@tidecloak/js 0.13.14 → 0.13.15

package/dist/types/src/IAMService.d.ts

@@ -136,6 +136,7 @@ declare class IAMService {
     _nativeRequestEnclave: RequestEnclave | null;
     _nativeEncryptionCallbackUnsubscribe: any;
     _pendingEncryptionRequests: Map<any, any>;
+    _dpopProvider: import("../lib/tidecloak-dpop.js").DPoPSignatureProvider | null;
     /**
      * Register an event listener.
      * @param {'ready'|'initError'|'authSuccess'|'authError'|'authRefreshSuccess'|'authRefreshError'|'logout'|'tokenExpired'} event
@@ -280,6 +281,36 @@ declare class IAMService {
         encrypted: string | Uint8Array;
         tags: string[];
     }[]): Promise<(string | Uint8Array)[]>;
+    /**
+     * Drop-in replacement for fetch that automatically handles DPoP authentication.
+     * If the request includes a Bearer token matching the TideCloak-managed token,
+     * it's replaced with DPoP authorization and proof. Also manages resource server
+     * nonces automatically. Otherwise, behaves like regular fetch.
+     *
+     * @param {string|URL|RequestInfo} url - The resource URL to fetch
+     * @param {RequestInit} [init] - Optional fetch init options (same as standard fetch)
+     * @returns {Promise<Response>} A promise that resolves to the fetch Response
+     * @throws {Error} In hybrid mode (tokens are server-side)
+     *
+     * @example
+     * ```js
+     * const token = await IAMService.getToken();
+     * const response = await IAMService.secureFetch('https://api.example.com/data', {
+     *   method: 'POST',
+     *   headers: {
+     *     'Authorization': `Bearer ${token}`,
+     *     'Content-Type': 'application/json',
+     *   },
+     *   body: JSON.stringify({ key: 'value' }),
+     * });
+     * ```
+     */
+    secureFetch(url: string | URL | RequestInfo, init?: RequestInit): Promise<Response>;
+    /**
+     * Native mode secure fetch with DPoP support.
+     * @private
+     */
+    private _nativeSecureFetch;
     /**
      * Logout, clear cookie/session, then redirect.
      * In hybrid mode, clears local state and emits logout event.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tidecloak/js",
-  "version": "0.13.14",
+  "version": "0.13.15",
   "type": "module",
   "main": "dist/cjs/src/index.js",
   "module": "dist/esm/src/index.js",
@@ -32,6 +32,6 @@
     "silent-check-sso.html"
   ],
   "dependencies": {
-    "heimdall-tide": "^0.13.14"
+    "heimdall-tide": "^0.13.15"
   }
 }