sabha-meetings-react 0.1.4 → 0.1.7

package/dist/index.mjs

@@ -161,6 +161,83 @@ function toSabhaError(error, fallback = "Sabha request failed") {
   return new SabhaError(fallback, { details: error });
 }
 
+// src/session.ts
+var SABHA_SESSION_HEADER = "x-sabha-session";
+var SABHA_SESSION_STORAGE_KEY = "sabha_vm_session";
+var SABHA_TOKENS_STORAGE_KEY = "sabha_auth_tokens";
+function readJson(key) {
+  try {
+    if (typeof localStorage === "undefined") return null;
+    const raw = localStorage.getItem(key);
+    if (!raw) return null;
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function writeJson(key, value) {
+  try {
+    if (typeof localStorage === "undefined") return;
+    if (value == null) localStorage.removeItem(key);
+    else localStorage.setItem(key, JSON.stringify(value));
+  } catch {
+  }
+}
+function readStoredTokens() {
+  const parsed = readJson(SABHA_TOKENS_STORAGE_KEY);
+  if (parsed && typeof parsed === "object") {
+    const record = parsed;
+    const tokens = {
+      accessToken: typeof record.accessToken === "string" ? record.accessToken : void 0,
+      refreshToken: typeof record.refreshToken === "string" ? record.refreshToken : void 0,
+      sessionCookie: typeof record.sessionCookie === "string" ? record.sessionCookie : void 0
+    };
+    if (tokens.accessToken || tokens.refreshToken || tokens.sessionCookie) {
+      return tokens;
+    }
+  }
+  const legacy = readStoredSessionCookie();
+  if (legacy) {
+    const migrated = { sessionCookie: legacy };
+    writeStoredTokens(migrated);
+    return migrated;
+  }
+  return null;
+}
+function writeStoredTokens(tokens) {
+  if (!tokens || !tokens.accessToken && !tokens.refreshToken && !tokens.sessionCookie) {
+    writeJson(SABHA_TOKENS_STORAGE_KEY, null);
+    writeStoredSessionCookie(null);
+    return;
+  }
+  writeJson(SABHA_TOKENS_STORAGE_KEY, {
+    accessToken: tokens.accessToken,
+    refreshToken: tokens.refreshToken,
+    sessionCookie: tokens.sessionCookie
+  });
+  writeStoredSessionCookie(tokens.sessionCookie ?? null);
+}
+function readStoredSessionCookie() {
+  try {
+    if (typeof localStorage === "undefined") return null;
+    return localStorage.getItem(SABHA_SESSION_STORAGE_KEY);
+  } catch {
+    return null;
+  }
+}
+function writeStoredSessionCookie(value) {
+  try {
+    if (typeof localStorage === "undefined") return;
+    if (!value) localStorage.removeItem(SABHA_SESSION_STORAGE_KEY);
+    else localStorage.setItem(SABHA_SESSION_STORAGE_KEY, value);
+  } catch {
+  }
+}
+function parseVmSession(cookieHeader) {
+  const match = /(?:^|,\s*)vm_session=([^;]+)/i.exec(cookieHeader);
+  return match?.[1] ? decodeURIComponent(match[1].trim()) : null;
+}
+
 // src/http/client.ts
 function joinUrl(baseUrl, path) {
   const base = baseUrl.replace(/\/+$/, "");
@@ -194,15 +271,21 @@ function messageFromBody(body, fallback) {
   if (typeof record.error === "string") return record.error;
   return fallback;
 }
-function readSetCookie(response) {
+function isBrowser() {
+  const runtime = globalThis;
+  return typeof runtime.window !== "undefined" && typeof runtime.document !== "undefined";
+}
+function readSessionFromResponse(response) {
+  const bridged = response.headers.get(SABHA_SESSION_HEADER);
+  if (bridged?.trim()) return bridged.trim();
   const anyHeaders = response.headers;
   const list = typeof anyHeaders.getSetCookie === "function" ? anyHeaders.getSetCookie() : (() => {
     const single = response.headers.get("set-cookie");
     return single ? [single] : [];
   })();
   for (const entry of list) {
-    const match = /(?:^|,\s*)vm_session=([^;]+)/i.exec(entry);
-    if (match?.[1]) return match[1];
+    const value = parseVmSession(entry);
+    if (value) return value;
   }
   return null;
 }
@@ -216,10 +299,8 @@ var HttpClient = class {
         Accept: "application/json",
         ...options.headers
       };
-      const runtime = globalThis;
-      const isBrowser = typeof runtime.window !== "undefined" && typeof runtime.document !== "undefined";
       const origin = this.options.getOrigin();
-      if (!isBrowser && origin) headers.Origin = origin;
+      if (!isBrowser() && origin) headers.Origin = origin;
       const tokens = this.options.getTokens();
       const needsAuth = options.auth !== false;
       if (tokens?.accessToken) {
