@sendoracloud/sdk-react-native 1.8.0 → 1.8.1

package/dist/index.cjs

@@ -222,7 +222,7 @@ async function request(opts, method, path, body, extraHeaders, reqOpts) {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.8.0",
+  version: "1.8.1",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -865,12 +865,22 @@ var Auth = class {
    *     `scheduledPurgeAt`. The user can CANCEL by signing back in before then.
    * Either outcome wipes local identity (the server has already revoked the
    * session). Requires a signed-in user. Throws on a non-2xx response.
+   *
+   * Resolves a FRESH access token via `getAccessToken()` first (refreshing if
+   * the cached one expired) — unlike the other Bearer calls this is a one-shot
+   * destructive action, so a 401 from a stale token would silently strand the
+   * user with an undeleted account. A stale `this.accessToken` was the cause of
+   * the 401s seen in prod when a user tapped "delete" after the app sat idle.
    */
   async deleteAccount() {
+    const token = await this.getAccessToken();
+    if (!token) {
+      throw new AuthError("NOT_SIGNED_IN", "Sign in before deleting your account");
+    }
     const res = await del(
       { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
       "/api/v1/auth-service/me",
-      this.bearerHeaders()
+      { Authorization: `Bearer ${token}` }
     );
     if (!res || !res.ok) {
       throw new Error(`deleteAccount failed${res ? ` (HTTP ${res.status})` : " (network error)"}`);

package/dist/index.d.cts

@@ -353,6 +353,12 @@ declare class Auth {
      *     `scheduledPurgeAt`. The user can CANCEL by signing back in before then.
      * Either outcome wipes local identity (the server has already revoked the
      * session). Requires a signed-in user. Throws on a non-2xx response.
+     *
+     * Resolves a FRESH access token via `getAccessToken()` first (refreshing if
+     * the cached one expired) — unlike the other Bearer calls this is a one-shot
+     * destructive action, so a 401 from a stale token would silently strand the
+     * user with an undeleted account. A stale `this.accessToken` was the cause of
+     * the 401s seen in prod when a user tapped "delete" after the app sat idle.
      */
     deleteAccount(): Promise<{
         status: "purged" | "pending";

package/dist/index.d.ts

@@ -353,6 +353,12 @@ declare class Auth {
      *     `scheduledPurgeAt`. The user can CANCEL by signing back in before then.
      * Either outcome wipes local identity (the server has already revoked the
      * session). Requires a signed-in user. Throws on a non-2xx response.
+     *
+     * Resolves a FRESH access token via `getAccessToken()` first (refreshing if
+     * the cached one expired) — unlike the other Bearer calls this is a one-shot
+     * destructive action, so a 401 from a stale token would silently strand the
+     * user with an undeleted account. A stale `this.accessToken` was the cause of
+     * the 401s seen in prod when a user tapped "delete" after the app sat idle.
      */
     deleteAccount(): Promise<{
         status: "purged" | "pending";

package/dist/index.js

@@ -179,7 +179,7 @@ async function request(opts, method, path, body, extraHeaders, reqOpts) {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.8.0",
+  version: "1.8.1",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -822,12 +822,22 @@ var Auth = class {
    *     `scheduledPurgeAt`. The user can CANCEL by signing back in before then.
    * Either outcome wipes local identity (the server has already revoked the
    * session). Requires a signed-in user. Throws on a non-2xx response.
+   *
+   * Resolves a FRESH access token via `getAccessToken()` first (refreshing if
+   * the cached one expired) — unlike the other Bearer calls this is a one-shot
+   * destructive action, so a 401 from a stale token would silently strand the
+   * user with an undeleted account. A stale `this.accessToken` was the cause of
+   * the 401s seen in prod when a user tapped "delete" after the app sat idle.
    */
   async deleteAccount() {
+    const token = await this.getAccessToken();
+    if (!token) {
+      throw new AuthError("NOT_SIGNED_IN", "Sign in before deleting your account");
+    }
     const res = await del(
       { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
       "/api/v1/auth-service/me",
-      this.bearerHeaders()
+      { Authorization: `Bearer ${token}` }
     );
     if (!res || !res.ok) {
       throw new Error(`deleteAccount failed${res ? ` (HTTP ${res.status})` : " (network error)"}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.8.0",
+  "version": "1.8.1",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",