@oxyhq/services 5.27.0 → 6.0.1

package/lib/module/core/AuthManager.js

@@ -1,399 +0,0 @@
-"use strict";
-
-/**
- * AuthManager - Centralized Authentication Manager
- *
- * Provides a unified authentication interface for all platforms.
- * Handles token storage, session management, and auth state changes.
- *
- * @module core/AuthManager
- */
-
-/**
- * OxyServices with optional FedCM methods (provided by FedCM mixin).
- */
-
-/**
- * Storage adapter interface for platform-agnostic storage.
- */
-
-/**
- * Auth state change callback type.
- */
-
-/**
- * Auth method types.
- */
-
-/**
- * Auth manager configuration.
- */
-
-/**
- * Storage keys used by AuthManager.
- */
-const STORAGE_KEYS = {
-  ACCESS_TOKEN: 'oxy_access_token',
-  REFRESH_TOKEN: 'oxy_refresh_token',
-  SESSION: 'oxy_session',
-  USER: 'oxy_user',
-  AUTH_METHOD: 'oxy_auth_method'
-};
-
-/**
- * Default in-memory storage for non-browser environments.
- */
-class MemoryStorage {
-  store = new Map();
-  getItem(key) {
-    return this.store.get(key) ?? null;
-  }
-  setItem(key, value) {
-    this.store.set(key, value);
-  }
-  removeItem(key) {
-    this.store.delete(key);
-  }
-}
-
-/**
- * Browser localStorage adapter.
- */
-class LocalStorageAdapter {
-  getItem(key) {
-    if (typeof window === 'undefined') return null;
-    try {
-      return localStorage.getItem(key);
-    } catch {
-      return null;
-    }
-  }
-  setItem(key, value) {
-    if (typeof window === 'undefined') return;
-    try {
-      localStorage.setItem(key, value);
-    } catch {
-      // Storage full or blocked
-    }
-  }
-  removeItem(key) {
-    if (typeof window === 'undefined') return;
-    try {
-      localStorage.removeItem(key);
-    } catch {
-      // Ignore errors
-    }
-  }
-}
-
-/**
- * AuthManager - Centralized authentication management.
- *
- * Provides a single point of control for:
- * - Token storage and retrieval
- * - Session management
- * - Auth state change notifications
- * - Multiple auth method support
- *
- * @example
- * ```typescript
- * const authManager = new AuthManager(oxyServices);
- *
- * // Listen for auth changes
- * authManager.onAuthStateChange((user) => {
- *   console.log('Auth state changed:', user);
- * });
- *
- * // Handle successful auth
- * await authManager.handleAuthSuccess(session);
- *
- * // Sign out
- * await authManager.signOut();
- * ```
- */
-export class AuthManager {
-  listeners = new Set();
-  currentUser = null;
-  refreshTimer = null;
-  constructor(oxyServices, config = {}) {
-    this.oxyServices = oxyServices;
-    this.config = {
-      storage: config.storage ?? this.getDefaultStorage(),
-      autoRefresh: config.autoRefresh ?? true,
-      refreshBuffer: config.refreshBuffer ?? 5 * 60 * 1000 // 5 minutes
-    };
-    this.storage = this.config.storage;
-  }
-
-  /**
-   * Get default storage based on environment.
-   */
-  getDefaultStorage() {
-    if (typeof window !== 'undefined' && window.localStorage) {
-      return new LocalStorageAdapter();
-    }
-    return new MemoryStorage();
-  }
-
-  /**
-   * Subscribe to auth state changes.
-   *
-   * @param callback - Function called when auth state changes
-   * @returns Unsubscribe function
-   */
-  onAuthStateChange(callback) {
-    this.listeners.add(callback);
-    // Call immediately with current state
-    callback(this.currentUser);
-    return () => {
-      this.listeners.delete(callback);
-    };
-  }
-
-  /**
-   * Notify all listeners of auth state change.
-   */
-  notifyListeners() {
-    for (const listener of this.listeners) {
-      try {
-        listener(this.currentUser);
-      } catch {
-        // Ignore listener errors
-      }
-    }
-  }
-
-  /**
-   * Handle successful authentication.
-   *
-   * @param session - Session response from auth
-   * @param method - Auth method used
-   */
-  async handleAuthSuccess(session, method = 'credentials') {
-    // Store tokens
-    if (session.accessToken) {
-      await this.storage.setItem(STORAGE_KEYS.ACCESS_TOKEN, session.accessToken);
-      this.oxyServices.httpService.setTokens(session.accessToken);
-    }
-
-    // Store refresh token if available
-    if (session.refreshToken) {
-      await this.storage.setItem(STORAGE_KEYS.REFRESH_TOKEN, session.refreshToken);
-    }
-
-    // Store session info
-    await this.storage.setItem(STORAGE_KEYS.SESSION, JSON.stringify({
-      sessionId: session.sessionId,
-      deviceId: session.deviceId,
-      expiresAt: session.expiresAt
-    }));
-
-    // Store user only if it has valid required fields (not an empty placeholder)
-    if (session.user && typeof session.user.id === 'string' && session.user.id.length > 0) {
-      await this.storage.setItem(STORAGE_KEYS.USER, JSON.stringify(session.user));
-      this.currentUser = session.user;
-    }
-
-    // Store auth method
-    await this.storage.setItem(STORAGE_KEYS.AUTH_METHOD, method);
-
-    // Setup auto-refresh if enabled
-    if (this.config.autoRefresh && session.expiresAt) {
-      this.setupTokenRefresh(session.expiresAt);
-    }
-
-    // Notify listeners
-    this.notifyListeners();
-  }
-
-  /**
-   * Setup automatic token refresh.
