@scalemule/nextjs 0.1.17 → 0.1.18

package/dist/server/index.mjs

@@ -2109,23 +2109,31 @@ var ScaleMuleServer = class {
       /**
        * Logout user
        */
-      logout: async (sessionToken) => {
+      logout: async (sessionToken, options) => {
         return this.request("POST", "/v1/auth/logout", {
-          body: { session_token: sessionToken }
+          sessionToken,
+          body: { session_token: sessionToken },
+          onTokenRotated: options?.onTokenRotated
         });
       },
       /**
        * Get current user from session token
        */
-      me: async (sessionToken) => {
-        return this.request("GET", "/v1/auth/me", { sessionToken });
+      me: async (sessionToken, options) => {
+        return this.request("GET", "/v1/auth/me", {
+          sessionToken,
+          onTokenRotated: options?.onTokenRotated
+        });
       },
       /**
        * Refresh session token
        */
-      refresh: async (sessionToken) => {
+      refresh: async (sessionToken, options) => {
         return this.request("POST", "/v1/auth/refresh", {
-          body: { session_token: sessionToken }
+          sessionToken,
+          clientContext: options?.clientContext,
+          isAutoRefresh: options?.isAutoRefresh,
+          onTokenRotated: options?.onTokenRotated
         });
       },
       /**
@@ -2157,7 +2165,8 @@ var ScaleMuleServer = class {
         if (options?.email) {
           return this.request("POST", "/v1/auth/resend-verification", {
             sessionToken: sessionTokenOrEmail,
-            body: { email: options.email }
+            body: { email: options.email },
+            onTokenRotated: options?.onTokenRotated
           });
         }
         if (sessionTokenOrEmail.includes("@")) {
@@ -2166,7 +2175,8 @@ var ScaleMuleServer = class {
           });
         }
         return this.request("POST", "/v1/auth/resend-verification", {
-          sessionToken: sessionTokenOrEmail
+          sessionToken: sessionTokenOrEmail,
+          onTokenRotated: options?.onTokenRotated
         });
       }
     };
@@ -2177,37 +2187,41 @@ var ScaleMuleServer = class {
       /**
        * Update user profile
        */
-      update: async (sessionToken, data) => {
+      update: async (sessionToken, data, options) => {
         return this.request("PATCH", "/v1/auth/profile", {
           sessionToken,
-          body: data
+          body: data,
+          onTokenRotated: options?.onTokenRotated
         });
       },
       /**
        * Change password
        */
-      changePassword: async (sessionToken, currentPassword, newPassword) => {
+      changePassword: async (sessionToken, currentPassword, newPassword, options) => {
         return this.request("POST", "/v1/auth/change-password", {
           sessionToken,
-          body: { current_password: currentPassword, new_password: newPassword }
+          body: { current_password: currentPassword, new_password: newPassword },
+          onTokenRotated: options?.onTokenRotated
         });
       },
       /**
        * Change email
        */
-      changeEmail: async (sessionToken, newEmail, password) => {
+      changeEmail: async (sessionToken, newEmail, password, options) => {
         return this.request("POST", "/v1/auth/change-email", {
           sessionToken,
-          body: { new_email: newEmail, password }
+          body: { new_email: newEmail, password },
+          onTokenRotated: options?.onTokenRotated
         });
       },
       /**
        * Delete account
        */
-      deleteAccount: async (sessionToken, password) => {
+      deleteAccount: async (sessionToken, password, options) => {
         return this.request("DELETE", "/v1/auth/me", {
           sessionToken,
-          body: { password }
+          body: { password },
+          onTokenRotated: options?.onTokenRotated
         });
       }
     };
@@ -2668,6 +2682,9 @@ var ScaleMuleServer = class {
     this.apiKey = config.apiKey;
     this.gatewayUrl = resolveGatewayUrl(config);
     this.debug = config.debug || false;
+    this.onRefreshStart = config.onRefreshStart;
+    this.onRefreshEnd = config.onRefreshEnd;
+    this.onAutoRefreshFailed = config.onAutoRefreshFailed;
     this.money = createMoneyClient({
       apiKey: this.apiKey,
       gatewayUrl: this.gatewayUrl,
@@ -2711,6 +2728,10 @@ var ScaleMuleServer = class {
         headers: headers2,
         body: options.body ? JSON.stringify(options.body) : void 0
       });
+      const rotated = response.headers.get("x-rotated-session-token");
+      if (rotated && options.onTokenRotated) {
+        options.onTokenRotated(rotated);
+      }
       const text = await response.text();
       let responseData = null;
       try {
@@ -2722,6 +2743,33 @@ var ScaleMuleServer = class {
           code: `HTTP_${response.status}`,
           message: responseData?.message || text || response.statusText
         };
+        if (response.status === 401 && options.sessionToken && !options.isAutoRefresh) {
+          if (this.debug) console.log("[ScaleMule Server] 401 received, attempting auto-refresh...");
+          try {
+            this.onRefreshStart?.();
+            const refreshData = await this.auth.refresh(options.sessionToken, {
+              clientContext: options.clientContext,
+              isAutoRefresh: true
+              // Prevent infinite loops
+            });
+            const newToken = refreshData.session_token;
+            if (this.debug) console.log("[ScaleMule Server] Auto-refresh succeeded, retrying original request...");
+            options.onTokenRotated?.(newToken);
+            return this.request(method, path, {
+              ...options,
+              sessionToken: newToken,
+              isAutoRefresh: true
+              // Don't refresh again on this retry
+            });
+          } catch (refreshErr) {
+            if (this.debug) console.error("[ScaleMule Server] Auto-refresh failed:", refreshErr);
