@sudoplatform/sudo-secure-communications 5.1.3 → 5.1.5

package/lib/private/data/session/sessionManager.js

@@ -10,15 +10,20 @@ import { HandleId } from '../../../public';
 import { delay } from '../../util/delay';
 import { MatrixClientManager } from '../common/matrixClientManager';
 export class SessionManager {
-    constructor(sessionService, storageModule) {
+    constructor(sessionService, storageModule, autoRefreshTokenMinutesBeforeExpiration) {
         this.sessionService = sessionService;
         this.storageModule = storageModule;
+        this.autoRefreshTokenMinutesBeforeExpiration = autoRefreshTokenMinutesBeforeExpiration;
         this.sessions = {};
         this.log = new DefaultLogger(this.constructor.name);
     }
     async deleteSession(handleId, deleteStorage = false) {
         const session = this.sessions[handleId.toString()];
         if (session) {
+            // Clear any scheduled token refresh
+            if (session.refreshTimeout) {
+                clearTimeout(session.refreshTimeout);
+            }
             // stop syncing matrix client
             await session.matrixClient.stopSyncing();
             // Flush any still existing background watchers
@@ -53,88 +58,184 @@ export class SessionManager {
     }
     // MARK: Access Tokens
     async ensureValidSession(handleId, storePassphrase) {
-        // check if we have a cached session for this handleId
         const cachedSession = this.sessions[handleId.toString()];
         const newStorePassphrase = cachedSession?.storePassphrase ?? storePassphrase ?? undefined;
-        let deviceId;
+        // Try to use cached session if valid
         if (cachedSession) {
-            const decoded = JWT.decode(cachedSession.accessToken);
-            deviceId = decoded.device_id;
-            const expiry = parseInt(decoded.exp, 10);
-            const now = Math.floor(Date.now() / 1000);
-            const isExpiredOrExpiringSoon = expiry - now <= 300; // Check if the token has expired or will expire in 300 seconds
-            if (!isExpiredOrExpiringSoon &&
-                cachedSession.matrixClient.isUsingToken(cachedSession.accessToken)) {
-                return cachedSession.accessToken;
-            }
-            // token is expired or different than matrix token. Refresh
-            try {
-                const newSession = await this.sessionService.get({
-                    handleId: handleId.toString(),
-                    deviceId: deviceId ?? v4(),
-                });
-                const newToken = newSession.token;
-                // update matrix client and session with new token
-                cachedSession.matrixClient.updateAccessToken(newToken);
-                this.sessions[handleId.toString()] = {
-                    accessToken: newToken,
-                    storePassphrase: newStorePassphrase,
-                    matrixClient: cachedSession.matrixClient,
-                };
-                // store session for future reloads
-                const handleStorage = await this.storageModule.useHandleStorage(handleId.toString(), newStorePassphrase);
-                await handleStorage?.secureCommsStore.sessionAPIs.saveAccessToken(newToken);
-                return newToken;
+            const validAccessToken = await this.tryUseCachedSession(handleId, cachedSession, newStorePassphrase);
+            if (validAccessToken) {
+                return validAccessToken;
             }
-            catch {
-                // if refresh fails. clean up defunct matrix client and remove cached session
-                await cachedSession.matrixClient.stopSyncing();
-                delete this.sessions[handleId.toString()];
+        }
+        // Create new session from storage or fresh token
+        return await this.createNewSession(handleId, newStorePassphrase);
+    }
+    decodeToken(token) {
+        const decoded = JWT.decode(token);
+        if (!decoded || !decoded.exp || !decoded.device_id) {
+            throw new Error('Invalid token');
+        }
+        const expiry = parseInt(decoded.exp, 10);
+        const deviceId = decoded.device_id;
+        return { decoded, expiry, deviceId };
+    }
+    isTokenExpired(expiry) {
+        const now = Math.floor(Date.now() / 1000);
+        return expiry - now <= 0;
+    }
+    isTokenExpiringSoon(expiry) {
+        const now = Math.floor(Date.now() / 1000);
+        const refreshThresholdSeconds = this.autoRefreshTokenMinutesBeforeExpiration * 60;
+        const timeUntilExpiry = expiry - now;
+        return timeUntilExpiry > 0 && timeUntilExpiry <= refreshThresholdSeconds;
+    }
+    isTokenExpiredOrExpiringSoon(expiry) {
+        return this.isTokenExpired(expiry) || this.isTokenExpiringSoon(expiry);
+    }
+    scheduleTokenRefresh(handleId, expiry, storePassphrase) {
+        const now = Math.floor(Date.now() / 1000);
+        const timeUntilExpiry = expiry - now;
+        const refreshThresholdSeconds = this.autoRefreshTokenMinutesBeforeExpiration * 60;
+        const timeBeforeExpiryToSchedule = timeUntilExpiry - refreshThresholdSeconds;
+        // Only schedule refresh if auto-refresh is enabled and there's enough time until expiry
+        // If auto-refresh is disabled (0) or less than the threshold, the token will not be auto refreshed.