-   */
-  setupTokenRefresh(expiresAt) {
-    if (this.refreshTimer) {
-      clearTimeout(this.refreshTimer);
-    }
-    const expiresAtMs = new Date(expiresAt).getTime();
-    const now = Date.now();
-    const refreshAt = expiresAtMs - this.config.refreshBuffer;
-    const delay = Math.max(0, refreshAt - now);
-    if (delay > 0) {
-      this.refreshTimer = setTimeout(() => {
-        this.refreshToken().catch(() => {
-          // Refresh failed, user will need to re-auth
-        });
-      }, delay);
-    }
-  }
-
-  /**
-   * Refresh the access token.
-   */
-  async refreshToken() {
-    const refreshToken = await this.storage.getItem(STORAGE_KEYS.REFRESH_TOKEN);
-    if (!refreshToken) {
-      return false;
-    }
-    try {
-      // Cast httpService to proper type (needed due to mixin composition)
-      const httpService = this.oxyServices.httpService;
-      const response = await httpService.request({
-        method: 'POST',
-        url: '/api/auth/refresh',
-        data: {
-          refreshToken
-        },
-        cache: false
-      });
-      await this.handleAuthSuccess(response, 'credentials');
-      return true;
-    } catch {
-      // Refresh failed, clear session and update state
-      await this.clearSession();
-      this.currentUser = null;
-      this.notifyListeners();
-      return false;
-    }
-  }
-
-  /**
-   * Sign out and clear all auth data.
-   */
-  async signOut() {
-    // Clear refresh timer
-    if (this.refreshTimer) {
-      clearTimeout(this.refreshTimer);
-      this.refreshTimer = null;
-    }
-
-    // Revoke FedCM credential if supported
-    try {
-      const services = this.oxyServices;
-      if (services.revokeFedCMCredential) {
-        await services.revokeFedCMCredential();
-      }
-    } catch {
-      // Ignore FedCM errors
-    }
-
-    // Clear HTTP client tokens
-    this.oxyServices.httpService.setTokens('');
-
-    // Clear storage
-    await this.clearSession();
-
-    // Update state and notify
-    this.currentUser = null;
-    this.notifyListeners();
-  }
-
-  /**
-   * Clear session data from storage.
-   */
-  async clearSession() {
-    await this.storage.removeItem(STORAGE_KEYS.ACCESS_TOKEN);
-    await this.storage.removeItem(STORAGE_KEYS.REFRESH_TOKEN);
-    await this.storage.removeItem(STORAGE_KEYS.SESSION);
-    await this.storage.removeItem(STORAGE_KEYS.USER);
-    await this.storage.removeItem(STORAGE_KEYS.AUTH_METHOD);
-  }
-
-  /**
-   * Get current user.
-   */
-  getCurrentUser() {
-    return this.currentUser;
-  }
-
-  /**
-   * Check if user is authenticated.
-   */
-  isAuthenticated() {
-    return this.currentUser !== null;
-  }
-
-  /**
-   * Get stored access token.
-   */
-  async getAccessToken() {
-    return this.storage.getItem(STORAGE_KEYS.ACCESS_TOKEN);
-  }
-
-  /**
-   * Get the auth method used for current session.
-   */
-  async getAuthMethod() {
-    const method = await this.storage.getItem(STORAGE_KEYS.AUTH_METHOD);
-    return method;
-  }
-
-  /**
-   * Initialize auth state from storage.
-   *
-   * Call this on app startup to restore previous session.
-   */
-  async initialize() {
-    try {
-      // Try to restore user from storage
-      const userJson = await this.storage.getItem(STORAGE_KEYS.USER);
-      if (userJson) {
-        this.currentUser = JSON.parse(userJson);
-      }
-
-      // Restore token to HTTP client
-      const token = await this.storage.getItem(STORAGE_KEYS.ACCESS_TOKEN);
-      if (token) {
-        this.oxyServices.httpService.setTokens(token);
-      }
-
-      // Check session expiry
-      const sessionJson = await this.storage.getItem(STORAGE_KEYS.SESSION);
-      if (sessionJson) {
-        const session = JSON.parse(sessionJson);
-        if (session.expiresAt) {
-          const expiresAt = new Date(session.expiresAt).getTime();
-          if (expiresAt <= Date.now()) {
-            // Session expired, try refresh
-            const refreshed = await this.refreshToken();
-            if (!refreshed) {
-              await this.clearSession();
-              this.currentUser = null;
-            }
-          } else if (this.config.autoRefresh) {
-            // Setup refresh timer
-            this.setupTokenRefresh(session.expiresAt);
-          }
-        }
-      }
-      return this.currentUser;
-    } catch {
-      // Failed to restore, start fresh
-      await this.clearSession();
-      this.currentUser = null;
-      return null;
-    }
-  }
-
-  /**
-   * Destroy the auth manager and clean up resources.
-   */
-  destroy() {
-    if (this.refreshTimer) {
-      clearTimeout(this.refreshTimer);
-      this.refreshTimer = null;
-    }
-    this.listeners.clear();
-  }
-}
-
-/**
- * Create an AuthManager instance.
