@splitsoftware/splitio-commons 3.1.1-rc.4 → 3.1.1-rc.6

package/CHANGES.txt

@@ -1,5 +1,6 @@
-3.2.0 (August 28, 2026)
+3.2.0 (September 18, 2026)
  - Added support for AI configs.
+ - Updated submitters to allow starting and executing them when the Configs SDK is ready.
  - Removed Configs SDK-related types and modules and moved them to the Configs SDK repository.
 
 3.1.0 (July 23, 2026)

package/cjs/presets/serverSide.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.serverSideModules = void 0;
-var serviceApi_1 = require("../services/serviceApi");
+var splitApi_1 = require("../services/splitApi");
 var syncManagerOnline_1 = require("../sync/syncManagerOnline");
 var pushManager_1 = require("../sync/streaming/pushManager");
 var pollingManagerSS_1 = require("../sync/polling/pollingManagerSS");
@@ -12,7 +12,7 @@ var impressionObserverSS_1 = require("../trackers/impressionObserver/impressionO
 var syncManagerOnlineSSFactory = (0, syncManagerOnline_1.syncManagerOnlineFactory)((0, pollingManagerSS_1.pollingManagerSSFactory)(), pushManager_1.pushManagerFactory);
 exports.serverSideModules = {
     storageFactory: InMemoryStorage_1.InMemoryStorageFactory,
-    serviceApiFactory: serviceApi_1.serviceApiFactory,
+    serviceApiFactory: splitApi_1.splitApiFactory,
     syncManagerFactory: syncManagerOnlineSSFactory,
     sdkManagerFactory: sdkManager_1.sdkManagerFactory,
     sdkClientMethodFactory: sdkClientMethod_1.sdkClientMethodFactory,

package/cjs/services/authProvider.js

@@ -15,17 +15,16 @@ function isExpired(credential) {
  */
 function authProviderFactory(settings, splitHttpClient, telemetryTracker) {
     var urls = settings.urls, log = settings.log;
-    function fetchAuth() {
+    var fetchAuth = (0, AuthClient_1.fetchAuthFactory)(function () {
         var url = "".concat(urls.auth, "/api/v3/auth?capabilities=config,aiconfig");
         return splitHttpClient(url, undefined, telemetryTracker.trackHttp(constants_2.TOKEN), false, true);
-    }
-    var authenticate = (0, AuthClient_1.authenticateFactory)(fetchAuth);
+    });
     var backoff = new Backoff_1.Backoff(fetchCredential);
     var cachedCredential;
     var inFlightPromise;
     var stopped = false;
     function fetchCredential() {
-        return authenticate().then(function (credential) {
+        return fetchAuth().then(function (credential) {
             log.info(constants_1.LOG_PREFIX_SYNC_AUTH + 'credential fetched successfully');
             cachedCredential = credential;
             inFlightPromise = undefined;

package/cjs/services/secureSplitHttpClient.js

@@ -2,19 +2,14 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.secureSplitHttpClientFactory = void 0;
 var tslib_1 = require("tslib");
-var splitHttpClient_1 = require("./splitHttpClient");
-var authProvider_1 = require("./authProvider");
 /**
  * Factory of Secure HTTP client, which authenticates requests using a JWT token.
  * On 401 responses, invalidates the cached credential and retries once with a fresh token.
  *
- * @param settings - SDK settings
- * @param platform - object containing environment-specific dependencies
- * @param fetchAuth - function to fetch auth credentials from the /v2/auth endpoint
+ * @param splitHttpClient - `splitHttpClientFactory` to use for making requests
+ * @param authProvider - `authProviderFactory` to use for authentication
  */
-function secureSplitHttpClientFactory(settings, platform, telemetryTracker) {
-    var splitHttpClient = (0, splitHttpClient_1.splitHttpClientFactory)(settings, platform);
-    var authProvider = (0, authProvider_1.authProviderFactory)(settings, splitHttpClient, telemetryTracker);
+function secureSplitHttpClientFactory(splitHttpClient, authProvider) {
     function makeRequest(url, options, latencyTracker, logErrorsAsInfo, token) {
         return splitHttpClient(url, tslib_1.__assign(tslib_1.__assign({}, options), { headers: tslib_1.__assign(tslib_1.__assign({}, options === null || options === void 0 ? void 0 : options.headers), { Authorization: "Bearer ".concat(token) }) }), latencyTracker, logErrorsAsInfo, true);
     }

