tempest-react-sdk 0.83.0 → 0.84.0

package/dist/auth/create-tempest-auth.js

@@ -3,10 +3,11 @@ import { SessionSupersededError as t } from "../http/errors.js";
 import { createApiClient as n } from "../http/api-client.js";
 import { bindSessionIdentity as r } from "./session-identity.js";
 import { createAuthStore as i } from "./create-auth-store.js";
-import { createRefreshQueue as a } from "./refresh-queue.js";
+import { decodeJWT as a } from "./jwt.js";
+import { createRefreshQueue as o } from "./refresh-queue.js";
 //#region src/auth/create-tempest-auth.ts
-var o = 1e4, s = 1e4;
-function c(e, t) {
+var s = 1e4, c = 1e4;
+function l(e, t) {
 	return e.length === 0 ? Promise.resolve() : new Promise((n) => {
 		let r = setTimeout(n, t);
 		Promise.allSettled(e).then(() => {
@@ -14,13 +15,22 @@ function c(e, t) {
 		});
 	});
 }
-function l() {
+function u() {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
 }
-var u = /* @__PURE__ */ new Set();
+var d = /* @__PURE__ */ new Set();
 function ee(t) {
-	e() && !u.has(t) && (u.add(t), console.warn("[tempest-react-sdk] createTempestAuth: withCredentials is set without logoutPath. logout() cannot clear the HttpOnly refresh cookie, so the next refresh() — the boot restore — signs the same account back in. Pass logoutPath (the backend's cookie logout route) so the server revokes it."));
+	e() && !d.has(t) && (d.add(t), console.warn("[tempest-react-sdk] createTempestAuth: withCredentials is set without logoutPath. logout() cannot clear the HttpOnly refresh cookie, so the next refresh() — the boot restore — signs the same account back in. Pass logoutPath (the backend's cookie logout route) so the server revokes it."));
+}
+function f(e) {
+	if (!e) return null;
+	try {
+		let { sub: t } = a(e).payload;
+		return typeof t == "string" && t !== "" ? t : null;
+	} catch {
+		return null;
+	}
 }
 function te(e) {
 	let t = e ?? {};
@@ -29,15 +39,15 @@ function te(e) {
 		refreshToken: t.refresh_token
 	};
 }
-function d(u) {
-	let { baseURL: d, prefix: f, loginPath: ne = "/api/auth/login", refreshPath: re = "/api/auth/refresh", logoutPath: p, onLogoutError: ie, mePath: m, storeName: h = "tempest-auth", storage: g = "local", withCredentials: _ = !1, csrf: ae, fetcher: v, parseTokens: y = te, parseUser: oe, refreshBody: b = (e) => e ? { refresh_token: e } : void 0, retry: se, redirectTo: x, onSessionEnd: S } = u;
-	_ && !p && ee(h);
+function p(a) {
+	let { baseURL: d, prefix: p, loginPath: ne = "/api/auth/login", refreshPath: m = "/api/auth/refresh", logoutPath: h, onLogoutError: re, mePath: ie, storeName: g = "tempest-auth", storage: _ = "local", withCredentials: v = !1, csrf: ae, fetcher: y, parseTokens: b = te, parseUser: oe, refreshBody: x = (e) => e ? { refresh_token: e } : void 0, retry: se, redirectTo: S, onSessionEnd: ce } = a;
+	v && !h && ee(g);
 	let C = i({
-		name: h,
-		storage: g
-	}), w = `${h}-refresh`;
+		name: g,
+		storage: _
+	}), w = `${g}-refresh`;
 	function T() {
-		return typeof window > "u" ? null : g === "session" ? window.sessionStorage : window.localStorage;
+		return typeof window > "u" ? null : _ === "session" ? window.sessionStorage : window.localStorage;
 	}
 	function E() {
 		return T()?.getItem(w) ?? null;
@@ -48,33 +58,33 @@ function d(u) {
 		let t = T();
 		t && (e ? t.setItem(w, e) : t.removeItem(w));
 	}
-	let k = `${h}-lineage`, ce = `tempest-react-sdk:${h}:refresh`, A = T()?.getItem(k) ?? null;
+	let k = `${g}-lineage`, le = `tempest-react-sdk:${g}:refresh`, A = T()?.getItem(k) ?? null;