- *
- * @param oxyServices - OxyServices instance
- * @param config - Optional configuration
- * @returns AuthManager instance
- */
-export function createAuthManager(oxyServices, config) {
-  return new AuthManager(oxyServices, config);
-}
-//# sourceMappingURL=AuthManager.js.map

package/lib/module/core/AuthManager.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["STORAGE_KEYS","ACCESS_TOKEN","REFRESH_TOKEN","SESSION","USER","AUTH_METHOD","MemoryStorage","store","Map","getItem","key","get","setItem","value","set","removeItem","delete","LocalStorageAdapter","window","localStorage","AuthManager","listeners","Set","currentUser","refreshTimer","constructor","oxyServices","config","storage","getDefaultStorage","autoRefresh","refreshBuffer","onAuthStateChange","callback","add","notifyListeners","listener","handleAuthSuccess","session","method","accessToken","httpService","setTokens","refreshToken","JSON","stringify","sessionId","deviceId","expiresAt","user","id","length","setupTokenRefresh","clearTimeout","expiresAtMs","Date","getTime","now","refreshAt","delay","Math","max","setTimeout","catch","response","request","url","data","cache","clearSession","signOut","services","revokeFedCMCredential","getCurrentUser","isAuthenticated","getAccessToken","getAuthMethod","initialize","userJson","parse","token","sessionJson","refreshed","destroy","clear","createAuthManager"],"sourceRoot":"../../../src","sources":["core/AuthManager.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;AACA;AACA;;AAKA;AACA;AACA;;AAOA;AACA;AACA;;AAGA;AACA;AACA;;AAGA;AACA;AACA;;AAUA;AACA;AACA;AACA,MAAMA,YAAY,GAAG;EACnBC,YAAY,EAAE,kBAAkB;EAChCC,aAAa,EAAE,mBAAmB;EAClCC,OAAO,EAAE,aAAa;EACtBC,IAAI,EAAE,UAAU;EAChBC,WAAW,EAAE;AACf,CAAU;;AAEV;AACA;AACA;AACA,MAAMC,aAAa,CAA2B;EACpCC,KAAK,GAAG,IAAIC,GAAG,CAAiB,CAAC;EAEzCC,OAAOA,CAACC,GAAW,EAAiB;IAClC,OAAO,IAAI,CAACH,KAAK,CAACI,GAAG,CAACD,GAAG,CAAC,IAAI,IAAI;EACpC;EAEAE,OAAOA,CAACF,GAAW,EAAEG,KAAa,EAAQ;IACxC,IAAI,CAACN,KAAK,CAACO,GAAG,CAACJ,GAAG,EAAEG,KAAK,CAAC;EAC5B;EAEAE,UAAUA,CAACL,GAAW,EAAQ;IAC5B,IAAI,CAACH,KAAK,CAACS,MAAM,CAACN,GAAG,CAAC;EACxB;AACF;;AAEA;AACA;AACA;AACA,MAAMO,mBAAmB,CAA2B;EAClDR,OAAOA,CAACC,GAAW,EAAiB;IAClC,IAAI,OAAOQ,MAAM,KAAK,WAAW,EAAE,OAAO,IAAI;IAC9C,IAAI;MACF,OAAOC,YAAY,CAACV,OAAO,CAACC,GAAG,CAAC;IAClC,CAAC,CAAC,MAAM;MACN,OAAO,IAAI;IACb;EACF;EAEAE,OAAOA,CAACF,GAAW,EAAEG,KAAa,EAAQ;IACxC,IAAI,OAAOK,MAAM,KAAK,WAAW,EAAE;IACnC,IAAI;MACFC,YAAY,CAACP,OAAO,CAACF,GAAG,EAAEG,KAAK,CAAC;IAClC,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;EAEAE,UAAUA,CAACL,GAAW,EAAQ;IAC5B,IAAI,OAAOQ,MAAM,KAAK,WAAW,EAAE;IACnC,IAAI;MACFC,YAAY,CAACJ,UAAU,CAACL,GAAG,CAAC;IAC9B,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMU,WAAW,CAAC;EAGfC,SAAS,GAAiC,IAAIC,GAAG,CAAC,CAAC;EACnDC,WAAW,GAA2B,IAAI;EAC1CC,YAAY,GAAyC,IAAI;EAGjEC,WAAWA,CAACC,WAAwB,EAAEC,MAAyB,GAAG,CAAC,CAAC,EAAE;IACpE,IAAI,CAACD,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,MAAM,GAAG;MACZC,OAAO,EAAED,MAAM,CAACC,OAAO,IAAI,IAAI,CAACC,iBAAiB,CAAC,CAAC;MACnDC,WAAW,EAAEH,MAAM,CAACG,WAAW,IAAI,IAAI;MACvCC,aAAa,EAAEJ,MAAM,CAACI,aAAa,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAE;IACxD,CAAC;IACD,IAAI,CAACH,OAAO,GAAG,IAAI,CAACD,MAAM,CAACC,OAAO;EACpC;;EAEA;AACF;AACA;EACUC,iBAAiBA,CAAA,EAAmB;IAC1C,IAAI,OAAOX,MAAM,KAAK,WAAW,IAAIA,MAAM,CAACC,YAAY,EAAE;