najm-auth 3.3.1 → 3.3.2

package/dist/{NajmAuthClient-ZtXTIUSF.d.ts → NajmAuthClient-BBl-GRis.d.ts}

@@ -110,6 +110,7 @@ declare class NajmAuthClient {
     private _refreshWithCircuit;
     private _doRefresh;
     private handleUnauthorized;
+    private requestServerLogout;
     private applyTokens;
     private scheduleRefresh;
     private clearRefreshTimer;

package/dist/client/index.d.ts

@@ -1,4 +1,4 @@
-export { F as FetchClient, H as HydrateSession, N as NajmAuthClient, c as createAuthClient } from '../NajmAuthClient-ZtXTIUSF.js';
+export { F as FetchClient, H as HydrateSession, N as NajmAuthClient, c as createAuthClient } from '../NajmAuthClient-BBl-GRis.js';
 import { D as DecodedToken, T as TabSyncMessage, S as SyncPayload } from '../types-BaSfgxqE.js';
 export { b as AuthClientConfig, h as AuthError, f as AuthEvent, g as AuthEventHandler, i as AuthEventMap, e as AuthState, A as AuthUser, j as AuthenticatedLogin, C as CredentialSetupPending, L as LoginCredentials, c as LoginResult, d as OAuthLoginOptions, O as OAuthProvider, a as RequestOptions, R as RetryConfig, k as ServerResponse, l as TokenPair } from '../types-BaSfgxqE.js';
 

package/dist/client/index.js

@@ -364,7 +364,7 @@ var NajmAuthClient = class _NajmAuthClient {
     this.emit("logout", null);
     try {
       await pendingRefresh?.catch(() => void 0);
-      await this.api.post(`${this.prefix}/logout`, { skipAuth: true });
+      await this.requestServerLogout();
     } catch (err) {
       this.emit("logoutError", err);
     }
@@ -549,6 +549,7 @@ var NajmAuthClient = class _NajmAuthClient {
       if (generation !== this.authGeneration) return;
       const shouldOpenCircuit = this.registerRefreshFailure(err);
       if (shouldOpenCircuit) {
+        await this.requestServerLogout().catch(() => void 0);
         this.resetState();
         this.emit("sessionExpired", null);
         if (err instanceof AuthError && err.status === 401) {
@@ -578,6 +579,9 @@ var NajmAuthClient = class _NajmAuthClient {
       return null;
     }
   }
+  async requestServerLogout() {
+    await this.api.post(`${this.prefix}/logout`, { skipAuth: true });
+  }
   applyTokens(tokens) {
     this.resetRefreshFailures();
     const decoded = decodeToken(tokens.accessToken);
@@ -618,7 +622,7 @@ var NajmAuthClient = class _NajmAuthClient {
     this.clearRefreshCircuitTimer();
   }
   registerRefreshFailure(err) {
-    if (err instanceof AuthError && err.status === 401) {
+    if (err instanceof AuthError && [401, 403, 429].includes(err.status)) {
       this.refreshFailures = _NajmAuthClient.MAX_REFRESH_FAILURES;
     } else {
       this.refreshFailures += 1;

package/dist/client/react/index.d.ts

@@ -1,6 +1,6 @@
 import * as react from 'react';
 import { ReactNode, CSSProperties, ReactElement } from 'react';
-import { N as NajmAuthClient, H as HydrateSession } from '../../NajmAuthClient-ZtXTIUSF.js';
+import { N as NajmAuthClient, H as HydrateSession } from '../../NajmAuthClient-BBl-GRis.js';
 import { e as AuthState, A as AuthUser, c as LoginResult, h as AuthError, L as LoginCredentials, d as OAuthLoginOptions, f as AuthEvent, i as AuthEventMap } from '../../types-BaSfgxqE.js';
 
