mitra-interactions-sdk 1.0.60-beta.1 → 1.0.60-beta.11

package/dist/index.js

@@ -255,9 +255,9 @@ function getFetch() {
   if (typeof globalThis.fetch === "function") return globalThis.fetch;
   throw new Error("fetch n\xE3o dispon\xEDvel. Use Node.js 18+ ou instale node-fetch.");
 }
-function buildEndpoint(authUrl, path) {
-  const base = authUrl.replace(/\/+$/, "");
-  return `${base}/iam/api/v1/auth${path}`;
+function buildBffAuthEndpoint(gateway, path) {
+  const base = gateway.replace(/\/+$/, "");
+  return `${base}/auth${path}`;
 }
 function resolveLoginOptions2(options) {
   var _a;
@@ -283,24 +283,21 @@ function autoConfigureFromLogin2(response, authUrl, projectId) {
     ...response.integrationURL ? { integrationURL: response.integrationURL } : {}
   });
 }
-async function postNewAuth(url, body) {
+async function postBffAuth(url, body) {
   const fetchFn = getFetch();
   const response = await fetchFn(url, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body)
   });
+  const text = await response.text().catch(() => "");
+  const { data, isJson } = parseBody(text);
   if (!response.ok) {
-    const text = await response.text().catch(() => "");
-    let parsed = null;
-    try {
-      parsed = text ? JSON.parse(text) : null;
-    } catch (e) {
-    }
-    const msg = (parsed == null ? void 0 : parsed.message) || (parsed == null ? void 0 : parsed.error) || `HTTP ${response.status}`;
-    throw { message: msg, status: response.status, details: parsed };
+    const fallback = !isJson && text ? `HTTP ${response.status} \u2014 ${text}` : `HTTP ${response.status}`;
+    const msg = isJson && ((data == null ? void 0 : data.message) || (data == null ? void 0 : data.error)) || fallback;
+    throw { message: msg, status: response.status, details: data };
   }
-  return response.json();
+  return data;
 }
 function normalizeResponse(tokens, authUrl) {
   return {
@@ -317,25 +314,13 @@ var OAUTH_RESULT_TYPE = "mitra-oauth-result";
 var POPUP_W = 480;
 var POPUP_H = 600;
 var POPUP_TIMEOUT_MS = 5 * 60 * 1e3;
-async function fetchSsoAuthPageUrl(baseURL) {
-  const fetchFn = getFetch();
-  const response = await fetchFn(buildEndpoint(baseURL, "/sso/config"), {
-    method: "GET",
-    headers: { accept: "application/json" }
-  });
-  if (!response.ok) {
-    throw new Error(`SSO discovery falhou (HTTP ${response.status}).`);
-  }
-  const data = await response.json().catch(() => null);
-  const url = data && typeof data.authPageUrl === "string" ? data.authPageUrl : "";
-  if (!url) {
-    throw new Error("SSO discovery n\xE3o retornou authPageUrl.");
-  }
-  return url;
+var SSO_AUTH_PAGE_URL = "https://d2by6yrxhbu2rl.cloudfront.net/sdk-auth.html";
+async function fetchSsoAuthPageUrl(_baseURL) {
+  return SSO_AUTH_PAGE_URL;
 }
 function buildStartUrl(authPageUrl, provider, state, appId, apiUrl) {
   const sep = authPageUrl.includes("?") ? "&" : "?";
-  return authPageUrl + sep + new URLSearchParams({ provider, state, appId, apiUrl }).toString();
+  return authPageUrl + sep + new URLSearchParams({ provider, state, appId, apiUrl, origin: window.location.origin }).toString();
 }
 function getOriginFromUrl2(url) {
   try {
@@ -392,11 +377,11 @@ function openOAuthPopup(providerUrl, expectedOrigin, expectedState) {
         reject(new Error(data.error || "Erro na autentica\xE7\xE3o OAuth."));
         return;
       }
-      if (!data.code) {
-        reject(new Error("Resposta OAuth sem code."));
+      if (!data.token) {
+        reject(new Error("Resposta OAuth sem token."));
         return;
       }
-      resolve({ code: data.code });
+      resolve({ token: data.token });
     }
     function cleanup() {
       clearTimeout(timer);
@@ -423,15 +408,9 @@ async function loginWithProvider(provider, options) {
       const appId = String(projectId);
       const authPageUrl = await fetchSsoAuthPageUrl(authUrl);
       const pageOrigin = getOriginFromUrl2(authPageUrl);
-      const redirectUri = authPageUrl;
       const startUrl = buildStartUrl(authPageUrl, provider, state, appId, authUrl);
-      const { code } = await openOAuthPopup(startUrl, pageOrigin, state);
-      const tokens = await postNewAuth(buildEndpoint(authUrl, `/${provider}`), {
-        code,
-        redirectUri,
-        appId
-      });
-      const response = normalizeResponse(tokens, authUrl);
+      const { token } = await openOAuthPopup(startUrl, pageOrigin, state);
+      const response = normalizeResponse(token, authUrl);
       autoConfigureFromLogin2(response, authUrl, projectId);
       return response;
     } finally {
@@ -456,25 +435,30 @@ async function loginMitra2(method, options) {
 }
 async function emailLoginMitra2(options) {
   const { authUrl, projectId } = resolveLoginOptions2(options);
-  const tokens = await postNewAuth(buildEndpoint(authUrl, "/login"), {
+  const data = await postBffAuth(buildBffAuthEndpoint(authUrl, "/email/login"), {
+    projectId: String(projectId),
     email: options.email,
-    password: options.password,
-    appId: String(projectId)
+    password: options.password
   });
-  const response = normalizeResponse(tokens, authUrl);
+  const response = {
+    token: data.token,
+    // baseURL = authUrl (o gateway configurado). O BFF não devolve baseURL/integrationURL;
+    // a base é sempre o gateway, resolvido no lado do SDK.
