mesauth-angular 1.23.0 → 1.24.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mesauth-angular",
-  "version": "1.23.0",
+  "version": "1.24.0",
   "description": "Angular helper library to connect to a backend API and SignalR hub to surface the current logged-in user and incoming notifications with dark/light theme support",
   "keywords": [
     "angular",

package/types/mesauth-angular.d.ts

@@ -245,9 +245,18 @@ declare class MesAuthService {
 }
 
 /**
- * Functional HTTP interceptor for handling 401/403 auth errors.
- * Redirects to login page on 401, and to 403 page on 403.
- * Includes loopback prevention to avoid infinite redirects.
+ * Functional HTTP interceptor.
+ *
+ * Responsibilities:
+ *   1. Attach `Authorization: Bearer` + `X-Refresh-Token` from localStorage to requests
+ *      targeting the auth server / trusted hosts (so the server-side Authorizer middleware
+ *      can perform silent refresh and emit X-Refreshed-* response headers).
+ *   2. On every successful response, if `X-Refreshed-Token` is present, write it to
+ *      localStorage exactly once (dedup across parallel responses).
+ *   3. On 401, queue concurrent failures behind a single 1.5s wait so only ONE retry
+ *      fires per refresh window. Retries strip the stale auth headers so the interceptor
+ *      re-reads the freshly-stored tokens from localStorage.
+ *   4. On 403, redirect to /403.
  */
 declare const mesAuthInterceptor: HttpInterceptorFn;
 
@@ -1131,7 +1140,7 @@ interface MaUiManifest {
     quickPrompts?: string[];
 }
 /** Current installed package version — keep in sync with package.json. */
-declare const PACKAGE_VERSION = "1.23.0";
+declare const PACKAGE_VERSION = "1.24.0";
 /**
  * Provides server-driven UI configuration loaded from the hosted manifest.
  * Components read `labels()` and `features()` signals instead of hardcoded strings.