sabha-meetings-react 0.1.4 → 0.1.7

package/dist/index.d.mts

@@ -2,10 +2,11 @@ import * as react from 'react';
 import { ReactNode } from 'react';
 
 type SabhaTokens = {
-    /** Optional bearer token (Postman-style). Live API primarily uses `vm_session` cookie. */
+    /** Bearer access token from login `token` (Postman `accessToken`). */
     accessToken?: string;
+    /** Refresh token from login `refreshToken` (Postman). */
     refreshToken?: string;
-    /** Session cookie value when running outside the browser (Node / RN). */
+    /** Optional legacy `vm_session` cookie / x-sabha-session bridge. */
     sessionCookie?: string;
 };
 type SabhaConfig = {
@@ -19,8 +20,13 @@ type SabhaConfig = {
     /** Optional bearer access token */
     accessToken?: string;
     refreshToken?: string;
-    /** Persist/reuse `vm_session` outside the browser */
+    /** Optional legacy `vm_session` (also sent as x-sabha-session for proxies). */
     sessionCookie?: string;
+    /**
+     * Persist access/refresh tokens (and optional vm_session) after login and restore on configure.
+     * Matches Postman collection variables. Default true.
+     */
+    persistSession?: boolean;
     /** Send cookies (`credentials: "include"`). Default true. */
     withCredentials?: boolean;
     socketPath?: string;
@@ -342,6 +348,8 @@ declare class SabhaClient {
     getConnection(): MeetingConnection | null;
     leaveMeeting(): Promise<void>;
     private applySession;
+    private persistTokens;
+    private persistSessionCookie;
     private tryRefresh;
     private getOrigin;
     private ensureConfigured;
@@ -427,5 +435,16 @@ declare function toSabhaError(error: unknown, fallback?: string): SabhaError;
 
 declare function normalizeMeeting(raw: unknown): Meeting;
 
-export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, toSabhaError, useSabha, useSabhaMeetings };
+/** Readable session bridge header (browsers cannot set the Cookie request header). */
+declare const SABHA_SESSION_HEADER = "x-sabha-session";
+/** @deprecated Prefer SABHA_TOKENS_STORAGE_KEY — kept for one-time migration. */
+declare const SABHA_SESSION_STORAGE_KEY = "sabha_vm_session";
+/** Persists Postman-style `accessToken` / `refreshToken` (+ optional vm_session). */
+declare const SABHA_TOKENS_STORAGE_KEY = "sabha_auth_tokens";
+declare function readStoredTokens(): SabhaTokens | null;
+declare function writeStoredTokens(tokens: SabhaTokens | null): void;
+declare function readStoredSessionCookie(): string | null;
+declare function writeStoredSessionCookie(value: string | null): void;
+
+export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SABHA_SESSION_HEADER, SABHA_SESSION_STORAGE_KEY, SABHA_TOKENS_STORAGE_KEY, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, readStoredSessionCookie, readStoredTokens, toSabhaError, useSabha, useSabhaMeetings, writeStoredSessionCookie, writeStoredTokens };
 export type { AuthSession, AuthUser, CaptureAttemptType, CreateMeetingInput, LocalMediaState, LoginInput, MediaPolicy, MediaTrackKind, Meeting, MeetingConnectionOptions, MeetingConnectionState, MeetingInvitee, MeetingOrganizer, MeetingParticipant, MeetingRoomEventMap, RegisterInput, SabhaClientStatus, SabhaConfig, SabhaContextValue, SabhaOrg, SabhaProviderProps, SabhaSocketEvents, SabhaTokens, UpdateMeetingInput, VerifyEmailInput };

package/dist/index.d.ts

@@ -2,10 +2,11 @@ import * as react from 'react';
 import { ReactNode } from 'react';
 
