@returningai/widget-sdk 1.8.2 → 1.8.3

package/dist/rai-widget.js

@@ -12418,8 +12418,12 @@ async function authenticateServerless(config, state, onRefreshScheduled) {
       setTokens(config, state, data, onRefreshScheduled);
       state.isAuthenticated = true;
       return true;
-    } catch {
+    } catch (err) {
       if (is4xx || attempt === maxRetries) {
+        state.lastAuthError ?? (state.lastAuthError = {
+          status: 0,
+          error: err instanceof Error ? err.message : "Authentication failed"
+        });
         state.isAuthenticated = false;
         return false;
       }
@@ -12438,6 +12442,7 @@ async function authenticateViaProxy(config, state, onRefreshScheduled) {
       );
     }
     let is4xx = false;
+    let status = 0;
     try {
       const response = await fetch(config.authUrl, {
         method: "POST",
@@ -12445,6 +12450,7 @@ async function authenticateViaProxy(config, state, onRefreshScheduled) {
         headers: { "Content-Type": "application/json" }
       });
       if (!response.ok) {
+        status = response.status;
         is4xx = response.status >= 400 && response.status < 500;
         throw new Error(`HTTP ${response.status}`);
       }
@@ -12459,12 +12465,17 @@ async function authenticateViaProxy(config, state, onRefreshScheduled) {
       state.accessTokenExpiry = Date.now() + ttl * 1e3;
       state.refreshTokenExpiry = null;
       state.isAuthenticated = true;
+      state.lastAuthError = null;
       if (config.autoRefresh && onRefreshScheduled) {
         onRefreshScheduled();
       }
       return true;
-    } catch {
+    } catch (err) {
       if (is4xx || attempt === maxRetries) {
+        state.lastAuthError = {
+          status,
+          error: err instanceof Error ? err.message : "Authentication failed"
+        };
         state.isAuthenticated = false;
         return false;
       }
@@ -12513,6 +12524,7 @@ async function refreshAccessToken(config, state, onRefreshScheduled, sendToken)
         throw new Error("Invalid refresh response");
       }
       setTokens(config, state, data, onRefreshScheduled);
+      state.isAuthenticated = true;
       if (sendToken) sendToken();
       return true;
     } catch {
@@ -14847,13 +14859,15 @@ class BaseWidget extends HTMLElement {
           () => this.scheduleRefresh()
         );
         if (ok) pushToken();
+        else this.handleSessionExpired();
       } else {
-        await refreshAccessToken(
+        const ok = await refreshAccessToken(
           this.config,
           this.state,
           () => this.scheduleRefresh(),
           pushToken
         );
+        if (!ok) this.handleSessionExpired();
       }
     };
     if (delay > 0) {
@@ -14869,6 +14883,35 @@ class BaseWidget extends HTMLElement {
         sendTokenToWidget(this.config, this.state, iframe);
     }, 12e4);
   }
+  /**
+   * A background refresh exhausted every recovery path — /auth/refresh failed
+   * and the re-auth that follows it failed too, so `state.isAuthenticated` is
+   * now false and there is no live token.
+   *
+   * Every startup auth path already calls showError() on failure; this one is
+   * reached from a timer, so without it the widget stays mounted showing stale
+   * content while isAuthenticated() reports false to the host page — which is
+   * how a signed-in user ends up looking at content meant for signed-out users.
+   * The event gives hosts a signal to re-mint credentials instead of polling.
+   */
+  handleSessionExpired() {
+    var _a;
+    if (this.state.refreshTimer) {
+      clearTimeout(this.state.refreshTimer);
+      this.state.refreshTimer = null;
+    }
+    (_a = this.state).lastAuthError ?? (_a.lastAuthError = {
+      status: 401,
+      error: "Session expired",
+      hint: "The widget session could not be renewed. Reload to sign in again."
+    });
+    this.emit("rai-session-expired", {
+      communityId: this.config.communityId,
+      widgetType: this.config.widgetType,
+      lastAuthError: this.state.lastAuthError ?? void 0
+    });
+    this.showError();
+  }
   // ── Logout helper ─────────────────────────────────────────────────────
   async logoutAndClear() {
     await logout(this.config, this.state);
@@ -15024,7 +15067,7 @@ class CustomWidget extends BaseWidget {
     }
   }
 }
-console.log(`[rai-widget] v${"1.8.2"}`);
+console.log(`[rai-widget] v${"1.8.3"}`);
 class StoreWidgetCompat extends StoreWidget {
 }
 const WIDGET_REGISTRY = [
@@ -15088,7 +15131,7 @@ function exposePublicApi() {
   })();
   const widget = container == null ? void 0 : container.querySelector(ALL_WIDGET_SELECTOR);
   window.ReturningAIWidget = {
-    version: "1.8.2",
+    version: "1.8.3",
     reload: () => (widget == null ? void 0 : widget.reload()) ?? Promise.resolve(),
     logout: () => (widget == null ? void 0 : widget.logoutPublic()) ?? Promise.resolve(),
     isAuthenticated: () => (widget == null ? void 0 : widget.isAuthenticated()) ?? false,

