@qikdev/sdk 1.0.1 → 1.0.4

package/dist/{docs/qik.auth.js.html → qik.auth.js.html}

@@ -27,7 +27,7 @@
 
 <nav >
     
-    <h2><a href="index.html">Home</a></h2><h3>Classes</h3><ul><li><a href="access.html">access</a><ul class='methods'><li data-type='method'><a href="access.html#.actionableScopes">actionableScopes</a></li><li data-type='method'><a href="access.html#.allPermissions">allPermissions</a></li><li data-type='method'><a href="access.html#.allPermissionTypes">allPermissionTypes</a></li><li data-type='method'><a href="access.html#.allUserScopes">allUserScopes</a></li><li data-type='method'><a href="access.html#.canCreate">canCreate</a></li><li data-type='method'><a href="access.html#.canDeleteItem">canDeleteItem</a></li><li data-type='method'><a href="access.html#.canEditItem">canEditItem</a></li><li data-type='method'><a href="access.html#.canEraseItem">canEraseItem</a></li><li data-type='method'><a href="access.html#.canKnowOf">canKnowOf</a></li><li data-type='method'><a href="access.html#.canListItem">canListItem</a></li><li data-type='method'><a href="access.html#.canRestoreItem">canRestoreItem</a></li><li data-type='method'><a href="access.html#.canViewItem">canViewItem</a></li><li data-type='method'><a href="access.html#.checkActionAccess">checkActionAccess</a></li><li data-type='method'><a href="access.html#.getAllDescendants">getAllDescendants</a></li><li data-type='method'><a href="access.html#.has">has</a></li><li data-type='method'><a href="access.html#.hashPermissions">hashPermissions</a></li><li data-type='method'><a href="access.html#.isAdministrator">isAdministrator</a></li><li data-type='method'><a href="access.html#.isOwner">isOwner</a></li></ul></li><li><a href="api.html">api</a><ul class='methods'><li data-type='method'><a href="api.html#.delete">delete</a></li><li data-type='method'><a href="api.html#.generateEndpointURL">generateEndpointURL</a></li><li data-type='method'><a href="api.html#.get">get</a></li><li data-type='method'><a href="api.html#.patch">patch</a></li><li data-type='method'><a href="api.html#.post">post</a></li><li data-type='method'><a href="api.html#.put">put</a></li></ul></li><li><a href="auth.html">auth</a><ul class='methods'><li data-type='method'><a href="auth.html#.changeOrganisation">changeOrganisation</a></li><li data-type='method'><a href="auth.html#.ensureValidToken">ensureValidToken</a></li><li data-type='method'><a href="auth.html#.getCurrentToken">getCurrentToken</a></li><li data-type='method'><a href="auth.html#.getCurrentUser">getCurrentUser</a></li><li data-type='method'><a href="auth.html#.impersonate">impersonate</a></li><li data-type='method'><a href="auth.html#.login">login</a></li><li data-type='method'><a href="auth.html#.logout">logout</a></li><li data-type='method'><a href="auth.html#.retrieveUserFromResetToken">retrieveUserFromResetToken</a></li><li data-type='method'><a href="auth.html#.sendResetPasswordRequest">sendResetPasswordRequest</a></li><li data-type='method'><a href="auth.html#.set">set</a></li><li data-type='method'><a href="auth.html#.sync">sync</a></li><li data-type='method'><a href="auth.html#.updateUserWithToken">updateUserWithToken</a></li></ul></li><li><a href="cache.html">cache</a><ul class='methods'><li data-type='method'><a href="cache.html#.get">get</a></li><li data-type='method'><a href="cache.html#.reset">reset</a></li></ul></li><li><a href="content.html">content</a><ul class='methods'><li data-type='method'><a href="content.html#.create">create</a></li><li data-type='method'><a href="content.html#.delete">delete</a></li><li data-type='method'><a href="content.html#.get">get</a></li><li data-type='method'><a href="content.html#.getFromSlug">getFromSlug</a></li><li data-type='method'><a href="content.html#.glossary">glossary</a></li><li data-type='method'><a href="content.html#.list">list</a></li><li data-type='method'><a href="content.html#.patch">patch</a></li><li data-type='method'><a href="content.html#.restore">restore</a></li><li data-type='method'><a href="content.html#.scopeGlossary">scopeGlossary</a></li><li data-type='method'><a href="content.html#.update">update</a></li><li data-type='method'><a href="content.html#.validateField">validateField</a></li><li data-type='method'><a href="content.html#.variables">variables</a></li></ul></li><li><a href="files.html">files</a><ul class='methods'><li data-type='method'><a href="files.html#.downloadUrl">downloadUrl</a></li><li data-type='method'><a href="files.html#.filesize">filesize</a></li><li data-type='method'><a href="files.html#.getBinaryTypeFromMime">getBinaryTypeFromMime</a></li><li data-type='method'><a href="files.html#.mediaUrl">mediaUrl</a></li></ul></li><li><a href="filter.html">filter</a><ul class='methods'><li data-type='method'><a href="filter.html#.activeFilterKeys">activeFilterKeys</a></li><li data-type='method'><a href="filter.html#.activeFilterKeys">activeFilterKeys</a></li><li data-type='method'><a href="filter.html#.activeFilterOperators">activeFilterOperators</a></li><li data-type='method'><a href="filter.html#.activeFilters">activeFilters</a></li><li data-type='method'><a