tenneo-auth-plugin 0.1.4 → 0.1.6

package/dist/index.js

@@ -541,12 +541,24 @@ function clearAllCookies() {
   } catch {
   }
 }
+function clearAllBrowserStorage() {
+  if (typeof window === "undefined") return;
+  try {
+    window.localStorage?.clear();
+  } catch {
+  }
+  try {
+    window.sessionStorage?.clear();
+  } catch {
+  }
+}
 function clearAllStorage() {
   const forceLogin = getStorage(getStorageKey("force_login"));
   const logoutInProgress = getStorage(getStorageKey("logout_in_progress"));
   const preservedTenantKey = getStorage(getStorageKey("preserved_tenant_key"));
   clearAuthSessionStorage();
   clearAuthStorage();
+  clearAllBrowserStorage();
   if (forceLogin === "true") setStorage(getStorageKey("force_login"), "true");
   if (logoutInProgress === "true") setStorage(getStorageKey("logout_in_progress"), "true");
   if (preservedTenantKey) setStorage(getStorageKey("preserved_tenant_key"), preservedTenantKey);
@@ -1464,8 +1476,17 @@ async function refreshAccessToken() {
       const refreshToken = getRefreshToken();
       const clientId = getClientId();
       const tenantId = getTenantId();
+      logger.debug("Token refresh - collected data", {
+        hasRefreshToken: !!refreshToken,
+        clientId,
+        tenantId
+      });
       if (!refreshToken || !clientId || !tenantId) {
-        logger.error("Token refresh failed: missing required data");
+        logger.error("Token refresh failed: missing required data", {
+          hasRefreshToken: !!refreshToken,
+          hasClientId: !!clientId,
+          hasTenantId: !!tenantId
+        });
         throw new Error("Cannot refresh token: missing required data");
       }
       const apiAuthBaseUrl = Config.getApiAuthBaseUrl();
@@ -1473,14 +1494,14 @@ async function refreshAccessToken() {
       const body = new URLSearchParams({
         grant_type: DEFAULT_REFRESH_GRANT_TYPE,
         refresh_token: refreshToken,
-        client_id: clientId.startsWith("public-") ? clientId : `public-${clientId}`
+        client_id: clientId.startsWith("public-") ? clientId : `public-${clientId}`,
+        tenant_id: tenantId
       });
       const response = await fetch(tokenUrl, {
         method: "POST",
         headers: {
           "Content-Type": "application/x-www-form-urlencoded",
-          "__tenant": tenantId,
-          "Accept": "*/*"
+          "Accept": "application/json"
         },
         body: body.toString()
       });
@@ -2474,13 +2495,28 @@ function stopStorageWatcher() {
 // src/utils/cookies.ts
 function clearClientCookies() {
   try {
+    if (typeof document === "undefined" || typeof window === "undefined") return;
     const cookies = document.cookie.split(";");
+    const hostname = window.location.hostname;
+    const hostParts = hostname.split(".").filter(Boolean);
+    const domainsToTry = [hostname];
+    if (hostParts.length > 1) {
+      for (let i = hostParts.length - 2; i >= 0; i--) {
+        const parent = "." + hostParts.slice(i).join(".");
+        if (!domainsToTry.includes(parent)) domainsToTry.push(parent);
+      }
+    }
+    const pathsToTry = ["/", window.location.pathname || "/"].filter(Boolean);
     for (const cookie of cookies) {
       const eqPos = cookie.indexOf("=");
       const name = eqPos > -1 ? cookie.slice(0, eqPos).trim() : cookie.trim();
       if (!name) continue;
-      document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/`;
-      document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/;domain=${window.location.hostname}`;
+      for (const path of pathsToTry) {
+        document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=${path}`;
+        for (const domain of domainsToTry) {
+          document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=${path};domain=${domain}`;
+        }
+      }
     }
     logger.debug("Client-side cookies cleared (best-effort)");
   } catch (error) {
@@ -2546,6 +2582,13 @@ async function callServerLogout(logoutUrl) {
 }
 function performLocalLogoutCleanup() {
   logger.debug("Performing local logout cleanup");
+  try {
+    getAuthRuntime()?.clearCookies?.clearCookies();
+  } catch (error) {
+    logger.debug("Runtime cookie clearer failed (ignored)", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+  }
   clearClientCookies();
   clearAllStorage();
   logger.info("Local logout cleanup completed");
@@ -2632,7 +2675,7 @@ var PUBLIC_CODE_PREFIX = "public-";
 function getTenantByCodeUrl(tenantCode) {
   const apiTenantResolutionBaseUrl = getResolvedTenantBaseUrl();
   const base = apiTenantResolutionBaseUrl.replace(/\/api\/v1\/?$/, "") || apiTenantResolutionBaseUrl;
-  return `${base}/api/tenant/v1/public/tenants/by-code/${encodeURIComponent(tenantCode)}`;
+  return `${base}/api/v1/tenant/public/tenants/by-code/${encodeURIComponent(tenantCode)}`;
 }
 async function resolveTenant(tenantKey) {
   if (!tenantKey || tenantKey.trim() === "") {