@multiplatform.one/auth 7.7.2

package/dist/esm/index.native.js

@@ -0,0 +1,375 @@
+import { AsyncLocalStorage } from "async_hooks";
+import { betterAuth, matchesHostPattern } from "better-auth";
+import { APIError, createAuthEndpoint, createAuthMiddleware, getSessionFromCtx, isAPIError } from "better-auth/api";
+import { deleteSessionCookie, getAccountCookie } from "better-auth/cookies";
+import { genericOAuth, keycloak } from "better-auth/plugins";
+import { expo } from "@better-auth/expo";
+import { FAILED_TO_GET_ACCESS_TOKEN, TOKEN_REFRESH_UNAVAILABLE } from "./accessTokenRefresh.native.js";
+import { ACCESS_TOKEN_RETRY_DELAYS_MS, FAILED_TO_GET_ACCESS_TOKEN as FAILED_TO_GET_ACCESS_TOKEN2, TOKEN_REFRESH_UNAVAILABLE as TOKEN_REFRESH_UNAVAILABLE2, classifyAccessTokenResponse, retryWhileTransient, watchDocumentVisible } from "./accessTokenRefresh.native.js";
+var requestOriginStorage = new AsyncLocalStorage();
+function deriveRequestOrigin(req) {
+  var isDevHost = function isDevHost2(host) {
+    return DEV_LAN_HOST_PATTERNS.some(function (pattern) {
+      return matchesHostPattern(host, pattern);
+    });
+  };
+  var forwardedHost = req.headers.get("x-forwarded-host");
+  if (forwardedHost && isDevHost(forwardedHost)) {
+    var proto = req.headers.get("x-forwarded-proto") === "https" ? "https" : "http";
+    return `${proto}://${forwardedHost}`;
+  }
+  var originHeader = req.headers.get("origin");
+  if (originHeader) {
+    try {
+      var url = new URL(originHeader);
+      if (isDevHost(url.host)) return url.origin;
+    } catch (unused) {}
+  }
+  try {
+    return new URL(req.url).origin;
+  } catch (unused) {
+    return void 0;
+  }
+}
+var DEV_LAN_HOST_PATTERNS = ["localhost", "localhost:*", "127.0.0.1", "127.0.0.1:*", "10.*", "192.168.*", "172.*", "*.local", "*.local:*"];
+function createKeycloakSsoPlugin(options) {
+  var {
+    realm,
+    clientId,
+    clientSecret,
+    issuer,
+    baseUrl,
+    publicKeycloakBaseFor
+  } = options;
+  var tokenEndpoint = `${issuer}/protocol/openid-connect/token`;
+  var resolveVisitorOrigin = function resolveVisitorOrigin2(request) {
+    var _requestOriginStorage_getStore;
+    return (_requestOriginStorage_getStore = requestOriginStorage.getStore()) !== null && _requestOriginStorage_getStore !== void 0 ? _requestOriginStorage_getStore : request ? deriveRequestOrigin(request) : void 0;
+  };
+  var isRefreshDefinitivelyDead = async function isRefreshDefinitivelyDead2(refreshToken) {
+    try {
+      var res = await fetch(tokenEndpoint, {
+        method: "POST",
+        headers: {
+          "content-type": "application/x-www-form-urlencoded"
+        },
+        body: new URLSearchParams({
+          grant_type: "refresh_token",
+          refresh_token: refreshToken,
+          client_id: clientId,
+          client_secret: clientSecret
+        }),
+        signal: AbortSignal.timeout(5e3)
+      });
+      if (res.ok) return false;
+      if (res.status !== 400 && res.status !== 401) return false;
+      var body = await res.json().catch(function () {
+        return null;
+      });
+      return (body === null || body === void 0 ? void 0 : body.error) === "invalid_grant" || (body === null || body === void 0 ? void 0 : body.error) === "invalid_token";
+    } catch (unused) {
+      return false;
+    }
+  };
+  var signOutSso = createAuthEndpoint("/sign-out/sso", {
+    method: "GET"
+  }, async function (ctx) {
+    var _resolveVisitorOrigin, _ref;
+    var visitorOrigin = (_resolveVisitorOrigin = resolveVisitorOrigin(ctx.request)) !== null && _resolveVisitorOrigin !== void 0 ? _resolveVisitorOrigin : baseUrl;
+    var searchParams = ctx.request ? new URL(ctx.request.url).searchParams : void 0;
+    var rawCallback = (_ref = searchParams === null || searchParams === void 0 ? void 0 : searchParams.get("callbackURL")) !== null && _ref !== void 0 ? _ref : null;
+    var jsonMode = (searchParams === null || searchParams === void 0 ? void 0 : searchParams.get("mode")) === "json";
+    var answer = function answer2(url, redirect) {
+      if (jsonMode) return ctx.json({
+        redirect,
+        url
+      });
+      throw ctx.redirect(url);
+    };
+    var callbackURL = rawCallback || "/";
+    var postLogoutRedirect = callbackURL.startsWith("/") ? `${visitorOrigin}${callbackURL}` : callbackURL;
+    var idTokenHint;
+    var sessionToken = await ctx.getSignedCookie(ctx.context.authCookies.sessionToken.name, ctx.context.secret);
+    var session = await getSessionFromCtx(ctx).catch(function () {
+      return null;
+    });
+    if (session) {
+      var _ref1;
+      var _accounts_find;
+      var accounts = await ctx.context.internalAdapter.findAccounts(session.user.id).catch(function () {
+        return [];
+      });
+      idTokenHint = (_ref1 = (_accounts_find = accounts.find(function (account) {
+        return account.providerId === "keycloak";
+      })) === null || _accounts_find === void 0 ? void 0 : _accounts_find.idToken) !== null && _ref1 !== void 0 ? _ref1 : void 0;
+    }
+    if (!idTokenHint) {
+      var accountCookie = await getAccountCookie(ctx).catch(function () {
+        return null;
+      });
+      if ((accountCookie === null || accountCookie === void 0 ? void 0 : accountCookie.providerId) === "keycloak" && accountCookie.idToken) {
+        idTokenHint = accountCookie.idToken;
+      }
+    }
+    if (sessionToken) {
+      await ctx.context.internalAdapter.deleteSession(sessionToken).catch(function (error) {
+        ctx.context.logger.error("Failed to delete session during SSO sign-out", error);
+      });
+    }
+    deleteSessionCookie(ctx);
+    var keycloakBase = publicKeycloakBaseFor(visitorOrigin);
+    if (!keycloakBase || !session && !idTokenHint && !sessionToken) {
+      return answer(postLogoutRedirect, false);
+    }
+    var endSession = new URL(`${keycloakBase}/realms/${realm}/protocol/openid-connect/logout`);
+    endSession.searchParams.set("post_logout_redirect_uri", postLogoutRedirect);
+    endSession.searchParams.set("client_id", clientId);
+    if (idTokenHint) endSession.searchParams.set("id_token_hint", idTokenHint);
+    return answer(endSession.toString(), true);
+  });
+  return {
+    id: "keycloak-sso",
+    endpoints: {
+      signOutSso
+    },
+    hooks: {
+      after: [{
+        matcher: function matcher(ctx) {
+          return ctx.path === "/get-access-token";
+        },
+        handler: createAuthMiddleware(async function (ctx) {
+          var _ctx_body, _accounts_find;
+          var returned = ctx.context.returned;
+          if (!isAPIError(returned)) return;
+          var body = returned.body;
+          if ((body === null || body === void 0 ? void 0 : body.code) !== FAILED_TO_GET_ACCESS_TOKEN) return;
+          var providerId = (_ctx_body = ctx.body) === null || _ctx_body === void 0 ? void 0 : _ctx_body.providerId;
+          if (providerId && providerId !== "keycloak") return;
+          var session = await getSessionFromCtx(ctx).catch(function () {
+            return null;
+          });
+          if (!session) return;
+          var accounts = await ctx.context.internalAdapter.findAccounts(session.user.id).catch(function () {
+            return [];
+          });
+          var refreshToken = (_accounts_find = accounts.find(function (account) {
+            return account.providerId === "keycloak";
+          })) === null || _accounts_find === void 0 ? void 0 : _accounts_find.refreshToken;
+          if (!refreshToken) {
