@opexa/portal-sdk 0.59.94 → 0.59.96

package/dist/{chunk-ROBGEUSE.js → chunk-WVFSGB7Y.js}

@@ -39,5 +39,5 @@ function callIfFn(value, ...args) {
 }
 
 export { callIfFn, gql, statusCodeToOperationError };
-//# sourceMappingURL=chunk-ROBGEUSE.js.map
-//# sourceMappingURL=chunk-ROBGEUSE.js.map
+//# sourceMappingURL=chunk-WVFSGB7Y.js.map
+//# sourceMappingURL=chunk-WVFSGB7Y.js.map

package/dist/chunk-WVFSGB7Y.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/gql.ts","../src/utils/status-code-to-operation-error.ts","../src/utils/call-if-fn.ts"],"names":[],"mappings":";AAAO,SAAS,GAAA,CAAI,YAAkC,MAAA,EAAmB;AACxE,EAAA,IAAI,MAAA,GAAS,EAAA;AAEb,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,MAAM,CAAA,IAAK,OAAA,CAAQ,SAAQ,EAAG;AAChD,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,EAAA,CAAG,KAAK,CAAA,IAAK,EAAA;AAElC,IAAA,MAAA,GAAS,CAAA,EAAG,MAAM,CAAA,EAAG,MAAM,GAAG,KAAK,CAAA,CAAA;AAAA,EACpC;AAEA,EAAA,OAAO,OAAO,IAAA,EAAK;AACpB;;;ACRO,SAAS,0BAAA,CACf,OACA,OAAA,EAC4B;AAC5B,EAAA,MAAM,CAAA,GAAI,UAAU,KAAK,CAAA,GAAI,UAAU,KAAK,CAAA,GAAI,UAAU,GAAG,CAAA;AAE7D,EAAA,OAAO;AAAA,IACN,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,OAAA,EAAS,WAAW,CAAA,CAAE;AAAA,GACvB;AACD;AAEA,IAAM,SAAA,GAAuD;AAAA,EAC5D,GAAA,EAAK,EAAE,IAAA,EAAM,gBAAA,EAAkB,SAAS,aAAA,EAAc;AAAA,EACtD,GAAA,EAAK,EAAE,IAAA,EAAM,kBAAA,EAAoB,SAAS,cAAA,EAAe;AAAA,EACzD,GAAA,EAAK,EAAE,IAAA,EAAM,eAAA,EAAiB,SAAS,WAAA,EAAY;AAAA,EACnD,GAAA,EAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,SAAS,WAAA,EAAY;AAAA,EAClD,GAAA,EAAK,EAAE,IAAA,EAAM,oBAAA,EAAsB,SAAS,iBAAA,EAAkB;AAAA,EAC9D,GAAA,EAAK,EAAE,IAAA,EAAM,qBAAA,EAAuB,SAAS,mBAAA,EAAoB;AAAA,EACjE,GAAA,EAAK,EAAE,IAAA,EAAM,yBAAA,EAA2B,SAAS,uBAAA;AAClD,CAAA;;;ACtBA,SAAS,WACR,KAAA,EACuC;AACvC,EAAA,OAAO,OAAO,KAAA,KAAU,UAAA;AACzB;AAEO,SAAS,QAAA,CACf,UACG,IAAA,EACF;AACD,EAAA,IAAI,UAAA,CAAyB,KAAK,CAAA,EAAG;AACpC,IAAA,OAAO,KAAA,CAAM,GAAG,IAAI,CAAA;AAAA,EACrB,CAAA,MAAO;AACN,IAAA,OAAO,KAAA;AAAA,EACR;AACD","file":"chunk-WVFSGB7Y.js","sourcesContent":["export function gql(strings: TemplateStringsArray, ...values: unknown[]) {\r\n\tlet result = '';\r\n\r\n\tfor (const [index, string] of strings.entries()) {\r\n\t\tconst value = values.at(index) ?? '';\r\n\r\n\t\tresult = `${result}${string}${value}`;\r\n\t}\r\n\r\n\treturn result.trim();\r\n}\r\n","import type { HttpError, OperationError } from '../types/index.js';\r\n\r\nexport function statusCodeToOperationError(\r\n\tvalue: number,\r\n\tmessage?: string,\r\n): OperationError<HttpError> {\r\n\tconst e = ERROR_MAP[value] ? ERROR_MAP[value] : ERROR_MAP[500];\r\n\r\n\treturn {\r\n\t\tname: e.name,\r\n\t\tmessage: message ?? e.message,\r\n\t};\r\n}\r\n\r\nconst ERROR_MAP: Record<number, OperationError<HttpError>> = {\r\n\t400: { name: 'HttpBadRequest', message: 'Bad Request' },\r\n\t401: { name: 'HttpUnauthorized', message: 'Unauthorized' },\r\n\t403: { name: 'HttpForbidden', message: 'Forbidden' },\r\n\t404: { name: 'HttpNotFound', message: 'Not Found' },\r\n\t408: { name: 'HttpRequestTimeout', message: 'Request Timeout' },\r\n\t429: { name: 'HttpTooManyRequests', message: 'Too Many Requests' },\r\n\t500: { name: 'HttpInternalServerError', message: 'Internal Server Error' },\r\n};\r\n","function isFunction<Return, Args = never>(\r\n\tvalue: unknown | ((...args: Args[]) => Return),\r\n): value is (...args: Args[]) => Return {\r\n\treturn typeof value === 'function';\r\n}\r\n\r\nexport function callIfFn<Return, Args = never>(\r\n\tvalue: Return | ((...args: Args[]) => Return),\r\n\t...args: Args[]\r\n) {\r\n\tif (isFunction<Return, Args>(value)) {\r\n\t\treturn value(...args);\r\n\t} else {\r\n\t\treturn value;\r\n\t}\r\n}\r\n"]}