 	function j(e) {
 		A = e;
 		let t = T();
 		t && (e ? t.setItem(k, e) : t.removeItem(k));
 	}
 	let M = () => C.getState(), N = () => M().token;
-	async function le() {
-		if (!m) return M().user;
+	async function ue() {
+		if (!ie) return M().user;
 		let e = P, n;
 		try {
-			n = await Q.get(m, { skipAuthRetry: !0 });
+			n = await Q.get(ie, { skipAuthRetry: !0 });
 		} catch (n) {
 			throw P === e ? n : new t();
 		}
 		if (P !== e || !Z().continues) throw new t();
 		return M().setUser(n), n;
 	}
-	let P = 0, ue = Promise.resolve(), F = 0, I = /* @__PURE__ */ new Set(), L = /* @__PURE__ */ new Set(), R = /* @__PURE__ */ new Set(), z = /* @__PURE__ */ new Set();
+	let P = 0, de = Promise.resolve(), F = 0, I = /* @__PURE__ */ new Set(), L = /* @__PURE__ */ new Set(), R = /* @__PURE__ */ new Set(), z = /* @__PURE__ */ new Set();
 	function B(e) {
 		let t = e.then(() => void 0, () => void 0);
 		return R.add(t), t.then(() => R.delete(t)), e;
 	}
-	function de(t) {
+	function fe(t) {
 		e() && console.warn("[tempest-react-sdk] createTempestAuth: logoutPath revocation failed", t);
 		try {
-			ie?.(t);
+			re?.(t);
 		} catch {
 			return;
 		}
@@ -84,116 +94,150 @@ function d(u) {
 			try {
 				await e();
 			} catch (e) {
-				de(e);
+				fe(e);
 			}
 		})();
 		return L.add(t), t.then(() => L.delete(t)), t;
 	}
 	function H(e, t) {
-		p && !_ && t && V(() => U(e).post(p, { body: b(t) }));
+		h && !v && t && V(() => U(e).post(h, { body: x(t) }));
 	}
 	function U(e) {
 		return n({
 			baseURL: d,
-			prefix: f,
-			withCredentials: _,
+			prefix: p,
+			withCredentials: v,
 			csrf: ae,
-			fetcher: v,
+			fetcher: y,
 			getToken: () => e
 		});
 	}
 	function W() {
-		P += 1, K = a(G);
+		P += 1, q = o(G);
 	}
 	async function G() {
 		let e = N(), t = P;
 		z.add(t);
+		let n;
 		try {
-			await fe(() => pe(e));
+			n = await K(() => pe(e));
 		} finally {
 			z.delete(t);
 		}
+		n && await J(Y(n));
 	}
-	async function fe(e) {
-		let t = g === "local" && typeof navigator < "u" ? navigator.locks : void 0;
+	async function K(e) {
+		let t = _ === "local" && typeof navigator < "u" ? navigator.locks : void 0;
 		if (!t) return e();
-		let n = new AbortController(), r = setTimeout(() => n.abort(), s), i = !1;
+		let n = new AbortController(), r = setTimeout(() => n.abort(), c), i = !1, a;
 		try {
-			await t.request(ce, { signal: n.signal }, async () => {
-				i = !0, clearTimeout(r), await e();
+			await t.request(le, { signal: n.signal }, async () => {
+				i = !0, clearTimeout(r), a = await e();
 			});
 		} catch (t) {
 			if (i) throw t;
-			clearTimeout(r), await e();
+			return clearTimeout(r), e();
 		}
+		return a;
 	}
 	async function pe(e) {
 		let n = e !== null || M().user !== null || D !== null, r = Z();
-		if (!n && N() !== null) return;
+		if (!n && N() !== null) return null;
 		if (!r.continues) throw new t();
-		if (N() !== e) return;
+		if (N() !== e) return null;
 		let i = P, a;
 		try {
-			a = await B(Q.post(re, {
-				body: b(E()),
+			a = await B(Q.post(m, {
+				body: x(E()),
 				skipAuth: !0
 			}));
 		} catch (e) {
 			throw P === i ? e : new t();
 		}
-		let { token: o, refreshToken: s } = y(a);
+		let { token: o, refreshToken: s } = b(a);
 		if (P !== i || !Z().continues) throw H(o ?? null, s), new t();
-		n || j(l()), M().setToken(o), s && O(s);
+		let c = f(e), l = f(o);
+		return c !== null && l !== null && c !== l ? {
+			data: a,
+			token: o,
+			refreshToken: s