MACxD,OAAO,IAAIF,mBAAmB,CAAC,CAAC;IAClC;IACA,OAAO,IAAIX,aAAa,CAAC,CAAC;EAC5B;;EAEA;AACF;AACA;AACA;AACA;AACA;EACE0B,iBAAiBA,CAACC,QAAiC,EAAc;IAC/D,IAAI,CAACZ,SAAS,CAACa,GAAG,CAACD,QAAQ,CAAC;IAC5B;IACAA,QAAQ,CAAC,IAAI,CAACV,WAAW,CAAC;IAC1B,OAAO,MAAM;MACX,IAAI,CAACF,SAAS,CAACL,MAAM,CAACiB,QAAQ,CAAC;IACjC,CAAC;EACH;;EAEA;AACF;AACA;EACUE,eAAeA,CAAA,EAAS;IAC9B,KAAK,MAAMC,QAAQ,IAAI,IAAI,CAACf,SAAS,EAAE;MACrC,IAAI;QACFe,QAAQ,CAAC,IAAI,CAACb,WAAW,CAAC;MAC5B,CAAC,CAAC,MAAM;QACN;MAAA;IAEJ;EACF;;EAEA;AACF;AACA;AACA;AACA;AACA;EACE,MAAMc,iBAAiBA,CACrBC,OAA6B,EAC7BC,MAAkB,GAAG,aAAa,EACnB;IACf;IACA,IAAID,OAAO,CAACE,WAAW,EAAE;MACvB,MAAM,IAAI,CAACZ,OAAO,CAAChB,OAAO,CAACZ,YAAY,CAACC,YAAY,EAAEqC,OAAO,CAACE,WAAW,CAAC;MAC1E,IAAI,CAACd,WAAW,CAACe,WAAW,CAACC,SAAS,CAACJ,OAAO,CAACE,WAAW,CAAC;IAC7D;;IAEA;IACA,IAAIF,OAAO,CAACK,YAAY,EAAE;MACxB,MAAM,IAAI,CAACf,OAAO,CAAChB,OAAO,CAACZ,YAAY,CAACE,aAAa,EAAEoC,OAAO,CAACK,YAAY,CAAC;IAC9E;;IAEA;IACA,MAAM,IAAI,CAACf,OAAO,CAAChB,OAAO,CAACZ,YAAY,CAACG,OAAO,EAAEyC,IAAI,CAACC,SAAS,CAAC;MAC9DC,SAAS,EAAER,OAAO,CAACQ,SAAS;MAC5BC,QAAQ,EAAET,OAAO,CAACS,QAAQ;MAC1BC,SAAS,EAAEV,OAAO,CAACU;IACrB,CAAC,CAAC,CAAC;;IAEH;IACA,IAAIV,OAAO,CAACW,IAAI,IAAI,OAAQX,OAAO,CAACW,IAAI,CAASC,EAAE,KAAK,QAAQ,IAAKZ,OAAO,CAACW,IAAI,CAASC,EAAE,CAACC,MAAM,GAAG,CAAC,EAAE;MACvG,MAAM,IAAI,CAACvB,OAAO,CAAChB,OAAO,CAACZ,YAAY,CAACI,IAAI,EAAEwC,IAAI,CAACC,SAAS,CAACP,OAAO,CAACW,IAAI,CAAC,CAAC;MAC3E,IAAI,CAAC1B,WAAW,GAAGe,OAAO,CAACW,IAAI;IACjC;;IAEA;IACA,MAAM,IAAI,CAACrB,OAAO,CAAChB,OAAO,CAACZ,YAAY,CAACK,WAAW,EAAEkC,MAAM,CAAC;;IAE5D;IACA,IAAI,IAAI,CAACZ,MAAM,CAACG,WAAW,IAAIQ,OAAO,CAACU,SAAS,EAAE;MAChD,IAAI,CAACI,iBAAiB,CAACd,OAAO,CAACU,SAAS,CAAC;IAC3C;;IAEA;IACA,IAAI,CAACb,eAAe,CAAC,CAAC;EACxB;;EAEA;AACF;AACA;EACUiB,iBAAiBA,CAACJ,SAAiB,EAAQ;IACjD,IAAI,IAAI,CAACxB,YAAY,EAAE;MACrB6B,YAAY,CAAC,IAAI,CAAC7B,YAAY,CAAC;IACjC;IAEA,MAAM8B,WAAW,GAAG,IAAIC,IAAI,CAACP,SAAS,CAAC,CAACQ,OAAO,CAAC,CAAC;IACjD,MAAMC,GAAG,GAAGF,IAAI,CAACE,GAAG,CAAC,CAAC;IACtB,MAAMC,SAAS,GAAGJ,WAAW,GAAG,IAAI,CAAC3B,MAAM,CAACI,aAAa;IACzD,MAAM4B,KAAK,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEH,SAAS,GAAGD,GAAG,CAAC;IAE1C,IAAIE,KAAK,GAAG,CAAC,EAAE;MACb,IAAI,CAACnC,YAAY,GAAGsC,UAAU,CAAC,MAAM;QACnC,IAAI,CAACnB,YAAY,CAAC,CAAC,CAACoB,KAAK,CAAC,MAAM;UAC9B;QAAA,CACD,CAAC;MACJ,CAAC,EAAEJ,KAAK,CAAC;IACX;EACF;;EAEA;AACF;AACA;EACE,MAAMhB,YAAYA,CAAA,EAAqB;IACrC,MAAMA,YAAY,GAAG,MAAM,IAAI,CAACf,OAAO,CAACnB,OAAO,CAACT,YAAY,CAACE,aAAa,CAAC;IAC3E,IAAI,CAACyC,YAAY,EAAE;MACjB,OAAO,KAAK;IACd;IAEA,IAAI;MACF;MACA,MAAMF,WAAW,GAAG,IAAI,CAACf,WAAW,CAACe,WAA0B;MAC/D,MAAMuB,QAAQ,GAAG,MAAMvB,WAAW,CAACwB,OAAO,CAAuB;QAC/D1B,MAAM,EAAE,MAAM;QACd2B,GAAG,EAAE,mBAAmB;QACxBC,IAAI,EAAE;UAAExB;QAAa,CAAC;QACtByB,KAAK,EAAE;MACT,CAAC,CAAC;MAEF,MAAM,IAAI,CAAC/B,iBAAiB,CAAC2B,QAAQ,EAAE,aAAa,CAAC;MACrD,OAAO,IAAI;IACb,CAAC,CAAC,MAAM;MACN;MACA,MAAM,IAAI,CAACK,YAAY,CAAC,CAAC;MACzB,IAAI,CAAC9C,WAAW,GAAG,IAAI;MACvB,IAAI,CAACY,eAAe,CAAC,CAAC;MACtB,OAAO,KAAK;IACd;EACF;;EAEA;AACF;AACA;EACE,MAAMmC,OAAOA,CAAA,EAAkB;IAC7B;IACA,IAAI,IAAI,CAAC9C,YAAY,EAAE;MACrB6B,YAAY,CAAC,IAAI,CAAC7B,YAAY,CAAC;MAC/B,IAAI,CAACA,YAAY,GAAG,IAAI;IAC1B;;IAEA;IACA,IAAI;MACF,MAAM+C,QAAQ,GAAG,IAAI,CAAC7C,WAAmC;MACzD,IAAI6C,QAAQ,CAACC,qBAAqB,EAAE;QAClC,MAAMD,QAAQ,CAACC,qBAAqB,CAAC,CAAC;MACxC;IACF,CAAC,CAAC,MAAM;MACN;IAAA;;IAGF;IACA,IAAI,CAAC9C,WAAW,CAACe,WAAW,CAACC,SAAS