arcadible 1.0.7 → 1.0.8

package/package.json

@@ -65,5 +65,5 @@
   "scripts": {
     "test": "node --test \"test/**/*.test.js\""
   },
-  "version": "1.0.7"
+  "version": "1.0.8"
 }

package/src/account.js

@@ -168,10 +168,13 @@ const get = function (onRefresh) {
 // [function]
 
 // a failed request's handler for commands that send the saved session's
-// token: the API refuses it (401) only when Supabase does, such as for a
-// deleted account, so the session is over. It's removed, and the error says
-// to log in, rather than api_refused. An ARC_TOKEN's refusal stays as it is,
-// since logging in doesn't change the token.
+// token. The API refuses it (401) only when Supabase does: for a deleted
+// account, or a token that expired by the server's clock though not by
+// this one's. A refresh tells them apart: refused, the session is over, so
+// it's removed and the error says to log in (session_expired); renewed, the
+// session is kept, and the request's own error stands, so running the
+// command again works. An ARC_TOKEN's refusal stays as it is, since logging
+// in doesn't change the token.
 const ended = function (current) {
   return (ex) => {
     if (
@@ -182,7 +185,14 @@ const ended = function (current) {
     ) {
       throw ex;
     }
-    return expire(ex);
+    return refresh(current).then(
+      () => {
+        throw ex;
+      },
+      (refreshEx) => {
+        throw refreshEx instanceof ArcError ? refreshEx : ex;
+      },
+    );
   };
 };