@oxyhq/services 5.7.4 → 5.7.5

package/lib/module/core/auth-manager.js

@@ -0,0 +1,432 @@
+"use strict";
+
+/**
+ * Zero-Config Authentication Manager
+ * 
+ * This module provides automatic token management, session handling,
+ * and seamless authentication for Oxy services.
+ */
+
+import axios from 'axios';
+import { jwtDecode } from 'jwt-decode';
+import AsyncStorage from '@react-native-async-storage/async-storage';
+export class AuthenticationManager {
+  tokens = null;
+  user = null;
+  refreshPromise = null;
+  listeners = [];
+  storageKey = '@oxy/auth-tokens';
+  constructor(baseURL) {
+    this.client = axios.create({
+      baseURL,
+      timeout: 15000,
+      withCredentials: true // Enable cookies for session management
+    });
+    this.setupInterceptors();
+    this.initializeFromStorage();
+  }
+
+  /**
+   * Setup axios interceptors for automatic token management
+   */
+  setupInterceptors() {
+    // Request interceptor - automatically add auth headers
+    this.client.interceptors.request.use(async config => {
+      // Skip auth for login/signup endpoints
+      if (this.isPublicEndpoint(config.url || '')) {
+        return config;
+      }
+
+      // Ensure we have a valid token
+      await this.ensureValidToken();
+
+      // Add authorization header if we have a token
+      if (this.tokens?.accessToken) {
+        config.headers = config.headers || {};
+        config.headers.Authorization = `Bearer ${this.tokens.accessToken}`;
+      }
+      return config;
+    }, error => Promise.reject(error));
+
+    // Response interceptor - handle token expiration and auto-retry
+    this.client.interceptors.response.use(response => response, async error => {
+      const originalRequest = error.config;
+
+      // If it's a 401 and we haven't already retried, attempt token refresh
+      if (error.response?.status === 401 && !originalRequest._retry && this.tokens?.refreshToken && !this.isPublicEndpoint(originalRequest?.url || '')) {
+        originalRequest._retry = true;
+        try {
+          await this.refreshTokens();
+
+          // Retry original request with new token
+          if (originalRequest && this.tokens?.accessToken) {
+            originalRequest.headers = originalRequest.headers || {};
+            originalRequest.headers.Authorization = `Bearer ${this.tokens.accessToken}`;
+            return this.client(originalRequest);
+          }
+        } catch (refreshError) {
+          // Refresh failed, clear tokens and notify listeners
+          await this.logout();
+          return Promise.reject(error);
+        }
+      }
+
+      // For non-auth errors or failed retries, reject with formatted error
+      return Promise.reject(this.formatError(error));
+    });
+  }
+
+  /**
+   * Check if endpoint is public (doesn't require authentication)
+   */
+  isPublicEndpoint(url) {
+    const publicPaths = ['/auth/login', '/auth/signup', '/auth/register', '/auth/check-username', '/auth/check-email', '/health', '/'];
+    return publicPaths.some(path => url.includes(path));
+  }
+
+  /**
+   * Initialize authentication state from persistent storage
+   */
+  async initializeFromStorage() {
+    try {
+      const storedData = await AsyncStorage.getItem(this.storageKey);
+      if (storedData) {
