@shopsbuilder/auth-sdk 1.2.8 → 1.2.10

package/dist/SaleorAuthClient.d.mts

@@ -4,9 +4,10 @@ interface SaleorAuthClientProps {
     onAuthRefresh?: (isAuthenticating: boolean) => void;
     saleorApiUrl: string;
     /**
-     * Prefix used for storage keys. Defaults to saleorApiUrl.
-     * Set this to the public API URL when the server uses an internal URL
-     * for saleorApiUrl, so that cookie keys match between client and server.
+     * Override the key prefix used for storage/cookies.
+     * Defaults to `saleorApiUrl`. Useful when the server uses a different
+     * internal URL (e.g. `http://api:8000`) while the client uses the public
+     * URL — pass the client URL here so cookie names match.
      */
     storageKeyPrefix?: string;
     refreshTokenStorage?: StorageRepository;

package/dist/SaleorAuthClient.d.ts

@@ -4,9 +4,10 @@ interface SaleorAuthClientProps {
     onAuthRefresh?: (isAuthenticating: boolean) => void;
     saleorApiUrl: string;
     /**
-     * Prefix used for storage keys. Defaults to saleorApiUrl.
-     * Set this to the public API URL when the server uses an internal URL
-     * for saleorApiUrl, so that cookie keys match between client and server.
+     * Override the key prefix used for storage/cookies.
+     * Defaults to `saleorApiUrl`. Useful when the server uses a different
+     * internal URL (e.g. `http://api:8000`) while the client uses the public
+     * URL — pass the client URL here so cookie names match.
      */
     storageKeyPrefix?: string;
     refreshTokenStorage?: StorageRepository;

