mitra-interactions-sdk 1.0.60-beta.0 → 1.0.60-beta.10

package/dist/index.js

@@ -255,9 +255,9 @@ function getFetch() {
   if (typeof globalThis.fetch === "function") return globalThis.fetch;
   throw new Error("fetch n\xE3o dispon\xEDvel. Use Node.js 18+ ou instale node-fetch.");
 }
-function buildEndpoint(authUrl, path) {
-  const base = authUrl.replace(/\/+$/, "");
-  return `${base}/iam/api/v1/auth${path}`;
+function buildBffAuthEndpoint(gateway, path) {
+  const base = gateway.replace(/\/+$/, "");
+  return `${base}/auth${path}`;
 }
 function resolveLoginOptions2(options) {
   var _a;
@@ -283,7 +283,7 @@ function autoConfigureFromLogin2(response, authUrl, projectId) {
     ...response.integrationURL ? { integrationURL: response.integrationURL } : {}
   });
 }
-async function postNewAuth(url, body) {
+async function postBffAuth(url, body) {
   const fetchFn = getFetch();
   const response = await fetchFn(url, {
     method: "POST",
@@ -291,16 +291,17 @@ async function postNewAuth(url, body) {
     body: JSON.stringify(body)
   });
   if (!response.ok) {
-    const text = await response.text().catch(() => "");
+    const text2 = await response.text().catch(() => "");
     let parsed = null;
     try {
-      parsed = text ? JSON.parse(text) : null;
+      parsed = text2 ? JSON.parse(text2) : null;
     } catch (e) {
     }
     const msg = (parsed == null ? void 0 : parsed.message) || (parsed == null ? void 0 : parsed.error) || `HTTP ${response.status}`;
     throw { message: msg, status: response.status, details: parsed };
   }
-  return response.json();
+  const text = await response.text().catch(() => "");
+  return text ? JSON.parse(text) : null;
 }
 function normalizeResponse(tokens, authUrl) {
   return {
@@ -317,12 +318,13 @@ var OAUTH_RESULT_TYPE = "mitra-oauth-result";
 var POPUP_W = 480;
 var POPUP_H = 600;
 var POPUP_TIMEOUT_MS = 5 * 60 * 1e3;
-var PASSTHROUGH_PATH = "/sdk-auth/oauth";
-function buildPassthroughBaseUrl(baseURL) {
-  return baseURL.replace(/\/+$/, "") + PASSTHROUGH_PATH;
+var SSO_AUTH_PAGE_URL = "https://d2by6yrxhbu2rl.cloudfront.net/sdk-auth.html";
+async function fetchSsoAuthPageUrl(_baseURL) {
+  return SSO_AUTH_PAGE_URL;
 }
-function buildStartUrl(baseURL, provider, state, appId) {
-  return buildPassthroughBaseUrl(baseURL) + "?" + new URLSearchParams({ provider, state, appId }).toString();
+function buildStartUrl(authPageUrl, provider, state, appId, apiUrl) {
+  const sep = authPageUrl.includes("?") ? "&" : "?";
+  return authPageUrl + sep + new URLSearchParams({ provider, state, appId, apiUrl, origin: window.location.origin }).toString();
 }
 function getOriginFromUrl2(url) {
   try {
@@ -379,11 +381,11 @@ function openOAuthPopup(providerUrl, expectedOrigin, expectedState) {
         reject(new Error(data.error || "Erro na autentica\xE7\xE3o OAuth."));
         return;
       }
-      if (!data.code) {
-        reject(new Error("Resposta OAuth sem code."));
+      if (!data.token) {
+        reject(new Error("Resposta OAuth sem token."));
         return;
       }
-      resolve({ code: data.code });
+      resolve({ token: data.token });
     }
     function cleanup() {
       clearTimeout(timer);
@@ -408,16 +410,11 @@ async function loginWithProvider(provider, options) {
       const { authUrl, projectId } = resolveLoginOptions2(options);
       const state = generateState();
       const appId = String(projectId);
