@opexa/portal-sdk 0.59.95 → 0.59.96

package/dist/index.cjs

@@ -4709,6 +4709,20 @@ async function getFingerPrint() {
     return null;
   }
 }
+function isWebPlatform() {
+  try {
+    return core.Capacitor.getPlatform() === "web";
+  } catch {
+    return true;
+  }
+}
+function isIOSPlatform() {
+  try {
+    return core.Capacitor.getPlatform() === "ios";
+  } catch {
+    return false;
+  }
+}
 
 // src/utils/status-code-to-operation-error.ts
 function statusCodeToOperationError(value, message) {
@@ -4729,13 +4743,6 @@ var ERROR_MAP = {
 };
 
 // src/services/auth.service.ts
-function isWebPlatform() {
-  try {
-    return core.Capacitor.getPlatform() === "web";
-  } catch {
-    return false;
-  }
-}
 var AuthService = class {
   url;
   options;
@@ -4791,12 +4798,15 @@ var AuthService = class {
     try {
       const isWeb = isWebPlatform();
       const queryParam = isWeb && version === 4 ? "?type=web" : "";
-      const res = await fetch(`${this.url}${version !== 1 ? `/v${version}/sessions` : "/sessions"}${queryParam}`, {
-        method: "POST",
-        headers,
-        body: JSON.stringify(input),
-        ...version === 4 && { credentials: "include" }
-      });
+      const res = await fetch(
+        `${this.url}${version !== 1 ? `/v${version}/sessions` : "/sessions"}${queryParam}`,
+        {
+          method: "POST",
+          headers,
+          body: JSON.stringify(input),
+          ...version === 4 && { credentials: "include" }
+        }
+      );
       const body = await res.json();
       if (res.ok) {
         return {
@@ -4879,7 +4889,7 @@ var AuthService = class {
   }
   async refreshSession(refreshToken, version = 1) {
     const headers = new Headers(this.headers);
-    if (version !== 4) {
+    if (version !== 4 || refreshToken) {
       headers.append("Authorization", `Bearer ${refreshToken}`);
     }
     try {
@@ -4993,11 +5003,14 @@ var AuthService = class {
       }
     }
     try {
-      const res = await fetch(`${this.url}${version !== 1 ? `/v${version}/otps` : "/otps"}`, {
-        method: "POST",
-        headers: this.headers,
-        body: JSON.stringify(input)
-      });
+      const res = await fetch(
+        `${this.url}${version !== 1 ? `/v${version}/otps` : "/otps"}`,
+        {
+          method: "POST",
+          headers: this.headers,
+          body: JSON.stringify(input)
+        }
+      );
       if (res.status === 403) {
         const data = await res.json();
         const code = getErrorCode(data.message);
@@ -7457,6 +7470,48 @@ function pollable(func, config) {
   };
 }
 
+// src/sdk/refresh-token-store.ts
+var PreferencesRefreshTokenStore = class {
+  constructor(key, logger) {
+    this.key = key;
+    this.logger = logger;
+  }
+  async preferences() {
+    const { Preferences } = await import('@capacitor/preferences');
+    return Preferences;
+  }
+  async get() {
+    if (!isIOSPlatform()) return null;
+    try {
+      const { value } = await (await this.preferences()).get({ key: this.key });
+      return value ?? null;
+    } catch (err) {
+      this.logger.error(`Failed to read the refresh token: ${err}`);
+      return null;
+    }
+  }
+  async set(token) {
+    if (!isIOSPlatform()) return;
+    try {
+      await (await this.preferences()).set({ key: this.key, value: token });
+    } catch (err) {
+      this.logger.error(`Failed to persist the refresh token: ${err}`);
+    }
+  }
+  async remove() {
+    if (!isIOSPlatform()) return;
+    try {
+      await (await this.preferences()).remove({ key: this.key });
+    } catch (err) {
+      this.logger.error(`Failed to clear the refresh token: ${err}`);
+    }
+  }
+};
+function createRefreshTokenStore(logger, sessionPrefix) {
+  const key = sessionPrefix ? `${sessionPrefix}/session/refresh-token` : "session/refresh-token";
+  return new PreferencesRefreshTokenStore(key, logger);
+}
+
 // src/sdk/session-manager.ts
 var SessionManager = class {
   logger;
@@ -7466,17 +7521,22 @@ var SessionManager = class {
   walletService;
   _refreshing = false;
   /*
-   * v4 access tokens are never persisted (localStorage/cookie) so that an
-   * XSS-readable storage layer never holds a live access token. They only
-   * live in memory and get re-minted from the HttpOnly refresh cookie.