+        if (this.autoRefreshTokenMinutesBeforeExpiration > 0 &&
+            timeBeforeExpiryToSchedule > 0) {
+            return setTimeout(async () => {
+                try {
+                    await this.ensureValidSession(handleId, storePassphrase);
+                }
+                catch (error) {
+                    this.log.error(`Failed to refresh token for handle ${handleId.toString()}`, { err: error });
+                }
+            }, timeBeforeExpiryToSchedule * 1000);
+        }
+        return undefined;
+    }
+    // Test if the cached session is still valid.
+    // Returns access token if it is still valid or can be refreshed.
+    // Returns undefined if the token is expired or cannot be refreshed.
+    async tryUseCachedSession(handleId, cachedSession, storePassphrase) {
+        const { expiry, deviceId } = this.decodeToken(cachedSession.accessToken);
+        if (!this.isTokenExpiredOrExpiringSoon(expiry) &&
+            cachedSession.matrixClient.isUsingToken(cachedSession.accessToken)) {
+            return cachedSession.accessToken;
+        }
+        if (this.isTokenExpired(expiry)) {
+            return await this.handleExpiredToken(handleId);
+        }
+        return await this.refreshCachedSessionToken(handleId, cachedSession, deviceId, storePassphrase);
+    }
+    async handleExpiredToken(handleId) {
+        this.log.debug(`Token expired for handle ${handleId.toString()}, cleaned up session`);
+        // Stop syncing the matrix client since token is expired
+        await this.deleteSession(handleId);
+        return undefined;
+    }
+    async refreshCachedSessionToken(handleId, cachedSession, deviceId, storePassphrase) {
+        try {
+            const newSession = await this.getAccessTokenFromService(handleId, deviceId);
+            const newToken = newSession.token;
+            const { expiry: newExpiry } = this.decodeToken(newToken);
+            // Schedule new refresh timeout
+            if (cachedSession.refreshTimeout) {
+                clearTimeout(cachedSession.refreshTimeout);
             }
+            const refreshTimeout = this.scheduleTokenRefresh(handleId, newExpiry, storePassphrase);
+            // Update matrix client and session with new token
+            cachedSession.matrixClient.updateAccessToken(newToken);
+            this.sessions[handleId.toString()] = {
+                accessToken: newToken,
+                storePassphrase: storePassphrase,
+                matrixClient: cachedSession.matrixClient,
+                refreshTimeout,
+            };
+            // Store session for future reloads
+            const handleStorage = await this.storageModule.useHandleStorage(handleId.toString(), storePassphrase);
+            await handleStorage?.secureCommsStore.sessionAPIs.saveAccessToken(newToken);
+            return newToken;
+        }
+        catch (error) {
+            // If refresh fails, clean up defunct matrix client and remove cached session
+            this.log.error(`Failed to refresh token for handle ${handleId.toString()}: ${error}`);
+            await this.deleteSession(handleId);
+            return undefined;
         }
-        // useHandleStorage will initialize the handle storage if it is not already initialized.
-        const handleStorage = await this.storageModule.useHandleStorage(handleId.toString(), newStorePassphrase);
-        let accessToken;
-        // Retrieve access token from store if cached session does not exist
+    }
+    async getAccessTokenFromStorage(handleStorage) {
         const storedAccessToken = await handleStorage?.secureCommsStore.sessionAPIs.getAccessToken();
-        if (storedAccessToken) {
-            const decoded = JWT.decode(storedAccessToken);
-            deviceId = decoded.device_id;
-            const expiry = parseInt(decoded.exp, 10);
-            const now = Math.floor(Date.now() / 1000);
-            const isExpiredOrExpiringSoon = expiry - now <= 300; // Check if the token has expired or will expire in 300 seconds
-            if (!isExpiredOrExpiringSoon) {
-                accessToken = storedAccessToken;
-            }
-            else {
-                // get new access token
-                accessToken = (await this.sessionService.get({
-                    handleId: handleId.toString(),
-                    deviceId: deviceId ?? v4(),
-                })).token;
-            }
+        if (!storedAccessToken) {
+            return undefined;
         }
-        else {
-            // get new access token
-            accessToken = (await this.sessionService.get({
-                handleId: handleId.toString(),
-                deviceId: deviceId ?? v4(),
-            })).token;
+        // Parse token once to check validity
+        const { expiry, deviceId } = this.decodeToken(storedAccessToken);
+        // If token is still valid (not expired and not expiring soon), use it
+        if (!this.isTokenExpired(expiry) && !this.isTokenExpiringSoon(expiry)) {
+            return {
+                token: storedAccessToken,
+                deviceId,
+                isValid: true,
+            };
         }
+        // Token is expired or expiring soon, return it with isValid: false
+        return {
+            token: storedAccessToken,
+            deviceId,
+            isValid: false,
+        };
+    }
+    async getAccessTokenFromService(handleId, deviceId) {
+        const newSession = await this.sessionService.get({
+            handleId: handleId.toString(),
+            deviceId: deviceId ?? v4(),
+        });
+        // Parse new token to get deviceId (in case deviceId wasn't provided)
+        const { deviceId: tokenDeviceId } = this.decodeToken(newSession.token);
+        return {
+            token: newSession.token,
+            deviceId: deviceId ?? tokenDeviceId,
+        };
+    }
+    async getAccessTokenFromStorageOrService(handleId, handleStorage) {
+        // Try to get token from storage first
+        const storedToken = await this.getAccessTokenFromStorage(handleStorage);
+        if (storedToken?.isValid) {
+            return {
+                token: storedToken.token,
+                deviceId: storedToken.deviceId,
+            };
+        }
+        // Token not in storage or invalid, get from service
+        // Use deviceId from invalid stored token if available
+        const deviceId = storedToken?.deviceId;
+        const serviceToken = await this.getAccessTokenFromService(handleId, deviceId);
+        return {
+            token: serviceToken.token,
+            deviceId: serviceToken.deviceId,
+        };
+    }
+    async createNewSession(handleId, storePassphrase) {
+        // useHandleStorage will initialize the handle storage if it is not already initialized
+        const handleStorage = await this.storageModule.useHandleStorage(handleId.toString(), storePassphrase);
+        // Get access token from storage or service
+        const { token: accessToken } = await this.getAccessTokenFromStorageOrService(handleId, handleStorage);
+        // Parse token once for both matrix client creation and refresh scheduling
+        const { decoded, expiry } = this.decodeToken(accessToken);
         // Create a new matrix client
-        const matrixClient = await this.createMatrixClient(handleId.toString(), accessToken, newStorePassphrase, // still pass this in - it will be used by RustCrypto.
