@stackframe/stack-shared 2.8.58 → 2.8.60

package/dist/interface/client-interface.js

@@ -139,21 +139,25 @@ var StackClientInterface = class {
     if (!("publishableClientKey" in this.options)) {
       throw new Error("Admin session token is currently not supported for fetching new access token. Did you try to log in on a StackApp initiated with the admin session?");
     }
+    const tokenEndpoint = this.getApiUrl() + "/auth/oauth/token";
     const as = {
       issuer: this.options.getBaseUrl(),
       algorithm: "oauth2",
-      token_endpoint: this.getApiUrl() + "/auth/oauth/token"
+      token_endpoint: tokenEndpoint
     };
     const client = {
       client_id: this.projectId,
-      client_secret: this.options.publishableClientKey,
-      token_endpoint_auth_method: "client_secret_post"
+      client_secret: this.options.publishableClientKey
     };
+    const clientAuthentication = oauth.ClientSecretPost(this.options.publishableClientKey);
+    const allowInsecure = tokenEndpoint.startsWith("http://");
     const response = await this._networkRetryException(async () => {
       const rawResponse = await oauth.refreshTokenGrantRequest(
         as,
         client,
-        refreshToken.token
+        clientAuthentication,
+        refreshToken.token,
+        allowInsecure ? { [oauth.allowInsecureRequests]: true } : void 0
       );
       const response2 = await this._processResponse(rawResponse);
       if (response2.status === "error") {
@@ -170,9 +174,18 @@ var StackClientInterface = class {
       return response2.data;
     });
     if (!response) return null;
-    const result = await oauth.processRefreshTokenResponse(as, client, response);
-    if (oauth.isOAuth2Error(result)) {
-      throw new import_errors.StackAssertionError("OAuth error", { result });
+    let result;
+    try {
+      result = await oauth.processRefreshTokenResponse(as, client, response);
+    } catch (e) {
+      if (e instanceof oauth.ResponseBodyError) {
+        throw new import_errors.StackAssertionError("ResponseBodyError when processing refresh token response", {
+          cause: e.cause,
+          code: e.code,
+          error: e.error
+        });
+      }
+      throw new import_errors.StackAssertionError("Unexpected error when processing refresh token response", { cause: e });
     }
     if (!result.access_token) {
       throw new import_errors.StackAssertionError("Access token not found in token endpoint response, this is weird!");
@@ -800,35 +813,56 @@ var StackClientInterface = class {
     if (!("publishableClientKey" in this.options)) {
       throw new Error("Admin session token is currently not supported for OAuth");
     }
+    const tokenEndpoint = this.getApiUrl() + "/auth/oauth/token";
     const as = {
       issuer: this.options.getBaseUrl(),
       algorithm: "oauth2",
-      token_endpoint: this.getApiUrl() + "/auth/oauth/token"
+      token_endpoint: tokenEndpoint
     };
     const client = {
       client_id: this.projectId,
-      client_secret: this.options.publishableClientKey,
-      token_endpoint_auth_method: "client_secret_post"
+      client_secret: this.options.publishableClientKey
     };
-    const params = await this._networkRetryException(
-      async () => oauth.validateAuthResponse(as, client, options.oauthParams, options.state)
-    );
-    if (oauth.isOAuth2Error(params)) {
-      throw new import_errors.StackAssertionError("Error validating outer OAuth response", { params });
+    const clientAuthentication = oauth.ClientSecretPost(this.options.publishableClientKey);
+    const allowInsecure = tokenEndpoint.startsWith("http://");
+    let params;
+    try {
+      params = oauth.validateAuthResponse(as, client, options.oauthParams, options.state);
+    } catch (e) {
+      if (e instanceof oauth.AuthorizationResponseError) {
+        throw new import_errors.StackAssertionError("Authorization response error when validating outer OAuth response", {
+          //cause is a URLSearchParams object for this error, so we need to serialize it better
+          cause: Object.fromEntries(e.cause),
+          code: e.code,
+          error: e.error
+        });
+      }
