najm-auth 1.1.31 → 1.1.32

package/dist/index.d.ts

@@ -1006,6 +1006,10 @@ declare class AuthResolver {
     /**
      * Resolve the current user from the refresh cookie (cookie-only flow,
      * e.g. Next.js Server Components calling /auth/me with just the cookie).
+     *
+     * Read-only: does NOT rotate the refresh token. Rotation is reserved for
+     * the /auth/refresh handler. Mutating here races with /auth/refresh when
+     * requests are concurrent.
      */
     resolveFromCookie(): Promise<{
         user: any;

package/dist/index.js

@@ -2282,22 +2282,19 @@ var AuthResolver = class AuthResolver2 {
   /**
    * Resolve the current user from the refresh cookie (cookie-only flow,
    * e.g. Next.js Server Components calling /auth/me with just the cookie).
+   *
+   * Read-only: does NOT rotate the refresh token. Rotation is reserved for
+   * the /auth/refresh handler. Mutating here races with /auth/refresh when
+   * requests are concurrent.
    */
   async resolveFromCookie() {
     try {
-      const cookieManager = await this.container.resolve(CookieManager);
-      const refreshToken = cookieManager.getRefreshToken();
-      if (!refreshToken)
-        return false;
       const tokenService = await this.container.resolve(TokenService);
-      const result = await tokenService.validateRefreshSession(refreshToken);
-      if (!result.userId)
+      const userId = await tokenService.resolveUserFromCookie();
+      if (!userId)
         return false;
-      if (result.rotatedTokens) {
-        cookieManager.setRefreshToken(result.rotatedTokens.refreshToken);
-      }
       const userService = await this.container.resolve(UserService);
-      const user = await userService.getById(result.userId);
+      const user = await userService.getById(userId);
       if (!user)
         return false;
       return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "najm-auth",
-  "version": "1.1.31",
+  "version": "1.1.32",
   "description": "Authentication and authorization library for najm framework",
   "type": "module",
   "files": [