@returningai/widget-sdk 1.4.0 → 1.4.1

package/dist/rai-widget.js

@@ -10336,6 +10336,9 @@ var lottie_light = { exports: {} };
 var lottie_lightExports = lottie_light.exports;
 const lottie = /* @__PURE__ */ getDefaultExportFromCjs(lottie_lightExports);
 function storageKey(config) {
+  return `${config.storagePrefix}-${config.widgetId}-${config.container}-auth`;
+}
+function legacyStorageKey(config) {
   return `${config.storagePrefix}-${config.widgetId}-auth`;
 }
 function errorSettingsKey(config) {
@@ -10354,13 +10357,21 @@ function saveToStorage(config, state) {
 }
 function loadFromStorage(config, state) {
   try {
-    const raw = localStorage.getItem(storageKey(config));
+    let raw = localStorage.getItem(storageKey(config));
+    const loadedLegacyKey = !raw;
+    if (!raw) {
+      raw = localStorage.getItem(legacyStorageKey(config));
+    }
     if (!raw) return false;
     const parsed = JSON.parse(raw);
     if (parsed.refreshToken && !isTokenExpired(parsed.refreshTokenExpiry)) {
       state.refreshToken = parsed.refreshToken;
       state.tokenFamily = parsed.tokenFamily;
       state.refreshTokenExpiry = parsed.refreshTokenExpiry;
+      if (loadedLegacyKey) {
+        saveToStorage(config, state);
+        localStorage.removeItem(legacyStorageKey(config));
+      }
       return true;
     }
     clearStorage(config);
@@ -10372,6 +10383,7 @@ function loadFromStorage(config, state) {
 function clearStorage(config) {
   try {
     localStorage.removeItem(storageKey(config));
+    localStorage.removeItem(legacyStorageKey(config));
   } catch {
   }
 }
@@ -10412,6 +10424,16 @@ function setTokens(config, state, data, onRefreshScheduled) {
     onRefreshScheduled();
   }
 }
+function buildIdentityProof(config) {
+  const proof = {};
+  if (config.embedToken) {
+    proof.embedToken = config.embedToken;
+  }
+  if (config.userIdentifiers && Object.keys(config.userIdentifiers).length > 0) {
+    proof.userIdentifiers = config.userIdentifiers;
+  }
+  return proof;
+}
 async function authenticateServerless(config, state, onRefreshScheduled) {
   const nonce = crypto.randomUUID();
   const timestamp = Date.now();
@@ -10428,14 +10450,9 @@ async function authenticateServerless(config, state, onRefreshScheduled) {
       const body = {
         nonce,
         timestamp,
-        widgetType: config.widgetType
+        widgetType: config.widgetType,
+        ...buildIdentityProof(config)
       };
-      if (config.embedToken) {
-        body.embedToken = config.embedToken;
-      }
-      if (config.userIdentifiers && Object.keys(config.userIdentifiers).length > 0) {
-        body.userIdentifiers = config.userIdentifiers;
-      }
       const response = await fetch(`${config.apiUrl}/${config.widgetId}/auth/serverless`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
@@ -10531,6 +10548,13 @@ async function refreshAccessToken(config, state, onRefreshScheduled, sendToken)
   }
   state.isRefreshing = true;
   state.refreshPromise = (async () => {
+    const reauthenticateAfterRefreshFailure = async () => {
+      clearState(state);
+      clearStorage(config);
+      const authed = await authenticateServerless(config, state, onRefreshScheduled);
+      if (authed && sendToken) sendToken();
+      return authed;
+    };
     try {
       const response = await fetch(`${config.apiUrl}/${config.widgetId}/auth/refresh`, {
         method: "POST",
@@ -10538,13 +10562,14 @@ async function refreshAccessToken(config, state, onRefreshScheduled, sendToken)
           "Content-Type": "application/json",
           Authorization: `Bearer ${state.refreshToken}`
         },
-        body: JSON.stringify({ widgetType: config.widgetType })
+        body: JSON.stringify({
+          widgetType: config.widgetType,
+          ...buildIdentityProof(config)
+        })
       });
       if (!response.ok) {
-        if (response.status === 401 || response.status === 403) {
-          clearState(state);
-          clearStorage(config);
-          return authenticateServerless(config, state, onRefreshScheduled);
+        if (response.status === 400 || response.status === 401 || response.status === 403) {
+          return reauthenticateAfterRefreshFailure();
         }
         const error = await response.json().catch(() => ({ error: "Token refresh failed" }));
         throw new Error(error.error || `HTTP ${response.status}`);
@@ -10557,9 +10582,7 @@ async function refreshAccessToken(config, state, onRefreshScheduled, sendToken)
       if (sendToken) sendToken();
       return true;
     } catch {
-      clearState(state);
-      clearStorage(config);
-      return authenticateServerless(config, state, onRefreshScheduled);
+      return reauthenticateAfterRefreshFailure();
     } finally {
       state.isRefreshing = false;
       state.refreshPromise = null;
@@ -11030,6 +11053,13 @@ function readConfig(el, existingId) {
     firstPaintFont: get("font") || void 0
   };
 }
+function identitySignatureForConfig(config) {
