@neetru/sdk 3.1.13 → 3.1.14

package/dist/auth.cjs

@@ -755,6 +755,7 @@ function isInsecureBypassActive() {
 
 // src/types.ts
 var DEFAULT_BASE_URL = "https://api.neetru.com";
+var DEV_LOCAL_BASE_URL = "http://localhost:9003";
 
 // src/catalog.ts
 init_errors();
@@ -6089,7 +6090,7 @@ function resolveEnv(configEnv) {
   try {
     const proc = globalThis.process;
     const val = proc?.env?.NEETRU_ENV;
-    if (val === "dev" || val === "workspace" || val === "prod") return val;
+    if (val === "dev" || val === "workspace" || val === "prod" || val === "dev-local") return val;
   } catch {
   }
   try {
@@ -6175,9 +6176,11 @@ function cleanCallbackUrl(parsed) {
 }
 function createOidcAuthNamespace(config) {
   const STORAGE_KEY = "neetru_id_token";
+  const REFRESH_STORAGE_KEY = "neetru_refresh_token";
   const listeners = /* @__PURE__ */ new Set();
   let cachedUser = null;
   let _expiryTimerId = null;
+  let _refreshInFlight = null;
   function getStorage() {
     try {
       return typeof globalThis.localStorage !== "undefined" ? globalThis.localStorage : null;
@@ -6230,6 +6233,7 @@ function createOidcAuthNamespace(config) {
         const storage2 = getStorage();
         storage2?.removeItem(STORAGE_KEY);
         notify();
+        attemptSilentRefresh();
         return null;
       }
       return cachedUser;
@@ -6237,14 +6241,18 @@ function createOidcAuthNamespace(config) {
     const storage = getStorage();
     if (!storage) return null;
     const token = storage.getItem(STORAGE_KEY);
-    if (!token) return null;
+    if (!token) {
+      attemptSilentRefresh();
+      return null;
+    }
     const user = tokenToUser(token);
     if (!user) {
       storage.removeItem(STORAGE_KEY);
+      attemptSilentRefresh();
       return null;
     }
     cachedUser = user;
-    scheduleExpiryTimer(user);
+    scheduleTokenRefresh(user);
     return cachedUser;
   }
   function notify() {
@@ -6261,12 +6269,93 @@ function createOidcAuthNamespace(config) {
       _expiryTimerId = null;
     }
   }
-  function scheduleExpiryTimer(user) {
+  function getRefreshToken() {
+    return getStorage()?.getItem(REFRESH_STORAGE_KEY) ?? null;
+  }
+  function clearSession() {
+    cachedUser = null;
+    const storage = getStorage();
+    storage?.removeItem(STORAGE_KEY);
+    storage?.removeItem(REFRESH_STORAGE_KEY);
+    notify();
+  }
+  function refreshTokens() {
+    if (_refreshInFlight) return _refreshInFlight;
+    _refreshInFlight = (async () => {
+      const refreshToken = getRefreshToken();
+      if (!refreshToken) return false;
+      let clientId;
+      try {
+        clientId = resolveClientId();
+      } catch {
+        return false;
+      }
+      const idpOrigin = resolveIdpOrigin(config.baseUrl);
+      const tokenUrl = `${idpOrigin}/api/v1/oauth/token`;
+      const form = new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: refreshToken,
+        client_id: clientId
+      });
+      let res;
+      try {
+        res = await config.fetch(tokenUrl, {
+          method: "POST",
+          headers: { "content-type": "application/x-www-form-urlencoded" },
+          body: form.toString()
+        });
+      } catch {
+        return false;
+      }
+      let payload = null;
+      try {
+        payload = await res.json();
+      } catch {
+        payload = null;
+      }
+      if (!res.ok || typeof payload?.error === "string") return false;
