@ovok/core 0.4.38 → 0.4.39

package/dist/client/auth/session-fetch.js

@@ -71,7 +71,7 @@ function createSessionFetch({ config, storage, fetchImplementation, normalizedBa
             : (0, session_http_1.withHttpErrorMetadata)(response);
     };
     const fetchWithRefreshRetry = async (url, options) => {
-        var _a, _b, _c, _d;
+        var _a, _b, _c, _d, _e;
         const requestUrl = new URL(url, normalizedBaseUrl);
         if (!isTokenRefresh(url, options)) {
             const response = await fetchOnce(url, options);
@@ -166,10 +166,9 @@ function createSessionFetch({ config, storage, fetchImplementation, normalizedBa
         };
         if (config.keepSessionOnRefreshUnavailable) {
             refreshState.unavailable = true;
-            if (lastResponse) {
-                return lastResponse;
-            }
-            throw lastNetworkError !== null && lastNetworkError !== void 0 ? lastNetworkError : (0, session_http_1.refreshUnavailableError)(undefined);
+            // Medplum clears the login on any token response that isn't OK, so a 429 or 5xx goes back as a network error.
+            void ((_d = lastResponse === null || lastResponse === void 0 ? void 0 : lastResponse.body) === null || _d === void 0 ? void 0 : _d.cancel().catch(() => undefined));
+            throw lastNetworkError !== null && lastNetworkError !== void 0 ? lastNetworkError : (0, session_http_1.refreshUnavailableError)(lastResponse);
         }
         unauthenticatedReason = reason;
         markActiveAccountExpired();
@@ -179,7 +178,7 @@ function createSessionFetch({ config, storage, fetchImplementation, normalizedBa
         terminalRefreshToken = login === null || login === void 0 ? void 0 : login.accessToken;
         terminalRefreshError = lastNetworkError !== null && lastNetworkError !== void 0 ? lastNetworkError : (0, session_http_1.refreshUnavailableError)(undefined);
         clearActiveLogin();
-        (_d = config.onUnauthenticated) === null || _d === void 0 ? void 0 : _d.call(config, reason);
+        (_e = config.onUnauthenticated) === null || _e === void 0 ? void 0 : _e.call(config, reason);
         unauthenticatedReason = undefined;
         throw terminalRefreshError;
     };

package/dist/client/ovok-client.d.ts

@@ -50,6 +50,8 @@ export declare class OvokClient extends MedplumClient {
     private readonly keepSessionOnRefreshUnavailable;
     private readonly refreshState;
     private offlineMeasurementQueue;
+    private profileRetry;
+    private profileRetryMs;
     /**
      * @param config - The configuration for the client.
      * @param config.socialLoginClientId - The social login client id to use for the client.
@@ -57,6 +59,12 @@ export declare class OvokClient extends MedplumClient {
     constructor(config: OvokClientOptions);
     get<T = unknown>(url: URL | string, options?: MedplumRequestOptions): ReadablePromise<T>;
     refreshIfExpired(gracePeriod?: number): Promise<void>;
+    /** A profile load that failed is tried again now, rather than answering with its old error. */
+    getProfileAsync(): ReturnType<MedplumClient["getProfileAsync"]>;
+    clearActiveLogin(): void;
+    /** While signed in without a profile, a failed load is tried again: after 2 s, doubling to a minute. */
+    private retryProfileOnFailure;
+    private cancelProfileRetry;
     post<T = unknown>(url: URL | string, body?: unknown, contentType?: string, options?: MedplumRequestOptions): Promise<T>;
     /** Lists saved accounts without exposing their access or refresh tokens. */
     getSavedAccounts(): OvokSavedAccount[];

