@mcp-abap-adt/auth-broker 0.2.7 → 0.2.9

package/CHANGELOG.md

@@ -11,6 +11,31 @@ Thank you to all contributors! See [CONTRIBUTORS.md](CONTRIBUTORS.md) for the co
 
 ## [Unreleased]
 
+## [0.2.9] - 2025-12-21
+
+### Added
+- **`createTokenRefresher()` Method**: New factory method to create `ITokenRefresher` for dependency injection
+  - Returns `ITokenRefresher` implementation for a specific destination
+  - `getToken()` - returns cached token if valid, otherwise refreshes
+  - `refreshToken()` - forces token refresh and saves to session store
+  - Designed to be injected into `JwtAbapConnection` via DI
+  - Enables connections to handle 401/403 transparently without knowing auth internals
+
+### Changed
+- **Dependencies**: Updated `@mcp-abap-adt/interfaces` to `^0.2.5`
+  - New `ITokenRefresher` interface for token management DI
+  - Simplified `IAbapConnection` interface (consumer-facing methods only)
+
+### Exports
+- Re-export `ITokenRefresher` type from `@mcp-abap-adt/interfaces` for convenience
+
+## [0.2.8] - 2025-12-21
+
+### Changed
+- **Dependencies**: Updated `@mcp-abap-adt/auth-stores` to `^0.2.8`
+  - EnvFileSessionStore now persists JWT tokens back to .env file after token refresh
+  - Removed duplicate BTP stores (now aliases to XSUAA equivalents)
+
 ## [0.2.7] - 2025-12-21
 