+		} : (n || j(u()), M().setToken(o), s && O(s), null);
 	}
-	let K = a(G);
-	function q(e) {
+	let q = o(G);
+	function me(e) {
 		let t = N();
 		return t === null ? !1 : e.token === null || e.token !== t;
 	}
-	function J() {
+	function he() {
 		return N() === null && E() === null;
 	}
-	async function me() {
+	async function ge() {
 		if (!(I.size > 0 && F === 0 && (await Promise.allSettled([...I]), N() !== null))) throw Error("anonymous 401 with no session");
 	}
-	async function he(e) {
+	async function _e(e) {
 		if (e.epoch !== null && e.epoch !== P) throw new t();
-		if (q(e)) {
+		if (me(e)) {
 			if (e.token === null) throw Error("anonymous 401 under a live session");
-		} else return e.token === null && J() ? z.has(P) ? K() : me() : K();
+			return;
+		}
+		if (e.token === null && he()) return z.has(P) ? q() : ge();
+		let n = P;
+		if (await q(), P !== n) throw new t();
 	}
-	async function ge(e, n) {
+	async function ve(e, n) {
 		if (n.epoch !== null && n.epoch !== P || !Z().continues) throw new t();
-		q(n) || n.token === null && J() || await Se();
+		me(n) || n.token === null && he() || await De();
 	}
-	async function _e(e) {
-		L.size > 0 && await c([...L], o);
-		let t = ve(e);
-		I.add(t);
+	async function ye(e) {
+		return L.size > 0 && await l([...L], s), J(Se(e));
+	}
+	async function be() {
+		return L.size > 0 && await l([...L], s), J(xe());
+	}
+	async function J(e) {
+		I.add(e);
 		try {
-			return await t;
+			return await e;
 		} finally {
-			I.delete(t);
+			I.delete(e);
 		}
 	}
-	async function ve(e) {
+	async function xe() {
+		let e = P, n = await K(() => B(Q.post(m, {
+			body: x(E()),
+			skipAuth: !0
+		}))), { token: r, refreshToken: i } = b(n);
+		if (P !== e) throw H(r ?? null, i), new t();
+		return Y({
+			data: n,
+			token: r,
+			refreshToken: i
+		});
+	}
+	async function Se(e) {
 		let n = P, r = await B(Q.post(ne, {
 			body: e,
 			skipAuth: !0
-		})), { token: i, refreshToken: a } = y(r);
+		})), { token: i, refreshToken: a } = b(r);
 		if (P !== n) throw H(i ?? null, a), new t();
-		H(N(), E() ?? void 0);
-		let { done: o } = Y("switch"), s = P;
-		if (await o.catch(() => void 0), P !== s) throw new t();
-		j(l()), M().setToken(i), O(a ?? null);
-		let c = oe?.(r);
-		return c == null ? le() : (M().setUser(c), c);
-	}
-	function Y(e) {
+		return H(N(), E() ?? void 0), Y({
+			data: r,
+			token: i,
+			refreshToken: a
+		});
+	}
+	async function Y(e) {
+		let { done: n } = X("switch"), r = P;
+		if (await n.catch(() => void 0), P !== r) throw new t();
+		j(u()), M().setToken(e.token), O(e.refreshToken ?? null);
+		let i = oe?.(e.data);
+		return i == null ? ue() : (M().setUser(i), i);
+	}
+	function X(e) {
 		let { user: t, token: n } = M(), r = n !== null || t !== null || E() !== null;
 		return (r || e !== "expired") && W(), M().logout(), O(null), j(null), r ? {
 			live: r,
-			done: X({
+			done: Ce({
 				reason: e,
 				user: t,
 				token: n,
@@ -201,16 +245,16 @@ function d(u) {
 			})
 		} : {
 			live: r,
-			done: e === "switch" || F === 0 ? ue : Promise.resolve()
+			done: e === "switch" || F === 0 ? de : Promise.resolve()
 		};
 	}
-	function X(e) {
-		if (!S) return Promise.resolve();
+	function Ce(e) {
+		if (!ce) return Promise.resolve();
 		let t = U(e.token);
 		F += 1;
 		let n = (async () => {
 			try {
-				await S({
+				await ce({
 					...e,
 					api: t
 				});
@@ -218,12 +262,12 @@ function d(u) {
 				--F;
 			}
 		})();
-		return ue = n.then(() => void 0, () => void 0), n.then(() => void 0);