package/dist/client/ovok-client.js

@@ -69,6 +69,9 @@ var observation_bundle_utils_2 = require("./observation/observation-bundle-utils
 Object.defineProperty(exports, "MAX_CONDITIONAL_OBSERVATION_ENTRIES", { enumerable: true, get: function () { return observation_bundle_utils_2.MAX_CONDITIONAL_OBSERVATION_ENTRIES; } });
 Object.defineProperty(exports, "MAX_OBSERVATION_BUNDLE_BYTES", { enumerable: true, get: function () { return observation_bundle_utils_2.MAX_OBSERVATION_BUNDLE_BYTES; } });
 const isRetrySafePost = (pathname) => pathname === "/ai/fhir/search";
+/** A failed profile load is tried again after this long, doubling up to the maximum. */
+const PROFILE_RETRY_MS = 2000;
+const PROFILE_RETRY_MAX_MS = 60000;
 class OvokClient extends core_1.MedplumClient {
     /**
      * @param config - The configuration for the client.
@@ -92,7 +95,22 @@ class OvokClient extends core_1.MedplumClient {
             fetch: session.fetch,
         });
         this.socialLoginClientId = "";
+        this.profileRetryMs = PROFILE_RETRY_MS;
         session.setClearActiveLogin(this.clearActiveLogin.bind(this));
+        // Medplum keeps a failed `auth/me` as the profile for good: `isLoading()` stays true and `getProfileAsync()`
+        // keeps rejecting. So a failed load is tried again while signed in.
+        const loader = this;
+        const refreshProfile = loader.refreshProfile.bind(this);
+        loader.refreshProfile = () => {
+            this.cancelProfileRetry();
+            const loading = refreshProfile();
+            this.retryProfileOnFailure(loading);
+            return loading;
+        };
+        // A saved session resumed inside super() started loading before the retry existed.
+        if (loader.profilePromise) {
+            this.retryProfileOnFailure(loader.profilePromise);
+        }
         this.hasExplicitStorageAdapter = config.storage !== undefined;
         this.clientOptions = config;
         this.keepSessionOnRefreshUnavailable = config.keepSessionOnRefreshUnavailable === true;
@@ -131,7 +149,6 @@ class OvokClient extends core_1.MedplumClient {
         return request;
     }
     async refreshIfExpired(gracePeriod) {
-        var _a;
         const activeLogin = this.getActiveLogin();
         const accessToken = this.getAccessToken();
         const expiresAt = accessToken ? (0, core_1.tryGetJwtExpiration)(accessToken) : undefined;
@@ -147,9 +164,7 @@ class OvokClient extends core_1.MedplumClient {
                 !(activeAccount === null || activeAccount === void 0 ? void 0 : activeAccount.expired) &&
                 expiresAt !== undefined &&
                 expiresAt > Date.now()) {
-                (_a = this.clientStorage) === null || _a === void 0 ? void 0 : _a.setObject(account_storage_1.ACTIVE_LOGIN_STORAGE_KEY, activeLogin);
-                this.setAccessToken(accessToken, activeLogin.refreshToken);
-                return;
+                return; // the still-valid access token carries the request
             }
             throw error;
         }
@@ -157,6 +172,37 @@ class OvokClient extends core_1.MedplumClient {
             this.refreshState.unavailable = false;
         }
     }
+    /** A profile load that failed is tried again now, rather than answering with its old error. */
+    getProfileAsync() {
+        return this.profileRetry
+            ? this.refreshProfile()
+            : super.getProfileAsync();
+    }
+    clearActiveLogin() {
+        this.cancelProfileRetry();
+        super.clearActiveLogin();
+    }
+    /** While signed in without a profile, a failed load is tried again: after 2 s, doubling to a minute. */
+    retryProfileOnFailure(loading) {
+        loading.then(() => {
+            this.profileRetryMs = PROFILE_RETRY_MS;
+        }, () => {
+            var _a, _b;
+            if (!this.getActiveLogin() || this.getProfile()) {
+                return;
+            }
+            const retry = setTimeout(() => {
+                void this.refreshProfile().catch(() => undefined);
+            }, this.profileRetryMs);
+            (_b = (_a = retry).unref) === null || _b === void 0 ? void 0 : _b.call(_a); // never keeps a Node process alive
+            this.profileRetry = retry;
+            this.profileRetryMs = Math.min(this.profileRetryMs * 2, PROFILE_RETRY_MAX_MS);
+        });
+    }
+    cancelProfileRetry() {
+        clearTimeout(this.profileRetry);
+        this.profileRetry = undefined;
+    }
     post(url, body, contentType, options) {
         const pathname = new URL(url.toString(), this.getBaseUrl()).pathname;
         if (!isRetrySafePost(pathname)) {

package/dist/conformance/capability-requirements.js

@@ -48,7 +48,7 @@ exports.OVOK_CORE_REQUIREMENTS = {
     description: "The FHIR surface a server must provide for the @ovok/core client library's own methods to function.",
     software: {
         name: "@ovok/core",
-        version: "0.4.38",
+        version: "0.4.39",
     },
     fhirVersion: "4.0.1",
     format: ["json"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ovok/core",
-  "version": "0.4.38",
+  "version": "0.4.39",
   "private": false,
   "main": "dist/index.js",
   "types": "dist/index.d.ts",