+    baseURL: authUrl,
+    // Guarda o refreshToken do login — é ele que vai no body do refresh depois.
+    ...data.refreshToken ? { refreshToken: data.refreshToken } : {}
+  };
   autoConfigureFromLogin2(response, authUrl, projectId);
   return response;
 }
 async function emailSignupMitra2(options) {
   const { authUrl, projectId } = resolveLoginOptions2(options);
-  const tokens = await postNewAuth(buildEndpoint(authUrl, "/register"), {
+  await postBffAuth(buildBffAuthEndpoint(authUrl, "/email/signup"), {
+    projectId: String(projectId),
     name: options.name,
     email: options.email,
-    password: options.password,
-    appId: String(projectId)
+    password: options.password
   });
-  const response = normalizeResponse(tokens, authUrl);
-  autoConfigureFromLogin2(response, authUrl, projectId);
 }
 async function emailVerifyCodeMitra2(_options) {
   throw new Error(NOT_SUPPORTED_VERIFY);
@@ -490,10 +474,15 @@ async function refreshTokenSilently2(authUrl, _projectId) {
       const config = isConfigured() ? getConfig() : null;
       const refreshToken = config == null ? void 0 : config.refreshToken;
       if (!refreshToken) {
-        throw new Error("refreshToken n\xE3o dispon\xEDvel para renova\xE7\xE3o no novo Mitra. Fa\xE7a login novamente.");
+        throw new Error("refreshToken n\xE3o dispon\xEDvel para renova\xE7\xE3o. Fa\xE7a login novamente.");
       }
-      const tokens = await postNewAuth(buildEndpoint(authUrl, "/refresh-token"), { refreshToken });
-      return normalizeResponse(tokens, authUrl);
+      const data = await postBffAuth(buildBffAuthEndpoint(authUrl, "/refresh-token"), { refreshToken });
+      return {
+        token: data.token,
+        // Refresh não muda a base — mantém o authUrl (gateway).
+        baseURL: authUrl,
+        ...data.refreshToken ? { refreshToken: data.refreshToken } : {}
+      };
     } finally {
       _refreshPromise2 = null;
     }
@@ -713,28 +702,30 @@ function buildUrl(endpoint, params) {
 async function tryRefreshToken() {
   var _a, _b;
   const config = getConfig();
-  if (!config.token || config.projectId == null) return false;
-  try {
-    const baseURL = config.baseURL.replace(/\/+$/, "");
-    const resp = await getFetch3()(`${baseURL}/mitraspace/project/refreshedToken/${config.projectId}`, {
-      method: "GET",
-      headers: { "Authorization": formatToken(config.token) }
-    });
-    if (resp.ok) {
-      const data = await resp.json();
-      if (data.token) {
-        const newToken = `Bearer ${stripBearer(data.token)}`;
-        const session = {
-          token: newToken,
-          baseURL: ((_a = data.merge) == null ? void 0 : _a.backURL) || config.baseURL,
-          ...((_b = data.merge) == null ? void 0 : _b.integrationURL) ? { integrationURL: data.merge.integrationURL } : {}
-        };
-        updateGlobalToken(session.token);
-        if (config.onTokenRefresh) config.onTokenRefresh(session);
-        return true;
+  if (!config.token || config.projectId == null || !config.baseURL) return false;
+  if (!isNewWorld()) {
+    try {
+      const baseURL = config.baseURL.replace(/\/+$/, "");
+      const resp = await getFetch3()(`${baseURL}/mitraspace/project/refreshedToken/${config.projectId}`, {
+        method: "GET",
+        headers: { "Authorization": formatToken(config.token) }
+      });
+      if (resp.ok) {
+        const data = await resp.json();
+        if (data.token) {
+          const newToken = `Bearer ${stripBearer(data.token)}`;
+          const session = {
+            token: newToken,
+            baseURL: ((_a = data.merge) == null ? void 0 : _a.backURL) || config.baseURL,
+            ...((_b = data.merge) == null ? void 0 : _b.integrationURL) ? { integrationURL: data.merge.integrationURL } : {}
+          };
+          updateGlobalToken(session.token);
+          if (config.onTokenRefresh) config.onTokenRefresh(session);
+          return true;
+        }
       }
+    } catch (e) {
     }
-  } catch (e) {
   }
   if (!config.authUrl || typeof window === "undefined") return false;
   try {
@@ -748,10 +739,11 @@ async function tryRefreshToken() {
 }
 async function handleResponse(response) {
   const text = await response.text();
-  const data = text ? JSON.parse(text) : null;