+            const refreshApiError = refreshErr instanceof ScaleMuleApiError ? { code: refreshErr.code, message: refreshErr.message } : { code: "REFRESH_FAILED", message: "Auto-refresh failed" };
+            this.onAutoRefreshFailed?.(refreshApiError);
+            throw new ScaleMuleApiError(error);
+          } finally {
+            this.onRefreshEnd?.();
+          }
+        }
         throw new ScaleMuleApiError(error);
       }
       const data = responseData?.data !== void 0 ? responseData.data : responseData;
@@ -3243,8 +3291,16 @@ function createAuthRoutes(config = {}) {
         // ==================== Logout ====================
         case "logout": {
           const session = await getSession();
+          let rotated = null;
           if (session) {
-            await sm.auth.logout(session.sessionToken);
+            try {
+              await sm.auth.logout(session.sessionToken, {
+                onTokenRotated: (newToken) => {
+                  rotated = newToken;
+                }
+              });
+            } catch {
+            }
           }
           if (config.onLogout) {
             await config.onLogout();
@@ -3309,6 +3365,7 @@ function createAuthRoutes(config = {}) {
         case "resend-verification": {
           const { email } = body;
           const session = await getSession();
+          let rotated = null;
           if (email) {
             try {
               await sm.auth.resendVerification(email);
@@ -3326,7 +3383,11 @@ function createAuthRoutes(config = {}) {
             return errorResponse("UNAUTHORIZED", "Email or session required", 401);
           }
           try {
-            await sm.auth.resendVerification(session.sessionToken);
+            await sm.auth.resendVerification(session.sessionToken, {
+              onTokenRotated: (newToken) => {
+                rotated = newToken;
+              }
+            });
           } catch (err) {
             const apiErr = err instanceof ScaleMuleApiError ? err : null;
             return errorResponse(
@@ -3335,6 +3396,14 @@ function createAuthRoutes(config = {}) {
               400
             );
           }
+          if (rotated) {
+            return withRefreshedSession(
+              rotated,
+              session.userId,
+              { success: true, data: { message: "Verification email sent" } },
+              cookieOptions
+            );
+          }
           return successResponse({ message: "Verification email sent" });
         }
         // ==================== Refresh Session ====================
@@ -3369,11 +3438,17 @@ function createAuthRoutes(config = {}) {
           if (!current_password || !new_password) {
             return errorResponse("VALIDATION_ERROR", "Current and new password required", 400);
           }
+          let rotated = null;
           try {
             await sm.user.changePassword(
               session.sessionToken,
               current_password,
-              new_password
+              new_password,
+              {
+                onTokenRotated: (newToken) => {
+                  rotated = newToken;
+                }
+              }
             );
           } catch (err) {
             const apiErr = err instanceof ScaleMuleApiError ? err : null;
@@ -3383,6 +3458,14 @@ function createAuthRoutes(config = {}) {
               400
             );
           }
+          if (rotated) {
+            return withRefreshedSession(
+              rotated,
+              session.userId,
+              { success: true, data: { message: "Password changed successfully" } },
+              cookieOptions
+            );
+          }
           return successResponse({ message: "Password changed successfully" });
         }
         // ==================== Switch Account ====================
@@ -3463,14 +3546,27 @@ function createAuthRoutes(config = {}) {
             return withNorm(errorResponse("UNAUTHORIZED", "Authentication required", 401));
           }
           let userData;
+          let rotated = null;
           try {
-            userData = await sm.auth.me(session.sessionToken);
+            userData = await sm.auth.me(session.sessionToken, {
+              onTokenRotated: (newToken) => {
+                rotated = newToken;
+              }
+            });
           } catch {
             return withNorm(clearSession(
               { error: { code: "SESSION_EXPIRED", message: "Session expired" } },
               cookieOptions
             ));
           }
+          if (rotated) {
+            return withNorm(withRefreshedSession(
+              rotated,
+              session.userId,
+              { user: userData, sessionToken: rotated, userId: session.userId },
+              cookieOptions
+            ));
+          }
           return withNorm(successResponse({ user: userData, sessionToken: session.sessionToken, userId: session.userId }));
         }
         // ==================== Get Session Status ====================
@@ -3549,8 +3645,13 @@ function createAuthRoutes(config = {}) {
           const body = await request.json().catch(() => ({}));
           const { full_name, avatar_url } = body;
           let updatedUser;
+          let rotated = null;
           try {
-            updatedUser = await sm.user.update(session.sessionToken, { full_name, avatar_url });
+            updatedUser = await sm.user.update(session.sessionToken, { full_name, avatar_url }, {
+              onTokenRotated: (newToken) => {
+                rotated = newToken;
+              }
+            });
           } catch (err) {
             const apiErr = err instanceof ScaleMuleApiError ? err : null;
             return errorResponse(
@@ -3559,6 +3660,14 @@ function createAuthRoutes(config = {}) {
               400
             );
           }
+          if (rotated) {
+            return withRefreshedSession(
+              rotated,
+              session.userId,
+              { success: true, data: { user: updatedUser } },
+              cookieOptions
+            );
+          }
           return successResponse({ user: updatedUser });
         }
         default:

package/dist/server/webhook-handler.d.mts

@@ -1,3 +1,3 @@
-export { g as createWebhookHandler } from '../webhook-handler-CUp_A0_p.mjs';
+export { g as createWebhookHandler } from '../webhook-handler-DsxJS_He.mjs';
 import '@scalemule/money';
 import '../index-DTWyUcyd.mjs';

package/dist/server/webhook-handler.d.ts

@@ -1,3 +1,3 @@
-export { g as createWebhookHandler } from '../webhook-handler-C07AK4QB.js';
+export { g as createWebhookHandler } from '../webhook-handler-CTx4Uh8u.js';
 import '@scalemule/money';
 import '../index-DTWyUcyd.js';

package/dist/{webhook-handler-C07AK4QB.d.ts → webhook-handler-CTx4Uh8u.d.ts}

@@ -1,5 +1,5 @@
 import { MoneyClient } from '@scalemule/money';
-import { $ as RegisterRequest, p as ClientContext, U as User, v as LoginRequest, L as LoginResponse, c as ListFilesParams, t as ListFilesResponse, a9 as StorageFile, af as UploadResponse } from './index-DTWyUcyd.js';
+import { A as ApiError, $ as RegisterRequest, p as ClientContext, U as User, v as LoginRequest, L as LoginResponse, c as ListFilesParams, t as ListFilesResponse, a9 as StorageFile, af as UploadResponse } from './index-DTWyUcyd.js';
 
 /**
  * Server-Side ScaleMule Client
@@ -18,12 +18,21 @@ interface ServerConfig {
     gatewayUrl?: string;
     /** Enable debug logging */
     debug?: boolean;
+    /** Callback when a 401 auto-refresh starts */
+    onRefreshStart?: () => void;
+    /** Callback when a 401 auto-refresh finishes */
+    onRefreshEnd?: () => void;
+    /** Callback when a 401 auto-refresh fails */
+    onAutoRefreshFailed?: (error: ApiError) => void;
 }
 declare function resolveGatewayUrl(config: ServerConfig): string;
 declare class ScaleMuleServer {
     private apiKey;
     private gatewayUrl;
     private debug;
+    private onRefreshStart?;
+    private onRefreshEnd?;
+    private onAutoRefreshFailed?;
     money: MoneyClient;
     constructor(config: ServerConfig);
     moneyWithSession(sessionToken: string): MoneyClient;
@@ -55,15 +64,23 @@ declare class ScaleMuleServer {
         /**
          * Logout user
          */
-        logout: (sessionToken: string) => Promise<void>;
+        logout: (sessionToken: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<void>;
         /**
          * Get current user from session token
          */
-        me: (sessionToken: string) => Promise<User>;
+        me: (sessionToken: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<User>;
         /**
          * Refresh session token
          */
-        refresh: (sessionToken: string) => Promise<{
+        refresh: (sessionToken: string, options?: {
+            clientContext?: ClientContext;
+            isAutoRefresh?: boolean;
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<{
             session_token: string;
             expires_at: string;
         }>;
@@ -99,6 +116,7 @@ declare class ScaleMuleServer {
          */
         resendVerification: (sessionTokenOrEmail: string, options?: {
             email?: string;
+            onTokenRotated?: (newToken: string) => void;
         }) => Promise<{
             message: string;
         }>;
@@ -110,23 +128,31 @@ declare class ScaleMuleServer {
         update: (sessionToken: string, data: {
             full_name?: string;
             avatar_url?: string;
+        }, options?: {
+            onTokenRotated?: (newToken: string) => void;
         }) => Promise<User>;
         /**
          * Change password
          */
-        changePassword: (sessionToken: string, currentPassword: string, newPassword: string) => Promise<{
+        changePassword: (sessionToken: string, currentPassword: string, newPassword: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<{
             message: string;
         }>;
         /**
          * Change email
          */
-        changeEmail: (sessionToken: string, newEmail: string, password: string) => Promise<{
+        changeEmail: (sessionToken: string, newEmail: string, password: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<{
             message: string;
         }>;
         /**
          * Delete account
          */
-        deleteAccount: (sessionToken: string, password: string) => Promise<{
+        deleteAccount: (sessionToken: string, password: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<{
             message: string;
         }>;
     };

