@sudobility/auth_lib 0.0.14 → 0.0.16

package/dist/hooks/index.d.ts

@@ -1,6 +1,6 @@
 /**
  * @fileoverview Hooks exports
  */
-export { useFirebaseAuthNetworkClient } from './useFirebaseAuthNetworkClient';
+export { useFirebaseAuthNetworkClient, createFirebaseAuthNetworkClient, } from './useFirebaseAuthNetworkClient';
 export { useSiteAdmin, siteAdminQueryKey, type UseSiteAdminOptions, type UseSiteAdminResult, type UserInfoResponse, } from './useSiteAdmin';
 //# sourceMappingURL=index.d.ts.map

package/dist/hooks/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAE9E,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC"}

package/dist/hooks/index.js

@@ -1,5 +1,5 @@
 /**
  * @fileoverview Hooks exports
  */
-export { useFirebaseAuthNetworkClient } from './useFirebaseAuthNetworkClient';
+export { useFirebaseAuthNetworkClient, createFirebaseAuthNetworkClient, } from './useFirebaseAuthNetworkClient';
 export { useSiteAdmin, siteAdminQueryKey, } from './useSiteAdmin';

package/dist/hooks/useFirebaseAuthNetworkClient.d.ts

@@ -6,6 +6,16 @@
  */
 import type { NetworkClient } from '@sudobility/types';
 import type { FirebaseAuthNetworkClientOptions } from '../config/types';
+/**
+ * Create a network client adapter that wraps a platform network
+ * with 401 retry and 403 logout handling.
+ *
+ * @param platformNetwork - The underlying network service to wrap (optional, defaults to getNetworkService())
+ * @param options - Optional callbacks for logout and token refresh failure
+ */
+export declare function createFirebaseAuthNetworkClient(platformNetwork?: {
+    request: (url: string, options?: RequestInit) => Promise<Response>;
+}, options?: FirebaseAuthNetworkClientOptions): NetworkClient;
 /**
  * Hook to get a Firebase Auth network client with automatic 401 retry and 403 logout.
  *

package/dist/hooks/useFirebaseAuthNetworkClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useFirebaseAuthNetworkClient.d.ts","sourceRoot":"","sources":["../../src/hooks/useFirebaseAuthNetworkClient.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EACV,aAAa,EAId,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AAyLxE;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,CAAC,EAAE,gCAAgC,GACzC,aAAa,CAEf"}
+{"version":3,"file":"useFirebaseAuthNetworkClient.d.ts","sourceRoot":"","sources":["../../src/hooks/useFirebaseAuthNetworkClient.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EACV,aAAa,EAId,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AAoCxE;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC7C,eAAe,CAAC,EAAE;IAChB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACpE,EACD,OAAO,CAAC,EAAE,gCAAgC,GACzC,aAAa,CA6If;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,CAAC,EAAE,gCAAgC,GACzC,aAAa,CAKf"}

package/dist/hooks/useFirebaseAuthNetworkClient.js

@@ -41,11 +41,14 @@ async function logoutUser(onLogout) {
     }
 }
 /**
- * Create a network client adapter that wraps the platform network client
+ * Create a network client adapter that wraps a platform network
  * with 401 retry and 403 logout handling.
+ *
+ * @param platformNetwork - The underlying network service to wrap (optional, defaults to getNetworkService())
+ * @param options - Optional callbacks for logout and token refresh failure
  */
-function createFirebaseAuthNetworkClient(options) {
-    const platformNetwork = getNetworkService();
+export function createFirebaseAuthNetworkClient(platformNetwork, options) {
+    const network = platformNetwork ?? getNetworkService();
     const parseResponse = async (response) => {
         let data;
         const contentType = response.headers.get('content-type');
@@ -77,7 +80,7 @@ function createFirebaseAuthNetworkClient(options) {
      * - On 403: Log user out (no retry)
      */
     const executeWithRetry = async (url, requestInit) => {
-        const response = await platformNetwork.request(url, requestInit);
+        const response = await network.request(url, requestInit);
         // On 401, get fresh token and retry once
         if (response.status === 401) {
             const freshToken = await getAuthToken(true);
@@ -86,7 +89,7 @@ function createFirebaseAuthNetworkClient(options) {
                     ...requestInit.headers,
                     Authorization: `Bearer ${freshToken}`,
                 };
-                const retryResponse = await platformNetwork.request(url, {
+                const retryResponse = await network.request(url, {
                     ...requestInit,
                     headers: retryHeaders,
                 });
@@ -158,5 +161,5 @@ function createFirebaseAuthNetworkClient(options) {
  * @returns NetworkClient instance
  */
 export function useFirebaseAuthNetworkClient(options) {
-    return useMemo(() => createFirebaseAuthNetworkClient(options), [options]);
+    return useMemo(() => createFirebaseAuthNetworkClient(undefined, options), [options]);
 }

