academe-kit 0.6.8 → 0.7.0

package/dist/index.cjs

@@ -5984,37 +5984,20 @@ exports.GLOBAL_ROLES = void 0;
     GLOBAL_ROLES["GUARDIAN"] = "guardian";
 })(exports.GLOBAL_ROLES || (exports.GLOBAL_ROLES = {}));
 
-function detectMobileTokenSync() {
-    if (typeof window === "undefined") {
-        return { token: undefined, isMobile: false, decoded: null };
-    }
-    const keycloakConfig = window.keycloakConfig;
-    if (!keycloakConfig?.fromMobile || !keycloakConfig?.token) {
-        return { token: undefined, isMobile: false, decoded: null };
-    }
-    // Validar e decodificar o token mobile
-    try {
-        const decoded = jwtDecode(keycloakConfig.token);
-        if (!decoded) {
-            console.error("[SecurityProvider] Token mobile inválido - ignorando");
-            return { token: undefined, isMobile: false, decoded: null };
-        }
-        // Verificar se o token não está expirado
-        const now = Math.floor(Date.now() / 1000);
-        if (decoded.exp && decoded.exp < now) {
-            console.error("[SecurityProvider] Token mobile expirado - ignorando");
-            return { token: undefined, isMobile: false, decoded: null };
-        }
-        console.log("[SecurityProvider] ✅ Token mobile detectado síncronamente");
-        return { token: keycloakConfig.token, isMobile: true, decoded };
-    }
-    catch (error) {
-        console.error("[SecurityProvider] Erro ao decodificar token mobile:", error);
-        return { token: undefined, isMobile: false, decoded: null };
+const getCookie = (name) => {
+    if (typeof window === "undefined")
+        return null;
+    const value = `; ${document.cookie}`;
+    const parts = value.split(`; ${name}=`);
+    if (parts.length === 2) {
+        return parts.pop()?.split(";").shift() || null;
     }
-}
-// Detecta o token mobile UMA VEZ no carregamento do módulo
-const initialMobileState = detectMobileTokenSync();
+    return null;
+};
+const getAccessTokenFromCookies = () => {
+    const token = getCookie("KC_FORCE_AUTH_TOKEN");
+    return token || undefined;
+};
 const AcademeAuthProvider = ({ realm, hubUrl, children, clientId, keycloakUrl, apiBaseUrl, skipApiUserFetch, }) => {
     const oidcConfig = {
         authority: `${keycloakUrl}/realms/${realm}`,
@@ -6028,18 +6011,11 @@ const AcademeAuthProvider = ({ realm, hubUrl, children, clientId, keycloakUrl, a
         },
         automaticSilentRenew: true,
     };
-    // Se temos token mobile válido, NÃO monta o AuthProvider do OIDC
-    // Isso evita que ele tente fazer signinSilent() e cause erro CSP em iframes
-    if (initialMobileState.isMobile) {
-        console.log("[AcademeAuthProvider] 🖼️ Modo mobile/iframe - usando SecurityProviderMobileOnly");
-        return (jsxRuntime.jsx(SecurityProviderMobileOnly, { apiBaseUrl: apiBaseUrl, skipApiUserFetch: skipApiUserFetch, children: children }));
-    }
     return (jsxRuntime.jsx(AuthProvider, { ...oidcConfig, children: jsxRuntime.jsx(SecurityProvider, { hubUrl: hubUrl, apiBaseUrl: apiBaseUrl, skipApiUserFetch: skipApiUserFetch, children: children }) }));
 };
 const SecurityContext = React2.createContext({
     isInitialized: false,
     isTokenReady: false,
-    isMobileAuth: false,
     user: null,
     refreshUserData: async () => { },
     signOut: () => null,
@@ -6068,35 +6044,53 @@ const SecurityProvider = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipA
     const auth = useAuth();
     const [currentUser, setCurrentUser] = React2.useState(null);
     const [isRefreshing, setIsRefreshing] = React2.useState(false);
-    // CRÍTICO: Inicializar estados com valores do token mobile detectado síncronamente
-    // Isso garante que no primeiro render já temos os valores corretos
-    const hasTriedSignInSilent = React2.useRef(initialMobileState.isMobile);
-    const [isTokenReady, setIsTokenReady] = React2.useState(initialMobileState.isMobile);
-    // --- Estado para autenticação mobile (inicializado com detecção síncrona) ---
-    const [isMobileAuth, setIsMobileAuth] = React2.useState(initialMobileState.isMobile);
-    const [mobileToken, setMobileToken] = React2.useState(initialMobileState.token);