+            var accountCookie = await getAccountCookie(ctx).catch(function () {
+              return null;
+            });
+            if ((accountCookie === null || accountCookie === void 0 ? void 0 : accountCookie.providerId) === "keycloak") {
+              refreshToken = accountCookie.refreshToken;
+            }
+          }
+          var definitive = refreshToken ? await isRefreshDefinitivelyDead(refreshToken) : true;
+          if (!definitive) {
+            return new APIError("INTERNAL_SERVER_ERROR", {
+              message: "Keycloak token refresh temporarily unavailable",
+              code: TOKEN_REFRESH_UNAVAILABLE
+            });
+          }
+          ctx.context.logger.warn("Keycloak refresh token is dead (invalid_grant); revoking the stale Better Auth session");
+          var sessionToken = await ctx.getSignedCookie(ctx.context.authCookies.sessionToken.name, ctx.context.secret);
+          if (sessionToken) {
+            await ctx.context.internalAdapter.deleteSession(sessionToken).catch(function (error) {
+              ctx.context.logger.error("Failed to delete stale session", error);
+            });
+          }
+          deleteSessionCookie(ctx);
+          var headers = new Headers();
+          var accumulated = ctx.responseHeaders;
+          accumulated === null || accumulated === void 0 ? void 0 : accumulated.getSetCookie().forEach(function (cookie) {
+            headers.append("set-cookie", cookie);
+          });
+          return new APIError("BAD_REQUEST", {
+            message: (body === null || body === void 0 ? void 0 : body.message) || "Failed to get a valid access token",
+            code: FAILED_TO_GET_ACCESS_TOKEN
+          }, headers);
+        })
+      }]
+    }
+  };
+}
+function createAuth() {
+  var options = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+  var _options_plugins, _options_database, _options_sessionMaxAge;
+  var _options_keycloak, _options_keycloak1, _options_keycloak2, _options_keycloak3;
+  var baseUrl = options.baseUrl || process.env.BASE_URL || `http://localhost:${process.env.ONE_PORT || "3000"}`;
+  var isProduction = process.env.NODE_ENV === "production";
+  var keycloakBaseUrl = ((_options_keycloak = options.keycloak) === null || _options_keycloak === void 0 ? void 0 : _options_keycloak.baseUrl) || process.env.KEYCLOAK_BACKCHANNEL_URL || `${baseUrl}/auth`;
+  var keycloakRealm = ((_options_keycloak1 = options.keycloak) === null || _options_keycloak1 === void 0 ? void 0 : _options_keycloak1.realm) || process.env.KEYCLOAK_REALM || "master";
+  var issuer = `${keycloakBaseUrl}/realms/${keycloakRealm}`;
+  var keycloakClientId = ((_options_keycloak2 = options.keycloak) === null || _options_keycloak2 === void 0 ? void 0 : _options_keycloak2.clientId) || process.env.KEYCLOAK_CLIENT_ID || "";
+  var keycloakClientSecret = ((_options_keycloak3 = options.keycloak) === null || _options_keycloak3 === void 0 ? void 0 : _options_keycloak3.clientSecret) || process.env.KEYCLOAK_CLIENT_SECRET || "";
+  var expoPlugin = options.enableExpo !== false ? expo() : void 0;
+  var basePath = options.basePath || "/api/auth";
+  var keycloakProviderConfig = {
+    ...keycloak({
+      clientId: keycloakClientId,
+      clientSecret: keycloakClientSecret,
+      issuer
+    }),
+    // Backchannel token/userinfo: `/get-access-token` refresh keeps these
+    // when discovery fails (Keycloak restart), so we don't depend on the
+    // well-known document coming up in the same instant as the token
+    // endpoint. Browser-facing authorize/issuer stay on the public /auth
+    // proxy (getters below).
+    tokenUrl: `${issuer}/protocol/openid-connect/token`,
+    userInfoUrl: `${issuer}/protocol/openid-connect/userinfo`,
+    // Wallet (SIWE-style) users authenticate by signature and have NO email —
+    // Keycloak issues them a username = wallet address and no email claim.
+    // better-auth's genericOAuth callback hard-rejects a user with no email
+    // ("email_is_missing"), so synthesize a stable, unique placeholder from the
+    // wallet address / subject. `.wallet` is a non-routable placeholder domain;
+    // the address stays the stable identity.
+    mapProfileToUser: function mapProfileToUser(profile) {
+      var _profile_email_verified;
+      var handle = profile.preferred_username || profile.sub || profile.id || profile.name;
+      var email = profile.email || (handle ? `${handle}@wallet` : void 0);
+      return {
+        ...profile,
+        email,
+        emailVerified: (_profile_email_verified = profile.email_verified) !== null && _profile_email_verified !== void 0 ? _profile_email_verified : true,
+        name: profile.name || handle
+      };
+    }
+  };
+  var keycloakPublicPath = function () {
+    try {
+      var path = new URL(keycloakBaseUrl).pathname.replace(/\/+$/, "");
+      return path && path !== "/" ? path : void 0;
+    } catch (unused) {
+      return void 0;
+    }
+  }();
+  var publicKeycloakBaseFor = function publicKeycloakBaseFor2(requestOrigin) {
+    if (!keycloakPublicPath) return keycloakBaseUrl;
+    try {
+      var url = new URL(baseUrl);
+      if (!isProduction && requestOrigin) {
+        url.hostname = new URL(requestOrigin).hostname;
+      }
+      return `${url.origin}${keycloakPublicPath}`;
+    } catch (unused) {
+      return void 0;
+    }
+  };
+  if (!isProduction) {
+    Object.defineProperty(keycloakProviderConfig, "redirectURI", {
+      enumerable: true,
+      get() {
+        var origin = requestOriginStorage.getStore();
+        return origin ? `${origin}${basePath}/oauth2/callback/keycloak` : void 0;
+      }
+    });
+    var keycloakPublicBase = function keycloakPublicBase2() {
+      var origin = requestOriginStorage.getStore();
+      if (!origin || !keycloakPublicPath) return void 0;
+      return publicKeycloakBaseFor(origin);
+    };
+    if (keycloakPublicPath) {
+      Object.defineProperty(keycloakProviderConfig, "authorizationUrl", {
+        enumerable: true,
+        get() {
+          var base = keycloakPublicBase();
+          return base ? `${base}/realms/${keycloakRealm}/protocol/openid-connect/auth` : void 0;
+        }
+      });
+      Object.defineProperty(keycloakProviderConfig, "issuer", {
+        enumerable: true,
+        get() {
+          var base = keycloakPublicBase();
+          return base ? `${base}/realms/${keycloakRealm}` : void 0;
+        }
+      });
+    }
+  }
+  var oauthPlugin = genericOAuth({
+    config: [keycloakProviderConfig]
+  });
+  var keycloakSsoPlugin = createKeycloakSsoPlugin({
+    realm: keycloakRealm,
+    clientId: keycloakClientId,
+    clientSecret: keycloakClientSecret,
+    issuer,
+    baseUrl,
+    publicKeycloakBaseFor
+  });
+  var plugins = [...(expoPlugin ? [expoPlugin] : []), oauthPlugin, keycloakSsoPlugin, ...((_options_plugins = options.plugins) !== null && _options_plugins !== void 0 ? _options_plugins : [])];
+  var database = (_options_database = options.database) !== null && _options_database !== void 0 ? _options_database : process.env.DATABASE_URL || void 0;
+  return betterAuth({
+    basePath,
+    // Static on purpose: better-auth's dynamic `baseURL` config (allowedHosts)
+    // is not honored by the genericOAuth plugin — it pins redirect URIs at
+    // init time, which turned them relative and bounced callbacks to the
+    // Keycloak host. Dev multi-host support comes from the per-request
+    // redirectURI getter above + the LAN trustedOrigins below instead.