package/dist/SaleorAuthClient.js

@@ -110,6 +110,10 @@ var getTokenExpiry = (token) => {
   const parsedTokenData = decodeToken(token);
   return parsedTokenData.exp * MILLI_MULTIPLYER || 0;
 };
+var getTokenIss = (token) => {
+  const parsedTokenData = decodeToken(token);
+  return parsedTokenData.iss;
+};
 var isExpiredToken = (token, tokenGracePeriod) => {
   return getTokenExpiry(token) - tokenGracePeriod <= Date.now();
 };
@@ -312,14 +316,39 @@ var SaleorAuthClient = class {
   cleanup = () => {
     this.refreshTokenStorage?.cleanup();
   };
-  runAuthorizedRequest = (input, init) => {
+  runAuthorizedRequest = (input, init, additionalParams) => {
     const token = this.accessTokenStorage.getAccessToken();
     if (!token) {
       return fetch(input, init);
     }
-    const headers = new Headers(init?.headers);
-    headers.set("Authorization", `Bearer ${token}`);
-    return fetch(input, { ...init, headers });
+    const headers = init?.headers || {};
+    const getURL = (input2) => {
+      if (typeof input2 === "string") {
+        return input2;
+      } else if ("url" in input2) {
+        return input2.url;
+      } else {
+        return input2.href;
+      }
+    };
+    const iss = getTokenIss(token);
+    const issuerAndDomainMatch = getURL(input) === iss;
+    const shouldAddAuthorizationHeader = issuerAndDomainMatch || additionalParams?.allowPassingTokenToThirdPartyDomains;
+    if (!issuerAndDomainMatch) {
+      if (shouldAddAuthorizationHeader) {
+        console.warn(
+          "Token's `iss` and request URL do not match but `allowPassingTokenToThirdPartyDomains` was specified."
+        );
+      } else {
+        console.warn(
+          "Token's `iss` and request URL do not match. Not adding `Authorization` header to the request."
+        );
+      }
+    }
+    return fetch(input, {
+      ...init,
+      headers: shouldAddAuthorizationHeader ? { ...headers, Authorization: `Bearer ${token}` } : headers
+    });
   };
   handleRequestWithTokenRefresh = async (input, requestInit, additionalParams) => {
     const refreshToken = this.refreshTokenStorage?.getRefreshToken();
@@ -331,37 +360,15 @@ var SaleorAuthClient = class {
     this.onAuthRefresh?.(true);
     if (this.tokenRefreshPromise) {
       const response = await this.tokenRefreshPromise;
-      const responseClone = response.clone();
-      const rawText = await response.clone().text();
-      console.log("[auth-sdk] Token refresh raw response:", JSON.stringify({
-        status: response.status,
-        statusText: response.statusText,
-        headers: Object.fromEntries(response.headers.entries()),
-        bodyLength: rawText.length,
-        body: rawText.slice(0, 500)
-      }));
-      let res;
-      try {
-        res = await responseClone.json();
-      } catch {
-        console.error("[auth-sdk] Token refresh response is not valid JSON, status:", response.status);
-        this.onAuthRefresh?.(false);
-        this.tokenRefreshPromise = null;
-        this.refreshTokenStorage?.clearAuthStorage();
-        return fetch(input, requestInit);
-      }
-      const graphqlErrors = res.errors;
-      const token = res.data?.tokenRefresh?.token;
-      const refreshErrors = res.data?.tokenRefresh?.errors;
+      const res = await response.clone().json();
+      const {
+        errors: graphqlErrors,
+        data: {
+          tokenRefresh: { errors, token }
+        }
+      } = res;
       this.onAuthRefresh?.(false);
-      if (refreshErrors?.length || graphqlErrors?.length || !token) {
-        console.warn("[auth-sdk] Token refresh failed:", JSON.stringify({
-          graphqlErrors: graphqlErrors ?? [],
-          refreshErrors: refreshErrors ?? [],
-          hasToken: Boolean(token),
-          httpStatus: response.status,
-          rawData: res.data ?? null
-        }));
+      if (errors?.length || graphqlErrors?.length || !token) {
         this.tokenRefreshPromise = null;
         this.refreshTokenStorage?.clearAuthStorage();
         return fetch(input, requestInit);
@@ -371,32 +378,10 @@ var SaleorAuthClient = class {
       this.tokenRefreshPromise = null;
       return this.runAuthorizedRequest(input, requestInit, additionalParams);
     }
-    const refreshHeaders = {
-      "Content-Type": "application/json"
-    };
-    if (requestInit?.headers) {
-      const origHeaders = new Headers(requestInit.headers);
-      for (const [key, value] of origHeaders.entries()) {
-        if (key !== "host" && key !== "content-type") {
-          refreshHeaders[key] = value;
-        }
-      }
-    }
-    const refreshBody = JSON.stringify({
-      query: TOKEN_REFRESH.toString(),
-      variables: { refreshToken }
-    });
-    console.log("[auth-sdk] Token refresh request:", JSON.stringify({
-      url: this.saleorApiUrl,
-      headers: refreshHeaders,
-      bodyLength: refreshBody.length,
-      bodyPreview: refreshBody.slice(0, 200)
-    }));
-    this.tokenRefreshPromise = fetch(this.saleorApiUrl, {
-      method: "POST",
-      headers: refreshHeaders,
-      body: refreshBody
-    });
+    this.tokenRefreshPromise = fetch(
+      this.saleorApiUrl,
+      getRequestData(TOKEN_REFRESH, { refreshToken }, { ...this.defaultRequestInit, ...requestInit })
+    );
     return this.fetchWithAuth(input, requestInit, additionalParams);
   };
   handleSignIn = async (response) => {

package/dist/SaleorAuthClient.mjs

@@ -1,7 +1,7 @@
 import {
   SaleorAuthClient,
   createSaleorAuthClient
-} from "./chunk-X3MKOESH.mjs";
+} from "./chunk-3UGMWVQN.mjs";
 import "./chunk-B326YIV6.mjs";
 import "./chunk-263DHBMK.mjs";
 import "./chunk-UDLCOX6B.mjs";

