sabha-meetings-react 0.1.3 → 0.1.5

package/dist/index.d.mts

@@ -19,8 +19,13 @@ type SabhaConfig = {
     /** Optional bearer access token */
     accessToken?: string;
     refreshToken?: string;
-    /** Persist/reuse `vm_session` outside the browser */
+    /** Persist/reuse `vm_session` (also sent as x-sabha-session for proxies). */
     sessionCookie?: string;
+    /**
+     * Persist `vm_session` in localStorage after login and restore on configure.
+     * Default true in browsers.
+     */
+    persistSession?: boolean;
     /** Send cookies (`credentials: "include"`). Default true. */
     withCredentials?: boolean;
     socketPath?: string;
@@ -342,6 +347,7 @@ declare class SabhaClient {
     getConnection(): MeetingConnection | null;
     leaveMeeting(): Promise<void>;
     private applySession;
+    private persistSessionCookie;
     private tryRefresh;
     private getOrigin;
     private ensureConfigured;
@@ -427,5 +433,11 @@ declare function toSabhaError(error: unknown, fallback?: string): SabhaError;
 
 declare function normalizeMeeting(raw: unknown): Meeting;
 
-export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, toSabhaError, useSabha, useSabhaMeetings };
+/** Readable session bridge header (browsers cannot set the Cookie request header). */
+declare const SABHA_SESSION_HEADER = "x-sabha-session";
+declare const SABHA_SESSION_STORAGE_KEY = "sabha_vm_session";
+declare function readStoredSessionCookie(): string | null;
+declare function writeStoredSessionCookie(value: string | null): void;
+
+export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SABHA_SESSION_HEADER, SABHA_SESSION_STORAGE_KEY, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, readStoredSessionCookie, toSabhaError, useSabha, useSabhaMeetings, writeStoredSessionCookie };
 export type { AuthSession, AuthUser, CaptureAttemptType, CreateMeetingInput, LocalMediaState, LoginInput, MediaPolicy, MediaTrackKind, Meeting, MeetingConnectionOptions, MeetingConnectionState, MeetingInvitee, MeetingOrganizer, MeetingParticipant, MeetingRoomEventMap, RegisterInput, SabhaClientStatus, SabhaConfig, SabhaContextValue, SabhaOrg, SabhaProviderProps, SabhaSocketEvents, SabhaTokens, UpdateMeetingInput, VerifyEmailInput };

package/dist/index.d.ts

@@ -19,8 +19,13 @@ type SabhaConfig = {
     /** Optional bearer access token */
     accessToken?: string;
     refreshToken?: string;
-    /** Persist/reuse `vm_session` outside the browser */
+    /** Persist/reuse `vm_session` (also sent as x-sabha-session for proxies). */
     sessionCookie?: string;
+    /**
+     * Persist `vm_session` in localStorage after login and restore on configure.
+     * Default true in browsers.
+     */
+    persistSession?: boolean;
     /** Send cookies (`credentials: "include"`). Default true. */
     withCredentials?: boolean;
     socketPath?: string;
@@ -342,6 +347,7 @@ declare class SabhaClient {
     getConnection(): MeetingConnection | null;
     leaveMeeting(): Promise<void>;
     private applySession;
+    private persistSessionCookie;
     private tryRefresh;
     private getOrigin;
     private ensureConfigured;
@@ -427,5 +433,11 @@ declare function toSabhaError(error: unknown, fallback?: string): SabhaError;
 
 declare function normalizeMeeting(raw: unknown): Meeting;
 
-export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, toSabhaError, useSabha, useSabhaMeetings };
+/** Readable session bridge header (browsers cannot set the Cookie request header). */
+declare const SABHA_SESSION_HEADER = "x-sabha-session";
+declare const SABHA_SESSION_STORAGE_KEY = "sabha_vm_session";
+declare function readStoredSessionCookie(): string | null;
+declare function writeStoredSessionCookie(value: string | null): void;
+
+export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SABHA_SESSION_HEADER, SABHA_SESSION_STORAGE_KEY, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, readStoredSessionCookie, toSabhaError, useSabha, useSabhaMeetings, writeStoredSessionCookie };
 export type { AuthSession, AuthUser, CaptureAttemptType, CreateMeetingInput, LocalMediaState, LoginInput, MediaPolicy, MediaTrackKind, Meeting, MeetingConnectionOptions, MeetingConnectionState, MeetingInvitee, MeetingOrganizer, MeetingParticipant, MeetingRoomEventMap, RegisterInput, SabhaClientStatus, SabhaConfig, SabhaContextValue, SabhaOrg, SabhaProviderProps, SabhaSocketEvents, SabhaTokens, UpdateMeetingInput, VerifyEmailInput };

package/dist/index.js

@@ -163,6 +163,30 @@ function toSabhaError(error, fallback = "Sabha request failed") {
   return new SabhaError(fallback, { details: error });
 }
 