package/dist/index.cjs

@@ -1,6 +1,7 @@
 'use strict';
 
 var objectId = require('@opexa/object-id');
+var app = require('@capacitor/app');
 var core = require('@capacitor/core');
 var thumbmarkjs = require('@thumbmarkjs/thumbmarkjs');
 var cookies = require('js-cookie');
@@ -4708,6 +4709,20 @@ async function getFingerPrint() {
     return null;
   }
 }
+function isWebPlatform() {
+  try {
+    return core.Capacitor.getPlatform() === "web";
+  } catch {
+    return true;
+  }
+}
+function isIOSPlatform() {
+  try {
+    return core.Capacitor.getPlatform() === "ios";
+  } catch {
+    return false;
+  }
+}
 
 // src/utils/status-code-to-operation-error.ts
 function statusCodeToOperationError(value, message) {
@@ -4728,13 +4743,6 @@ var ERROR_MAP = {
 };
 
 // src/services/auth.service.ts
-function isWebPlatform() {
-  try {
-    return core.Capacitor.getPlatform() === "web";
-  } catch {
-    return false;
-  }
-}
 var AuthService = class {
   url;
   options;
@@ -4790,12 +4798,15 @@ var AuthService = class {
     try {
       const isWeb = isWebPlatform();
       const queryParam = isWeb && version === 4 ? "?type=web" : "";
-      const res = await fetch(`${this.url}${version !== 1 ? `/v${version}/sessions` : "/sessions"}${queryParam}`, {
-        method: "POST",
-        headers,
-        body: JSON.stringify(input),
-        ...version === 4 && { credentials: "include" }
-      });
+      const res = await fetch(
+        `${this.url}${version !== 1 ? `/v${version}/sessions` : "/sessions"}${queryParam}`,
+        {
+          method: "POST",
+          headers,
+          body: JSON.stringify(input),
+          ...version === 4 && { credentials: "include" }
+        }
+      );
       const body = await res.json();
       if (res.ok) {
         return {
@@ -4878,7 +4889,7 @@ var AuthService = class {
   }
   async refreshSession(refreshToken, version = 1) {
     const headers = new Headers(this.headers);
-    if (version !== 4) {
+    if (version !== 4 || refreshToken) {
       headers.append("Authorization", `Bearer ${refreshToken}`);
     }
     try {
@@ -4992,11 +5003,14 @@ var AuthService = class {
       }
     }
     try {
-      const res = await fetch(`${this.url}${version !== 1 ? `/v${version}/otps` : "/otps"}`, {
-        method: "POST",
-        headers: this.headers,
-        body: JSON.stringify(input)
-      });
+      const res = await fetch(
+        `${this.url}${version !== 1 ? `/v${version}/otps` : "/otps"}`,
+        {
+          method: "POST",
+          headers: this.headers,
+          body: JSON.stringify(input)
+        }
+      );
       if (res.status === 403) {
         const data = await res.json();
         const code = getErrorCode(data.message);
@@ -7456,6 +7470,48 @@ function pollable(func, config) {
   };
 }
 
+// src/sdk/refresh-token-store.ts
+var PreferencesRefreshTokenStore = class {
+  constructor(key, logger) {
+    this.key = key;
+    this.logger = logger;
+  }
+  async preferences() {
+    const { Preferences } = await import('@capacitor/preferences');
+    return Preferences;
+  }
+  async get() {
+    if (!isIOSPlatform()) return null;
+    try {
+      const { value } = await (await this.preferences()).get({ key: this.key });
+      return value ?? null;
+    } catch (err) {
+      this.logger.error(`Failed to read the refresh token: ${err}`);
+      return null;
+    }
+  }
+  async set(token) {
+    if (!isIOSPlatform()) return;
