@raisindb/client 0.5.13 → 0.5.15

package/dist/index.mjs

@@ -6754,7 +6754,14 @@ var IdentityAuthApi = class {
       skipAuth: true
     });
   }
-  /** Sign in with email and password, where the repository enables it. */
+  /**
+   * Sign in with email and password, where the repository enables it.
+   *
+   * `rememberMe` chooses the lifetime of the sign-in: the session AND its refresh
+   * token last 30 days with it and 24 hours without (both configurable per tenant:
+   * `refresh_token_duration_days`, `refresh_token_session_hours`). Refreshing never
+   * extends a session past that.
+   */
   async login(email, password, options) {
     return this.transport({
       method: "POST",
@@ -8137,6 +8144,7 @@ var _RaisinClient = class _RaisinClient extends EventEmitter2 {
       tenantId: options.tenantId ?? this.extractTenantFromUrl(connectionUrl),
       defaultBranch: options.defaultBranch ?? "main"
     };
+    this._tokenRefresher = options.tokenRefresher;
     this._httpBaseUrl = options.httpBaseUrl ?? this.deriveHttpUrl(connectionUrl);
     this._repository = options.repository ?? this.extractRepositoryFromUrl(connectionUrl);
     this._context = {
@@ -8904,6 +8912,7 @@ var _RaisinClient = class _RaisinClient extends EventEmitter2 {
     return this._refreshInFlight;
   }
   async _refreshToken() {
+    if (this._tokenRefresher) return this._refreshViaHook(this._tokenRefresher);
     const refreshToken = this.authManager.storage.getRefreshToken();
     if (!refreshToken) {
       logger.warn("[refreshToken] No refresh token available");
@@ -8960,6 +8969,31 @@ var _RaisinClient = class _RaisinClient extends EventEmitter2 {
       return null;
     }
   }
+  /** `refreshToken()` through `ClientOptions.tokenRefresher` (the session is not the page's to renew). */
+  async _refreshViaHook(hook) {
+    try {
+      const res = await hook();
+      const accessToken = typeof res === "string" ? res : res?.accessToken;
+      if (!accessToken) {
+        this.authManager.clear();
+        this._currentUser = null;
+        this.emit("auth_error", new Error("Token refresh failed - session expired"));
+        return null;
+      }
+      this.authManager.storage.setAccessToken(accessToken);
+      this.authManager.adoptToken(accessToken);
+      const exp = typeof res === "object" && res?.expiresAt ? _RaisinClient.expiresAtToMs(res.expiresAt) : (AuthManager.parseToken(accessToken)?.exp ?? 0) * 1e3;
+      const inMs = exp - Date.now() - 6e4;
+      if (exp && inMs > 0) this.scheduleAutoRefresh(inMs);
+      const user = this._currentUser ? { id: this._currentUser.userId, email: "", displayName: null, avatarUrl: null, emailVerified: false, home: null } : { id: "", email: "", displayName: null, avatarUrl: null, emailVerified: false, home: null };
+      this._emitAuthEvent("TOKEN_REFRESHED");
+      this.emit("token_refreshed", user);
+      return user;
+    } catch (err) {
+      logger.error("[refreshToken] tokenRefresher failed:", err);
+      return null;
+    }
+  }
   /**
    * Fetch with a timeout derived from `requestTimeout`.
    *