@mitumba/sdk 1.11.0 → 1.12.0

package/dist/index.mjs

@@ -1,3 +1,82 @@
+// src/token-store.ts
+var MemoryTokenStore = class {
+  accessToken = null;
+  refreshToken = null;
+  async getAccessToken() {
+    return this.accessToken;
+  }
+  async getRefreshToken() {
+    return this.refreshToken;
+  }
+  async setTokens(access, refresh) {
+    this.accessToken = access;
+    this.refreshToken = refresh;
+  }
+  async clear() {
+    this.accessToken = null;
+    this.refreshToken = null;
+  }
+};
+var DB_NAME = "mitumba_sdk";
+var STORE_NAME = "tokens";
+var KEY = "auth";
+var IDBTokenStore = class {
+  dbPromise = null;
+  openDB() {
+    if (this.dbPromise) return this.dbPromise;
+    this.dbPromise = new Promise((resolve, reject) => {
+      const request = indexedDB.open(DB_NAME, 1);
+      request.onupgradeneeded = () => {
+        request.result.createObjectStore(STORE_NAME);
+      };
+      request.onsuccess = () => resolve(request.result);
+      request.onerror = () => reject(request.error);
+    });
+    return this.dbPromise;
+  }
+  async get() {
+    const db = await this.openDB();
+    return new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE_NAME, "readonly");
+      const req = tx.objectStore(STORE_NAME).get(KEY);
+      req.onsuccess = () => resolve(req.result || null);
+      req.onerror = () => reject(req.error);
+    });
+  }
+  async getAccessToken() {
+    const data = await this.get();
+    return data?.access ?? null;
+  }
+  async getRefreshToken() {
+    const data = await this.get();
+    return data?.refresh ?? null;
+  }
+  async setTokens(access, refresh) {
+    const db = await this.openDB();
+    return new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE_NAME, "readwrite");
+      const req = tx.objectStore(STORE_NAME).put({ access, refresh }, KEY);
+      req.onsuccess = () => resolve();
+      req.onerror = () => reject(req.error);
+    });
+  }
+  async clear() {
+    const db = await this.openDB();
+    return new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE_NAME, "readwrite");
+      const req = tx.objectStore(STORE_NAME).delete(KEY);
+      req.onsuccess = () => resolve();
+      req.onerror = () => reject(req.error);
+    });
+  }
+};
+function createTokenStore() {
+  if (typeof indexedDB !== "undefined") {
+    return new IDBTokenStore();
+  }
+  return new MemoryTokenStore();
+}
+
 // src/client.ts
 var APIError = class extends Error {
   code;
@@ -11,18 +90,33 @@ var APIError = class extends Error {
     this.details = data.details;
   }
 };
+function isExpiringSoon(token, thresholdSeconds) {
+  try {
+    const payload = JSON.parse(atob(token.split(".")[1]));
+    const exp = payload.exp;
+    return exp - Date.now() / 1e3 < thresholdSeconds;
+  } catch {
+    return false;
+  }
+}
 var APIClient = class {
   config;
+  tokenStore;
   isRefreshing = false;
   refreshPromise = null;
   constructor(config) {
     this.config = config;
+    this.tokenStore = config.tokenStore ?? createTokenStore();
+    if (config.token) {
+      this.tokenStore.setTokens(config.token, config.refreshToken ?? "");
+    }
   }
-  setToken(token, refreshToken) {
+  async setToken(token, refreshToken) {
     this.config.token = token;
     if (refreshToken) {
       this.config.refreshToken = refreshToken;
     }
+    await this.tokenStore.setTokens(token, refreshToken ?? this.config.refreshToken ?? "");
   }
   getToken() {
     return this.config.token;
@@ -30,11 +124,44 @@ var APIClient = class {
   getBaseUrl() {
     return this.config.baseUrl;
   }
-  clearToken() {
+  async clearToken() {
     this.config.token = void 0;
     this.config.refreshToken = void 0;
+    await this.tokenStore.clear();
+  }
+  /**
+   * Check if user has a stored session (access or refresh token available).
+   */
+  async isAuthenticated() {
+    const access = this.config.token ?? await this.tokenStore.getAccessToken();
+    if (access) return true;
+    const refresh = await this.tokenStore.getRefreshToken();
