data = { error: text, message: text };
+    }
     return {
         ok: response.ok,
         status: response.status,
-        data: JSON.parse(JSON.stringify(data))
+        data: data
     };
 }
 async function verifyApiKeyToken(apiKey) {
     try {
-        const result = await makeAuthRequest('/auth/issue', {
+        const result = await makeAuthRequest('/auth/token', {
             method: 'POST',
             headers: {
                 'X-API-Key': apiKey
             }
         });
         if (result.ok && result.data?.data?.access_token) {
-            // Parse the JWT to get scopes (or use verify endpoint)
+            const token = result.data.data.access_token;
             const verifyResult = await makeAuthRequest('/auth/verify', {
-                method: 'POST',
+                method: 'GET',
                 headers: {
-                    'Authorization': `Bearer ${result.data.data.access_token}`
+                    Authorization: `Bearer ${token}`
                 }
             });
             if (verifyResult.ok && verifyResult.data?.data) {
+                // The API returns "scope" (singular) as a space-separated string, not "scopes" array
+                const scopeString = verifyResult.data.data.scope;
+                const scopes = scopeString ? scopeString.split(' ').filter(Boolean) : [];
                 return {
                     valid: true,
-                    scopes: verifyResult.data.data.scopes || []
+                    scopes: scopes
                 };
             }
         }
+        const errorMsg = result.data?.message ||
+            result.data?.error ||
+            `API key verification failed with status ${result.status}`;
+        console.warn('[verifyApiKeyToken] Verification failed:', errorMsg);
         return {
             valid: false,
-            error: result.data?.error || `API key verification failed with status ${result.status}`
+            error: errorMsg
         };
     }
     catch (error) {
+        console.error('[verifyApiKeyToken] Exception during verification:', error);
         return {
             valid: false,
             error: error instanceof Error ? error.message : 'Unknown error during verification'
@@ -444,12 +459,12 @@ export const updateUserPermissions = command('unchecked', async (options) => {
             if (apiKeyString) {
                 try {
                     const verification = await verifyApiKeyToken(apiKeyString);
+                    console.log('[updateUserPermissions] Key verification:', verification);
                     if (verification.valid) {
-                        console.log('[updateUserPermissions] Token verification successful. Scopes:', verification.scopes);
                         // Check if the scopes match what we expect
-                        const scopesMatch = filteredPermissions.every(perm => verification.scopes?.includes(perm));
+                        const scopesMatch = filteredPermissions.every((perm) => verification.scopes?.includes(perm));
                         if (!scopesMatch) {
-                            console.warn('[updateUserPermissions] Token scopes do not match expected permissions');
+                            console.warn('[updateUserPermissions] Scopes mismatch. Expected:', filteredPermissions, 'Got:', verification.scopes);
                         }
                     }
                     else {
@@ -490,12 +505,14 @@ export const generateApiKey = command('unchecked', async (options) => {
         const userKeys = (allKeysData?.data?.data || []).filter((key) => key.status === 'active');
         let newApiKey;
         let wasRotated = false;
+        let oldApiKey;
+        let currentUser = null;
         if (userKeys.length > 0 && options.revokeOld) {
             // Use rotate endpoint (per Mako Auth API spec)
             const keyId = userKeys[0].id;
-            // Get the old API key string before rotating
-            const oldKeyData = await makeAdminRequest(`/admin/keys/${keyId}`);
-            const oldApiKey = oldKeyData?.data?.key;
+            // Get the old API key from Clerk's private_metadata
+            currentUser = await makeClerkRequest(`/users/${options.userId}`);
+            oldApiKey = currentUser?.private_metadata?.mako_api_key;
             const rotateResult = await makeAdminRequest(`/admin/keys/${keyId}/rotate`, {
                 method: 'POST',
                 body: JSON.stringify({
@@ -512,11 +529,9 @@ export const generateApiKey = command('unchecked', async (options) => {
             if (oldApiKey) {
                 try {
                     const oldKeyVerification = await verifyApiKeyToken(oldApiKey);
+                    console.log('[generateApiKey] Old key verification:', oldKeyVerification.valid ? 'Still valid ⚠️' : 'Revoked ✓');
                     if (oldKeyVerification.valid) {
-                        console.warn('[generateApiKey] Old API key is still valid after rotation');
-                    }
-                    else {
-                        console.log('[generateApiKey] Old API key successfully revoked');
+                        console.warn('[generateApiKey] Old API key still valid after rotation');
                     }
                 }
                 catch (verifyError) {