@@ -231,7 +312,10 @@ var HttpClient = class {
         );
       }
       if (tokens?.sessionCookie) {
-        headers.Cookie = `vm_session=${tokens.sessionCookie}`;
+        headers[SABHA_SESSION_HEADER] = tokens.sessionCookie;
+        if (!isBrowser()) {
+          headers.Cookie = `vm_session=${tokens.sessionCookie}`;
+        }
       }
       if (options.body !== void 0) {
         headers["Content-Type"] = "application/json";
@@ -245,7 +329,7 @@ var HttpClient = class {
           credentials: this.options.withCredentials ? "include" : "same-origin"
         }
       );
-      const session = readSetCookie(response);
+      const session = readSessionFromResponse(response);
       if (session) this.options.onSessionCookie?.(session);
       const body = await parseBody(response);
       if (response.status === 401 && needsAuth && !retried && this.options.onUnauthorized) {
@@ -830,6 +914,7 @@ var SabhaClient = class {
     );
     this.config = {
       withCredentials: true,
+      persistSession: true,
       ...this.config,
       ...config,
       baseUrl
@@ -838,18 +923,19 @@ var SabhaClient = class {
       ...DEFAULT_MEDIA_POLICY,
       ...this.config.mediaPolicy
     };
+    const stored = this.config.persistSession !== false ? readStoredTokens() : null;
     this.tokens = {
-      accessToken: config.accessToken ?? this.tokens?.accessToken,
-      refreshToken: config.refreshToken ?? this.tokens?.refreshToken,
-      sessionCookie: config.sessionCookie ?? this.tokens?.sessionCookie
+      accessToken: config.accessToken ?? this.tokens?.accessToken ?? stored?.accessToken,
+      refreshToken: config.refreshToken ?? this.tokens?.refreshToken ?? stored?.refreshToken,
+      sessionCookie: config.sessionCookie ?? this.tokens?.sessionCookie ?? stored?.sessionCookie ?? void 0
     };
-    if (!this.tokens.accessToken && !this.tokens.sessionCookie && !this.tokens.refreshToken) {
-      if (!config.accessToken && !config.sessionCookie && !config.refreshToken) ;
-    }
     const hasAnyToken = Boolean(
       this.tokens.accessToken || this.tokens.sessionCookie || this.tokens.refreshToken
     );
     if (!hasAnyToken) this.tokens = null;
+    else if (this.config.persistSession !== false) {
+      this.persistTokens(this.tokens);
+    }
     this.http = new HttpClient({
       baseUrl,
       withCredentials: this.config.withCredentials !== false,
@@ -857,12 +943,12 @@ var SabhaClient = class {
       getTokens: () => this.tokens,
       setTokens: (tokens) => {
         this.tokens = tokens;
+        if (this.config.persistSession !== false) {
+          this.persistTokens(tokens);
+        }
       },
       onSessionCookie: (cookie) => {
-        this.tokens = {
-          ...this.tokens ?? {},
-          sessionCookie: cookie ?? void 0
-        };
+        this.persistSessionCookie(cookie);
       },
       onUnauthorized: () => this.tryRefresh()
     });
@@ -899,11 +985,12 @@ var SabhaClient = class {
   }
   setTokens(tokens) {
     this.ensureConfigured();
-    this.tokens = tokens;
+    this.persistTokens(tokens);
   }
   clearSession() {
     this.tokens = null;
     this.user = null;
+    this.persistTokens(null);
     this.activeConnection?.disconnect();
     this.activeConnection = null;
   }
@@ -914,18 +1001,27 @@ var SabhaClient = class {
       const me = await this.auth().me();
       this.user = me;
       session.user = me;
+      session.accessToken = this.tokens?.accessToken;
+      session.refreshToken = this.tokens?.refreshToken;
+      session.sessionCookie = this.tokens?.sessionCookie;
+      return session;
     } catch (error) {
-      this.clearSession();
-      throw new SabhaError(
-        "Login returned a user profile but no auth credential (Postman contract). Sabha-API.postman_collection.json requires /api/auth/login to return `token` (stored as accessToken) for Bearer auth on POST /api/meetings. Live API currently returns neither `token` nor Set-Cookie vm_session, so meetings fail with 401 Sign in first. Fix sabha-api login to return JWT `token`/`refreshToken` (preferred) or set HttpOnly vm_session (SameSite=None; Secure).",
-        {
-          code: "SESSION_NOT_ESTABLISHED",
-          status: 401,
-          cause: error
-        }
+      const hasCredential = Boolean(
+        this.tokens?.accessToken || this.tokens?.sessionCookie