+// src/session.ts
+var SABHA_SESSION_HEADER = "x-sabha-session";
+var SABHA_SESSION_STORAGE_KEY = "sabha_vm_session";
+function readStoredSessionCookie() {
+  try {
+    if (typeof localStorage === "undefined") return null;
+    return localStorage.getItem(SABHA_SESSION_STORAGE_KEY);
+  } catch {
+    return null;
+  }
+}
+function writeStoredSessionCookie(value) {
+  try {
+    if (typeof localStorage === "undefined") return;
+    if (!value) localStorage.removeItem(SABHA_SESSION_STORAGE_KEY);
+    else localStorage.setItem(SABHA_SESSION_STORAGE_KEY, value);
+  } catch {
+  }
+}
+function parseVmSession(cookieHeader) {
+  const match = /(?:^|,\s*)vm_session=([^;]+)/i.exec(cookieHeader);
+  return match?.[1] ? decodeURIComponent(match[1].trim()) : null;
+}
+
 // src/http/client.ts
 function joinUrl(baseUrl, path) {
   const base = baseUrl.replace(/\/+$/, "");
@@ -196,15 +220,21 @@ function messageFromBody(body, fallback) {
   if (typeof record.error === "string") return record.error;
   return fallback;
 }
-function readSetCookie(response) {
+function isBrowser() {
+  const runtime = globalThis;
+  return typeof runtime.window !== "undefined" && typeof runtime.document !== "undefined";
+}
+function readSessionFromResponse(response) {
+  const bridged = response.headers.get(SABHA_SESSION_HEADER);
+  if (bridged?.trim()) return bridged.trim();
   const anyHeaders = response.headers;
   const list = typeof anyHeaders.getSetCookie === "function" ? anyHeaders.getSetCookie() : (() => {
     const single = response.headers.get("set-cookie");
     return single ? [single] : [];
   })();
   for (const entry of list) {
-    const match = /(?:^|,\s*)vm_session=([^;]+)/i.exec(entry);
-    if (match?.[1]) return match[1];
+    const value = parseVmSession(entry);
+    if (value) return value;
   }
   return null;
 }
@@ -218,10 +248,8 @@ var HttpClient = class {
         Accept: "application/json",
         ...options.headers
       };
-      const runtime = globalThis;
-      const isBrowser = typeof runtime.window !== "undefined" && typeof runtime.document !== "undefined";
       const origin = this.options.getOrigin();
-      if (!isBrowser && origin) headers.Origin = origin;
+      if (!isBrowser() && origin) headers.Origin = origin;
       const tokens = this.options.getTokens();
       const needsAuth = options.auth !== false;
       if (tokens?.accessToken) {
@@ -233,7 +261,10 @@ var HttpClient = class {
         );
       }
       if (tokens?.sessionCookie) {
-        headers.Cookie = `vm_session=${tokens.sessionCookie}`;
+        headers[SABHA_SESSION_HEADER] = tokens.sessionCookie;
+        if (!isBrowser()) {
+          headers.Cookie = `vm_session=${tokens.sessionCookie}`;
+        }
       }
       if (options.body !== void 0) {
         headers["Content-Type"] = "application/json";
@@ -247,7 +278,7 @@ var HttpClient = class {
           credentials: this.options.withCredentials ? "include" : "same-origin"
         }
       );
-      const session = readSetCookie(response);
+      const session = readSessionFromResponse(response);
       if (session) this.options.onSessionCookie?.(session);
       const body = await parseBody(response);
       if (response.status === 401 && needsAuth && !retried && this.options.onUnauthorized) {
@@ -832,6 +863,7 @@ var SabhaClient = class {
     );
     this.config = {
       withCredentials: true,
+      persistSession: true,
       ...this.config,
       ...config,
       baseUrl
@@ -840,14 +872,12 @@ var SabhaClient = class {
       ...DEFAULT_MEDIA_POLICY,
       ...this.config.mediaPolicy
     };
+    const stored = this.config.persistSession !== false ? readStoredSessionCookie() : null;
     this.tokens = {
       accessToken: config.accessToken ?? this.tokens?.accessToken,
       refreshToken: config.refreshToken ?? this.tokens?.refreshToken,
-      sessionCookie: config.sessionCookie ?? this.tokens?.sessionCookie
+      sessionCookie: config.sessionCookie ?? this.tokens?.sessionCookie ?? stored ?? void 0
     };
-    if (!this.tokens.accessToken && !this.tokens.sessionCookie && !this.tokens.refreshToken) {
-      if (!config.accessToken && !config.sessionCookie && !config.refreshToken) ;
-    }
     const hasAnyToken = Boolean(
       this.tokens.accessToken || this.tokens.sessionCookie || this.tokens.refreshToken