package/cjs/services/serviceApi.js

@@ -5,25 +5,36 @@ var splitHttpClient_1 = require("./splitHttpClient");
 var objectAssign_1 = require("../utils/lang/objectAssign");
 var constants_1 = require("../utils/constants");
 var constants_2 = require("../logger/constants");
+var authProvider_1 = require("./authProvider");
+var secureSplitHttpClient_1 = require("./secureSplitHttpClient");
 var noCacheHeaderOptions = { headers: { 'Cache-Control': 'no-cache' } };
-function userKeyToQueryParam(userKey) {
-    return 'users=' + encodeURIComponent(userKey); // no need to check availability of `encodeURIComponent`, since it is a global highly supported.
-}
 /**
  * Factory of ServiceApi objects, which group the collection of HTTP endpoints used by the SDKs
  *
  * @param settings - validated settings object
  * @param platform - object containing environment-specific dependencies
  * @param telemetryTracker - telemetry tracker
- * @param secureSplitHttpClientFactory - factory of SecureSplitHttpClient objects
  */
-function serviceApiFactory(settings, platform, telemetryTracker, secureSplitHttpClientFactory) {
+function serviceApiFactory(settings, platform, telemetryTracker) {
     var urls = settings.urls;
     var filterQueryString = settings.sync.__splitFiltersValidation && settings.sync.__splitFiltersValidation.queryString;
     var SplitSDKImpressionsMode = settings.sync.impressionsMode;
     var splitHttpClient = (0, splitHttpClient_1.splitHttpClientFactory)(settings, platform);
-    var secureSplitHttpClient = secureSplitHttpClientFactory(settings, platform, telemetryTracker);
+    // Shared authProvider so that the SSE authentication (via `fetchAuth`,
+    // used by `pushManager`) and every authenticated HTTP request to the Configs
+    // API reuse the same cached credential instead of each fetching their own.
+    var authProvider = (0, authProvider_1.authProviderFactory)(settings, splitHttpClient, telemetryTracker);
+    var secureSplitHttpClient = (0, secureSplitHttpClient_1.secureSplitHttpClientFactory)(splitHttpClient, authProvider);
+    var initialAuth = true;
     return {
+        fetchAuth: function () {
+            // Guard condition to avoid invalidating the cached credential on the first pushManager authentication
+            if (initialAuth)
+                initialAuth = false;
+            else
+                authProvider.invalidate();
+            return authProvider.credential();
+        },
         // @TODO throw errors if health check requests fail, to log them in the Synchronizer
         getSdkAPIHealthCheck: function () {
             var url = "".concat(urls.sdk, "/api/version");
@@ -33,15 +44,6 @@ function serviceApiFactory(settings, platform, telemetryTracker, secureSplitHttp
             var url = "".concat(urls.events, "/api/version");
             return splitHttpClient(url).then(function () { return true; }).catch(function () { return false; });
         },
-        fetchAuth: function (userMatchingKeys) {
-            var url = "".concat(urls.auth, "/api/v2/auth?s=").concat(settings.sync.flagSpecVersion);
-            if (userMatchingKeys) { // `userMatchingKeys` is undefined in server-side
-                var queryParams = userMatchingKeys.map(userKeyToQueryParam).join('&');
-                if (queryParams)
-                    url += '&' + queryParams;
-            }
-            return splitHttpClient(url, undefined, telemetryTracker.trackHttp(constants_1.TOKEN));
-        },
         fetchSplitChanges: function (since, noCache, till, rbSince) {
             var url = "".concat(urls.sdk, "/api/splitChanges?s=").concat(settings.sync.flagSpecVersion, "&since=").concat(since).concat(rbSince ? '&rbSince=' + rbSince : '').concat(filterQueryString || '').concat(till ? '&till=' + till : '');
             return splitHttpClient(url, noCache ? noCacheHeaderOptions : undefined, telemetryTracker.trackHttp(constants_1.SPLITS))

package/cjs/services/splitApi.js

@@ -5,6 +5,7 @@ var splitHttpClient_1 = require("./splitHttpClient");
 var objectAssign_1 = require("../utils/lang/objectAssign");
 var constants_1 = require("../utils/constants");
 var constants_2 = require("../logger/constants");
+var AuthClient_1 = require("../sync/streaming/AuthClient");
 var noCacheHeaderOptions = { headers: { 'Cache-Control': 'no-cache' } };
 function userKeyToQueryParam(userKey) {
     return 'users=' + encodeURIComponent(userKey); // no need to check availability of `encodeURIComponent`, since it is a global highly supported.
@@ -23,6 +24,15 @@ function splitApiFactory(settings, platform, telemetryTracker) {
     var SplitSDKImpressionsMode = settings.sync.impressionsMode;
     var splitHttpClient = (0, splitHttpClient_1.splitHttpClientFactory)(settings, platform);
     return {
+        fetchAuth: (0, AuthClient_1.fetchAuthFactory)(function (userMatchingKeys) {
+            var url = "".concat(urls.auth, "/v2/auth?s=").concat(settings.sync.flagSpecVersion);
+            if (userMatchingKeys) { // `userMatchingKeys` is undefined in server-side
+                var queryParams = userMatchingKeys.map(userKeyToQueryParam).join('&');
+                if (queryParams)
+                    url += '&' + queryParams;
+            }
+            return splitHttpClient(url, undefined, telemetryTracker.trackHttp(constants_1.TOKEN));
+        }),
         // @TODO throw errors if health check requests fail, to log them in the Synchronizer
         getSdkAPIHealthCheck: function () {
             var url = "".concat(urls.sdk, "/version");
@@ -32,15 +42,6 @@ function splitApiFactory(settings, platform, telemetryTracker) {
             var url = "".concat(urls.events, "/version");
             return splitHttpClient(url).then(function () { return true; }).catch(function () { return false; });
         },
-        fetchAuth: function (userMatchingKeys) {
-            var url = "".concat(urls.auth, "/v2/auth?s=").concat(settings.sync.flagSpecVersion);
-            if (userMatchingKeys) { // `userMatchingKeys` is undefined in server-side
-                var queryParams = userMatchingKeys.map(userKeyToQueryParam).join('&');
-                if (queryParams)
-                    url += '&' + queryParams;
-            }
-            return splitHttpClient(url, undefined, telemetryTracker.trackHttp(constants_1.TOKEN));
-        },
         fetchSplitChanges: function (since, noCache, till, rbSince) {
             var url = "".concat(urls.sdk, "/splitChanges?s=").concat(settings.sync.flagSpecVersion, "&since=").concat(since).concat(rbSince ? '&rbSince=' + rbSince : '').concat(filterQueryString || '').concat(till ? '&till=' + till : '');
             return splitHttpClient(url, noCache ? noCacheHeaderOptions : undefined, telemetryTracker.trackHttp(constants_1.SPLITS))