+    baseURL: baseUrl,
+    ...(database ? {
+      database
+    } : {}),
+    secret: options.secret || process.env.SECRET || "",
+    trustedOrigins: options.trustedOrigins || [baseUrl, keycloakBaseUrl,
+    // In dev, ONE_PORT may differ from BASE_URL; ensure the dev server origin is trusted.
+    ...(process.env.ONE_PORT && !baseUrl.includes(`:${process.env.ONE_PORT}`) ? [`http://localhost:${process.env.ONE_PORT}`] : []), "multiplatform-one://",
+    // Expo Go (dev) receives OAuth returns on the exp:// scheme — the app
+    // derives its callbackURL via Linking.createURL, which yields
+    // exp://<host>:<port>/--/ there. Never trusted in production builds.
+    // Dev also trusts private-network origins (see DEV_LAN_HOST_PATTERNS)
+    // so sign-in from a phone / the machine's LAN IP is not rejected.
+    ...(isProduction ? [] : ["exp://", ...DEV_LAN_HOST_PATTERNS.map(function (host) {
+      return `http://${host}`;
+    })])],
+    session: {
+      cookieCache: {
+        enabled: true,
+        maxAge: (_options_sessionMaxAge = options.sessionMaxAge) !== null && _options_sessionMaxAge !== void 0 ? _options_sessionMaxAge : 7 * 24 * 60 * 60,
+        strategy: "jwe",
+        refreshCache: true
+      }
+    },
+    account: {
+      storeStateStrategy: "cookie",
+      storeAccountCookie: true
+    },
+    plugins
+  });
+}
+function createAuthRouteHandler(auth) {
+  var handler = function handler2(req) {
+    var origin = deriveRequestOrigin(req);
+    return origin ? requestOriginStorage.run(origin, function () {
+      return auth.handler(req);
+    }) : auth.handler(req);
+  };
+  return {
+    GET: handler,
+    POST: handler
+  };
+}
+function createSessionHelpers(auth) {
+  async function getSession(req) {
+    return auth.api.getSession({
+      headers: req.headers
+    });
+  }
+  async function verifyAuth(req) {
+    var session = await auth.api.getSession({
+      headers: req.headers
+    });
+    if (!session) {
+      throw new Response("Unauthorized", {
+        status: 401
+      });
+    }
+    return session;
+  }
+  return {
+    verifyAuth,
+    getSession
+  };
+}
+export { ACCESS_TOKEN_RETRY_DELAYS_MS, FAILED_TO_GET_ACCESS_TOKEN2 as FAILED_TO_GET_ACCESS_TOKEN, TOKEN_REFRESH_UNAVAILABLE2 as TOKEN_REFRESH_UNAVAILABLE, classifyAccessTokenResponse, createAuth, createAuthRouteHandler, createSessionHelpers, retryWhileTransient, watchDocumentVisible };
+//# sourceMappingURL=index.native.js.map

package/dist/esm/index.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["AsyncLocalStorage","betterAuth","matchesHostPattern","APIError","createAuthEndpoint","createAuthMiddleware","getSessionFromCtx","isAPIError","deleteSessionCookie","getAccountCookie","genericOAuth","keycloak","expo","FAILED_TO_GET_ACCESS_TOKEN","TOKEN_REFRESH_UNAVAILABLE","ACCESS_TOKEN_RETRY_DELAYS_MS","FAILED_TO_GET_ACCESS_TOKEN2","TOKEN_REFRESH_UNAVAILABLE2","classifyAccessTokenResponse","retryWhileTransient","watchDocumentVisible","requestOriginStorage","deriveRequestOrigin","req","isDevHost","isDevHost2","host","DEV_LAN_HOST_PATTERNS","some","pattern","forwardedHost","headers","get","proto","originHeader","url","URL","origin","unused","createKeycloakSsoPlugin","options","realm","clientId","clientSecret","issuer","baseUrl","publicKeycloakBaseFor","tokenEndpoint","resolveVisitorOrigin","resolveVisitorOrigin2","request","_requestOriginStorage_getStore","getStore","isRefreshDefinitivelyDead","isRefreshDefinitivelyDead2","refreshToken","res","fetch","method","body","URLSearchParams","grant_type","refresh_token","client_id","client_secret","signal","AbortSignal","timeout","ok","status","json","catch","error","signOutSso","ctx","_resolveVisitorOrigin","_ref","visitorOrigin","searchParams","rawCallback","jsonMode","answer","answer2","redirect","callbackURL","postLogoutRedirect","startsWith","idTokenHint","sessionToken","getSignedCookie","context","authCookies","