package/dist/{chunk-X3MKOESH.mjs → chunk-3UGMWVQN.mjs}

@@ -6,6 +6,7 @@ import {
 } from "./chunk-263DHBMK.mjs";
 import {
   getRequestData,
+  getTokenIss,
   invariant,
   isExpiredToken
 } from "./chunk-UDLCOX6B.mjs";
@@ -68,14 +69,39 @@ var SaleorAuthClient = class {
   cleanup = () => {
     this.refreshTokenStorage?.cleanup();
   };
-  runAuthorizedRequest = (input, init) => {
+  runAuthorizedRequest = (input, init, additionalParams) => {
     const token = this.accessTokenStorage.getAccessToken();
     if (!token) {
       return fetch(input, init);
     }
-    const headers = new Headers(init?.headers);
-    headers.set("Authorization", `Bearer ${token}`);
-    return fetch(input, { ...init, headers });
+    const headers = init?.headers || {};
+    const getURL = (input2) => {
+      if (typeof input2 === "string") {
+        return input2;
+      } else if ("url" in input2) {
+        return input2.url;
+      } else {
+        return input2.href;
+      }
+    };
+    const iss = getTokenIss(token);
+    const issuerAndDomainMatch = getURL(input) === iss;
+    const shouldAddAuthorizationHeader = issuerAndDomainMatch || additionalParams?.allowPassingTokenToThirdPartyDomains;
+    if (!issuerAndDomainMatch) {
+      if (shouldAddAuthorizationHeader) {
+        console.warn(
+          "Token's `iss` and request URL do not match but `allowPassingTokenToThirdPartyDomains` was specified."
+        );
+      } else {
+        console.warn(
+          "Token's `iss` and request URL do not match. Not adding `Authorization` header to the request."
+        );
+      }
+    }
+    return fetch(input, {
+      ...init,
+      headers: shouldAddAuthorizationHeader ? { ...headers, Authorization: `Bearer ${token}` } : headers
+    });
   };
   handleRequestWithTokenRefresh = async (input, requestInit, additionalParams) => {
     const refreshToken = this.refreshTokenStorage?.getRefreshToken();
@@ -87,37 +113,15 @@ var SaleorAuthClient = class {
     this.onAuthRefresh?.(true);
     if (this.tokenRefreshPromise) {
       const response = await this.tokenRefreshPromise;
-      const responseClone = response.clone();
-      const rawText = await response.clone().text();
-      console.log("[auth-sdk] Token refresh raw response:", JSON.stringify({
-        status: response.status,
-        statusText: response.statusText,
-        headers: Object.fromEntries(response.headers.entries()),
-        bodyLength: rawText.length,
-        body: rawText.slice(0, 500)
-      }));
-      let res;
-      try {
-        res = await responseClone.json();
-      } catch {
-        console.error("[auth-sdk] Token refresh response is not valid JSON, status:", response.status);
-        this.onAuthRefresh?.(false);
-        this.tokenRefreshPromise = null;
-        this.refreshTokenStorage?.clearAuthStorage();
-        return fetch(input, requestInit);
-      }
-      const graphqlErrors = res.errors;
-      const token = res.data?.tokenRefresh?.token;
-      const refreshErrors = res.data?.tokenRefresh?.errors;
+      const res = await response.clone().json();
+      const {
+        errors: graphqlErrors,
+        data: {
+          tokenRefresh: { errors, token }
+        }
+      } = res;
       this.onAuthRefresh?.(false);
-      if (refreshErrors?.length || graphqlErrors?.length || !token) {
-        console.warn("[auth-sdk] Token refresh failed:", JSON.stringify({
-          graphqlErrors: graphqlErrors ?? [],
-          refreshErrors: refreshErrors ?? [],
-          hasToken: Boolean(token),
-          httpStatus: response.status,
-          rawData: res.data ?? null
-        }));
+      if (errors?.length || graphqlErrors?.length || !token) {
         this.tokenRefreshPromise = null;
         this.refreshTokenStorage?.clearAuthStorage();
         return fetch(input, requestInit);
@@ -127,32 +131,10 @@ var SaleorAuthClient = class {
       this.tokenRefreshPromise = null;
       return this.runAuthorizedRequest(input, requestInit, additionalParams);
     }
-    const refreshHeaders = {
-      "Content-Type": "application/json"
-    };
-    if (requestInit?.headers) {
-      const origHeaders = new Headers(requestInit.headers);
-      for (const [key, value] of origHeaders.entries()) {
-        if (key !== "host" && key !== "content-type") {
-          refreshHeaders[key] = value;
-        }
-      }
-    }
-    const refreshBody = JSON.stringify({
-      query: TOKEN_REFRESH.toString(),
-      variables: { refreshToken }
-    });
-    console.log("[auth-sdk] Token refresh request:", JSON.stringify({
-      url: this.saleorApiUrl,
-      headers: refreshHeaders,
-      bodyLength: refreshBody.length,
-      bodyPreview: refreshBody.slice(0, 200)
-    }));
-    this.tokenRefreshPromise = fetch(this.saleorApiUrl, {
-      method: "POST",
-      headers: refreshHeaders,
-      body: refreshBody
-    });
+    this.tokenRefreshPromise = fetch(
+      this.saleorApiUrl,
+      getRequestData(TOKEN_REFRESH, { refreshToken }, { ...this.defaultRequestInit, ...requestInit })
+    );
     return this.fetchWithAuth(input, requestInit, additionalParams);
   };
   handleSignIn = async (response) => {