package/cjs/sync/polling/updaters/definitionChangesUpdater.js

@@ -125,14 +125,14 @@ function definitionChangesUpdaterFactory(log, definitionChangesFetcher, storage,
             var since = sinces[0], rbSince = sinces[1];
             log.debug(constants_2.SYNC_FETCH, [definitionChangesFetcher.type, since, rbSince]);
             return Promise.resolve(instantUpdate ?
-                instantUpdate.type === constants_4.SPLIT_UPDATE ?
+                instantUpdate.type === constants_4.RB_SEGMENT_UPDATE ?
+                    { rbs: convertInstantUpdateToDefinitionChanges(instantUpdate) } :
                     // IFFU edge case: a change to definition that adds an IN_RULE_BASED_SEGMENT matcher that is not present yet
                     Promise.resolve(rbSegments.contains(parseSegments(instantUpdate.payload, constants_3.IN_RULE_BASED_SEGMENT))).then(function (contains) {
                         return contains ?
                             { d: convertInstantUpdateToDefinitionChanges(instantUpdate) } :
                             definitionChangesFetcher(since, noCache, till, rbSince, _promiseDecorator);
                     }) :
-                    { rbs: convertInstantUpdateToDefinitionChanges(instantUpdate) } :
                 definitionChangesFetcher(since, noCache, till, rbSince, _promiseDecorator))
                 .then(function (definitionChanges) {
                 var usedSegments = new Set();

package/cjs/sync/streaming/AuthClient/index.js

@@ -1,16 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hashUserKey = exports.authenticateFactory = void 0;
+exports.fetchAuthFactory = void 0;
 var objectAssign_1 = require("../../../utils/lang/objectAssign");
-var base64_1 = require("../../../utils/base64");
 var jwt_1 = require("../../../utils/jwt");
-var murmur3_1 = require("../../../utils/murmur3/murmur3");
 /**
  * Factory of authentication function.
  *
- * @param fetchAuth - `ServiceApi.fetchAuth` endpoint
+ * @param fetchAuth - /auth endpoint
  */
-function authenticateFactory(fetchAuth) {
+function fetchAuthFactory(fetchAuth) {
     /**
      * Run authentication requests to Auth Server, and returns a promise that resolves with the decoded JTW token.
      * @param userKeys - set of user Keys to track membership updates. It is undefined for server-side API.
@@ -24,20 +22,21 @@ function authenticateFactory(fetchAuth) {
                 if (typeof decodedToken.iat !== 'number' || typeof decodedToken.exp !== 'number')
                     throw new Error('token properties "issuedAt" (iat) or "expiration" (exp) are missing or invalid');
                 var channels = JSON.parse(decodedToken['x-ably-capability']);
-                return (0, objectAssign_1.objectAssign)({
+                var credential = (0, objectAssign_1.objectAssign)({
                     decodedToken: decodedToken,
                     channels: channels
                 }, json);
+                // The `/api/v3/auth` endpoint nests the streaming settings under `config.streaming`. Normalize
+                // them into the flat `pushEnabled`/`connDelay` properties used by the PushManager.
+                var streaming = credential.config && credential.config.streaming;
+                if (streaming) {
+                    credential.pushEnabled = streaming.enabled;
+                    credential.connDelay = streaming.delay;
+                }
+                return credential;
             }
             return json;
         });
     };
 }
-exports.authenticateFactory = authenticateFactory;
-/**
- * Returns the hash of a given user key
- */
-function hashUserKey(userKey) {
-    return (0, base64_1.encodeToBase64)((0, murmur3_1.hash)(userKey, 0).toString());
-}
-exports.hashUserKey = hashUserKey;
+exports.fetchAuthFactory = fetchAuthFactory;