+   * v4 access tokens live in memory only, so an XSS-readable storage layer
+   * never holds a live one. Re-minted from the HttpOnly cookie, or from
+   * `refreshTokenStore` on iOS.
    */
   v4AccessToken = null;
   v4AccessTokenExpiresAt = null;
   v4RefreshPromise = null;
+  refreshTokenStore;
   constructor(config) {
     this.authService = config.authService;
     this.walletService = config.walletService;
     this.logger = config.logger;
+    this.refreshTokenStore = createRefreshTokenStore(
+      config.logger,
+      config.sessionPrefix
+    );
     if (config.sessionPrefix) {
       this.storageKey = `${config.sessionPrefix}/${this.storageKey}`;
       this.platformStorageKey = `${config.sessionPrefix}/${this.platformStorageKey}`;
@@ -7488,7 +7548,7 @@ var SessionManager = class {
   set refreshing(value) {
     this._refreshing = value;
   }
-  persist(data, version) {
+  async persist(data, version) {
     const now = /* @__PURE__ */ new Date();
     if (version === 4) {
       if (!data.session || !data.accessToken) {
@@ -7499,6 +7559,9 @@ var SessionManager = class {
       }
       this.v4AccessToken = data.accessToken;
       this.v4AccessTokenExpiresAt = addMinutes(now, 4).getTime();
+      if (data.refreshToken) {
+        await this.refreshTokenStore.set(data.refreshToken);
+      }
       localStorage.setItem(
         this.storageKey,
         JSON.stringify({ version, session: data.session })
@@ -7561,7 +7624,8 @@ var SessionManager = class {
         maxAttempt: 5
       })();
       if (!r1.ok) return r1;
-      if (!this.persist(r1.data, version)) return this.malformedResponseError();
+      if (!await this.persist(r1.data, version))
+        return this.malformedResponseError();
       return {
         ok: true,
         data: null
@@ -7570,7 +7634,7 @@ var SessionManager = class {
     if (input.type === "MOBILE_NUMBER") {
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        if (!this.persist(res2.data, version))
+        if (!await this.persist(res2.data, version))
           return this.malformedResponseError();
         return {
           ok: true,
@@ -7589,7 +7653,7 @@ var SessionManager = class {
         version
       );
       if (res2.ok) {
-        if (!this.persist(res2.data, version))
+        if (!await this.persist(res2.data, version))
           return this.malformedResponseError();
         return {
           ok: true,
@@ -7602,7 +7666,7 @@ var SessionManager = class {
       localStorage.setItem(this.platformStorageKey, "CABINET");
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        if (!this.persist(res2.data, version))
+        if (!await this.persist(res2.data, version))
           return this.malformedResponseError();
         return {
           ok: true,
@@ -7621,7 +7685,8 @@ var SessionManager = class {
         }
       };
     }
-    if (!this.persist(res.data, version)) return this.malformedResponseError();
+    if (!await this.persist(res.data, version))
+      return this.malformedResponseError();
     return {
       ok: true,
       data: null
@@ -7632,7 +7697,7 @@ var SessionManager = class {
     if (res.ok) {
       if (this.isServer) {
         this.logger.warn("'localStorage' is not available on the server.");
-      } else if (!this.persist(res.data, 1)) {
+      } else if (!await this.persist(res.data, 1)) {
         return this.malformedResponseError();
       }
       return { ok: true };
@@ -7822,14 +7887,31 @@ var SessionManager = class {
   }
   async requestV4Refresh(session) {
     this.logger.info("Refreshing session...");
+    let refreshToken;
+    if (isIOSPlatform()) {
+      refreshToken = await this.refreshTokenStore.get() ?? void 0;
+      if (!refreshToken) {
+        this.logger.warn("No stored refresh token. Session expired.");
+        this.v4AccessToken = null;
+        this.v4AccessTokenExpiresAt = null;
+        return {
+          ok: false,
+          error: {
+            name: "SessionExpiredError",
+            message: "Session expired."
