@ollaid/native-sso 2.6.0 → 2.7.1

package/dist/index.d.ts

@@ -9,7 +9,7 @@
  * } />
  * ```
  *
- * @version 2.6.0
+ * @version 2.7.0
  */
 export { NativeSSOPage } from './components/NativeSSOPage';
 export type { NativeSSOPageProps } from './components/NativeSSOPage';

package/dist/index.js

@@ -289,17 +289,18 @@ function OTPInput({
   disabled = false,
   autoFocus = true
 }) {
+  const safeLength = Number.isFinite(length) ? Math.max(1, Math.min(12, Math.trunc(length))) : 6;
   const inputRefs = useRef([]);
   const [activeIndex, setActiveIndex] = useState(0);
   useEffect(() => {
-    inputRefs.current = inputRefs.current.slice(0, length);
-  }, [length]);
+    inputRefs.current = inputRefs.current.slice(0, safeLength);
+  }, [safeLength]);
   useEffect(() => {
     if (autoFocus && inputRefs.current[0]) inputRefs.current[0].focus();
   }, [autoFocus]);
   useEffect(() => {
-    if (value.length === length && onComplete) onComplete(value);
-  }, [value, length, onComplete]);
+    if (value.length === safeLength && onComplete) onComplete(value);
+  }, [value, safeLength, onComplete]);
   const handleChange = (index, char) => {
     var _a;
     if (disabled) return;
@@ -307,8 +308,8 @@ function OTPInput({
     if (!digit) return;
     const newValue = value.split("");
     newValue[index] = digit;
-    onChange(newValue.join("").slice(0, length));
-    if (index < length - 1) {
+    onChange(newValue.join("").slice(0, safeLength));
+    if (index < safeLength - 1) {
       (_a = inputRefs.current[index + 1]) == null ? void 0 : _a.focus();
       setActiveIndex(index + 1);
     }
@@ -331,7 +332,7 @@ function OTPInput({
     } else if (e.key === "ArrowLeft" && index > 0) {
       (_b = inputRefs.current[index - 1]) == null ? void 0 : _b.focus();
       setActiveIndex(index - 1);
-    } else if (e.key === "ArrowRight" && index < length - 1) {
+    } else if (e.key === "ArrowRight" && index < safeLength - 1) {
       (_c = inputRefs.current[index + 1]) == null ? void 0 : _c.focus();
       setActiveIndex(index + 1);
     }
@@ -342,14 +343,14 @@ function OTPInput({
     e.preventDefault();
     const pasted = e.clipboardData.getData("text").replace(/[^0-9]/g, "");
     if (pasted) {
-      const newValue = pasted.slice(0, length);
+      const newValue = pasted.slice(0, safeLength);
       onChange(newValue);
-      const focusIndex = Math.min(newValue.length, length - 1);
+      const focusIndex = Math.min(newValue.length, safeLength - 1);
       (_a = inputRefs.current[focusIndex]) == null ? void 0 : _a.focus();
       setActiveIndex(focusIndex);
     }
   };
-  return /* @__PURE__ */ jsx("div", { style: { display: "flex", alignItems: "center", justifyContent: "center", gap: "0.5rem" }, children: Array.from({ length }).map((_, index) => /* @__PURE__ */ jsx(
+  return /* @__PURE__ */ jsx("div", { style: { display: "flex", alignItems: "center", justifyContent: "center", gap: "0.5rem" }, children: Array.from({ length: safeLength }).map((_, index) => /* @__PURE__ */ jsx(
     "input",
     {
       ref: (el) => inputRefs.current[index] = el,
@@ -7555,8 +7556,12 @@ function getHeaders(token, includeConfigPrefix = false) {
 let credentials = null;
 let credentialsLoadedAt = 0;
 let credentialsTtl = 300;
+let refreshInFlight = null;
+let lastSuccessfulRefreshAt = 0;
+let lastSuccessfulRefreshResponse = null;
 const DEFAULT_TTL = 300;
 const REFRESH_MARGIN = 30;
+const REFRESH_COOLDOWN_MS = 60 * 1e3;
 const nativeAuthService = {
   hasCredentials() {
     return credentials !== null;
@@ -7855,6 +7860,16 @@ const nativeAuthService = {
     }
   },
   async refresh() {
+    const now = Date.now();
+    if (refreshInFlight) {
+      return refreshInFlight;
+    }
+    if ((lastSuccessfulRefreshResponse == null ? void 0 : lastSuccessfulRefreshResponse.success) && lastSuccessfulRefreshAt && now - lastSuccessfulRefreshAt < REFRESH_COOLDOWN_MS) {
+      if (isDebugMode()) {
+        console.log("🔄 [SaaS] POST /native/refresh — cooldown actif, réponse réutilisée");
+      }
+      return lastSuccessfulRefreshResponse;
+    }
     const cfg = getNativeAuthConfig();
     if (!cfg.saasApiUrl) {
       throw new ApiError("saasApiUrl non configurée", "unknown");
@@ -7867,51 +7882,62 @@ const nativeAuthService = {
     if (isDebugMode()) {
       console.log("📤 [SaaS] POST /native/refresh");