+    try {
+      await (await this.preferences()).set({ key: this.key, value: token });
+    } catch (err) {
+      this.logger.error(`Failed to persist the refresh token: ${err}`);
+    }
+  }
+  async remove() {
+    if (!isIOSPlatform()) return;
+    try {
+      await (await this.preferences()).remove({ key: this.key });
+    } catch (err) {
+      this.logger.error(`Failed to clear the refresh token: ${err}`);
+    }
+  }
+};
+function createRefreshTokenStore(logger, sessionPrefix) {
+  const key = sessionPrefix ? `${sessionPrefix}/session/refresh-token` : "session/refresh-token";
+  return new PreferencesRefreshTokenStore(key, logger);
+}
+
 // src/sdk/session-manager.ts
 var SessionManager = class {
   logger;
@@ -7465,17 +7521,22 @@ var SessionManager = class {
   walletService;
   _refreshing = false;
   /*
-   * v4 access tokens are never persisted (localStorage/cookie) so that an
-   * XSS-readable storage layer never holds a live access token. They only
-   * live in memory and get re-minted from the HttpOnly refresh cookie.
+   * v4 access tokens live in memory only, so an XSS-readable storage layer
+   * never holds a live one. Re-minted from the HttpOnly cookie, or from
+   * `refreshTokenStore` on iOS.
    */
   v4AccessToken = null;
   v4AccessTokenExpiresAt = null;
   v4RefreshPromise = null;
+  refreshTokenStore;
   constructor(config) {
     this.authService = config.authService;
     this.walletService = config.walletService;
     this.logger = config.logger;
+    this.refreshTokenStore = createRefreshTokenStore(
+      config.logger,
+      config.sessionPrefix
+    );
     if (config.sessionPrefix) {
       this.storageKey = `${config.sessionPrefix}/${this.storageKey}`;
       this.platformStorageKey = `${config.sessionPrefix}/${this.platformStorageKey}`;
@@ -7487,7 +7548,7 @@ var SessionManager = class {
   set refreshing(value) {
     this._refreshing = value;
   }
-  persist(data, version) {
+  async persist(data, version) {
     const now = /* @__PURE__ */ new Date();
     if (version === 4) {
       if (!data.session || !data.accessToken) {
@@ -7498,6 +7559,9 @@ var SessionManager = class {
       }
       this.v4AccessToken = data.accessToken;
       this.v4AccessTokenExpiresAt = addMinutes(now, 4).getTime();
+      if (data.refreshToken) {
+        await this.refreshTokenStore.set(data.refreshToken);
+      }
       localStorage.setItem(
         this.storageKey,
         JSON.stringify({ version, session: data.session })
@@ -7560,7 +7624,8 @@ var SessionManager = class {
         maxAttempt: 5
       })();
       if (!r1.ok) return r1;
-      if (!this.persist(r1.data, version)) return this.malformedResponseError();
+      if (!await this.persist(r1.data, version))
+        return this.malformedResponseError();
       return {
         ok: true,
         data: null
@@ -7569,7 +7634,7 @@ var SessionManager = class {
     if (input.type === "MOBILE_NUMBER") {
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        if (!this.persist(res2.data, version))
+        if (!await this.persist(res2.data, version))
           return this.malformedResponseError();
         return {
           ok: true,
@@ -7588,7 +7653,7 @@ var SessionManager = class {
         version
       );
       if (res2.ok) {
-        if (!this.persist(res2.data, version))
+        if (!await this.persist(res2.data, version))
           return this.malformedResponseError();
         return {
           ok: true,
@@ -7601,7 +7666,7 @@ var SessionManager = class {
