formreader-session-timeout 0.2.4 → 0.2.6

package/dist/index.d.ts

@@ -48,7 +48,7 @@ interface SessionConfig {
     /** Custom function to format the refresh request payload */
     refreshPayloadFormatter?: (token: string, refreshToken: string) => Record<string, any>;
     /** Custom function to format the logout request payload */
-    logoutPayloadFormatter?: (token: string) => Record<string, any>;
+    logoutPayloadFormatter?: (token: string, refreshToken?: string) => Record<string, any>;
     /** Which field in login response contains access token (default: 'access') */
     accessTokenField?: string;
     /** Which field in login response contains refresh token (default: 'refresh') */
@@ -59,6 +59,10 @@ interface SessionConfig {
     refreshRefreshTokenField?: string;
     /** Whether to store refresh token separately (default: true) */
     storeRefreshToken?: boolean;
+    /** Whether to validate token on page reload/initialization (default: true) */
+    validateOnInit?: boolean;
+    /** Custom token validation endpoint for server-side validation */
+    tokenValidationEndpoint?: string;
 }
 interface JWTPayload {
     exp: number;
@@ -130,9 +134,16 @@ declare class SessionManager {
      */
     logout(): Promise<void>;
     /**
-     * Check if session is active
+     * Check if session is active and token is valid
      */
     isActive(): boolean;
+    /**
+     * Validate current session without initializing
+     */
+    validateSession(): {
+        isValid: boolean;
+        reason?: string;
+    };
     /**
      * Get current state
      */
@@ -207,6 +218,24 @@ declare function clearToken(): void;
  */
 declare function validateToken(token: string): boolean;
 
+/**
+ * Authentication utilities for session validation
+ */
+/**
+ * Check if user is authenticated with valid token
+ * This is the function to use in your App.tsx for page reload validation
+ */
+declare function isAuthenticated(): boolean;
+/**
+ * Initialize session with token validation on page reload
+ * Returns a promise that resolves to authentication status
+ */
+declare function initializeAuth(config?: any): Promise<boolean>;
+/**
+ * Trigger auth change event for cross-tab synchronization
+ */
+declare function triggerAuthChange(): void;
+
 /**
  * useSessionTimeout Hook
  * React hook for managing session timeout
@@ -242,4 +271,4 @@ declare function useSessionTimeout(options?: UseSessionTimeoutOptions): {
  */
 declare function SessionStatus(): react_jsx_runtime.JSX.Element;
 
-export { DEFAULT_SESSION_CONFIG, JWTPayload, RefreshTokenResponse, SessionConfig, SessionManager, SessionState, SessionStatus, TokenInfo, UseSessionTimeoutOptions, clearToken, getSessionManager, getStoredRefreshToken, getStoredToken, getTimeUntilExpiry, getTokenInfo, isTokenExpired, resetSessionManager, storeRefreshToken, storeToken, useSessionTimeout, validateToken };
+export { DEFAULT_SESSION_CONFIG, JWTPayload, RefreshTokenResponse, SessionConfig, SessionManager, SessionState, SessionStatus, TokenInfo, UseSessionTimeoutOptions, clearToken, getSessionManager, getStoredRefreshToken, getStoredToken, getTimeUntilExpiry, getTokenInfo, initializeAuth, isAuthenticated, isTokenExpired, resetSessionManager, storeRefreshToken, storeToken, triggerAuthChange, useSessionTimeout, validateToken };

package/dist/index.js

@@ -28,10 +28,13 @@ __export(session_timeout_exports, {
   getStoredToken: () => getStoredToken,
   getTimeUntilExpiry: () => getTimeUntilExpiry,
   getTokenInfo: () => getTokenInfo,
+  initializeAuth: () => initializeAuth,
+  isAuthenticated: () => isAuthenticated,
   isTokenExpired: () => isTokenExpired,
   resetSessionManager: () => resetSessionManager,
   storeRefreshToken: () => storeRefreshToken,
   storeToken: () => storeToken,
+  triggerAuthChange: () => triggerAuthChange,
   useSessionTimeout: () => useSessionTimeout,
   validateToken: () => validateToken
 });
@@ -59,7 +62,8 @@ var DEFAULT_SESSION_CONFIG = {
   refreshTokenField: "refresh",
   refreshAccessTokenField: "access",
   refreshRefreshTokenField: "refresh",
-  storeRefreshToken: true
+  storeRefreshToken: true,
+  validateOnInit: true
 };
 