href="filter.html#.activeFilterValues">activeFilterValues</a></li><li data-type='method'><a href="filter.html#.filterChangeString">filterChangeString</a></li><li data-type='method'><a href="filter.html#.isValidFilter">isValidFilter</a></li></ul></li><li><a href="socket.html">socket</a><ul class='methods'><li data-type='method'><a href="socket.html#.channel">channel</a></li><li data-type='method'><a href="socket.html#.close">close</a></li><li data-type='method'><a href="socket.html#.connect">connect</a></li><li data-type='method'><a href="socket.html#.reconnect">reconnect</a></li><li data-type='method'><a href="socket.html#.subscribe">subscribe</a></li><li data-type='method'><a href="socket.html#.unsubscribe">unsubscribe</a></li></ul></li><li><a href="system.html">system</a><ul class='methods'><li data-type='method'><a href="system.html#.countries">countries</a></li></ul></li></ul>
+    <h2><a href="index.html">Home</a></h2><h3>Classes</h3><ul><li><a href="access.html">access</a><ul class='methods'><li data-type='method'><a href="access.html#.actionableScopes">actionableScopes</a></li><li data-type='method'><a href="access.html#.actionableScopes">actionableScopes</a></li><li data-type='method'><a href="access.html#.allPermissions">allPermissions</a></li><li data-type='method'><a href="access.html#.allPermissions">allPermissions</a></li><li data-type='method'><a href="access.html#.allPermissionTypes">allPermissionTypes</a></li><li data-type='method'><a href="access.html#.allPermissionTypes">allPermissionTypes</a></li><li data-type='method'><a href="access.html#.allUserScopes">allUserScopes</a></li><li data-type='method'><a href="access.html#.allUserScopes">allUserScopes</a></li><li data-type='method'><a href="access.html#.canCreate">canCreate</a></li><li data-type='method'><a href="access.html#.canCreate">canCreate</a></li><li data-type='method'><a href="access.html#.canDeleteItem">canDeleteItem</a></li><li data-type='method'><a href="access.html#.canDeleteItem">canDeleteItem</a></li><li data-type='method'><a href="access.html#.canEditItem">canEditItem</a></li><li data-type='method'><a href="access.html#.canEditItem">canEditItem</a></li><li data-type='method'><a href="access.html#.canEraseItem">canEraseItem</a></li><li data-type='method'><a href="access.html#.canEraseItem">canEraseItem</a></li><li data-type='method'><a href="access.html#.canKnowOf">canKnowOf</a></li><li data-type='method'><a href="access.html#.canKnowOf">canKnowOf</a></li><li data-type='method'><a href="access.html#.canListItem">canListItem</a></li><li data-type='method'><a href="access.html#.canListItem">canListItem</a></li><li data-type='method'><a href="access.html#.canRestoreItem">canRestoreItem</a></li><li data-type='method'><a href="access.html#.canRestoreItem">canRestoreItem</a></li><li data-type='method'><a href="access.html#.canViewItem">canViewItem</a></li><li data-type='method'><a href="access.html#.canViewItem">canViewItem</a></li><li data-type='method'><a href="access.html#.checkActionAccess">checkActionAccess</a></li><li data-type='method'><a href="access.html#.checkActionAccess">checkActionAccess</a></li><li data-type='method'><a href="access.html#.getAllDescendants">getAllDescendants</a></li><li data-type='method'><a href="access.html#.getAllDescendants">getAllDescendants</a></li><li data-type='method'><a href="access.html#.has">has</a></li><li data-type='method'><a href="access.html#.has">has</a></li><li data-type='method'><a href="access.html#.hasFeature">hasFeature</a></li><li data-type='method'><a href="access.html#.hasFeature">hasFeature</a></li><li data-type='method'><a href="access.html#.hashPermissions">hashPermissions</a></li><li data-type='method'><a href="access.html#.hashPermissions">hashPermissions</a></li><li data-type='method'><a href="access.html#.isAdministrator">isAdministrator</a></li><li data-type='method'><a href="access.html#.isAdministrator">isAdministrator</a></li><li data-type='method'><a href="access.html#.isAssignee">isAssignee</a></li><li data-type='method'><a href="access.html#.isAssignee">isAssignee</a></li><li data-type='method'><a href="access.html#.isOwner">isOwner</a></li><li data-type='method'><a href="access.html#.isOwner">isOwner</a></li></ul></li><li></li><li><a href="api.html">api</a><ul class='methods'><li data-type='method'><a href="api.html#.generateEndpointURL">generateEndpointURL</a></li><li data-type='method'><a href="api.html#.generateEndpointURL">generateEndpointURL</a></li></ul></li><li></li><li><a href="auth.html">auth</a><ul class='methods'><li data-type='method'><a href="auth.html#.changeOrganisation">changeOrganisation</a></li><li data-type='method'><a href="auth.html#.changeOrganisation">changeOrganisation</a></li><li data-type='method'><a href="auth.html#.ensureValidToken">ensureValidToken</a></li><li data-type='method'><a href="auth.html#.ensureValidToken">ensureValidToken</a></li><li data-type='method'><a href="auth.html#.getCurrentToken">getCurrentToken</a></li><li data-type='method'><a href="auth.html#.getCurrentToken">getCurrentToken</a></li><li data-type='method'><a href="auth.html#.getCurrentUser">getCurrentUser</a></li><li