@spidy092/auth-client 2.1.6 → 2.1.7

package/api.js

@@ -12,7 +12,7 @@ api.interceptors.request.use((config) => {
   const runtimeConfig = getConfig();
 
   if (!config.baseURL) {
-    
+
     config.baseURL = runtimeConfig?.authBaseUrl || 'http://auth.local.test:4000/auth';
   }
 

package/core.js

@@ -116,7 +116,7 @@ async function routerLogout(clientKey, authBaseUrl, accountUiUrl, token) {
 
   try {
     const response = await fetch(`${authBaseUrl}/logout/${clientKey}`, {
-      method: 'GET',
+      method: 'POST',
       credentials: 'include',
       headers: {
         'Authorization': token ? `Bearer ${token}` : '',
@@ -414,8 +414,23 @@ export function startProactiveRefresh() {
       startProactiveRefresh();
     } catch (err) {
       console.error('❌ Proactive refresh failed:', err);
-      // Try again in 30 seconds if refresh fails
-      proactiveRefreshTimer = setTimeout(() => startProactiveRefresh(), 30000);
+
+      // Check if this is a permanent failure (token revoked, invalid, etc.)
+      const errorMessage = err.message?.toLowerCase() || '';
+      const isPermanentFailure =
+        errorMessage.includes('401') ||
+        errorMessage.includes('revoked') ||
+        errorMessage.includes('invalid') ||
+        errorMessage.includes('expired') ||
+        errorMessage.includes('unauthorized');
+
+      if (isPermanentFailure) {
+        console.log('🚨 Token permanently invalid, triggering session expiry');
+        notifySessionInvalid('refresh_token_revoked');
+      } else {
+        // Temporary failure (network issue), try again in 30 seconds
+        proactiveRefreshTimer = setTimeout(() => startProactiveRefresh(), 30000);
+      }
     }
   }, refreshIn);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spidy092/auth-client",
-  "version": "2.1.6",
+  "version": "2.1.7",
   "description": "Scalable frontend auth SDK for centralized login using Keycloak + Auth Service.",
   "main": "index.js",
   "module": "index.js",