,CAAC,EAAE,CAAC;;IAE1C;IACA,MAAM,IAAI,CAAC2B,YAAY,CAAC,CAAC;;IAEzB;IACA,IAAI,CAAC9C,WAAW,GAAG,IAAI;IACvB,IAAI,CAACY,eAAe,CAAC,CAAC;EACxB;;EAEA;AACF;AACA;EACE,MAAckC,YAAYA,CAAA,EAAkB;IAC1C,MAAM,IAAI,CAACzC,OAAO,CAACb,UAAU,CAACf,YAAY,CAACC,YAAY,CAAC;IACxD,MAAM,IAAI,CAAC2B,OAAO,CAACb,UAAU,CAACf,YAAY,CAACE,aAAa,CAAC;IACzD,MAAM,IAAI,CAAC0B,OAAO,CAACb,UAAU,CAACf,YAAY,CAACG,OAAO,CAAC;IACnD,MAAM,IAAI,CAACyB,OAAO,CAACb,UAAU,CAACf,YAAY,CAACI,IAAI,CAAC;IAChD,MAAM,IAAI,CAACwB,OAAO,CAACb,UAAU,CAACf,YAAY,CAACK,WAAW,CAAC;EACzD;;EAEA;AACF;AACA;EACEoE,cAAcA,CAAA,EAA2B;IACvC,OAAO,IAAI,CAAClD,WAAW;EACzB;;EAEA;AACF;AACA;EACEmD,eAAeA,CAAA,EAAY;IACzB,OAAO,IAAI,CAACnD,WAAW,KAAK,IAAI;EAClC;;EAEA;AACF;AACA;EACE,MAAMoD,cAAcA,CAAA,EAA2B;IAC7C,OAAO,IAAI,CAAC/C,OAAO,CAACnB,OAAO,CAACT,YAAY,CAACC,YAAY,CAAC;EACxD;;EAEA;AACF;AACA;EACE,MAAM2E,aAAaA,CAAA,EAA+B;IAChD,MAAMrC,MAAM,GAAG,MAAM,IAAI,CAACX,OAAO,CAACnB,OAAO,CAACT,YAAY,CAACK,WAAW,CAAC;IACnE,OAAOkC,MAAM;EACf;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAMsC,UAAUA,CAAA,EAAoC;IAClD,IAAI;MACF;MACA,MAAMC,QAAQ,GAAG,MAAM,IAAI,CAAClD,OAAO,CAACnB,OAAO,CAACT,YAAY,CAACI,IAAI,CAAC;MAC9D,IAAI0E,QAAQ,EAAE;QACZ,IAAI,CAACvD,WAAW,GAAGqB,IAAI,CAACmC,KAAK,CAACD,QAAQ,CAAC;MACzC;;MAEA;MACA,MAAME,KAAK,GAAG,MAAM,IAAI,CAACpD,OAAO,CAACnB,OAAO,CAACT,YAAY,CAACC,YAAY,CAAC;MACnE,IAAI+E,KAAK,EAAE;QACT,IAAI,CAACtD,WAAW,CAACe,WAAW,CAACC,SAAS,CAACsC,KAAK,CAAC;MAC/C;;MAEA;MACA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACrD,OAAO,CAACnB,OAAO,CAACT,YAAY,CAACG,OAAO,CAAC;MACpE,IAAI8E,WAAW,EAAE;QACf,MAAM3C,OAAO,GAAGM,IAAI,CAACmC,KAAK,CAACE,WAAW,CAAC;QACvC,IAAI3C,OAAO,CAACU,SAAS,EAAE;UACrB,MAAMA,SAAS,GAAG,IAAIO,IAAI,CAACjB,OAAO,CAACU,SAAS,CAAC,CAACQ,OAAO,CAAC,CAAC;UACvD,IAAIR,SAAS,IAAIO,IAAI,CAACE,GAAG,CAAC,CAAC,EAAE;YAC3B;YACA,MAAMyB,SAAS,GAAG,MAAM,IAAI,CAACvC,YAAY,CAAC,CAAC;YAC3C,IAAI,CAACuC,SAAS,EAAE;cACd,MAAM,IAAI,CAACb,YAAY,CAAC,CAAC;cACzB,IAAI,CAAC9C,WAAW,GAAG,IAAI;YACzB;UACF,CAAC,MAAM,IAAI,IAAI,CAACI,MAAM,CAACG,WAAW,EAAE;YAClC;YACA,IAAI,CAACsB,iBAAiB,CAACd,OAAO,CAACU,SAAS,CAAC;UAC3C;QACF;MACF;MAEA,OAAO,IAAI,CAACzB,WAAW;IACzB,CAAC,CAAC,MAAM;MACN;MACA,MAAM,IAAI,CAAC8C,YAAY,CAAC,CAAC;MACzB,IAAI,CAAC9C,WAAW,GAAG,IAAI;MACvB,OAAO,IAAI;IACb;EACF;;EAEA;AACF;AACA;EACE4D,OAAOA,CAAA,EAAS;IACd,IAAI,IAAI,CAAC3D,YAAY,EAAE;MACrB6B,YAAY,CAAC,IAAI,CAAC7B,YAAY,CAAC;MAC/B,IAAI,CAACA,YAAY,GAAG,IAAI;IAC1B;IACA,IAAI,CAACH,SAAS,CAAC+D,KAAK,CAAC,CAAC;EACxB;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,iBAAiBA,CAC/B3D,WAAwB,EACxBC,MAA0B,EACb;EACb,OAAO,IAAIP,WAAW,CAACM,WAAW,EAAEC,MAAM,CAAC;AAC7C","ignoreList":[]}

package/lib/module/core/CrossDomainAuth.js

@@ -1,271 +0,0 @@
-"use strict";
-
-/**
- * Cross-Domain Authentication Helper
- *
- * Provides a simplified API for cross-domain SSO authentication that automatically
- * selects the best authentication method based on browser capabilities:
- *
- * 1. FedCM (if supported) - Modern, Google-style browser-native auth
- * 2. Popup (fallback) - OAuth2-style popup window
- * 3. Redirect (final fallback) - Traditional full-page redirect
- *
- * Usage:
- * ```typescript
- * import { CrossDomainAuth } from '@oxyhq/services';
- *
- * const auth = new CrossDomainAuth(oxyServices);
- *
- * // Automatic method selection
- * const session = await auth.signIn();
- *
- * // Or use specific method