-      const expectedOrigin = getOriginFromUrl2(authUrl);
-      const startUrl = buildStartUrl(authUrl, provider, state, appId);
-      const redirectUri = buildPassthroughBaseUrl(authUrl);
-      const { code } = await openOAuthPopup(startUrl, expectedOrigin, state);
-      const tokens = await postNewAuth(buildEndpoint(authUrl, `/${provider}`), {
-        code,
-        redirectUri,
-        appId
-      });
-      const response = normalizeResponse(tokens, authUrl);
+      const authPageUrl = await fetchSsoAuthPageUrl(authUrl);
+      const pageOrigin = getOriginFromUrl2(authPageUrl);
+      const startUrl = buildStartUrl(authPageUrl, provider, state, appId, authUrl);
+      const { token } = await openOAuthPopup(startUrl, pageOrigin, state);
+      const response = normalizeResponse(token, authUrl);
       autoConfigureFromLogin2(response, authUrl, projectId);
       return response;
     } finally {
@@ -442,25 +439,30 @@ async function loginMitra2(method, options) {
 }
 async function emailLoginMitra2(options) {
   const { authUrl, projectId } = resolveLoginOptions2(options);
-  const tokens = await postNewAuth(buildEndpoint(authUrl, "/login"), {
+  const data = await postBffAuth(buildBffAuthEndpoint(authUrl, "/email/login"), {
+    projectId: String(projectId),
     email: options.email,
-    password: options.password,
-    appId: String(projectId)
+    password: options.password
   });
-  const response = normalizeResponse(tokens, authUrl);
+  const response = {
+    token: data.token,
+    // baseURL = authUrl (o gateway configurado). O BFF não devolve baseURL/integrationURL;
+    // a base é sempre o gateway, resolvido no lado do SDK.
+    baseURL: authUrl,
+    // Guarda o refreshToken do login — é ele que vai no body do refresh depois.
+    ...data.refreshToken ? { refreshToken: data.refreshToken } : {}
+  };
   autoConfigureFromLogin2(response, authUrl, projectId);
   return response;
 }
 async function emailSignupMitra2(options) {
   const { authUrl, projectId } = resolveLoginOptions2(options);
-  const tokens = await postNewAuth(buildEndpoint(authUrl, "/register"), {
+  await postBffAuth(buildBffAuthEndpoint(authUrl, "/email/signup"), {
+    projectId: String(projectId),
     name: options.name,
     email: options.email,
-    password: options.password,
-    appId: String(projectId)
+    password: options.password
   });
-  const response = normalizeResponse(tokens, authUrl);
-  autoConfigureFromLogin2(response, authUrl, projectId);
 }
 async function emailVerifyCodeMitra2(_options) {
   throw new Error(NOT_SUPPORTED_VERIFY);
@@ -476,10 +478,15 @@ async function refreshTokenSilently2(authUrl, _projectId) {
       const config = isConfigured() ? getConfig() : null;
       const refreshToken = config == null ? void 0 : config.refreshToken;
       if (!refreshToken) {
-        throw new Error("refreshToken n\xE3o dispon\xEDvel para renova\xE7\xE3o no novo Mitra. Fa\xE7a login novamente.");
+        throw new Error("refreshToken n\xE3o dispon\xEDvel para renova\xE7\xE3o. Fa\xE7a login novamente.");
       }
-      const tokens = await postNewAuth(buildEndpoint(authUrl, "/refresh-token"), { refreshToken });
-      return normalizeResponse(tokens, authUrl);
+      const data = await postBffAuth(buildBffAuthEndpoint(authUrl, "/refresh-token"), { refreshToken });
+      return {
+        token: data.token,
+        // Refresh não muda a base — mantém o authUrl (gateway).