package/dist/{chunk-WJVMUY3P.mjs → chunk-FY2QDW7J.mjs}

@@ -4,9 +4,10 @@ import {
 
 // src/react/useAuthChange.ts
 import { useEffect } from "react";
-var useAuthChange = ({ saleorApiUrl, onSignedOut, onSignedIn }) => {
+var useAuthChange = ({ saleorApiUrl, storageKeyPrefix, onSignedOut, onSignedIn }) => {
+  const keyPrefix = storageKeyPrefix ?? saleorApiUrl;
   const handleAuthChange = (event) => {
-    const isCustomAuthEvent = event?.type === getStorageAuthEventKey(saleorApiUrl);
+    const isCustomAuthEvent = event?.type === getStorageAuthEventKey(keyPrefix);
     if (!isCustomAuthEvent) {
       return;
     }
@@ -21,9 +22,9 @@ var useAuthChange = ({ saleorApiUrl, onSignedOut, onSignedIn }) => {
     if (typeof window === "undefined") {
       return;
     }
-    window.addEventListener(getStorageAuthEventKey(saleorApiUrl), handleAuthChange);
+    window.addEventListener(getStorageAuthEventKey(keyPrefix), handleAuthChange);
     return () => {
-      window.removeEventListener(getStorageAuthEventKey(saleorApiUrl), handleAuthChange);
+      window.removeEventListener(getStorageAuthEventKey(keyPrefix), handleAuthChange);
     };
   }, []);
 };