name","secret","session","_ref1","_accounts_find","accounts","internalAdapter","findAccounts","user","id","find","account","providerId","idToken","accountCookie","deleteSession","logger","keycloakBase","endSession","set","toString","endpoints","hooks","after","matcher","path","handler","_ctx_body","returned","code","definitive","message","warn","Headers","accumulated","responseHeaders","getSetCookie","forEach","cookie","append","createAuth","arguments","length","_options_plugins","_options_database","_options_sessionMaxAge","_options_keycloak","_options_keycloak1","_options_keycloak2","_options_keycloak3","process","env","BASE_URL","ONE_PORT","isProduction","NODE_ENV","keycloakBaseUrl","KEYCLOAK_BACKCHANNEL_URL","keycloakRealm","KEYCLOAK_REALM","keycloakClientId","KEYCLOAK_CLIENT_ID","keycloakClientSecret","KEYCLOAK_CLIENT_SECRET","expoPlugin","enableExpo","basePath","keycloakProviderConfig","tokenUrl","userInfoUrl","mapProfileToUser","profile","_profile_email_verified","handle","preferred_username","sub","email","emailVerified","email_verified","keycloakPublicPath","pathname","replace","publicKeycloakBaseFor2","requestOrigin","hostname","Object","defineProperty","enumerable","keycloakPublicBase","keycloakPublicBase2","base","oauthPlugin","config","keycloakSsoPlugin","plugins","database","DATABASE_URL","baseURL","SECRET","trustedOrigins","includes","map","cookieCache","enabled","maxAge","sessionMaxAge","strategy","refreshCache","storeStateStrategy","storeAccountCookie"],"sources":["../../src/index.ts"],"sourcesContent":[null],"mappings":"AAgBA,SAASA,iBAAA,QAAyB;AAClC,SAASC,UAAA,EAAYC,kBAAA,QAA0B;AAE/C,SAAAC,QAAA,EAAAC,kBAAA,EAAAC,oBAAA,EAAAC,iBAAA,EAAAC,UAAA;AAAA,SACEC,mBAAA,EAAAC,gBAAA;AAAA,SACAC,YAAA,EAAAC,QAAA;AAAA,SACAC,IAAA;AAAA,SACAC,0BAAA,EAAAC,yBAAA;AAAA,SACAC,4BAAA,EAAAF,0BAAA,IAAAG,2BAAA,EAAAF,yBAAA,IAAAG,0BAAA,EAAAC,2BAAA,EAAAC,mBAAA,EAAAC,oBAAA;AAAA,IAAAC,oBACK,OAAArB,iBAAA;AACP,SAASsB,oBAAAC,GAAqB;EAC9B,IAAAC,SAAS,YAAcC,WAAAC,IAAgB;IACvC,OAASC,qBAAY,CAAAC,IAAA,WAAAC,OAAA;MACrB,OAAS3B,kBAAA,CAAAwB,IAAA,EAA4BG,OAAA;IAErC;EACE;EACA,IAAAC,aAAA,GAAAP,GAAA,CAAAQ,OAAA,CAAAC,GAAA;EACA,IAAAF,aAAA,IAAAN,SAAA,CAAAM,aAAA;IACA,IAAAG,KAAA,GAAAV,GAAA,CAAAQ,OAAA,CAAAC,GAAA;IACA,UAAAC,KAAA,MAAAH,aAAA;EACA;EAAA,IAAAI,YACK,GAAAX,GAAA,CAAAQ,OAAA,CAAAC,GAAA;EAYP,IAAME,YAAA;IAWN;MACE,IAAMC,GAAA,OAAYC,GAAC,CAAAF,YACjB;MAEF,IAAMV,SAAA,CAAAW,GAAA,CAAgBT,IAAI,UAAQS,GAAI,CAAAE,MAAA;IACtC,EAAI,OAAAC,MAAA,GACF;EACA;EACF;IAEA,OAAM,IAAAF,GAAA,CAAAb,GAAA,CAAeY,GAAA,CAAI,CAAAE,MAAA;EACzB,SAAIC,MAAA;IACF,OAAI;EACF;AACA;AAAoC,IACtCX,qBAAQ,eAER,EACF,eAEA,WAAI,EACF,aAAW,EACb,QACE,WAAO,EACT,SACF,WAqDA,WAAM,CAAwB;AAC5B,SACAY,wBAAAC,OAAA;EACA;IAAAC,KAAA;IAAAC,QAAA;IAAAC,YAAA;IAAAC,MAAA;IAAAC,OAAA;IAAAC;EAAA,IAAAN,OAAA;EACA,IAAAO,aAAA,MAAAH,MAAA;EACA,IAAAI,oBAAA,YAAAC,sBAAAC,OAAA;IACA,IAAAC,8BAAA;IACA,QAAAA,8BAAA,GAAA9B,oBAAA,CAAA+B,QAAA,gBAAAD,8BAAA,cAAAA,8BAAA,GAAAD,OAAA,GAAA5B,mBAAA,CAAA4B,OAAA;EACA;EACA,IAAAG,yBAAA,kBAAAC,2BAAAC,YAAA;IACF;MAsDA,IAASC,GAAA,SAAAC,KAAA,CAAAV,aAAwB,EAAmC;QAC5DW,MAAE,QAAO;QACT3B,OAAA;UAGA;QASA;QACA4B,IAAA,MAAAC,eAAA;UACFC,UAAY,iBAAY;UACtBC,aAAQ,EAAAP,YAAA;UACRQ,SAAW,EAAArB,QAAA;UACXsB,aAAU,EAAArB;QAAgB,EACxB;QAAYsB,MACZ,EAAAC,WAAe,CAAAC,OAAA;MAAA;MACJ,IACXX,GAAA,CAAAY,EAAA,SAAe;MAAA,IAChBZ,GAAA,CAAAa,MAAA,YAAAb,GAAA,CAAAa,MAAA;MAAA,IACDV,IAAA,GAAQ,MAAAH,GAAA,CAAAc,IAAY,GAAAC,KAAY;QACjC;MACD;MACA,OAAI,CAAIZ,IAAA,SAAW,IAAAA,IAAO,KAAI,SAAW,KAAK,IAAAA,IAAO,CAAAa,KAAA,0BAAAb,IAAA,aAAAA,IAAA,uBAAAA,IAAA,CAAAa,KAAA;IACrD,SAAMlC,MAAQ;MACd,OAAO;IACT;EACE;EAAO,IACTmC,UAAA,GAAArE,kBAAA;IACFsD,MAAA;EAEA,mBAAMgB,GAAa;IACjB,IAAAC,qBAAsB,EAAAC,IAAA;IACtB,IAAAC,aAAM,IAAeF,qBAAkB,GAAI3B,oBAAiB,CAAA0B,GAAA,CAAAxB,OAAe,eAAAyB,qBAAA,cAAAA,qBAAA,GAAA9B,OAAA;IAC3E,IAAAiC,YAAM,GAAAJ,GAAc,CAAAxB,OAAA,OAAcd,GAAI,CAAAsC,GAAA,CAAAxB,OAAa,CAAAf,GAAK,EAAA2C,YAAA;IAExD,IAAAC,WAAM,GAAW,CAAAH,IAAA,GAAAE,YAAkB,KAAM,IAAM,IAAAA,YAAA,uBAAAA,YAAA,CAAA9C,GAAA,6BAAA4C,IAAA,cAAAA,IAAA