 type SabhaTokens = {
-    /** Optional bearer token (Postman-style). Live API primarily uses `vm_session` cookie. */
+    /** Bearer access token from login `token` (Postman `accessToken`). */
     accessToken?: string;
+    /** Refresh token from login `refreshToken` (Postman). */
     refreshToken?: string;
-    /** Session cookie value when running outside the browser (Node / RN). */
+    /** Optional legacy `vm_session` cookie / x-sabha-session bridge. */
     sessionCookie?: string;
 };
 type SabhaConfig = {
@@ -19,8 +20,13 @@ type SabhaConfig = {
     /** Optional bearer access token */
     accessToken?: string;
     refreshToken?: string;
-    /** Persist/reuse `vm_session` outside the browser */
+    /** Optional legacy `vm_session` (also sent as x-sabha-session for proxies). */
     sessionCookie?: string;
+    /**
+     * Persist access/refresh tokens (and optional vm_session) after login and restore on configure.
+     * Matches Postman collection variables. Default true.
+     */
+    persistSession?: boolean;
     /** Send cookies (`credentials: "include"`). Default true. */
     withCredentials?: boolean;
     socketPath?: string;
@@ -342,6 +348,8 @@ declare class SabhaClient {
     getConnection(): MeetingConnection | null;
     leaveMeeting(): Promise<void>;
     private applySession;
+    private persistTokens;
+    private persistSessionCookie;
     private tryRefresh;
     private getOrigin;
     private ensureConfigured;
@@ -427,5 +435,16 @@ declare function toSabhaError(error: unknown, fallback?: string): SabhaError;
 
 declare function normalizeMeeting(raw: unknown): Meeting;
 
-export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, toSabhaError, useSabha, useSabhaMeetings };
+/** Readable session bridge header (browsers cannot set the Cookie request header). */
+declare const SABHA_SESSION_HEADER = "x-sabha-session";
+/** @deprecated Prefer SABHA_TOKENS_STORAGE_KEY — kept for one-time migration. */
+declare const SABHA_SESSION_STORAGE_KEY = "sabha_vm_session";
+/** Persists Postman-style `accessToken` / `refreshToken` (+ optional vm_session). */
+declare const SABHA_TOKENS_STORAGE_KEY = "sabha_auth_tokens";
+declare function readStoredTokens(): SabhaTokens | null;
+declare function writeStoredTokens(tokens: SabhaTokens | null): void;
+declare function readStoredSessionCookie(): string | null;
+declare function writeStoredSessionCookie(value: string | null): void;
+
+export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SABHA_SESSION_HEADER, SABHA_SESSION_STORAGE_KEY, SABHA_TOKENS_STORAGE_KEY, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, readStoredSessionCookie, readStoredTokens, toSabhaError, useSabha, useSabhaMeetings, writeStoredSessionCookie, writeStoredTokens };
 export type { AuthSession, AuthUser, CaptureAttemptType, CreateMeetingInput, LocalMediaState, LoginInput, MediaPolicy, MediaTrackKind, Meeting, MeetingConnectionOptions, MeetingConnectionState, MeetingInvitee, MeetingOrganizer, MeetingParticipant, MeetingRoomEventMap, RegisterInput, SabhaClientStatus, SabhaConfig, SabhaContextValue, SabhaOrg, SabhaProviderProps, SabhaSocketEvents, SabhaTokens, UpdateMeetingInput, VerifyEmailInput };

package/dist/index.js

@@ -163,6 +163,83 @@ function toSabhaError(error, fallback = "Sabha request failed") {
   return new SabhaError(fallback, { details: error });
 }
 