+        const tokens = JSON.parse(storedData);
+
+        // Validate that tokens haven't expired
+        if (await this.validateStoredTokens(tokens)) {
+          this.tokens = tokens;
+          await this.fetchCurrentUser();
+          this.notifyStateChange();
+        } else {
+          // Tokens expired, clear storage
+          await AsyncStorage.removeItem(this.storageKey);
+        }
+      }
+    } catch (error) {
+      console.warn('[OxyAuth] Failed to initialize from storage:', error);
+      await AsyncStorage.removeItem(this.storageKey);
+    }
+  }
+
+  /**
+   * Validate stored tokens without making network calls if possible
+   */
+  async validateStoredTokens(tokens) {
+    try {
+      // First check if access token is expired
+      const decoded = jwtDecode(tokens.accessToken);
+      const now = Math.floor(Date.now() / 1000);
+
+      // If access token is still valid, we're good
+      if (decoded.exp > now + 60) {
+        // 60 second buffer
+        return true;
+      }
+
+      // Access token expired, try refresh token
+      const refreshDecoded = jwtDecode(tokens.refreshToken);
+      return refreshDecoded.exp > now;
+    } catch {
+      return false;
+    }
+  }
+
+  /**
+   * Ensure we have a valid access token
+   */
+  async ensureValidToken() {
+    if (!this.tokens?.accessToken) {
+      return;
+    }
+    try {
+      const decoded = jwtDecode(this.tokens.accessToken);
+      const now = Math.floor(Date.now() / 1000);
+
+      // Refresh if token expires within 5 minutes
+      if (decoded.exp - now < 300) {
+        await this.refreshTokens();
+      }
+    } catch (error) {
+      console.warn('[OxyAuth] Token validation error:', error);
+      // If token is malformed, try refresh
+      if (this.tokens?.refreshToken) {
+        await this.refreshTokens();
+      }
+    }
+  }
+
+  /**
+   * Login with credentials
+   */
+  async login(credentials) {
+    try {
+      const response = await this.client.post('/auth/login', credentials);
+      const loginData = response.data;
+      if (loginData.success && loginData.accessToken && loginData.refreshToken) {
+        await this.setTokens({
+          accessToken: loginData.accessToken,
+          refreshToken: loginData.refreshToken
+        });
+        this.user = loginData.user;
+        this.notifyStateChange();
+        return loginData;
+      } else {
+        throw new Error(loginData.message || 'Login failed');
+      }
+    } catch (error) {
+      throw this.formatError(error);
+    }
+  }
+
+  /**
+   * Register new user
+   */
+  async register(userData) {
+    try {
+      const response = await this.client.post('/auth/register', userData);
+      const registerData = response.data;
+      if (registerData.success && registerData.accessToken && registerData.refreshToken) {
+        await this.setTokens({
+          accessToken: registerData.accessToken,
+          refreshToken: registerData.refreshToken
+        });
+        this.user = registerData.user;
+        this.notifyStateChange();
+        return registerData;
+      } else {
+        throw new Error(registerData.message || 'Registration failed');
+      }
+    } catch (error) {
+      throw this.formatError(error);
+    }
+  }
+
+  /**
