@rebasepro/client 0.25.0 → 0.25.1

package/dist/index.es.js

@@ -2150,6 +2150,37 @@ function realtimeLostError() {
 function realtimeDebugOn() {
 	return Reflect.get(globalThis, "__REBASE_DEBUG_REALTIME__") === true;
 }
+/**
+* Connection chatter: the socket opened, signed in, closed, is redialling.
+*
+* `console.debug` where that is a debug level — a browser's console hides it
+* unless Verbose is asked for. Not in Node, where `console.debug` is
+* `console.log`: a script's `listen()` opened its stdout with "Connected to
+* PostgreSQL backend" and "WebSocket auto-authenticated", ahead of what the
+* script prints. There it is written only while realtime debugging is on.
+*/
+function connectionDebug(...args) {
+	if (!(typeof window !== "undefined" || typeof document !== "undefined") && !realtimeDebugOn()) return;
+	console.debug(...args);
+}
+/**
+* The codes an `AUTHENTICATE` is refused with when the server will not honour
+* the session: the token does not verify or has expired, the session was
+* revoked or its account is gone (`SESSION_REVOKED`), the account is disabled
+* (`ACCOUNT_DISABLED`) — the codes the HTTP routes answer the same token with.
+* An answer, not a failure: asking again with the same token gets the same one.
+*/
+var SESSION_REFUSAL_CODES = /* @__PURE__ */ new Set([
+	"INVALID_TOKEN",
+	"TOKEN_EXPIRED",
+	"JWT_EXPIRED",
+	"SESSION_REVOKED",
+	"ACCOUNT_DISABLED",
+	"SESSION_ENDED"
+]);
+function isSessionRefusal(error) {
+	return error instanceof RebaseApiError$1 && typeof error.code === "string" && SESSION_REFUSAL_CODES.has(error.code);
+}
 /** The ceiling of the reconnect backoff. */
 var MAX_RECONNECT_DELAY_MS = 3e4;
 /**
@@ -2495,7 +2526,7 @@ var RebaseWebSocketClient = class {
 		if (this.closedByCaller) return;
 		if (this.connectionState !== "reconnecting" && this.connectionState !== "disconnected") return;
 		if (this.ws) return;
-		console.debug(`${reason} — retrying the realtime connection`);
+		connectionDebug(`${reason} — retrying the realtime connection`);
 		if (this.reconnectTimeout) {
 			clearTimeout(this.reconnectTimeout);
 			this.reconnectTimeout = null;
@@ -2527,6 +2558,24 @@ var RebaseWebSocketClient = class {
 	}
 	onlineListener = null;
 	visibilityListener = null;
+	/** The session this socket's server refused, and why. Cleared when a socket opens. */
+	refusedSession = null;
+	/**
+	* Whether `error` is the server refusing the session `token` signs in as —
+	* revoked, its account gone or disabled, a token that does not verify. Said
+	* once per socket and token, as a warning that names the code.
+	*/
+	noteSessionRefused(token, error) {
+		if (!isSessionRefusal(error)) return false;
+		if (this.refusedSession?.token !== token) {
+			this.refusedSession = {
+				token,
+				error
+			};
+			console.warn(`[Rebase] Realtime: the server refused this session (${error.code}: ${error.message}). The socket is connected but not signed in, and what needs an account is refused with that code.`);
+		}
+		return true;
+	}
 	/**
 	* Authenticate the WebSocket connection
 	*/
@@ -2575,10 +2624,10 @@ var RebaseWebSocketClient = class {
 		if (this.isConnected && !this.isAuthenticated && !this.authPromise) this.getAuthToken().then((token) => {
 			if (!this.ws) return;
 			if (token) this.authenticate(token).catch((e) => {
-				if (this.ws) console.debug("WebSocket auto-auth skipped:", e?.message || e);
+				if (this.ws) connectionDebug("WebSocket auto-auth skipped:", e?.message || e);
 			});
 		}).catch((e) => {
-			if (this.ws) console.debug("WebSocket auto-auth skipped:", e?.message || e);
+			if (this.ws) connectionDebug("WebSocket auto-auth skipped:", e?.message || e);
 		});
 	}
 	/**
@@ -2594,6 +2643,7 @@ var RebaseWebSocketClient = class {
 		if (permanent) this.removeNetworkListeners();
 		this.isAuthenticated = false;
 		this.authPromise = null;
+		this.refusedSession = null;
 		if (this.reconnectTimeout) {
 			clearTimeout(this.reconnectTimeout);
 			this.reconnectTimeout = null;
@@ -2628,7 +2678,7 @@ var RebaseWebSocketClient = class {
 			const socket = new this.WebSocketConstructor(withOptIns(this.websocketUrl));
 			this.ws = socket;
 			this.ws.onopen = async () => {
-				console.debug("Connected to PostgreSQL backend");
+				connectionDebug("Connected to PostgreSQL backend");
 				const wasReconnect = this.hadConnection;
 				this.hadConnection = true;
 				this.isConnected = true;
@@ -2637,14 +2687,18 @@ var RebaseWebSocketClient = class {
 				this.outageReported = false;
 				this.gaveUp = false;
 				this.setState("connected");
-				if (this.getAuthToken && !this.isAuthenticated) try {
-					const token = await this.getAuthToken();
-					if (token) {
-						await this.authenticate(token);
-						console.debug("WebSocket auto-authenticated");
+				this.refusedSession = null;
+				if (this.getAuthToken && !this.isAuthenticated) {
+					let token = null;
+					try {
+						token = await this.getAuthToken();
+						if (token) {
+							await this.authenticate(token);
+							connectionDebug("WebSocket auto-authenticated");
+						}
+					} catch (error) {
