@tdacorp/identity-client 0.2.4 → 0.2.5

package/dist/{chunk-HO6U23GY.js → chunk-36WOXP7V.js}

@@ -1,6 +1,7 @@
 // src/discovery.ts
 import { createRemoteJWKSet } from "jose";
 var DISCOVERY_CACHE_TTL_MS = 6e5;
+var FETCH_TIMEOUT_MS = 2500;
 var CACHE_MAX_ENTRIES = 100;
 var discoveryCache = /* @__PURE__ */ new Map();
 var discoveryPending = /* @__PURE__ */ new Map();
@@ -71,7 +72,10 @@ async function fetchDiscovery(issuerUrl) {
   }
   const pending = discoveryPending.get(issuerUrl);
   if (pending) return pending;
-  const promise = fetch(discoveryUrl(issuerUrl), { headers: { Accept: "application/json" } }).then(
+  const promise = fetch(discoveryUrl(issuerUrl), {
+    headers: { Accept: "application/json" },
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+  }).then(
     async (response) => {
       if (!response.ok) {
         throw new Error(`Discovery fetch for ${issuerUrl} failed: HTTP ${response.status}`);
@@ -128,6 +132,7 @@ function generateState() {
 }
 
 // src/token.ts
+var FETCH_TIMEOUT_MS2 = 2500;
 var TokenRequestError = class extends Error {
   status;
   error;
@@ -176,14 +181,29 @@ async function postTokenRequest(tokenEndpoint, clientId, clientSecret, clientAut
   } else {
     body.set("client_id", clientId);
   }
-  return fetch(tokenEndpoint, { method: "POST", headers, body: body.toString() });
+  return fetch(tokenEndpoint, {
+    method: "POST",
+    headers,
+    body: body.toString(),
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS2)
+  });
+}
+async function postTokenRequestOrThrow(tokenEndpoint, clientId, clientSecret, clientAuthMethod, params) {
+  try {
+    return await postTokenRequest(tokenEndpoint, clientId, clientSecret, clientAuthMethod, params);
+  } catch (error) {
+    throw new TokenRequestError({
+      error: "network_failure",
+      errorDescription: error instanceof Error ? error.message : "Failed to reach the token endpoint"
+    });
+  }
 }
 async function readTokenResponseBody(response) {
   return await response.json().catch(() => null);
 }
 async function exchangeAuthorizationCode(options) {
   const discovery = await fetchDiscoveryForTokenRequest(options.issuer);
-  const response = await postTokenRequest(
+  const response = await postTokenRequestOrThrow(
     discovery.token_endpoint,
     options.clientId,
     options.clientSecret,
@@ -203,7 +223,7 @@ async function exchangeAuthorizationCode(options) {
 }
 async function clientCredentialsGrant(options) {
   const discovery = await fetchDiscoveryForTokenRequest(options.issuer);
-  const response = await postTokenRequest(
+  const response = await postTokenRequestOrThrow(
     discovery.token_endpoint,
     options.clientId,
     options.clientSecret,

package/dist/index.cjs

@@ -38,6 +38,7 @@ module.exports = __toCommonJS(index_exports);
 // src/discovery.ts
 var import_jose = require("jose");
 var DISCOVERY_CACHE_TTL_MS = 6e5;
+var FETCH_TIMEOUT_MS = 2500;
 var CACHE_MAX_ENTRIES = 100;
 var discoveryCache = /* @__PURE__ */ new Map();
 var discoveryPending = /* @__PURE__ */ new Map();
@@ -108,7 +109,10 @@ async function fetchDiscovery(issuerUrl) {
   }
   const pending = discoveryPending.get(issuerUrl);
   if (pending) return pending;
-  const promise = fetch(discoveryUrl(issuerUrl), { headers: { Accept: "application/json" } }).then(
+  const promise = fetch(discoveryUrl(issuerUrl), {
+    headers: { Accept: "application/json" },
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+  }).then(
     async (response) => {
       if (!response.ok) {
         throw new Error(`Discovery fetch for ${issuerUrl} failed: HTTP ${response.status}`);
@@ -165,6 +169,7 @@ function generateState() {
 }
 