+   * Logout user and clear all tokens
+   */
+  async logout() {
+    // Attempt server-side logout if we have tokens
+    if (this.tokens?.refreshToken) {
+      try {
+        await this.client.post('/auth/logout', {
+          refreshToken: this.tokens.refreshToken
+        });
+      } catch (error) {
+        console.warn('[OxyAuth] Server logout failed:', error);
+      }
+    }
+
+    // Clear local state
+    this.tokens = null;
+    this.user = null;
+
+    // Clear storage
+    try {
+      await AsyncStorage.removeItem(this.storageKey);
+    } catch (error) {
+      console.warn('[OxyAuth] Failed to clear storage:', error);
+    }
+    this.notifyStateChange();
+  }
+
+  /**
+   * Refresh access token using refresh token
+   */
+  async refreshTokens() {
+    if (!this.tokens?.refreshToken) {
+      throw new Error('No refresh token available');
+    }
+
+    // If refresh is already in progress, return that promise
+    if (this.refreshPromise) {
+      return this.refreshPromise;
+    }
+    this.refreshPromise = this.performTokenRefresh();
+    try {
+      const newTokens = await this.refreshPromise;
+      this.refreshPromise = null;
+      return newTokens;
+    } catch (error) {
+      this.refreshPromise = null;
+      throw error;
+    }
+  }
+
+  /**
+   * Perform the actual token refresh
+   */
+  async performTokenRefresh() {
+    try {
+      const response = await this.client.post('/auth/refresh', {
+        refreshToken: this.tokens.refreshToken
+      });
+      const newTokens = {
+        accessToken: response.data.accessToken,
+        refreshToken: response.data.refreshToken
+      };
+      await this.setTokens(newTokens);
+      return newTokens;
+    } catch (error) {
+      // Refresh failed, clear all tokens
+      await this.logout();
+      throw this.formatError(error);
+    }
+  }
+
+  /**
+   * Set tokens and persist to storage
+   */
+  async setTokens(newTokens) {
+    this.tokens = newTokens;
+    try {
+      await AsyncStorage.setItem(this.storageKey, JSON.stringify(newTokens));
+    } catch (error) {
+      console.warn('[OxyAuth] Failed to persist tokens:', error);
+    }
+  }
+
+  /**
+   * Fetch current user profile
+   */
+  async fetchCurrentUser() {
+    try {
+      const response = await this.client.get('/auth/me');
+      this.user = response.data.data || response.data;
+    } catch (error) {
+      console.warn('[OxyAuth] Failed to fetch current user:', error);
+      // Don't throw here, we can still function without user profile
+    }
+  }
+
+  /**
+   * Get current authentication state
+   */
+  getAuthState() {
+    return {
+      isAuthenticated: !!this.tokens?.accessToken,
+      user: this.user,
+      tokens: this.tokens
+    };
+  }
+
+  /**
+   * Get current user (loads if not cached)
+   */
+  async getCurrentUser() {
+    if (!this.tokens?.accessToken) {
+      throw new Error('Not authenticated');
+    }
+    if (!this.user) {
+      await this.fetchCurrentUser();
+    }
+    return this.user;
+  }
+
+  /**
+   * Subscribe to authentication state changes
+   */
+  onAuthStateChange(callback) {
+    this.listeners.push(callback);
+
+    // Immediately call with current state
+    callback(this.getAuthState());
+
+    // Return unsubscribe function
+    return () => {