package/dist/index.js

@@ -113,6 +113,10 @@ var getTokenExpiry = (token) => {
   const parsedTokenData = decodeToken(token);
   return parsedTokenData.exp * MILLI_MULTIPLYER || 0;
 };
+var getTokenIss = (token) => {
+  const parsedTokenData = decodeToken(token);
+  return parsedTokenData.iss;
+};
 var isExpiredToken = (token, tokenGracePeriod) => {
   return getTokenExpiry(token) - tokenGracePeriod <= Date.now();
 };
@@ -315,14 +319,39 @@ var SaleorAuthClient = class {
   cleanup = () => {
     this.refreshTokenStorage?.cleanup();
   };
-  runAuthorizedRequest = (input, init) => {
+  runAuthorizedRequest = (input, init, additionalParams) => {
     const token = this.accessTokenStorage.getAccessToken();
     if (!token) {
       return fetch(input, init);
     }
-    const headers = new Headers(init?.headers);
-    headers.set("Authorization", `Bearer ${token}`);
-    return fetch(input, { ...init, headers });
+    const headers = init?.headers || {};
+    const getURL = (input2) => {
+      if (typeof input2 === "string") {
+        return input2;
+      } else if ("url" in input2) {
+        return input2.url;
+      } else {
+        return input2.href;
+      }
+    };
+    const iss = getTokenIss(token);
+    const issuerAndDomainMatch = getURL(input) === iss;
+    const shouldAddAuthorizationHeader = issuerAndDomainMatch || additionalParams?.allowPassingTokenToThirdPartyDomains;
+    if (!issuerAndDomainMatch) {
+      if (shouldAddAuthorizationHeader) {
+        console.warn(
+          "Token's `iss` and request URL do not match but `allowPassingTokenToThirdPartyDomains` was specified."
+        );
+      } else {
+        console.warn(
+          "Token's `iss` and request URL do not match. Not adding `Authorization` header to the request."
+        );
+      }
+    }
+    return fetch(input, {
+      ...init,
+      headers: shouldAddAuthorizationHeader ? { ...headers, Authorization: `Bearer ${token}` } : headers
+    });
   };
   handleRequestWithTokenRefresh = async (input, requestInit, additionalParams) => {
     const refreshToken = this.refreshTokenStorage?.getRefreshToken();
@@ -334,37 +363,15 @@ var SaleorAuthClient = class {
     this.onAuthRefresh?.(true);
     if (this.tokenRefreshPromise) {
       const response = await this.tokenRefreshPromise;
-      const responseClone = response.clone();
-      const rawText = await response.clone().text();
-      console.log("[auth-sdk] Token refresh raw response:", JSON.stringify({
-        status: response.status,
-        statusText: response.statusText,
-        headers: Object.fromEntries(response.headers.entries()),
-        bodyLength: rawText.length,
-        body: rawText.slice(0, 500)
-      }));
-      let res;
-      try {
-        res = await responseClone.json();
-      } catch {
-        console.error("[auth-sdk] Token refresh response is not valid JSON, status:", response.status);
-        this.onAuthRefresh?.(false);
-        this.tokenRefreshPromise = null;
-        this.refreshTokenStorage?.clearAuthStorage();
-        return fetch(input, requestInit);
-      }
-      const graphqlErrors = res.errors;
-      const token = res.data?.tokenRefresh?.token;
-      const refreshErrors = res.data?.tokenRefresh?.errors;
+      const res = await response.clone().json();
+      const {
+        errors: graphqlErrors,
+        data: {
+          tokenRefresh: { errors, token }
+        }
+      } = res;
       this.onAuthRefresh?.(false);
-      if (refreshErrors?.length || graphqlErrors?.length || !token) {
-        console.warn("[auth-sdk] Token refresh failed:", JSON.stringify({
-          graphqlErrors: graphqlErrors ?? [],
-          refreshErrors: refreshErrors ?? [],
-          hasToken: Boolean(token),
-          httpStatus: response.status,
-          rawData: res.data ?? null
-        }));
+      if (errors?.length || graphqlErrors?.length || !token) {
         this.tokenRefreshPromise = null;
         this.refreshTokenStorage?.clearAuthStorage();
         return fetch(input, requestInit);
@@ -374,32 +381,10 @@ var SaleorAuthClient = class {
       this.tokenRefreshPromise = null;
       return this.runAuthorizedRequest(input, requestInit, additionalParams);
     }
-    const refreshHeaders = {
-      "Content-Type": "application/json"
-    };
-    if (requestInit?.headers) {
-      const origHeaders = new Headers(requestInit.headers);
-      for (const [key, value] of origHeaders.entries()) {
-        if (key !== "host" && key !== "content-type") {
-          refreshHeaders[key] = value;
-        }
-      }
-    }
-    const refreshBody = JSON.stringify({
-      query: TOKEN_REFRESH.toString(),
-      variables: { refreshToken }
-    });
-    console.log("[auth-sdk] Token refresh request:", JSON.stringify({
-      url: this.saleorApiUrl,
-      headers: refreshHeaders,
-      bodyLength: refreshBody.length,
-      bodyPreview: refreshBody.slice(0, 200)
-    }));
-    this.tokenRefreshPromise = fetch(this.saleorApiUrl, {
-      method: "POST",
-      headers: refreshHeaders,
-      body: refreshBody
-    });
+    this.tokenRefreshPromise = fetch(
+      this.saleorApiUrl,
+      getRequestData(TOKEN_REFRESH, { refreshToken }, { ...this.defaultRequestInit, ...requestInit })
+    );
     return this.fetchWithAuth(input, requestInit, additionalParams);
   };
   handleSignIn = async (response) => {

