@nauth-toolkit/client 0.1.74 → 0.1.77

package/dist/index.cjs

@@ -827,11 +827,35 @@ var NAuthClient = class {
     const refreshFn = async () => {
       return this.post(this.config.endpoints.refresh, body, false);
     };
-    const tokens = await this.tokenManager.refreshOnce(refreshFn);
+    const tokens = await this.tokenManager.refreshOnce(refreshFn, { persist: tokenDelivery === "json" });
     this.config.onTokenRefresh?.();
     this.eventEmitter.emit({ type: "auth:refresh", data: { success: true }, timestamp: Date.now() });
     return tokens;
   }
+  // ============================================================================
+  // Local state management (no network)
+  // ============================================================================
+  /**
+   * Clear all local auth state without making any network requests.
+   *
+   * WHY:
+   * - When refresh fails with 401 (session expired), clients should immediately drop any cached
+   *   auth state (user + tokens) to prevent "sticky auth" across hard reloads.
+   * - In cookie delivery modes, httpOnly cookies can only be cleared by the backend; this method
+   *   only clears client-side state (e.g., cached user + persisted tokens in JSON mode).
+   *
+   * @param options - Optional behavior flags
+   * @returns Promise that resolves when local state is cleared
+   *
+   * @example
+   * ```typescript
+   * // Called by framework adapters/interceptors when refresh fails with 401
+   * await client.clearLocalAuthState();
+   * ```
+   */
+  async clearLocalAuthState(options) {
+    await this.clearAuthState(options?.forgetDevice ?? false);
+  }
   /**
    * Logout current session.
    *
@@ -1197,8 +1221,8 @@ var NAuthClient = class {
     this.eventEmitter.emit({ type: "oauth:started", data: { provider }, timestamp: Date.now() });
     if (hasWindow()) {
       const startPath = this.config.endpoints.socialRedirectStart.replace(":provider", provider);
-      const base = this.config.baseUrl.replace(/\/$/, "");
-      const startUrl = new URL(`${base}${startPath}`);
+      const fullUrl = this.buildUrl(startPath);
+      const startUrl = new URL(fullUrl);
       const returnTo = options?.returnTo ?? this.config.redirects?.success ?? "/";
       startUrl.searchParams.set("returnTo", returnTo);
       if (options?.action === "link") {