;IAC/C,IAAAI,QAAM,GAAS,CAACF,YAAa,SAAsB,IAAAA,YAAA,uBAAAA,YAAA,CAAA9C,GAAA;IACjD,IAAAiD,MAAI,YAAUC,OAAWA,CAAA/C,GAAK,EAAEgD,QAAA,EAAU;MAC1C,IAAAH,QAAU,SAASN,GAAG,CAAAJ,IAAA;QACxBa,QAAA;QACAhD;MAGA;MASA,MAAIuC,GAAA,CAAAS,QAAA,CAAAhD,GAAA;IACJ;IAA+B,IAC7BiD,WAAY,GAAAL,WAAY;IAAa,IACrCM,kBAAY,GAAAD,WAAA,CAAAE,UAAA,WAAAT,aAAA,GAAAO,WAAA,KAAAA,WAAA;IACd,IAAAG,WAAA;IACA,IAAAC,YAAgB,SAAMd,GAAA,CAAAe,eAAqB,CAAEf,GAAA,CAAAgB,OAAM,CAAMC,WAAI,CAAAH,YAAA,CAAAI,IAAA,EAAAlB,GAAA,CAAAgB,OAAA,CAAAG,MAAA;IAC7D,IAAIC,OAAA,GAAS,MAAAxF,iBAAA,CAAAoE,GAAA,EAAAH,KAAA;MACX,OAAM;IAGN;IAEF,IAAAuB,OAAA;MACA,IAAKC,KAAA;MACH,IAAAC,cAAM;MAA6C,IACjDC,QAAM,SAAAvB,GAAA,CAAAgB,OAAA,CAAAQ,eAAA,CAAAC,YAAA,CAAAL,OAAA,CAAAM,IAAA,CAAAC,EAAA,EAAA9B,KAAA;QACR;MACA;MACEgB,WAAA,IAAAQ,KAAc,IAAAC,cAAc,GAAAC,QAAA,CAAAK,IAAA,WAAAC,OAAA;QAC9B,OAAAA,OAAA,CAAAC,UAAA;MACF,gBAAAR,cAAA,uBAAAA,cAAA,CAAAS,OAAA,cAAAV,KAAA,cAAAA,KAAA;IAEA;IACE,KAAAR,WAAU;MACR,IAAAmB,aAAY,SAAOjG,gBAAM,CAAAiE,GAAA,EAAAH,KAAA;QAC1B;MACH;MACA,KAAAmC,aAAoB,KAAG,QAAAA,aAAA,uBAAAA,aAAA,CAAAF,UAAA,oBAAAE,aAAA,CAAAD,OAAA;QAOvBlB,WAAM,GAAAmB,aAAe,CAAAD,OAAA;MACrB;IACE;IACF,IAAAjB,YAAA;MAEA,MAAMd,GAAA,CAAAgB,OAAa,CAAAQ,eAAW,CAAAS,aAAY,CAAAnB,YAAgB,EAAAjB,KAAA,WAAAC,KAAA;QAC1DE,GAAA,CAAAgB,OAAW,CAAAkB,MAAA,CAAApC,KAAiB,+CAA8C,EAAAA,KAAA;MAC1E;IACA;IACAhE,mBAAc,CAAAkE,GAAA;IACf,IAAAmC,YAAA,GAAA/D,qBAAA,CAAA+B,aAAA;IAED,KAAOgC,YAAA,KAAAf,OAAA,KAAAP,WAAA,KAAAC,YAAA;MACL,OAAIP,MAAA,CAAAI,kBAAA;IACJ;IAAW,IACTyB,UAAA,OAAA1E,GAAA,IAAAyE,YAAA,WAAApE,KAAA;IACFqE,UAAA,CAAAhC,YAAA,CAAAiC,GAAA,6BAAA1B,kBAAA;IACAyB,UAAO,CAAAhC,YAAA,CAAAiC,GAAA,cAAArE,QAAA;IAAA,IACL6C,WAAO,EAAAuB,UAAA,CAAAhC,YAAA,CAAAiC,GAAA,kBAAAxB,WAAA;IAAA,OACLN,MAAA,CAAA6B,UAAA,CAAAE,QAAA;EAAA;EACiC;IAE7BX,EAAA,gBAAM;IACNY,SAAA;MACAxC;IACA;IACAyC,KAAA;MACAC,KAAA,GAEA;QACAC,OAAK,WAASA,QAAA1C,GAAA;UAKd,OAAMA,GAAA,CAAA2C,IAAA,KAAY,mBAAkB;QAGpC;QAA4BC,OACzB,EAAAjH,oBAAoB,iBAAeqE,GAAA;UACtC,IAAG6C,SAAA,EAAAvB,cAAA;UACH,IAAIwB,QAAC,GAAA9C,GAAA,CAAcgB,OAAA,CAAA8B,QAAA;UACjB,KAAAjH,UAAM,CAAAiH,QAAiB;UAA4B,IACjD7D,IAAA,GAAM6D,QAAA,CAAA7D,IAAA;UAAA,IACR,CAAAA,IAAA,aAAAA,IAAA,uBAAAA,IAAA,CAAA8D,IAAA,MAAA5G,0BAAA;UACA,IAAA2F,UAAI,IAAAe,SAAe,GAAA7C,GAAA,CAAAf,IAAe,UAAY,IAAA4D,SAAA,uBAAAA,SAAA,CAAAf,UAAA;UAC5C,IAAAA,UAAA,IAAAA,UAAe,KAAc;UAAA,IAC/BV,OAAA,SAAAxF,iBAAA,CAAAoE,GAAA,EAAAH,KAAA;YACF;UACA;UACA,IAAI,CAACuB,OAAA;UAIH,IAAAG,QAAO,GAAI,MAAAvB,GAAS,CAAAgB,OAAA,CAAAQ,eAAyB,CAAAC,YAAA,CAAAL,OAAA,CAAAM,IAAA,CAAAC,EAAA,EAAA9B,KAAA;YAAA,OAC3C;UAAS;UACH,IACPhB,YAAA,IAAAyC,cAAA,GAAAC,QAAA,CAAAK,IAAA,WAAAC,OAAA;YACH,OAAAA,OAAA,CAAAC,UAAA;UAEA,QAAI,IAAQ,IAAAR,cAAO,uBAAAA,cAAA,CAAAzC,YAAA;UAAA,IACjB,CAAAA,YAAA;YACF,IAAAmD,aAAA,SAAAjG,gBAAA,CAAAiE,GAAA,EAAAH,KAAA;cACA,OAAM;YACJ;YACA,IAAI,CAAAmC,aAAQ,aAAAA,aAAA,uBAAAA,aAAA,CAAAF,UAAA;cACdjD,YAAA,GAAAmD,aAAA,CAAAnD,YAAA;YACA;UACE;UAGI,IAAAmE,UAAI,GAAQnE,YAAa,SAAAF,yBAAkC,CAAAE,YAAK;UAAA,IACjE,CAAAmE,UAAA;YACL,WAAAvH,QAAA;cACAwH,OAAA,kDAAuB;cAKvBF,IAAM,EAAA3G;YACN;UACA;UACE4D,GAAA,CAAAgB,OAAQ,CAAAkB,MAAO,CAAAgB,IAAA,yFAAoB;UACrC,IAACpC,YAAA,SAAAd,GAAA,CAAAe,eAAA,CAAAf,GAAA,CAAAgB,OAAA,CAAAC,WAAA,CAAAH,YAAA,CAAAI,IAAA,EAAAlB,GAAA,CAAAgB,OAAA,CAAAG,MAAA;UACD,IAAAL,YAAW;YACT,MAAAd,GAAA,CAAAgB,OAAA,CAAAQ,eAAA,CAAAS,aAAA,CAAAnB,YAAA,EAAAjB,KAAA,WAAAC,KAAA;cACAE,GAAA,CAAAgB,OAAA,CAAAkB,MAAA,CAAApC,KAAA,mCAAAA,KAAA;YAAA,EACE;UAA0B;UACpBhE,mBACR,CAAAkE,GAAA;UAAA,IACA3C,OAAA,OAAA8F,OAAA;UACF,IAAAC,WAAA,GAAApD,GAAA,CAAAqD,eAAA;UACDD,WAAA,aAAAA,WAAA,uBAAAA,WAAA,CAAAE,YAAA,GAAAC,OAAA,WAAAC,MAAA;YACHnG,OAAA,CAAAoG,MAAA,eAAAD,MAAA;UACF;UACF,WAAA/H,QAAA;YACFwH,OAAA,GAAAhE,IAAA,aAAAA,IAAA,uBAAAA,IAAA,CAAAgE,OAAA;YACFF,IAAA,EAAA5G;UAMgB,GAAAkB,OAAW;QACnB;MAEA;IAMN;EACA;AAEA;AACA,SAAMqG,WAAA;EAGN,IAAA5F,OAAM,GAAA6F,SAAa,CAAAC,MAAQ,QAAAD,SAAe,GAAQ,KAAK,KAAI,IAAAA,SAAA;EAE3D,IAAAE,gBAAiB,EAAAC,iBAAoB,EAAAC,sBAAA;EAErC,IAAAC,iBAAM,EAAAC,kBAAyB,EAAAC,kBAAA,EAAAC,kBAAA;EAAA,IAC7BhG,OAAG,GAASL,OAAA,CAAAK,OAAA,IAAAiG,OAAA,CAAAC,GAAA,CAAAC,QAAA,wBAAAF,OAAA,CAAAC,GAAA,CAAAE,QAAA;EAAA,IACVC,YAAU,GAAAJ,OAAA,CAAAC,GAAA,CAAAI,QAAA;EAAA,IACVC,eAAc,KAAAV,iBAAA,GAAAlG,OAAA,CAAA7B,QAAA,cAAA+H,iBAAA,uBAAAA,iBAAA,CAAA7F,OAAA,KAAAiG,OAAA,CAAAC,GAAA,CAAAM,wBAAA,OAAAxG,OAAA;EAAA,IACdyG,aAAA,KAAAX,kBAAA,GAAAnG,OAAA,CAAA7B,QAAA,cAAAgI,kBAAA,uBAAAA,kBAAA,CAAAlG,KAAA,KAAAqG,OAAA,CAAAC,GAAA,CAAAQ,cAAA;EAAA,IACD3G,MAAA,MAAAwG,eAAA,WAAAE,aAAA;EAAA,IAAAE,gBAAA,KAAAZ,kBAAA,GAAApG,OAAA,CAAA7B,QAAA,cAAAiI,kBAAA,uBAAAA,kBAAA,CAAAlG,QAAA,KAAAoG,OAAA,CAAAC,GAAA,CAAAU,kBAAA;EAAA,IAAAC,oBAAA,KAAAb,kBAAA,GAAArG,OAAA,CAAA7B,QAAA,cAAAkI,kBAAA,uBAAAA,kBAAA,CAAAlG,YAAA,KAAAmG,OAAA,CAAAC,GAAA,CAAAY,sBAAA;EAAA,IAAAC,UAAA,GAAApH,OAAA,CAAAqH,UAAA,aAAAjJ,IAAA;EAAA,IAAAkJ,QAAA,GAAAtH,OAAA,CAAAsH,QAAA;EAAA,IAAAC,sBAAA;IAMD,GAAApJ,QAAU;MACV+B,QAAA,EAAA8G,gBAAsB;MAAA7G,YAAA,EAAA+G,oBAAA;MAAA9G;IAAA;IAAA;IAAA;IAAA;IAOtB;IACE;IACAoH,QAAM,KAAApH,MAAQ,gCAA8B;IAC5CqH,WAAO,KAAArH,MAAA;IAAA;IACF;IACH;IACyC;IACnB;IAE1B;IACFsH,gBAAA,WAAAA,iBAAAC,OAAA;MAGA,IAAMC,uBAAsB;MAC1B,IAAIC,MAAA,GAAAF,OAAA,CAAAG,kBAAA,IAAAH,OAAA,CAAAI,GAAA,IAAAJ,OAAA,CAAA9D,EAAA,IAAA8D,OAAA,CAAAvE,IAAA;MACF,IAAA4E,KAAM,GAAAL,OAAW,CAAAK,KAAI,KAAAH,MAAe,GAAE,GAAAA,MAAS,SAAQ,QAAU;MACjE,OAAO;QACT,GAAAF,OAAQ;QACNK,KAAO;QACTC,aAAA,GAAAL,uBAAA,GAAAD,OAAA,CAAAO,cAAA,cAAAN,uBAAA,cAAAA,uBAAA;QACCxE,IAAA,EAAAuE,OAAA,CAAAvE,IAAA,IAAAyE;MASH;IACE;EACA;EACE,IAAAM,kBAAgB,GAAI,YAAO;IAC3B;MACE,IAAAtD,IAAI,OAAAjF,GAAW,CAAAgH,eAAQ,EAAAwB,QAAe,CAAAC,OAAA;MACxC,OAAAxD,IAAA,IAAAA,IAAA,WAAAA,IAAA;IACA,SAAO/E,MAAG,EAAI;MAChB,OAAQ;IACN;EAAO,EACT;EACF,IAAAQ,qBAAA,YAAAgI,uBAAAC,aAAA;IAEA,IAAK,CAAAJ,kBAAc,SAAAvB,eAAA;IAQjB;MACE,IAAAjH,GAAA,OAAYC,GAAA,CAAAS,OAAA;MACZ,KAAAqG,YAAM,IAAA6B,aAAA;QACJ5I,GAAA,CAAA6I,QAAM,GAAS,IAAA5I,GAAA,CAAA2I,aAAqB,EAAAC,QAAS;MAC7C;MACF,UAAA7I,GAAA,CAAAE,MAAA,GAAAsI,kBAAA;IACF,CAAC,QAAArI,MAAA;MAsBD,OAAM;IACJ;EACA;EACA,KAAA4G,YAAO;IACT+B,MAAA,CAAAC,cAAA,CAAAnB,sBAAA;MACAoB,UAAI;MACFnJ,IAAA;QACE,IAAAK,MAAA,GAAYhB,oBAAA,CAAA+B,QAAA;QACZ,OAAMf,MAAA,MAAAA,MAAA,GAAAyH,QAAA;MACJ;IACA;IAA+E,IACjFsB,kBAAA,YAAAC,oBAAA;MACF,IAAChJ,MAAA,GAAAhB,oBAAA,CAAA+B,QAAA;MAQD,KAAAf,MAAO,KAAAsI,kBAAe,cAAwB;MAAU,OACtD7H,qBAAY,CAAAT,MAAA;IAAA;IAEV,IAAAsI,kBAAa;MACbM,MAAA,CAAAC,cAAiB,CAAAnB,sBAAe,oBAAkB;QACpDoB,UAAA;QACDnJ,IAAA;UACH,IAAAsJ,IAAA,GAAAF,kBAAA;UACF,OAAAE,IAAA,MAAAA,IAAA,WAAAhC,aAAA;QAIM;MACJ;MACD2B,MAAA,CAAAC,cAAA,CAAAnB,sBAAA;QAEKoB,UAAA;QACJnJ,GAAOA,CAAA;UACP,IAAUsJ,IAAA,GAAAF,kBAAA;UACV,OAAAE,IAAc,MAAAA,IAAA,WAAAhC,aAAA;QACd;MACA;IACA;EACF;EAEA,IAAAiC,WAAM,GAAiB7K,YAAA;IACrB8K,MAAI,GACJzB,sBAAA;EACA,EACA;EACF,IAAA0B,iBAAA,GAAAlJ,uBAAA;IAIAE,KAAM,EAAA6G,aAAW;IAEjB5G,QAAO,EAAA8G,gBAAW;IAChB7G,YAAA,EAAA+G,oBAAA;IAAA9G,MAAA;IAAAC,OAAA;IAAAC;EAAA;EAAA,IAAA4I,OAAA,IAMA,IAAA9B,UAAS,IACTA,UAAI,CACJ,QACA2B,WAAA,EAA0CE,iBACxC,MACA,CAAAlD,gBAAA,GAAA/F,OAAA,CAAAkJ,OAAA,cAAAnD,gBAAA,cAAAA,gBAAA;EAAA,IAEAoD,QAAI,GAAQ,CAAAnD,iBAAiB,GAAAhG,OAAQ,CAAAmJ,QAAS,MAAI,IAAQ,IAAInD,iBACzD,cAAAA,iBAAgC,GAAAM,OAAU,CAAAC,GAC1C,CAAA6C,YAAA;EAAA,OACL3L,UAAA;IAAA6J,QAAA;IAAA;IAAA;IAAA;IAAA;IAAA;IAOF+B,OAAA,EAAAhJ,OAAA;IACA,IAAA8I,QAAS;MACPA;IAAa,IACX;IAAS9F,MACT,EAAArD,OAAQ,CAAAqD,MAAQ,IAAAiD,OAAA,CAAAC,GAAiB,CAAA+C,MAAI,IAAK;IAAKC,cACrC,EAAAvJ,OAAA,CAAAuJ,cAAA,KAAAlJ,OACV,EACFuG,eAAA;IACF;IACA,IAAAN,OAAS,CAAAC,GAAA,CAAAE,QAAA,KAAApG,OAAA,CAAAmJ,QAAA,KAAAlD,OAAA,CAAAC,GAAA,CAAAE,QAAA,OACP,oBAAoBH,OAAA,CAAAC,GAAA,CAAAE,QAAA,GACpB,QACF;IACA;IACD;IACH;IAmBO;IAKL;IACE,IAAAC,YAAe,SACf,QAAO,EACT,GAAAvH,qBAAA,CAAAsK,GAAA,WAAAvK,IAAA;MACO,OAAO,UAASA,IAAM;IAC/B,GASO,EAEL;IACEoE,OAAO;MACToG,WAAA;QAGAC,OAAA,EAAe;QACbC,MAAM,GAAA3D,sBAAyB,GAAAjG,OAAa,CAAA6J,aAAa,MAAQ,IAAC,IAAA5D,sBAAA,cAAAA,sBAAA;QAC9D6D,QAAC,EAAS;QACZC,YAAU;MACZ;IACA;IACFhG,OAAA;MAEAiG,kBAAqB,UAAW;MAClCC,kBAAA","ignoreList":[]}

package/dist/jsx/accessTokenRefresh.mjs

@@ -0,0 +1,40 @@
+const FAILED_TO_GET_ACCESS_TOKEN = "FAILED_TO_GET_ACCESS_TOKEN";
+const TOKEN_REFRESH_UNAVAILABLE = "TOKEN_REFRESH_UNAVAILABLE";
+const ACCESS_TOKEN_RETRY_DELAYS_MS = [0, 400, 1e3];