+        baseURL: authUrl,
+        ...data.refreshToken ? { refreshToken: data.refreshToken } : {}
+      };
     } finally {
       _refreshPromise2 = null;
     }
@@ -699,28 +706,30 @@ function buildUrl(endpoint, params) {
 async function tryRefreshToken() {
   var _a, _b;
   const config = getConfig();
-  if (!config.token || config.projectId == null) return false;
-  try {
-    const baseURL = config.baseURL.replace(/\/+$/, "");
-    const resp = await getFetch3()(`${baseURL}/mitraspace/project/refreshedToken/${config.projectId}`, {
-      method: "GET",
-      headers: { "Authorization": formatToken(config.token) }
-    });
-    if (resp.ok) {
-      const data = await resp.json();
-      if (data.token) {
-        const newToken = `Bearer ${stripBearer(data.token)}`;
-        const session = {
-          token: newToken,
-          baseURL: ((_a = data.merge) == null ? void 0 : _a.backURL) || config.baseURL,
-          ...((_b = data.merge) == null ? void 0 : _b.integrationURL) ? { integrationURL: data.merge.integrationURL } : {}
-        };
-        updateGlobalToken(session.token);
-        if (config.onTokenRefresh) config.onTokenRefresh(session);
-        return true;
+  if (!config.token || config.projectId == null || !config.baseURL) return false;
+  if (!isNewWorld()) {
+    try {
+      const baseURL = config.baseURL.replace(/\/+$/, "");
+      const resp = await getFetch3()(`${baseURL}/mitraspace/project/refreshedToken/${config.projectId}`, {
+        method: "GET",
+        headers: { "Authorization": formatToken(config.token) }
+      });
+      if (resp.ok) {
+        const data = await resp.json();
+        if (data.token) {
+          const newToken = `Bearer ${stripBearer(data.token)}`;
+          const session = {
+            token: newToken,
+            baseURL: ((_a = data.merge) == null ? void 0 : _a.backURL) || config.baseURL,
+            ...((_b = data.merge) == null ? void 0 : _b.integrationURL) ? { integrationURL: data.merge.integrationURL } : {}
+          };
+          updateGlobalToken(session.token);
+          if (config.onTokenRefresh) config.onTokenRefresh(session);
+          return true;
+        }
       }
+    } catch (e) {
     }
-  } catch (e) {
   }
   if (!config.authUrl || typeof window === "undefined") return false;
   try {
@@ -749,7 +758,8 @@ async function handleResponse(response) {
 async function fetchWithRefresh(url, init) {
   const fetchFn = getFetch3();
   const response = await fetchFn(url, init);
-  if (response.status === 403) {
+  const expiredStatus = isNewWorld() ? 401 : 403;
+  if (response.status === expiredStatus) {
     const refreshed = await tryRefreshToken();
     if (refreshed) {
       const newHeaders = { ...buildHeaders() };
@@ -2345,6 +2355,37 @@ function stripBearer(token) {
   }
   return t;
 }
+var SESSION_STORE_KEY = "mitra-session";
+function safeLocalStorage() {
+  try {
+    return typeof localStorage !== "undefined" ? localStorage : null;
+  } catch (e) {
+    return null;
+  }
+}
+function persistRefreshToken(refreshToken) {
+  const ls = safeLocalStorage();
+  if (!ls) return;
+  try {
+    const raw = ls.getItem(SESSION_STORE_KEY);
+    const obj = raw ? JSON.parse(raw) : {};
+    obj.refreshToken = refreshToken;
+    ls.setItem(SESSION_STORE_KEY, JSON.stringify(obj));
+  } catch (e) {
+  }
+}
+function readPersistedRefreshToken() {
+  const ls = safeLocalStorage();
+  if (!ls) return void 0;
+  try {
+    const raw = ls.getItem(SESSION_STORE_KEY);
+    if (!raw) return void 0;
+    const obj = JSON.parse(raw);
+    return typeof (obj == null ? void 0 : obj.refreshToken) === "string" && obj.refreshToken ? obj.refreshToken : void 0;
+  } catch (e) {
+    return void 0;
+  }
+}
 function readInjectedEnv() {
   if (typeof window === "undefined") return {};
   const env = window.__mitraEnv;
@@ -2362,6 +2403,12 @@ function configureSdkMitra(config = {}) {
     throw new Error("baseURL \xE9 obrigat\xF3rio. Passe em configureSdkMitra({ baseURL }), fa\xE7a login para receber via sdk-auth, ou rode em uma app publicada pelo Mitra (window.__mitraEnv).");
   }
   if (merged.token != null) merged.token = stripBearer(merged.token);
+  if (!merged.refreshToken) {
+    const persisted = readPersistedRefreshToken();
+    if (persisted) merged.refreshToken = persisted;
+  } else {
+    persistRefreshToken(merged.refreshToken);
+  }
   globalConfig = {
     ...merged,
     baseURL: merged.baseURL.replace(/\/+$/, "")
@@ -2388,6 +2435,7 @@ function updateGlobalToken(token, refreshToken) {
       token: stripBearer(token),
       ...refreshToken !== void 0 ? { refreshToken } : {}
     };
+    if (refreshToken) persistRefreshToken(refreshToken);
   }
 }
 function resolveProjectId2(projectId) {