-    // Ref para armazenar o resolver da Promise de token
+    const hasTriedSignInSilent = React2.useRef(false);
+    const [isTokenReady, setIsTokenReady] = React2.useState(false);
     const tokenReadyResolverRef = React2.useRef(null);
     const tokenReadyPromiseRef = React2.useRef(null);
-    // Extrair valores primitivos do auth para usar como dependências estáveis
-    const isAuthenticated = auth.isAuthenticated;
+    const [accessToken, setAccessToken] = React2.useState(() => {
+        const cookieToken = getAccessTokenFromCookies();
+        return cookieToken || auth.user?.access_token;
+    });
+    const decodedAccessToken = React2.useMemo(() => {
+        return accessToken ? decodeAccessToken(accessToken) : null;
+    }, [accessToken]);
+    const userProfileSub = auth.user?.profile?.sub || decodedAccessToken?.sub;
+    const isAuthenticated = auth.isAuthenticated || !!accessToken;
     const isLoading = auth.isLoading;
     const activeNavigator = auth.activeNavigator;
-    const accessToken = auth.user?.access_token;
     const userProfile = auth.user?.profile;
-    const userProfileSub = auth.user?.profile?.sub;
-    // CRÍTICO: Inicializar currentTokenRef com o token mobile detectado síncronamente
-    // Isso garante que o middleware do apiClient já tenha o token no primeiro request
-    const currentTokenRef = React2.useRef(initialMobileState.token);
-    // Sincronizar window.accessToken se tivermos token mobile (executa síncronamente)
-    if (initialMobileState.token && typeof window !== "undefined" && !window.accessToken) {
-        window.accessToken = initialMobileState.token;
-    }
-    // --- 1. Silent Check Inicial (Check SSO) - Pulado se mobile ---
+    console.log(">> isAuthenticated:", isAuthenticated);
+    console.log(">> accessToken:", accessToken);
+    const currentTokenRef = React2.useRef(undefined);
+    // Efeito para sincronizar o token do auth com o state
+    // e também verificar cookies periodicamente
+    React2.useEffect(() => {
+        const cookieToken = getAccessTokenFromCookies();
+        const authToken = auth.user?.access_token;
+        // Prioridade: Cookie > Auth token
+        const newToken = cookieToken || authToken;
+        if (newToken && newToken !== accessToken) {
+            setAccessToken(newToken);
+        }
+    }, [auth.user?.access_token, accessToken]);
+    // Efeito opcional: verificar cookies em intervalos (útil se o cookie pode mudar externamente)
+    React2.useEffect(() => {
+        const checkCookieToken = () => {
+            const cookieToken = getAccessTokenFromCookies();
+            if (cookieToken && cookieToken !== accessToken) {
+                setAccessToken(cookieToken);
+            }
+        };
+        // Verifica a cada 5 segundos (ajuste conforme necessário)
+        const interval = setInterval(checkCookieToken, 5000);
+        return () => clearInterval(interval);
+    }, [accessToken]);
+    // --- 1. Silent Check Inicial (Check SSO) ---
     React2.useEffect(() => {
-        // Pular SSO check se já estamos em modo mobile
-        if (isMobileAuth) {
-            console.debug("[SecurityProvider] Modo mobile - pulando SSO check");
+        // Se já temos um token do cookie, não precisamos fazer silent check
+        if (accessToken) {
+            hasTriedSignInSilent.current = true;
             return;
         }
         if (!isAuthenticated &&
@@ -6109,31 +6103,19 @@ const SecurityProvider = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipA
             });
         }
         // eslint-disable-next-line react-hooks/exhaustive-deps
-    }, [isAuthenticated, isLoading, activeNavigator, isMobileAuth]);
+    }, [isAuthenticated, isLoading, activeNavigator, accessToken]);
     // --- 2. Configuração de API e Services ---
     const apiClient = React2.useMemo(() => {
         const client = createAcademeApiClient(apiBaseUrl);
-        // CRÍTICO: Se já temos token mobile, criar Promise já resolvida
-        // Isso evita que o middleware aguarde uma Promise que nunca será resolvida
-        if (initialMobileState.token) {
-            tokenReadyPromiseRef.current = Promise.resolve();
-            tokenReadyResolverRef.current = () => { };