       localStorage.setItem(this.platformStorageKey, "CABINET");
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        if (!this.persist(res2.data, version))
+        if (!await this.persist(res2.data, version))
           return this.malformedResponseError();
         return {
           ok: true,
@@ -7620,7 +7685,8 @@ var SessionManager = class {
         }
       };
     }
-    if (!this.persist(res.data, version)) return this.malformedResponseError();
+    if (!await this.persist(res.data, version))
+      return this.malformedResponseError();
     return {
       ok: true,
       data: null
@@ -7631,7 +7697,7 @@ var SessionManager = class {
     if (res.ok) {
       if (this.isServer) {
         this.logger.warn("'localStorage' is not available on the server.");
-      } else if (!this.persist(res.data, 1)) {
+      } else if (!await this.persist(res.data, 1)) {
         return this.malformedResponseError();
       }
       return { ok: true };
@@ -7821,14 +7887,31 @@ var SessionManager = class {
   }
   async requestV4Refresh(session) {
     this.logger.info("Refreshing session...");
+    let refreshToken;
+    if (isIOSPlatform()) {
+      refreshToken = await this.refreshTokenStore.get() ?? void 0;
+      if (!refreshToken) {
+        this.logger.warn("No stored refresh token. Session expired.");
+        this.v4AccessToken = null;
+        this.v4AccessTokenExpiresAt = null;
+        return {
+          ok: false,
+          error: {
+            name: "SessionExpiredError",
+            message: "Session expired."
+          }
+        };
+      }
+    }
     this.refreshing = true;
-    const res = await this.authService.refreshSession(void 0, 4);
+    const res = await this.authService.refreshSession(refreshToken, 4);
     this.refreshing = false;
     if (!res.ok) {
       this.logger.error(`Failed to refresh session: ${res.error.message}`);
       if (res.error.name === "InvalidTokenError" || res.error.name === "AccountBlacklistedError" || res.error.name === "VerificationLockedError" || res.error.name === "SessionExpiredError") {
         this.v4AccessToken = null;
         this.v4AccessTokenExpiresAt = null;
+        await this.refreshTokenStore.remove();
       }
       return {
         ok: false,
@@ -7836,6 +7919,9 @@ var SessionManager = class {
       };
     }
     this.logger.success("Session refreshed!");
+    if (res.data.refreshToken) {
+      await this.refreshTokenStore.set(res.data.refreshToken);
+    }
     const now = /* @__PURE__ */ new Date();
     this.v4AccessToken = res.data.accessToken;
     this.v4AccessTokenExpiresAt = addMinutes(now, 4).getTime();
@@ -7868,6 +7954,7 @@ var SessionManager = class {
     }
     this.v4AccessToken = null;
     this.v4AccessTokenExpiresAt = null;
+    await this.refreshTokenStore.remove();
     localStorage.removeItem(this.storageKey);
   }
   async verify() {
@@ -7911,6 +7998,7 @@ var SessionManager = class {
       localStorage.removeItem(this.storageKey);
       this.v4AccessToken = null;
       this.v4AccessTokenExpiresAt = null;
+      await this.refreshTokenStore.remove();
     }
     return v ? { valid: true } : { valid: false, reason: "INVALID_SESSION" };
   }
@@ -7940,16 +8028,19 @@ var SessionManagerCookie = class {
   walletService;
   _refreshing = false;
   /*
-   * v4 access tokens are never persisted (localStorage/cookie) so that an
-   * XSS-readable storage layer never holds a live access token. They only
-   * live in memory and get re-minted from the HttpOnly refresh cookie.
