@spidy092/auth-client 3.1.4 → 3.1.5

package/dist/index.js

@@ -1,8 +1,10 @@
 // token.js
 import { jwtDecode } from "jwt-decode";
 var accessToken = null;
+var idToken = null;
 var listeners = /* @__PURE__ */ new Set();
 var REFRESH_COOKIE = "account_refresh_token";
+var ID_TOKEN_KEY = "auth_id_token";
 var COOKIE_MAX_AGE = 7 * 24 * 60 * 60;
 function secureAttribute() {
   var _a;
@@ -81,12 +83,14 @@ function getToken() {
 function clearToken() {
   if (!accessToken) {
     writeAccessToken(null);
+    clearIdToken();
     clearRefreshToken();
     return;
   }
   const previousToken = accessToken;
   accessToken = null;
   writeAccessToken(null);
+  clearIdToken();
   clearRefreshToken();
   listeners.forEach((listener) => {
     try {
@@ -96,6 +100,30 @@ function clearToken() {
     }
   });
 }
+function setIdToken(token) {
+  idToken = token || null;
+  try {
+    if (idToken) sessionStorage.setItem(ID_TOKEN_KEY, idToken);
+    else sessionStorage.removeItem(ID_TOKEN_KEY);
+  } catch {
+  }
+}
+function getIdToken() {
+  if (idToken) return idToken;
+  try {
+    idToken = sessionStorage.getItem(ID_TOKEN_KEY) || null;
+  } catch {
+    idToken = null;
+  }
+  return idToken;
+}
+function clearIdToken() {
+  idToken = null;
+  try {
+    sessionStorage.removeItem(ID_TOKEN_KEY);
+  } catch {
+  }
+}
 var REFRESH_TOKEN_KEY = "auth_refresh_token";
 var _persistRefreshToken = false;
 function enableRefreshTokenPersistence(enabled) {
@@ -441,6 +469,7 @@ async function logout(options = {}) {
   const { clientKey, authBaseUrl, accountUiUrl } = getConfig();
   const scope = options.scope === "client" ? "client" : "sso";
   const token = getToken();
+  const idToken2 = getIdToken();
   const refreshToken2 = getRefreshToken();
   console.log("\u{1F6AA} Smart Logout initiated", {
     mode: isRouterMode() ? "ROUTER" : "CLIENT",
@@ -449,6 +478,7 @@ async function logout(options = {}) {
   });
   emitAuthDiagnostic("LOGOUT_INITIATED", "PENDING", "NONE", { clientKey });
   clearToken();
+  clearIdToken();
   clearRefreshToken();
   sessionStorage.removeItem("originalApp");
   sessionStorage.removeItem("returnUrl");
@@ -461,7 +491,7 @@ async function logout(options = {}) {
         "Authorization": token ? `Bearer ${token}` : "",
         "Content-Type": "application/json"
       },
-      body: JSON.stringify({ refreshToken: refreshToken2, scope })
+      body: JSON.stringify({ refreshToken: refreshToken2, idToken: idToken2, scope })
     });
     if (!response.ok) {
       throw new Error(`Logout failed: ${response.status}`);
@@ -495,9 +525,11 @@ async function logout(options = {}) {
 function handleCallback() {
   const params = new URLSearchParams(window.location.search);
   const accessToken2 = params.get("access_token");
+  const idToken2 = params.get("id_token");
   const error = params.get("error");
   console.log("\u{1F504} Callback handling:", {
     hasAccessToken: !!accessToken2,
+    hasIdToken: !!idToken2,
     error
   });
   if (callbackProcessed) {
@@ -525,6 +557,7 @@ function handleCallback() {
   }
   if (accessToken2) {
     setToken(accessToken2);
+    if (idToken2) setIdToken(idToken2);
     const refreshTokenInUrl = params.get("refresh_token");
     if (refreshTokenInUrl) {
       emitAuthDiagnostic("CALLBACK_REFRESH_TOKEN_IGNORED", "WARNING", "REFRESH_TOKEN_IN_URL", {
@@ -533,6 +566,7 @@ function handleCallback() {
     }
     const url = new URL(window.location);
     url.searchParams.delete("access_token");
+    url.searchParams.delete("id_token");
     url.searchParams.delete("refresh_token");
     url.searchParams.delete("state");
     url.searchParams.delete("error");
@@ -1596,6 +1630,9 @@ var auth = {
   getToken,
   setToken,
   clearToken,
+  setIdToken,
+  getIdToken,
+  clearIdToken,
   setRefreshToken,
   // ✅ Refresh token for HTTP dev
   getRefreshToken,