+// src/session.ts
+var SABHA_SESSION_HEADER = "x-sabha-session";
+var SABHA_SESSION_STORAGE_KEY = "sabha_vm_session";
+var SABHA_TOKENS_STORAGE_KEY = "sabha_auth_tokens";
+function readJson(key) {
+  try {
+    if (typeof localStorage === "undefined") return null;
+    const raw = localStorage.getItem(key);
+    if (!raw) return null;
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function writeJson(key, value) {
+  try {
+    if (typeof localStorage === "undefined") return;
+    if (value == null) localStorage.removeItem(key);
+    else localStorage.setItem(key, JSON.stringify(value));
+  } catch {
+  }
+}
+function readStoredTokens() {
+  const parsed = readJson(SABHA_TOKENS_STORAGE_KEY);
+  if (parsed && typeof parsed === "object") {
+    const record = parsed;
+    const tokens = {
+      accessToken: typeof record.accessToken === "string" ? record.accessToken : void 0,
+      refreshToken: typeof record.refreshToken === "string" ? record.refreshToken : void 0,
+      sessionCookie: typeof record.sessionCookie === "string" ? record.sessionCookie : void 0
+    };
+    if (tokens.accessToken || tokens.refreshToken || tokens.sessionCookie) {
+      return tokens;
+    }
+  }
+  const legacy = readStoredSessionCookie();
+  if (legacy) {
+    const migrated = { sessionCookie: legacy };
+    writeStoredTokens(migrated);
+    return migrated;
+  }
+  return null;
+}
+function writeStoredTokens(tokens) {
+  if (!tokens || !tokens.accessToken && !tokens.refreshToken && !tokens.sessionCookie) {
+    writeJson(SABHA_TOKENS_STORAGE_KEY, null);
+    writeStoredSessionCookie(null);
+    return;
+  }
+  writeJson(SABHA_TOKENS_STORAGE_KEY, {
+    accessToken: tokens.accessToken,
+    refreshToken: tokens.refreshToken,
+    sessionCookie: tokens.sessionCookie
+  });
+  writeStoredSessionCookie(tokens.sessionCookie ?? null);
+}
+function readStoredSessionCookie() {
+  try {
+    if (typeof localStorage === "undefined") return null;
+    return localStorage.getItem(SABHA_SESSION_STORAGE_KEY);
+  } catch {
+    return null;
+  }
+}
+function writeStoredSessionCookie(value) {
+  try {
+    if (typeof localStorage === "undefined") return;
+    if (!value) localStorage.removeItem(SABHA_SESSION_STORAGE_KEY);
+    else localStorage.setItem(SABHA_SESSION_STORAGE_KEY, value);
+  } catch {
+  }
+}
+function parseVmSession(cookieHeader) {
+  const match = /(?:^|,\s*)vm_session=([^;]+)/i.exec(cookieHeader);
+  return match?.[1] ? decodeURIComponent(match[1].trim()) : null;
+}
+
 // src/http/client.ts
 function joinUrl(baseUrl, path) {
   const base = baseUrl.replace(/\/+$/, "");
@@ -196,15 +273,21 @@ function messageFromBody(body, fallback) {
   if (typeof record.error === "string") return record.error;
   return fallback;
 }
-function readSetCookie(response) {
+function isBrowser() {
+  const runtime = globalThis;
+  return typeof runtime.window !== "undefined" && typeof runtime.document !== "undefined";
+}
+function readSessionFromResponse(response) {
+  const bridged = response.headers.get(SABHA_SESSION_HEADER);
+  if (bridged?.trim()) return bridged.trim();
   const anyHeaders = response.headers;
   const list = typeof anyHeaders.getSetCookie === "function" ? anyHeaders.getSetCookie() : (() => {
     const single = response.headers.get("set-cookie");
     return single ? [single] : [];
   })();
   for (const entry of list) {
-    const match = /(?:^|,\s*)vm_session=([^;]+)/i.exec(entry);
-    if (match?.[1]) return match[1];
+    const value = parseVmSession(entry);
+    if (value) return value;
   }
   return null;
 }
@@ -218,10 +301,8 @@ var HttpClient = class {
         Accept: "application/json",
         ...options.headers
       };
-      const runtime = globalThis;
-      const isBrowser = typeof runtime.window !== "undefined" && typeof runtime.document !== "undefined";
       const origin = this.options.getOrigin();
-      if (!isBrowser && origin) headers.Origin = origin;
+      if (!isBrowser() && origin) headers.Origin = origin;
       const tokens = this.options.getTokens();
       const needsAuth = options.auth !== false;
       if (tokens?.accessToken) {
@@ -233,7 +314,10 @@ var HttpClient = class {
         );
       }
       if (tokens?.sessionCookie) {
-        headers.Cookie = `vm_session=${tokens.sessionCookie}`;
+        headers[SABHA_SESSION_HEADER] = tokens.sessionCookie;
+        if (!isBrowser()) {