       );
+      if (!hasCredential) {
+        this.clearSession();
+        throw new SabhaError(
+          "Login returned a user profile but no auth credential. Need JWT `token` (+ optional `refreshToken`) from /api/auth/login as in Sabha-API Postman (Auth \u2192 Login). Without that, POST /api/meetings returns 401 Sign in first.",
+          {
+            code: "SESSION_NOT_ESTABLISHED",
+            status: 401,
+            cause: error
+          }
+        );
+      }
+      throw error;
     }
-    return session;
   }
   /** Throws if /api/auth/me fails — call before create/start meeting. */
   async ensureAuthenticated() {
@@ -933,7 +1029,7 @@ var SabhaClient = class {
       return await this.me();
     } catch (error) {
       throw new SabhaError(
-        "Not signed in to Sabha. Call login() first, and ensure the `vm_session` cookie is sent (credentials: 'include', CORS allow-credentials, allow-listed Origin).",
+        "Not signed in to Sabha. Call login() first so Authorization: Bearer <accessToken> is sent (Postman Auth \u2192 Login stores json.token).",
         {
           code: "UNAUTHENTICATED",
           status: 401,
@@ -1055,13 +1151,36 @@ var SabhaClient = class {
       refreshToken: session.refreshToken ?? this.tokens?.refreshToken,
       sessionCookie: session.sessionCookie ?? this.tokens?.sessionCookie
     };
+    this.persistTokens(this.tokens);
+  }
+  persistTokens(tokens) {
+    this.tokens = tokens;
+    if (this.config.persistSession !== false) {
+      writeStoredTokens(tokens);
+    }
+  }
+  persistSessionCookie(cookie) {
+    if (cookie) {
+      this.persistTokens({
+        ...this.tokens ?? {},
+        sessionCookie: cookie
+      });
+      return;
+    }
+    if (!this.tokens) {
+      this.persistTokens(null);
+      return;
+    }
+    const { sessionCookie: _removed, ...rest } = this.tokens;
+    this.persistTokens(Object.keys(rest).length ? rest : null);
   }
   async tryRefresh() {
     if (!this.tokens?.refreshToken) return false;
     if (this.refreshPromise) return this.refreshPromise;
     this.refreshPromise = (async () => {
       try {
-        await this.refreshSession();
+        const tokens = await this.refreshSession();
+        this.persistTokens({ ...this.tokens ?? {}, ...tokens });
         return true;
       } catch {
         return false;
@@ -1117,6 +1236,7 @@ function SabhaProvider({
   const resolvedConfig = {
     baseUrl: DEFAULT_BASE_URL,
     withCredentials: true,
+    persistSession: true,
     ...config
   };
   const client = useMemo(
@@ -1141,8 +1261,10 @@ function SabhaProvider({
   const [error, setError] = useState(null);
   useEffect(() => {
     client.configure(resolvedConfig);
-    setAuthenticated(client.getStatus().authenticated);
-    setUser(client.getUser());
+    setAuthenticated(false);
+    setUser(null);
+    setError(null);
+    setMeetings([]);
     setReady(true);
   }, [
     client,
@@ -1185,12 +1307,26 @@ function SabhaProvider({
   }, [client]);
   useEffect(() => {
     if (!ready || !autoLoadMeetings) return;
-    void client.me().then((me) => {
+    let cancelled = false;
+    void client.me().then(async (me) => {
+      if (cancelled) return;
       setUser(me);
       setAuthenticated(true);
-      return refreshMeetings();
+      try {
+        await refreshMeetings();
+      } catch {
+      }
     }).catch(() => {
+      if (cancelled) return;
+      client.clearSession();
+      setAuthenticated(false);
+      setUser(null);
+      setMeetings([]);
+      setError(null);
     });
+    return () => {
+      cancelled = true;
+    };
   }, [ready, autoLoadMeetings, client, refreshMeetings]);
   const createMeeting = useCallback(
     async (input) => {
@@ -1449,6 +1585,6 @@ function useSabhaMeetings() {
   };
 }
 
-export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, toSabhaError, useSabha, useSabhaMeetings };
+export { ContentProtection, DEFAULT_BASE_URL, DEFAULT_MEDIA_POLICY, MediaController, MeetingConnection, SABHA_SESSION_HEADER, SABHA_SESSION_STORAGE_KEY, SABHA_TOKENS_STORAGE_KEY, SabhaClient, SabhaError, SabhaProvider, createSabhaClient, normalizeMeeting, readStoredSessionCookie, readStoredTokens, toSabhaError, useSabha, useSabhaMeetings, writeStoredSessionCookie, writeStoredTokens };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map