 // src/token.ts
+var FETCH_TIMEOUT_MS2 = 2500;
 var TokenRequestError = class extends Error {
   status;
   error;
@@ -213,14 +218,29 @@ async function postTokenRequest(tokenEndpoint, clientId, clientSecret, clientAut
   } else {
     body.set("client_id", clientId);
   }
-  return fetch(tokenEndpoint, { method: "POST", headers, body: body.toString() });
+  return fetch(tokenEndpoint, {
+    method: "POST",
+    headers,
+    body: body.toString(),
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS2)
+  });
+}
+async function postTokenRequestOrThrow(tokenEndpoint, clientId, clientSecret, clientAuthMethod, params) {
+  try {
+    return await postTokenRequest(tokenEndpoint, clientId, clientSecret, clientAuthMethod, params);
+  } catch (error) {
+    throw new TokenRequestError({
+      error: "network_failure",
+      errorDescription: error instanceof Error ? error.message : "Failed to reach the token endpoint"
+    });
+  }
 }
 async function readTokenResponseBody(response) {
   return await response.json().catch(() => null);
 }
 async function exchangeAuthorizationCode(options) {
   const discovery = await fetchDiscoveryForTokenRequest(options.issuer);
-  const response = await postTokenRequest(
+  const response = await postTokenRequestOrThrow(
     discovery.token_endpoint,
     options.clientId,
     options.clientSecret,
@@ -240,7 +260,7 @@ async function exchangeAuthorizationCode(options) {
 }
 async function clientCredentialsGrant(options) {
   const discovery = await fetchDiscoveryForTokenRequest(options.issuer);
-  const response = await postTokenRequest(
+  const response = await postTokenRequestOrThrow(
     discovery.token_endpoint,
     options.clientId,
     options.clientSecret,

package/dist/index.js

@@ -11,7 +11,7 @@ import {
   refreshTokens,
   verifyAccessToken,
   verifyIdToken
-} from "./chunk-HO6U23GY.js";
+} from "./chunk-36WOXP7V.js";
 export {
   CLOCK_SKEW_TOLERANCE_SECONDS,
   TokenRequestError,

package/dist/next.cjs

@@ -29,6 +29,7 @@ var import_server = require("next/server");
 // src/discovery.ts
 var import_jose = require("jose");
 var DISCOVERY_CACHE_TTL_MS = 6e5;
+var FETCH_TIMEOUT_MS = 2500;
 var CACHE_MAX_ENTRIES = 100;
 var discoveryCache = /* @__PURE__ */ new Map();
 var discoveryPending = /* @__PURE__ */ new Map();
@@ -99,7 +100,10 @@ async function fetchDiscovery(issuerUrl) {
   }
   const pending = discoveryPending.get(issuerUrl);
   if (pending) return pending;
-  const promise = fetch(discoveryUrl(issuerUrl), { headers: { Accept: "application/json" } }).then(
+  const promise = fetch(discoveryUrl(issuerUrl), {
+    headers: { Accept: "application/json" },
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+  }).then(
     async (response) => {
       if (!response.ok) {
         throw new Error(`Discovery fetch for ${issuerUrl} failed: HTTP ${response.status}`);
@@ -156,6 +160,7 @@ function generateState() {
 }
 
 // src/token.ts
+var FETCH_TIMEOUT_MS2 = 2500;
 var TokenRequestError = class extends Error {
   status;
   error;
@@ -204,14 +209,29 @@ async function postTokenRequest(tokenEndpoint, clientId, clientSecret, clientAut
   } else {
     body.set("client_id", clientId);
   }
-  return fetch(tokenEndpoint, { method: "POST", headers, body: body.toString() });
+  return fetch(tokenEndpoint, {
+    method: "POST",
+    headers,
+    body: body.toString(),
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS2)
+  });
+}
+async function postTokenRequestOrThrow(tokenEndpoint, clientId, clientSecret, clientAuthMethod, params) {
+  try {
+    return await postTokenRequest(tokenEndpoint, clientId, clientSecret, clientAuthMethod, params);
+  } catch (error) {
+    throw new TokenRequestError({
+      error: "network_failure",
+      errorDescription: error instanceof Error ? error.message : "Failed to reach the token endpoint"
+    });
+  }
 }
 async function readTokenResponseBody(response) {
   return await response.json().catch(() => null);
 }
 async function exchangeAuthorizationCode(options) {
   const discovery = await fetchDiscoveryForTokenRequest(options.issuer);
-  const response = await postTokenRequest(
+  const response = await postTokenRequestOrThrow(
     discovery.token_endpoint,
     options.clientId,
     options.clientSecret,

package/dist/next.js

@@ -5,7 +5,7 @@ import {
   generateCodeVerifier,
   generateState,
   verifyIdToken
-} from "./chunk-HO6U23GY.js";
+} from "./chunk-36WOXP7V.js";
 import {
   seal,
   unseal

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tdacorp/identity-client",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "OIDC relying-party client for TDACorp Identity: discovery, PKCE, token exchange, token verification and Next.js route helpers.",
   "license": "MIT",
   "bugs": {