@@ -526,16 +541,16 @@ export const generateApiKey = command('unchecked', async (options) => {
             // Verify new key works with correct scopes
             try {
                 const newKeyVerification = await verifyApiKeyToken(newApiKey);
+                console.log('[generateApiKey] New key verification:', newKeyVerification);
                 if (newKeyVerification.valid) {
-                    console.log('[generateApiKey] New API key verification successful. Scopes:', newKeyVerification.scopes);
                     // Check if the scopes match what we expect
-                    const scopesMatch = filteredPermissions.every(perm => newKeyVerification.scopes?.includes(perm));
+                    const scopesMatch = filteredPermissions.every((perm) => newKeyVerification.scopes?.includes(perm));
                     if (!scopesMatch) {
-                        console.warn('[generateApiKey] New key scopes do not match expected permissions');
+                        console.warn('[generateApiKey] Scopes mismatch. Expected:', filteredPermissions, 'Got:', newKeyVerification.scopes);
                     }
                 }
                 else {
-                    console.warn('[generateApiKey] New API key verification failed:', newKeyVerification.error);
+                    console.warn('[generateApiKey] New key verification failed:', newKeyVerification.error);
                 }
             }
             catch (verifyError) {
@@ -555,16 +570,21 @@ export const generateApiKey = command('unchecked', async (options) => {
         }
         // Update Clerk profile with new key
         try {
-            const currentUser = await makeClerkRequest(`/users/${options.userId}`);
-            await makeClerkRequest(`/users/${options.userId}`, {
-                method: 'PATCH',
-                body: JSON.stringify({
-                    private_metadata: {
-                        ...(currentUser.private_metadata || {}),
-                        mako_api_key: newApiKey
-                    }
-                })
-            });
+            // Reuse currentUser if already fetched (during rotation), otherwise fetch it
+            if (!currentUser) {
+                currentUser = await makeClerkRequest(`/users/${options.userId}`);
+            }
+            if (currentUser) {
+                await makeClerkRequest(`/users/${options.userId}`, {
+                    method: 'PATCH',
+                    body: JSON.stringify({
+                        private_metadata: {
+                            ...(currentUser.private_metadata || {}),
+                            mako_api_key: newApiKey
+                        }
+                    })
+                });
+            }
         }
         catch (clerkError) {
             console.error('[generateApiKey] Failed to update Clerk profile:', clerkError);
@@ -573,9 +593,7 @@ export const generateApiKey = command('unchecked', async (options) => {
         const result = {
             success: true,
             apiKey: newApiKey,
-            message: wasRotated
-                ? 'API key rotated successfully'
-                : 'API key generated successfully'
+            message: wasRotated ? 'API key rotated successfully' : 'API key generated successfully'
         };
         return JSON.parse(JSON.stringify(result));
     }
@@ -589,24 +607,39 @@ export const verifyToken = command('unchecked', async (options) => {
         const result = await verifyApiKeyToken(options.apiKey);
         // Also return the issued token for debugging
         if (result.valid) {
-            const tokenResult = await makeAuthRequest('/auth/issue', {
-                method: 'POST',
-                headers: {
-                    'X-API-Key': options.apiKey
-                }
-            });
-            return {
-                ...result,
-                token: tokenResult.data?.data?.access_token
-            };
+            try {
+                const tokenResult = await makeAuthRequest('/auth/token', {
+                    method: 'POST',
+                    headers: {
+                        'X-API-Key': options.apiKey
+                    }
+                });
+                const finalResult = {
+                    valid: result.valid,
+                    scopes: result.scopes,
+                    token: tokenResult.data?.data?.access_token
+                };
+                // Ensure result is serializable
+                return JSON.parse(JSON.stringify(finalResult));
+            }
+            catch (tokenError) {
+                console.warn('[verifyToken] Could not fetch token:', tokenError);
+                // Return result without token
+                return JSON.parse(JSON.stringify({
+                    valid: result.valid,
+                    scopes: result.scopes
+                }));
+            }
         }
-        return result;
+        // Ensure result is serializable
+        return JSON.parse(JSON.stringify(result));
     }
     catch (error) {
         console.error('[verifyToken] Error:', error);
-        return {
+        const errorResult = {
             valid: false,
             error: error instanceof Error ? error.message : 'Unknown error during verification'
         };
+        return JSON.parse(JSON.stringify(errorResult));
     }
 });

