@spidy092/auth-client 2.1.6 → 2.1.8

package/api.js

@@ -12,7 +12,7 @@ api.interceptors.request.use((config) => {
   const runtimeConfig = getConfig();
 
   if (!config.baseURL) {
-    
+
     config.baseURL = runtimeConfig?.authBaseUrl || 'http://auth.local.test:4000/auth';
   }
 

package/core.js

@@ -116,7 +116,7 @@ async function routerLogout(clientKey, authBaseUrl, accountUiUrl, token) {
 
   try {
     const response = await fetch(`${authBaseUrl}/logout/${clientKey}`, {
-      method: 'GET',
+      method: 'POST',
       credentials: 'include',
       headers: {
         'Authorization': token ? `Bearer ${token}` : '',
@@ -133,21 +133,18 @@ async function routerLogout(clientKey, authBaseUrl, accountUiUrl, token) {
     clearRefreshToken();
     clearToken();
 
-    await new Promise(resolve => setTimeout(resolve, 5000));
-
-    if (data.success && data.keycloakLogoutUrl) {
-      window.location.href = data.keycloakLogoutUrl;
-      return;
-    }
+    // Skip Keycloak confirmation page - redirect directly to login
+    // Backend has already revoked the session/tokens
+    console.log('🔄 Redirecting to login (skipping Keycloak confirmation)');
+    window.location.href = '/login';
 
   } catch (error) {
     console.warn('⚠️ Logout failed:', error);
     clearRefreshToken();
     clearToken();
+    // Still redirect to login even on error
+    window.location.href = '/login';
   }
-
-  await new Promise(resolve => setTimeout(resolve, 5000));
-  window.location.href = '/login';
 }
 
 function clientLogout(clientKey, accountUiUrl) {
@@ -414,8 +411,23 @@ export function startProactiveRefresh() {
       startProactiveRefresh();
     } catch (err) {
       console.error('❌ Proactive refresh failed:', err);
-      // Try again in 30 seconds if refresh fails
-      proactiveRefreshTimer = setTimeout(() => startProactiveRefresh(), 30000);
+
+      // Check if this is a permanent failure (token revoked, invalid, etc.)
+      const errorMessage = err.message?.toLowerCase() || '';
+      const isPermanentFailure =
+        errorMessage.includes('401') ||
+        errorMessage.includes('revoked') ||
+        errorMessage.includes('invalid') ||
+        errorMessage.includes('expired') ||
+        errorMessage.includes('unauthorized');
+
+      if (isPermanentFailure) {
+        console.log('🚨 Token permanently invalid, triggering session expiry');
+        notifySessionInvalid('refresh_token_revoked');
+      } else {
+        // Temporary failure (network issue), try again in 30 seconds
+        proactiveRefreshTimer = setTimeout(() => startProactiveRefresh(), 30000);
+      }
     }
   }, refreshIn);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spidy092/auth-client",
-  "version": "2.1.6",
+  "version": "2.1.8",
   "description": "Scalable frontend auth SDK for centralized login using Keycloak + Auth Service.",
   "main": "index.js",
   "module": "index.js",