+          }
+        };
+      }
+    }
     this.refreshing = true;
-    const res = await this.authService.refreshSession(void 0, 4);
+    const res = await this.authService.refreshSession(refreshToken, 4);
     this.refreshing = false;
     if (!res.ok) {
       this.logger.error(`Failed to refresh session: ${res.error.message}`);
       if (res.error.name === "InvalidTokenError" || res.error.name === "AccountBlacklistedError" || res.error.name === "VerificationLockedError" || res.error.name === "SessionExpiredError") {
         this.v4AccessToken = null;
         this.v4AccessTokenExpiresAt = null;
+        await this.refreshTokenStore.remove();
       }
       return {
         ok: false,
@@ -7837,6 +7919,9 @@ var SessionManager = class {
       };
     }
     this.logger.success("Session refreshed!");
+    if (res.data.refreshToken) {
+      await this.refreshTokenStore.set(res.data.refreshToken);
+    }
     const now = /* @__PURE__ */ new Date();
     this.v4AccessToken = res.data.accessToken;
     this.v4AccessTokenExpiresAt = addMinutes(now, 4).getTime();
@@ -7869,6 +7954,7 @@ var SessionManager = class {
     }
     this.v4AccessToken = null;
     this.v4AccessTokenExpiresAt = null;
+    await this.refreshTokenStore.remove();
     localStorage.removeItem(this.storageKey);
   }
   async verify() {
@@ -7912,6 +7998,7 @@ var SessionManager = class {
       localStorage.removeItem(this.storageKey);
       this.v4AccessToken = null;
       this.v4AccessTokenExpiresAt = null;
+      await this.refreshTokenStore.remove();
     }
     return v ? { valid: true } : { valid: false, reason: "INVALID_SESSION" };
   }
@@ -7941,16 +8028,19 @@ var SessionManagerCookie = class {
   walletService;
   _refreshing = false;
   /*
-   * v4 access tokens are never persisted (localStorage/cookie) so that an
-   * XSS-readable storage layer never holds a live access token. They only
-   * live in memory and get re-minted from the HttpOnly refresh cookie.
+   * v4 access tokens live in memory only, so an XSS-readable storage layer
+   * never holds a live one. Re-minted from the HttpOnly cookie, or from
+   * `refreshTokenStore` on iOS.
    */
   v4AccessToken = null;
   v4AccessTokenExpiresAt = null;
+  v4RefreshPromise = null;
+  refreshTokenStore;
   constructor(config) {
     this.authService = config.authService;
     this.walletService = config.walletService;
     this.logger = config.logger;
+    this.refreshTokenStore = createRefreshTokenStore(config.logger);
   }
   get refreshing() {
     return this._refreshing;
@@ -7958,15 +8048,18 @@ var SessionManagerCookie = class {
   set refreshing(value) {
     this._refreshing = value;
   }
-  persist(data, version) {
+  async persist(data, version) {
     const now = /* @__PURE__ */ new Date();
     if (version === 4) {
       this.v4AccessToken = data.accessToken ?? null;
       this.v4AccessTokenExpiresAt = addMinutes(now, 5).getTime();
+      if (data.refreshToken) {
+        await this.refreshTokenStore.set(data.refreshToken);
+      }
       cookies__default.default.set(
         this.storageKey,
         JSON.stringify({ version, session: data.session }),
-        { expires: subMinutes(addDays(now, 15), 2).getTime() }
+        { expires: subMinutes(addDays(now, 15), 2) }
       );
       return;
     }
@@ -7978,7 +8071,7 @@ var SessionManagerCookie = class {
         accessTokenExpiresAt: addMinutes(now, 8).getTime(),
         refreshTokenExpiresAt: subMinutes(addDays(now, 30), 2).getTime()
       }),
-      { expires: subMinutes(addDays(now, 30), 2).getTime() }
+      { expires: subMinutes(addDays(now, 30), 2) }
     );
   }
   async create(input, version = 1) {
@@ -8007,7 +8100,7 @@ var SessionManagerCookie = class {
         maxAttempt: 5
       })();
       if (!r1.ok) return r1;
-      this.persist(r1.data, version);
+      await this.persist(r1.data, version);
       return {
         ok: true,
         data: null
@@ -8016,7 +8109,7 @@ var SessionManagerCookie = class {
     if (input.type === "MOBILE_NUMBER") {
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        this.persist(res2.data, version);
+        await this.persist(res2.data, version);
         return {
           ok: true,
           data: null
@@ -8033,7 +8126,7 @@ var SessionManagerCookie = class {
         version
       );
       if (res2.ok) {
