@passflow/core 0.21.0 → 0.21.1

package/dist/index.d.cts

@@ -3432,6 +3432,15 @@ export declare class TokenCacheService {
    * construction. Without it, `getTokensWithRefresh()` returns the cache and sends nothing.
    */
   attachRefreshController(controller: Pick<RefreshController, 'refresh' | 'busy'> | undefined): void;
+  /**
+   * Starts the expiry check. `Passflow.subscribe()` calls it on every subscribe, so it must be
+   * safe to repeat:
+   * - A filled cache wins over storage. The cache only moves forward (the refresh controller
+   *   and its fence own every later change), while storage can still hold an older pair of the
+   *   same session (a held tab). Reading storage here would move the cache back.
+   * - `TokenCacheExpired{isExpired:true}` fires only when the expired state changes, not on
+   *   every call.
+   */
   initialize(): void;
   startTokenCheck(): void;
   private setupLifecycleListeners;

package/dist/index.d.ts

@@ -3432,6 +3432,15 @@ export declare class TokenCacheService {
    * construction. Without it, `getTokensWithRefresh()` returns the cache and sends nothing.
    */
   attachRefreshController(controller: Pick<RefreshController, 'refresh' | 'busy'> | undefined): void;
+  /**
+   * Starts the expiry check. `Passflow.subscribe()` calls it on every subscribe, so it must be
+   * safe to repeat:
+   * - A filled cache wins over storage. The cache only moves forward (the refresh controller
+   *   and its fence own every later change), while storage can still hold an older pair of the
+   *   same session (a held tab). Reading storage here would move the cache back.
+   * - `TokenCacheExpired{isExpired:true}` fires only when the expired state changes, not on
+   *   every call.
+   */
   initialize(): void;
   startTokenCheck(): void;
   private setupLifecycleListeners;

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import e from "axios";
 import { startAuthentication as t, startRegistration as n } from "@simplewebauthn/browser";
 // package.json
-var r = "0.21.0", i = "X-Passflow-Clientid", a = "Authorization", o = "X-Passflow-DeviceId", s = "X-Passflow-DeviceType", c = r, l = [
+var r = "0.21.1", i = "X-Passflow-Clientid", a = "Authorization", o = "X-Passflow-DeviceId", s = "X-Passflow-DeviceType", c = r, l = [
 	"id",
 	"offline",
 	"openid"
@@ -4397,13 +4397,13 @@ var _r = "passflow_2fa_pkce", vr = 3e5, yr = class {
 	}
 	initialize() {
 		try {
-			let e = this.storageManager.getTokens();
-			if (!e) return;
-			if (!e.access_token) {
-				this.setTokensCache(e), this.startTokenCheck();
+			let e = this.tokensCache, t = e ?? this.storageManager.getTokens();
+			if (!t) return;
+			if (!t.access_token) {
+				e || this.setTokensCache(t), this.startTokenCheck();
 				return;
 			}
-			k(A(e.access_token)) ? (this.tokenExpiredFlag = !0, this.stopTokenCheck(), this.subscribeStore.notify(Z.TokenCacheExpired, { isExpired: !0 })) : (this.setTokensCache(e), this.startTokenCheck());
+			k(A(t.access_token)) ? (this.stopTokenCheck(), this.tokenExpiredFlag || (this.tokenExpiredFlag = !0, this.subscribeStore.notify(Z.TokenCacheExpired, { isExpired: !0 }))) : (e || this.setTokensCache(t), this.startTokenCheck());
 		} catch (e) {
 			let t = {
 				operation: "tokens.load",