package/cjs/sync/streaming/SSEHandler/index.js

@@ -74,6 +74,7 @@ function SSEHandlerFactory(log, pushEmitter, telemetryTracker) {
             switch (parsedData.type) {
                 /* update events */
                 case constants_1.SPLIT_UPDATE:
+                case constants_1.CONFIG_UPDATE:
                 case constants_1.SEGMENT_UPDATE:
                 case constants_1.MEMBERSHIPS_MS_UPDATE:
                 case constants_1.MEMBERSHIPS_LS_UPDATE:

package/cjs/sync/streaming/constants.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ControlType = exports.OCCUPANCY = exports.CONTROL = exports.RB_SEGMENT_UPDATE = exports.SPLIT_UPDATE = exports.SPLIT_KILL = exports.SEGMENT_UPDATE = exports.MEMBERSHIPS_LS_UPDATE = exports.MEMBERSHIPS_MS_UPDATE = exports.PUSH_SUBSYSTEM_DOWN = exports.PUSH_SUBSYSTEM_UP = exports.PUSH_RETRYABLE_ERROR = exports.PUSH_NON_RETRYABLE_ERROR = exports.SECONDS_BEFORE_EXPIRATION = void 0;
+exports.ControlType = exports.OCCUPANCY = exports.CONTROL = exports.RB_SEGMENT_UPDATE = exports.CONFIG_UPDATE = exports.SPLIT_UPDATE = exports.SPLIT_KILL = exports.SEGMENT_UPDATE = exports.MEMBERSHIPS_LS_UPDATE = exports.MEMBERSHIPS_MS_UPDATE = exports.PUSH_SUBSYSTEM_DOWN = exports.PUSH_SUBSYSTEM_UP = exports.PUSH_RETRYABLE_ERROR = exports.PUSH_NON_RETRYABLE_ERROR = exports.SECONDS_BEFORE_EXPIRATION = void 0;
 // time for refresh token
 exports.SECONDS_BEFORE_EXPIRATION = 600;
 // Internal SDK events, subscribed by SyncManager and PushManager
@@ -30,6 +30,7 @@ exports.MEMBERSHIPS_LS_UPDATE = 'MEMBERSHIPS_LS_UPDATE';
 exports.SEGMENT_UPDATE = 'SEGMENT_UPDATE';
 exports.SPLIT_KILL = 'SPLIT_KILL';
 exports.SPLIT_UPDATE = 'SPLIT_UPDATE';
+exports.CONFIG_UPDATE = 'CONFIG_UPDATE';
 exports.RB_SEGMENT_UPDATE = 'RB_SEGMENT_UPDATE';
 // Control-type push notifications, handled by NotificationKeeper
 exports.CONTROL = 'CONTROL';