data-type='method'><a href="auth.html#.getCurrentUser">getCurrentUser</a></li><li data-type='method'><a href="auth.html#.impersonate">impersonate</a></li><li data-type='method'><a href="auth.html#.impersonate">impersonate</a></li><li data-type='method'><a href="auth.html#.login">login</a></li><li data-type='method'><a href="auth.html#.login">login</a></li><li data-type='method'><a href="auth.html#.logout">logout</a></li><li data-type='method'><a href="auth.html#.logout">logout</a></li><li data-type='method'><a href="auth.html#.retrieveUserFromResetToken">retrieveUserFromResetToken</a></li><li data-type='method'><a href="auth.html#.retrieveUserFromResetToken">retrieveUserFromResetToken</a></li><li data-type='method'><a href="auth.html#.sendResetPasswordRequest">sendResetPasswordRequest</a></li><li data-type='method'><a href="auth.html#.sendResetPasswordRequest">sendResetPasswordRequest</a></li><li data-type='method'><a href="auth.html#.set">set</a></li><li data-type='method'><a href="auth.html#.set">set</a></li><li data-type='method'><a href="auth.html#.sync">sync</a></li><li data-type='method'><a href="auth.html#.sync">sync</a></li><li data-type='method'><a href="auth.html#.updateUserWithToken">updateUserWithToken</a></li><li data-type='method'><a href="auth.html#.updateUserWithToken">updateUserWithToken</a></li></ul></li><li></li><li><a href="cache.html">cache</a><ul class='methods'><li data-type='method'><a href="cache.html#.get">get</a></li><li data-type='method'><a href="cache.html#.get">get</a></li><li data-type='method'><a href="cache.html#.reset">reset</a></li><li data-type='method'><a href="cache.html#.reset">reset</a></li></ul></li><li></li><li><a href="content.html">content</a><ul class='methods'><li data-type='method'><a href="content.html#.create">create</a></li><li data-type='method'><a href="content.html#.create">create</a></li><li data-type='method'><a href="content.html#.delete">delete</a></li><li data-type='method'><a href="content.html#.delete">delete</a></li><li data-type='method'><a href="content.html#.get">get</a></li><li data-type='method'><a href="content.html#.get">get</a></li><li data-type='method'><a href="content.html#.getFromSlug">getFromSlug</a></li><li data-type='method'><a href="content.html#.getFromSlug">getFromSlug</a></li><li data-type='method'><a href="content.html#.glossary">glossary</a></li><li data-type='method'><a href="content.html#.glossary">glossary</a></li><li data-type='method'><a href="content.html#.list">list</a></li><li data-type='method'><a href="content.html#.list">list</a></li><li data-type='method'><a href="content.html#.patch">patch</a></li><li data-type='method'><a href="content.html#.patch">patch</a></li><li data-type='method'><a href="content.html#.restore">restore</a></li><li data-type='method'><a href="content.html#.restore">restore</a></li><li data-type='method'><a href="content.html#.scopeGlossary">scopeGlossary</a></li><li data-type='method'><a href="content.html#.scopeGlossary">scopeGlossary</a></li><li data-type='method'><a href="content.html#.update">update</a></li><li data-type='method'><a href="content.html#.update">update</a></li><li data-type='method'><a href="content.html#.validateField">validateField</a></li><li data-type='method'><a href="content.html#.validateField">validateField</a></li><li data-type='method'><a href="content.html#.variables">variables</a></li><li data-type='method'><a href="content.html#.variables">variables</a></li></ul></li><li></li><li><a href="files.html">files</a><ul class='methods'><li data-type='method'><a href="files.html#.downloadUrl">downloadUrl</a></li><li data-type='method'><a href="files.html#.downloadUrl">downloadUrl</a></li><li data-type='method'><a href="files.html#.duration">duration</a></li><li data-type='method'><a href="files.html#.duration">duration</a></li><li data-type='method'><a href="files.html#.filesize">filesize</a></li><li data-type='method'><a href="files.html#.filesize">filesize</a></li><li data-type='method'><a href="files.html#.getBinaryTypeFromMime">getBinaryTypeFromMime</a></li><li data-type='method'><a href="files.html#.getBinaryTypeFromMime">getBinaryTypeFromMime</a></li><li data-type='method'><a href="files.html#.mediaUrl">mediaUrl</a></li><li data-type='method'><a href="files.html#.mediaUrl">mediaUrl</a></li></ul></li><li></li><li><a href="filter.html">filter</a><ul class='methods'><li data-type='method'><a href="filter.html#.activeFilterKeys">activeFilterKeys</a></li><li data-type='method'><a href="filter.html#.activeFilterKeys">activeFilterKeys</a></li><li data-type='method'><a href="filter.html#.activeFilterKeys">activeFilterKeys</a></li><li data-type='method'><a href="filter.html#.activeFilterKeys">activeFilterKeys</a></li><li data-type='method'><a href="filter.html#.activeFilterOperators">activeFilterOperators</a></li><li data-type='method'><a href="filter.html#.activeFilterOperators">activeFilterOperators</a></li><li data-type='method'><a href="filter.html#.activeFilters">activeFilters</a></li><li data-type='method'><a href="filter.html#.activeFilters">activeFilters</a></li><li