- * const session = await auth.signInWithPopup();
- * ```
- */
-
-export class CrossDomainAuth {
-  constructor(oxyServices) {
-    this.oxyServices = oxyServices;
-  }
-
-  /**
-   * Sign in with automatic method selection
-   *
-   * Tries methods in this order:
-   * 1. FedCM (if supported and not in private browsing)
-   * 2. Popup (if not blocked)
-   * 3. Redirect (always works)
-   *
-   * @param options - Authentication options
-   * @returns Session with user data and access token
-   */
-  async signIn(options = {}) {
-    const method = options.method || 'auto';
-
-    // If specific method requested, use it directly
-    if (method === 'fedcm') {
-      return this.signInWithFedCM(options);
-    }
-    if (method === 'popup') {
-      return this.signInWithPopup(options);
-    }
-    if (method === 'redirect') {
-      this.signInWithRedirect(options);
-      return null; // Redirect doesn't return immediately
-    }
-
-    // Auto mode: Try methods in order of preference
-    return this.autoSignIn(options);
-  }
-
-  /**
-   * Automatic sign-in with progressive enhancement
-   *
-   * @private
-   */
-  async autoSignIn(options) {
-    // 1. Try FedCM first (best UX, most modern)
-    if (this.isFedCMSupported()) {
-      try {
-        options.onMethodSelected?.('fedcm');
-        return await this.signInWithFedCM(options);
-      } catch (error) {
-        console.warn('[CrossDomainAuth] FedCM failed, trying popup...', error);
-      }
-    }
-
-    // 2. Try popup (good UX, widely supported)
-    try {
-      options.onMethodSelected?.('popup');
-      return await this.signInWithPopup(options);
-    } catch (error) {
-      console.warn('[CrossDomainAuth] Popup failed, falling back to redirect...', error);
-    }
-
-    // 3. Fallback to redirect (always works)
-    options.onMethodSelected?.('redirect');
-    this.signInWithRedirect(options);
-    return null;
-  }
-
-  /**
-   * Sign in using FedCM (Federated Credential Management)
-   *
-   * Best method - browser-native, no popups, Google-like experience
-   */
-  async signInWithFedCM(options = {}) {
-    return this.oxyServices.signInWithFedCM({
-      context: options.isSignup ? 'signup' : 'signin'
-    });
-  }
-
-  /**
-   * Sign in using popup window
-   *
-   * Good method - preserves app state, no full page reload
-   */
-  async signInWithPopup(options = {}) {
-    return this.oxyServices.signInWithPopup({
-      mode: options.isSignup ? 'signup' : 'login',
-      width: options.popupDimensions?.width,
-      height: options.popupDimensions?.height
-    });
-  }
-
-  /**
-   * Sign in using full-page redirect
-   *
-   * Fallback method - works everywhere but loses app state
-   */
-  signInWithRedirect(options = {}) {
-    this.oxyServices.signInWithRedirect({
-      redirectUri: options.redirectUri,
-      mode: options.isSignup ? 'signup' : 'login'
-    });
-  }
-
-  /**
-   * Handle redirect callback
-   *
-   * Call this on app startup to check if we're returning from auth redirect
-   */
-  handleRedirectCallback() {
-    return this.oxyServices.handleAuthCallback();
-  }
-
-  /**
-   * Silent sign-in (check for existing session)
-   *
-   * Tries to automatically sign in without user interaction.
-   * Works with both FedCM and popup/iframe methods.
