@sanity/sdk 3.0.0 → 3.2.0

package/src/_exports/_internal.ts

@@ -7,6 +7,17 @@ export {
   isProjectUserNotFoundClientError,
 } from '../auth/utils'
 export {getCommentsOptionsKey, parseCommentsOptionsKey} from '../comments/commentsStore' // only used for memoizing in React, not needed for actual functionality
+export {
+  installMessageBus,
+  type InstallMessageBusOptions,
+  resetMessageBus,
+} from '../dashboard/messageBus/bus'
+export {
+  getDashboardMessageBus,
+  isDashboardEnvironment,
+  requireDashboardMessageBus,
+} from '../dashboard/messageBus/store'
+export {getTopicState, resolveTopic} from '../dashboard/messageBus/topicStore'
 export {PREVIEW_PROJECTION} from '../preview/previewConstants'
 export {transformProjectionToPreview} from '../preview/previewProjectionUtils'
 export {getQueryKey, parseQueryKey} from '../query/queryStore' // only used for memoizing in React, not needed for actual functionality
@@ -24,4 +35,6 @@ export {
 export {getTelemetryManager, initTelemetry, trackHookMounted} from '../telemetry/initTelemetry'
 export {getUsersKey, parseUsersKey} from '../users/reducers' // only used for memoizing in React, not needed for actual functionality
 export {createGroqSearchFilter} from '../utils/createGroqSearchFilter'
+export {randomId, randomUuid} from '../utils/ids'
+export {createLogger} from '../utils/logger'
 export {isDeepEqual, pickProperties} from '../utils/object'

package/src/_exports/dashboard.ts

@@ -0,0 +1,36 @@
+export type {
+  ConnectMessageBusOptions,
+  MessageBus,
+  MessageBusAbortOptions,
+  MessageBusClient,
+  MessageBusConnection,
+  MessageBusEmitOptions,
+  MessageBusEmitResult,
+  MessageBusErrorCode,
+  MessageBusHost,
+  MessageBusMessage,
+  MessageBusMeta,
+  MessageBusQueryOptions,
+  MessageBusStateSource,
+} from '../dashboard/messageBus/bus'
+export {connectMessageBus} from '../dashboard/messageBus/bus'
+export {MessageBusError} from '../dashboard/messageBus/bus'
+export type {
+  ApplicationConfig,
+  ApplicationConfigAppType,
+  DashboardTopics,
+  EventTopic,
+  EventTopicDef,
+  NavigationLocation,
+  NavigationTarget,
+  PayloadOf,
+  RemoteModuleRef,
+  ReplyOf,
+  StateTopic,
+  StateTopicDef,
+  TopicName,
+  TopicResult,
+  Topics,
+  ValueOf,
+} from '../dashboard/messageBus/topics'
+export {type TopicData, TopicError} from '../dashboard/messageBus/topicStore'