data-type='method'><a href="filter.html#.activeFilterValues">activeFilterValues</a></li><li data-type='method'><a href="filter.html#.activeFilterValues">activeFilterValues</a></li><li data-type='method'><a href="filter.html#.filterChangeString">filterChangeString</a></li><li data-type='method'><a href="filter.html#.filterChangeString">filterChangeString</a></li><li data-type='method'><a href="filter.html#.isValidFilter">isValidFilter</a></li><li data-type='method'><a href="filter.html#.isValidFilter">isValidFilter</a></li></ul></li><li></li><li><a href="geo.html">geo</a><ul class='methods'><li data-type='method'><a href="geo.html#.distance">distance</a></li><li data-type='method'><a href="geo.html#.distance">distance</a></li><li data-type='method'><a href="geo.html#.getDefaultCountry">getDefaultCountry</a></li><li data-type='method'><a href="geo.html#.getDefaultCountry">getDefaultCountry</a></li><li data-type='method'><a href="geo.html#.getDefaultTimezone">getDefaultTimezone</a></li><li data-type='method'><a href="geo.html#.getDefaultTimezone">getDefaultTimezone</a></li><li data-type='method'><a href="geo.html#.getPosition">getPosition</a></li><li data-type='method'><a href="geo.html#.getPosition">getPosition</a></li><li data-type='method'><a href="geo.html#.stopWatchPosition">stopWatchPosition</a></li><li data-type='method'><a href="geo.html#.stopWatchPosition">stopWatchPosition</a></li><li data-type='method'><a href="geo.html#.stopWatchPosition">stopWatchPosition</a></li><li data-type='method'><a href="geo.html#.stopWatchPosition">stopWatchPosition</a></li></ul></li><li></li><li><a href="module-QikStorage-CookieStorageAdapter.html">CookieStorageAdapter</a><ul class='methods'><li data-type='method'><a href="module-QikStorage-CookieStorageAdapter.html#getCookieOptions">getCookieOptions</a></li><li data-type='method'><a href="module-QikStorage-CookieStorageAdapter.html#getCookieOptions">getCookieOptions</a></li><li data-type='method'><a href="module-QikStorage-CookieStorageAdapter.html#isCookieMode">isCookieMode</a></li><li data-type='method'><a href="module-QikStorage-CookieStorageAdapter.html#isCookieMode">isCookieMode</a></li></ul></li><li></li><li><a href="module-QikStorage-LocalStorageAdapter.html">LocalStorageAdapter</a></li><li></li><li><a href="module-QikStorage-StorageAdapter.html">StorageAdapter</a><ul class='methods'><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#clearUser">clearUser</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#clearUser">clearUser</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#getAccessToken">getAccessToken</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#getAccessToken">getAccessToken</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#getRefreshToken">getRefreshToken</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#getRefreshToken">getRefreshToken</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#getTokenExpiry">getTokenExpiry</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#getTokenExpiry">getTokenExpiry</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#getUser">getUser</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#getUser">getUser</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#isAvailable">isAvailable</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#isAvailable">isAvailable</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#setUser">setUser</a></li><li data-type='method'><a href="module-QikStorage-StorageAdapter.html#setUser">setUser</a></li></ul></li><li></li><li><a href="socket.html">socket</a><ul class='methods'><li data-type='method'><a href="socket.html#.channel">channel</a></li><li data-type='method'><a href="socket.html#.channel">channel</a></li><li data-type='method'><a href="socket.html#.close">close</a></li><li data-type='method'><a href="socket.html#.close">close</a></li><li data-type='method'><a href="socket.html#.connect">connect</a></li><li data-type='method'><a href="socket.html#.connect">connect</a></li><li data-type='method'><a href="socket.html#.reconnect">reconnect</a></li><li data-type='method'><a href="socket.html#.reconnect">reconnect</a></li><li data-type='method'><a href="socket.html#.subscribe">subscribe</a></li><li data-type='method'><a href="socket.html#.subscribe">subscribe</a></li><li data-type='method'><a href="socket.html#.unsubscribe">unsubscribe</a></li><li data-type='method'><a href="socket.html#.unsubscribe">unsubscribe</a></li></ul></li><li></li><li><a href="system.html">system</a><ul class='methods'><li data-type='method'><a href="system.html#.countries">countries</a></li><li data-type='method'><a href="system.html#.countries">countries</a></li></ul></li><li></li></ul><h3>Modules</h3><ul><li><a href="module-QikStorage.html">QikStorage</a><ul class='methods'><li data-type='method'><a href="module-QikStorage.html#.createStorageAdapter">createStorageAdapter</a></li><li data-type='method'><a href="module-QikStorage.html#.createStorageAdapter">createStorageAdapter</a></li></ul></li><li></li></ul><h3>Global</h3><ul><li><a href="global.html#EventDispatcher">EventDispatcher</a></li></ul>
 </nav>
 