package/dist/user-management/UserModal.svelte

@@ -31,7 +31,9 @@
 	let showApiKey = $state(false);
 	let regeneratingApiKey = $state(false);
 	let verifyingToken = $state(false);
-	let tokenVerification = $state<{ valid?: boolean; scopes?: string[]; error?: string } | null>(null);
+	let tokenVerification = $state<{ valid?: boolean; scopes?: string[]; error?: string } | null>(
+		null
+	);
 	let initialRole = $state<string>('');
 
 	// Form data
@@ -187,7 +189,7 @@
 			role: roleValue,
 			permissions: role ? [...role.permissions] : []
 		};
-		
+
 		// Clear token verification when permissions change
 		tokenVerification = null;
 	}
@@ -233,7 +235,7 @@
 
 		try {
 			verifyingToken = true;
-			formErrors.apiKey = undefined;
+			delete formErrors.apiKey;
 			const result = await adapter.verifyToken({ apiKey });
 			tokenVerification = result;
 
@@ -449,8 +451,18 @@
 						{#if tokenVerification.valid}
 							<div class="bg-success-50 border-success-200 mt-2 rounded-lg border p-3">
 								<div class="flex items-start gap-2">
-									<svg class="text-success-600 mt-0.5 h-4 w-4 shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-										<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z"></path>
+									<svg
+										class="text-success-600 mt-0.5 h-4 w-4 shrink-0"
+										fill="none"
+										stroke="currentColor"
+										viewBox="0 0 24 24"
+									>
+										<path
+											stroke-linecap="round"
+											stroke-linejoin="round"
+											stroke-width="2"
+											d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z"
+										></path>
 									</svg>
 									<div class="min-w-0 flex-1">
 										<p class="text-success-800 text-xs font-medium">Token verified successfully</p>
@@ -465,8 +477,18 @@
 						{:else}
 							<div class="bg-danger-50 border-danger-200 mt-2 rounded-lg border p-3">
 								<div class="flex items-start gap-2">
-									<svg class="text-danger-600 mt-0.5 h-4 w-4 shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-										<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 14l2-2m0 0l2-2m-2 2l-2-2m2 2l2 2m7-2a9 9 0 11-18 0 9 9 0 0118 0z"></path>
+									<svg
+										class="text-danger-600 mt-0.5 h-4 w-4 shrink-0"
+										fill="none"
+										stroke="currentColor"
+										viewBox="0 0 24 24"
+									>
+										<path
+											stroke-linecap="round"
+											stroke-linejoin="round"
+											stroke-width="2"
+											d="M10 14l2-2m0 0l2-2m-2 2l-2-2m2 2l2 2m7-2a9 9 0 11-18 0 9 9 0 0118 0z"
+										></path>
 									</svg>
 									<div class="min-w-0 flex-1">
 										<p class="text-danger-800 text-xs font-medium">Token verification failed</p>

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@makolabs/ripple",
-	"version": "1.6.7",
+	"version": "1.6.9",
 	"description": "Simple Svelte 5 powered component library ✨",
 	"license": "SEE LICENSE IN LICENSE",
 	"repository": {