-        handleStorage);
+        const matrixClient = await this.createMatrixClient(handleId.toString(), accessToken, decoded, storePassphrase, handleStorage);
+        // Schedule token refresh before expiry
+        const refreshTimeout = this.scheduleTokenRefresh(handleId, expiry, storePassphrase);
+        // Store session
         this.sessions[handleId.toString()] = {
             accessToken: accessToken,
-            storePassphrase: newStorePassphrase,
+            storePassphrase: storePassphrase,
             matrixClient,
+            refreshTimeout,
         };
-        // store session for future reloads
         await handleStorage?.secureCommsStore.sessionAPIs.saveAccessToken(accessToken);
         return accessToken;
     }
-    async createMatrixClient(handleId, token, storePassphrase, handleStorage) {
-        const decoded = JWT.decode(token);
+    async createMatrixClient(handleId, token, decoded, storePassphrase, handleStorage) {
         const client = new MatrixClientManager(token, decoded, handleStorage);
         if (typeof indexedDB !== 'undefined') {
             // use indexedDB if available (i.e., in browser or Node with polyfill)

package/lib/private/data/session/sessionManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionManager.js","sourceRoot":"","sources":["../../../../src/private/data/session/sessionManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAU,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,EAAE,EAAE,MAAM,MAAM,CAAA;AACzB,OAAO,EAAE,QAAQ,EAAgC,MAAM,iBAAiB,CAAA;AAExE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AAEnE,MAAM,OAAO,cAAc;IAYzB,YACmB,cAA8B,EAC9B,aAA4B;QAD5B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,kBAAa,GAAb,aAAa,CAAe;QAX9B,aAAQ,GAOrB,EAAE,CAAA;QAMJ,IAAI,CAAC,GAAG,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC;IAEM,KAAK,CAAC,aAAa,CACxB,QAAkB,EAClB,gBAAyB,KAAK;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,6BAA6B;YAC7B,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,CAAA;YACxC,+CAA+C;YAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAEhD,0BAA0B;YAC1B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAC7D,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAA;YACD,MAAM,aAAa,EAAE,gBAAgB,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAA;YACrE,2BAA2B;YAC3B,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,OAAO,CAAC,YAAY,CAAC,eAAe,CACxC,iBAAiB,QAAQ,CAAC,QAAQ,EAAE,EAAE,CACvC,CAAA;gBACD,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;YAClE,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,gDAAgD;QAChD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QACjB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5C,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,+CAA+C;YAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAChD,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,QAAkB;QAElB,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAE,CAAC,YAAa,CAAA;IAC1D,CAAC;IAED,sBAAsB;IAEf,KAAK,CAAC,kBAAkB,CAC7B,QAAkB,EAClB,eAAwB;QAExB,sDAAsD;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QAExD,MAAM,kBAAkB,GACtB,aAAa,EAAE,eAAe,IAAI,eAAe,IAAI,SAAS,CAAA;QAEhE,IAAI,QAA4B,CAAA;QAEhC,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAGnD,CAAA;YAED,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAA;YAE5B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;YACzC,MAAM,uBAAuB,GAAG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAA,CAAC,+DAA+D;YAEnH,IACE,CAAC,uBAAuB;gBACxB,aAAa,CAAC,YAAY,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,EAClE,CAAC;gBACD,OAAO,aAAa,CAAC,WAAW,CAAA;YAClC,CAAC;YAED,2DAA2D;YAC3D,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;oBAC/C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;oBAC7B,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE;iBAC3B,CAAC,CAAA;gBAEF,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAA;gBAEjC,kDAAkD;gBAClD,aAAa,CAAC,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;gBACtD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG;oBACnC,WAAW,EAAE,QAAQ;oBACrB,eAAe,EAAE,kBAAkB;oBACnC,YAAY,EAAE,aAAa,CAAC,YAAY;iBACzC,CAAA;gBAED,mCAAmC;gBACnC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAC7D,QAAQ,CAAC,QAAQ,EAAE,EACnB,kBAAkB,CACnB,CAAA;gBACD,MAAM,aAAa,EAAE,gBAAgB,CAAC,WAAW,CAAC,eAAe,CAC/D,QAAQ,CACT,CAAA;gBAED,OAAO,QAAQ,CAAA;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,6EAA6E;gBAC7E