+function classifyAccessTokenResponse(status, body) {
+  if (status === 401 || status === 403) return "signed-out";
+  if (status === 400 && body?.code === FAILED_TO_GET_ACCESS_TOKEN) return "signed-out";
+  return "transient";
+}
+async function retryWhileTransient(attempt, opts) {
+  const delays = opts?.delaysMs ?? ACCESS_TOKEN_RETRY_DELAYS_MS;
+  const sleep = opts?.sleep ?? (ms => new Promise(resolve => setTimeout(resolve, ms)));
+  let last = {
+    ok: false,
+    kind: "transient"
+  };
+  for (let i = 0; i < delays.length; i++) {
+    const wait = delays[i];
+    if (wait) await sleep(wait);
+    last = await attempt();
+    if (last.ok) return last;
+    if (last.kind === "signed-out") return last;
+  }
+  return last;
+}
+function watchDocumentVisible(revalidate) {
+  if (typeof document === "undefined" || typeof window === "undefined") {
+    return () => {};
+  }
+  const onVisible = () => {
+    if (document.visibilityState === "visible") revalidate();
+  };
+  document.addEventListener("visibilitychange", onVisible);
+  window.addEventListener("focus", onVisible);
+  return () => {
+    document.removeEventListener("visibilitychange", onVisible);
+    window.removeEventListener("focus", onVisible);
+  };
+}
+export { ACCESS_TOKEN_RETRY_DELAYS_MS, FAILED_TO_GET_ACCESS_TOKEN, TOKEN_REFRESH_UNAVAILABLE, classifyAccessTokenResponse, retryWhileTransient, watchDocumentVisible };
+//# sourceMappingURL=accessTokenRefresh.mjs.map

package/dist/jsx/accessTokenRefresh.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":["FAILED_TO_GET_ACCESS_TOKEN","TOKEN_REFRESH_UNAVAILABLE","ACCESS_TOKEN_RETRY_DELAYS_MS","classifyAccessTokenResponse","status","body","code","retryWhileTransient","attempt","opts","delays","delaysMs","sleep","ms","Promise","resolve","setTimeout","last","ok","kind","i","length","wait","watchDocumentVisible","revalidate","document","window","onVisible","visibilityState","addEventListener","removeEventListener"],"sources":["../../src/accessTokenRefresh.ts"],"sourcesContent":[null],"mappings":"AAeO,MAAMA,0BAAA,GAA6B;AACnC,MAAMC,yBAAA,GAA4B;AAKlC,MAAMC,4BAAA,GAA+B,CAAC,GAAG,KAAK,GAAI;AAElD,SAASC,4BACdC,MAAA,EACAC,IAAA,EACwB;EACxB,IAAID,MAAA,KAAW,OAAOA,MAAA,KAAW,KAAK,OAAO;EAC7C,IAAIA,MAAA,KAAW,OAAOC,IAAA,EAAMC,IAAA,KAASN,0BAAA,EAA4B,OAAO;EACxE,OAAO;AACT;AAWA,eAAsBO,oBACpBC,OAAA,EACAC,IAAA,EAIgC;EAChC,MAAMC,MAAA,GAASD,IAAA,EAAME,QAAA,IAAYT,4BAAA;EACjC,MAAMU,KAAA,GAAQH,IAAA,EAAMG,KAAA,KAAWC,EAAA,IAAe,IAAIC,OAAA,CAASC,OAAA,IAAYC,UAAA,CAAWD,OAAA,EAASF,EAAE,CAAC;EAC9F,IAAII,IAAA,GAA8B;IAAEC,EAAA,EAAI;IAAOC,IAAA,EAAM;EAAY;EACjE,SAASC,CAAA,GAAI,GAAGA,CAAA,GAAIV,MAAA,CAAOW,MAAA,EAAQD,CAAA,IAAK;IACtC,MAAME,IAAA,GAAOZ,MAAA,CAAOU,CAAC;IACrB,IAAIE,IAAA,EAAM,MAAMV,KAAA,CAAMU,IAAI;IAC1BL,IAAA,GAAO,MAAMT,OAAA,CAAQ;IACrB,IAAIS,IAAA,CAAKC,EAAA,EAAI,OAAOD,IAAA;IACpB,IAAIA,IAAA,CAAKE,IAAA,KAAS,cAAc,OAAOF,IAAA;EACzC;EACA,OAAOA,IAAA;AACT;AAOO,SAASM,qBAAqBC,UAAA,EAAoC;EACvE,IAAI,OAAOC,QAAA,KAAa,eAAe,OAAOC,MAAA,KAAW,aAAa;IACpE,OAAO,MAAM,CAAC;EAChB;EACA,MAAMC,SAAA,GAAYA,CAAA,KAAM;IACtB,IAAIF,QAAA,CAASG,eAAA,KAAoB,WAAWJ,UAAA,CAAW;EACzD;EACAC,QAAA,CAASI,gBAAA,CAAiB,oBAAoBF,SAAS;EACvDD,MAAA,CAAOG,gBAAA,CAAiB,SAASF,SAAS;EAC1C,OAAO,MAAM;IACXF,QAAA,CAASK,mBAAA,CAAoB,oBAAoBH,SAAS;IAC1DD,MAAA,CAAOI,mBAAA,CAAoB,SAASH,SAAS;EAC/C;AACF","ignoreList":[]}

package/dist/jsx/accessTokenRefresh.native.js

@@ -0,0 +1,78 @@
+"use strict";
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all) __defProp(target, name, {
+    get: all[name],
+    enumerable: true
+  });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var accessTokenRefresh_exports = {};
+__export(accessTokenRefresh_exports, {
+  ACCESS_TOKEN_RETRY_DELAYS_MS: () => ACCESS_TOKEN_RETRY_DELAYS_MS,
+  FAILED_TO_GET_ACCESS_TOKEN: () => FAILED_TO_GET_ACCESS_TOKEN,
+  TOKEN_REFRESH_UNAVAILABLE: () => TOKEN_REFRESH_UNAVAILABLE,
+  classifyAccessTokenResponse: () => classifyAccessTokenResponse,
+  retryWhileTransient: () => retryWhileTransient,
