@opexa/portal-sdk 0.59.95 → 0.59.96

package/dist/index.js

@@ -1,4 +1,4 @@
-import { CmsPortalService, GameService, ExtensionService, FileService, WalletService, AccountService, ReportService, PortalService, TriggerService, AuthService, getFingerPrint } from './chunk-RCMZBLLX.js';
+import { CmsPortalService, GameService, ExtensionService, FileService, WalletService, AccountService, ReportService, PortalService, TriggerService, AuthService, getFingerPrint, isIOSPlatform } from './chunk-MJLXQ6HC.js';
 import { GraphQLClient, isPlainObject } from './chunk-7APXFZ5G.js';
 import './chunk-WVFSGB7Y.js';
 import { ObjectId } from '@opexa/object-id';
@@ -336,6 +336,48 @@ function pollable(func, config) {
   };
 }
 
+// src/sdk/refresh-token-store.ts
+var PreferencesRefreshTokenStore = class {
+  constructor(key, logger) {
+    this.key = key;
+    this.logger = logger;
+  }
+  async preferences() {
+    const { Preferences } = await import('@capacitor/preferences');
+    return Preferences;
+  }
+  async get() {
+    if (!isIOSPlatform()) return null;
+    try {
+      const { value } = await (await this.preferences()).get({ key: this.key });
+      return value ?? null;
+    } catch (err) {
+      this.logger.error(`Failed to read the refresh token: ${err}`);
+      return null;
+    }
+  }
+  async set(token) {
+    if (!isIOSPlatform()) return;
+    try {
+      await (await this.preferences()).set({ key: this.key, value: token });
+    } catch (err) {
+      this.logger.error(`Failed to persist the refresh token: ${err}`);
+    }
+  }
+  async remove() {
+    if (!isIOSPlatform()) return;
+    try {
+      await (await this.preferences()).remove({ key: this.key });
+    } catch (err) {
+      this.logger.error(`Failed to clear the refresh token: ${err}`);
+    }
+  }
+};
+function createRefreshTokenStore(logger, sessionPrefix) {
+  const key = sessionPrefix ? `${sessionPrefix}/session/refresh-token` : "session/refresh-token";
+  return new PreferencesRefreshTokenStore(key, logger);
+}
+
 // src/sdk/session-manager.ts
 var SessionManager = class {
   logger;
@@ -345,17 +387,22 @@ var SessionManager = class {
   walletService;
   _refreshing = false;
   /*
-   * v4 access tokens are never persisted (localStorage/cookie) so that an
-   * XSS-readable storage layer never holds a live access token. They only
-   * live in memory and get re-minted from the HttpOnly refresh cookie.
+   * v4 access tokens live in memory only, so an XSS-readable storage layer
+   * never holds a live one. Re-minted from the HttpOnly cookie, or from
+   * `refreshTokenStore` on iOS.