,MAAM,aAAa,CAAC,YAAY,CAAC,WAAW,EAAE,CAAA;gBAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;YAC3C,CAAC;QACH,CAAC;QAED,wFAAwF;QACxF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAC7D,QAAQ,CAAC,QAAQ,EAAE,EACnB,kBAAkB,CACnB,CAAA;QAED,IAAI,WAAmB,CAAA;QAEvB,oEAAoE;QACpE,MAAM,iBAAiB,GACrB,MAAM,aAAa,EAAE,gBAAgB,CAAC,WAAW,CAAC,cAAc,EAAE,CAAA;QAEpE,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAA2B,CAAA;YACvE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAA;YAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;YACzC,MAAM,uBAAuB,GAAG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAA,CAAC,+DAA+D;YAEnH,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBAC7B,WAAW,GAAG,iBAAiB,CAAA;YACjC,CAAC;iBAAM,CAAC;gBACN,uBAAuB;gBACvB,WAAW,GAAG,CACZ,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;oBAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;oBAC7B,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE;iBAC3B,CAAC,CACH,CAAC,KAAK,CAAA;YACT,CAAC;QACH,CAAC;aAAM,CAAC;YACN,uBAAuB;YACvB,WAAW,GAAG,CACZ,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;gBAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBAC7B,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE;aAC3B,CAAC,CACH,CAAC,KAAK,CAAA;QACT,CAAC;QAED,6BAA6B;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAChD,QAAQ,CAAC,QAAQ,EAAE,EACnB,WAAW,EACX,kBAAkB,EAAE,sDAAsD;QAC1E,aAAa,CACd,CAAA;QAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG;YACnC,WAAW,EAAE,WAAW;YACxB,eAAe,EAAE,kBAAkB;YACnC,YAAY;SACb,CAAA;QAED,mCAAmC;QACnC,MAAM,aAAa,EAAE,gBAAgB,CAAC,WAAW,CAAC,eAAe,CAC/D,WAAW,CACZ,CAAA;QAED,OAAO,WAAW,CAAA;IACpB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,QAAgB,EAChB,KAAa,EACb,eAAwB,EACxB,aAA6B;QAE7B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAA2B,CAAA;QAE3D,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;QAErE,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;YACrC,sEAAsE;YACtE,MAAM,MAAM,CAAC,cAAc,CAAC;gBAC1B,YAAY,EAAE,IAAI;gBAClB,oBAAoB,EAAE,iBAAiB,QAAQ,EAAE;gBACjD,eAAe,EAAE,eAAe;aAC1B,CAAC,CAAA;YACT,2EAA2E;YAC3E,MAAM,aAAa,EAAE,WAAW,CAAC,OAAO,EAAE,CAAA;QAC5C,CAAC;aAAM,CAAC;YACN,mBAAmB;YACnB,MAAM,MAAM,CAAC,cAAc,CAAC;gBAC1B,YAAY,EAAE,KAAK;aACb,CAAC,CAAA;QACX,CAAC;QAED,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;QAErB,OAAO,MAAM,CAAA;IACf,CAAC;CACF"}
+{"version":3,"file":"sessionManager.js","sourceRoot":"","sources":["../../../../src/private/data/session/sessionManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAU,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,EAAE,EAAE,MAAM,MAAM,CAAA;AACzB,OAAO,EAAE,QAAQ,EAAgC,MAAM,iBAAiB,CAAA;AAExE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AAEnE,MAAM,OAAO,cAAc;IAazB,YACmB,cAA8B,EAC9B,aAA4B,EAC5B,uCAA+C;QAF/C,mBAAc,GAAd,cAAc,CAAgB;QAC9B,kBAAa,GAAb,aAAa,CAAe;QAC5B,4CAAuC,GAAvC,uCAAuC,CAAQ;QAbjD,aAAQ,GAQrB,EAAE,CAAA;QAOJ,IAAI,CAAC,GAAG,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC;IAEM,KAAK,CAAC,aAAa,CACxB,QAAkB,EAClB,gBAAyB,KAAK;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,oCAAoC;YACpC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC3B,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;YACtC,CAAC;YACD,6BAA6B;YAC7B,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,CAAA;YACxC,+CAA+C;YAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAEhD,0BAA0B;YAC1B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAC7D,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAA;YACD,MAAM,aAAa,EAAE,gBAAgB,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAA;YACrE,2BAA2B;YAC3B,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,OAAO,CAAC,YAAY,CAAC,eAAe,CACxC,iBAAiB,QAAQ,CAAC,QAAQ,EAAE,EAAE,CACvC,CAAA;gBACD,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;YAClE,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,gDAAgD;QAChD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QACjB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5C,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,+CAA+C;YAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAChD,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,QAAkB;QAElB,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAE,CAAC,YAAa,CAAA;IAC1D,CAAC;IAED,sBAAsB;IAEf,KAAK,CAAC,kBAAkB,CAC7B,QAAkB,EAClB,eAAwB;QAExB,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QACxD,MAAM,kBAAkB,GACtB,aAAa,EAAE,eAAe,IAAI,eAAe,IAAI,SAAS,CAAA;QAEhE,qCAAqC;QACrC,