 <div id="main">
@@ -42,8 +42,8 @@
     
     <section>
         <article>
-            <pre class="prettyprint source linenums"><code>import axios from 'axios';
-import { EventDispatcher } from './qik.utils.js';
+            <pre class="prettyprint source linenums"><code>import { EventDispatcher } from './qik.utils.js';
+import { createStorageAdapter } from './qik.storage.js';
 
 ///////////////////////////////////////////////////
 
@@ -67,19 +67,27 @@ var QikAuth = function(qik) {
 
     ///////////////////////////////////////////////////
 
-    var sessionStorage = {};
-    var store = sessionStorage;
+    // Create storage adapter based on configuration
+    const storageAdapter = createStorageAdapter({
+        useHttpOnlyCookies: qik.useHttpOnlyCookies,
+        cookieConfig: qik.cookieConfig
+    });
+
     const tokenBufferSeconds = 10;
 
     ///////////////////////////////////////////////////
 
     const service = {
         debug: false,
+        storageAdapter: storageAdapter,
     }
 
+    // Backwards compatibility - keep store reference
     Object.defineProperty(service, 'store', {
-        value: store,
-        writable: false,
+        get: function() {
+            return { user: storageAdapter.getUser() };
+        },
+        enumerable: true
     });
 
     //Create a new dispatcher
@@ -91,7 +99,7 @@ var QikAuth = function(qik) {
     function dispatch(parameters) {
 
