attlaz-client 1.73.0 → 1.74.0

package/dist/Http/ClientError.js

@@ -9,6 +9,12 @@ export class ClientError extends Error {
         this.httpStatus = httpErrorCode;
     }
     static fromError(error) {
+        // Already a ClientError (or a subclass such as ApiError) — preserve it as-is.
+        // Re-deriving here would discard its httpStatus, because this method inspects the
+        // `.status`/`.code` shape of raw transport errors, not ClientError's own fields.
+        if (error instanceof ClientError) {
+            return error;
+        }
         let clientError = new ClientError('Unknown error', HttpStatus.HTTP_INTERNAL_SERVER_ERROR);
         const xError = error;
         if (xError.status !== null && xError.status !== undefined) {

package/dist/Http/Transport/OAuthClient.js

@@ -1,6 +1,7 @@
 import { JsonSerializable } from '../../Model/JsonSerializable.js';
 import { VERSION } from '../../version.js';
 import { ClientError } from '../ClientError.js';
+import { HttpStatus } from '../HttpStatus.js';
 import { HttpClient } from '../HttpClient.js';
 import { HttpClientRequest } from '../HttpClientRequest.js';
 import { OAuthClientToken } from '../OAuthClientToken.js';
@@ -76,6 +77,18 @@ export class OAuthClient {
             this.oauthClientToken = this.tokenToOauthClientToken(rawAuthToken);
         }
         catch (e) {
+            if (e instanceof ClientError) {
+                // A refresh grant rejected by the server (4xx — the refresh token is
+                // expired/revoked/invalid_grant) means the session is irrecoverable and
+                // the user must re-authenticate. Surface it as 401 Unauthorized so
+                // consumers sign out and redirect to login instead of showing a generic
+                // error. Transient failures (network / 5xx) are rethrown unchanged so a
+                // hiccup doesn't force a logout.
+                if (e.httpStatus !== null && e.httpStatus >= 400 && e.httpStatus < 500) {
+                    throw new ClientError('Refresh token rejected, re-authentication required', HttpStatus.HTTP_UNAUTHORIZED);
+                }
+                throw e;
+            }
             throw ClientError.fromError(e);
         }
     }
@@ -116,8 +129,15 @@ export class OAuthClient {
                 if (signWithOauthToken && OAuthClientToken.isExpired(this.oauthClientToken)) {
                     if (this.refreshTokenPromise === null) {
                         this.refreshTokenPromise = this.refreshToken();
-                        await this.refreshTokenPromise;
-                        this.refreshTokenPromise = null;
+                        try {
+                            await this.refreshTokenPromise;
+                        }
+                        finally {
+                            // Always clear, even on failure, so a single failed refresh
+                            // doesn't poison every later request with the same rejected
+                            // promise (e.g. after the user re-authenticates).
+                            this.refreshTokenPromise = null;
+                        }
                     }
                     else {
                         await this.refreshTokenPromise;

package/dist/Model/Error/ApiError.d.ts

@@ -1,10 +1,14 @@
-export declare class ApiError extends Error {
-    httpStatus: number | null;
+import { ClientError } from '../../Http/ClientError.js';
+/**
+ * Domain-level error produced at the API/Endpoint boundary. Extends ClientError so a single
+ * `instanceof ClientError` catches both transport failures (ClientError) and API errors
+ * (ApiError), while adding the server's structured error fields (type/code/param).
+ *
+ * httpStatus, message and response are inherited from ClientError.
+ */
+export declare class ApiError extends ClientError {
     type: string;
     code: string;
     param?: string | undefined;
-    stack?: string;
-    message: string;
-    response: unknown;
     constructor(message: string, httpErrorCode?: number | null);
 }

package/dist/Model/Error/ApiError.js

@@ -1,15 +1,16 @@
-export class ApiError extends Error {
-    httpStatus = null;
+import { ClientError } from '../../Http/ClientError.js';
+/**
+ * Domain-level error produced at the API/Endpoint boundary. Extends ClientError so a single
+ * `instanceof ClientError` catches both transport failures (ClientError) and API errors
+ * (ApiError), while adding the server's structured error fields (type/code/param).
+ *
+ * httpStatus, message and response are inherited from ClientError.
+ */
+export class ApiError extends ClientError {
     type;
     code;
-    // public message: string;
     param = undefined;
-    stack;
-    message;
-    response;
     constructor(message, httpErrorCode = null) {
-        super(message);
-        this.message = message;
-        this.httpStatus = httpErrorCode;
+        super(message, httpErrorCode);
     }
 }

package/dist/index.d.ts

@@ -14,6 +14,7 @@ export { OAuthClient } from './Http/Transport/OAuthClient.js';
 export { OAuthClientOptions } from './Http/OAuthClientOptions.js';
 export { OAuthClientToken } from './Http/OAuthClientToken.js';
 export { ClientError } from './Http/ClientError.js';
+export { ApiError } from './Model/Error/ApiError.js';
 export { HttpStatus } from './Http/HttpStatus.js';
 export { ContentTypeHelper } from './Http/ContentTypeHelper.js';
 /**

package/dist/index.js

@@ -7,6 +7,7 @@ export { OAuthClient } from './Http/Transport/OAuthClient.js';
 export { OAuthClientOptions } from './Http/OAuthClientOptions.js';
 export { OAuthClientToken } from './Http/OAuthClientToken.js';
 export { ClientError } from './Http/ClientError.js';
+export { ApiError } from './Model/Error/ApiError.js';
 export { HttpStatus } from './Http/HttpStatus.js';
 export { ContentTypeHelper } from './Http/ContentTypeHelper.js';
 /**

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.72.0";
+export declare const VERSION = "1.73.1";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "1.72.0";
+export const VERSION = "1.73.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "attlaz-client",
-  "version": "1.73.0",
+  "version": "1.74.0",
   "description": "Javascript Client to access Attlaz API",
   "types": "./dist/index.d.ts",
   "main": "./dist/index.js",