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import {
   SaleorAuthClient,
   createSaleorAuthClient
-} from "./chunk-X3MKOESH.mjs";
+} from "./chunk-3UGMWVQN.mjs";
 import "./chunk-B326YIV6.mjs";
 import "./chunk-263DHBMK.mjs";
 import {

package/dist/react/SaleorAuthProvider.mjs

@@ -2,7 +2,7 @@ import {
   SaleorAuthProvider
 } from "../chunk-74GMXOK4.mjs";
 import "../chunk-NAQNA6DI.mjs";
-import "../chunk-X3MKOESH.mjs";
+import "../chunk-3UGMWVQN.mjs";
 import "../chunk-B326YIV6.mjs";
 import "../chunk-263DHBMK.mjs";
 import "../chunk-UDLCOX6B.mjs";

package/dist/react/context.mjs

@@ -3,7 +3,7 @@ import {
   createSafeContext,
   useSaleorAuthContext
 } from "../chunk-NAQNA6DI.mjs";
-import "../chunk-X3MKOESH.mjs";
+import "../chunk-3UGMWVQN.mjs";
 import "../chunk-B326YIV6.mjs";
 import "../chunk-263DHBMK.mjs";
 import "../chunk-UDLCOX6B.mjs";

package/dist/react/index.js

@@ -177,9 +177,10 @@ var SaleorAuthProvider = ({ children, client }) => {
 
 // src/react/useAuthChange.ts
 var import_react2 = require("react");
-var useAuthChange = ({ saleorApiUrl, onSignedOut, onSignedIn }) => {
+var useAuthChange = ({ saleorApiUrl, storageKeyPrefix, onSignedOut, onSignedIn }) => {
+  const keyPrefix = storageKeyPrefix ?? saleorApiUrl;
   const handleAuthChange = (event) => {
-    const isCustomAuthEvent = event?.type === getStorageAuthEventKey(saleorApiUrl);
+    const isCustomAuthEvent = event?.type === getStorageAuthEventKey(keyPrefix);
     if (!isCustomAuthEvent) {
       return;
     }
@@ -194,9 +195,9 @@ var useAuthChange = ({ saleorApiUrl, onSignedOut, onSignedIn }) => {
     if (typeof window === "undefined") {
       return;
     }
-    window.addEventListener(getStorageAuthEventKey(saleorApiUrl), handleAuthChange);
+    window.addEventListener(getStorageAuthEventKey(keyPrefix), handleAuthChange);
     return () => {
-      window.removeEventListener(getStorageAuthEventKey(saleorApiUrl), handleAuthChange);
+      window.removeEventListener(getStorageAuthEventKey(keyPrefix), handleAuthChange);
     };
   }, []);
 };