-        }
-        else {
-            // Inicializa a Promise de token ready para modo OIDC
-            tokenReadyPromiseRef.current = new Promise((resolve) => {
-                tokenReadyResolverRef.current = resolve;
-            });
-        }
-        // Middleware que aguarda o token estar disponível antes de fazer requests
+        tokenReadyPromiseRef.current = new Promise((resolve) => {
+            tokenReadyResolverRef.current = resolve;
+        });
         client.use({
             async onRequest({ request }) {
-                // Se já tem token, usa imediatamente
                 if (currentTokenRef.current) {
                     request.headers.set("Authorization", `Bearer ${currentTokenRef.current}`);
                     return request;
                 }
-                // Se ainda está carregando a auth, aguarda o token ficar pronto
                 if (tokenReadyPromiseRef.current) {
                     await tokenReadyPromiseRef.current;
                     if (currentTokenRef.current) {
@@ -6148,56 +6130,33 @@ const SecurityProvider = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipA
     const services = React2.useMemo(() => {
         return createAcademeServices(apiClient);
     }, [apiClient]);
-    // Token efetivo: prioriza mobile, depois OIDC
-    const effectiveToken = mobileToken || accessToken;
-    const decodedAccessToken = React2.useMemo(() => {
-        return effectiveToken ? decodeAccessToken(effectiveToken) : null;
-    }, [effectiveToken]);
-    // Atualização do Token e resolução da Promise
-    // Não sobrescreve se estamos em modo mobile
     React2.useEffect(() => {
-        // Se estamos em modo mobile, o token já foi configurado
-        if (isMobileAuth) {
-            return;
-        }
         currentTokenRef.current = accessToken;
         if (typeof window !== "undefined") {
             window.accessToken = accessToken;
         }
         if (accessToken) {
-            // Resolve a promise indicando que o token está pronto
             if (tokenReadyResolverRef.current) {
                 tokenReadyResolverRef.current();
                 setIsTokenReady(true);
             }
         }
         else if (!isLoading && !isAuthenticated) {
-            // Usuário não autenticado - resolve a promise para não bloquear requests públicas
             if (tokenReadyResolverRef.current) {
                 tokenReadyResolverRef.current();
                 setIsTokenReady(true);
             }
         }
-    }, [accessToken, isLoading, isAuthenticated, isMobileAuth]);
-    // --- 3. Helpers de Usuário e Roles ---
+    }, [accessToken, isLoading, isAuthenticated]);
     const getKeycloakUser = React2.useCallback(() => {
-        // Se estamos em modo mobile, extrair do token decodificado
-        if (isMobileAuth && decodedAccessToken) {
-            return {
-                email: decodedAccessToken.email || "",
-                name: decodedAccessToken.given_name || "",
-                lastName: decodedAccessToken.family_name || "",
-            };
-        }
-        // Modo OIDC normal
         const profile = userProfile;
         return {
-            email: profile?.email || "",
-            name: profile?.given_name || "",
-            lastName: profile?.family_name || "",
-            avatar_url: decodedAccessToken?.avatar_url
+            email: profile?.email || decodedAccessToken?.email || "",
+            name: profile?.given_name || decodedAccessToken?.given_name || "",
+            lastName: profile?.family_name || decodedAccessToken?.family_name || "",
+            avatar_url: decodedAccessToken?.avatar_url,
         };
-    }, [userProfile, isMobileAuth, decodedAccessToken]);
+    }, [userProfile, decodedAccessToken]);
     const hasRealmRole = React2.useCallback((role) => {
         return decodedAccessToken?.realm_access?.roles?.includes(role) ?? false;
     }, [decodedAccessToken]);
@@ -6212,20 +6171,17 @@ const SecurityProvider = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipA
         }
         return Object.values(decodedAccessToken.resource_access).some((resource) => resource.roles?.includes(role));
     }, [decodedAccessToken]);