    */
   v4AccessToken = null;
   v4AccessTokenExpiresAt = null;
   v4RefreshPromise = null;
+  refreshTokenStore;
   constructor(config) {
     this.authService = config.authService;
     this.walletService = config.walletService;
     this.logger = config.logger;
+    this.refreshTokenStore = createRefreshTokenStore(
+      config.logger,
+      config.sessionPrefix
+    );
     if (config.sessionPrefix) {
       this.storageKey = `${config.sessionPrefix}/${this.storageKey}`;
       this.platformStorageKey = `${config.sessionPrefix}/${this.platformStorageKey}`;
@@ -367,7 +414,7 @@ var SessionManager = class {
   set refreshing(value) {
     this._refreshing = value;
   }
-  persist(data, version) {
+  async persist(data, version) {
     const now = /* @__PURE__ */ new Date();
     if (version === 4) {
       if (!data.session || !data.accessToken) {
@@ -378,6 +425,9 @@ var SessionManager = class {
       }
       this.v4AccessToken = data.accessToken;
       this.v4AccessTokenExpiresAt = addMinutes(now, 4).getTime();
+      if (data.refreshToken) {
+        await this.refreshTokenStore.set(data.refreshToken);
+      }
       localStorage.setItem(
         this.storageKey,
         JSON.stringify({ version, session: data.session })
@@ -440,7 +490,8 @@ var SessionManager = class {
         maxAttempt: 5
       })();
       if (!r1.ok) return r1;
-      if (!this.persist(r1.data, version)) return this.malformedResponseError();
+      if (!await this.persist(r1.data, version))
+        return this.malformedResponseError();
       return {
         ok: true,
         data: null
@@ -449,7 +500,7 @@ var SessionManager = class {
     if (input.type === "MOBILE_NUMBER") {
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        if (!this.persist(res2.data, version))
+        if (!await this.persist(res2.data, version))
           return this.malformedResponseError();
         return {
           ok: true,
@@ -468,7 +519,7 @@ var SessionManager = class {
         version
       );
       if (res2.ok) {
-        if (!this.persist(res2.data, version))
+        if (!await this.persist(res2.data, version))
           return this.malformedResponseError();
         return {
           ok: true,
@@ -481,7 +532,7 @@ var SessionManager = class {
       localStorage.setItem(this.platformStorageKey, "CABINET");
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        if (!this.persist(res2.data, version))
+        if (!await this.persist(res2.data, version))
           return this.malformedResponseError();
         return {
           ok: true,
@@ -500,7 +551,8 @@ var SessionManager = class {
         }
       };
     }
-    if (!this.persist(res.data, version)) return this.malformedResponseError();
+    if (!await this.persist(res.data, version))
+      return this.malformedResponseError();
     return {
       ok: true,
       data: null
@@ -511,7 +563,7 @@ var SessionManager = class {
     if (res.ok) {
       if (this.isServer) {
         this.logger.warn("'localStorage' is not available on the server.");
-      } else if (!this.persist(res.data, 1)) {
+      } else if (!await this.persist(res.data, 1)) {
         return this.malformedResponseError();
       }
       return { ok: true };
@@ -701,14 +753,31 @@ var SessionManager = class {
   }
   async requestV4Refresh(session) {
     this.logger.info("Refreshing session...");
+    let refreshToken;
+    if (isIOSPlatform()) {
+      refreshToken = await this.refreshTokenStore.get() ?? void 0;
+      if (!refreshToken) {
+        this.logger.warn("No stored refresh token. Session expired.");
+        this.v4AccessToken = null;
+        this.v4AccessTokenExpiresAt = null;
+        return {
+          ok: false,
+          error: {
+            name: "SessionExpiredError",
+            message: "Session expired."
+          }
+        };
+      }
+    }
     this.refreshing = true;
-    const res = await this.authService.refreshSession(void 0, 4);
+    const res = await this.authService.refreshSession(refreshToken, 4);
     this.refreshing = false;
     if (!res.ok) {
       this.logger.error(`Failed to refresh session: ${res.error.message}`);
       if (res.error.name === "InvalidTokenError" || res.error.name === "AccountBlacklistedError" || res.error.name === "VerificationLockedError" || res.error.name === "SessionExpiredError") {
         this.v4AccessToken = null;
         this.v4AccessTokenExpiresAt = null;
+        await this.refreshTokenStore.remove();
       }
       return {
         ok: false,
@@ -716,6 +785,9 @@ var SessionManager = class {
       };
     }
     this.logger.success("Session refreshed!");
+    if (res.data.refreshToken) {
+      await this.refreshTokenStore.set(res.data.refreshToken);
+    }
     const now = /* @__PURE__ */ new Date();
     this.v4AccessToken = res.data.accessToken;
     this.v4AccessTokenExpiresAt = addMinutes(now, 4).getTime();
@@ -748,6 +820,7 @@ var SessionManager = class {
     }
     this.v4AccessToken = null;
     this.v4AccessTokenExpiresAt = null;
+    await this.refreshTokenStore.remove();
     localStorage.removeItem(this.storageKey);
   }
   async verify() {
@@ -791,6 +864,7 @@ var SessionManager = class {
       localStorage.removeItem(this.storageKey);
       this.v4AccessToken = null;
       this.v4AccessTokenExpiresAt = null;
+      await this.refreshTokenStore.remove();
     }
     return v ? { valid: true } : { valid: false, reason: "INVALID_SESSION" };
   }
@@ -820,16 +894,19 @@ var SessionManagerCookie = class {
   walletService;
   _refreshing = false;
   /*
-   * v4 access tokens are never persisted (localStorage/cookie) so that an
-   * XSS-readable storage layer never holds a live access token. They only
-   * live in memory and get re-minted from the HttpOnly refresh cookie.