+          headers.Cookie = `vm_session=${tokens.sessionCookie}`;
+        }
       }
       if (options.body !== void 0) {
         headers["Content-Type"] = "application/json";
@@ -247,7 +331,7 @@ var HttpClient = class {
           credentials: this.options.withCredentials ? "include" : "same-origin"
         }
       );
-      const session = readSetCookie(response);
+      const session = readSessionFromResponse(response);
       if (session) this.options.onSessionCookie?.(session);
       const body = await parseBody(response);
       if (response.status === 401 && needsAuth && !retried && this.options.onUnauthorized) {
@@ -832,6 +916,7 @@ var SabhaClient = class {
     );
     this.config = {
       withCredentials: true,
+      persistSession: true,
       ...this.config,
       ...config,
       baseUrl
@@ -840,18 +925,19 @@ var SabhaClient = class {
       ...DEFAULT_MEDIA_POLICY,
       ...this.config.mediaPolicy
     };
+    const stored = this.config.persistSession !== false ? readStoredTokens() : null;
     this.tokens = {
-      accessToken: config.accessToken ?? this.tokens?.accessToken,
-      refreshToken: config.refreshToken ?? this.tokens?.refreshToken,
-      sessionCookie: config.sessionCookie ?? this.tokens?.sessionCookie
+      accessToken: config.accessToken ?? this.tokens?.accessToken ?? stored?.accessToken,
+      refreshToken: config.refreshToken ?? this.tokens?.refreshToken ?? stored?.refreshToken,
+      sessionCookie: config.sessionCookie ?? this.tokens?.sessionCookie ?? stored?.sessionCookie ?? void 0
     };
-    if (!this.tokens.accessToken && !this.tokens.sessionCookie && !this.tokens.refreshToken) {
-      if (!config.accessToken && !config.sessionCookie && !config.refreshToken) ;
-    }
     const hasAnyToken = Boolean(
       this.tokens.accessToken || this.tokens.sessionCookie || this.tokens.refreshToken
     );
     if (!hasAnyToken) this.tokens = null;
+    else if (this.config.persistSession !== false) {
+      this.persistTokens(this.tokens);
+    }
     this.http = new HttpClient({
       baseUrl,
       withCredentials: this.config.withCredentials !== false,
@@ -859,12 +945,12 @@ var SabhaClient = class {
       getTokens: () => this.tokens,
       setTokens: (tokens) => {
         this.tokens = tokens;
+        if (this.config.persistSession !== false) {
+          this.persistTokens(tokens);
+        }
       },
       onSessionCookie: (cookie) => {
-        this.tokens = {
-          ...this.tokens ?? {},
-          sessionCookie: cookie ?? void 0
-        };
+        this.persistSessionCookie(cookie);
       },
       onUnauthorized: () => this.tryRefresh()
     });
@@ -901,11 +987,12 @@ var SabhaClient = class {
   }
   setTokens(tokens) {
     this.ensureConfigured();
-    this.tokens = tokens;
+    this.persistTokens(tokens);
   }
   clearSession() {
     this.tokens = null;
     this.user = null;
+    this.persistTokens(null);
     this.activeConnection?.disconnect();
     this.activeConnection = null;
   }
@@ -916,18 +1003,27 @@ var SabhaClient = class {
       const me = await this.auth().me();
       this.user = me;
       session.user = me;
+      session.accessToken = this.tokens?.accessToken;
+      session.refreshToken = this.tokens?.refreshToken;
+      session.sessionCookie = this.tokens?.sessionCookie;
+      return session;
     } catch (error) {
-      this.clearSession();
-      throw new SabhaError(
-        "Login returned a user profile but no auth credential (Postman contract). Sabha-API.postman_collection.json requires /api/auth/login to return `token` (stored as accessToken) for Bearer auth on POST /api/meetings. Live API currently returns neither `token` nor Set-Cookie vm_session, so meetings fail with 401 Sign in first. Fix sabha-api login to return JWT `token`/`refreshToken` (preferred) or set HttpOnly vm_session (SameSite=None; Secure).",
-        {
-          code: "SESSION_NOT_ESTABLISHED",
-          status: 401,
-          cause: error
-        }
+      const hasCredential = Boolean(
+        this.tokens?.accessToken || this.tokens?.sessionCookie
       );
+      if (!hasCredential) {
+        this.clearSession();
+        throw new SabhaError(
+          "Login returned a user profile but no auth credential. Need JWT `token` (+ optional `refreshToken`) from /api/auth/login as in Sabha-API Postman (Auth \u2192 Login). Without that, POST /api/meetings returns 401 Sign in first.",