package/dist/index.d.ts

@@ -11,5 +11,6 @@ export type { FirebaseConfig, FirebaseInitOptions, FirebaseInitResult, FirebaseA
 export { useFirebaseAuthNetworkClient } from './hooks';
 export { useSiteAdmin, siteAdminQueryKey, type UseSiteAdminOptions, type UseSiteAdminResult, type UserInfoResponse, } from './hooks';
 export { getFirebaseErrorMessage, getFirebaseErrorCode, formatFirebaseError, isFirebaseAuthError, } from './utils';
+export { FirebaseAuthNetworkService, type FirebaseAuthNetworkServiceOptions, } from './network';
 export { parseAdminEmails, isAdminEmail, createAdminChecker } from './admin';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,gCAAgC,GACjC,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAEvD,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,gCAAgC,GACjC,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAEvD,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,0BAA0B,EAC1B,KAAK,iCAAiC,GACvC,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -13,5 +13,7 @@ export { useFirebaseAuthNetworkClient } from './hooks';
 export { useSiteAdmin, siteAdminQueryKey, } from './hooks';
 // Utils
 export { getFirebaseErrorMessage, getFirebaseErrorCode, formatFirebaseError, isFirebaseAuthError, } from './utils';
+// Network
+export { FirebaseAuthNetworkService, } from './network';
 // Admin
 export { parseAdminEmails, isAdminEmail, createAdminChecker } from './admin';

package/dist/network/FirebaseAuthNetworkService.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @fileoverview Firebase-aware network service with automatic token refresh and logout handling.
+ *
+ * Extends WebNetworkService to add:
+ * - On 401 (Unauthorized): Force refresh Firebase token and retry once
+ * - On 403 (Forbidden): Log the user out
+ */
+import { WebNetworkService } from '@sudobility/di';
+export interface FirebaseAuthNetworkServiceOptions {
+    /** Called when user is logged out due to 403 */
+    onLogout?: () => void;
+    /** Called when token refresh fails */
+    onTokenRefreshFailed?: (error: Error) => void;
+}
+/**
+ * Network service with Firebase authentication support.
+ * Automatically refreshes token on 401 and logs out on 403.
+ */
+export declare class FirebaseAuthNetworkService extends WebNetworkService {
+    private options?;
+    constructor(options?: FirebaseAuthNetworkServiceOptions);
+    /**
+     * Override request to add 401 retry and 403 logout handling.
+     */
+    request(url: string, options?: RequestInit): Promise<Response>;
+}
+//# sourceMappingURL=FirebaseAuthNetworkService.d.ts.map

package/dist/network/FirebaseAuthNetworkService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FirebaseAuthNetworkService.d.ts","sourceRoot":"","sources":["../../src/network/FirebaseAuthNetworkService.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAInD,MAAM,WAAW,iCAAiC;IAChD,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,sCAAsC;IACtC,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAC/C;AAiCD;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,iBAAiB;IAC/D,OAAO,CAAC,OAAO,CAAC,CAAoC;gBAExC,OAAO,CAAC,EAAE,iCAAiC;IAKvD;;OAEG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;CAkCzE"}