+   * v4 access tokens live in memory only, so an XSS-readable storage layer
+   * never holds a live one. Re-minted from the HttpOnly cookie, or from
+   * `refreshTokenStore` on iOS.
    */
   v4AccessToken = null;
   v4AccessTokenExpiresAt = null;
+  v4RefreshPromise = null;
+  refreshTokenStore;
   constructor(config) {
     this.authService = config.authService;
     this.walletService = config.walletService;
     this.logger = config.logger;
+    this.refreshTokenStore = createRefreshTokenStore(config.logger);
   }
   get refreshing() {
     return this._refreshing;
@@ -837,15 +914,18 @@ var SessionManagerCookie = class {
   set refreshing(value) {
     this._refreshing = value;
   }
-  persist(data, version) {
+  async persist(data, version) {
     const now = /* @__PURE__ */ new Date();
     if (version === 4) {
       this.v4AccessToken = data.accessToken ?? null;
       this.v4AccessTokenExpiresAt = addMinutes(now, 5).getTime();
+      if (data.refreshToken) {
+        await this.refreshTokenStore.set(data.refreshToken);
+      }
       cookies.set(
         this.storageKey,
         JSON.stringify({ version, session: data.session }),
-        { expires: subMinutes(addDays(now, 15), 2).getTime() }
+        { expires: subMinutes(addDays(now, 15), 2) }
       );
       return;
     }
@@ -857,7 +937,7 @@ var SessionManagerCookie = class {
         accessTokenExpiresAt: addMinutes(now, 8).getTime(),
         refreshTokenExpiresAt: subMinutes(addDays(now, 30), 2).getTime()
       }),
-      { expires: subMinutes(addDays(now, 30), 2).getTime() }
+      { expires: subMinutes(addDays(now, 30), 2) }
     );
   }
   async create(input, version = 1) {
@@ -886,7 +966,7 @@ var SessionManagerCookie = class {
         maxAttempt: 5
       })();
       if (!r1.ok) return r1;
-      this.persist(r1.data, version);
+      await this.persist(r1.data, version);
       return {
         ok: true,
         data: null
@@ -895,7 +975,7 @@ var SessionManagerCookie = class {
     if (input.type === "MOBILE_NUMBER") {
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        this.persist(res2.data, version);
+        await this.persist(res2.data, version);
         return {
           ok: true,
           data: null
@@ -912,7 +992,7 @@ var SessionManagerCookie = class {
         version
       );
       if (res2.ok) {
-        this.persist(res2.data, version);
+        await this.persist(res2.data, version);
         return {
           ok: true,
           data: null
@@ -924,7 +1004,7 @@ var SessionManagerCookie = class {
       localStorage.setItem(this.platformStorageKey, "CABINET");
       const res2 = await this.authService.createSession(input, version);
       if (res2.ok) {
-        this.persist(res2.data, version);
+        await this.persist(res2.data, version);
         return {
           ok: true,
           data: null
@@ -942,7 +1022,7 @@ var SessionManagerCookie = class {
         }
       };
     }
-    this.persist(res.data, version);
+    await this.persist(res.data, version);
     return {
       ok: true,
       data: null
@@ -954,7 +1034,7 @@ var SessionManagerCookie = class {
       if (this.isServer) {
         this.logger.warn("'client cookies' is not available on the server.");
       } else {
-        this.persist(res.data, 1);
+        await this.persist(res.data, 1);