+   * v4 access tokens live in memory only, so an XSS-readable storage layer
+   * never holds a live one. Re-minted from the HttpOnly cookie, or from
+   * `refreshTokenStore` on iOS.
    */
   v4AccessToken = null;
   v4AccessTokenExpiresAt = null;
+  v4RefreshPromise = null;
+  refreshTokenStore;
   constructor(config) {
     this.authService = config.authService;
     this.walletService = config.walletService;
     this.logger = config.logger;
+    this.refreshTokenStore = createRefreshTokenStore(config.logger);
   }
   get refreshing() {
     return this._refreshing;
@@ -7957,15 +8048,18 @@ var SessionManagerCookie = class {
   set refreshing(value) {
     this._refreshing = value;
   }
-  persist(data, version) {
+  async persist(data, version) {
     const now = /* @__PURE__ */ new Date();
     if (version === 4) {
       this.v4AccessToken = data.accessToken ?? null;
       this.v4AccessTokenExpiresAt = addMinutes(now, 5).getTime();
+      if (data.refreshToken) {
+        await this.refreshTokenStore.set(data.refreshToken);
+      }
       cookies__default.default.set(
         this.storageKey,
         JSON.stringify({ version, session: data.session }),
-        { expires: subMinutes(addDays(now, 15), 2).getTime() }
+        { expires: subMinutes(addDays(now, 15), 2) }
       );
       return;
     }
@@ -7977,7 +8071,7 @@ var SessionManagerCookie = class {
         accessTokenExpiresAt: addMinutes(now, 8).getTime(),
         refreshTokenExpiresAt: subMinutes(addDays(now, 30), 2).getTime()
       }),
-      { expires: subMinutes(addDays(now, 30), 2).getTime() }
+      { expires: subMinutes(addDays(now, 30), 2) }
     );
   }
   async create(input, version = 1) {
@@ -8006,7 +8100,7 @@ var SessionManagerCookie = class {
         maxAttempt: 5
       })();
       if (!r1.ok) return r1;
-      this.persist(r1.data, version);
+      await this.persist(r1.data, version);
       return {
         ok: true,
         data: null
@@ -8015,7 +8109,7 @@ var SessionManagerCookie = class {
     if (input.type === "MOBILE_NUMBER") {
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        this.persist(res2.data, version);
+        await this.persist(res2.data, version);
         return {
           ok: true,
           data: null
@@ -8032,7 +8126,7 @@ var SessionManagerCookie = class {
         version
       );
       if (res2.ok) {
-        this.persist(res2.data, version);
+        await this.persist(res2.data, version);
         return {
           ok: true,
           data: null
@@ -8044,7 +8138,7 @@ var SessionManagerCookie = class {
       localStorage.setItem(this.platformStorageKey, "CABINET");
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        this.persist(res2.data, version);
+        await this.persist(res2.data, version);
         return {
           ok: true,
           data: null
@@ -8062,7 +8156,7 @@ var SessionManagerCookie = class {
         }
       };
     }
-    this.persist(res.data, version);
+    await this.persist(res.data, version);
     return {
       ok: true,
       data: null
@@ -8074,7 +8168,7 @@ var SessionManagerCookie = class {
       if (this.isServer) {
         this.logger.warn("'client cookies' is not available on the server.");
       } else {
-        this.persist(res.data, 1);
+        await this.persist(res.data, 1);
       }
       return { ok: true };
     } else {
@@ -8154,7 +8248,7 @@ var SessionManagerCookie = class {
           refreshTokenExpiresAt: subMinutes(addDays(now, 30), 2).getTime()
         };
         cookies__default.default.set(this.storageKey, JSON.stringify(obj), {
-          expires: subMinutes(addDays(now, 30), 2).getTime()
+          expires: subMinutes(addDays(now, 30), 2)
         });
       }