package/src/_exports/index.ts

@@ -20,6 +20,7 @@ export {
   type ApplicationDeployment,
   type ApplicationInclude,
   type ApplicationInterface,
+  type ApplicationInterfacePlacementMetadata,
   type ApplicationsOptions,
   type ApplicationsResponse,
   type ApplicationStudioConfig,
@@ -48,6 +49,14 @@ export {
 export {observeOrganizationVerificationState} from '../auth/getOrganizationVerificationState'
 export {handleAuthCallback} from '../auth/handleAuthCallback'
 export {logout} from '../auth/logout'
+export {
+  getOAuthTokensState,
+  handleOAuthCallback,
+  refreshOAuthTokens,
+  revokeOAuthTokens,
+  startOAuthAuthorization,
+} from '../auth/oauth/oauthActions'
+export {type OAuthTokens} from '../auth/oauth/types'
 export type {ClientStoreState as ClientState} from '../client/clientStore'
 export {type ClientOptions, getClient, getClientState} from '../client/clientStore'
 export {
@@ -181,6 +190,12 @@ export {
 export {type JsonMatch} from '../document/patchOperations'
 export {type DocumentPermissionsResult, type PermissionDeniedReason} from '../document/permissions'
 export {getReleaseDocumentId} from '../document/processActions/releaseUtil'
+export {
+  type DocumentSet,
+  patchOperations,
+  processMutations,
+  type ProcessMutationsOptions,
+} from '../document/processMutations'
 export type {
   FavoriteDocumentContext,
   FavoriteStatusResponse,
@@ -194,7 +209,6 @@ export {
   type InstallationActiveConfig,
   type InstallationBase,
   type InstallationInclude,
-  type InstallationInterface,
   type InstallationsOptions,
   type InstallationsResponse,
 } from '../installations/installations'
@@ -244,6 +258,8 @@ export type {ReleaseState} from '../releases/releasesStore'
 export {getActiveReleasesState, getAllReleasesState} from '../releases/releasesStore'
 export {createSanityInstance, type SanityInstance} from '../store/createSanityInstance'
 export {type Selector, type StateSource} from '../store/createStateSourceAction'
+export {defineProjection} from '../typegen/defineProjection'
+export type {ResolveDocument, ResolveProjectionResult, ResolveQueryResult} from '../typegen/resolve'
 export {
   type GetUserOptions,
   type GetUsersOptions,

package/src/access/checkPermissions.test.ts

@@ -38,7 +38,7 @@ describe('checkPermissions', () => {
       scope: 'global',
     })
     expect(request).toHaveBeenCalledWith({
-      uri: '/access/project/p1/user-permissions/me/check',
+      url: '/access/project/p1/user-permissions/me/check',
       query: {permissions: ['sanity.project.read']},
       tag: 'access.check',
     })

package/src/access/checkPermissions.ts

@@ -41,7 +41,7 @@ export const checkPermissions = defineFetcher<
       switchMap((client) =>
         client.observable
           .request<{data: Record<string, boolean>}>({
-            uri: `/access/${resourceType}/${resourceId}/user-permissions/me/check`,
+            url: `/access/${resourceType}/${resourceId}/user-permissions/me/check`,
             query: {permissions},
             tag: 'access.check',
           })

package/src/applications/applications.test-d.ts

@@ -10,6 +10,7 @@ import {
   type ApplicationDeployment,
   type ApplicationInclude,
   type ApplicationInterface,
+  type ApplicationInterfacePlacementMetadata,
   applications,
   type ApplicationsResponse,
   type ApplicationStudioConfig,
@@ -35,10 +36,30 @@ test('ApplicationBase — carries name and reference as strings', () => {
   expectTypeOf<ApplicationBase['reference']>().toEqualTypeOf<string>()
 })
 
-test('Application — config.studio adds a required config.studio', () => {
+test('ApplicationInterface — matches the interface response', () => {
+  expectTypeOf<ApplicationInterface['type']>().toEqualTypeOf<
+    'app' | 'worker' | 'asset_source' | 'panel' | 'tile'
+  >()
+  expectTypeOf<ApplicationInterfacePlacementMetadata>().toEqualTypeOf<{
+    dock?: {group?: string; order?: number}
+  }>()
+  expectTypeOf<
+    Extract<ApplicationInterface, {type: 'app'}>['metadata']
+  >().toEqualTypeOf<ApplicationInterfacePlacementMetadata | null>()
   expectTypeOf<
-    Application<'config.studio'>['config']['studio']
-  >().toEqualTypeOf<ApplicationStudioConfig>()
+    Extract<ApplicationInterface, {type: 'panel'}>['metadata']
+  >().toEqualTypeOf<ApplicationInterfacePlacementMetadata | null>()
+  expectTypeOf<Extract<ApplicationInterface, {type: 'worker'}>['metadata']>().toEqualTypeOf<null>()
+  expectTypeOf<Extract<ApplicationInterface, {type: 'tile'}>['metadata']>().toEqualTypeOf<{
+    order?: number
+    size: 'small' | 'large' | 'banner'
+  }>()
+})
+
+test('Application — config.studio adds config with an optional stored value', () => {
+  expectTypeOf<Application<'config.studio'>['config']['studio']>().toEqualTypeOf<
+    ApplicationStudioConfig | undefined
+  >()
   // mfManifest not requested → not present under config
   expectTypeOf<
     Extract<keyof Application<'config.studio'>['config'], 'mfManifest'>
@@ -51,7 +72,7 @@ test('Application — config.studio adds a required config.studio', () => {
 