+      this.listeners = this.listeners.filter(listener => listener !== callback);
+    };
+  }
+
+  /**
+   * Notify all listeners of state changes
+   */
+  notifyStateChange() {
+    const state = this.getAuthState();
+    this.listeners.forEach(listener => {
+      try {
+        listener(state);
+      } catch (error) {
+        console.error('[OxyAuth] Listener error:', error);
+      }
+    });
+  }
+
+  /**
+   * Format error responses consistently
+   */
+  formatError(error) {
+    if (error?.response?.data?.message) {
+      return new Error(error.response.data.message);
+    }
+    if (error?.message) {
+      return new Error(error.message);
+    }
+    return new Error('An unexpected error occurred');
+  }
+
+  /**
+   * Get authenticated HTTP client for making API calls
+   */
+  getClient() {
+    return this.client;
+  }
+
+  /**
+   * Check username availability
+   */
+  async checkUsernameAvailability(username) {
+    try {
+      const response = await this.client.get(`/auth/check-username/${encodeURIComponent(username)}`);
+      return response.data;
+    } catch (error) {
+      const axiosError = error;
+      if (axiosError?.response?.status === 400) {
+        return axiosError.response.data;
+      }
+      throw this.formatError(error);
+    }
+  }
+
+  /**
+   * Check email availability
+   */
+  async checkEmailAvailability(email) {
+    try {
+      const response = await this.client.post('/auth/check-email', {
+        email
+      });
+      return response.data;
+    } catch (error) {
+      const axiosError = error;
+      if (axiosError?.response?.status === 400) {
+        return axiosError.response.data;
+      }
+      throw this.formatError(error);
+    }
+  }
+}
+
+// Global auth manager instance
+let globalAuthManager = null;
+
+/**
+ * Initialize global authentication manager
+ */
+export function initializeAuth(baseURL) {
+  if (!globalAuthManager) {
+    globalAuthManager = new AuthenticationManager(baseURL);
+  }
+  return globalAuthManager;
+}
+
+/**
+ * Get global authentication manager instance
+ */
+export function getAuthManager() {
+  if (!globalAuthManager) {
+    throw new Error('Authentication manager not initialized. Call initializeAuth() first.');
+  }
+  return globalAuthManager;
+}
+//# sourceMappingURL=auth-manager.js.map

package/lib/module/core/auth-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["axios","jwtDecode","AsyncStorage","AuthenticationManager","tokens","user","refreshPromise","listeners","storageKey","constructor","baseURL","client","create","timeout","withCredentials","setupInterceptors","initializeFromStorage","interceptors","request","use","config","isPublicEndpoint","url","ensureValidToken","accessToken","headers","Authorization","error","Promise","reject","response","originalRequest","status","_retry","refreshToken","refreshTokens","refreshError","logout","formatError","publicPaths","some","path","includes","storedData","getItem","JSON","parse","validateStoredTokens","fetchCurrentUser","notifyStateChange","removeItem","console","warn","decoded","now","Math","floor","Date","exp","refreshDecoded","login","credentials","post","loginData","data","success","setTokens","Error","message","register","userData","registerData","performTokenRefresh","newTokens","setItem","stringify","get","getAuthState","isAuthenticated","getCurrentUser","onAuthStateChange","callback","push","filter","listener","state","forEach","getClient","checkUsernameAvailability","username","encodeURIComponent","axiosError","checkEmailAvailability","email","globalAuthManager","initializeAuth","getAuthManager"],"sourceRoot":"../../../src","sources":["core/auth-manager.