 ### Added

package/README.md

@@ -110,6 +110,38 @@ const token = await broker.getToken('TRIAL');
 const newToken = await broker.refreshToken('TRIAL');
 ```
 
+### Creating Token Refresher for DI
+
+The `createTokenRefresher()` method creates an `ITokenRefresher` implementation that can be injected into connections. This enables connections to handle token refresh transparently without knowing about authentication internals.
+
+```typescript
+import { AuthBroker } from '@mcp-abap-adt/auth-broker';
+import { JwtAbapConnection } from '@mcp-abap-adt/connection';
+
+// Create broker
+const broker = new AuthBroker({
+  sessionStore: mySessionStore,
+  serviceKeyStore: myServiceKeyStore,
+  tokenProvider: myTokenProvider,
+});
+
+// Create token refresher for specific destination
+const tokenRefresher = broker.createTokenRefresher('TRIAL');
+
+// Inject into connection (connection can handle 401/403 automatically)
+const connection = new JwtAbapConnection(config, tokenRefresher);
+
+// Token refresher methods:
+// - getToken(): Returns cached token if valid, otherwise refreshes
+// - refreshToken(): Forces token refresh and saves to session store
+```
+
+**Benefits of Token Refresher:**
+- 🔄 **Transparent Refresh**: Connection handles 401/403 errors automatically
+- 🧩 **Dependency Injection**: Clean separation of concerns
+- 💾 **Automatic Persistence**: Tokens saved to session store after refresh
+- 🎯 **Destination-Scoped**: Each refresher is bound to specific destination
+
 ## Configuration
 
 ### Environment Variables

package/dist/AuthBroker.d.ts

@@ -1,7 +1,7 @@
 /**
  * Main AuthBroker class for managing JWT tokens based on destinations
  */
-import { ILogger } from '@mcp-abap-adt/interfaces';
+import { ILogger, ITokenRefresher } from '@mcp-abap-adt/interfaces';
 import { IServiceKeyStore, ISessionStore, IAuthorizationConfig, IConnectionConfig } from './stores/interfaces';
 import { ITokenProvider } from './providers';
 /**
@@ -104,5 +104,23 @@ export declare class AuthBroker {
      * @returns Promise that resolves to IConnectionConfig or null if not found
      */
     getConnectionConfig(destination: string): Promise<IConnectionConfig | null>;
+    /**
+     * Create a token refresher for a specific destination.
+     *
+     * The token refresher is designed to be injected into JwtAbapConnection via DI,
+     * allowing the connection to handle token refresh transparently without knowing
+     * about authentication internals.
+     *
+     * **Usage:**
+     * ```typescript
+     * const broker = new AuthBroker(config);
+     * const tokenRefresher = broker.createTokenRefresher('TRIAL');
+     * const connection = new JwtAbapConnection(config, tokenRefresher);
+     * ```
+     *
+     * @param destination Destination name (e.g., "TRIAL")
+     * @returns ITokenRefresher implementation for the given destination
+     */
+    createTokenRefresher(destination: string): ITokenRefresher;
 }
 //# sourceMappingURL=AuthBroker.d.ts.map

package/dist/AuthBroker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthBroker.d.ts","sourceRoot":"","sources":["../src/AuthBroker.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAA8C,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/G,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAa7C;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,YAAY,EAAE,aAAa,CAAC;IAC5B,uEAAuE;IACvE,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,4IAA4I;IAC5I,aAAa,EAAE,cAAc,CAAC;IAC9B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,aAAa,CAAiB;IACtC,OAAO,CAAC,gBAAgB,CAAU;IAElC;;;;;;;;;;;OAWG;gBAED,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,OAAO;IAuElB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;IACG,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgYpD;;;;;OAKG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOxD;;;;OAIG;IACG,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IA4CvF;;;;OAIG;IACG,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;CA0ClF"}
+{"version":3,"file":"AuthBroker.d.ts","sourceRoot":"","sources":["../src/AuthBroker.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAA8C,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChH,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/G,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAa7C;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,YAAY,EAAE,aAAa,CAAC;IAC5B,uEAAuE;IACvE,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,4IAA4I;IAC5I,aAAa,EAAE,cAAc,CAAC;IAC9B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,aAAa,CAAiB;IACtC,OAAO,CAAC,gBAAgB,CAAU;IAElC;;;;;;;;;;;OAWG;gBAED,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,OAAO;IAuElB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;IACG,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgYpD;;;;;OAKG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOxD;;;;OAIG;IACG,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IA4CvF;;;;OAIG;IACG,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IA0CjF;;;;;;;;;;;;;;;;OAgBG;IACH,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe;CAsB3D"}

package/dist/AuthBroker.js

@@ -608,5 +608,41 @@ class AuthBroker {
         this.logger?.debug(`No connection config found for ${destination}`);
         return null;
     }
+    /**
+     * Create a token refresher for a specific destination.
+     *
+     * The token refresher is designed to be injected into JwtAbapConnection via DI,
+     * allowing the connection to handle token refresh transparently without knowing
+     * about authentication internals.
+     *
+     * **Usage:**
+     * ```typescript
+     * const broker = new AuthBroker(config);
+     * const tokenRefresher = broker.createTokenRefresher('TRIAL');
+     * const connection = new JwtAbapConnection(config, tokenRefresher);
+     * ```
+     *
+     * @param destination Destination name (e.g., "TRIAL")
+     * @returns ITokenRefresher implementation for the given destination
+     */
+    createTokenRefresher(destination) {
+        const broker = this;
+        return {
+            /**
+             * Get current valid token.
+             * Returns cached token if valid, otherwise refreshes and returns new token.
+             */
+            async getToken() {
+                return broker.getToken(destination);
+            },
+            /**
+             * Force refresh token and save to session store.
+             * Always performs refresh, ignoring cached token validity.
+             */
+            async refreshToken() {
+                return broker.refreshToken(destination);
+            }
+        };
+    }
 }
 exports.AuthBroker = AuthBroker;

package/dist/index.d.ts

@@ -6,6 +6,7 @@ export { AuthBroker, type AuthBrokerConfig } from './AuthBroker';
 export type { IAuthorizationConfig, IConnectionConfig, IServiceKeyStore, ISessionStore } from './stores/interfaces';
 export type { IConfig } from './types';
 export type { ITokenProvider, TokenProviderOptions, TokenProviderResult } from './providers';
+export type { ITokenRefresher } from '@mcp-abap-adt/interfaces';
 export type { ILogger } from '@mcp-abap-adt/interfaces';
 export type { AuthType } from '@mcp-abap-adt/interfaces';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGjE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpH,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE7F,YAAY,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,YAAY,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGjE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpH,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE7F,YAAY,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,YAAY,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,YAAY,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/auth-broker",
-  "version": "0.2.7",
+  "version": "0.2.9",
   "description": "JWT authentication broker for MCP ABAP ADT - manages tokens based on destination headers",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -51,17 +51,18 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@mcp-abap-adt/interfaces": "^0.2.4",
+    "@mcp-abap-adt/interfaces": "^0.2.5",
     "axios": "^1.13.2"
   },
   "devDependencies": {
-    "@mcp-abap-adt/auth-providers": "^0.2.3",
-    "@mcp-abap-adt/auth-stores": "^0.2.5",
+    "@mcp-abap-adt/auth-providers": "^0.2.4",
+    "@mcp-abap-adt/auth-stores": "^0.2.8",
     "@types/express": "^5.0.5",
     "@types/jest": "^30.0.0",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^24.2.1",
     "jest": "^30.2.0",
+    "jest-util": "^30.2.0",
     "js-yaml": "^4.1.1",
     "ts-jest": "^29.2.5",
     "tsx": "^4.21.0",