-   *
-   * @returns Session if user is already signed in, null otherwise
-   */
-  async silentSignIn() {
-    // Try FedCM silent sign-in first (if supported)
-    if (this.isFedCMSupported()) {
-      try {
-        const session = await this.oxyServices.silentSignInWithFedCM();
-        if (session) {
-          return session;
-        }
-      } catch (error) {
-        console.warn('[CrossDomainAuth] FedCM silent sign-in failed:', error);
-      }
-    }
-
-    // Fallback to iframe-based silent auth
-    try {
-      return await this.oxyServices.silentSignIn();
-    } catch (error) {
-      console.warn('[CrossDomainAuth] Silent sign-in failed:', error);
-      return null;
-    }
-  }
-
-  /**
-   * Restore session from storage
-   *
-   * For redirect method - restores previously authenticated session from localStorage
-   */
-  restoreSession() {
-    return this.oxyServices.restoreSession?.() || false;
-  }
-
-  /**
-   * Check if FedCM is supported in current browser
-   */
-  isFedCMSupported() {
-    return this.oxyServices.constructor.isFedCMSupported?.() || false;
-  }
-
-  /**
-   * Get recommended authentication method for current environment
-   *
-   * @returns Recommended method name and reason
-   */
-  getRecommendedMethod() {
-    if (this.isFedCMSupported()) {
-      return {
-        method: 'fedcm',
-        reason: 'FedCM is supported - provides best UX with browser-native auth'
-      };
-    }
-    if (typeof window !== 'undefined') {
-      return {
-        method: 'popup',
-        reason: 'Browser environment - popup preserves app state'
-      };
-    }
-    return {
-      method: 'redirect',
-      reason: 'Fallback method - works in all environments'
-    };
-  }
-
-  /**
-   * Initialize cross-domain auth on app startup
-   *
-   * This handles:
-   * 1. Redirect callback (if returning from auth.oxy.so)
-   * 2. Session restoration (from localStorage)
-   * 3. Silent sign-in (check for existing SSO session)
-   *
-   * @returns Session if user is authenticated, null otherwise
-   */
-  async initialize() {
-    // 1. Check if this is a redirect callback
-    const callbackSession = this.handleRedirectCallback();
-    if (callbackSession) {
-      return callbackSession;
-    }
-
-    // 2. Try to restore existing session from storage
-    const restored = this.restoreSession();
-    if (restored) {
-      // Verify session is still valid by fetching user
-      try {
-        const user = await this.oxyServices.getCurrentUser();
-        if (user) {
-          return {
-            sessionId: this.oxyServices.getStoredSessionId?.() || '',
-            deviceId: '',
-            expiresAt: new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString(),
-            user
-          };
-        }
-      } catch (error) {
-        console.warn('[CrossDomainAuth] Stored session invalid:', error);
-      }
-    }
-
-    // 3. Try silent sign-in (check for SSO session at auth.oxy.so)
-    return await this.silentSignIn();
-  }
-}
-
-/**
- * Helper function to create CrossDomainAuth instance
- *
- * @example
- * ```typescript
- * import { createCrossDomainAuth } from '@oxyhq/services';
- *
- * const oxyServices = new OxyServices({ baseURL: 'https://api.oxy.so' });
- * const auth = createCrossDomainAuth(oxyServices);
- *
- * // On app startup
- * const session = await auth.initialize();
- * if (session) {
- *   console.log('User is signed in:', session.user);
- * }
- *
- * // Sign in button click
- * const session = await auth.signIn();
- * ```
- */
-export function createCrossDomainAuth(oxyServices) {
-  return new CrossDomainAuth(oxyServices);
-}
-//# sourceMappingURL=CrossDomainAuth.js.map