 // services/tokenService.ts
@@ -191,6 +195,7 @@ var SessionManager = class {
     const token = loginResponse ? extractTokenFromResponse(loginResponse, this.config.accessTokenField || "access") : getStoredToken();
     if (!token) {
       this.log("No token found, session not initialized");
+      this.emit("noToken");
       return;
     }
     storeToken(token);
@@ -206,10 +211,27 @@ var SessionManager = class {
     }
     const validation = validateToken(token);
     if (!validation) {
-      this.log("Invalid token");
+      this.log("Invalid token format");
+      this.emit("invalidToken");
       this.logout();
       return;
     }
+    if (isTokenExpired(token)) {
+      this.log("Token is expired, attempting refresh");
+      this.emit("tokenExpired");
+      const refreshToken = getStoredRefreshToken();
+      if (refreshToken && this.config.autoRefresh) {
+        this.refreshToken().then((success) => {
+          if (!success) {
+            this.logout();
+          }
+        });
+        return;
+      } else {
+        this.logout();
+        return;
+      }
+    }
     this.state.isActive = true;
     this.setupTokenRefresh();
     this.setupIdleTracking();
@@ -303,7 +325,7 @@ var SessionManager = class {
     try {
       this.log(`Refreshing token (attempt ${this.state.refreshAttempts})`);
       const client = this.config.httpClient || defaultFetchClient();
-      const refreshPayload = this.config.refreshPayloadFormatter ? this.config.refreshPayloadFormatter(accessToken || "", refreshToken || "") : {
+      const refreshPayload = this.config.refreshPayloadFormatter ? this.config.refreshPayloadFormatter(accessToken || "", refreshToken) : {
         refresh: refreshToken || accessToken,
         token: accessToken
       };
@@ -367,7 +389,7 @@ var SessionManager = class {
       const token = getStoredToken();
       if (token && this.config.logoutEndpoint) {
         const client = this.config.httpClient || defaultFetchClient();
-        const logoutPayload = this.config.logoutPayloadFormatter ? this.config.logoutPayloadFormatter(token) : { token };
+        const logoutPayload = this.config.logoutPayloadFormatter ? this.config.logoutPayloadFormatter(token, getStoredRefreshToken()) : { token };
         await client.post(this.config.logoutEndpoint, logoutPayload, {
           headers: { Authorization: `Bearer ${token}` }
         });
@@ -377,15 +399,36 @@ var SessionManager = class {
     }
     clearToken();
     this.state.isActive = false;
-    this.emit("logout");
+    this.emit("loggedOut");
     (_b = (_a = this.config).onLogout) == null ? void 0 : _b.call(_a);
     this.cleanup();
   }
   /**
-   * Check if session is active
+   * Check if session is active and token is valid
    */
   isActive() {
-    return this.state.isActive;
+    if (!this.state.isActive)
+      return false;
+    const token = getStoredToken();
+    if (!token)
+      return false;
+    return !isTokenExpired(token);
+  }
+  /**
+   * Validate current session without initializing
+   */
+  validateSession() {
+    const token = getStoredToken();
+    if (!token) {
+      return { isValid: false, reason: "no_token" };
+    }
+    if (!validateToken(token)) {
+      return { isValid: false, reason: "invalid_token" };
+    }
+    if (isTokenExpired(token)) {
+      return { isValid: false, reason: "token_expired" };
+    }
+    return { isValid: true };
   }
   /**
    * Get current state
@@ -484,6 +527,57 @@ function resetSessionManager() {
   }
 }
 
