@visin/frontend-core 0.1.1

package/README.md

@@ -0,0 +1,33 @@
+# @visin/frontend-core
+
+Shared frontend auth/API-client logic for Visin frontends.
+
+## Installation
+
+```bash
+npm install @visin/frontend-core
+```
+
+## Usage
+
+```typescript
+import { createApiClient } from '@visin/frontend-core';
+
+export const api = createApiClient({
+  baseUrl: () => getGlobalConfig().VISION_API_URL,
+  getToken: () => localStorage.getItem('authToken'),
+  onUnauthorized: () => { window.location.href = '/login'; }
+});
+
+const { id } = await api.get('/projects/123');
+```
+
+## Status
+
+Only `createApiClient` is extracted so far — it matches the Bearer-token-from-
+`localStorage` transport already used independently in `account-front` and
+`vision-front`. Auth state (login/logout/session) is **not** unified yet:
+`account-front`, `auth-front`, and `vision-front` each implement it differently
+(`authService.ts`, `authFlow.ts`, `AuthContext.tsx`) rather than as copies of one
+pattern, so that needs its own design pass before landing here. See the repo's
+`TODO.md`.

package/dist/apiClient.d.ts

@@ -0,0 +1,37 @@
+export interface ApiClientOptions {
+    /** Read fresh at call time (app config may not be resolved yet at module load). */
+    baseUrl: () => string;
+    /** Reads the current auth token, e.g. `() => localStorage.getItem('authToken')`. */
+    getToken?: () => string | null;
+    /** Called on a 401 response, e.g. to redirect to the login page. */
+    onUnauthorized?: () => void;
+}
+export interface ApiRequestOptions extends RequestInit {
+    /** Skip the onUnauthorized callback for this call (e.g. an auth-check that expects 401 as a normal "not logged in" result, not a hard redirect). */
+    skipAuthRedirect?: boolean;
+}
+export declare class ApiError extends Error {
+    status: number;
+    body: unknown;
+    constructor(status: number, message: string, body?: unknown);
+}
+/**
+ * Generic authenticated JSON fetch wrapper — base URL handling, Bearer-token
+ * auth, structured errors, and an opt-in 401 → redirect-to-auth hook.
+ *
+ * Matches the auth transport all four Visin services actually use today
+ * (a Bearer token read from `localStorage`, not a cookie), unlike a
+ * cookie-based client would. Each front currently hand-rolls this
+ * (`account-front/services/authService.ts`, `vision-front/config/visionApi.ts`)
+ * with near-identical logic; new call sites can adopt this instead.
+ */
+export declare function createApiClient(options: ApiClientOptions): {
+    request: <T = unknown>(path: string, init?: ApiRequestOptions) => Promise<T>;
+    get: <T = unknown>(path: string, init?: ApiRequestOptions) => Promise<T>;
+    post: <T = unknown>(path: string, body?: unknown, init?: ApiRequestOptions) => Promise<T>;
+    put: <T = unknown>(path: string, body?: unknown, init?: ApiRequestOptions) => Promise<T>;
+    patch: <T = unknown>(path: string, body?: unknown, init?: ApiRequestOptions) => Promise<T>;
+    delete: <T = unknown>(path: string, init?: ApiRequestOptions) => Promise<T>;
+};
+export type ApiClient = ReturnType<typeof createApiClient>;
+//# sourceMappingURL=apiClient.d.ts.map

package/dist/apiClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiClient.d.ts","sourceRoot":"","sources":["../src/apiClient.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,mFAAmF;IACnF,OAAO,EAAE,MAAM,MAAM,CAAC;IACtB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC/B,oEAAoE;IACpE,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAkB,SAAQ,WAAW;IACpD,oJAAoJ;IACpJ,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,qBAAa,QAAS,SAAQ,KAAK;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;gBAEF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO;CAM5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB;cAChC,CAAC,kBAAkB,MAAM,SAAQ,iBAAiB,KAAQ,OAAO,CAAC,CAAC,CAAC;UAoCnF,CAAC,kBAAkB,MAAM,SAAS,iBAAiB;WAClD,CAAC,kBAAkB,MAAM,SAAS,OAAO,SAAS,iBAAiB;UAEpE,CAAC,kBAAkB,MAAM,SAAS,OAAO,SAAS,iBAAiB;YAEjE,CAAC,kBAAkB,MAAM,SAAS,OAAO,SAAS,iBAAiB;aAElE,CAAC,kBAAkB,MAAM,SAAS,iBAAiB;EAE/D;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/apiClient.js

