attlaz-client 1.73.0 → 1.73.1

package/dist/Http/Transport/OAuthClient.js

@@ -1,6 +1,7 @@
 import { JsonSerializable } from '../../Model/JsonSerializable.js';
 import { VERSION } from '../../version.js';
 import { ClientError } from '../ClientError.js';
+import { HttpStatus } from '../HttpStatus.js';
 import { HttpClient } from '../HttpClient.js';
 import { HttpClientRequest } from '../HttpClientRequest.js';
 import { OAuthClientToken } from '../OAuthClientToken.js';
@@ -76,6 +77,18 @@ export class OAuthClient {
             this.oauthClientToken = this.tokenToOauthClientToken(rawAuthToken);
         }
         catch (e) {
+            if (e instanceof ClientError) {
+                // A refresh grant rejected by the server (4xx — the refresh token is
+                // expired/revoked/invalid_grant) means the session is irrecoverable and
+                // the user must re-authenticate. Surface it as 401 Unauthorized so
+                // consumers sign out and redirect to login instead of showing a generic
+                // error. Transient failures (network / 5xx) are rethrown unchanged so a
+                // hiccup doesn't force a logout.
+                if (e.httpStatus !== null && e.httpStatus >= 400 && e.httpStatus < 500) {
+                    throw new ClientError('Refresh token rejected, re-authentication required', HttpStatus.HTTP_UNAUTHORIZED);
+                }
+                throw e;
+            }
             throw ClientError.fromError(e);
         }
     }
@@ -116,8 +129,15 @@ export class OAuthClient {
                 if (signWithOauthToken && OAuthClientToken.isExpired(this.oauthClientToken)) {
                     if (this.refreshTokenPromise === null) {
                         this.refreshTokenPromise = this.refreshToken();
-                        await this.refreshTokenPromise;
-                        this.refreshTokenPromise = null;
+                        try {
+                            await this.refreshTokenPromise;
+                        }
+                        finally {
+                            // Always clear, even on failure, so a single failed refresh
+                            // doesn't poison every later request with the same rejected
+                            // promise (e.g. after the user re-authenticates).
+                            this.refreshTokenPromise = null;
+                        }
                     }
                     else {
                         await this.refreshTokenPromise;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.72.0";
+export declare const VERSION = "1.73.1";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "1.72.0";
+export const VERSION = "1.73.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "attlaz-client",
-  "version": "1.73.0",
+  "version": "1.73.1",
   "description": "Javascript Client to access Attlaz API",
   "types": "./dist/index.d.ts",
   "main": "./dist/index.js",