 test('Application — both config tokens merge under a single config', () => {
   type Config = Application<'config.studio' | 'config.mfManifest'>['config']
-  expectTypeOf<Config['studio']>().toEqualTypeOf<ApplicationStudioConfig>()
+  expectTypeOf<Config['studio']>().toEqualTypeOf<ApplicationStudioConfig | undefined>()
   expectTypeOf<Config['mfManifest']>().toEqualTypeOf<unknown>()
 })
 
@@ -73,6 +94,9 @@ test('Application — a wide include array makes config and activeDeployment opt
   type Wide = Application<ApplicationInclude>
   expectTypeOf<KeyModifier<Wide, 'activeDeployment'>>().toEqualTypeOf<'optional'>()
   expectTypeOf<KeyModifier<Wide, 'config'>>().toEqualTypeOf<'optional'>()
+  type Config = NonNullable<Wide['config']>
+  expectTypeOf<Config['studio']>().toEqualTypeOf<ApplicationStudioConfig | undefined>()
+  expectTypeOf<Config['mfManifest']>().toEqualTypeOf<unknown>()
 })
 
 test('applications.resolveState — resolves the wide list envelope', () => {

package/src/applications/applications.test.ts

@@ -42,7 +42,7 @@ describe('applications', () => {
       scope: 'global',
     })
     expect(request).toHaveBeenCalledWith({
-      uri: '/applications',
+      url: '/applications',
       query: {organizationId: 'org1', include: 'access,workspaces', limit: 'none'},
       tag: 'applications.list',
     })
@@ -56,7 +56,7 @@ describe('applications', () => {
 
     expect(result).toEqual(app)
     expect(request).toHaveBeenCalledWith({
-      uri: '/applications/app1',
+      url: '/applications/app1',
       query: {},
       tag: 'applications.get',
     })
@@ -105,7 +105,7 @@ describe('applications', () => {
 
     expect(data).toEqual({id: 'app1', title: 'New'})
     expect(request).toHaveBeenCalledWith({
-      uri: '/applications/app1',
+      url: '/applications/app1',
       method: 'PATCH',
       body: {title: 'New'},
       tag: 'applications.update',
@@ -122,7 +122,7 @@ describe('applications', () => {
 
     expect(data).toEqual({deleted: true})
     expect(request).toHaveBeenCalledWith({
-      uri: '/applications/app1',
+      url: '/applications/app1',
       method: 'DELETE',
       tag: 'applications.delete',
     })

package/src/applications/applications.ts

@@ -25,23 +25,40 @@ export type ApplicationInclude =
   | 'config.mfManifest'
   | 'activeDeployment'
 
-/**
- * An interface exposed by a deployment, embedded when `interfaces` is included.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
- * @public
- */
-export interface ApplicationInterface {
+type ApplicationInterfaceBase = {
   id: string
-  type: 'app' | 'worker' | 'asset_source' | 'panel'
   name: string
   title: string
   version: string
   /** Module federation module ID; resolved from the host mf-manifest at runtime */
   moduleId: string
-  metadata: {group?: string; priority?: number} | null
 }
 