-    // Autenticação efetiva: mobile ou OIDC
-    const effectiveIsAuthenticated = isMobileAuth || isAuthenticated;
-    const effectiveUserSub = isMobileAuth ? decodedAccessToken?.sub : userProfileSub;
     // --- 4. Fetch de Dados do Usuário (Backend) ---
     React2.useEffect(() => {
         let isMounted = true;
         const fetchUserData = async () => {
-            if (effectiveIsAuthenticated) {
+            if (isAuthenticated) {
                 if (skipApiUserFetch) {
                     if (isMounted) {
                         const academeUser = {
                             keycloakUser: getKeycloakUser(),
                         };
-                        setCurrentUser({ ...academeUser, id: effectiveUserSub || "" });
+                        setCurrentUser({ ...academeUser, id: userProfileSub || "" });
                     }
                     return;
                 }
@@ -6243,7 +6199,7 @@ const SecurityProvider = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipA
                     console.error("[SecurityProvider] Error fetching user data:", error);
                 }
             }
-            else if (!effectiveIsAuthenticated && !isLoading && !isMobileAuth) {
+            else if (!isAuthenticated && !isLoading) {
                 if (isMounted) {
                     setCurrentUser(null);
                 }
@@ -6254,17 +6210,16 @@ const SecurityProvider = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipA
             isMounted = false;
         };
     }, [
-        effectiveIsAuthenticated,
+        isAuthenticated,
         isLoading,
         getKeycloakUser,
         services,
         skipApiUserFetch,
-        effectiveUserSub,
-        isMobileAuth,
+        userProfileSub,
     ]);
     const refreshUserData = React2.useCallback(async () => {
         setIsRefreshing(true);
-        if (effectiveIsAuthenticated) {
+        if (isAuthenticated) {
             if (skipApiUserFetch) {
                 await auth.signinSilent();
                 const academeUser = {
@@ -6288,11 +6243,10 @@ const SecurityProvider = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipA
             }
         }
         setIsRefreshing(false);
-    }, [effectiveIsAuthenticated, getKeycloakUser, services, skipApiUserFetch]);
+    }, [getKeycloakUser, services, skipApiUserFetch]);
     // --- 5. Ações de Auth ---
-    // SignOut para modo OIDC (web normal)
-    const signOutOidc = React2.useCallback(() => {
-        console.log("[KC LOGOUT - OIDC]");
+    const signOut = React2.useCallback(() => {
+        console.log("[KC LOGOUT!]");
         setCurrentUser(null);
         auth.removeUser();
         auth.signoutRedirect({
@@ -6300,32 +6254,6 @@ const SecurityProvider = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipA
         });
         auth.clearStaleState();
     }, [auth]);
-    // SignOut para modo mobile
-    const signOutMobile = React2.useCallback(() => {
-        console.log("[KC LOGOUT - Mobile]");
-        setCurrentUser(null);
-        setMobileToken(undefined);
-        setIsMobileAuth(false);
-        // Limpar tokens globais
-        if (typeof window !== "undefined") {
-            window.accessToken = undefined;
-            window.keycloakConfig = undefined;
-        }
-        currentTokenRef.current = undefined;
-        // Notificar o app mobile para fazer logout
-        if (window.ReactNativeWebView) {
-            window.ReactNativeWebView.postMessage(JSON.stringify({ type: "LOGOUT_REQUESTED" }));
-        }
-    }, []);
-    // SignOut unificado: escolhe automaticamente baseado no modo
-    const signOut = React2.useCallback(() => {
-        if (isMobileAuth) {
-            signOutMobile();
-        }
-        else {
-            signOutOidc();
-        }
-    }, [isMobileAuth, signOutMobile, signOutOidc]);
     const hasSchool = React2.useCallback((schoolId) => {
         if (hasRealmRole(exports.GLOBAL_ROLES.ADMIN_ACADEME)) {
             return true;
@@ -6333,217 +6261,36 @@ const SecurityProvider = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipA
         return (currentUser?.institutionRegistrations?.some((registration) => registration.institutionId === schoolId) ?? false);
