@pagamio/frontend-commons-lib 0.8.292 → 0.8.293

package/lib/api/client.js

@@ -160,10 +160,24 @@ export class ApiClient {
      */
     createUrl(endpoint, params) {
         const raw = endpoint.startsWith('http') ? endpoint : `${this.config.baseURL}${endpoint}`;
-        // When baseURL is a relative path (e.g. /api/v1) we need window.location.origin
-        // as the base for the URL constructor.
-        const base = typeof window !== 'undefined' ? window.location.origin : undefined;
-        const url = new URL(raw, base);
+        // Absolute URLs work directly. Relative paths need a base for the URL
+        // constructor — use window.location.origin in the browser, or the
+        // server-side API_BASE_URL during SSR.
+        let url;
+        if (raw.startsWith('http')) {
+            url = new URL(raw);
+        }
+        else if (typeof window !== 'undefined') {
+            url = new URL(raw, window.location.origin);
+        }
+        else {
+            // SSR: resolve relative path against the backend URL so server-side
+            // fetch calls go directly to the backend (no proxy needed server→server).
+            const ssrBase = process.env?.API_BASE_URL?.replace(/\/api\/v1$/, '');
+            if (!ssrBase)
+                throw new Error('API_BASE_URL env var is required for SSR');
+            url = new URL(raw, ssrBase);
+        }
         if (params) {
             Object.entries(params).forEach(([key, value]) => {
                 url.searchParams.append(key, value);

package/lib/auth/services/LogoutService.js

@@ -63,7 +63,19 @@ export class LogoutService {
         }
     }
     async invalidateServerSession(endpoint, token) {
-        const fullEndpoint = endpoint.startsWith('http') ? endpoint : `${this.baseUrl}${endpoint}`;
+        let fullEndpoint = endpoint.startsWith('http') ? endpoint : `${this.baseUrl}${endpoint}`;
+        // Resolve relative URLs for SSR — Node's fetch requires absolute URLs.
+        if (!fullEndpoint.startsWith('http')) {
+            if (typeof window !== 'undefined') {
+                fullEndpoint = `${window.location.origin}${fullEndpoint}`;
+            }
+            else {
+                const serverBase = process.env?.API_BASE_URL?.replace(/\/api\/v1$/, '');
+                if (!serverBase)
+                    throw new Error('API_BASE_URL env var is required for SSR');
+                fullEndpoint = `${serverBase}${fullEndpoint}`;
+            }
+        }
         const response = await fetch(fullEndpoint, {
             method: 'POST',
             headers: {

package/lib/auth/utils/TokenManager.js

@@ -64,7 +64,20 @@ export class TokenManager {
             // Requests go through the same-origin proxy so cookies are first-party
             // and sent automatically with credentials: 'same-origin'.
             const oldRefreshToken = this.getRefreshToken();
-            const response = await fetch(`${this.baseUrl}${this.refreshEndpoint}`, {
+            // Resolve relative URLs for SSR — Node's fetch requires absolute URLs.
+            let refreshUrl = `${this.baseUrl}${this.refreshEndpoint}`;
+            if (!refreshUrl.startsWith('http')) {
+                if (typeof window !== 'undefined') {
+                    refreshUrl = `${window.location.origin}${refreshUrl}`;
+                }
+                else {
+                    const serverBase = process.env?.API_BASE_URL?.replace(/\/api\/v1$/, '');
+                    if (!serverBase)
+                        throw new Error('API_BASE_URL env var is required for SSR');
+                    refreshUrl = `${serverBase}${refreshUrl}`;
+                }
+            }
+            const response = await fetch(refreshUrl, {
                 method: 'POST',
                 credentials: 'same-origin',
                 headers: {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pagamio/frontend-commons-lib",
   "description": "Pagamio library for Frontend reusable components like the form engine and table container",
-  "version": "0.8.292",
+  "version": "0.8.293",
   "publishConfig": {
     "access": "public",
     "provenance": false