+/**
+ * Placement metadata for application and panel interfaces.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @public
+ */
+export type ApplicationInterfacePlacementMetadata = {
+  dock?: {group?: string; order?: number}
+}
+
+/**
+ * An interface exposed by a deployment, embedded when `interfaces` is included.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @public
+ */
+export type ApplicationInterface = ApplicationInterfaceBase &
+  (
+    | {type: 'app'; metadata: ApplicationInterfacePlacementMetadata | null}
+    | {type: 'panel'; metadata: ApplicationInterfacePlacementMetadata | null}
+    | {type: 'asset_source'; metadata: null}
+    | {type: 'worker'; metadata: null}
+    | {type: 'tile'; metadata: {order?: number; size: 'small' | 'large' | 'banner'}}
+  )
+
 /**
  * A studio workspace of a deployment, embedded when `workspaces` is included.
  * Studio applications only.
@@ -136,16 +153,24 @@ export interface ApplicationBase {
 
 // Requesting any of these tokens forces the deployment summary into the response.
 type DeploymentToken = 'activeDeployment' | 'interfaces' | 'workspaces' | 'access'
+type ConfigToken = 'config.studio' | 'config.mfManifest'
 
-// `config` is present when either config child was requested; each child is
-// gated on its own token.
-type ApplicationConfigShape<Include extends ApplicationInclude> = Included<
+type ApplicationConfig<Include extends ApplicationInclude> = Included<
   ApplicationInclude,
   'config.studio',
   Include,
-  {config: {studio: ApplicationStudioConfig}}
+  {studio?: ApplicationStudioConfig}
 > &
-  Included<ApplicationInclude, 'config.mfManifest', Include, {config: {mfManifest: unknown}}>
+  Included<ApplicationInclude, 'config.mfManifest', Include, {mfManifest?: unknown}>
+
+// Brett returns `config: {}` when a requested config value is not stored.
+type ApplicationConfigShape<Include extends ApplicationInclude> = [ApplicationInclude] extends [
+  Include,
+]
+  ? {config?: ApplicationConfig<Include>}
+  : IncludesAny<Include, ConfigToken> extends true
+    ? {config: ApplicationConfig<Include>}
+    : unknown
 
 // `activeDeployment` is present when any deployment-related token was requested;
 // a wide include array makes it optional.
@@ -227,7 +252,7 @@ export const applications = defineFetcher<
     getClientState(instance, {apiVersion: API_VERSION, scope: 'global'}).observable.pipe(
       switchMap((client) =>
         client.observable.request<ApplicationsResponse<ApplicationInclude>>({
-          uri: '/applications',
+          url: '/applications',
           query: buildQuery({
             organizationId: options.organizationId,
             type: options.type,
@@ -264,7 +289,7 @@ export const application = defineFetcher<
     getClientState(instance, {apiVersion: API_VERSION, scope: 'global'}).observable.pipe(
       switchMap((client) =>
         client.observable.request<Application<ApplicationInclude>>({
-          uri: `/applications/${applicationId}`,
+          url: `/applications/${applicationId}`,
           query: buildQuery({include: serializeInclude(options?.include)}),
           tag: 'applications.get',
         }),
@@ -317,7 +342,7 @@ export const updateApplication = defineMutation<UpdateApplicationInput, Applicat
       getClientState(instance, {apiVersion: API_VERSION, scope: 'global'}).observable.pipe(
         switchMap((client) =>
           client.observable.request<Application>({
-            uri: `/applications/${applicationId}`,
+            url: `/applications/${applicationId}`,
             method: 'PATCH',
             body,
             tag: 'applications.update',
@@ -354,7 +379,7 @@ export const deleteApplication = defineMutation<DeleteApplicationInput, DeletedR
       getClientState(instance, {apiVersion: API_VERSION, scope: 'global'}).observable.pipe(
         switchMap((client) =>
           client.observable.request<DeletedResult>({
-            uri: `/applications/${applicationId}`,
+            url: `/applications/${applicationId}`,
             method: 'DELETE',
             tag: 'applications.delete',
           }),