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,QAAQ,EACR,aAAa,EACb,kBAAkB,CACnB,CAAA;YACD,IAAI,gBAAgB,EAAE,CAAC;gBACrB,OAAO,gBAAgB,CAAA;YACzB,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAA;IAClE,CAAC;IAEO,WAAW,CAAC,KAAa;QAK/B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAA2B,CAAA;QAC3D,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAA;QAClC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IACtC,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACzC,OAAO,MAAM,GAAG,GAAG,IAAI,CAAC,CAAA;IAC1B,CAAC;IAEO,mBAAmB,CAAC,MAAc;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACzC,MAAM,uBAAuB,GAC3B,IAAI,CAAC,uCAAuC,GAAG,EAAE,CAAA;QACnD,MAAM,eAAe,GAAG,MAAM,GAAG,GAAG,CAAA;QACpC,OAAO,eAAe,GAAG,CAAC,IAAI,eAAe,IAAI,uBAAuB,CAAA;IAC1E,CAAC;IAEO,4BAA4B,CAAC,MAAc;QACjD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAA;IACxE,CAAC;IAEO,oBAAoB,CAC1B,QAAkB,EAClB,MAAc,EACd,eAAwB;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACzC,MAAM,eAAe,GAAG,MAAM,GAAG,GAAG,CAAA;QACpC,MAAM,uBAAuB,GAC3B,IAAI,CAAC,uCAAuC,GAAG,EAAE,CAAA;QACnD,MAAM,0BAA0B,GAAG,eAAe,GAAG,uBAAuB,CAAA;QAE5E,wFAAwF;QACxF,oGAAoG;QACpG,IACE,IAAI,CAAC,uCAAuC,GAAG,CAAC;YAChD,0BAA0B,GAAG,CAAC,EAC9B,CAAC;YACD,OAAO,UAAU,CAAC,KAAK,IAAI,EAAE;gBAC3B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;gBAC1D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,GAAG,CAAC,KAAK,CACZ,sCAAsC,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAC3D,EAAE,GAAG,EAAE,KAAK,EAAE,CACf,CAAA;gBACH,CAAC;YACH,CAAC,EAAE,0BAA0B,GAAG,IAAI,CAAC,CAAA;QACvC,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,6CAA6C;IAC7C,iEAAiE;IACjE,oEAAoE;IAC5D,KAAK,CAAC,mBAAmB,CAC/B,QAAkB,EAClB,aAKC,EACD,eAAwB;QAExB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;QACxE,IACE,CAAC,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC;YAC1C,aAAa,CAAC,YAAY,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,EAClE,CAAC;YACD,OAAO,aAAa,CAAC,WAAW,CAAA;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAChD,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,yBAAyB,CACzC,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,eAAe,CAChB,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,QAAkB;QACjD,IAAI,CAAC,GAAG,CAAC,KAAK,CACZ,4BAA4B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CACtE,CAAA;QACD,wDAAwD;QACxD,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;QAElC,OAAO,SAAS,CAAA;IAClB,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,QAAkB,EAClB,aAKC,EACD,QAAgB,EAChB,eAAwB;QAExB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACrD,QAAQ,EACR,QAAQ,CACT,CAAA;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAA;YACjC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;YACxD,+BAA+B;YAC/B,IAAI,aAAa,CAAC,cAAc,EAAE,CAAC;gBACjC,YAAY,CAAC,aAAa,CAAC,cAAc,CAAC,CAAA;YAC5C,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,CAAC,oBAAoB,CAC9C,QAAQ,EACR,SAAS,EACT,eAAe,CAChB,CAAA;YACD,kDAAkD;YAClD,aAAa,CAAC,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YACtD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG;gBACnC,WAAW,EAAE,QAAQ;gBACrB,eAAe,EAAE,eAAe;gBAChC,YAAY,EAAE,aAAa,CAAC,YAAY;gBACxC,cAAc;aACf,CAAA;YACD,mCAAmC;YACnC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAC7D,QAAQ,CAAC,QAAQ,EAAE,EACnB,eAAe,CAChB,CAAA;YACD,MAAM,aAAa,EAAE,gBAAgB,CAAC,WAAW,CAAC,eAAe,CAC/D,QAAQ,CACT,CAAA;YAED,OAAO,QAAQ,CAAA;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6EAA6E;YAC7E,IAAI,CAAC,GAAG,CAAC,KAAK,CACZ,sCAAsC,QAAQ,CAAC,QAAQ,EAAE,KAAK,KAAK,EAAE,CACtE,CAAA;YACD,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;YAElC,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,aAA4B;QAM5B,MAAM,iBAAiB,GACrB,MAAM,aAAa,EAAE,gBAAgB,CAAC,WAAW,CAAC,cAAc,EAAE,CAAA;QAEpE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,qCAAqC;QACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAA;QAEhE,sEAAsE;QACtE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YACtE,OAAO;gBACL,KAAK,EAAE,iBAAiB;gBACxB,QAAQ;gBACR,OAAO,EAAE,IAAI;aACd,CAAA;QACH,CAAC;QAED,mEAAmE;QACnE,OAAO;YACL,KAAK,EAAE,iBAAiB;YACxB,QAAQ;YACR,OAAO,EAAE,KAAK;SACf,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,QAAkB,EAClB,QAAiB;QAEjB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAC/C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE;SAC3B,CAAC,CAAA;QAEF,qEAAqE;QACrE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAEtE,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,QAAQ,EAAE,QAAQ,IAAI,aAAa;SACpC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,kCAAkC,CAC9C,QAAkB,EAClB,aAA4B;QAE5B,sCAAsC;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAA;QACvE,IAAI,WAAW,EAAE,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,QAAQ,EAAE,WAAW,CAAC,QAAQ;aAC/B,CAAA;QACH,CAAC;QACD,oDAAoD;QACpD,sDAAsD;QACtD,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,CAAA;QACtC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACvD,QAAQ,EACR,QAAQ,CACT,CAAA;QACD,OAAO;YACL,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,QAAQ,EAAE,YAAY,CAAC,QAAQ;SAChC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAkB,EAClB,eAAwB;QAExB,uFAAuF;QACvF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAC7D,QAAQ,CAAC,QAAQ,EAAE,EACnB,eAAe,CAChB,CAAA;QACD,2CAA2C;QAC3C,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAC1B,MAAM,IAAI,CAAC,kCAAkC,CAAC,QAAQ,EAAE,aAAc,CAAC,CAAA;QACzE,0EAA0E;QAC1E,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;QACzD,6BAA6B;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAChD,QAAQ,CAAC,QAAQ,EAAE,EACnB,WAAW,EACX,OAAO,EACP,eAAe,EACf,aAAa,CACd,CAAA;QACD,uCAAuC;QACvC,MAAM,cAAc,GAAG,IAAI,CAAC,oBAAoB,CAC9C,QAAQ,EACR,MAAM,EACN,eAAe,CAChB,CAAA;QACD,gBAAgB;QAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG;YACnC,WAAW,EAAE,WAAW;YACxB,eAAe,EAAE,eAAe;YAChC,YAAY;YACZ,cAAc;SACf,CAAA;QACD,MAAM,aAAa,EAAE,gBAAgB,CAAC,WAAW,CAAC,eAAe,CAC/D,WAAW,CACZ,CAAA;QAED,OAAO,WAAW,CAAA;IACpB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,QAAgB,EAChB,KAAa,EACb,OAA+B,EAC/B,eAAwB,EACxB,aAA6B;QAE7B,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;QAErE,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;YACrC,sEAAsE;YACtE,MAAM,MAAM,CAAC,cAAc,CAAC;gBAC1B,YAAY,EAAE,IAAI;gBAClB,oBAAoB,EAAE,iBAAiB,QAAQ,EAAE;gBACjD,eAAe,EAAE,eAAe;aAC1B,CAAC,CAAA;YACT,2EAA2E;YAC3E,MAAM,aAAa,EAAE,WAAW,CAAC,OAAO,EAAE,CAAA;QAC5C,CAAC;aAAM,CAAC;YACN,mBAAmB;YACnB,MAAM,MAAM,CAAC,cAAc,CAAC;gBAC1B,YAAY,EAAE,KAAK;aACb,CAAC,CAAA;QACX,CAAC;QAED,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;QAErB,OAAO,MAAM,CAAA;IACf,CAAC;CACF"}

package/lib/public/secureCommsClient.js

@@ -36,7 +36,7 @@ export class DefaultSecureCommsClient {
         this.keyManager =
             opts.sudoKeyManager ?? new DefaultSudoKeyManager(this.sudoCryptoProvider);
         this.sessionService = new DefaultSessionService(this.apiClient);
-        this.sessionManager = new SessionManager(this.sessionService, this.storage);
+        this.sessionManager = new SessionManager(this.sessionService, this.storage, opts.autoRefreshTokenMinutesBeforeExpiration ?? 5);
         this.mediaCredentialService = new DefaultMediaCredentialService(this.apiClient);
         this.mediaCredentialManager = new MediaCredentialManager(this.userClient, this.mediaCredentialService, this.identityServiceConfig, this.secureCommsServiceConfig);
         this.handles = new DefaultHandlesModule(this.apiClient, this.sessionManager);

package/lib/public/secureCommsClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"secureCommsClient.js","sourceRoot":"","sources":["../../src/public/secureCommsClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,aAAa,EACb,qBAAqB,EAErB,kBAAkB,GAGnB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAEL,QAAQ,IAAI,gBAAgB,GAC7B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,GAOrB,MAAM,WAAW,CAAA;AAClB,OAAO,EAAkB,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAChF,OAAO,EACL,wBAAwB,GAEzB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,oBAAoB,EAAiB,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAe,MAAM,uBAAuB,CAAA;AAEvE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAA;AAC5D,OAAO,EAEL,2BAA2B,GAC5B,MAAM,+BAA+B,CAAA;AAEtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAA;AACnG,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAA;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAA;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAA;AAgIvE,MAAM,OAAO,wBAAwB;IAwBnC,YAAmB,IAA8B;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QAEnD,MAAM,cAAc,GAAG,IAAuC,CAAA;QAE9D,IAAI,CAAC,qBAAqB;YACxB,cAAc,CAAC,qBAAqB;gBACpC,gBAAgB,CAAC,wBAAwB,EAAE,CAAC,eAAe,CAAA;QAE7D,IAAI,CAAC,wBAAwB;YAC3B,cAAc,CAAC,wBAAwB,IAAI,2BAA2B,EAAE,CAAA;QAE1E,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,CAAA;QACzD,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QAEpE,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,SAAS,IAAI,IAAI