+						if (!(token && this.noteSessionRefused(token, error))) connectionDebug("WebSocket connected, not signed in yet:", error?.message || error);
 					}
-				} catch (error) {
-					console.debug("WebSocket connected without auth:", error?.message || error);
 				}
 				this.emit(wasReconnect ? "reconnect" : "connect");
 				this.processMessageQueue(wasReconnect);
@@ -2661,7 +2715,7 @@ var RebaseWebSocketClient = class {
 				}
 			};
 			const onClosed = () => {
-				console.debug("Disconnected from PostgreSQL backend");
+				connectionDebug("Disconnected from PostgreSQL backend");
 				this.stopLivenessWatch();
 				this.forgetServerOptIns();
 				if (this.ws === socket) this.ws = null;
@@ -2791,7 +2845,7 @@ var RebaseWebSocketClient = class {
 		this.reconnectAttempts = Math.min(this.reconnectAttempts + 1, 30);
 		const ceiling = Math.min(1e3 * Math.pow(2, this.reconnectAttempts), MAX_RECONNECT_DELAY_MS);
 		const delay = MIN_RECONNECT_DELAY_MS + Math.floor(Math.random() * (ceiling - MIN_RECONNECT_DELAY_MS));
-		console.debug(`Attempting to reconnect in ${delay}ms (attempt ${this.reconnectAttempts})`);
+		connectionDebug(`Attempting to reconnect in ${delay}ms (attempt ${this.reconnectAttempts})`);
 		if (this.reconnectTimeout) clearTimeout(this.reconnectTimeout);
 		this.reconnectTimeout = setTimeout(() => {
 			this.reconnectTimeout = null;
@@ -3060,31 +3114,36 @@ var RebaseWebSocketClient = class {
 	}
 	async runAuthentication(retryCount) {
 		let lastError = null;
-		for (let attempt = 0; attempt < retryCount; attempt++) try {
-			const token = await this.getAuthToken();
-			if (!token) throw new Error("user not logged in");
-			await this.authenticate(token);
-			console.debug("WebSocket authenticated on demand");
-			return;
-		} catch (error) {
-			lastError = error;
-			const errMsg = error instanceof Error ? error.message : String(error);
-			if (errMsg.includes("not logged in") || errMsg.includes("Session expired")) {
-				console.warn("WebSocket auth failed: user not logged in");
-				throw error;
-			}
-			if (errMsg.includes("still loading")) {
+		for (let attempt = 0; attempt < retryCount; attempt++) {
+			let token = null;
+			try {
+				token = await this.getAuthToken();
+				if (!token) throw new Error("user not logged in");
+				if (this.refusedSession?.token === token) throw this.refusedSession.error;
+				await this.authenticate(token);
+				connectionDebug("WebSocket authenticated on demand");
+				return;
+			} catch (error) {
+				lastError = error;
+				if (token && this.noteSessionRefused(token, error)) throw error;
+				const errMsg = error instanceof Error ? error.message : String(error);
+				if (errMsg.includes("not logged in") || errMsg.includes("Session expired")) {
+					console.warn("WebSocket auth failed: user not logged in");
+					throw error;
+				}
+				if (errMsg.includes("still loading")) {
+					if (attempt < retryCount - 1) {
+						const delay = Math.min(500 * (attempt + 1), 2e3);
+						await new Promise((resolve) => setTimeout(resolve, delay));
+						continue;
+					}
+				}
 				if (attempt < retryCount - 1) {
-					const delay = Math.min(500 * (attempt + 1), 2e3);
+					const delay = Math.min(1e3 * (attempt + 1), 3e3);
+					connectionDebug(`WebSocket auth attempt ${attempt + 1} failed, retrying in ${delay}ms...`);
 					await new Promise((resolve) => setTimeout(resolve, delay));
-					continue;
 				}
 			}
-			if (attempt < retryCount - 1) {
-				const delay = Math.min(1e3 * (attempt + 1), 3e3);
-				console.debug(`WebSocket auth attempt ${attempt + 1} failed, retrying in ${delay}ms...`);
-				await new Promise((resolve) => setTimeout(resolve, delay));
-			}
 		}
 		console.warn("WebSocket on-demand auth failed after retries:", lastError);
 		throw lastError;
@@ -3096,7 +3155,7 @@ var RebaseWebSocketClient = class {
 			const token = await this.getAuthToken();
 			if (!token) throw new Error("user not logged in");
 			await this.authenticate(token);
-			console.debug("WebSocket reauthenticated successfully");
+			connectionDebug("WebSocket reauthenticated successfully");
 		} catch (error) {
 			console.error("WebSocket reauthentication failed:", error);
 			throw error;
@@ -3170,6 +3229,10 @@ var RebaseWebSocketClient = class {
 			await this.ensureAuthenticated();
 		} catch (error) {
 			if (!(isSubscriptionFrame && isNotSignedIn(error))) {
+				if (error instanceof RebaseApiError$1) {
+					reject(error);
+					return;
+				}
 				reject(new RebaseApiError$1(error instanceof Error ? error.message : "Authentication required"));
 				return;
 			}
@@ -3782,7 +3845,7 @@ var RebaseWebSocketClient = class {
 	* we need to re-register everything to resume receiving updates.
 	*/
 	resubscribeAll() {
-		console.debug(`[WS] Re-subscribing: ${this.collectionSubscriptions.size} collection(s), ${this.singleSubscriptions.size} row(ies)`);
+		connectionDebug(`[WS] Re-subscribing: ${this.collectionSubscriptions.size} collection(s), ${this.singleSubscriptions.size} row(ies)`);
 		for (const [key, sub] of this.collectionSubscriptions.entries()) {
 			if (sub.subscribeInFlight) continue;
 			const oldBackendId = sub.backendSubscriptionId;