package/src/auth/authMode.test.ts

@@ -18,6 +18,30 @@ describe('resolveAuthMode', () => {
   it('returns "standalone" by default', () => {
     expect(resolveAuthMode({}, 'https://example.com')).toBe('standalone')
   })
+
+  it('returns "oauth" when auth.oauth config is provided', () => {
+    const config: SanityConfig = {
+      auth: {oauth: {clientId: 'c', redirectUri: 'https://app/cb', organizationId: 'o'}},
+    }
+    expect(resolveAuthMode(config, 'https://example.com')).toBe('oauth')
+  })
+
+  it('prefers "oauth" over dashboard context detection', () => {
+    const context = encodeURIComponent(JSON.stringify({orgId: '123'}))
+    const href = `https://example.com?_context=${context}`
+    const config: SanityConfig = {
+      auth: {oauth: {clientId: 'c', redirectUri: 'https://app/cb', organizationId: 'o'}},
+    }
+    expect(resolveAuthMode(config, href)).toBe('oauth')
+  })
+
+  it('prefers "studio" over oauth config', () => {
+    const config: SanityConfig = {
+      studio: {},
+      auth: {oauth: {clientId: 'c', redirectUri: 'https://app/cb', organizationId: 'o'}},
+    }
+    expect(resolveAuthMode(config, 'https://example.com')).toBe('studio')
+  })
 })
 
 describe('isStudioConfig', () => {

package/src/auth/authMode.ts

@@ -6,6 +6,8 @@ import {DEFAULT_BASE} from './authConstants'
  *
  * - `studio`     — Running inside Sanity Studio. Token is discovered from
  *                  Studio's localStorage entry or via cookie auth.
+ * - `oauth`      — Configured with `auth.oauth`. Authenticates via Sanity's
+ *                  OAuth 2.0 authorization-code + PKCE flow.
  * - `dashboard`  — Running inside the Sanity Dashboard iframe. Token is
  *                  provided by the parent frame via Comlink.
  * - `standalone` — Running as an independent app. Token comes from
@@ -13,20 +15,23 @@ import {DEFAULT_BASE} from './authConstants'
  *
  * @internal
  */
-type AuthMode = 'studio' | 'dashboard' | 'standalone'
+type AuthMode = 'studio' | 'oauth' | 'dashboard' | 'standalone'
 
 /**
  * Determines the auth mode from instance config and environment.
  *
  * Priority:
  * 1. `studio` config provided → `'studio'`
- * 2. Dashboard context detected (`_context` URL param with content) → `'dashboard'`
- * 3. Otherwise → `'standalone'`
+ * 2. `auth.oauth` config provided → `'oauth'` (explicit config wins over
+ *    environment detection)
+ * 3. Dashboard context detected (`_context` URL param with content) → `'dashboard'`
+ * 4. Otherwise → `'standalone'`
  *
  * @internal
  */
 export function resolveAuthMode(config: SanityConfig, locationHref: string): AuthMode {
   if (isStudioConfig(config)) return 'studio'
+  if (config.auth?.oauth) return 'oauth'
   if (detectDashboardContext(locationHref)) return 'dashboard'
   return 'standalone'
 }

package/src/auth/authStore.ts

@@ -11,6 +11,8 @@ import {resolveAuthMode} from './authMode'
 import {AuthStateType} from './authStateType'
 import {type AuthStrategyOptions} from './authStrategy'
 import {getDashboardInitialState, initializeDashboardAuth} from './dashboardAuth'
+import {getOauthInitialState, initializeOauthAuth} from './oauth/oauthAuth'
+import {type OAuthTokens} from './oauth/types'
 import {getStandaloneInitialState, initializeStandaloneAuth} from './standaloneAuth'
 import {getStudioInitialState, initializeStudioAuth} from './studioAuth'
 import {createLoggedInAuthState, getCleanedUrl, getDefaultLocation} from './utils'
@@ -91,8 +93,10 @@ export interface AuthStoreState {
     callbackUrl: string | undefined
     providedToken: string | undefined
     authMethod: AuthMethodOptions
+    oauth: AuthConfig['oauth']
   }
   dashboardContext?: DashboardContext
+  oauthTokens?: OAuthTokens
 }
 