+      const idToken = payload?.id_token;
+      if (typeof idToken !== "string" || idToken.length === 0) return false;
+      const user = tokenToUser(idToken);
+      if (!user) return false;
+      const storage = getStorage();
+      storage?.setItem(STORAGE_KEY, idToken);
+      const rotated = payload?.refresh_token;
+      if (typeof rotated === "string" && rotated.length > 0) {
+        storage?.setItem(REFRESH_STORAGE_KEY, rotated);
+      }
+      cachedUser = user;
+      scheduleTokenRefresh(user);
+      notify();
+      return true;
+    })().finally(() => {
+      _refreshInFlight = null;
+    });
+    return _refreshInFlight;
+  }
+  function attemptSilentRefresh() {
+    if (!getRefreshToken()) return;
+    void refreshTokens().then((ok) => {
+      if (!ok) clearSession();
+    });
+  }
+  function scheduleTokenRefresh(user) {
     cancelExpiryTimer();
     const exp = user.exp;
     if (typeof exp !== "number") return;
     const msUntilExpiry = exp * 1e3 - Date.now();
     if (msUntilExpiry <= 0) return;
+    if (getRefreshToken()) {
+      const lead = Math.min(msUntilExpiry, Math.max(3e4, msUntilExpiry * 0.2));
+      const delay = Math.max(1, msUntilExpiry - lead);
+      _expiryTimerId = setTimeout(() => {
+        _expiryTimerId = null;
+        void refreshTokens().then((ok) => {
+          if (!ok) clearSession();
+        });
+      }, delay);
+      return;
+    }
     _expiryTimerId = setTimeout(() => {
       _expiryTimerId = null;
       loadCachedUser();
@@ -6408,9 +6497,14 @@ function createOidcAuthNamespace(config) {
         "id_token retornado pelo /token n\xE3o tem `sub` ou j\xE1 est\xE1 expirado."
       );
     }
-    getStorage()?.setItem(STORAGE_KEY, idToken);
+    const storage = getStorage();
+    storage?.setItem(STORAGE_KEY, idToken);
+    const refreshToken = payload?.refresh_token;
+    if (typeof refreshToken === "string" && refreshToken.length > 0) {
+      storage?.setItem(REFRESH_STORAGE_KEY, refreshToken);
+    }
     cachedUser = user;
-    scheduleExpiryTimer(user);
+    scheduleTokenRefresh(user);
     notify();
     return { user, postLoginRedirect: tx.postLoginRedirect };
   }
@@ -6469,7 +6563,10 @@ function createOidcAuthNamespace(config) {
     async signOut() {
       const storage = getStorage();
       const storedToken = storage?.getItem(STORAGE_KEY) ?? null;
-      if (storage) storage.removeItem(STORAGE_KEY);
+      if (storage) {
+        storage.removeItem(STORAGE_KEY);
+        storage.removeItem(REFRESH_STORAGE_KEY);
+      }
       cancelExpiryTimer();
       cachedUser = null;
       const overrideAuthUrl = typeof globalThis.NEETRU_AUTH_URL === "string" ? globalThis.NEETRU_AUTH_URL : null;
@@ -6573,10 +6670,10 @@ function createNeetruClient(config = {}) {
       "fetch is not available in this runtime. Pass `fetch` explicitly to createNeetruClient."
     );
   }
-  const rawBaseUrl = config.baseUrl ?? DEFAULT_BASE_URL;
-  const baseUrl = validateBaseUrl(rawBaseUrl, config.allowedHosts ?? []);
   const apiKey = config.apiKey ?? readEnvApiKey();
   const env = resolveEnv(config.env);
+  const rawBaseUrl = config.baseUrl ?? (env === "dev-local" ? DEV_LOCAL_BASE_URL : DEFAULT_BASE_URL);
+  const baseUrl = validateBaseUrl(rawBaseUrl, config.allowedHosts ?? []);
   const resolved = Object.freeze({
     apiKey,
     oidcClientId: config.oidcClientId,