package/lib/module/core/CrossDomainAuth.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["CrossDomainAuth","constructor","oxyServices","signIn","options","method","signInWithFedCM","signInWithPopup","signInWithRedirect","autoSignIn","isFedCMSupported","onMethodSelected","error","console","warn","context","isSignup","mode","width","popupDimensions","height","redirectUri","handleRedirectCallback","handleAuthCallback","silentSignIn","session","silentSignInWithFedCM","restoreSession","getRecommendedMethod","reason","window","initialize","callbackSession","restored","user","getCurrentUser","sessionId","getStoredSessionId","deviceId","expiresAt","Date","now","toISOString","createCrossDomainAuth"],"sourceRoot":"../../../src","sources":["core/CrossDomainAuth.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAuCA,OAAO,MAAMA,eAAe,CAAC;EAC3BC,WAAWA,CAASC,WAAwB,EAAE;IAAA,KAA1BA,WAAwB,GAAxBA,WAAwB;EAAG;;EAE/C;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,MAAMC,MAAMA,CAACC,OAA+B,GAAG,CAAC,CAAC,EAAwC;IACvF,MAAMC,MAAM,GAAGD,OAAO,CAACC,MAAM,IAAI,MAAM;;IAEvC;IACA,IAAIA,MAAM,KAAK,OAAO,EAAE;MACtB,OAAO,IAAI,CAACC,eAAe,CAACF,OAAO,CAAC;IACtC;IAEA,IAAIC,MAAM,KAAK,OAAO,EAAE;MACtB,OAAO,IAAI,CAACE,eAAe,CAACH,OAAO,CAAC;IACtC;IAEA,IAAIC,MAAM,KAAK,UAAU,EAAE;MACzB,IAAI,CAACG,kBAAkB,CAACJ,OAAO,CAAC;MAChC,OAAO,IAAI,CAAC,CAAC;IACf;;IAEA;IACA,OAAO,IAAI,CAACK,UAAU,CAACL,OAAO,CAAC;EACjC;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAcK,UAAUA,CAACL,OAA+B,EAAwC;IAC9F;IACA,IAAI,IAAI,CAACM,gBAAgB,CAAC,CAAC,EAAE;MAC3B,IAAI;QACFN,OAAO,CAACO,gBAAgB,GAAG,OAAO,CAAC;QACnC,OAAO,MAAM,IAAI,CAACL,eAAe,CAACF,OAAO,CAAC;MAC5C,CAAC,CAAC,OAAOQ,KAAK,EAAE;QACdC,OAAO,CAACC,IAAI,CAAC,iDAAiD,EAAEF,KAAK,CAAC;MACxE;IACF;;IAEA;IACA,IAAI;MACFR,OAAO,CAACO,gBAAgB,GAAG,OAAO,CAAC;MACnC,OAAO,MAAM,IAAI,CAACJ,eAAe,CAACH,OAAO,CAAC;IAC5C,CAAC,CAAC,OAAOQ,KAAK,EAAE;MACdC,OAAO,CAACC,IAAI,CAAC,6DAA6D,EAAEF,KAAK,CAAC;IACpF;;IAEA;IACAR,OAAO,CAACO,gBAAgB,GAAG,UAAU,CAAC;IACtC,IAAI,CAACH,kBAAkB,CAACJ,OAAO,CAAC;IAChC,OAAO,IAAI;EACb;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAME,eAAeA,CAACF,OAA+B,GAAG,CAAC,CAAC,EAAiC;IACzF,OAAQ,IAAI,CAACF,WAAW,CAASI,eAAe,CAAC;MAC/CS,OAAO,EAAEX,OAAO,CAACY,QAAQ,GAAG,QAAQ,GAAG;IACzC,CAAC,CAAC;EACJ;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAMT,eAAeA,CAACH,OAA+B,GAAG,CAAC,CAAC,EAAiC;IACzF,OAAQ,IAAI,CAACF,WAAW,CAASK,eAAe,CAAC;MAC/CU,IAAI,EAAEb,OAAO,CAACY,QAAQ,GAAG,QAAQ,GAAG,OAAO;MAC3CE,KAAK,EAAEd,OAAO,CAACe,eAAe,EAAED,KAAK;MACrCE,MAAM,EAAEhB,OAAO,CAACe,eAAe,EAAEC;IACnC,CAAC,CAAC;EACJ;;EAEA;AACF;AACA;AACA;AACA;EACEZ,kBAAkBA,CAACJ,OAA+B,GAAG,CAAC,CAAC,EAAQ;IAC5D,IAAI,CAACF,WAAW,CAASM,kBAAkB,CAAC;MAC3Ca,WAAW,EAAEjB,OAAO,CAACiB,WAAW;MAChCJ,IAAI,EAAEb,OAAO,CAACY,QAAQ,GAAG,QAAQ,GAAG;IACtC,CAAC,CAAC;EACJ;;EAEA;AACF;AACA;AACA;AACA;EACEM,sBAAsBA,CAAA,EAAgC;IACpD,OAAQ,IAAI,CAACpB,WAAW,CAASqB,kBAAkB,CAAC,CAAC;EACvD;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,MAAMC,YAAYA,CAAA,EAAyC;IACzD;IACA,IAAI,IAAI,CAACd,gBAAgB,CAAC,CAAC,EAAE;MAC3B,IAAI;QACF,MAAMe,OAAO,GAAG,MAAO,IAAI,CAACvB,WAAW,CAASwB,qBAAqB,CAAC,CAAC;QACvE,IAAID,OAAO,EAAE;UACX,OAAOA,OAAO;QAChB;MACF,CAAC,CAAC,OAAOb,KAAK,EAAE;QACdC,OAAO,CAACC,IAAI,CAAC,gDAAgD,EAAEF,KAAK,CAAC;MACvE;IACF;;IAEA;IACA,IAAI;MACF,OAAO,MAAO,IAAI,CAACV,WAAW,CAASsB,YAAY,CAAC,CAAC;IACvD,CAAC,CAAC,OAAOZ,KAAK,EAAE;MACdC,OAAO,CAACC,IAAI,CAAC,0CAA0C,EAAEF,KAAK,CAAC;MAC/D,OAAO,IAAI;IACb;EACF;;EAEA;AACF;AACA;AACA;AACA;EACEe,cAAcA,CAAA,EAAY;IACxB,OAAQ,IAAI,CAACzB,WAAW,CAASyB,cAAc,GAAG,CAAC,IAAI,KAAK;EAC9D;;EAEA;AACF;AACA;EACEjB,gBAAgBA,CAAA,EAAY;IAC1B,OAAQ,IAAI,CAACR,WAAW,CAASD,WAAW,CAACS,gBAAgB,GAAG,CAAC,IAAI,KAAK;EAC5E;;EAEA;AACF;AACA;AACA;AACA;EACEkB,oBAAoBA,CAAA,EAA+D;IACjF,IAAI,IAAI,CAAClB,gBAAgB,CAAC,CAAC,EAAE;MAC3B,OAAO;QACLL,MAAM,EAAE,OAAO;QACfwB,MAAM,EAAE;MACV,CAAC;IACH;IAEA,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;MACjC,OAAO;QACLzB,MAAM,EAAE,OAAO;QACfwB,MAAM,EAAE;MACV,CAAC;IACH;IAEA,OAAO;MACLxB,MAAM,EAAE,UAAU;MAClBwB,MAAM,EAAE;IACV,CAAC;EACH;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,MAAME,UAAUA,CAAA,EAAyC;IACvD;IACA,MAAMC,eAAe,GAAG,IAAI,CAACV,sBAAsB,CAAC,CAAC;IACrD,IAAIU,eAAe,EAAE;MACnB,OAAOA,eAAe;IACxB;;IAEA;IACA,MAAMC,QAAQ,GAAG,IAAI,CAACN,cAAc,CAAC,CAAC;IACtC,IAAIM,QAAQ,EAAE;MACZ;MACA,IAAI;QACF,MAAMC,IAAI,GAAG,MAAO,IAAI,CAAChC,WAAW,CAASiC,cAAc,CAAC,CAAC;QAC7D,IAAID,IAAI,EAAE;UACR,OAAO;YACLE,SAAS,EAAG,IAAI,CAAClC,WAAW,CAASmC,kBAAkB,GAAG,CAAC,IAAI,EAAE;YACjEC,QAAQ,EAAE,EAAE;YACZC,SAAS,EAAE,IAAIC,IAAI,CAACA,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAACC,WAAW,CAAC,CAAC;YACnER;UACF,CAAC;QACH;MACF,CAAC,CAAC,OAAOtB,KAAK,EAAE;QACdC,OAAO,CAACC,IAAI,CAAC,2CAA2C,EAAEF,KAAK,CAAC;MAClE;IACF;;IAEA;IACA,OAAO,MAAM,IAAI,CAACY,YAAY,CAAC,CAAC;EAClC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASmB,qBAAqBA,CAACzC,WAAwB,EAAmB;EAC/E,OAAO,IAAIF,eAAe,CAACE,WAAW,CAAC;AACzC","ignoreList":[]}