package/cjs/sync/streaming/pushManager.js

@@ -7,7 +7,6 @@ var SSEHandler_1 = require("./SSEHandler");
 var MySegmentsUpdateWorker_1 = require("./UpdateWorkers/MySegmentsUpdateWorker");
 var SegmentsUpdateWorker_1 = require("./UpdateWorkers/SegmentsUpdateWorker");
 var DefinitionsUpdateWorker_1 = require("./UpdateWorkers/DefinitionsUpdateWorker");
-var AuthClient_1 = require("./AuthClient");
 var lang_1 = require("../../utils/lang");
 var SSEClient_1 = require("./SSEClient");
 var key_1 = require("../../utils/key");
@@ -37,7 +36,6 @@ function pushManagerFactory(params, pollingManager) {
         log.warn(constants_2.STREAMING_FALLBACK, [e]);
         return;
     }
-    var authenticate = (0, AuthClient_1.authenticateFactory)(serviceApi.fetchAuth);
     // init feedback loop
     var pushEmitter = new platform.EventEmitter();
     var sseHandler = (0, SSEHandler_1.SSEHandlerFactory)(log, pushEmitter, telemetryTracker);
@@ -47,8 +45,6 @@ function pushManagerFactory(params, pollingManager) {
     var segmentsUpdateWorker = userKey ? undefined : (0, SegmentsUpdateWorker_1.SegmentsUpdateWorker)(log, pollingManager.segmentsSyncTask, storage.segments);
     // For server-side we pass the segmentsSyncTask, used by DefinitionsUpdateWorker to fetch new segments
     var definitionsUpdateWorker = (0, DefinitionsUpdateWorker_1.DefinitionsUpdateWorker)(log, storage, pollingManager.definitionsSyncTask, readiness.definitions, telemetryTracker);
-    // [Only for client-side] map of hashes to user keys, to dispatch membership update events to the corresponding MySegmentsUpdateWorker
-    var userKeyHashes = {};
     // [Only for client-side] map of user keys to their corresponding hash64 and MySegmentsUpdateWorkers.
     // Hash64 is used to process membership update events and dispatch actions to the corresponding MySegmentsUpdateWorker.
     var clients = {};
@@ -93,7 +89,7 @@ function pushManagerFactory(params, pollingManager) {
         log.info(constants_2.STREAMING_CONNECTING);
         disconnected = false;
         var userKeys = userKey ? Object.keys(clients) : undefined;
-        authenticate(userKeys).then(function (authData) {
+        serviceApi.fetchAuth(userKeys).then(function (authData) {
             if (disconnected)
                 return;
             // 'pushEnabled: false' is handled as a PUSH_NON_RETRYABLE_ERROR instead of PUSH_SUBSYSTEM_DOWN, in order to
@@ -181,8 +177,11 @@ function pushManagerFactory(params, pollingManager) {
         connectPush();
     });
     /** Functions related to synchronization (Queues and Workers in the spec) */
+    // Some notification types are specific to the Feature flags or Configs SDKs. Their handlers are
+    // registered unconditionally, since the SDK only subscribes to the channels of its own entities.
     pushEmitter.on(constants_1.SPLIT_KILL, definitionsUpdateWorker.killDefinition);
     pushEmitter.on(constants_1.SPLIT_UPDATE, definitionsUpdateWorker.put);
+    pushEmitter.on(constants_1.CONFIG_UPDATE, definitionsUpdateWorker.put);
     pushEmitter.on(constants_1.RB_SEGMENT_UPDATE, definitionsUpdateWorker.put);
     function handleMySegmentsUpdate(parsedData) {
         switch (parsedData.u) {
@@ -285,9 +284,7 @@ function pushManagerFactory(params, pollingManager) {
         },
         // [Only for client-side]
         add: function (userKey, mySegmentsSyncTask) {
-            var hash = (0, AuthClient_1.hashUserKey)(userKey);
-            if (!userKeyHashes[hash]) {
-                userKeyHashes[hash] = userKey;
+            if (!clients[userKey]) {
                 clients[userKey] = {
                     hash64: (0, murmur3_64_1.hash64)(userKey),
                     worker: (0, MySegmentsUpdateWorker_1.MySegmentsUpdateWorker)(log, storage, mySegmentsSyncTask, telemetryTracker)
@@ -308,8 +305,6 @@ function pushManagerFactory(params, pollingManager) {
         },
         // [Only for client-side]
         remove: function (userKey) {
-            var hash = (0, AuthClient_1.hashUserKey)(userKey);
-            delete userKeyHashes[hash];
             delete clients[userKey];
         }
     });