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,KAAK,MAAiE,OAAO;AACpF,SAASC,SAAS,QAAQ,YAAY;AACtC,OAAOC,YAAY,MAAM,2CAA2C;AAiCpE,OAAO,MAAMC,qBAAqB,CAAC;EAEzBC,MAAM,GAAsB,IAAI;EAChCC,IAAI,GAAe,IAAI;EACvBC,cAAc,GAA+B,IAAI;EACjDC,SAAS,GAAmC,EAAE;EAC9CC,UAAU,GAAG,kBAAkB;EAEvCC,WAAWA,CAACC,OAAe,EAAE;IAC3B,IAAI,CAACC,MAAM,GAAGX,KAAK,CAACY,MAAM,CAAC;MACzBF,OAAO;MACPG,OAAO,EAAE,KAAK;MACdC,eAAe,EAAE,IAAI,CAAE;IACzB,CAAC,CAAC;IAEF,IAAI,CAACC,iBAAiB,CAAC,CAAC;IACxB,IAAI,CAACC,qBAAqB,CAAC,CAAC;EAC9B;;EAEA;AACF;AACA;EACUD,iBAAiBA,CAAA,EAAS;IAChC;IACA,IAAI,CAACJ,MAAM,CAACM,YAAY,CAACC,OAAO,CAACC,GAAG,CAClC,MAAOC,MAAkC,IAAK;MAC5C;MACA,IAAI,IAAI,CAACC,gBAAgB,CAACD,MAAM,CAACE,GAAG,IAAI,EAAE,CAAC,EAAE;QAC3C,OAAOF,MAAM;MACf;;MAEA;MACA,MAAM,IAAI,CAACG,gBAAgB,CAAC,CAAC;;MAE7B;MACA,IAAI,IAAI,CAACnB,MAAM,EAAEoB,WAAW,EAAE;QAC5BJ,MAAM,CAACK,OAAO,GAAGL,MAAM,CAACK,OAAO,IAAI,CAAC,CAAC;QACrCL,MAAM,CAACK,OAAO,CAACC,aAAa,GAAG,UAAU,IAAI,CAACtB,MAAM,CAACoB,WAAW,EAAE;MACpE;MAEA,OAAOJ,MAAM;IACf,CAAC,EACAO,KAAK,IAAKC,OAAO,CAACC,MAAM,CAACF,KAAK,CACjC,CAAC;;IAED;IACA,IAAI,CAAChB,MAAM,CAACM,YAAY,CAACa,QAAQ,CAACX,GAAG,CAClCW,QAAQ,IAAKA,QAAQ,EACtB,MAAOH,KAAiB,IAAK;MAC3B,MAAMI,eAAe,GAAGJ,KAAK,CAACP,MAA2D;;MAEzF;MACA,IACEO,KAAK,CAACG,QAAQ,EAAEE,MAAM,KAAK,GAAG,IAC9B,CAACD,eAAe,CAACE,MAAM,IACvB,IAAI,CAAC7B,MAAM,EAAE8B,YAAY,IACzB,CAAC,IAAI,CAACb,gBAAgB,CAACU,eAAe,EAAET,GAAG,IAAI,EAAE,CAAC,EAClD;QACAS,eAAe,CAACE,MAAM,GAAG,IAAI;QAE7B,IAAI;UACF,MAAM,IAAI,CAACE,aAAa,CAAC,CAAC;;UAE1B;UACA,IAAIJ,eAAe,IAAI,IAAI,CAAC3B,MAAM,EAAEoB,WAAW,EAAE;YAC/CO,eAAe,CAACN,OAAO,GAAGM,eAAe,CAACN,OAAO,IAAI,CAAC,CAAC;YACvDM,eAAe,CAACN,OAAO,CAACC,aAAa,GAAG,UAAU,IAAI,CAACtB,MAAM,CAACoB,WAAW,EAAE;YAC3E,OAAO,IAAI,CAACb,MAAM,CAACoB,eAAe,CAAC;UACrC;QACF,CAAC,CAAC,OAAOK,YAAY,EAAE;UACrB;UACA,MAAM,IAAI,CAACC,MAAM,CAAC,CAAC;UACnB,OAAOT,OAAO,CAACC,MAAM,CAACF,KAAK,CAAC;QAC9B;MACF;;MAEA;MACA,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAI,CAACS,WAAW,CAACX,KAAK,CAAC,CAAC;IAChD,CACF,CAAC;EACH;;EAEA;AACF;AACA;EACUN,gBAAgBA,CAACC,GAAW,EAAW;IAC7C,MAAMiB,WAAW,GAAG,CAClB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,SAAS,EACT,GAAG,CACJ;IAED,OAAOA,WAAW,CAACC,IAAI,CAACC,IAAI,IAAInB,GAAG,CAACoB,QAAQ,CAACD,IAAI,CAAC,CAAC;EACrD;;EAEA;AACF;AACA;EACE,MAAczB,qBAAqBA,CAAA,EAAkB;IACnD,IAAI;MACF,MAAM2B,UAAU,GAAG,MAAMzC,YAAY,CAAC0C,OAAO,CAAC,IAAI,CAACpC,UAAU,CAAC;MAC9D,IAAImC,UAAU,EAAE;QACd,MAAMvC,MAAM,GAAGyC,IAAI,CAACC,KAAK,CAACH,UAAU,CAAe;;QAEnD;QACA,IAAI,MAAM,IAAI,CAACI,oBAAoB,CAAC3C,MAAM,CAAC,EAAE;UAC3C,IAAI,CAACA,MAAM,GAAGA,MAAM;UACpB,MAAM,IAAI,CAAC4C,gBAAgB,CAAC,CAAC;UAC7B,IAAI,CAACC,iBAAiB,CAAC,CAAC;QAC1B,CAAC,MAAM;UACL;UACA,MAAM/C,YAAY,CAACgD,UAAU,CAAC,IAAI,CAAC1C,UAAU,CAAC;QAChD;MACF;IACF,CAAC,CAAC,OAAOmB,KAAK,EAAE;MACdwB,OAAO,CAACC,IAAI,CAAC,8CAA8C,EAAEzB,KAAK,CAAC;MACnE,MAAMzB,YAAY,CAACgD,UAAU,CAAC,IAAI,CAAC1C,UAAU,CAAC;IAChD;EACF;;EAEA;AACF;AACA;EACE,MAAcuC,oBAAoBA,CAAC3C,MAAkB,EAAoB;IACvE,IAAI;MACF;MACA,MAAMiD,OAAO,GAAGpD