,SAAS,EAAE,CAAA;QAC5D,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,cAAc,CAAA;QACrC,IAAI,CAAC,kBAAkB;YACrB,IAAI,CAAC,kBAAkB;gBACvB,IAAI,qBAAqB,CACvB,mBAAmB,EACnB,iCAAiC,CAClC,CAAA;QAEH,IAAI,CAAC,UAAU;YACb,IAAI,CAAC,cAAc,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAE3E,IAAI,CAAC,cAAc,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAE3E,IAAI,CAAC,sBAAsB,GAAG,IAAI,6BAA6B,CAC7D,IAAI,CAAC,SAAS,CACf,CAAA;QACD,IAAI,CAAC,sBAAsB,GAAG,IAAI,sBAAsB,CACtD,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,qBAAqB,EAC1B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAC5E,IAAI,CAAC,WAAW,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACpE,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CACnC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,CACvC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CACzC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,kBAAkB,CACjC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC9D,IAAI,CAAC,aAAa,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC1E,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,EAAY;QACpC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,kBAAkB,EAAE,CAAA;QAChC,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;QAClE,MAAM,YAAY,CAAC,YAAY,EAAE,CAAA;IACnC,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,EAAY;QAC/B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;QAClE,OAAO,YAAY,CAAC,OAAO,EAAE,CAAA;IAC/B,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,EAAY;QACnC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;QAClE,MAAM,YAAY,CAAC,WAAW,EAAE,CAAA;IAClC,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAA;QACrC,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAA;IACnC,CAAC;CACF"}
+{"version":3,"file":"secureCommsClient.js","sourceRoot":"","sources":["../../src/public/secureCommsClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,aAAa,EACb,qBAAqB,EAErB,kBAAkB,GAGnB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAEL,QAAQ,IAAI,gBAAgB,GAC7B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,GAOrB,MAAM,WAAW,CAAA;AAClB,OAAO,EAAkB,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAChF,OAAO,EACL,wBAAwB,GAEzB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,oBAAoB,EAAiB,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAe,MAAM,uBAAuB,CAAA;AAEvE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAA;AAC5D,OAAO,EAEL,2BAA2B,GAC5B,MAAM,+BAA+B,CAAA;AAEtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAA;AACnG,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAA;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAA;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAA;AAmIvE,MAAM,OAAO,wBAAwB;IAwBnC,YAAmB,IAA8B;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QAEnD,MAAM,cAAc,GAAG,IAAuC,CAAA;QAE9D,IAAI,CAAC,qBAAqB;YACxB,cAAc,CAAC,qBAAqB;gBACpC,gBAAgB,CAAC,wBAAwB,EAAE,CAAC,eAAe,CAAA;QAE7D,IAAI,CAAC,wBAAwB;YAC3B,cAAc,CAAC,wBAAwB,IAAI,2BAA2B,EAAE,CAAA;QAE1E,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,CAAA;QACzD,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QAEpE,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,SAAS,IAAI,IAAI,SAAS,EAAE,CAAA;QAC5D,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,cAAc,CAAA;QACrC,IAAI,CAAC,kBAAkB;YACrB,IAAI,CAAC,kBAAkB;gBACvB,IAAI,qBAAqB,CACvB,mBAAmB,EACnB,iCAAiC,CAClC,CAAA;QAEH,IAAI,CAAC,UAAU;YACb,IAAI,CAAC,cAAc,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAE3E,IAAI,CAAC,cAAc,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CACtC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,uCAAuC,IAAI,CAAC,CAClD,CAAA;QAED,IAAI,CAAC,sBAAsB,GAAG,IAAI,6BAA6B,CAC7D,IAAI,CAAC,SAAS,CACf,CAAA;QACD,IAAI,CAAC,sBAAsB,GAAG,IAAI,sBAAsB,CACtD,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,qBAAqB,EAC1B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAC5E,IAAI,CAAC,WAAW,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACpE,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CACnC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,CACvC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CACzC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,kBAAkB,CACjC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,wBAAwB,CAC9B,CAAA;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC9D,IAAI,CAAC,aAAa,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC1E,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