     }, [hasRealmRole, currentUser?.institutionRegistrations]);
     const goToLogin = React2.useCallback(() => {
-        // Em modo mobile, notificar o app para fazer login
-        if (isMobileAuth && window.ReactNativeWebView) {
-            window.ReactNativeWebView.postMessage(JSON.stringify({ type: "LOGIN_REQUESTED" }));
-            return Promise.resolve();
-        }
         return auth.signinRedirect();
         // eslint-disable-next-line react-hooks/exhaustive-deps
-    }, [isMobileAuth]);
+    }, []);
     // Memoizar o value do context para evitar re-renders desnecessários
     const contextValue = React2.useMemo(() => ({
-        isInitialized: isMobileAuth ? true : (!isLoading || isRefreshing),
+        isInitialized: !isLoading || isRefreshing,
         isTokenReady,
-        isMobileAuth,
         user: currentUser,
         refreshUserData,
         signOut,
-        isAuthenticated: () => effectiveIsAuthenticated,
+        isAuthenticated: () => isAuthenticated,
         hasSchool,
         goToLogin,
         hasRealmRole,
         hasClientRole,
-        accessToken: effectiveToken,
+        accessToken,
         apiClient,
         services,
     }), [
-        isMobileAuth,
         isLoading,
         isTokenReady,
         currentUser,
         refreshUserData,
         signOut,
-        effectiveIsAuthenticated,
-        hasSchool,
-        goToLogin,
-        hasRealmRole,
-        hasClientRole,
-        effectiveToken,
-        apiClient,
-        services,
-    ]);
-    return (jsxRuntime.jsx(SecurityContext.Provider, { value: contextValue, children: children }));
-};
-/**
- * SecurityProvider para modo mobile/iframe (sem OIDC)
- * Usado quando já temos um token injetado pelo parent/mobile
- * Evita montar o AuthProvider que tentaria fazer signinSilent
- */
-const SecurityProviderMobileOnly = ({ apiBaseUrl = "https://stg-api.academe.com.br", skipApiUserFetch = false, children, }) => {
-    const [currentUser, setCurrentUser] = React2.useState(null);
-    const mobileToken = initialMobileState.token;
-    const decodedToken = initialMobileState.decoded;
-    // Ref para armazenar o token atual
-    const currentTokenRef = React2.useRef(mobileToken);
-    // Configurar token global na inicialização
-    React2.useEffect(() => {
-        if (mobileToken) {
-            window.accessToken = mobileToken;
-            currentTokenRef.current = mobileToken;
-        }
-    }, [mobileToken]);
-    // API Client com token já configurado
-    const apiClient = React2.useMemo(() => {
-        const client = createAcademeApiClient(apiBaseUrl);
-        client.use({
-            async onRequest({ request }) {
-                if (currentTokenRef.current) {
-                    request.headers.set("Authorization", `Bearer ${currentTokenRef.current}`);
-                }
-                return request;
-            },
-        });
-        return client;
-    }, [apiBaseUrl]);
-    const services = React2.useMemo(() => {
-        return createAcademeServices(apiClient);
-    }, [apiClient]);
-    const getKeycloakUser = React2.useCallback(() => {
-        if (decodedToken) {
-            return {
-                email: decodedToken.email || "",
-                name: decodedToken.given_name || "",
-                lastName: decodedToken.family_name || "",
-                avatar_url: decodedToken.avatar_url,
-            };
-        }
-        return { email: "", name: "", lastName: "" };
-    }, [decodedToken]);
-    const hasRealmRole = React2.useCallback((role) => {
-        return decodedToken?.realm_access?.roles?.includes(role) ?? false;
-    }, [decodedToken]);
-    const hasClientRole = React2.useCallback((role, clientId) => {
-        if (!decodedToken?.resource_access)
-            return false;
-        if (clientId) {
-            return (decodedToken.resource_access[clientId]?.roles?.includes(role) ?? false);
-        }
-        return Object.values(decodedToken.resource_access).some((resource) => resource.roles?.includes(role));
-    }, [decodedToken]);
-    // Fetch de dados do usuário
-    React2.useEffect(() => {
-        let isMounted = true;