package/dist/network/FirebaseAuthNetworkService.js

@@ -0,0 +1,89 @@
+/**
+ * @fileoverview Firebase-aware network service with automatic token refresh and logout handling.
+ *
+ * Extends WebNetworkService to add:
+ * - On 401 (Unauthorized): Force refresh Firebase token and retry once
+ * - On 403 (Forbidden): Log the user out
+ */
+import { WebNetworkService } from '@sudobility/di';
+import { signOut } from 'firebase/auth';
+import { getFirebaseAuth } from '../config/firebase-init';
+/**
+ * Get a fresh Firebase ID token with force refresh.
+ * Returns empty string if not authenticated.
+ */
+async function getAuthToken(forceRefresh = false) {
+    const auth = getFirebaseAuth();
+    const user = auth?.currentUser;
+    if (!user)
+        return '';
+    try {
+        return await user.getIdToken(forceRefresh);
+    }
+    catch (err) {
+        console.error('[FirebaseAuthNetworkService] Failed to get ID token:', err);
+        return '';
+    }
+}
+/**
+ * Log the user out via Firebase.
+ */
+async function logoutUser(onLogout) {
+    const auth = getFirebaseAuth();
+    if (!auth)
+        return;
+    try {
+        await signOut(auth);
+        onLogout?.();
+    }
+    catch (err) {
+        console.error('[FirebaseAuthNetworkService] Failed to sign out:', err);
+    }
+}
+/**
+ * Network service with Firebase authentication support.
+ * Automatically refreshes token on 401 and logs out on 403.
+ */
+export class FirebaseAuthNetworkService extends WebNetworkService {
+    constructor(options) {
+        super();
+        Object.defineProperty(this, "options", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this.options = options;
+    }
+    /**
+     * Override request to add 401 retry and 403 logout handling.
+     */
+    async request(url, options = {}) {
+        const response = await super.request(url, options);
+        // On 401, get fresh token and retry once
+        if (response.status === 401) {
+            const freshToken = await getAuthToken(true);
+            if (freshToken) {
+                const retryHeaders = {
+                    ...options.headers,
+                    Authorization: `Bearer ${freshToken}`,
+                };
+                return super.request(url, {
+                    ...options,
+                    headers: retryHeaders,
+                });
+            }
+            else {
+                // Token refresh failed
+                this.options?.onTokenRefreshFailed?.(new Error('Failed to refresh token'));
+            }
+        }
+        // On 403, log the user out
+        if (response.status === 403) {
+            console.warn('[FirebaseAuthNetworkService] 403 Forbidden - logging user out');
+            await logoutUser(this.options?.onLogout);
+            // Return the original response so the UI can handle it
+        }
+        return response;
+    }
+}

package/dist/network/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @fileoverview Network exports
+ */
+export { FirebaseAuthNetworkService, type FirebaseAuthNetworkServiceOptions, } from './FirebaseAuthNetworkService';
+//# sourceMappingURL=index.d.ts.map

package/dist/network/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/network/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,0BAA0B,EAC1B,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC"}

package/dist/network/index.js

@@ -0,0 +1,4 @@
+/**
+ * @fileoverview Network exports
+ */
+export { FirebaseAuthNetworkService, } from './FirebaseAuthNetworkService';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sudobility/auth_lib",
-  "version": "0.0.14",
+  "version": "0.0.16",
   "description": "Firebase authentication utilities with token refresh handling",
   "type": "module",
   "main": "./dist/index.js",
@@ -31,7 +31,7 @@
   "peerDependencies": {
     "react": "^19.2.3",
     "firebase": "^12.7.0",
-    "@sudobility/di": "^1.5.21",
+    "@sudobility/di": "^1.5.22",
     "@sudobility/types": "^1.9.48",
     "@tanstack/react-query": "^5.0.0"
   },