 interface AuthProviderProps {

package/dist/client/server/index.d.ts

@@ -1,5 +1,5 @@
 import { A as AuthUser, R as RetryConfig } from '../../types-BaSfgxqE.js';
-import { F as FetchClient, N as NajmAuthClient } from '../../NajmAuthClient-ZtXTIUSF.js';
+import { F as FetchClient, N as NajmAuthClient } from '../../NajmAuthClient-BBl-GRis.js';
 import { ProxySessionMode } from '../edge.js';
 export { withAuthMiddleware } from '../edge.js';
 import { G as GetSessionConfig, S as ServerSession$1 } from '../../getSession-BthP85UA.js';

package/dist/client/server/index.js

@@ -1075,7 +1075,7 @@ var NajmAuthClient = class _NajmAuthClient {
     this.emit("logout", null);
     try {
       await pendingRefresh?.catch(() => void 0);
-      await this.api.post(`${this.prefix}/logout`, { skipAuth: true });
+      await this.requestServerLogout();
     } catch (err) {
       this.emit("logoutError", err);
     }
@@ -1260,6 +1260,7 @@ var NajmAuthClient = class _NajmAuthClient {
       if (generation !== this.authGeneration) return;
       const shouldOpenCircuit = this.registerRefreshFailure(err);
       if (shouldOpenCircuit) {
+        await this.requestServerLogout().catch(() => void 0);
         this.resetState();
         this.emit("sessionExpired", null);
         if (err instanceof AuthError && err.status === 401) {
@@ -1289,6 +1290,9 @@ var NajmAuthClient = class _NajmAuthClient {
       return null;
     }
   }
+  async requestServerLogout() {
+    await this.api.post(`${this.prefix}/logout`, { skipAuth: true });
+  }
   applyTokens(tokens) {
     this.resetRefreshFailures();
     const decoded = decodeToken(tokens.accessToken);
@@ -1329,7 +1333,7 @@ var NajmAuthClient = class _NajmAuthClient {
     this.clearRefreshCircuitTimer();
   }
   registerRefreshFailure(err) {
-    if (err instanceof AuthError && err.status === 401) {
+    if (err instanceof AuthError && [401, 403, 429].includes(err.status)) {
       this.refreshFailures = _NajmAuthClient.MAX_REFRESH_FAILURES;
     } else {
       this.refreshFailures += 1;

package/dist/index.d.ts

@@ -1626,7 +1626,7 @@ declare class AuthService {
     recoverSession(): Promise<{
         recovered: true;
     }>;
-    logoutUser(userId: string, authorization?: string): Promise<{
+    logoutUser(userId: string | undefined, authorization?: string): Promise<{
         data: any;
         message: string;
     }>;
@@ -1703,7 +1703,7 @@ declare class AuthController {
     recoverSession(recoveryRequest: string | undefined, ctx: Context): Promise<{
         recovered: true;
     }>;
-    logoutUser(userId: string, authorization?: string): Promise<{
+    logoutUser(userId: string | undefined, authorization?: string): Promise<{
         data: any;
         message: string;
     }>;

package/dist/index.js

@@ -3361,9 +3361,14 @@ var AuthService = class AuthService2 {
     return { recovered: true };
   }
   async logoutUser(userId, authorization) {
-    await this.tokenService.logout(userId, authorization);
-    this.cookieManager.clearRefreshToken();
-    this.cookieManager.clearSessionCookie();
+    try {
+      if (userId) {
+        await this.tokenService.logout(userId, authorization);
+      }
+    } finally {
+      this.cookieManager.clearRefreshToken();
+      this.cookieManager.clearSessionCookie();
+    }
     return { data: null, message: this.t("auth.success.logout") };
   }
   /**
@@ -3857,8 +3862,6 @@ __decorate20([
 ], AuthController.prototype, "recoverSession", null);
 __decorate20([
   Post("/logout"),
-  isAuth(),
-  RateLimit({ limit: 10, window: "15m", key: "user" }),
   __param5(0, User2("id")),
   __param5(1, Headers("authorization")),
   __metadata20("design:type", Function),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "najm-auth",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "Authentication and authorization library for najm framework",
   "type": "module",
   "files": [