package/cjs/sync/submitters/submitterManager.js

@@ -6,41 +6,64 @@ var impressionsSubmitter_1 = require("./impressionsSubmitter");
 var impressionCountsSubmitter_1 = require("./impressionCountsSubmitter");
 var telemetrySubmitter_1 = require("./telemetrySubmitter");
 var uniqueKeysSubmitter_1 = require("./uniqueKeysSubmitter");
-function submitterManagerFactory(params) {
-    var submitters = [
-        (0, impressionsSubmitter_1.impressionsSubmitterFactory)(params),
-        (0, eventsSubmitter_1.eventsSubmitterFactory)(params),
-        (0, impressionCountsSubmitter_1.impressionCountsSubmitterFactory)(params),
-        (0, uniqueKeysSubmitter_1.uniqueKeysSubmitterFactory)(params)
-    ];
-    var telemetrySubmitter = (0, telemetrySubmitter_1.telemetrySubmitterFactory)(params);
-    return {
-        // `onlyTelemetry` true if SDK is created with userConsent not GRANTED
-        start: function (onlyTelemetry) {
+var constants_1 = require("../../readiness/constants");
+/**
+ * Creates a submitter manager.
+ *
+ * @param startWhenReady - If true, the submitters will only start and execute the underlying submitters when the SDK is ready.
+ * `true` for Configs SDK, `false` for Flags SDKs.
+ */
+function submitterManagerFactory(startWhenReady) {
+    return function (params) {
+        var readiness = params.readiness;
+        var submitters = [
+            (0, impressionsSubmitter_1.impressionsSubmitterFactory)(params),
+            (0, eventsSubmitter_1.eventsSubmitterFactory)(params),
+            (0, impressionCountsSubmitter_1.impressionCountsSubmitterFactory)(params),
+            (0, uniqueKeysSubmitter_1.uniqueKeysSubmitterFactory)(params)
+        ];
+        var telemetrySubmitter = (0, telemetrySubmitter_1.telemetrySubmitterFactory)(params);
+        var isRunning = false;
+        function startSubmitters(onlyTelemetry) {
+            if (!isRunning)
+                return;
             if (!onlyTelemetry)
                 submitters.forEach(function (submitter) { return submitter.start(); });
             if (telemetrySubmitter)
                 telemetrySubmitter.start();
-        },
-        // `allExceptTelemetry` true if userConsent is changed to DECLINED
-        stop: function (allExceptTelemetry) {
-            submitters.forEach(function (submitter) { return submitter.stop(); });
-            if (!allExceptTelemetry && telemetrySubmitter)
-                telemetrySubmitter.stop();
-        },
-        isRunning: function () {
-            return submitters.some(function (submitter) { return submitter.isRunning(); });
-        },
-        // Flush data. Called with `onlyTelemetry` true if SDK is destroyed with userConsent not GRANTED
-        execute: function (onlyTelemetry) {
-            var promises = onlyTelemetry ? [] : submitters.map(function (submitter) { return submitter.execute(); });
-            if (telemetrySubmitter)
-                promises.push(telemetrySubmitter.execute());
-            return Promise.all(promises).then(function () { });
-        },
-        isExecuting: function () {
-            return submitters.some(function (submitter) { return submitter.isExecuting(); });
         }
+        return {
+            // `onlyTelemetry` true if SDK is created with userConsent not GRANTED
+            start: function (onlyTelemetry) {
+                isRunning = true;
+                if (!startWhenReady || readiness.isReady())
+                    startSubmitters(onlyTelemetry);
+                else
+                    readiness.gate.once(constants_1.SDK_READY, function () { return startSubmitters(onlyTelemetry); });
+            },
+            // `allExceptTelemetry` true if userConsent is changed to DECLINED
+            stop: function (allExceptTelemetry) {
+                isRunning = false;
+                submitters.forEach(function (submitter) { return submitter.stop(); });
+                if (!allExceptTelemetry && telemetrySubmitter)
+                    telemetrySubmitter.stop();
+            },
+            isRunning: function () {
+                return isRunning;
+            },
+            // Flush data. Called with `onlyTelemetry` true if SDK is destroyed with userConsent not GRANTED
+            execute: function (onlyTelemetry) {
+                if (startWhenReady && !readiness.isReady())
+                    return Promise.resolve();
+                var promises = onlyTelemetry ? [] : submitters.map(function (submitter) { return submitter.execute(); });
+                if (telemetrySubmitter)
+                    promises.push(telemetrySubmitter.execute());
+                return Promise.all(promises).then(function () { });
+            },
+            isExecuting: function () {
+                return submitters.some(function (submitter) { return submitter.isExecuting(); });
+            }
+        };
     };
 }
 exports.submitterManagerFactory = submitterManagerFactory;

package/cjs/sync/syncManagerOnline.js

@@ -15,8 +15,10 @@ var AbstractDefinitionsCacheSync_1 = require("../storages/AbstractDefinitionsCac
  * @param pollingManagerFactory - allows to specialize the SyncManager for server-side or client-side API by passing
  * `pollingManagerSSFactory` or `pollingManagerCSFactory` respectively.
  * @param pushManagerFactory - optional to build a SyncManager with or without streaming support
+ * @param submitterManagerFactory - specify the submitter manager factory to use
  */
-function syncManagerOnlineFactory(pollingManagerFactory, pushManagerFactory) {
+function syncManagerOnlineFactory(pollingManagerFactory, pushManagerFactory, _submitterManagerFactory) {
+    if (_submitterManagerFactory === void 0) { _submitterManagerFactory = (0, submitterManager_1.submitterManagerFactory)(); }
     /**
      * SyncManager factory for modular SDK
      */
@@ -30,7 +32,7 @@ function syncManagerOnlineFactory(pollingManagerFactory, pushManagerFactory) {
             undefined;
         /** Submitter Manager */
         // It is not injected as push and polling managers, because at the moment it is required
-        var submitterManager = (0, submitterManager_1.submitterManagerFactory)(params);
+        var submitterManager = _submitterManagerFactory(params);
         /** Sync Manager logic */
         function startPolling() {
             if (pollingManager.isRunning()) {

package/esm/presets/serverSide.js

@@ -1,4 +1,4 @@
-import { serviceApiFactory } from '../services/serviceApi';
+import { splitApiFactory } from '../services/splitApi';
 import { syncManagerOnlineFactory } from '../sync/syncManagerOnline';
 import { pushManagerFactory } from '../sync/streaming/pushManager';
 import { pollingManagerSSFactory } from '../sync/polling/pollingManagerSS';
@@ -9,7 +9,7 @@ import { impressionObserverSSFactory } from '../trackers/impressionObserver/impr
 var syncManagerOnlineSSFactory = syncManagerOnlineFactory(pollingManagerSSFactory(), pushManagerFactory);
 export var serverSideModules = {
     storageFactory: InMemoryStorageFactory,
-    serviceApiFactory: serviceApiFactory,
+    serviceApiFactory: splitApiFactory,
     syncManagerFactory: syncManagerOnlineSSFactory,
     sdkManagerFactory: sdkManagerFactory,
     sdkClientMethodFactory: sdkClientMethodFactory,

