squarefi-bff-api-module 1.36.18 → 1.36.19

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { squarefi_bff_api_client } from './api';
 export * from './utils/apiClientFactory';
-export { setAccessTokenProvider, setOnUnauthorized, type AccessTokenProvider, type ResolveTokenOptions, type UnauthorizedHandler, } from './utils/accessTokenProvider';
+export { setAccessTokenProvider, setOnTwoFactorRequired, setOnUnauthorized, type AccessTokenProvider, type ResolveTokenOptions, type TwoFactorRequiredHandler, type UnauthorizedHandler, } from './utils/accessTokenProvider';
 export * from './utils/tokensFactory';
 export * from './utils/fileStorage';
 export * from './constants';

package/dist/index.js

@@ -1,6 +1,6 @@
 export { squarefi_bff_api_client } from './api';
 export * from './utils/apiClientFactory';
-export { setAccessTokenProvider, setOnUnauthorized, } from './utils/accessTokenProvider';
+export { setAccessTokenProvider, setOnTwoFactorRequired, setOnUnauthorized, } from './utils/accessTokenProvider';
 export * from './utils/tokensFactory';
 export * from './utils/fileStorage';
 export * from './constants';

package/dist/utils/accessTokenProvider.d.ts

@@ -4,6 +4,7 @@ export type ResolveTokenOptions = {
 };
 export type AccessTokenProvider = (options?: ResolveTokenOptions) => Promise<string | null | undefined>;
 export type UnauthorizedHandler = () => void;
+export type TwoFactorRequiredHandler = () => void;
 /**
  * Register an external source of the access token (e.g. Clerk `getToken`).
  * When set, the API clients stop reading tokens from localStorage and delegate
@@ -16,7 +17,15 @@ export declare const setAccessTokenProvider: (provider: AccessTokenProvider | nu
  * recovered by refreshing the token (e.g. to trigger a Clerk sign-out).
  */
 export declare const setOnUnauthorized: (handler: UnauthorizedHandler | null) => void;
+/**
+ * Register a callback invoked when the backend rejects a request because
+ * two-factor authentication is required but not yet satisfied (HTTP 403 with a
+ * `two_factor_required` error code). The consumer typically redirects the user
+ * to the 2FA setup flow. Pass `null` to unregister.
+ */
+export declare const setOnTwoFactorRequired: (handler: TwoFactorRequiredHandler | null) => void;
 /** Whether an external token provider is active (Clerk mode). */
 export declare const isExternalAuthMode: () => boolean;
 export declare const resolveAccessToken: (options?: ResolveTokenOptions) => Promise<string | null>;
 export declare const triggerUnauthorized: () => void;
+export declare const triggerTwoFactorRequired: () => void;

package/dist/utils/accessTokenProvider.js

@@ -1,6 +1,7 @@
 import { getFromLocalStorage } from './storage';
 let accessTokenProvider = null;
 let unauthorizedHandler = null;
+let twoFactorRequiredHandler = null;
 let inFlightRefresh = null;
 /**
  * Register an external source of the access token (e.g. Clerk `getToken`).
@@ -18,6 +19,15 @@ export const setAccessTokenProvider = (provider) => {
 export const setOnUnauthorized = (handler) => {
     unauthorizedHandler = handler;
 };
+/**
+ * Register a callback invoked when the backend rejects a request because
+ * two-factor authentication is required but not yet satisfied (HTTP 403 with a
+ * `two_factor_required` error code). The consumer typically redirects the user
+ * to the 2FA setup flow. Pass `null` to unregister.
+ */
+export const setOnTwoFactorRequired = (handler) => {
+    twoFactorRequiredHandler = handler;
+};
 /** Whether an external token provider is active (Clerk mode). */
 export const isExternalAuthMode = () => accessTokenProvider !== null;
 export const resolveAccessToken = async (options) => {
@@ -48,3 +58,6 @@ export const resolveAccessToken = async (options) => {
 export const triggerUnauthorized = () => {
     unauthorizedHandler?.();
 };
+export const triggerTwoFactorRequired = () => {
+    twoFactorRequiredHandler?.();
+};

package/dist/utils/apiClientFactory.js

@@ -3,9 +3,11 @@ import { isTMA } from '@telegram-apps/sdk-react';
 import axios from 'axios';
 import { telegramSignUpPath, telegramSignInPath, refreshTokenPath } from '../api/auth';
 import { AppEnviroment, ResponseStatus } from '../constants';
-import { isExternalAuthMode, resolveAccessToken, triggerUnauthorized } from './accessTokenProvider';
+import { isExternalAuthMode, resolveAccessToken, triggerTwoFactorRequired, triggerUnauthorized, } from './accessTokenProvider';
 import { deleteTokens, getTokens, refreshTokens } from './tokensFactory';
 // eslint-disable-next-line no-constant-condition
+// Backend signals that a still-unsatisfied 2FA requirement blocks the request with this error code.
+const TWO_FACTOR_REQUIRED_ERROR_CODE = 'two_factor_required';
 const apiV1BaseURL = process.env.API_URL ?? 'ENV variable API_URL is not defined';
 const apiV2BaseURL = process.env.API_V2_URL ?? 'ENV variable API_V2_URL is not defined';
 const apiTOTPBaseURL = process.env.API_TOTP_URL ?? 'ENV variable API_TOTP_URL is not defined';
@@ -41,6 +43,11 @@ export const createApiClient = ({ baseURL, isBearerToken, tenantId }) => {
         if (typeof window === 'undefined') {
             return Promise.reject(error);
         }
+        if (error?.response?.status === ResponseStatus.FORBIDDEN &&
+            error?.response?.data?.code === TWO_FACTOR_REQUIRED_ERROR_CODE) {
+            triggerTwoFactorRequired();
+            return Promise.reject(error);
+        }
         if (error?.response?.status === ResponseStatus.UNAUTHORIZED &&
             !error?.response?.config.context?.bypassUnauthorizedHandler) {
             const { response, config: failedRequestConfig } = error;
@@ -182,6 +189,9 @@ export const createFetchApiClient = ({ baseURL, isBearerToken, tenantId }) => {
             let errorMessage = `HTTP error! status: ${response.status}`;
             try {
                 const errorData = await response.json();
+                if (response.status === ResponseStatus.FORBIDDEN && errorData?.code === TWO_FACTOR_REQUIRED_ERROR_CODE) {
+                    triggerTwoFactorRequired();
+                }
                 errorMessage = errorData.message || errorData.error || errorMessage;
             }
             catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "squarefi-bff-api-module",
-  "version": "1.36.18",
+  "version": "1.36.19",
   "description": "Squarefi BFF API client module",
   "type": "module",
   "main": "./dist/index.js",