@@ -0,0 +1,59 @@
+export class ApiError extends Error {
+    constructor(status, message, body) {
+        super(message);
+        this.name = 'ApiError';
+        this.status = status;
+        this.body = body;
+    }
+}
+/**
+ * Generic authenticated JSON fetch wrapper — base URL handling, Bearer-token
+ * auth, structured errors, and an opt-in 401 → redirect-to-auth hook.
+ *
+ * Matches the auth transport all four Visin services actually use today
+ * (a Bearer token read from `localStorage`, not a cookie), unlike a
+ * cookie-based client would. Each front currently hand-rolls this
+ * (`account-front/services/authService.ts`, `vision-front/config/visionApi.ts`)
+ * with near-identical logic; new call sites can adopt this instead.
+ */
+export function createApiClient(options) {
+    async function request(path, init = {}) {
+        const { skipAuthRedirect, headers, ...rest } = init;
+        const token = options.getToken?.();
+        const response = await fetch(`${options.baseUrl()}${path}`, {
+            ...rest,
+            headers: {
+                'Content-Type': 'application/json',
+                ...(token && { Authorization: `Bearer ${token}` }),
+                ...headers
+            }
+        });
+        if (response.status === 401 && !skipAuthRedirect) {
+            options.onUnauthorized?.();
+        }
+        if (!response.ok) {
+            let body;
+            try {
+                body = await response.json();
+            }
+            catch {
+                // response wasn't JSON — leave body undefined
+            }
+            const message = body?.message ?? `HTTP error! status: ${response.status}`;
+            throw new ApiError(response.status, message, body);
+        }
+        if (response.status === 204) {
+            return undefined;
+        }
+        return response.json();
+    }
+    return {
+        request,
+        get: (path, init) => request(path, { ...init, method: 'GET' }),
+        post: (path, body, init) => request(path, { ...init, method: 'POST', body: body !== undefined ? JSON.stringify(body) : undefined }),
+        put: (path, body, init) => request(path, { ...init, method: 'PUT', body: body !== undefined ? JSON.stringify(body) : undefined }),
+        patch: (path, body, init) => request(path, { ...init, method: 'PATCH', body: body !== undefined ? JSON.stringify(body) : undefined }),
+        delete: (path, init) => request(path, { ...init, method: 'DELETE' })
+    };
+}
+//# sourceMappingURL=apiClient.js.map

package/dist/apiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiClient.js","sourceRoot":"","sources":["../src/apiClient.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAIjC,YAAY,MAAc,EAAE,OAAe,EAAE,IAAc;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,KAAK,UAAU,OAAO,CAAc,IAAY,EAAE,OAA0B,EAAE;QAC5E,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE;YAC1D,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,KAAK,IAAI,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;gBAClD,GAAG,OAAO;aACX;SACF,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjD,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;YACD,MAAM,OAAO,GAAI,IAAyC,EAAE,OAAO,IAAI,uBAAuB,QAAQ,CAAC,MAAM,EAAE,CAAC;YAChH,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,SAAc,CAAC;QACxB,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,OAAO;QACL,OAAO;QACP,GAAG,EAAE,CAAc,IAAY,EAAE,IAAwB,EAAE,EAAE,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1G,IAAI,EAAE,CAAc,IAAY,EAAE,IAAc,EAAE,IAAwB,EAAE,EAAE,CAC5E,OAAO,CAAI,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5G,GAAG,EAAE,CAAc,IAAY,EAAE,IAAc,EAAE,IAAwB,EAAE,EAAE,CAC3E,OAAO,CAAI,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC3G,KAAK,EAAE,CAAc,IAAY,EAAE,IAAc,EAAE,IAAwB,EAAE,EAAE,CAC7E,OAAO,CAAI,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7G,MAAM,EAAE,CAAc,IAAY,EAAE,IAAwB,EAAE,EAAE,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;KACjH,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { createApiClient, ApiError } from './apiClient';
+export type { ApiClientOptions, ApiRequestOptions, ApiClient } from './apiClient';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACxD,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+// @visin/frontend-core - Shared frontend auth/API-client logic for Visin frontends
+export { createApiClient, ApiError } from './apiClient';
+// Not yet extracted: account-front's `authService.ts`, auth-front's
+// `authFlow.ts`, and vision-front's `AuthContext.tsx` implement auth
+// (token storage, login/logout, session checks) three different ways
+// rather than as copies of one pattern, so unifying them needs its own
+// design pass across all three before landing here — see TODO.md.
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGxD,oEAAoE;AACpE,qEAAqE;AACrE,qEAAqE;AACrE,uEAAuE;AACvE,kEAAkE"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@visin/frontend-core",
+  "version": "0.1.1",
+  "description": "Shared frontend auth/API-client logic for Visin frontends",
+  "author": "Toomas Tahves",
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/visin-platform/visin-monorepo.git",
+    "directory": "libs/frontend-core"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run clean && npm run build",
+    "release": "standard-version && npm run build && npm publish --access public",
+    "release:beta": "standard-version --prerelease beta && npm run build && npm publish --access public --tag beta",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint . --max-warnings 0",
+    "typecheck": "tsc --noEmit"
+  },
+  "keywords": [
+    "visin",
+    "frontend",
+    "shared",
+    "auth",
+    "api-client"
+  ],
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^26.0.1",
+    "@vitest/coverage-v8": "^3.2.4",
+    "eslint": "^10.6.0",
+    "jsdom": "^26.1.0",
+    "standard-version": "^9.5.0",
+    "typescript": "^6.0.3",
+    "typescript-eslint": "^8.62.1",
+    "vitest": "^3.2.4"
+  }
+}