package/esm/services/authProvider.js

@@ -1,4 +1,4 @@
-import { authenticateFactory } from '../sync/streaming/AuthClient';
+import { fetchAuthFactory } from '../sync/streaming/AuthClient';
 import { Backoff } from '../utils/Backoff';
 import { LOG_PREFIX_SYNC_AUTH } from '../logger/constants';
 import { TOKEN } from '../utils/constants';
@@ -12,17 +12,16 @@ function isExpired(credential) {
  */
 export function authProviderFactory(settings, splitHttpClient, telemetryTracker) {
     var urls = settings.urls, log = settings.log;
-    function fetchAuth() {
+    var fetchAuth = fetchAuthFactory(function () {
         var url = "".concat(urls.auth, "/api/v3/auth?capabilities=config,aiconfig");
         return splitHttpClient(url, undefined, telemetryTracker.trackHttp(TOKEN), false, true);
-    }
-    var authenticate = authenticateFactory(fetchAuth);
+    });
     var backoff = new Backoff(fetchCredential);
     var cachedCredential;
     var inFlightPromise;
     var stopped = false;
     function fetchCredential() {
-        return authenticate().then(function (credential) {
+        return fetchAuth().then(function (credential) {
             log.info(LOG_PREFIX_SYNC_AUTH + 'credential fetched successfully');
             cachedCredential = credential;
             inFlightPromise = undefined;

package/esm/services/secureSplitHttpClient.js

@@ -1,17 +1,12 @@
 import { __assign } from "tslib";
-import { splitHttpClientFactory } from './splitHttpClient';
-import { authProviderFactory } from './authProvider';
 /**
  * Factory of Secure HTTP client, which authenticates requests using a JWT token.
  * On 401 responses, invalidates the cached credential and retries once with a fresh token.
  *
- * @param settings - SDK settings
- * @param platform - object containing environment-specific dependencies
- * @param fetchAuth - function to fetch auth credentials from the /v2/auth endpoint
+ * @param splitHttpClient - `splitHttpClientFactory` to use for making requests
+ * @param authProvider - `authProviderFactory` to use for authentication
  */
-export function secureSplitHttpClientFactory(settings, platform, telemetryTracker) {
-    var splitHttpClient = splitHttpClientFactory(settings, platform);
-    var authProvider = authProviderFactory(settings, splitHttpClient, telemetryTracker);
+export function secureSplitHttpClientFactory(splitHttpClient, authProvider) {
     function makeRequest(url, options, latencyTracker, logErrorsAsInfo, token) {
         return splitHttpClient(url, __assign(__assign({}, options), { headers: __assign(__assign({}, options === null || options === void 0 ? void 0 : options.headers), { Authorization: "Bearer ".concat(token) }) }), latencyTracker, logErrorsAsInfo, true);
     }

package/esm/services/serviceApi.js

@@ -1,26 +1,37 @@
 import { splitHttpClientFactory } from './splitHttpClient';
 import { objectAssign } from '../utils/lang/objectAssign';
-import { SPLITS, IMPRESSIONS, IMPRESSIONS_COUNT, EVENTS, TELEMETRY, TOKEN, SEGMENT, MEMBERSHIPS } from '../utils/constants';
+import { SPLITS, IMPRESSIONS, IMPRESSIONS_COUNT, EVENTS, TELEMETRY, SEGMENT, MEMBERSHIPS } from '../utils/constants';
 import { ERROR_TOO_MANY_SETS } from '../logger/constants';
+import { authProviderFactory } from './authProvider';
+import { secureSplitHttpClientFactory } from './secureSplitHttpClient';
 var noCacheHeaderOptions = { headers: { 'Cache-Control': 'no-cache' } };
-function userKeyToQueryParam(userKey) {
-    return 'users=' + encodeURIComponent(userKey); // no need to check availability of `encodeURIComponent`, since it is a global highly supported.
-}
 /**
  * Factory of ServiceApi objects, which group the collection of HTTP endpoints used by the SDKs
  *
  * @param settings - validated settings object
  * @param platform - object containing environment-specific dependencies
  * @param telemetryTracker - telemetry tracker
- * @param secureSplitHttpClientFactory - factory of SecureSplitHttpClient objects
  */
-export function serviceApiFactory(settings, platform, telemetryTracker, secureSplitHttpClientFactory) {
+export function serviceApiFactory(settings, platform, telemetryTracker) {
     var urls = settings.urls;
     var filterQueryString = settings.sync.__splitFiltersValidation && settings.sync.__splitFiltersValidation.queryString;
     var SplitSDKImpressionsMode = settings.sync.impressionsMode;
     var splitHttpClient = splitHttpClientFactory(settings, platform);
-    var secureSplitHttpClient = secureSplitHttpClientFactory(settings, platform, telemetryTracker);
+    // Shared authProvider so that the SSE authentication (via `fetchAuth`,
+    // used by `pushManager`) and every authenticated HTTP request to the Configs
+    // API reuse the same cached credential instead of each fetching their own.
+    var authProvider = authProviderFactory(settings, splitHttpClient, telemetryTracker);
+    var secureSplitHttpClient = secureSplitHttpClientFactory(splitHttpClient, authProvider);
+    var initialAuth = true;
     return {
+        fetchAuth: function () {
+            // Guard condition to avoid invalidating the cached credential on the first pushManager authentication
+            if (initialAuth)
+                initialAuth = false;
+            else
+                authProvider.invalidate();
+            return authProvider.credential();
+        },
         // @TODO throw errors if health check requests fail, to log them in the Synchronizer
         getSdkAPIHealthCheck: function () {
             var url = "".concat(urls.sdk, "/api/version");
@@ -30,15 +41,6 @@ export function serviceApiFactory(settings, platform, telemetryTracker, secureSp
             var url = "".concat(urls.events, "/api/version");
             return splitHttpClient(url).then(function () { return true; }).catch(function () { return false; });
         },
-        fetchAuth: function (userMatchingKeys) {
-            var url = "".concat(urls.auth, "/api/v2/auth?s=").concat(settings.sync.flagSpecVersion);
-            if (userMatchingKeys) { // `userMatchingKeys` is undefined in server-side
-                var queryParams = userMatchingKeys.map(userKeyToQueryParam).join('&');
-                if (queryParams)
-                    url += '&' + queryParams;
-            }
-            return splitHttpClient(url, undefined, telemetryTracker.trackHttp(TOKEN));
-        },
         fetchSplitChanges: function (since, noCache, till, rbSince) {
             var url = "".concat(urls.sdk, "/api/splitChanges?s=").concat(settings.sync.flagSpecVersion, "&since=").concat(since).concat(rbSince ? '&rbSince=' + rbSince : '').concat(filterQueryString || '').concat(till ? '&till=' + till : '');
             return splitHttpClient(url, noCache ? noCacheHeaderOptions : undefined, telemetryTracker.trackHttp(SPLITS))