-        const fetchUserData = async () => {
-            if (!mobileToken)
-                return;
-            if (skipApiUserFetch) {
-                if (isMounted) {
-                    const academeUser = {
-                        keycloakUser: getKeycloakUser(),
-                    };
-                    setCurrentUser({ ...academeUser, id: decodedToken?.sub || "" });
-                }
-                return;
-            }
-            try {
-                const response = await services.user.getMe();
-                if (isMounted && response?.data?.data) {
-                    const academeUser = {
-                        ...response.data.data,
-                        keycloakUser: getKeycloakUser(),
-                    };
-                    setCurrentUser(academeUser);
-                }
-            }
-            catch (error) {
-                console.error("[SecurityProviderMobileOnly] Error fetching user data:", error);
-            }
-        };
-        fetchUserData();
-        return () => {
-            isMounted = false;
-        };
-    }, [mobileToken, getKeycloakUser, services, skipApiUserFetch, decodedToken?.sub]);
-    const refreshUserData = React2.useCallback(async () => {
-        if (!mobileToken)
-            return;
-        if (skipApiUserFetch) {
-            const academeUser = {
-                keycloakUser: getKeycloakUser(),
-            };
-            setCurrentUser(academeUser);
-            return;
-        }
-        try {
-            const response = await services.user.getMe();
-            if (response?.data?.data) {
-                const academeUser = {
-                    ...response.data.data,
-                    keycloakUser: getKeycloakUser(),
-                };
-                setCurrentUser(academeUser);
-            }
-        }
-        catch (error) {
-            console.error("[SecurityProviderMobileOnly] Error refreshing user data:", error);
-        }
-    }, [mobileToken, getKeycloakUser, services, skipApiUserFetch]);
-    const signOut = React2.useCallback(() => {
-        console.log("[SecurityProviderMobileOnly] Logout");
-        setCurrentUser(null);
-        if (typeof window !== "undefined") {
-            window.accessToken = undefined;
-            window.keycloakConfig = undefined;
-        }
-        currentTokenRef.current = undefined;
-        // Notificar o parent/app mobile para fazer logout
-        if (window.ReactNativeWebView) {
-            window.ReactNativeWebView.postMessage(JSON.stringify({ type: "LOGOUT_REQUESTED" }));
-        }
-        if (window.parent && window.parent !== window) {
-            window.parent.postMessage({ type: "LOGOUT_REQUESTED" }, "*");
-        }
-    }, []);
-    const hasSchool = React2.useCallback((schoolId) => {
-        if (hasRealmRole(exports.GLOBAL_ROLES.ADMIN_ACADEME)) {
-            return true;
-        }
-        return (currentUser?.institutionRegistrations?.some((registration) => registration.institutionId === schoolId) ?? false);
-    }, [hasRealmRole, currentUser?.institutionRegistrations]);
-    const goToLogin = React2.useCallback(() => {
-        if (window.ReactNativeWebView) {
-            window.ReactNativeWebView.postMessage(JSON.stringify({ type: "LOGIN_REQUESTED" }));
-        }
-        if (window.parent && window.parent !== window) {
-            window.parent.postMessage({ type: "LOGIN_REQUESTED" }, "*");
-        }
-        return Promise.resolve();
-    }, []);
-    const contextValue = React2.useMemo(() => ({
-        isInitialized: true,
-        isTokenReady: true,
-        isMobileAuth: true,
-        user: currentUser,
-        refreshUserData,
-        signOut,
-        isAuthenticated: () => !!mobileToken,
-        hasSchool,
-        goToLogin,
-        hasRealmRole,
-        hasClientRole,
-        accessToken: mobileToken,
-        apiClient,
-        services,
-    }), [
-        currentUser,
-        refreshUserData,
-        signOut,
-        mobileToken,
+        isAuthenticated,
         hasSchool,
         goToLogin,
         hasRealmRole,
         hasClientRole,
+        accessToken,
         apiClient,
         services,
     ]);