       return {
@@ -8226,7 +8320,7 @@ var SessionManagerCookie = class {
         refreshTokenExpiresAt: subMinutes(addDays(now, 30), 2).getTime()
       };
       cookies__default.default.set(this.storageKey, JSON.stringify(obj), {
-        expires: subMinutes(addDays(now, 30), 2).getTime()
+        expires: subMinutes(addDays(now, 30), 2)
       });
       return {
         ok: true,
@@ -8257,15 +8351,41 @@ var SessionManagerCookie = class {
     return await this.refreshV4(session);
   }
   async refreshV4(session) {
+    if (this.v4RefreshPromise) return await this.v4RefreshPromise;
+    this.v4RefreshPromise = this.requestV4Refresh(session);
+    try {
+      return await this.v4RefreshPromise;
+    } finally {
+      this.v4RefreshPromise = null;
+    }
+  }
+  async requestV4Refresh(session) {
     this.logger.info("Refreshing session...");
+    let refreshToken;
+    if (isIOSPlatform()) {
+      refreshToken = await this.refreshTokenStore.get() ?? void 0;
+      if (!refreshToken) {
+        this.logger.warn("No stored refresh token. Session expired.");
+        this.v4AccessToken = null;
+        this.v4AccessTokenExpiresAt = null;
+        return {
+          ok: false,
+          error: {
+            name: "SessionExpiredError",
+            message: "Session expired."
+          }
+        };
+      }
+    }
     this.refreshing = true;
-    const res = await this.authService.refreshSession(void 0, 4);
+    const res = await this.authService.refreshSession(refreshToken, 4);
     this.refreshing = false;
     if (!res.ok) {
       this.logger.error(`Failed to refresh session: ${res.error.message}`);
       if (res.error.name === "InvalidTokenError" || res.error.name === "AccountBlacklistedError" || res.error.name === "VerificationLockedError" || res.error.name === "SessionExpiredError") {
         this.v4AccessToken = null;
         this.v4AccessTokenExpiresAt = null;
+        await this.refreshTokenStore.remove();
       }
       return {
         ok: false,
@@ -8273,6 +8393,9 @@ var SessionManagerCookie = class {
       };
     }
     this.logger.success("Session refreshed!");
+    if (res.data.refreshToken) {
+      await this.refreshTokenStore.set(res.data.refreshToken);
+    }
     const now = /* @__PURE__ */ new Date();
     this.v4AccessToken = res.data.accessToken;
     this.v4AccessTokenExpiresAt = addMinutes(now, 5).getTime();
@@ -8305,6 +8428,7 @@ var SessionManagerCookie = class {
     }
     this.v4AccessToken = null;
     this.v4AccessTokenExpiresAt = null;
+    await this.refreshTokenStore.remove();
     cookies__default.default.remove(this.storageKey);
   }
   async verify() {
@@ -8348,6 +8472,7 @@ var SessionManagerCookie = class {
       cookies__default.default.remove(this.storageKey);
       this.v4AccessToken = null;
       this.v4AccessTokenExpiresAt = null;
+      await this.refreshTokenStore.remove();
     }
     return v ? { valid: true } : { valid: false, reason: "INVALID_SESSION" };
   }
@@ -10651,10 +10776,14 @@ var Sdk = class {
     const interval = clamp(input.interval ?? 3e4, 5e3, 6e4);
     let counter = 0;
     let timeout = null;
+    let isForeground = true;
+    const listener = app.App.addListener("appStateChange", ({ isActive }) => {
+      isForeground = isActive;
+    });
     const assignTimeout = () => {
       const duration = counter <= 0 ? interval * 0.5 : interval;
       return setTimeout(async () => {
-        {
+        if (isForeground) {
           let res;
           try {
             res = await this.sessionManager.verify();
@@ -10674,6 +10803,7 @@ var Sdk = class {
       if (timeout) {
         clearTimeout(timeout);
       }
+      listener.then((handle) => handle.remove());
     };
   }
   async session() {