+    return !!refresh;
+  }
+  /**
+   * Hydrate tokens from the store into memory (call on app boot).
+   */
+  async hydrate() {
+    const access = await this.tokenStore.getAccessToken();
+    const refresh = await this.tokenStore.getRefreshToken();
+    if (access) this.config.token = access;
+    if (refresh) this.config.refreshToken = refresh;
+  }
+  async ensureFreshToken() {
+    if (!this.config.token) {
+      const stored = await this.tokenStore.getAccessToken();
+      if (stored) this.config.token = stored;
+      const refresh = await this.tokenStore.getRefreshToken();
+      if (refresh) this.config.refreshToken = refresh;
+    }
+    if (this.config.token && isExpiringSoon(this.config.token, 60) && this.config.refreshToken) {
+      await this.handleTokenRefresh();
+    }
   }
   async request(method, path, body, params, options) {
+    if (!path.includes("/auth/refresh") && !path.includes("/auth/login") && !path.includes("/auth/register")) {
+      await this.ensureFreshToken();
+    }
     const url = new URL(path, this.config.baseUrl);
     if (params) {
       for (const [key, value] of Object.entries(params)) {
@@ -94,9 +221,16 @@ var APIClient = class {
       break;
     }
     if (response.status === 401 && this.config.refreshToken && !path.includes("/auth/refresh")) {
-      await this.handleTokenRefresh();
-      headers.set("Authorization", `Bearer ${this.config.token}`);
-      response = await fetch(url.toString(), { ...init, headers });
+      try {
+        await this.handleTokenRefresh();
+        headers.set("Authorization", `Bearer ${this.config.token}`);
+        response = await fetch(url.toString(), { ...init, headers });
+      } catch {
+        if (this.config.onAuthExpired) {
+          this.config.onAuthExpired();
+        }
+        throw new APIError(401, { error: "session_expired", message: "Session expired. Please log in again." });
+      }
     }
     if (!response.ok) {
       let errorData;
@@ -129,13 +263,15 @@ var APIClient = class {
           throw new Error("Refresh failed");
         }
         const data = await response.json();
-        this.setToken(data.access_token, data.refresh_token);
+        this.config.token = data.access_token;
+        this.config.refreshToken = data.refresh_token;
+        await this.tokenStore.setTokens(data.access_token, data.refresh_token);
         if (this.config.onTokenRefresh) {
           this.config.onTokenRefresh({ token: data.access_token, refreshToken: data.refresh_token });
         }
       } catch (err) {
-        this.clearToken();
-        throw new APIError(401, { error: "token_expired", message: "Session expired. Please log in again." });
+        await this.clearToken();
+        throw err;
       } finally {
         this.isRefreshing = false;
         this.refreshPromise = null;
@@ -1006,8 +1142,20 @@ var MitumbaClient = class {
   clearToken() {
     this.api.clearToken();
   }
+  /**
+   * Hydrate tokens from persistent store (call on app boot).
+   */
+  hydrate() {
+    return this.api.hydrate();
+  }
+  /**
+   * Check if user has a stored session.
+   */
+  isAuthenticated() {
+    return this.api.isAuthenticated();
+  }
 };
 
-export { APIClient, APIError, AuthModule, BusinessesModule, CONDITIONS, CartModule, LISTING_STATUSES, ListingsModule, MailerModule, MessagesModule, MitumbaClient, NotificationsModule, ORDER_STATUSES, OrdersModule, PAYMENT_STATUSES, PayModule, ReviewsModule, SearchModule, SettingsModule, StoresModule, VaziModule, WishlistsModule };
+export { APIClient, APIError, AuthModule, BusinessesModule, CONDITIONS, CartModule, IDBTokenStore, LISTING_STATUSES, ListingsModule, MailerModule, MemoryTokenStore, MessagesModule, MitumbaClient, NotificationsModule, ORDER_STATUSES, OrdersModule, PAYMENT_STATUSES, PayModule, ReviewsModule, SearchModule, SettingsModule, StoresModule, VaziModule, WishlistsModule, createTokenStore };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map