@provablehq/sdk 0.11.8 → 0.11.9

package/dist/testnet/api-auth.d.cts

@@ -20,7 +20,9 @@ export declare const DEFAULT_API_KEY_HEADER = "X-API-Key";
  * - `api-key` (edge.provable.com): a provisioned key is sent verbatim on every request in a
  *   header (default `X-API-Key`). There is no registration, minting, or refresh in this mode;
  *   a 401 means the key is invalid or revoked and retrying cannot help.
- * - `none`: requests carry no auth headers.
+ * - `none`: requests carry no auth headers of their own. A token injected via
+ *   `setJwtData` is still sent — the session-driven pattern, where an external
+ *   session owns minting and hands a fresh token in before each request.
  */
 export type ApiAuthConfig = {
     mode: "jwt";

package/dist/testnet/api-auth.d.ts

@@ -20,7 +20,9 @@ export declare const DEFAULT_API_KEY_HEADER = "X-API-Key";
  * - `api-key` (edge.provable.com): a provisioned key is sent verbatim on every request in a
  *   header (default `X-API-Key`). There is no registration, minting, or refresh in this mode;
  *   a 401 means the key is invalid or revoked and retrying cannot help.
- * - `none`: requests carry no auth headers.
+ * - `none`: requests carry no auth headers of their own. A token injected via
+ *   `setJwtData` is still sent — the session-driven pattern, where an external
+ *   session owns minting and hands a fresh token in before each request.
  */
 export type ApiAuthConfig = {
     mode: "jwt";

package/dist/testnet/browser.cjs

@@ -1631,11 +1631,14 @@ class ApiAuth {
      * both a usable token and the material to mint one.
      */
     async headers() {
-        if (this.config.mode === "none")
-            return {};
         if (this.config.mode === "api-key") {
             return { [this.config.header ?? DEFAULT_API_KEY_HEADER]: this.config.value };
         }
+        if (this.config.mode === "none") {
+            // A token injected via setJwtData authenticates even without mint
+            // material: an external session owns minting and hands tokens in.
+            return this.jwtData?.jwt ? { Authorization: this.jwtData.jwt } : {};
+        }
         const stale = !this.jwtData || Date.now() >= this.jwtData.expiration - FIVE_MINUTES;
         if (stale) {
             const { apiKey, consumerId } = this.config;
@@ -1751,7 +1754,7 @@ class AleoNetworkClient {
             else {
                 this.headers = {
                     // This is replaced by the actual version by a Rollup plugin
-                    "X-Aleo-SDK-Version": "0.11.8",
+                    "X-Aleo-SDK-Version": "0.11.9",
                     "X-Aleo-environment": environment(),
                 };
             }
@@ -1773,7 +1776,7 @@ class AleoNetworkClient {
         else {
             this.headers = {
                 // This is replaced by the actual version by a Rollup plugin
-                "X-Aleo-SDK-Version": "0.11.8",
+                "X-Aleo-SDK-Version": "0.11.9",
                 "X-Aleo-environment": environment(),
             };
         }