 // ---------------------------------------------------------------------------
@@ -155,6 +159,9 @@ export const authStore = defineStore<AuthStoreState>({
       case 'studio':
         result = getStudioInitialState(strategyOptions)
         break
+      case 'oauth':
+        result = getOauthInitialState(strategyOptions)
+        break
       case 'dashboard':
         result = getDashboardInitialState(strategyOptions)
         break
@@ -172,6 +179,7 @@ export const authStore = defineStore<AuthStoreState>({
     return {
       authState: result.authState,
       dashboardContext: result.dashboardContext,
+      oauthTokens: result.oauthTokens,
       options: {
         apiHost,
         loginUrl: loginUrl.toString(),
@@ -183,6 +191,7 @@ export const authStore = defineStore<AuthStoreState>({
         storageKey: result.storageKey,
         storageArea: result.storageArea,
         authMethod: result.authMethod,
+        oauth: authConfig.oauth,
       },
     }
   },
@@ -201,6 +210,9 @@ export const authStore = defineStore<AuthStoreState>({
       case 'studio':
         initResult = initializeStudioAuth(context, tokenRefresherRunning)
         break
+      case 'oauth':
+        initResult = initializeOauthAuth(context)
+        break
       case 'dashboard':
         initResult = initializeDashboardAuth(context, tokenRefresherRunning)
         break

package/src/auth/authStrategy.ts

@@ -3,6 +3,7 @@ import {type ClientConfig, type SanityClient} from '@sanity/client'
 import {type AuthConfig} from '../config/authConfig'
 import {type TokenSource} from '../config/sanityConfig'
 import {type AuthMethodOptions, type AuthState, type DashboardContext} from './authStore'
+import {type OAuthTokens} from './oauth/types'
 
 /**
  * The result returned by each auth strategy's `getInitialState` function.
@@ -17,6 +18,7 @@ export interface AuthStrategyResult {
   storageArea: Storage | undefined
   authMethod: AuthMethodOptions
   dashboardContext: DashboardContext
+  oauthTokens?: OAuthTokens
 }
 
 /**

package/src/auth/handleAuthCallback.test.ts

@@ -94,7 +94,7 @@ describe('handleCallback', () => {
       method: 'GET',
       query: {sid: authCode},
       tag: 'fetch-token',
-      uri: '/auth/fetch',
+      url: '/auth/fetch',
     })
     expect(setItem).toHaveBeenCalledWith('__sanity_auth_token', '{"token":"new-token"}')
   })
@@ -236,7 +236,7 @@ describe('handleCallback', () => {
       method: 'GET',
       query: {sid: authCode},
       tag: 'fetch-token',
-      uri: '/auth/fetch',
+      url: '/auth/fetch',
     })
   })
 

package/src/auth/handleAuthCallback.ts

@@ -94,7 +94,7 @@ export const handleAuthCallback = bindActionGlobally(
       logger.debug('Fetching token from auth endpoint')
       const {token} = await client.request<{token: string; label: string}>({
         method: 'GET',
-        uri: '/auth/fetch',
+        url: '/auth/fetch',
         query: {sid: authCode},
         tag: 'fetch-token',
       })