+// utils/authUtils.ts
+function isAuthenticated() {
+  const token = getStoredToken();
+  if (!token) {
+    return false;
+  }
+  if (!validateToken(token)) {
+    return false;
+  }
+  if (isTokenExpired(token)) {
+    return false;
+  }
+  return true;
+}
+async function initializeAuth(config) {
+  const manager = getSessionManager(config);
+  return new Promise((resolve) => {
+    const cleanup = [];
+    cleanup.push(manager.on("initialized", () => {
+      cleanup.forEach((fn) => fn());
+      resolve(true);
+    }));
+    cleanup.push(manager.on("noToken", () => {
+      cleanup.forEach((fn) => fn());
+      resolve(false);
+    }));
+    cleanup.push(manager.on("invalidToken", () => {
+      cleanup.forEach((fn) => fn());
+      resolve(false);
+    }));
+    cleanup.push(manager.on("tokenExpired", () => {
+      setTimeout(() => {
+        cleanup.forEach((fn) => fn());
+        resolve(manager.isActive());
+      }, 1e3);
+    }));
+    cleanup.push(manager.on("loggedOut", () => {
+      cleanup.forEach((fn) => fn());
+      resolve(false);
+    }));
+    manager.init();
+    setTimeout(() => {
+      cleanup.forEach((fn) => fn());
+      resolve(manager.isActive());
+    }, 3e3);
+  });
+}
+function triggerAuthChange() {
+  window.dispatchEvent(new CustomEvent("authChange"));
+}
+
 // hooks/useSessionTimeout.ts
 var import_react = require("react");
 function useSessionTimeout(options = {}) {
@@ -633,10 +727,13 @@ function SessionStatus() {
   getStoredToken,
   getTimeUntilExpiry,
   getTokenInfo,
+  initializeAuth,
+  isAuthenticated,
   isTokenExpired,
   resetSessionManager,
   storeRefreshToken,
   storeToken,
+  triggerAuthChange,
   useSessionTimeout,
   validateToken
 });

package/dist/index.mjs

@@ -20,7 +20,8 @@ var DEFAULT_SESSION_CONFIG = {
   refreshTokenField: "refresh",
   refreshAccessTokenField: "access",
   refreshRefreshTokenField: "refresh",
-  storeRefreshToken: true
+  storeRefreshToken: true,
+  validateOnInit: true
 };
 