+          {
+            code: "SESSION_NOT_ESTABLISHED",
+            status: 401,
+            cause: error
+          }
+        );
+      }
+      throw error;
     }
-    return session;
   }
   /** Throws if /api/auth/me fails — call before create/start meeting. */
   async ensureAuthenticated() {
@@ -935,7 +1031,7 @@ var SabhaClient = class {
       return await this.me();
     } catch (error) {
       throw new SabhaError(
-        "Not signed in to Sabha. Call login() first, and ensure the `vm_session` cookie is sent (credentials: 'include', CORS allow-credentials, allow-listed Origin).",
+        "Not signed in to Sabha. Call login() first so Authorization: Bearer <accessToken> is sent (Postman Auth \u2192 Login stores json.token).",
         {
           code: "UNAUTHENTICATED",
           status: 401,
@@ -1057,13 +1153,36 @@ var SabhaClient = class {
       refreshToken: session.refreshToken ?? this.tokens?.refreshToken,
       sessionCookie: session.sessionCookie ?? this.tokens?.sessionCookie
     };
+    this.persistTokens(this.tokens);
+  }
+  persistTokens(tokens) {
+    this.tokens = tokens;
+    if (this.config.persistSession !== false) {
+      writeStoredTokens(tokens);
+    }
+  }
+  persistSessionCookie(cookie) {
+    if (cookie) {
+      this.persistTokens({
+        ...this.tokens ?? {},
+        sessionCookie: cookie
+      });
+      return;
+    }
+    if (!this.tokens) {
+      this.persistTokens(null);
+      return;
+    }
+    const { sessionCookie: _removed, ...rest } = this.tokens;
+    this.persistTokens(Object.keys(rest).length ? rest : null);
   }
   async tryRefresh() {
     if (!this.tokens?.refreshToken) return false;
     if (this.refreshPromise) return this.refreshPromise;
     this.refreshPromise = (async () => {
       try {
-        await this.refreshSession();
+        const tokens = await this.refreshSession();
+        this.persistTokens({ ...this.tokens ?? {}, ...tokens });
         return true;
       } catch {
         return false;
@@ -1119,6 +1238,7 @@ function SabhaProvider({
   const resolvedConfig = {
     baseUrl: DEFAULT_BASE_URL,
     withCredentials: true,
+    persistSession: true,
     ...config
   };
   const client = react.useMemo(
@@ -1143,8 +1263,10 @@ function SabhaProvider({
   const [error, setError] = react.useState(null);
   react.useEffect(() => {
     client.configure(resolvedConfig);
-    setAuthenticated(client.getStatus().authenticated);
-    setUser(client.getUser());
+    setAuthenticated(false);
+    setUser(null);
+    setError(null);
+    setMeetings([]);
     setReady(true);
   }, [
     client,
@@ -1187,12 +1309,26 @@ function SabhaProvider({
   }, [client]);
   react.useEffect(() => {
     if (!ready || !autoLoadMeetings) return;
-    void client.me().then((me) => {
+    let cancelled = false;
+    void client.me().then(async (me) => {
+      if (cancelled) return;
       setUser(me);
       setAuthenticated(true);
-      return refreshMeetings();
+      try {
+        await refreshMeetings();
+      } catch {
+      }
     }).catch(() => {
+      if (cancelled) return;
+      client.clearSession();
+      setAuthenticated(false);
+      setUser(null);
+      setMeetings([]);
+      setError(null);
     });
+    return () => {
+      cancelled = true;
+    };
   }, [ready, autoLoadMeetings, client, refreshMeetings]);
   const createMeeting = react.useCallback(
     async (input) => {
@@ -1456,13 +1592,20 @@ exports.DEFAULT_BASE_URL = DEFAULT_BASE_URL;
 exports.DEFAULT_MEDIA_POLICY = DEFAULT_MEDIA_POLICY;
 exports.MediaController = MediaController;
 exports.MeetingConnection = MeetingConnection;
+exports.SABHA_SESSION_HEADER = SABHA_SESSION_HEADER;
+exports.SABHA_SESSION_STORAGE_KEY = SABHA_SESSION_STORAGE_KEY;
+exports.SABHA_TOKENS_STORAGE_KEY = SABHA_TOKENS_STORAGE_KEY;
 exports.SabhaClient = SabhaClient;
 exports.SabhaError = SabhaError;
 exports.SabhaProvider = SabhaProvider;
 exports.createSabhaClient = createSabhaClient;
 exports.normalizeMeeting = normalizeMeeting;
+exports.readStoredSessionCookie = readStoredSessionCookie;
+exports.readStoredTokens = readStoredTokens;
 exports.toSabhaError = toSabhaError;
 exports.useSabha = useSabha;
 exports.useSabhaMeetings = useSabhaMeetings;
+exports.writeStoredSessionCookie = writeStoredSessionCookie;
+exports.writeStoredTokens = writeStoredTokens;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map