@rool-dev/sdk 0.12.4 → 2.0.0-dev.03df95a

package/dist/auth-base.d.ts

@@ -1,101 +1,56 @@
-import type { AuthProvider, AuthTokens, AuthUser } from './types.js';
-import { type Logger } from './logger.js';
-export interface BaseTokenAuthConfig {
-    /** Auth URL (e.g. https://rool.dev/auth). Injected by RoolClient if omitted. */
-    authUrl?: string;
-    /** Injected by RoolClient if omitted. */
-    logger?: Logger;
-    /** Injected by RoolClient if omitted, so auth-state reaches client events. */
-    onAuthStateChanged?: (authenticated: boolean) => void;
+import { type AuthEndpointConfig } from "./auth-url.js";
+import type { RoolAuth, RoolRequestTokens } from "./types.js";
+export interface TokenAuthConfig extends AuthEndpointConfig {
+    fetch?: typeof globalThis.fetch;
 }
-export declare abstract class BaseTokenAuthProvider implements AuthProvider {
-    protected logger: Logger;
-    private _authUrl;
-    private _onAuthStateChanged;
+export interface AuthTokenResponse {
+    id_token?: unknown;
+    refresh_token?: unknown;
+    rool_token?: unknown;
+    expires_in?: unknown;
+}
+export type EmailChangeErrorCode = "missing_token" | "invalid_token" | "missing_email" | "invalid_email" | "account_not_found" | "account_suspended" | "same_email" | "email_in_use" | "send_failed" | "internal_error";
+export declare class EmailChangeError extends Error {
+    readonly code: EmailChangeErrorCode;
+    constructor(code: EmailChangeErrorCode, message: string);
+}
+export declare abstract class TokenAuth implements RoolAuth {
+    private readonly authUrl;
+    private readonly fetchRequest;
+    private readonly listeners;
     private refreshPromise;
-    private refreshTimeoutId;
-    private boundVisibilityHandler;
-    constructor(config?: BaseTokenAuthConfig);
-    setAuthUrl(url: string): void;
-    setLogger(logger: Logger): void;
-    setAuthStateChangedHandler(handler: (authenticated: boolean) => void): void;
-    abstract initialize(): boolean;
-    abstract login(appName: string, params?: Record<string, string>): Promise<void> | void;
-    abstract signup(appName: string, params?: Record<string, string>): Promise<void> | void;
-    /**
-     * Check if user is currently authenticated.
-     *
-     * This reports identity (do we hold credentials), NOT server reachability.
-     * It deliberately does not perform a network refresh: a backend outage must
-     * not read as "logged out". A genuinely invalid/expired refresh token
-     * surfaces later as a 401 on first real use, which clears tokens and fires
-     * onAuthStateChanged(false) — the only path that ends the session.
-     */
+    constructor(config?: TokenAuthConfig);
+    abstract initialize(): Promise<boolean>;
+    abstract login(appName: string, params?: Record<string, string>): Promise<void>;
+    abstract signup(appName: string, params?: Record<string, string>): Promise<void>;
     isAuthenticated(): Promise<boolean>;
-    /**
-     * Get current access token and rool token, refreshing if expired.
-     * Returns undefined if not authenticated.
-     */
-    getTokens(): Promise<{
-        accessToken: string;
-        roolToken: string;
-    } | undefined>;
-    /**
-     * Get auth identity decoded from JWT token.
-     */
-    getAuthUser(): AuthUser;
-    /**
-     * Complete an email verification flow. Exchanges a verify JWT (from the
-     * verification email link) for a fresh token set and signs the user in.
-     */
+    readonly getTokens: () => Promise<RoolRequestTokens | undefined>;
+    readonly logout: () => Promise<void>;
+    onAuthStateChanged(listener: (authenticated: boolean) => void): () => void;
     verify(token: string): Promise<boolean>;
-    replaceTokens(tokens: AuthTokens): void;
-    /**
-     * Logout - clear all tokens and state.
-     */
-    logout(): void;
-    /**
-     * Destroy auth manager - clear refresh timers and listeners.
-     */
-    destroy(): void;
-    /** Auth URL without trailing slash */
+    setPassword(password: string): Promise<void>;
+    requestEmailChange(newEmail: string): Promise<void>;
     protected get authBaseUrl(): string;
-    protected notifyAuthState(authenticated: boolean): void;
-    /** Persist a fresh token set and (re)arm the background refresh timer. */
-    protected acceptTokens(accessToken: string, refreshToken: string | null, roolToken: string | null, expiresAt: number): void;
-    /** Arm auto-refresh + visibility re-scheduling. Call from initialize(). */
-    protected initBase(): void;
-    /**
-     * Overridable hook: clear subclass-owned transient state on logout/cancel
-     * (e.g. an in-flight OAuth `state` or PKCE verifier). No-op by default.
-     */
+    protected fetchAuth(path: string, init: RequestInit): Promise<Response>;
+    protected acceptTokenResponse(data: AuthTokenResponse, fallback?: {
+        refreshToken?: string | null;
+        roolToken?: string | null;
+    }): boolean;
+    protected emitAuthState(authenticated: boolean): void;
     protected clearTransientState(): void;
-    protected get storagePrefix(): string;
-    /** Build a storage key scoped to this auth endpoint. */
     protected keyFor(name: string): string;
-    protected get storageKeys(): {
-        readonly access: `${string}access_token`;
-        readonly refresh: `${string}refresh_token`;
-        readonly rool: `${string}rool_token`;
-        readonly expiresAt: `${string}token_expires_at`;
-    };
     protected readString(key: string): string | null;
     protected writeString(key: string, value: string): void;
     protected removeString(key: string): void;
-    protected scheduleTokenRefresh(): void;
-    protected writeTokens(accessToken: string | null, refreshToken: string | null, expiresAt: number | null): void;
-    protected writeRoolToken(token: string | null): void;
-    protected clearTokens(): void;
-    protected readAccessToken(): string | null;
-    protected readRoolToken(): string;
-    protected readExpiresAt(): number | null;
-    /**
-     * Get a short hash of the auth URL for scoping storage by endpoint.
-     */
+    private get storageKeys();
     private get endpointHash();
-    private tryRefreshToken;
-    private listenForVisibility;
-    private cancelScheduledRefresh;
-    private decodeAuthUser;
+    private readAccessToken;
+    private readRoolToken;
+    private readExpiresAt;
+    private writeTokens;
+    private writeOrRemove;
+    private clearTokens;
+    private refresh;
+    private performRefresh;
 }
 //# sourceMappingURL=auth-base.d.ts.map