+  const identifiers = Object.keys(config.userIdentifiers || {}).sort().map((key) => [key, config.userIdentifiers[key]]);
+  return JSON.stringify({
+    embedToken: config.embedToken || "",
+    userIdentifiers: identifiers
+  });
+}
 function createInitialState() {
   return {
     accessToken: null,
@@ -11064,11 +11094,15 @@ class BaseWidget extends HTMLElement {
     __publicField(this, "intersectionObserver");
     // #3
     __publicField(this, "themeObserver");
+    __publicField(this, "authAttributeObserver");
+    __publicField(this, "identitySignature", "");
     __publicField(this, "lottieInstances", []);
     this.shadow = this.attachShadow({ mode: "closed" });
   }
   connectedCallback() {
     this.config = readConfig(this, void 0);
+    this.identitySignature = identitySignatureForConfig(this.config);
+    this.setupAuthAttributeObserver();
     const style = document.createElement("style");
     style.textContent = widgetCSS;
     this.shadow.appendChild(style);
@@ -11098,13 +11132,36 @@ class BaseWidget extends HTMLElement {
     }
   }
   disconnectedCallback() {
-    var _a, _b;
+    var _a, _b, _c;
     (_a = this.intersectionObserver) == null ? void 0 : _a.disconnect();
     (_b = this.themeObserver) == null ? void 0 : _b.disconnect();
+    (_c = this.authAttributeObserver) == null ? void 0 : _c.disconnect();
     if (this.cleanupListener) this.cleanupListener();
     this.clearLottieInstances();
     clearState(this.state);
   }
+  setupAuthAttributeObserver() {
+    var _a;
+    (_a = this.authAttributeObserver) == null ? void 0 : _a.disconnect();
+    this.authAttributeObserver = new MutationObserver(() => {
+      var _a2;
+      const nextConfig = readConfig(this, (_a2 = this.config) == null ? void 0 : _a2.communityId);
+      const nextIdentitySignature = identitySignatureForConfig(nextConfig);
+      if (nextIdentitySignature === this.identitySignature) {
+        this.config = nextConfig;
+        return;
+      }
+      const previousConfig = this.config;
+      this.config = nextConfig;
+      this.identitySignature = nextIdentitySignature;
+      clearStorage(previousConfig);
+      clearStorage(this.config);
+      if (this.state.isAuthenticated || this.state.accessToken || this.state.refreshToken || this.state.iframe) {
+        void this.reload();
+      }
+    });
+    this.authAttributeObserver.observe(this, { attributes: true });
+  }
   // ── DOM event helper (#1) ─────────────────────────────────────────────
   emit(type, detail) {
     this.dispatchEvent(
@@ -11645,6 +11702,14 @@ class BaseWidget extends HTMLElement {
   }
   // ── Public API ────────────────────────────────────────────────────────
   async reload() {
+    var _a;
+    const previousConfig = this.config;
+    this.config = readConfig(this, (_a = this.config) == null ? void 0 : _a.communityId);
+    this.identitySignature = identitySignatureForConfig(this.config);
+    this.style.width = this.config.width;
+    this.style.height = this.config.height;
+    clearStorage(previousConfig);
+    clearStorage(this.config);
     clearState(this.state);
     this.shadow.querySelectorAll("iframe").forEach((el) => el.remove());
     await this.init();
@@ -11767,7 +11832,7 @@ class CustomWidget extends BaseWidget {
     }
   }
 }
-console.log(`[rai-widget] v${"1.4.0"}`);
+console.log(`[rai-widget] v${"1.4.1"}`);
 class StoreWidgetCompat extends StoreWidget {
 }
 const WIDGET_REGISTRY = [
@@ -11831,7 +11896,7 @@ function exposePublicApi() {
   })();
   const widget = container == null ? void 0 : container.querySelector(ALL_WIDGET_SELECTOR);
   window.ReturningAIWidget = {
-    version: "1.4.0",
+    version: "1.4.1",
     reload: () => (widget == null ? void 0 : widget.reload()) ?? Promise.resolve(),
     logout: () => (widget == null ? void 0 : widget.logoutPublic()) ?? Promise.resolve(),
     isAuthenticated: () => (widget == null ? void 0 : widget.isAuthenticated()) ?? false,

package/dist/types/BaseWidget.d.ts

@@ -10,11 +10,14 @@ export declare abstract class BaseWidget extends HTMLElement {
     private cleanupListener?;
     private intersectionObserver?;
     private themeObserver?;
+    private authAttributeObserver?;
+    private identitySignature;
     private lottieInstances;
     constructor();
     protected abstract buildWidgetUrl(config: WidgetConfig): string;
     connectedCallback(): void;
     disconnectedCallback(): void;
+    private setupAuthAttributeObserver;
     private emit;
     /**
      * Apply widget-defined CSS colors before first paint so the loader uses

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@returningai/widget-sdk",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Shadow DOM isolated widget SDK for ReturningAI",
   "main": "dist/rai-widget.iife.js",
   "module": "dist/rai-widget.js",
@@ -13,7 +13,9 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "CHANGELOG.md",
+    "README.md"
   ],
   "scripts": {
     "dev": "vite",