@supabase/auth-js 2.110.9-canary.0 → 2.110.9-canary.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supabase/auth-js",
-  "version": "2.110.9-canary.0",
+  "version": "2.110.9-canary.2",
   "private": false,
   "description": "Official SDK for Supabase Auth",
   "keywords": [

package/src/GoTrueClient.ts

@@ -4290,10 +4290,18 @@ export default class GoTrueClient {
       } catch (err) {
         await this.stateChangeEmitters.get(id)?.callback('INITIAL_SESSION', null)
         this._debug('INITIAL_SESSION', 'callback id', id, 'error', err)
-        if (isAuthSessionMissingError(err) || isAuthRetryableFetchError(err)) {
-          // A missing session or a transient/aborted network failure (e.g. a
-          // superseded page navigation cancelling the in-flight request) is
-          // not an application error — warn rather than surface it raw.
+        if (
+          isAuthSessionMissingError(err) ||
+          isAuthRetryableFetchError(err) ||
+          (isAuthApiError(err) &&
+            (err.code === 'refresh_token_not_found' ||
+              err.code === 'refresh_token_already_used' ||
+              err.code === 'session_expired'))
+        ) {
+          // A missing session, a transient/aborted network failure (e.g. a
+          // superseded page navigation cancelling the in-flight request), or
+          // a dead refresh token (e.g. stale SSR cookies) is not an
+          // application error — warn rather than surface it raw.
           console.warn(err)
         } else {
           console.error(err)

package/src/lib/version.ts

@@ -4,4 +4,4 @@
 // - Debugging and support (identifying which version is running)
 // - Telemetry and logging (version reporting in errors/analytics)
 // - Ensuring build artifacts match the published package version
-export const version = '2.110.9-canary.0'
+export const version = '2.110.9-canary.2'