attlaz-client 1.72.0 → 1.73.1

package/dist/Http/HttpStatus.d.ts

@@ -4,6 +4,7 @@ export declare class HttpStatus {
     static HTTP_FORBIDDEN: number;
     static HTTP_NOTFOUND: number;
     static HTTP_NOT_ALLOWED: number;
+    static HTTP_REQUEST_ENTITY_TOO_LARGE: number;
     static HTTP_UNPROCESSABLE_ENTITY: number;
     static HTTP_INTERNAL_SERVER_ERROR: number;
     static HTTP_BAD_GATEWAY: number;

package/dist/Http/HttpStatus.js

@@ -4,6 +4,7 @@ export class HttpStatus {
     static HTTP_FORBIDDEN = 403;
     static HTTP_NOTFOUND = 404;
     static HTTP_NOT_ALLOWED = 405;
+    static HTTP_REQUEST_ENTITY_TOO_LARGE = 413;
     static HTTP_UNPROCESSABLE_ENTITY = 422;
     static HTTP_INTERNAL_SERVER_ERROR = 500;
     static HTTP_BAD_GATEWAY = 502;

package/dist/Http/Transport/OAuthClient.js

@@ -1,6 +1,7 @@
 import { JsonSerializable } from '../../Model/JsonSerializable.js';
 import { VERSION } from '../../version.js';
 import { ClientError } from '../ClientError.js';
+import { HttpStatus } from '../HttpStatus.js';
 import { HttpClient } from '../HttpClient.js';
 import { HttpClientRequest } from '../HttpClientRequest.js';
 import { OAuthClientToken } from '../OAuthClientToken.js';
@@ -76,6 +77,18 @@ export class OAuthClient {
             this.oauthClientToken = this.tokenToOauthClientToken(rawAuthToken);
         }
         catch (e) {
+            if (e instanceof ClientError) {
+                // A refresh grant rejected by the server (4xx — the refresh token is
+                // expired/revoked/invalid_grant) means the session is irrecoverable and
+                // the user must re-authenticate. Surface it as 401 Unauthorized so
+                // consumers sign out and redirect to login instead of showing a generic
+                // error. Transient failures (network / 5xx) are rethrown unchanged so a
+                // hiccup doesn't force a logout.
+                if (e.httpStatus !== null && e.httpStatus >= 400 && e.httpStatus < 500) {
+                    throw new ClientError('Refresh token rejected, re-authentication required', HttpStatus.HTTP_UNAUTHORIZED);
+                }
+                throw e;
+            }
             throw ClientError.fromError(e);
         }
     }
@@ -116,8 +129,15 @@ export class OAuthClient {
                 if (signWithOauthToken && OAuthClientToken.isExpired(this.oauthClientToken)) {
                     if (this.refreshTokenPromise === null) {
                         this.refreshTokenPromise = this.refreshToken();
-                        await this.refreshTokenPromise;
-                        this.refreshTokenPromise = null;
+                        try {
+                            await this.refreshTokenPromise;
+                        }
+                        finally {
+                            // Always clear, even on failure, so a single failed refresh
+                            // doesn't poison every later request with the same rejected
+                            // promise (e.g. after the user re-authenticates).
+                            this.refreshTokenPromise = null;
+                        }
                     }
                     else {
                         await this.refreshTokenPromise;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.71.0";
+export declare const VERSION = "1.73.1";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "1.71.0";
+export const VERSION = "1.73.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "attlaz-client",
-  "version": "1.72.0",
+  "version": "1.73.1",
   "description": "Javascript Client to access Attlaz API",
   "types": "./dist/index.d.ts",
   "main": "./dist/index.js",
@@ -50,7 +50,7 @@
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",
-    "@types/node": "^25.9.3",
+    "@types/node": "^25.9.4",
     "@typescript-eslint/eslint-plugin": "^8.59.3",
     "@typescript-eslint/parser": "^8.59.3",
     "eslint": "^9.39.4",