+  watchDocumentVisible: () => watchDocumentVisible
+});
+module.exports = __toCommonJS(accessTokenRefresh_exports);
+var FAILED_TO_GET_ACCESS_TOKEN = "FAILED_TO_GET_ACCESS_TOKEN";
+var TOKEN_REFRESH_UNAVAILABLE = "TOKEN_REFRESH_UNAVAILABLE";
+var ACCESS_TOKEN_RETRY_DELAYS_MS = [0, 400, 1e3];
+function classifyAccessTokenResponse(status, body) {
+  if (status === 401 || status === 403) return "signed-out";
+  if (status === 400 && (body === null || body === void 0 ? void 0 : body.code) === FAILED_TO_GET_ACCESS_TOKEN) return "signed-out";
+  return "transient";
+}
+async function retryWhileTransient(attempt, opts) {
+  var _ref, _ref1;
+  var delays = (_ref = opts === null || opts === void 0 ? void 0 : opts.delaysMs) !== null && _ref !== void 0 ? _ref : ACCESS_TOKEN_RETRY_DELAYS_MS;
+  var sleep = (_ref1 = opts === null || opts === void 0 ? void 0 : opts.sleep) !== null && _ref1 !== void 0 ? _ref1 : function (ms) {
+    return new Promise(function (resolve) {
+      return setTimeout(resolve, ms);
+    });
+  };
+  var last = {
+    ok: false,
+    kind: "transient"
+  };
+  for (var i = 0; i < delays.length; i++) {
+    var wait = delays[i];
+    if (wait) await sleep(wait);
+    last = await attempt();
+    if (last.ok) return last;
+    if (last.kind === "signed-out") return last;
+  }
+  return last;
+}
+function watchDocumentVisible(revalidate) {
+  if (typeof document === "undefined" || typeof window === "undefined") {
+    return function () {};
+  }
+  var onVisible = function onVisible2() {
+    if (document.visibilityState === "visible") revalidate();
+  };
+  document.addEventListener("visibilitychange", onVisible);
+  window.addEventListener("focus", onVisible);
+  return function () {
+    document.removeEventListener("visibilitychange", onVisible);
+    window.removeEventListener("focus", onVisible);
+  };
+}
+//# sourceMappingURL=accessTokenRefresh.native.js.map

package/dist/jsx/accessTokenRefresh.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["__defProp","Object","defineProperty","__getOwnPropDesc","getOwnPropertyDescriptor","__getOwnPropNames","getOwnPropertyNames","__hasOwnProp","prototype","hasOwnProperty","__export","target","all","name","get","enumerable","__copyProps","to","from","except","desc","key","call","__toCommonJS","mod","value","accessTokenRefresh_exports","ACCESS_TOKEN_RETRY_DELAYS_MS","FAILED_TO_GET_ACCESS_TOKEN","TOKEN_REFRESH_UNAVAILABLE","classifyAccessTokenResponse","retryWhileTransient","watchDocumentVisible","module","exports","status","body"],"sources":["../../src/accessTokenRefresh.ts"],"sourcesContent":[null],"mappings":"AAeO,YAAM;;AACN,IAAAA,SAAM,GAAAC,MAAA,CAAAC,cAA4B;AAKlC,IAAAC,gBAAM,GAAAF,MAAA,CAAAG,wBAA4C;AAElD,IAAAC,iBAAS,GAAAJ,MAAA,CAAAK,mBAEd;AAEA,IAAAC,YAAI,GAAWN,MAAO,CAAAO,SAAW,CAAAC,cAAY;AAC7C,IAAAC,QAAI,GAAAA,CAAAC,MAAW,EAAOC,GAAA,KAAM;EAC5B,SAAOC,IAAA,IAAAD,GAAA,EACTZ,SAAA,CAAAW,MAAA,EAAAE,IAAA;IAAAC,GAAA,EAAAF,GAAA,CAAAC,IAAA;IAAAE,UAAA;EAAA;AAWA;AAOE,IAAAC,WAAM,GAASA,CAAAC,EAAA,EAAMC,IAAA,EAAAC,MAAY,EAAAC,IAAA;EACjC,IAAAF,IAAM,WAAQA,IAAM,aAAW,IAAe,OAAIA,IAAS,eAAY;IACvE,KAAI,IAA8BG,GAAE,IAAIhB,iBAAa,CAAAa,IAAA,GACrD,KAASX,YAAW,CAAAe,IAAA,CAAOL,EAAA,EAAAI,GAAA,CAAQ,IAAAA,GAAK,KAAAF,MAAA,EACtCnB,SAAa,CAAAiB,EAAA,EAAAI,GAAQ;MAAAP,GAAA,EAAAA,CAAA,KAAAI,IAAA,CAAAG,GAAA;MAAAN,UAAA,IAAAK,IAAA,GAAAjB,gBAAA,CAAAe,IAAA,EAAAG,GAAA,MAAAD,IAAA,CAAAL;IAAA;EACrB;EACA,OAAAE,EAAO;AACP;AACA,IAAAM,YAAS,GAAAC,GAAS,IAAAR,WAAc,CAAAhB,SAAO;EAAAyB,KAAA;AAAA,IAAAD,GAAA;AAAA,IACzCE,0BAAA;AACAhB,QAAA,CAAOgB,0BAAA;EACTC,4BAAA,EAAAA,CAAA,KAAAA,4BAAA;EAOOC,0BAAS,EAAqBA,CAAA,KAAAA,0BAAoC;EACvEC,yBAAwB,EAAAA,CAAA,KAAAA,yBAAiC;EACvDC,2BAAa,EAAAA,CAAA,KAAAA,2BAAA;EAAAC,mBAAC,EAAAA,CAAA,KAAAA,mBAAA;EAChBC,oBAAA,EAAAA,CAAA,KAAAA;AACA;AACEC,MAAA,CAAAC,OAAI,GAASX,YAAA,CAAAG,0BAA+B;AAAW,IACzDE,0BAAA;AACA,IAAAC,yBAA0B,8BAA6B;AACvD,IAAAF,4BAAwB,GAAS,CACjC,GACE,KACA,IAA6C;AAEjD,SAAAG,4BAAAK,MAAA,EAAAC,IAAA","ignoreList":[]}