     );
@@ -861,10 +891,7 @@ var SabhaClient = class {
         this.tokens = tokens;
       },
       onSessionCookie: (cookie) => {
-        this.tokens = {
-          ...this.tokens ?? {},
-          sessionCookie: cookie ?? void 0
-        };
+        this.persistSessionCookie(cookie);
       },
       onUnauthorized: () => this.tryRefresh()
     });
@@ -906,28 +933,41 @@ var SabhaClient = class {
   clearSession() {
     this.tokens = null;
     this.user = null;
+    this.persistSessionCookie(null);
     this.activeConnection?.disconnect();
     this.activeConnection = null;
   }
   async login(input) {
     const session = await this.auth().login(input);
     this.applySession(session);
+    if (session.accessToken) {
+      this.persistSessionCookie(this.tokens?.sessionCookie ?? null);
+    } else if (session.sessionCookie || this.tokens?.sessionCookie) {
+      this.persistSessionCookie(session.sessionCookie ?? this.tokens?.sessionCookie ?? null);
+    }
     try {
       const me = await this.auth().me();
       this.user = me;
       session.user = me;
+      session.sessionCookie = this.tokens?.sessionCookie;
+      return session;
     } catch (error) {
-      this.clearSession();
-      throw new SabhaError(
-        "Login returned a user profile but no Sabha session was established. The API did not set `vm_session` (and no JWT token was returned), so POST /api/meetings will return 401 Sign in first. Fix session cookies on sabha-api (Set-Cookie: vm_session; SameSite=None; Secure for cross-origin) or return a bearer token from /api/auth/login.",
-        {
-          code: "SESSION_NOT_ESTABLISHED",
-          status: 401,
-          cause: error
-        }
+      const hasCredential = Boolean(
+        this.tokens?.accessToken || this.tokens?.sessionCookie
       );
+      if (!hasCredential) {
+        this.clearSession();
+        throw new SabhaError(
+          "Login returned a user profile but no auth credential. Need JWT `token` from /api/auth/login (Postman) or Set-Cookie vm_session (exposed to the app as x-sabha-session via /sabha proxy). Without that, POST /api/meetings returns 401 Sign in first.",
+          {
+            code: "SESSION_NOT_ESTABLISHED",
+            status: 401,
+            cause: error
+          }
+        );
+      }
+      throw error;
     }
-    return session;
   }
   /** Throws if /api/auth/me fails — call before create/start meeting. */
   async ensureAuthenticated() {
@@ -1057,6 +1097,23 @@ var SabhaClient = class {
       refreshToken: session.refreshToken ?? this.tokens?.refreshToken,
       sessionCookie: session.sessionCookie ?? this.tokens?.sessionCookie
     };
+    if (this.tokens.sessionCookie) {
+      this.persistSessionCookie(this.tokens.sessionCookie);
+    }
+  }
+  persistSessionCookie(cookie) {
+    if (cookie) {
+      this.tokens = {
+        ...this.tokens ?? {},
+        sessionCookie: cookie
+      };
+    } else if (this.tokens) {
+      const { sessionCookie: _removed, ...rest } = this.tokens;
+      this.tokens = Object.keys(rest).length ? rest : null;
+    }
+    if (this.config.persistSession !== false) {
+      writeStoredSessionCookie(cookie ?? null);
+    }
   }
   async tryRefresh() {
     if (!this.tokens?.refreshToken) return false;
@@ -1119,6 +1176,7 @@ function SabhaProvider({
   const resolvedConfig = {
     baseUrl: DEFAULT_BASE_URL,
     withCredentials: true,
+    persistSession: true,
     ...config
   };
   const client = react.useMemo(
@@ -1456,13 +1514,17 @@ exports.DEFAULT_BASE_URL = DEFAULT_BASE_URL;
 exports.DEFAULT_MEDIA_POLICY = DEFAULT_MEDIA_POLICY;
 exports.MediaController = MediaController;
 exports.MeetingConnection = MeetingConnection;
+exports.SABHA_SESSION_HEADER = SABHA_SESSION_HEADER;
+exports.SABHA_SESSION_STORAGE_KEY = SABHA_SESSION_STORAGE_KEY;
 exports.SabhaClient = SabhaClient;
 exports.SabhaError = SabhaError;
 exports.SabhaProvider = SabhaProvider;
 exports.createSabhaClient = createSabhaClient;
 exports.normalizeMeeting = normalizeMeeting;
+exports.readStoredSessionCookie = readStoredSessionCookie;
 exports.toSabhaError = toSabhaError;
 exports.useSabha = useSabha;
 exports.useSabhaMeetings = useSabhaMeetings;
+exports.writeStoredSessionCookie = writeStoredSessionCookie;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map