+      throw new import_errors.StackAssertionError("Unexpected error when validating outer OAuth response", { cause: e });
     }
     const response = await oauth.authorizationCodeGrantRequest(
       as,
       client,
+      clientAuthentication,
       params,
       options.redirectUri,
-      options.codeVerifier
+      options.codeVerifier,
+      allowInsecure ? { [oauth.allowInsecureRequests]: true } : void 0
     );
-    const result = await oauth.processAuthorizationCodeOAuth2Response(as, client, response);
-    if (oauth.isOAuth2Error(result)) {
-      if ("code" in result && result.code === "MULTI_FACTOR_AUTHENTICATION_REQUIRED") {
-        throw new import_known_errors.KnownErrors.MultiFactorAuthenticationRequired(result.details.attempt_code);
+    let result;
+    try {
+      result = await oauth.processAuthorizationCodeResponse(as, client, response);
+    } catch (e) {
+      if (e instanceof oauth.ResponseBodyError) {
+        if (e.cause.code === "MULTI_FACTOR_AUTHENTICATION_REQUIRED") {
+          throw new import_known_errors.KnownErrors.MultiFactorAuthenticationRequired(e.cause.details.attempt_code);
+        }
+        throw new import_errors.StackAssertionError("Outer OAuth error during authorization code response", {
+          cause: e.cause,
+          code: e.code,
+          error: e.error
+        });
       }
-      throw new import_errors.StackAssertionError("Outer OAuth error during authorization code response", { result });
+      throw new import_errors.StackAssertionError("Unexpected error when processing authorization code response", { cause: e });
     }
     return {
       newUser: result.is_new_user,
@@ -1386,6 +1420,24 @@ var StackClientInterface = class {
       session
     );
   }
+  async switchSubscription(options, session) {
+    await this.sendClientRequest(
+      import_urls.urlString`/payments/products/${options.customer_type}/${options.customer_id}/switch`,
+      {
+        method: "POST",
+        headers: {
+          "content-type": "application/json"
+        },
+        body: JSON.stringify({
+          from_product_id: options.from_product_id,
+          to_product_id: options.to_product_id,
+          price_id: options.price_id,
+          quantity: options.quantity
+        })
+      },
+      session
+    );
+  }
   async createCheckoutUrl(customer_type, customer_id, productIdOrInline, session, returnUrl) {
     const productBody = typeof productIdOrInline === "string" ? { product_id: productIdOrInline } : { inline_product: productIdOrInline };
     const response = await this.sendClientRequest(
@@ -1402,6 +1454,44 @@ var StackClientInterface = class {
     const { url } = await response.json();
     return url;
   }
+  async getCustomerBilling(customerType, customerId, session) {
+    const response = await this.sendClientRequest(
+      import_urls.urlString`/payments/billing/${customerType}/${customerId}`,
+      {},
+      session
+    );
+    return await response.json();
+  }
+  async createCustomerPaymentMethodSetupIntent(customerType, customerId, session) {
+    const response = await this.sendClientRequest(
+      import_urls.urlString`/payments/payment-method/${customerType}/${customerId}/setup-intent`,
+      {
+        method: "POST",
+        headers: {
+          "content-type": "application/json"
+        },
+        body: JSON.stringify({})
+      },
+      session
+    );
+    return await response.json();
+  }
+  async setDefaultCustomerPaymentMethodFromSetupIntent(customerType, customerId, setupIntentId, session) {
+    const response = await this.sendClientRequest(
+      import_urls.urlString`/payments/payment-method/${customerType}/${customerId}/set-default`,
+      {
+        method: "POST",
+        headers: {
+          "content-type": "application/json"
+        },
+        body: JSON.stringify({
+          setup_intent_id: setupIntentId
+        })
+      },
+      session
+    );
+    return await response.json();
+  }
   async transferProject(internalProjectSession, projectIdToTransfer, newTeamId) {
     if (this.options.projectId !== "internal") {
       throw new import_errors.StackAssertionError("StackClientInterface.transferProject() is only available for internal projects (please specify the project ID in the constructor)");