-        this.persist(res2.data, version);
+        await this.persist(res2.data, version);
         return {
           ok: true,
           data: null
@@ -8045,7 +8138,7 @@ var SessionManagerCookie = class {
       localStorage.setItem(this.platformStorageKey, "CABINET");
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        this.persist(res2.data, version);
+        await this.persist(res2.data, version);
         return {
           ok: true,
           data: null
@@ -8063,7 +8156,7 @@ var SessionManagerCookie = class {
         }
       };
     }
-    this.persist(res.data, version);
+    await this.persist(res.data, version);
     return {
       ok: true,
       data: null
@@ -8075,7 +8168,7 @@ var SessionManagerCookie = class {
       if (this.isServer) {
         this.logger.warn("'client cookies' is not available on the server.");
       } else {
-        this.persist(res.data, 1);
+        await this.persist(res.data, 1);
       }
       return { ok: true };
     } else {
@@ -8155,7 +8248,7 @@ var SessionManagerCookie = class {
           refreshTokenExpiresAt: subMinutes(addDays(now, 30), 2).getTime()
         };
         cookies__default.default.set(this.storageKey, JSON.stringify(obj), {
-          expires: subMinutes(addDays(now, 30), 2).getTime()
+          expires: subMinutes(addDays(now, 30), 2)
         });
       }
       return {
@@ -8227,7 +8320,7 @@ var SessionManagerCookie = class {
         refreshTokenExpiresAt: subMinutes(addDays(now, 30), 2).getTime()
       };
       cookies__default.default.set(this.storageKey, JSON.stringify(obj), {
-        expires: subMinutes(addDays(now, 30), 2).getTime()
+        expires: subMinutes(addDays(now, 30), 2)
       });
       return {
         ok: true,
@@ -8258,15 +8351,41 @@ var SessionManagerCookie = class {
     return await this.refreshV4(session);
   }
   async refreshV4(session) {
+    if (this.v4RefreshPromise) return await this.v4RefreshPromise;
+    this.v4RefreshPromise = this.requestV4Refresh(session);
+    try {
+      return await this.v4RefreshPromise;
+    } finally {
+      this.v4RefreshPromise = null;
+    }
+  }
+  async requestV4Refresh(session) {
     this.logger.info("Refreshing session...");
+    let refreshToken;
+    if (isIOSPlatform()) {
+      refreshToken = await this.refreshTokenStore.get() ?? void 0;
+      if (!refreshToken) {
+        this.logger.warn("No stored refresh token. Session expired.");
+        this.v4AccessToken = null;
+        this.v4AccessTokenExpiresAt = null;
+        return {
+          ok: false,
+          error: {
+            name: "SessionExpiredError",
+            message: "Session expired."
+          }
+        };
+      }
+    }
     this.refreshing = true;
-    const res = await this.authService.refreshSession(void 0, 4);
+    const res = await this.authService.refreshSession(refreshToken, 4);
     this.refreshing = false;
     if (!res.ok) {
       this.logger.error(`Failed to refresh session: ${res.error.message}`);
       if (res.error.name === "InvalidTokenError" || res.error.name === "AccountBlacklistedError" || res.error.name === "VerificationLockedError" || res.error.name === "SessionExpiredError") {
         this.v4AccessToken = null;
         this.v4AccessTokenExpiresAt = null;
+        await this.refreshTokenStore.remove();
       }
       return {
         ok: false,
@@ -8274,6 +8393,9 @@ var SessionManagerCookie = class {
       };
     }
     this.logger.success("Session refreshed!");
+    if (res.data.refreshToken) {
+      await this.refreshTokenStore.set(res.data.refreshToken);
+    }
     const now = /* @__PURE__ */ new Date();
     this.v4AccessToken = res.data.accessToken;
     this.v4AccessTokenExpiresAt = addMinutes(now, 5).getTime();
@@ -8306,6 +8428,7 @@ var SessionManagerCookie = class {
     }
     this.v4AccessToken = null;
     this.v4AccessTokenExpiresAt = null;
+    await this.refreshTokenStore.remove();
     cookies__default.default.remove(this.storageKey);
   }
   async verify() {
@@ -8349,6 +8472,7 @@ var SessionManagerCookie = class {
       cookies__default.default.remove(this.storageKey);
       this.v4AccessToken = null;
       this.v4AccessTokenExpiresAt = null;
+      await this.refreshTokenStore.remove();
     }
     return v ? { valid: true } : { valid: false, reason: "INVALID_SESSION" };
   }