,EAAY;QACpC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,kBAAkB,EAAE,CAAA;QAChC,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;QAClE,MAAM,YAAY,CAAC,YAAY,EAAE,CAAA;IACnC,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,EAAY;QAC/B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;QAClE,OAAO,YAAY,CAAC,OAAO,EAAE,CAAA;IAC/B,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,EAAY;QACnC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;QAClE,MAAM,YAAY,CAAC,WAAW,EAAE,CAAA;IAClC,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAA;QACrC,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAA;IACnC,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sudoplatform/sudo-secure-communications",
-  "version": "5.1.3",
+  "version": "5.1.5",
   "author": "Anonyome Labs, Inc.",
   "license": "Apache-2.0",
   "repository": {
@@ -65,15 +65,14 @@
     "@sudoplatform/sudo-user": "^16.0.0"
   },
   "dependencies": {
-    "@aws-sdk/client-s3": "^3.369.0",
-    "@aws-sdk/credential-provider-cognito-identity": "^3.369.0",
-    "@aws-sdk/credential-providers": "^3.369.0",
-    "@aws-sdk/lib-storage": "^3.369.0",
+    "@aws-sdk/client-s3": "^3.965.0",
+    "@aws-sdk/credential-provider-cognito-identity": "^3.965.0",
+    "@aws-sdk/credential-providers": "^3.965.0",
+    "@aws-sdk/lib-storage": "^3.965.0",
     "@matrix-org/matrix-sdk-crypto-wasm": "15.3.0",
     "@sudoplatform/sudo-web-crypto-provider": "^10.0.1",
     "@types/md5": "^2.3.6",
     "async-mutex": "^0.5.0",
-    "aws-sdk": "^2.1412.0",
     "blurhash": "^2.0.5",
     "fflate": "^0.8.2",
     "fp-ts": "^2.16.11",
@@ -165,10 +164,20 @@
   },
   "packageManager": "yarn@4.12.0+sha512.f45ab632439a67f8bc759bf32ead036a1f413287b9042726b7cc4818b7b49e14e9423ba49b18f9e06ea4941c1ad062385b1d8760a8d5091a1a31e5f6219afca8",
   "auditSuppressions": {
-    "1109754": {
-      "until": 1765917031,
-      "untilISO": "2025-12-16T20:30:31Z",
-      "reason": "awaiting patch from js-yaml"
+    "1111987": {
+      "until": 1772203020,
+      "untilISO": "2026-2-28T00:37:00Z",
+      "reason": "Waiting for patch - @smithy/config-resolver"
+    },
+    "1112255": {
+      "until": 1772203020,
+      "untilISO": "2026-2-28T00:37:00Z",
+      "reason": "node-tar used by bufferutil by websocket"
+    },
+    "1112329": {
+      "until": 1772203020,
+      "untilISO": "2026-2-28T00:37:00Z",
+      "reason": "node-tar used by bufferutil by websocket"
     }
   }
 }

package/types/private/data/session/sessionManager.d.ts

@@ -4,12 +4,25 @@ import { MatrixClientManager } from '../common/matrixClientManager';
 export declare class SessionManager {
     private readonly sessionService;
     private readonly storageModule;
+    private readonly autoRefreshTokenMinutesBeforeExpiration;
     private readonly log;
     private readonly sessions;
-    constructor(sessionService: SessionService, storageModule: StorageModule);
+    constructor(sessionService: SessionService, storageModule: StorageModule, autoRefreshTokenMinutesBeforeExpiration: number);
     deleteSession(handleId: HandleId, deleteStorage?: boolean): Promise<void>;
     reset(): Promise<void>;
     getMatrixClient(handleId: HandleId): Promise<MatrixClientManager>;
     ensureValidSession(handleId: HandleId, storePassphrase?: string): Promise<string>;
+    private decodeToken;
+    private isTokenExpired;
+    private isTokenExpiringSoon;
+    private isTokenExpiredOrExpiringSoon;
+    private scheduleTokenRefresh;
+    private tryUseCachedSession;
+    private handleExpiredToken;
+    private refreshCachedSessionToken;
+    private getAccessTokenFromStorage;
+    private getAccessTokenFromService;
+    private getAccessTokenFromStorageOrService;
+    private createNewSession;
     private createMatrixClient;
 }

package/types/public/secureCommsClient.d.ts

@@ -111,6 +111,8 @@ export type SecureCommsClientOptions = {
     sudoKeyManager?: SudoKeyManager;
     /** StorageProviderFactory to use. Default is undefined, which will make the client use in-memory storage. */
     storageProviderFactory?: StorageProviderFactory;
+    /** AutoRefreshTokenMinutesBeforeExpiration to use. Default is 5 minutes. Set to 0 to disable automatic token refresh. */
+    autoRefreshTokenMinutesBeforeExpiration?: number;
 };
 export declare class DefaultSecureCommsClient implements SecureCommsClient {
     handles: HandlesModule;