         //Get the current user
-        var user = store.user;
+        var user = storageAdapter.getUser();
 
         //Dispatch the change to the listeners
         if (service.onChange) {
@@ -119,8 +127,9 @@ var QikAuth = function(qik) {
 
     service.set = function(user, parameters, stopDispatch) {
 
-        if (JSON.stringify(store.user) != JSON.stringify(user)) {
-            store.user = user;
+        const currentUser = storageAdapter.getUser();
+        if (JSON.stringify(currentUser) != JSON.stringify(user)) {
+            storageAdapter.setUser(user);
             if (!stopDispatch) {
                 return dispatch(parameters)
             }
@@ -139,7 +148,7 @@ var QikAuth = function(qik) {
      */
 
     service.logout = function() {
-        delete store.user;
+        storageAdapter.clearUser();
         qik.cache.reset();
         return dispatch()
     }
@@ -310,19 +319,19 @@ var QikAuth = function(qik) {
 
             if (!credentials) {
                 return reject({
-                    message: 'Missing credentials!',
+                    message: 'Login requires an email and password',
                 })
             }
 
             if (!credentials.email || !credentials.email.length) {
                 return reject({
-                    message: 'Username was not provided',
+                    message: 'An email address is required to log in',
                 })
             }
 
             if (!credentials.password || !credentials.password.length) {
                 return reject({
-                    message: 'Password was not provided',
+                    message: 'A password is required to log in',
                 })
             }
 
@@ -332,6 +341,15 @@ var QikAuth = function(qik) {
                 bypassInterceptor: true
             }
 
+            // Check if we're in cookie mode
+            const isCookieMode = storageAdapter.isCookieMode &amp;&amp; storageAdapter.isCookieMode();
+            
+            if (isCookieMode) {
+                // Signal to backend that we want cookie-based auth
+                credentials.useCookies = true;
+                postOptions.withCredentials = true;
+            }
+
             /////////////////////////////////////////////
 
             var url = `${qik.apiURL}/user/login`;
@@ -349,7 +367,6 @@ var QikAuth = function(qik) {
 
                 if (autoAuthenticate) {
                     service.set(res.data);
-
                 }
 
                 resolve(res);
@@ -388,44 +405,44 @@ var QikAuth = function(qik) {
 
             if (!credentials) {
                 return reject({
-                    message: 'No details provided',
+                    message: 'Signup details are required',
                 })
             }
 
             if (!credentials.firstName || !credentials.firstName.length) {
                 return reject({
-                    message: 'First Name was not provided',
+                    message: 'Please provide a first name',
                 })
             }
 
             if (!credentials.lastName || !credentials.lastName.length) {
                 return reject({
-                    message: 'Last Name was not provided',
+                    message: 'Please provide a last name',
                 })
             }
 
             if (!credentials.email || !credentials.email.length) {
                 return reject({
-                    message: 'Email/Username was not provided',
+                    message: 'An email address is required to sign up',
                 })
             }
 
 
             if (!credentials.password || !credentials.password.length) {
                 return reject({
-                    message: 'Password was not provided',
+                    message: 'A password is required to sign up',
                 })
             }
 
             if (!credentials.confirmPassword || !credentials.confirmPassword.length) {
                 return reject({
-                    message: 'Confirm Password was not provided',
+                    message: 'Please confirm your password',
                 })
             }
 
             if (credentials.confirmPassword != credentials.password) {
                 return reject({
-                    message: 'Your passwords do not match',
+                    message: 'Password and confirmation do not match',
                 })
             }
 
@@ -435,6 +452,15 @@ var QikAuth = function(qik) {
                 bypassInterceptor: true
             }
 
+            // Check if we're in cookie mode
+            const isCookieMode = storageAdapter.isCookieMode &amp;&amp; storageAdapter.isCookieMode();
+            
+            if (isCookieMode) {
+                // Signal to backend that we want cookie-based auth
+                credentials.useCookies = true;
+                postOptions.withCredentials = true;
+            }
+
             /////////////////////////////////////////////
 
             var url = `${qik.apiURL}/user/signup`;
@@ -585,13 +611,13 @@ var QikAuth = function(qik) {
 
         if (!details) {
             return Promise.reject({
-                message: 'No details were provided for password reset request',
+                message: 'Please provide your account details to reset your password',
             })
         }
 
         if (!details.email || !details.email.length) {
             return Promise.reject({
-                message: 'Email is required but was not provided',
+                message: 'An email address is required for password reset',
             })
         }
 