+		return de = n.then(() => void 0, () => void 0), n.then(() => void 0);
 	}
-	function ye() {
+	function we() {
 		let e = T();
 		if (!e) return null;
-		let t = e.getItem(w), n = e.getItem(k), r = e.getItem(h);
+		let t = e.getItem(w), n = e.getItem(k), r = e.getItem(g);
 		if (!r) return {
 			user: null,
 			token: null,
@@ -248,7 +292,7 @@ function d(u) {
 		}
 	}
 	function Z() {
-		let e = ye(), { user: t, token: n } = M();
+		let e = we(), { user: t, token: n } = M();
 		if (e === null) return {
 			continues: !0,
 			done: Promise.resolve()
@@ -267,7 +311,7 @@ function d(u) {
 			continues: a,
 			done: Promise.resolve()
 		};
-		let s = X({
+		let s = Ce({
 			reason: e.token === null ? "logout" : "switch",
 			user: t,
 			token: n,
@@ -278,58 +322,59 @@ function d(u) {
 			done: s
 		};
 	}
-	function be() {
-		if (!p) return null;
-		let e = p, { token: t, user: n } = M(), r = E();
-		if (!_ && t === null && n === null && r === null) return null;
-		let i = _ ? [...R] : [];
-		return V(async () => (await c(i, o), U(t).post(e, { body: b(r) })));
+	function Te() {
+		if (!h) return null;
+		let e = h, { token: t, user: n } = M(), r = E();
+		if (!v && t === null && n === null && r === null) return null;
+		let i = v ? [...R] : [];
+		return V(async () => (await l(i, s), U(t).post(e, { body: x(r) })));
 	}
-	function xe() {
+	function Ee() {
 		let e = Z();
 		if (!e.continues) return e.done;
-		let t = be(), { done: n } = Y("logout");
+		let t = Te(), { done: n } = X("logout");
 		return t ? Promise.all([t, n]).then(() => void 0) : n;
 	}
-	async function Se() {
-		let { live: e, done: t } = Y("expired");
-		await t.catch(() => void 0), e && x && typeof window < "u" && window.location.assign(x);
+	async function De() {
+		let { live: e, done: t } = X("expired");
+		await t.catch(() => void 0), e && S && typeof window < "u" && window.location.assign(S);
 	}
 	let Q = n({
 		baseURL: d,
-		prefix: f,
-		withCredentials: _,
+		prefix: p,
+		withCredentials: v,
 		csrf: ae,
-		fetcher: v,
+		fetcher: y,
 		getToken: N,
 		getSessionEpoch: () => P,
-		refresh: he,
+		refresh: _e,
 		retry: se,
-		onUnauthorized: ge
-	}), Ce = () => K(), $ = null, we = () => N() === null ? null : A === null ? ($?.epoch !== P && ($ = {
+		onUnauthorized: ve
+	}), Oe = () => q(), $ = null, ke = () => N() === null ? null : A === null ? ($?.epoch !== P && ($ = {
 		epoch: P,
-		key: l()
-	}), $.key) : A, Te = {
-		current: we,
+		key: u()
+	}), $.key) : A, Ae = {
+		current: ke,
 		subscribe: (e) => C.subscribe(e)
 	};
-	r(Q, Te), r(N, Te);
-	function Ee(e) {
-		e.storageArea === T() && (e.key === null || e.key === h || e.key === w || e.key === k) && Z();
+	r(Q, Ae), r(N, Ae);
+	function je(e) {
+		e.storageArea === T() && (e.key === null || e.key === g || e.key === w || e.key === k) && Z();
 	}
-	let De = typeof window > "u" ? null : window;
-	return De?.addEventListener("storage", Ee), {
+	let Me = typeof window > "u" ? null : window;
+	return Me?.addEventListener("storage", je), {
 		useAuthStore: C,
 		api: Q,
-		login: _e,
-		logout: xe,
-		refresh: Ce,
+		login: ye,
+		logout: Ee,
+		refresh: Oe,
+		restore: be,
 		getToken: N,
-		sessionKey: we,
-		dispose: () => De?.removeEventListener("storage", Ee)
+		sessionKey: ke,
+		dispose: () => Me?.removeEventListener("storage", je)
 	};
 }
 //#endregion
-export { d as createTempestAuth };
+export { p as createTempestAuth };
 
 //# sourceMappingURL=create-tempest-auth.js.map