package/dist/{webhook-handler-CUp_A0_p.d.mts → webhook-handler-DsxJS_He.d.mts}

@@ -1,5 +1,5 @@
 import { MoneyClient } from '@scalemule/money';
-import { $ as RegisterRequest, p as ClientContext, U as User, v as LoginRequest, L as LoginResponse, c as ListFilesParams, t as ListFilesResponse, a9 as StorageFile, af as UploadResponse } from './index-DTWyUcyd.mjs';
+import { A as ApiError, $ as RegisterRequest, p as ClientContext, U as User, v as LoginRequest, L as LoginResponse, c as ListFilesParams, t as ListFilesResponse, a9 as StorageFile, af as UploadResponse } from './index-DTWyUcyd.mjs';
 
 /**
  * Server-Side ScaleMule Client
@@ -18,12 +18,21 @@ interface ServerConfig {
     gatewayUrl?: string;
     /** Enable debug logging */
     debug?: boolean;
+    /** Callback when a 401 auto-refresh starts */
+    onRefreshStart?: () => void;
+    /** Callback when a 401 auto-refresh finishes */
+    onRefreshEnd?: () => void;
+    /** Callback when a 401 auto-refresh fails */
+    onAutoRefreshFailed?: (error: ApiError) => void;
 }
 declare function resolveGatewayUrl(config: ServerConfig): string;
 declare class ScaleMuleServer {
     private apiKey;
     private gatewayUrl;
     private debug;
+    private onRefreshStart?;
+    private onRefreshEnd?;
+    private onAutoRefreshFailed?;
     money: MoneyClient;
     constructor(config: ServerConfig);
     moneyWithSession(sessionToken: string): MoneyClient;
@@ -55,15 +64,23 @@ declare class ScaleMuleServer {
         /**
          * Logout user
          */
-        logout: (sessionToken: string) => Promise<void>;
+        logout: (sessionToken: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<void>;
         /**
          * Get current user from session token
          */
-        me: (sessionToken: string) => Promise<User>;
+        me: (sessionToken: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<User>;
         /**
          * Refresh session token
          */
-        refresh: (sessionToken: string) => Promise<{
+        refresh: (sessionToken: string, options?: {
+            clientContext?: ClientContext;
+            isAutoRefresh?: boolean;
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<{
             session_token: string;
             expires_at: string;
         }>;
@@ -99,6 +116,7 @@ declare class ScaleMuleServer {
          */
         resendVerification: (sessionTokenOrEmail: string, options?: {
             email?: string;
+            onTokenRotated?: (newToken: string) => void;
         }) => Promise<{
             message: string;
         }>;
@@ -110,23 +128,31 @@ declare class ScaleMuleServer {
         update: (sessionToken: string, data: {
             full_name?: string;
             avatar_url?: string;
+        }, options?: {
+            onTokenRotated?: (newToken: string) => void;
         }) => Promise<User>;
         /**
          * Change password
          */
-        changePassword: (sessionToken: string, currentPassword: string, newPassword: string) => Promise<{
+        changePassword: (sessionToken: string, currentPassword: string, newPassword: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<{
             message: string;
         }>;
         /**
          * Change email
          */
-        changeEmail: (sessionToken: string, newEmail: string, password: string) => Promise<{
+        changeEmail: (sessionToken: string, newEmail: string, password: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<{
             message: string;
         }>;
         /**
          * Delete account
          */
-        deleteAccount: (sessionToken: string, password: string) => Promise<{
+        deleteAccount: (sessionToken: string, password: string, options?: {
+            onTokenRotated?: (newToken: string) => void;
+        }) => Promise<{
             message: string;
         }>;
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalemule/nextjs",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "ScaleMule SDK for Next.js applications - authentication, storage, and user management",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -60,7 +60,7 @@
   "dependencies": {
     "@scalemule/ledvery": "^0.0.1",
     "@scalemule/money": "^0.0.1",
-    "@scalemule/sdk": "^0.0.47"
+    "@scalemule/sdk": "^0.0.48"
   },
   "peerDependencies": {
     "next": ">=14.0.0",