propro-utils 1.7.31 → 1.7.32

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "propro-utils",
-  "version": "1.7.31",
+  "version": "1.7.32",
   "description": "Auth middleware for propro-auth",
   "main": "src/index.js",
   "private": false,

package/src/server/index.js

@@ -251,13 +251,18 @@ class AuthMiddleware {
           account: { accountId: account.accountId, email: account.email },
         };
       } catch (error) {
-        console.error(`Token refresh failed after ${Date.now() - startTime}ms:`, error.message);
+        const status = error?.response?.status;
+        console.error(`Token refresh failed after ${Date.now() - startTime}ms (status: ${status}):`, error.message);
+        
+        // Immediately clean up lock on failure to prevent blocking
+        this.refreshLocks.delete(lockKey);
+        
         throw error;
       } finally {
-        // Clean up lock after 30 seconds
+        // Clean up lock after 30 seconds for successful requests
         setTimeout(() => {
           this.refreshLocks.delete(lockKey);
-          console.log('Refresh lock cleaned up');
+          console.log('Refresh lock cleaned up (delayed)');
         }, 30000);
       }
     })();
@@ -270,11 +275,27 @@ class AuthMiddleware {
       res.status(200).json(result);
     } catch (error) {
       console.error('Error refreshing token:', error);
+      
+      const status = error?.response?.status || 401;
       const errorMessage = error?.response?.data?.message || error?.message || 'Failed to refresh token';
-      res.status(401).json({ 
+      
+      // Pass through rate limit status
+      if (status === 429) {
+        const retryAfter = error?.response?.headers?.['retry-after'];
+        return res.status(429).json({ 
+          error: 'Too many requests',
+          message: 'Rate limit exceeded. Please try again later.',
+          retryAfter: retryAfter ? parseInt(retryAfter) : 900,
+        });
+      }
+      
+      // Handle 401 unauthorized
+      res.status(status).json({ 
         error: 'Failed to refresh token',
         message: errorMessage,
-        details: 'Your session could not be refreshed. Please log in again.',
+        details: status === 401 
+          ? 'Your session has expired. Please log in again.'
+          : 'Your session could not be refreshed. Please log in again.',
       });
     }
   };