@@ -625,18 +651,29 @@ var QikAuth = function(qik) {
 
         var currentUser = service.getCurrentUser();
         if (!currentUser) {
-
             return Promise.reject('No user');
         }
 
+        // Check if we're in cookie mode
+        const isCookieMode = storageAdapter.isCookieMode &amp;&amp; storageAdapter.isCookieMode();
+
+        if (isCookieMode) {
+            // In cookie mode, we can't check token expiry from JavaScript
+            // Just attempt a refresh if forced, otherwise let the server handle it
+            if (forceRefresh) {
+                return await service.refreshAccessToken();
+            } else {
+                // Return a placeholder - server will handle token validation
+                return 'cookie_mode_token';
+            }
+        }
+
+        // localStorage mode - existing token validation logic
         var { token } = currentUser;
         if (!token) {
-
             return Promise.reject('No token');
         }
 
-        /////////////////////////////////////////////////////
-
         //Check our date
         var now = new Date();
 
@@ -644,25 +681,18 @@ var QikAuth = function(qik) {
         //retiring the token
         now.setSeconds(now.getSeconds() + tokenBufferSeconds);
 
-        /////////////////////////////////////////////////////
-
         var expires = new Date(token.expires);
 
         if (forceRefresh) {
-            console.log('force refresh valid token', token.refreshToken)
             return await service.refreshAccessToken(token.refreshToken);
         }
 
         //If the token is still fresh
         if (now &lt; expires) {
-
             return token;
         } else {
-
             return await service.refreshAccessToken(token.refreshToken);
         }
-
-
     }
 
     ///////////////////////////////////////////////////
@@ -671,78 +701,77 @@ var QikAuth = function(qik) {
 
     service.refreshAccessToken = async function(refreshToken) {
 
-        // /////////////////////////////////////////////
-
-        // if (appContext) {
-
-        // } else {
-
-        // }
-
-        // /////////////////////////////////////////////
-
         //If there is already a request in progress
         if (refreshContext.inflightRefreshRequest) {
-
             return refreshContext.inflightRefreshRequest;
         }
 
         /////////////////////////////////////////////////////
 
-        //Create an refresh request
+        // Check if we're in cookie mode
+        const isCookieMode = storageAdapter.isCookieMode &amp;&amp; storageAdapter.isCookieMode();
 
+        //Create a refresh request
         refreshContext.inflightRefreshRequest = new Promise(function(resolve, reject) {
 
-            //Bypass the interceptor on all token refresh calls
-            //Because we don't need to add the access token etc onto it
+            let requestBody = {};
+            let requestOptions = {
+                bypassInterceptor: true,
+                withoutToken: true,
+            };
 
-            qik.api.post(`/user/refresh`, {
-                    refreshToken: refreshToken
-                }, {
-                    bypassInterceptor: true,
-                    withoutToken: true,
-                })
+            if (isCookieMode) {
+                // In cookie mode, refresh token is sent via httpOnly cookie
+                // No need to include it in the request body
+                requestOptions.withCredentials = true;
+            } else {
+                // In localStorage mode, send refresh token in request body
+                if (!refreshToken) {
+                    refreshContext.inflightRefreshRequest = null;
+                    return reject(new Error('No refresh token provided for localStorage mode'));
+                }
+                requestBody.refreshToken = refreshToken;
+            }
+
+            qik.api.post(`/user/refresh`, requestBody, requestOptions)
                 .then(function tokenRefreshComplete(res) {
 
                     //Update the user with any changes 
                     //returned back from the refresh request
-                    if (!res) {
-
+                    if (!res || !res.data) {
                         refreshContext.inflightRefreshRequest = null;
-                        return reject();
-
-                    } else {
-                        //Update with our new session
-                        service.set(res.data);
+                        return reject(new Error('Invalid refresh response'));
+                    }
 
+                    //Update with our new session
+                    service.set(res.data);
+                    dispatch();
 
-                        dispatch();
+                    // Return appropriate response based on mode
+                    if (isCookieMode) {
+                        // In cookie mode, just indicate success - tokens are in cookies
+                        resolve('cookie_token_refreshed');
+                    } else {
+                        // In localStorage mode, return the actual access token
+                        const newToken = res.data.token?.accessToken;
+                        if (newToken) {
+                            resolve(newToken);
+                        } else {
+                            reject(new Error('No access token in refresh response'));
+                        }
                     }
 
