@spidy092/auth-client 3.1.4 → 3.1.6

package/dist/index.js

@@ -1,8 +1,10 @@
 // token.js
 import { jwtDecode } from "jwt-decode";
 var accessToken = null;
+var idToken = null;
 var listeners = /* @__PURE__ */ new Set();
 var REFRESH_COOKIE = "account_refresh_token";
+var ID_TOKEN_KEY = "auth_id_token";
 var COOKIE_MAX_AGE = 7 * 24 * 60 * 60;
 function secureAttribute() {
   var _a;
@@ -81,12 +83,14 @@ function getToken() {
 function clearToken() {
   if (!accessToken) {
     writeAccessToken(null);
+    clearIdToken();
     clearRefreshToken();
     return;
   }
   const previousToken = accessToken;
   accessToken = null;
   writeAccessToken(null);
+  clearIdToken();
   clearRefreshToken();
   listeners.forEach((listener) => {
     try {
@@ -96,6 +100,30 @@ function clearToken() {
     }
   });
 }
+function setIdToken(token) {
+  idToken = token || null;
+  try {
+    if (idToken) sessionStorage.setItem(ID_TOKEN_KEY, idToken);
+    else sessionStorage.removeItem(ID_TOKEN_KEY);
+  } catch {
+  }
+}
+function getIdToken() {
+  if (idToken) return idToken;
+  try {
+    idToken = sessionStorage.getItem(ID_TOKEN_KEY) || null;
+  } catch {
+    idToken = null;
+  }
+  return idToken;
+}
+function clearIdToken() {
+  idToken = null;
+  try {
+    sessionStorage.removeItem(ID_TOKEN_KEY);
+  } catch {
+  }
+}
 var REFRESH_TOKEN_KEY = "auth_refresh_token";
 var _persistRefreshToken = false;
 function enableRefreshTokenPersistence(enabled) {
@@ -441,6 +469,7 @@ async function logout(options = {}) {
   const { clientKey, authBaseUrl, accountUiUrl } = getConfig();
   const scope = options.scope === "client" ? "client" : "sso";
   const token = getToken();
+  const idToken2 = getIdToken();
   const refreshToken2 = getRefreshToken();
   console.log("\u{1F6AA} Smart Logout initiated", {
     mode: isRouterMode() ? "ROUTER" : "CLIENT",
@@ -449,6 +478,7 @@ async function logout(options = {}) {
   });
   emitAuthDiagnostic("LOGOUT_INITIATED", "PENDING", "NONE", { clientKey });
   clearToken();
+  clearIdToken();
   clearRefreshToken();
   sessionStorage.removeItem("originalApp");
   sessionStorage.removeItem("returnUrl");
@@ -461,7 +491,7 @@ async function logout(options = {}) {
         "Authorization": token ? `Bearer ${token}` : "",
         "Content-Type": "application/json"
       },
-      body: JSON.stringify({ refreshToken: refreshToken2, scope })
+      body: JSON.stringify({ refreshToken: refreshToken2, idToken: idToken2, scope })
     });
     if (!response.ok) {
       throw new Error(`Logout failed: ${response.status}`);
@@ -495,9 +525,11 @@ async function logout(options = {}) {
 function handleCallback() {
   const params = new URLSearchParams(window.location.search);
   const accessToken2 = params.get("access_token");
+  const idToken2 = params.get("id_token");
   const error = params.get("error");
   console.log("\u{1F504} Callback handling:", {
     hasAccessToken: !!accessToken2,
+    hasIdToken: !!idToken2,
     error
   });
   if (callbackProcessed) {
@@ -525,6 +557,7 @@ function handleCallback() {
   }
   if (accessToken2) {
     setToken(accessToken2);
+    if (idToken2) setIdToken(idToken2);
     const refreshTokenInUrl = params.get("refresh_token");
     if (refreshTokenInUrl) {
       emitAuthDiagnostic("CALLBACK_REFRESH_TOKEN_IGNORED", "WARNING", "REFRESH_TOKEN_IN_URL", {
@@ -533,6 +566,7 @@ function handleCallback() {
     }
     const url = new URL(window.location);
     url.searchParams.delete("access_token");
+    url.searchParams.delete("id_token");
     url.searchParams.delete("refresh_token");
     url.searchParams.delete("state");
     url.searchParams.delete("error");
@@ -1217,6 +1251,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
   const onSessionExpiredRef = useRef(onSessionExpired);
   const recoveryInFlightRef = useRef(null);
   const profileRecoveryTokensRef = useRef(/* @__PURE__ */ new Set());
+  const profileLoadedRef = useRef(false);
   useEffect(() => {
     onSessionExpiredRef.current = onSessionExpired;
   }, [onSessionExpired]);
@@ -1226,8 +1261,9 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
       setTokenState(nextToken);
       if (nextToken) {
         setSessionValid(true);
-        setLoading(true);
+        if (!profileLoadedRef.current) setLoading(true);
       } else {
+        profileLoadedRef.current = false;
         setSessionValid(false);
         setUser(null);
         setLoading(false);
@@ -1239,6 +1275,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
     clearToken();
     setTokenState(null);
     setUser(null);
+    profileLoadedRef.current = false;
     setSessionValid(false);
     setLoading(false);
   };
@@ -1254,7 +1291,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
           if (recoveredToken) {
             setTokenState(recoveredToken);
             setSessionValid(true);
-            setLoading(true);
+            if (!profileLoadedRef.current) setLoading(true);
             return true;
           }
         } catch (error) {
@@ -1331,6 +1368,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
         const userData = (responseBody == null ? void 0 : responseBody.data) ?? responseBody;
         console.log("\u2705 Profile fetched successfully:", userData.email);
         setUser(userData);
+        profileLoadedRef.current = true;
         setSessionValid(true);
         setLoading(false);
       } catch (error) {
@@ -1365,6 +1403,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
               if (cancelled) return;
               const userData = (responseBody == null ? void 0 : responseBody.data) ?? responseBody;
               setUser(userData);
+              profileLoadedRef.current = true;
               setSessionValid(true);
               setLoading(false);
               return;
@@ -1411,7 +1450,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
       setToken(newToken);
       setTokenState(newToken);
       setSessionValid(true);
-      if (newToken) setLoading(true);
+      if (newToken && !profileLoadedRef.current) setLoading(true);
     },
     clearToken: () => {
       stopSessionSecurity();
@@ -1419,6 +1458,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
       clearToken();
       setTokenState(null);
       setUser(null);
+      profileLoadedRef.current = false;
     }
   };
   return /* @__PURE__ */ React.createElement(AuthContext.Provider, { value }, children);
@@ -1596,6 +1636,9 @@ var auth = {
   getToken,
   setToken,
   clearToken,
+  setIdToken,
+  getIdToken,
+  clearIdToken,
   setRefreshToken,
   // ✅ Refresh token for HTTP dev
   getRefreshToken,