@metaboliccode-dev/widget 0.2.86 → 0.2.88

package/README.md

@@ -37,6 +37,35 @@ npm install @metaboliccode-dev/widget
 
 ## Component usage
 
+New integrations obtain dashboard tokens on their server using OAuth credentials
+registered for their tenant and environment:
+
+```ts
+import { createMetabolicOAuthClient } from "@metaboliccode-dev/widget/server";
+
+const oauth = createMetabolicOAuthClient({
+  baseUrl: process.env.METABOLIC_CODE_BACKEND_BASE_URL!,
+  clientId: process.env.METABOLIC_CODE_OAUTH_CLIENT_ID!,
+  clientSecret: process.env.METABOLIC_CODE_OAUTH_CLIENT_SECRET!,
+});
+
+// Validate the host user session and authorize these selectors before delegation.
+const { accessToken, expiresIn } = await oauth.getDelegatedToken({
+  sub: authorizedUserId,
+  role: "patient",
+  patient_id: authorizedPatientId,
+  report_id: authorizedReportId,
+  scope: "reports:read patient:read",
+});
+```
+
+Pass only the delegated token to the dashboard. Client secrets and service tokens
+must stay on the server. The helper caches service tokens and renews them before
+expiry; delegated tokens expire after 300 seconds. Hosts request a fresh delegated
+token when opening or renewing a dashboard session. OAuth failures never fall back
+to legacy signing. Existing HS256 dashboard tokens and embed integrations remain
+supported during migration.
+
 ```tsx
 import { MetabolicDashboard } from "@metaboliccode-dev/widget";
 import "@metaboliccode-dev/widget/styles.css";

package/dist/MetabolicDashboard/dashboardTab/DashboardTabContentCacheContext.d.ts

@@ -11,8 +11,9 @@ export type DashboardTabContentCacheContextValue = {
 };
 export declare function useDashboardTabContentCache(): DashboardTabContentCacheContextValue | null;
 export declare function useInvalidateDashboardTabContentCache(): () => void;
-export declare function DashboardTabContentCacheProvider({ children, fetchers, ttlMs, }: {
+export declare function DashboardTabContentCacheProvider({ children, fetchers, ttlMs, cacheKey, }: {
     children: ReactNode;
     fetchers: DashboardContentFetchers;
     ttlMs: number;
+    cacheKey?: string;
 }): import("react/jsx-runtime").JSX.Element;

package/dist/MetabolicDashboard/metabolicDashboard/MetabolicDashboardShell.d.ts

@@ -4,6 +4,7 @@ export type MetabolicDashboardShellProps = {
     wrapTabContentCache: boolean;
     fetchers: DashboardContentFetchers;
     cacheTtlMs: number;
+    cacheKey: string;
     viewProps: MetabolicDashboardViewProps;
 };
-export declare function MetabolicDashboardShell({ wrapTabContentCache, fetchers, cacheTtlMs, viewProps, }: MetabolicDashboardShellProps): import("react/jsx-runtime").JSX.Element;
+export declare function MetabolicDashboardShell({ wrapTabContentCache, fetchers, cacheTtlMs, cacheKey, viewProps, }: MetabolicDashboardShellProps): import("react/jsx-runtime").JSX.Element;

package/dist/entry-server.d.ts

@@ -0,0 +1,58 @@
+export interface MetabolicOAuthClientOptions {
+    baseUrl: string;
+    clientId: string;
+    clientSecret: string;
+    fetch?: typeof globalThis.fetch;
+}
+export interface MetabolicAccessToken {
+    accessToken: string;
+    expiresIn: number;
+    expiresAt: number;
+    scope: string;
+}
+export interface MetabolicDelegatedIdentity {
+    sub: string;
+    role: string;
+    scope: string;
+    name?: string;
+    patient_id?: string;
+    report_id?: string;
+    questionnaire_response_id?: string;
+    white_label_domain?: string;
+    firebase_project_id?: string;
+    actor?: {
+        uid: string;
+        email?: string;
+        emailVerified?: boolean;
+        role?: string;
+        impersonatedBy?: {
+            uid: string;
+            email?: string;
+            role?: string;
+        };
+    };
+}
+export interface MetabolicEmbedLaunch {
+    subject: string;
+    role: string;
+    origin: string;
+    scope: string;
+    name?: string;
+    patient_id?: string;
+    report_id?: string;
+    questionnaire_response_id?: string;
+}
+export declare class MetabolicOAuthError extends Error {
+    readonly status: number;
+    readonly operation: string;
+    constructor(status: number, operation: string);
+}
+/** Server-only client. Never put its credentials or service tokens in browser props. */
+export declare function createMetabolicOAuthClient(options: MetabolicOAuthClientOptions): {
+    getAccessToken: (scopes: readonly string[]) => Promise<MetabolicAccessToken>;
+    getDelegatedToken: (identity: MetabolicDelegatedIdentity) => Promise<MetabolicAccessToken>;
+    createEmbedLaunch: (identity: MetabolicEmbedLaunch) => Promise<{
+        embedToken: string;
+        expiresIn: number;
+    }>;
+};

package/dist/entry-server.test.d.ts

@@ -0,0 +1 @@
+export {};