package/dist/types/BaseWidget.d.ts

@@ -110,6 +110,18 @@ export declare abstract class BaseWidget extends HTMLElement {
     private mountWidget;
     private scheduleRefresh;
     private schedulePeriodicSync;
+    /**
+     * A background refresh exhausted every recovery path — /auth/refresh failed
+     * and the re-auth that follows it failed too, so `state.isAuthenticated` is
+     * now false and there is no live token.
+     *
+     * Every startup auth path already calls showError() on failure; this one is
+     * reached from a timer, so without it the widget stays mounted showing stale
+     * content while isAuthenticated() reports false to the host page — which is
+     * how a signed-in user ends up looking at content meant for signed-out users.
+     * The event gives hosts a signal to re-mint credentials instead of polling.
+     */
+    private handleSessionExpired;
     private logoutAndClear;
     reload(): Promise<void>;
     logoutPublic(): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@returningai/widget-sdk",
-  "version": "1.8.2",
+  "version": "1.8.3",
   "description": "Shadow DOM isolated widget SDK for ReturningAI",
   "main": "dist/rai-widget.iife.js",
   "module": "dist/rai-widget.js",
@@ -25,12 +25,14 @@
     "build:all": "npm run build && npm run build:banner",
     "build:all:min": "npm run build:min && npm run build:banner:min",
     "types": "tsc --emitDeclarationOnly --outDir dist/types && cp src/jsx.d.ts dist/types/jsx.d.ts",
-    "test": "npm run test:host-callback && npm run test:bundle-readiness && npm run test:bundle-runtime-cache && npm run test:bundle-token-sync && npm run test:auth-bootstrap && npm run test:startup-performance && npm run test:jsx-types",
+    "test": "npm run test:host-callback && npm run test:bundle-readiness && npm run test:bundle-runtime-cache && npm run test:bundle-token-sync && npm run test:auth-bootstrap && npm run test:auth-error-reporting && npm run test:auth-refresh-state && npm run test:startup-performance && npm run test:jsx-types",
     "test:host-callback": "rm -rf test/.tmp && tsc -p test/tsconfig.json && node test/.tmp/test/postmessage-host-callback.test.js",
     "test:bundle-readiness": "rm -rf test/.tmp && tsc -p test/tsconfig.json && node test/.tmp/test/bundle-readiness.test.js",
     "test:bundle-runtime-cache": "rm -rf test/.tmp && tsc -p test/tsconfig.json && node test/.tmp/test/bundle-runtime-cache.test.js",
     "test:bundle-token-sync": "rm -rf test/.tmp && tsc -p test/tsconfig.json && node test/.tmp/test/bundle-token-sync.test.js",
     "test:auth-bootstrap": "rm -rf test/.tmp && tsc -p test/tsconfig.json && node test/.tmp/test/auth-bootstrap.test.js",
+    "test:auth-error-reporting": "rm -rf test/.tmp && tsc -p test/tsconfig.json && node test/.tmp/test/auth-error-reporting.test.js",
+    "test:auth-refresh-state": "rm -rf test/.tmp && tsc -p test/tsconfig.json && node test/.tmp/test/auth-refresh-state.test.js",
     "test:startup-performance": "rm -rf test/.tmp && tsc -p test/tsconfig.json && node test/.tmp/test/startup-performance.test.js",
     "test:jsx-types": "tsc --noEmit --strict --lib ES2020,DOM --skipLibCheck false src/jsx.d.ts",
     "coverage:repowise": "rm -rf coverage && npm run coverage:host-callback && npm run coverage:bundle-readiness && npm run test:jsx-types",
@@ -48,4 +50,4 @@
     "dompurify": "^3.4.12",
     "lottie-web": "^5.13.0"
   }
-}
+}