+  const { data, isJson } = parseBody(text);
   if (!response.ok) {
-    const base = (data == null ? void 0 : data.message) || (data == null ? void 0 : data.error) || `HTTP ${response.status}`;
-    const msg = (data == null ? void 0 : data.hint) ? `${base} \u2014 ${data.hint}` : base;
+    const fallback = !isJson && text ? `HTTP ${response.status} \u2014 ${text}` : `HTTP ${response.status}`;
+    const base = isJson && ((data == null ? void 0 : data.message) || (data == null ? void 0 : data.error)) || fallback;
+    const msg = isJson && (data == null ? void 0 : data.hint) ? `${base} \u2014 ${data.hint}` : base;
     throw {
       message: msg,
       status: response.status,
@@ -763,7 +755,8 @@ async function handleResponse(response) {
 async function fetchWithRefresh(url, init) {
   const fetchFn = getFetch3();
   const response = await fetchFn(url, init);
-  if (response.status === 403) {
+  const expiredStatus = isNewWorld() ? 401 : 403;
+  if (response.status === expiredStatus) {
     const refreshed = await tryRefreshToken();
     if (refreshed) {
       const newHeaders = { ...buildHeaders() };
@@ -2010,10 +2003,11 @@ function createMitraInstance(initialConfig) {
   }
   async function handleResponse2(response) {
     const text = await response.text();
-    const data = text ? JSON.parse(text) : null;
+    const { data, isJson } = parseBody(text);
     if (!response.ok) {
-      const base = (data == null ? void 0 : data.message) || (data == null ? void 0 : data.error) || `HTTP ${response.status}`;
-      const msg = (data == null ? void 0 : data.hint) ? `${base} \u2014 ${data.hint}` : base;
+      const fallback = !isJson && text ? `HTTP ${response.status} \u2014 ${text}` : `HTTP ${response.status}`;
+      const base = isJson && ((data == null ? void 0 : data.message) || (data == null ? void 0 : data.error)) || fallback;
+      const msg = isJson && (data == null ? void 0 : data.hint) ? `${base} \u2014 ${data.hint}` : base;
       throw { message: msg, status: response.status, details: data };
     }
     return data;
@@ -2359,6 +2353,45 @@ function stripBearer(token) {
   }
   return t;
 }
+function parseBody(text) {
+  if (!text) return { data: null, isJson: true };
+  try {
+    return { data: JSON.parse(text), isJson: true };
+  } catch (e) {
+    return { data: text, isJson: false };
+  }
+}
+var SESSION_STORE_KEY = "mitra-session";
+function safeLocalStorage() {
+  try {
+    return typeof localStorage !== "undefined" ? localStorage : null;
+  } catch (e) {
+    return null;
+  }
+}
+function persistRefreshToken(refreshToken) {
+  const ls = safeLocalStorage();
+  if (!ls) return;
+  try {
+    const raw = ls.getItem(SESSION_STORE_KEY);
+    const obj = raw ? JSON.parse(raw) : {};
+    obj.refreshToken = refreshToken;
+    ls.setItem(SESSION_STORE_KEY, JSON.stringify(obj));
+  } catch (e) {
+  }
+}
+function readPersistedRefreshToken() {
+  const ls = safeLocalStorage();
+  if (!ls) return void 0;
+  try {
+    const raw = ls.getItem(SESSION_STORE_KEY);
+    if (!raw) return void 0;
+    const obj = JSON.parse(raw);
+    return typeof (obj == null ? void 0 : obj.refreshToken) === "string" && obj.refreshToken ? obj.refreshToken : void 0;
+  } catch (e) {
+    return void 0;
+  }
+}
 function readInjectedEnv() {
   if (typeof window === "undefined") return {};
   const env = window.__mitraEnv;
@@ -2376,6 +2409,12 @@ function configureSdkMitra(config = {}) {
     throw new Error("baseURL \xE9 obrigat\xF3rio. Passe em configureSdkMitra({ baseURL }), fa\xE7a login para receber via sdk-auth, ou rode em uma app publicada pelo Mitra (window.__mitraEnv).");
   }
   if (merged.token != null) merged.token = stripBearer(merged.token);
+  if (!merged.refreshToken) {
+    const persisted = readPersistedRefreshToken();
+    if (persisted) merged.refreshToken = persisted;
+  } else {
+    persistRefreshToken(merged.refreshToken);
+  }
   globalConfig = {
     ...merged,
     baseURL: merged.baseURL.replace(/\/+$/, "")
@@ -2402,6 +2441,7 @@ function updateGlobalToken(token, refreshToken) {
       token: stripBearer(token),
       ...refreshToken !== void 0 ? { refreshToken } : {}
     };
+    if (refreshToken) persistRefreshToken(refreshToken);
   }
 }
 function resolveProjectId2(projectId) {