,SAAS,CAAaG,MAAM,CAACoB,WAAW,CAAC;MACzD,MAAM8B,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACH,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;;MAEzC;MACA,IAAID,OAAO,CAACK,GAAG,GAAGJ,GAAG,GAAG,EAAE,EAAE;QAAE;QAC5B,OAAO,IAAI;MACb;;MAEA;MACA,MAAMK,cAAc,GAAG1D,SAAS,CAAaG,MAAM,CAAC8B,YAAY,CAAC;MACjE,OAAOyB,cAAc,CAACD,GAAG,GAAGJ,GAAG;IACjC,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF;;EAEA;AACF;AACA;EACE,MAAc/B,gBAAgBA,CAAA,EAAkB;IAC9C,IAAI,CAAC,IAAI,CAACnB,MAAM,EAAEoB,WAAW,EAAE;MAC7B;IACF;IAEA,IAAI;MACF,MAAM6B,OAAO,GAAGpD,SAAS,CAAa,IAAI,CAACG,MAAM,CAACoB,WAAW,CAAC;MAC9D,MAAM8B,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACH,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;;MAEzC;MACA,IAAID,OAAO,CAACK,GAAG,GAAGJ,GAAG,GAAG,GAAG,EAAE;QAC3B,MAAM,IAAI,CAACnB,aAAa,CAAC,CAAC;MAC5B;IACF,CAAC,CAAC,OAAOR,KAAK,EAAE;MACdwB,OAAO,CAACC,IAAI,CAAC,mCAAmC,EAAEzB,KAAK,CAAC;MACxD;MACA,IAAI,IAAI,CAACvB,MAAM,EAAE8B,YAAY,EAAE;QAC7B,MAAM,IAAI,CAACC,aAAa,CAAC,CAAC;MAC5B;IACF;EACF;;EAEA;AACF;AACA;EACE,MAAMyB,KAAKA,CAACC,WAA6B,EAA0B;IACjE,IAAI;MACF,MAAM/B,QAAQ,GAAG,MAAM,IAAI,CAACnB,MAAM,CAACmD,IAAI,CAAC,aAAa,EAAED,WAAW,CAAC;MACnE,MAAME,SAAS,GAAGjC,QAAQ,CAACkC,IAAqB;MAEhD,IAAID,SAAS,CAACE,OAAO,IAAIF,SAAS,CAACvC,WAAW,IAAIuC,SAAS,CAAC7B,YAAY,EAAE;QACxE,MAAM,IAAI,CAACgC,SAAS,CAAC;UACnB1C,WAAW,EAAEuC,SAAS,CAACvC,WAAW;UAClCU,YAAY,EAAE6B,SAAS,CAAC7B;QAC1B,CAAC,CAAC;QAEF,IAAI,CAAC7B,IAAI,GAAG0D,SAAS,CAAC1D,IAAI;QAC1B,IAAI,CAAC4C,iBAAiB,CAAC,CAAC;QAExB,OAAOc,SAAS;MAClB,CAAC,MAAM;QACL,MAAM,IAAII,KAAK,CAACJ,SAAS,CAACK,OAAO,IAAI,cAAc,CAAC;MACtD;IACF,CAAC,CAAC,OAAOzC,KAAK,EAAE;MACd,MAAM,IAAI,CAACW,WAAW,CAACX,KAAK,CAAC;IAC/B;EACF;;EAEA;AACF;AACA;EACE,MAAM0C,QAAQA,CAACC,QAA+D,EAA0B;IACtG,IAAI;MACF,MAAMxC,QAAQ,GAAG,MAAM,IAAI,CAACnB,MAAM,CAACmD,IAAI,CAAC,gBAAgB,EAAEQ,QAAQ,CAAC;MACnE,MAAMC,YAAY,GAAGzC,QAAQ,CAACkC,IAAqB;MAEnD,IAAIO,YAAY,CAACN,OAAO,IAAIM,YAAY,CAAC/C,WAAW,IAAI+C,YAAY,CAACrC,YAAY,EAAE;QACjF,MAAM,IAAI,CAACgC,SAAS,CAAC;UACnB1C,WAAW,EAAE+C,YAAY,CAAC/C,WAAW;UACrCU,YAAY,EAAEqC,YAAY,CAACrC;QAC7B,CAAC,CAAC;QAEF,IAAI,CAAC7B,IAAI,GAAGkE,YAAY,CAAClE,IAAI;QAC7B,IAAI,CAAC4C,iBAAiB,CAAC,CAAC;QAExB,OAAOsB,YAAY;MACrB,CAAC,MAAM;QACL,MAAM,IAAIJ,KAAK,CAACI,YAAY,CAACH,OAAO,IAAI,qBAAqB,CAAC;MAChE;IACF,CAAC,CAAC,OAAOzC,KAAK,EAAE;MACd,MAAM,IAAI,CAACW,WAAW,CAACX,KAAK,CAAC;IAC/B;EACF;;EAEA;AACF;AACA;EACE,MAAMU,MAAMA,CAAA,EAAkB;IAC5B;IACA,IAAI,IAAI,CAACjC,MAAM,EAAE8B,YAAY,EAAE;MAC7B,IAAI;QACF,MAAM,IAAI,CAACvB,MAAM,CAACmD,IAAI,CAAC,cAAc,EAAE;UACrC5B,YAAY,EAAE,IAAI,CAAC9B,MAAM,CAAC8B;QAC5B,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOP,KAAK,EAAE;QACdwB,OAAO,CAACC,IAAI,CAAC,iCAAiC,EAAEzB,KAAK,CAAC;MACxD;IACF;;IAEA;IACA,IAAI,CAACvB,MAAM,GAAG,IAAI;IAClB,IAAI,CAACC,IAAI,GAAG,IAAI;;IAEhB;IACA,IAAI;MACF,MAAMH,YAAY,CAACgD,UAAU,CAAC,IAAI,CAAC1C,UAAU,CAAC;IAChD,CAAC,CAAC,OAAOmB,KAAK,EAAE;MACdwB,OAAO,CAACC,IAAI,CAAC,oCAAoC,EAAEzB,KAAK,CAAC;IAC3D;IAEA,IAAI,CAACsB,iBAAiB,CAAC,CAAC;EAC1B;;EAEA;AACF;AACA;EACE,MAAcd,aAAaA,CAAA,EAAwB;IACjD,IAAI,CAAC,IAAI,CAAC/B,MAAM,EAAE8B,YAAY,EAAE;MAC9B,MAAM,IAAIiC,KAAK,CAAC,4BAA4B,CAAC;IAC/C;;IAEA;IACA,IAAI,IAAI,CAAC7D,cAAc,EAAE;MACvB,OAAO,IAAI,CAACA,cAAc;IAC5B;IAEA,IAAI,CAACA,cAAc,GAAG,IAAI,CAACkE,mBAAmB,CAAC,CAAC;IAEhD,IAAI;MACF,MAAMC,SAAS,GAAG,MAAM,IAAI,CAACnE,cAAc;MAC3C,IAAI,CAACA,cAAc,GAAG,IAAI;MAC1B,OAAOmE,SAAS;IAClB,CAAC,CAAC,OAAO9C,KAAK,EAAE;MACd,IAAI,CAACrB,cAAc,GAAG,IAAI;MAC1B,MAAMqB,KAAK;IACb;EACF;;EAEA;AACF;AACA;EACE,MAAc6C,mBAAmBA,CAAA,EAAwB;IACvD,IAAI;MACF,MAAM1C,QAAQ,GAAG,MAAM,IAAI,CAACnB,MAAM,CAACmD,IAAI,CAAC,eAAe,EAAE;QACvD5B,YAAY,EAAE,IAAI,CAAC9B,MAAM,CAAE8B;MAC7B,CAAC,CAAC;MAEF,MAAMuC,SAAqB,GAAG;QAC5BjD,WAAW,EAAEM,QAAQ,CAACkC,IAAI,CAACxC,WAAW;QACtCU,YAAY,EAAEJ,QAAQ,CAACkC,IAAI,CAAC9B;MAC9B,CAAC;MAED,MAAM,IAAI,CAACgC,SAAS,CAACO,SAAS,CAAC;MAC/B,OAAOA,SAAS;IAClB,CAAC,CAAC,OAAO9C,KAAK,EAAE;MACd;MACA,MAAM,IAAI,CAACU,MAAM,CAAC,CAAC;MACnB,MAAM,IAAI,CAACC,WAAW,CAACX,KAAK,CAAC;IAC/B;EACF;;EAEA;AACF;AACA;EACE,MAAcuC,SAASA,CAACO,SAAqB,EAAiB;IAC5D,IAAI,CAACrE,MAAM,GAAGqE,SAAS;IAEvB,IAAI;MACF,MAAMvE,YAAY,CAACwE,OAAO,CAAC,IAAI,CAAClE,UAAU,EAAEqC,IAAI,CAAC8B,SAAS,CAACF,SAAS,CAAC,CAAC;IACxE,CAAC,CAAC,OAAO9C,KAAK,EAAE;MACdwB,OAAO,CAACC,IAAI,CAAC,qCAAqC,EAAEzB,KAAK,CAAC;IAC5D;EACF;;EAEA;AACF;AACA;EACE,MAAcqB,gBAAgBA,CAAA,EAAkB;IAC9C,IAAI;MACF,MAAMlB,QAAQ,GAAG,MAAM,IAAI,CAACnB,MAAM,CAACiE,GAAG,CAAC,UAAU,CAAC;MAClD,IAAI,CAACvE,IAAI,GAAGyB,QAAQ,CAACkC,IAAI,CAACA,IAAI,IAAIlC,QAAQ,CAACkC,IAAI;IACjD,CAAC,CAAC,OAAOrC,KAAK,EAAE;MACdwB,OAAO,CAACC,IAAI,CAAC,yCAAyC,EAAEzB,KAAK,CAAC;MAC9D;IACF;EACF;;EAEA;AACF;AACA;EACEkD,YAAYA,CAAA,EAAc;IACxB,OAAO;MACLC,eAAe,EAAE,CAAC,CAAE,IAAI,CAAC1E,MAAM,EAAEoB,WAAY;MAC7CnB,IAAI,EAAE,IAAI,CAACA,IAAI;MACfD,MAAM,EAAE,IAAI,CAACA;IACf,CAAC;EACH;;EAEA;AACF;AACA;EACE,MAAM2E,cAAcA,CAAA,EAAiB;IACnC,IAAI,CAAC,IAAI,CAAC3E,MAAM,EAAEoB,WAAW,EAAE;MAC7B,MAAM,IAAI2C,KAAK,CAAC,mBAAmB,CAAC;IACtC;IAEA,IAAI,CAAC,IAAI,CAAC9D,IAAI,EAAE;MACd,MAAM,IAAI,CAAC2C,gBAAgB,CAAC,CAAC;IAC/B;IAEA,OAAO,IAAI,CAAC3C,IAAI;EAClB;;EAEA;AACF;AACA;EACE2E,iBAAiBA,CAACC,QAAoC,EAAc;IAClE,IAAI,CAAC1E,SAAS,CAAC2E,IAAI,CAACD,QAAQ,CAAC;;IAE7B;IACAA,QAAQ,CAAC,IAAI,CAACJ,YAAY,CAAC,CAAC,CAAC;;IAE7B;IACA,OAAO,MAAM;MACX,IAAI,CAACtE,SAAS,GAAG,IAAI,CAACA,SAAS,CAAC4E,MAAM,CAACC,QAAQ,IAAIA,QAAQ,KAAKH,QAAQ,CAAC;IAC3E,CAAC;EACH;;EAEA;AACF;AACA;EACUhC,iBAAiBA,CAAA,EAAS;IAChC,MAAMoC,KAAK,GAAG,IAAI,CAACR,YAAY,CAAC,CAAC;IACjC,IAAI,CAACtE,SAAS,CAAC+E,OAAO,CAACF,QAAQ,IAAI;MACjC,IAAI;QACFA,QAAQ,CAACC,KAAK,CAAC;MACjB,CAAC,CAAC,OAAO1D,KAAK,EAAE;QACdwB,OAAO,CAACxB,KAAK,CAAC,2BAA2B,EAAEA,KAAK,CAAC;MACnD;IACF,CAAC,CAAC;EACJ;;EAEA;AACF;AACA;EACUW,WAAWA,CAACX,KAAU,EAAS;IACrC,IAAIA,KAAK,EAAEG,QAAQ,EAAEkC,IAAI,EAAEI,OAAO,EAAE;MAClC,OAAO,IAAID,KAAK,CAACxC,KAAK,CAACG,QAAQ,CAACkC,IAAI,CAACI,OAAO,CAAC;IAC/C;IAEA,IAAIzC,KAAK,EAAEyC,OAAO,EAAE;MAClB,OAAO,IAAID,KAAK,CAACxC,KAAK,CAACyC,OAAO,CAAC;IACjC;IAEA,OAAO,IAAID,KAAK,CAAC,8BAA8B,CAAC;EAClD;;EAEA;AACF;AACA;EACEoB,SAASA,CAAA,EAAkB;IACzB,OAAO,IAAI,CAAC5E,MAAM;EACpB;;EAEA;AACF;AACA;EACE,MAAM6E,yBAAyBA,CAACC,QAAgB,EAAoD;IAClG,IAAI;MACF,MAAM3D,QAAQ,GAAG,MAAM,IAAI,CAACnB,MAAM,CAACiE,GAAG,CAAC,wBAAwBc,kBAAkB,CAACD,QAAQ,CAAC,EAAE,CAAC;MAC9F,OAAO3D,QAAQ,CAACkC,IAAI;IACtB,CAAC,CAAC,OAAOrC,KAAK,EAAE;MACd,MAAMgE,UAAU,GAAGhE,KAAmB;MACtC,IAAIgE,UAAU,EAAE7D,QAAQ,EAAEE,MAAM,KAAK,GAAG,EAAE;QACxC,OAAQ2D,UAAU,CAAC7D,QAAQ,CAASkC,IAAI;MAC1C;MACA,MAAM,IAAI,CAAC1B,WAAW,CAACX,KAAK,CAAC;IAC/B;EACF;;EAEA;AACF;AACA;EACE,MAAMiE,sBAAsBA,CAACC,KAAa,EAAoD;IAC5F,IAAI;MACF,MAAM/D,QAAQ,GAAG,MAAM,IAAI,CAACnB,MAAM,CAACmD,IAAI,CAAC,mBAAmB,EAAE;QAAE+B;MAAM,CAAC,CAAC;MACvE,OAAO/D,QAAQ,CAACkC,IAAI;IACtB,CAAC,CAAC,OAAOrC,KAAK,EAAE;MACd,MAAMgE,UAAU,GAAGhE,KAAmB;MACtC,IAAIgE,UAAU,EAAE7D,QAAQ,EAAEE,MAAM,KAAK,GAAG,EAAE;QACxC,OAAQ2D,UAAU,CAAC7D,QAAQ,CAASkC,IAAI;MAC1C;MACA,MAAM,IAAI,CAAC1B,WAAW,CAACX,KAAK,CAAC;IAC/B;EACF;AACF;;AAEA;AACA,IAAImE,iBAA+C,GAAG,IAAI;;AAE1D;AACA;AACA;AACA,OAAO,SAASC,cAAcA,CAACrF,OAAe,EAAyB;EACrE,IAAI,CAACoF,iBAAiB,EAAE;IACtBA,iBAAiB,GAAG,IAAI3F,qBAAqB,CAACO,OAAO,CAAC;EACxD;EACA,OAAOoF,iBAAiB;AAC1B;;AAEA;AACA;AACA;AACA,OAAO,SAASE,cAAcA,CAAA,EAA0B;EACtD,IAAI,CAACF,iBAAiB,EAAE;IACtB,MAAM,IAAI3B,KAAK,CAAC,sEAAsE,CAAC;EACzF;EACA,OAAO2B,iBAAiB;AAC1B","ignoreList":[]}

package/lib/module/core/index.js

@@ -3,10 +3,16 @@
 import axios from 'axios';
 import { jwtDecode } from 'jwt-decode';
 
+// Zero-Config Authentication Exports
+export { AuthenticationManager, initializeAuth, getAuthManager } from './auth-manager';
+export { AuthProvider, useAuth, useOxyClient, useAuthStatus, useCurrentUser, withAuth } from './use-auth';
+
 // Remove all FormData, form-data, and polyfill logic. Delete uploadFile and uploadFiles methods. Add a comment to use the new raw upload approach instead.
 
 // Import secure session types
 
+import { initializeAuth } from './auth-manager';
+
 /**
  * Default cloud URL for Oxy services, cloud is where the user files are. (e.g. images, videos, etc.). Not the API.
  */
@@ -17,24 +23,54 @@ export { DeviceManager } from '../utils/deviceManager';
 /**
  * OxyServices - Client library for interacting with the Oxy API
  * 
- * Note: For authentication status in UI components, use `isAuthenticated` from useOxy() context
+ * ZERO-CONFIG MODE:
+ * Use the new AuthProvider and useAuth hooks for automatic authentication management:
+ * 
+ * import { AuthProvider, useAuth } from '@oxyhq/services';
+ * 
+ * <AuthProvider baseURL="https://api.oxy.so">
+ *   <App />
+ * </AuthProvider>
+ * 
+ * Then in components:
+ * const { login, user, isAuthenticated } = useAuth();
+ * 
+ * LEGACY MODE:
+ * The OxyServices class below is maintained for backward compatibility
+ * but we recommend migrating to the new zero-config approach.
+ * 
+ * Note: For authentication status in UI components, use `isAuthenticated` from useAuth() context
  * instead of checking token status directly on this service.
  */
 export class OxyServices {
   accessToken = null;
   refreshToken = null;
   refreshPromise = null;
+  authManager = null;
 
   /**
    * Creates a new instance of the OxyServices client
    * @param config - Configuration for the client
    */
   constructor(config) {
-    this.client = axios.create({
-      baseURL: config.baseURL,
-      timeout: 10000 // 10 second timeout
-    });
+    // Try to use the new auth manager if available, otherwise fall back to legacy mode
+    try {
+      this.authManager = initializeAuth(config.baseURL);
+      this.client = this.authManager.getClient();
+    } catch {
+      // Fall back to legacy implementation
+      this.client = axios.create({
+        baseURL: config.baseURL,
+        timeout: 10000 // 10 second timeout
+      });
+      this.setupLegacyInterceptors();
+    }
+  }
 
+  /**
+   * Setup legacy interceptors (only used if auth manager is not available)
+   */
+  setupLegacyInterceptors() {
     // Interceptor for adding auth header and handling token refresh
     this.client.interceptors.request.use(async req => {
       if (!this.accessToken) {