package/src/auth/logout.test.ts

@@ -5,6 +5,9 @@ import {createSanityInstance, type SanityInstance} from '../store/createSanityIn
 import {AuthStateType} from './authStateType'
 import {getAuthState} from './authStore'
 import {logout} from './logout'
+import {getOAuthTokensState, serializeTokens} from './oauth/oauthActions'
+import {OAUTH_TOKENS_KEY} from './oauth/oauthAuth'
+import {type OAuthTokens} from './oauth/types'
 import {subscribeToStateAndFetchCurrentUser} from './subscribeToStateAndFetchCurrentUser'
 import {subscribeToStorageEventsAndSetToken} from './subscribeToStorageEventsAndSetToken'
 import {getTokenFromStorage} from './utils'
@@ -75,7 +78,7 @@ describe('logout', () => {
       useProjectHostname: false,
       useCdn: false,
     })
-    expect(mockRequest).toHaveBeenCalledWith({method: 'POST', uri: '/auth/logout', tag: 'logout'})
+    expect(mockRequest).toHaveBeenCalledWith({method: 'POST', url: '/auth/logout', tag: 'logout'})
     expect(removeItem).toHaveBeenCalledWith('__sanity_auth_token')
   })
 
@@ -166,6 +169,48 @@ describe('logout', () => {
     expect(removeItem).toHaveBeenCalledWith('__sanity_auth_token')
   })
 
+  it('clears the OAuth tokens from the store on logout', async () => {
+    const oauthTokens: OAuthTokens = {
+      accessToken: 'oauth-access',
+      tokenType: 'bearer',
+      expiresIn: 3600,
+      expiresAt: new Date('2030-01-01T00:00:00.000Z'),
+      refreshToken: 'oauth-refresh',
+    }
+    const map = new Map<string, string>([[OAUTH_TOKENS_KEY, serializeTokens(oauthTokens)]])
+    const storageArea = {
+      getItem: (k: string) => map.get(k) ?? null,
+      setItem: (k: string, v: string) => void map.set(k, v),
+      removeItem: (k: string) => void map.delete(k),
+    } as Storage
+
+    const mockRequest = vi.fn().mockResolvedValue(undefined)
+    const clientFactory = vi.fn().mockReturnValue({request: mockRequest})
+
+    instance = createSanityInstance({
+      projectId: 'p',
+      dataset: 'd',
+      auth: {
+        clientFactory,
+        storageArea,
+        oauth: {
+          clientId: 'client-abc',
+          redirectUri: 'https://app.example.com/callback',
+          organizationId: 'org123',
+        },
+      },
+    })
+
+    // Boots logged in with the persisted OAuth tokens exposed on the store.
+    expect(getOAuthTokensState(instance).getCurrent()).toMatchObject({accessToken: 'oauth-access'})
+
+    await logout(instance)
+
+    expect(getOAuthTokensState(instance).getCurrent()).toBeNull()
+    expect(getAuthState(instance).getCurrent()).toMatchObject({type: AuthStateType.LOGGED_OUT})
+    expect(map.get(OAUTH_TOKENS_KEY)).toBeUndefined()
+  })
+
   it('cleans up storage even if logout request fails', async () => {
     vi.mocked(getTokenFromStorage).mockReturnValue('token')
     const error = new Error('Logout request failed')

package/src/auth/logout.ts

@@ -44,7 +44,7 @@ export const logout = bindActionGlobally(authStore, async ({state, instance}) =>
       })
 
       logger.debug('Calling logout endpoint')
-      await client.request<void>({uri: '/auth/logout', method: 'POST', tag: 'logout'})
+      await client.request<void>({url: '/auth/logout', method: 'POST', tag: 'logout'})
     } else {
       logger.debug('No token to logout - already logged out')
     }
@@ -57,6 +57,7 @@ export const logout = bindActionGlobally(authStore, async ({state, instance}) =>
     logger.info('User logged out, clearing stored tokens')
     state.set('logoutSuccess', {
       authState: {type: AuthStateType.LOGGED_OUT, isDestroyingSession: false},
+      oauthTokens: undefined,
     })
     storageArea?.removeItem(storageKey)
     storageArea?.removeItem(`${storageKey}_last_refresh`)