package/dist/react/index.mjs

@@ -8,11 +8,11 @@ import {
 } from "../chunk-NAQNA6DI.mjs";
 import {
   useAuthChange
-} from "../chunk-WJVMUY3P.mjs";
+} from "../chunk-FY2QDW7J.mjs";
 import {
   useSaleorExternalAuth
 } from "../chunk-Q3UFWDCC.mjs";
-import "../chunk-X3MKOESH.mjs";
+import "../chunk-3UGMWVQN.mjs";
 import "../chunk-B326YIV6.mjs";
 import "../chunk-263DHBMK.mjs";
 import "../chunk-T35JF4IS.mjs";

package/dist/react/useAuthChange.d.mts

@@ -1,8 +1,9 @@
 interface UseAuthChangeProps {
     saleorApiUrl: string;
+    storageKeyPrefix?: string;
     onSignedIn?: () => void;
     onSignedOut?: () => void;
 }
-declare const useAuthChange: ({ saleorApiUrl, onSignedOut, onSignedIn }: UseAuthChangeProps) => void;
+declare const useAuthChange: ({ saleorApiUrl, storageKeyPrefix, onSignedOut, onSignedIn }: UseAuthChangeProps) => void;
 
 export { useAuthChange };

package/dist/react/useAuthChange.d.ts

@@ -1,8 +1,9 @@
 interface UseAuthChangeProps {
     saleorApiUrl: string;
+    storageKeyPrefix?: string;
     onSignedIn?: () => void;
     onSignedOut?: () => void;
 }
-declare const useAuthChange: ({ saleorApiUrl, onSignedOut, onSignedIn }: UseAuthChangeProps) => void;
+declare const useAuthChange: ({ saleorApiUrl, storageKeyPrefix, onSignedOut, onSignedIn }: UseAuthChangeProps) => void;
 
 export { useAuthChange };

package/dist/react/useAuthChange.js

@@ -29,9 +29,10 @@ var import_react = require("react");
 var getStorageAuthEventKey = (prefix) => [prefix, "saleor_storage_auth_change"].filter(Boolean).join("+");
 
 // src/react/useAuthChange.ts
-var useAuthChange = ({ saleorApiUrl, onSignedOut, onSignedIn }) => {
+var useAuthChange = ({ saleorApiUrl, storageKeyPrefix, onSignedOut, onSignedIn }) => {
+  const keyPrefix = storageKeyPrefix ?? saleorApiUrl;
   const handleAuthChange = (event) => {
-    const isCustomAuthEvent = event?.type === getStorageAuthEventKey(saleorApiUrl);
+    const isCustomAuthEvent = event?.type === getStorageAuthEventKey(keyPrefix);
     if (!isCustomAuthEvent) {
       return;
     }
@@ -46,9 +47,9 @@ var useAuthChange = ({ saleorApiUrl, onSignedOut, onSignedIn }) => {
     if (typeof window === "undefined") {
       return;
     }
-    window.addEventListener(getStorageAuthEventKey(saleorApiUrl), handleAuthChange);
+    window.addEventListener(getStorageAuthEventKey(keyPrefix), handleAuthChange);
     return () => {
-      window.removeEventListener(getStorageAuthEventKey(saleorApiUrl), handleAuthChange);
+      window.removeEventListener(getStorageAuthEventKey(keyPrefix), handleAuthChange);
     };
   }, []);
 };

package/dist/react/useAuthChange.mjs

@@ -1,6 +1,6 @@
 import {
   useAuthChange
-} from "../chunk-WJVMUY3P.mjs";
+} from "../chunk-FY2QDW7J.mjs";
 import "../chunk-263DHBMK.mjs";
 export {
   useAuthChange

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopsbuilder/auth-sdk",
-  "version": "1.2.8",
+  "version": "1.2.10",
   "description": "Auth SDK for Saleor",
   "sideEffects": false,
   "files": ["dist/", "README.md"],