azirid-react 0.10.3 → 0.10.4

package/README.md

@@ -376,7 +376,7 @@ import { useBootstrap } from 'azirid-react'
 const { bootstrap, isBootstrapping } = useBootstrap()
 ```
 
-> **Note:** The automatic bootstrap on mount runs exactly once, even in React 18 Strict Mode (which double-mounts components in development). Hooks like `usePayphoneCheckout` and `<PayphoneCallback>` wait for bootstrap to complete before making authenticated requests.
+> **Note:** The automatic bootstrap uses request deduplication — if React 18 Strict Mode (or any other scenario) triggers multiple bootstrap calls, only **one HTTP request** is made and all callers await the same promise. This prevents token rotation conflicts that would otherwise invalidate the session on page reload in development mode. Hooks like `usePayphoneCheckout` and `<PayphoneCallback>` wait for bootstrap to complete before making authenticated requests.
 
 ### `useRefresh`
 

package/dist/index.cjs

@@ -165,6 +165,7 @@ function createAccessClient(config, appContext) {
   let refreshToken = ssGet(storageKeyRt);
   let csrfToken = ssGet(storageKeyCsrf);
   let refreshPromise = null;
+  let bootstrapPromise = null;
   let channel = null;
   try {
     if (typeof BroadcastChannel !== "undefined") {
@@ -264,6 +265,13 @@ function createAccessClient(config, appContext) {
     });
     return refreshPromise;
   }
+  function deduplicatedBootstrap() {
+    if (bootstrapPromise) return bootstrapPromise;
+    bootstrapPromise = request("POST", paths.bootstrap).finally(() => {
+      bootstrapPromise = null;
+    });
+    return bootstrapPromise;
+  }
   async function request(method, path, body) {
     const headers = {
       "Content-Type": "application/json",
@@ -365,7 +373,8 @@ function createAccessClient(config, appContext) {
     getRefreshToken,
     setCsrfToken,
     getCsrfToken,
-    refreshSession: (opts) => refreshTokens(opts)
+    refreshSession: (opts) => refreshTokens(opts),
+    bootstrapSession: () => deduplicatedBootstrap()
   };
 }
 
@@ -768,20 +777,14 @@ function AziridProviderInner({
     },
     [client]
   );
-  const bootstrapCalled = react.useRef(false);
   react.useEffect(() => {
     const autoBootstrap = props.autoBootstrap ?? true;
     if (!autoBootstrap) return;
-    if (bootstrapCalled.current) {
-      setIsBootstrapping(false);
-      return;
-    }
-    bootstrapCalled.current = true;
     let cancelled = false;
     async function bootstrap() {
       setIsBootstrapping(true);
       try {
-        const response = await client.post(client.paths.bootstrap);
+        const response = await client.bootstrapSession();
         if (cancelled) return;
         if (response.branding) {
           setBranding(response.branding);
@@ -4355,7 +4358,7 @@ function usePasswordToggle() {
 }
 
 // src/index.ts
-var SDK_VERSION = "0.10.3";
+var SDK_VERSION = "0.10.4";
 
 exports.AuthForm = AuthForm;
 exports.AziridProvider = AziridProvider;