package/esm/services/splitApi.js

@@ -2,6 +2,7 @@ import { splitHttpClientFactory } from './splitHttpClient';
 import { objectAssign } from '../utils/lang/objectAssign';
 import { SPLITS, IMPRESSIONS, IMPRESSIONS_COUNT, EVENTS, TELEMETRY, TOKEN, SEGMENT, MEMBERSHIPS } from '../utils/constants';
 import { ERROR_TOO_MANY_SETS } from '../logger/constants';
+import { fetchAuthFactory } from '../sync/streaming/AuthClient';
 var noCacheHeaderOptions = { headers: { 'Cache-Control': 'no-cache' } };
 function userKeyToQueryParam(userKey) {
     return 'users=' + encodeURIComponent(userKey); // no need to check availability of `encodeURIComponent`, since it is a global highly supported.
@@ -20,6 +21,15 @@ export function splitApiFactory(settings, platform, telemetryTracker) {
     var SplitSDKImpressionsMode = settings.sync.impressionsMode;
     var splitHttpClient = splitHttpClientFactory(settings, platform);
     return {
+        fetchAuth: fetchAuthFactory(function (userMatchingKeys) {
+            var url = "".concat(urls.auth, "/v2/auth?s=").concat(settings.sync.flagSpecVersion);
+            if (userMatchingKeys) { // `userMatchingKeys` is undefined in server-side
+                var queryParams = userMatchingKeys.map(userKeyToQueryParam).join('&');
+                if (queryParams)
+                    url += '&' + queryParams;
+            }
+            return splitHttpClient(url, undefined, telemetryTracker.trackHttp(TOKEN));
+        }),
         // @TODO throw errors if health check requests fail, to log them in the Synchronizer
         getSdkAPIHealthCheck: function () {
             var url = "".concat(urls.sdk, "/version");
@@ -29,15 +39,6 @@ export function splitApiFactory(settings, platform, telemetryTracker) {
             var url = "".concat(urls.events, "/version");
             return splitHttpClient(url).then(function () { return true; }).catch(function () { return false; });
         },
-        fetchAuth: function (userMatchingKeys) {
-            var url = "".concat(urls.auth, "/v2/auth?s=").concat(settings.sync.flagSpecVersion);
-            if (userMatchingKeys) { // `userMatchingKeys` is undefined in server-side
-                var queryParams = userMatchingKeys.map(userKeyToQueryParam).join('&');
-                if (queryParams)
-                    url += '&' + queryParams;
-            }
-            return splitHttpClient(url, undefined, telemetryTracker.trackHttp(TOKEN));
-        },
         fetchSplitChanges: function (since, noCache, till, rbSince) {
             var url = "".concat(urls.sdk, "/splitChanges?s=").concat(settings.sync.flagSpecVersion, "&since=").concat(since).concat(rbSince ? '&rbSince=' + rbSince : '').concat(filterQueryString || '').concat(till ? '&till=' + till : '');
             return splitHttpClient(url, noCache ? noCacheHeaderOptions : undefined, telemetryTracker.trackHttp(SPLITS))