-                    //Resolve with the new token
-                    resolve(res.data.token);
-
                     //Remove the inflight request
                     setTimeout(function() {
                         refreshContext.inflightRefreshRequest = null;
-                    })
-
+                    });
 
                 })
                 .catch(function(err) {
-
-
-                    //TODO Check if invalid_refresh_token
-
-
-
                     setTimeout(function() {
                         refreshContext.inflightRefreshRequest = null;
                     });
                     reject(err);
-
-
-
                 });
         });
 
@@ -752,8 +781,6 @@ var QikAuth = function(qik) {
 
     ///////////////////////////////////////////////////
 
-    var retryCount = 0;
-
     /**
      * @alias auth.sync
      * @description A useful function to sync the current user session with the server.
@@ -767,33 +794,28 @@ var QikAuth = function(qik) {
         return qik.api.get('/user')
             .then(function(res) {
 
-
                 if (res.data) {
-                    if (store.user) {
-                        Object.assign(store.user.session, res.data);
+                    const currentUser = storageAdapter.getUser();
+                    if (currentUser) {
+                        const updatedUser = { ...currentUser };
+                        if (updatedUser.session) {
+                            Object.assign(updatedUser.session, res.data);
+                        } else {
+                            updatedUser.session = res.data;
+                        }
+                        service.set(updatedUser);
+                    } else {
+                        service.set(res.data);
                     }
                 } else {
                     service.set(null);
                 }
 
-
-                retryCount = 0;
-
                 dispatch();
             })
             .catch(function(err) {
-
-                // if (retryCount > 2) {
                 service.set(null);
-                retryCount = 0;
                 dispatch();
-                // } else {
-
-                // retryCount++;
-                // service.sync();
-                // }
-
-
             });
     }
 
@@ -807,7 +829,7 @@ var QikAuth = function(qik) {
      * const me = sdk.auth.getCurrentUser();
      */
     service.getCurrentUser = function() {
-        return store.user;
+        return storageAdapter.getUser();
     }
 
 
@@ -821,7 +843,13 @@ var QikAuth = function(qik) {
      */
     service.getCurrentToken = function() {
 
+        // First try to get token from storage adapter
+        var accessToken = storageAdapter.getAccessToken();
+        if (accessToken) {
+            return accessToken;
+        }
 
+        // For localStorage mode, check user object for token
         var user = service.getCurrentUser();
 
         //User is not logged in
@@ -863,7 +891,21 @@ var QikAuth = function(qik) {
 
             //////////////////////////////
 
-            var userDetails = await service.getCurrentUser();
+            // Check if we're in cookie mode
+            const isCookieMode = storageAdapter.isCookieMode &amp;&amp; storageAdapter.isCookieMode();
+
+            if (isCookieMode) {
+                // In cookie mode, browser automatically includes httpOnly cookies
+                // We don't need to manually add Authorization headers or handle token refresh
+                // Just ensure withCredentials is set for cross-origin requests
+                if (!originalRequest.withCredentials) {
+                    originalRequest.withCredentials = true;
+                }
+                return originalRequest;
+            }
+
+            // localStorage mode - existing logic for manual token management
+            var userDetails = service.getCurrentUser();
             var accessToken;
             var refreshToken;
             var expiryDate;
@@ -883,11 +925,8 @@ var QikAuth = function(qik) {
             if (accessToken) {
                 //Set the token of the request as the user's access token
                 originalRequest.headers['Authorization'] = `Bearer ${accessToken}`;
-
-
             } else {
                 //Return the original request without a token
-
                 return originalRequest;
             }
 
@@ -895,8 +934,6 @@ var QikAuth = function(qik) {
 
             //If no refresh token
             if (!refreshToken) {
-
-
                 //Continue with the original request
                 return originalRequest;
             }
@@ -979,7 +1016,8 @@ var QikAuth = function(qik) {
 }
 
 
-export default QikAuth;</code></pre>
+export default QikAuth;
+</code></pre>
         </article>
     </section>
 
@@ -993,7 +1031,7 @@ export default QikAuth;</code></pre>
 <br class="clear">
 
 <footer>
-    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 3.6.11</a> on Thu Sep 28 2023 07:24:39 GMT+1000 (Australian Eastern Standard Time) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
+    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 3.6.11</a> on Mon Jun 01 2026 23:37:17 GMT+1000 (Australian Eastern Standard Time) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
 </footer>
 
 <script>prettyPrint();</script>