@pagamio/frontend-commons-lib 0.8.255 → 0.8.256

package/lib/auth/utils/TokenManager.js

@@ -60,27 +60,30 @@ export class TokenManager {
     }
     async refreshTokens() {
         try {
+            // The refresh token is stored as an httpOnly cookie and cannot be read
+            // by JS. We send `credentials: 'include'` so the browser attaches it
+            // automatically, and `x-origin-web` so the backend reads from cookies.
             const oldRefreshToken = this.getRefreshToken();
-            if (!oldRefreshToken) {
-                this.clearAllTokens();
-                throw new Error('No refresh token available');
-            }
             const response = await fetch(`${this.baseUrl}${this.refreshEndpoint}`, {
                 method: 'POST',
+                credentials: 'include',
                 headers: {
                     'Content-Type': 'application/json',
+                    'x-origin-web': 'web-client',
                 },
-                body: JSON.stringify({ refreshToken: oldRefreshToken }),
+                body: JSON.stringify(oldRefreshToken ? { refreshToken: oldRefreshToken } : {}),
             });
             const data = await response.json();
             if (!response.ok) {
-                throw new Error(data.error || 'Failed to refresh token');
+                throw new Error(data.error || data.message || 'Failed to refresh token');
             }
-            const { accessToken, refreshToken: newRefreshToken, accessTokenExpiresIn, refreshTokenExpiresIn } = data;
+            const { accessToken, accessTokenExpiresIn, refreshToken: newRefreshToken, refreshTokenExpiresIn } = data;
+            // Default to 1 hour if the backend doesn't return accessTokenExpiresIn
+            const expiresIn = accessTokenExpiresIn || 3600;
             this.handleAuthTokens({
                 accessToken: {
                     token: accessToken,
-                    expiresIn: accessTokenExpiresIn,
+                    expiresIn,
                 },
                 ...(newRefreshToken && refreshTokenExpiresIn
                     ? {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pagamio/frontend-commons-lib",
   "description": "Pagamio library for Frontend reusable components like the form engine and table container",
-  "version": "0.8.255",
+  "version": "0.8.256",
   "publishConfig": {
     "access": "public",
     "provenance": false