package/dist/auth-base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-base.d.ts","sourceRoot":"","sources":["../src/auth-base.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAKzD,MAAM,WAAW,mBAAmB;IAChC,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,kBAAkB,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,KAAK,IAAI,CAAC;CACzD;AAED,8BAAsB,qBAAsB,YAAW,YAAY;IAC/D,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,mBAAmB,CAAmC;IAC9D,OAAO,CAAC,cAAc,CAAiC;IACvD,OAAO,CAAC,gBAAgB,CAA8C;IACtE,OAAO,CAAC,sBAAsB,CAA6B;gBAE/C,MAAM,GAAE,mBAAwB;IAS5C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI7B,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B,0BAA0B,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAK3E,QAAQ,CAAC,UAAU,IAAI,OAAO;IAC9B,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IACtF,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAEvF;;;;;;;;OAQG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAIzC;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAiBlF;;OAEG;IACH,WAAW,IAAI,QAAQ;IAMvB;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4C7C,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAKvC;;OAEG;IACH,MAAM,IAAI,IAAI;IAOd;;OAEG;IACH,OAAO,IAAI,IAAI;IAYf,sCAAsC;IACtC,SAAS,KAAK,WAAW,IAAI,MAAM,CAElC;IAED,SAAS,CAAC,eAAe,CAAC,aAAa,EAAE,OAAO,GAAG,IAAI;IAIvD,0EAA0E;IAC1E,SAAS,CAAC,YAAY,CAClB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,SAAS,EAAE,MAAM,GAClB,IAAI;IAMP,2EAA2E;IAC3E,SAAS,CAAC,QAAQ,IAAI,IAAI;IAK1B;;;OAGG;IACH,SAAS,CAAC,mBAAmB,IAAI,IAAI;IAErC,SAAS,KAAK,aAAa,IAAI,MAAM,CAEpC;IAED,wDAAwD;IACxD,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAItC,SAAS,KAAK,WAAW;;;;;MAQxB;IAED,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQhD,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAQvD,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQzC,SAAS,CAAC,oBAAoB,IAAI,IAAI;IAmBtC,SAAS,CAAC,WAAW,CACjB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,GACzB,IAAI;IAoBP,SAAS,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAQpD,SAAS,CAAC,WAAW,IAAI,IAAI;IAK7B,SAAS,CAAC,eAAe,IAAI,MAAM,GAAG,IAAI;IAI1C,SAAS,CAAC,aAAa,IAAI,MAAM;IAIjC,SAAS,CAAC,aAAa,IAAI,MAAM,GAAG,IAAI;IAWxC;;OAEG;IACH,OAAO,KAAK,YAAY,GAQvB;YAEa,eAAe;IAoE7B,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,cAAc;CAYzB"}
+{"version":3,"file":"auth-base.d.ts","sourceRoot":"","sources":["../src/auth-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAK9D,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;IACzD,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,oBAAoB,GAC5B,eAAe,GACf,eAAe,GACf,eAAe,GACf,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,YAAY,GACZ,cAAc,GACd,aAAa,GACb,gBAAgB,CAAC;AAErB,qBAAa,gBAAiB,SAAQ,KAAK;IAEvC,QAAQ,CAAC,IAAI,EAAE,oBAAoB;gBAA1B,IAAI,EAAE,oBAAoB,EACnC,OAAO,EAAE,MAAM;CAKlB;AAED,8BAAsB,SAAU,YAAW,QAAQ;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+C;IACzE,OAAO,CAAC,cAAc,CAAiC;gBAE3C,MAAM,GAAE,eAAoB;IAKxC,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IACvC,QAAQ,CAAC,KAAK,CACZ,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC;IAChB,QAAQ,CAAC,MAAM,CACb,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC;IAEV,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAIzC,QAAQ,CAAC,SAAS,QAAa,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAcnE;IAEF,QAAQ,CAAC,MAAM,QAAa,OAAO,CAAC,IAAI,CAAC,CAKvC;IAEF,kBAAkB,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAKpE,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBvC,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B5C,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BzD,SAAS,KAAK,WAAW,IAAI,MAAM,CAElC;IAED,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIvE,SAAS,CAAC,mBAAmB,CAC3B,IAAI,EAAE,iBAAiB,EACvB,QAAQ,GAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAO,GACzE,OAAO;IA8BV,SAAS,CAAC,aAAa,CAAC,aAAa,EAAE,OAAO,GAAG,IAAI;IAIrD,SAAS,CAAC,mBAAmB,IAAI,IAAI;IAErC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAItC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQhD,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAQvD,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQzC,OAAO,KAAK,WAAW,GAOtB;IAED,OAAO,KAAK,YAAY,GAMvB;IAED,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,WAAW;YAIL,OAAO;YAeP,cAAc;CAkC7B"}