 // services/tokenService.ts
@@ -152,6 +153,7 @@ var SessionManager = class {
     const token = loginResponse ? extractTokenFromResponse(loginResponse, this.config.accessTokenField || "access") : getStoredToken();
     if (!token) {
       this.log("No token found, session not initialized");
+      this.emit("noToken");
       return;
     }
     storeToken(token);
@@ -167,10 +169,27 @@ var SessionManager = class {
     }
     const validation = validateToken(token);
     if (!validation) {
-      this.log("Invalid token");
+      this.log("Invalid token format");
+      this.emit("invalidToken");
       this.logout();
       return;
     }
+    if (isTokenExpired(token)) {
+      this.log("Token is expired, attempting refresh");
+      this.emit("tokenExpired");
+      const refreshToken = getStoredRefreshToken();
+      if (refreshToken && this.config.autoRefresh) {
+        this.refreshToken().then((success) => {
+          if (!success) {
+            this.logout();
+          }
+        });
+        return;
+      } else {
+        this.logout();
+        return;
+      }
+    }
     this.state.isActive = true;
     this.setupTokenRefresh();
     this.setupIdleTracking();
@@ -264,7 +283,7 @@ var SessionManager = class {
     try {
       this.log(`Refreshing token (attempt ${this.state.refreshAttempts})`);
       const client = this.config.httpClient || defaultFetchClient();
-      const refreshPayload = this.config.refreshPayloadFormatter ? this.config.refreshPayloadFormatter(accessToken || "", refreshToken || "") : {
+      const refreshPayload = this.config.refreshPayloadFormatter ? this.config.refreshPayloadFormatter(accessToken || "", refreshToken) : {
         refresh: refreshToken || accessToken,
         token: accessToken
       };
@@ -328,7 +347,7 @@ var SessionManager = class {
       const token = getStoredToken();
       if (token && this.config.logoutEndpoint) {
         const client = this.config.httpClient || defaultFetchClient();
-        const logoutPayload = this.config.logoutPayloadFormatter ? this.config.logoutPayloadFormatter(token) : { token };
+        const logoutPayload = this.config.logoutPayloadFormatter ? this.config.logoutPayloadFormatter(token, getStoredRefreshToken()) : { token };
         await client.post(this.config.logoutEndpoint, logoutPayload, {
           headers: { Authorization: `Bearer ${token}` }
         });
@@ -338,15 +357,36 @@ var SessionManager = class {
     }
     clearToken();
     this.state.isActive = false;
-    this.emit("logout");
+    this.emit("loggedOut");
     (_b = (_a = this.config).onLogout) == null ? void 0 : _b.call(_a);
     this.cleanup();
   }
   /**
-   * Check if session is active
+   * Check if session is active and token is valid
    */
   isActive() {
-    return this.state.isActive;
+    if (!this.state.isActive)
+      return false;
+    const token = getStoredToken();
+    if (!token)
+      return false;
+    return !isTokenExpired(token);
+  }
+  /**
+   * Validate current session without initializing
+   */
+  validateSession() {
+    const token = getStoredToken();
+    if (!token) {
+      return { isValid: false, reason: "no_token" };
+    }
+    if (!validateToken(token)) {
+      return { isValid: false, reason: "invalid_token" };
+    }
+    if (isTokenExpired(token)) {
+      return { isValid: false, reason: "token_expired" };
+    }
+    return { isValid: true };
   }
   /**
    * Get current state
@@ -445,6 +485,57 @@ function resetSessionManager() {
   }
 }
 
+// utils/authUtils.ts
+function isAuthenticated() {
+  const token = getStoredToken();
+  if (!token) {
+    return false;
+  }
+  if (!validateToken(token)) {
+    return false;
+  }
+  if (isTokenExpired(token)) {
+    return false;
+  }
+  return true;
+}
+async function initializeAuth(config) {
+  const manager = getSessionManager(config);
+  return new Promise((resolve) => {
+    const cleanup = [];
+    cleanup.push(manager.on("initialized", () => {
+      cleanup.forEach((fn) => fn());
+      resolve(true);
+    }));
+    cleanup.push(manager.on("noToken", () => {
+      cleanup.forEach((fn) => fn());
+      resolve(false);
+    }));
+    cleanup.push(manager.on("invalidToken", () => {
+      cleanup.forEach((fn) => fn());
+      resolve(false);
+    }));
+    cleanup.push(manager.on("tokenExpired", () => {
+      setTimeout(() => {
+        cleanup.forEach((fn) => fn());
+        resolve(manager.isActive());
+      }, 1e3);
+    }));
+    cleanup.push(manager.on("loggedOut", () => {
+      cleanup.forEach((fn) => fn());
+      resolve(false);
+    }));
+    manager.init();
+    setTimeout(() => {
+      cleanup.forEach((fn) => fn());
+      resolve(manager.isActive());
+    }, 3e3);
+  });
+}
+function triggerAuthChange() {
+  window.dispatchEvent(new CustomEvent("authChange"));
+}
+
 // hooks/useSessionTimeout.ts
 import { useEffect, useState, useCallback, useRef } from "react";
 function useSessionTimeout(options = {}) {
@@ -593,10 +684,13 @@ export {
   getStoredToken,
   getTimeUntilExpiry,
   getTokenInfo,
+  initializeAuth,
+  isAuthenticated,
   isTokenExpired,
   resetSessionManager,
   storeRefreshToken,
   storeToken,
+  triggerAuthChange,
   useSessionTimeout,
   validateToken
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "formreader-session-timeout",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "description": "Session timeout microfrontend: configurable JWT expiry decoding and refresh with idle tracking",
   "main": "dist/index.js",
   "module": "dist/index.mjs",