       }
       return { ok: true };
     } else {
@@ -1034,7 +1114,7 @@ var SessionManagerCookie = class {
           refreshTokenExpiresAt: subMinutes(addDays(now, 30), 2).getTime()
         };
         cookies.set(this.storageKey, JSON.stringify(obj), {
-          expires: subMinutes(addDays(now, 30), 2).getTime()
+          expires: subMinutes(addDays(now, 30), 2)
         });
       }
       return {
@@ -1106,7 +1186,7 @@ var SessionManagerCookie = class {
         refreshTokenExpiresAt: subMinutes(addDays(now, 30), 2).getTime()
       };
       cookies.set(this.storageKey, JSON.stringify(obj), {
-        expires: subMinutes(addDays(now, 30), 2).getTime()
+        expires: subMinutes(addDays(now, 30), 2)
       });
       return {
         ok: true,
@@ -1137,15 +1217,41 @@ var SessionManagerCookie = class {
     return await this.refreshV4(session);
   }
   async refreshV4(session) {
+    if (this.v4RefreshPromise) return await this.v4RefreshPromise;
+    this.v4RefreshPromise = this.requestV4Refresh(session);
+    try {
+      return await this.v4RefreshPromise;
+    } finally {
+      this.v4RefreshPromise = null;
+    }
+  }
+  async requestV4Refresh(session) {
     this.logger.info("Refreshing session...");
+    let refreshToken;
+    if (isIOSPlatform()) {
+      refreshToken = await this.refreshTokenStore.get() ?? void 0;
+      if (!refreshToken) {
+        this.logger.warn("No stored refresh token. Session expired.");
+        this.v4AccessToken = null;
+        this.v4AccessTokenExpiresAt = null;
+        return {
+          ok: false,
+          error: {
+            name: "SessionExpiredError",
+            message: "Session expired."
+          }
+        };
+      }
+    }
     this.refreshing = true;
-    const res = await this.authService.refreshSession(void 0, 4);
+    const res = await this.authService.refreshSession(refreshToken, 4);
     this.refreshing = false;
     if (!res.ok) {
       this.logger.error(`Failed to refresh session: ${res.error.message}`);
       if (res.error.name === "InvalidTokenError" || res.error.name === "AccountBlacklistedError" || res.error.name === "VerificationLockedError" || res.error.name === "SessionExpiredError") {
         this.v4AccessToken = null;
         this.v4AccessTokenExpiresAt = null;
+        await this.refreshTokenStore.remove();
       }
       return {
         ok: false,
@@ -1153,6 +1259,9 @@ var SessionManagerCookie = class {
       };
     }
     this.logger.success("Session refreshed!");
+    if (res.data.refreshToken) {
+      await this.refreshTokenStore.set(res.data.refreshToken);
+    }
     const now = /* @__PURE__ */ new Date();
     this.v4AccessToken = res.data.accessToken;
     this.v4AccessTokenExpiresAt = addMinutes(now, 5).getTime();
@@ -1185,6 +1294,7 @@ var SessionManagerCookie = class {
     }
     this.v4AccessToken = null;
     this.v4AccessTokenExpiresAt = null;
+    await this.refreshTokenStore.remove();
     cookies.remove(this.storageKey);
   }
   async verify() {
@@ -1228,6 +1338,7 @@ var SessionManagerCookie = class {
       cookies.remove(this.storageKey);
       this.v4AccessToken = null;
       this.v4AccessTokenExpiresAt = null;
+      await this.refreshTokenStore.remove();
     }
     return v ? { valid: true } : { valid: false, reason: "INVALID_SESSION" };
   }