     }
-    let response;
-    try {
-      response = await fetchWithTimeout(
-        `${cfg.saasApiUrl}/native/refresh`,
-        {
-          method: "POST",
-          headers: getHeaders(void 0, true),
-          body: JSON.stringify({ refresh_token: refreshToken })
-        },
-        cfg.timeout || 3e4
-      );
-    } catch (err) {
-      if (err instanceof ApiError) {
-        if (err.statusCode === 401) {
-          return {
-            success: false,
-            error_type: err.errorType || "invalid_refresh",
-            message: err.message
-          };
+    refreshInFlight = (async () => {
+      try {
+        let response;
+        try {
+          response = await fetchWithTimeout(
+            `${cfg.saasApiUrl}/native/refresh`,
+            {
+              method: "POST",
+              headers: getHeaders(void 0, true),
+              body: JSON.stringify({ refresh_token: refreshToken })
+            },
+            cfg.timeout || 3e4
+          );
+        } catch (err) {
+          if (err instanceof ApiError) {
+            if (err.statusCode === 401) {
+              response = {
+                success: false,
+                error_type: err.errorType || "invalid_refresh",
+                message: err.message
+              };
+            } else if (err.statusCode === 404) {
+              response = {
+                success: false,
+                error_type: "not_supported",
+                message: "Endpoint refresh non disponible sur ce SaaS"
+              };
+            } else {
+              throw err;
+            }
+          } else {
+            throw err;
+          }
         }
-        if (err.statusCode === 404) {
-          return {
-            success: false,
-            error_type: "not_supported",
-            message: "Endpoint refresh non disponible sur ce SaaS"
-          };
+        if (response.success) {
+          if (response.token) {
+            setAuthToken(response.token);
+          }
+          const storage = getNativeStorage();
+          if (response.expires_at) storage.setItem(STORAGE.TOKEN_EXPIRES_AT, response.expires_at);
+          if (response.refresh_token) storage.setItem(STORAGE.REFRESH_TOKEN, response.refresh_token);
+          if (response.refresh_expires_at) storage.setItem(STORAGE.REFRESH_EXPIRES_AT, response.refresh_expires_at);
+          if (response.app_access_token_ref) storage.setItem(STORAGE.APP_ACCESS_TOKEN_REF, response.app_access_token_ref);
+          if (response.alias_reference) storage.setItem(STORAGE.ALIAS_REFERENCE, response.alias_reference);
+          if (response.user) {
+            setAuthUser(response.user);
+          }
+          lastSuccessfulRefreshAt = Date.now();
+          lastSuccessfulRefreshResponse = response;
         }
+        return response;
+      } finally {
+        refreshInFlight = null;
       }
-      throw err;
-    }
-    if (response.success) {
-      if (response.token) {
-        setAuthToken(response.token);
-      }
-      const storage = getNativeStorage();
-      if (response.expires_at) storage.setItem(STORAGE.TOKEN_EXPIRES_AT, response.expires_at);
-      if (response.refresh_token) storage.setItem(STORAGE.REFRESH_TOKEN, response.refresh_token);
-      if (response.refresh_expires_at) storage.setItem(STORAGE.REFRESH_EXPIRES_AT, response.refresh_expires_at);
-      if (response.app_access_token_ref) storage.setItem(STORAGE.APP_ACCESS_TOKEN_REF, response.app_access_token_ref);
-      if (response.alias_reference) storage.setItem(STORAGE.ALIAS_REFERENCE, response.alias_reference);
-      if (response.user) {
-        setAuthUser(response.user);
-      }
-    }
-    return response;
+    })();
+    return refreshInFlight;
   },
   async logout(token) {
     const config2 = getNativeAuthConfig();
@@ -7960,11 +7986,17 @@ const nativeAuthService = {
     clearAuthToken();
     credentials = null;
     credentialsLoadedAt = 0;
+    refreshInFlight = null;
+    lastSuccessfulRefreshAt = 0;
+    lastSuccessfulRefreshResponse = null;
     return { success: true };
   },
   clearCredentials() {
     credentials = null;
     credentialsLoadedAt = 0;
+    refreshInFlight = null;
+    lastSuccessfulRefreshAt = 0;
+    lastSuccessfulRefreshResponse = null;
   },
   // ============================================
   // High-level methods