tenneo-auth-plugin 0.1.5 → 0.1.7

package/dist/index.js

@@ -541,12 +541,24 @@ function clearAllCookies() {
   } catch {
   }
 }
+function clearAllBrowserStorage() {
+  if (typeof window === "undefined") return;
+  try {
+    window.localStorage?.clear();
+  } catch {
+  }
+  try {
+    window.sessionStorage?.clear();
+  } catch {
+  }
+}
 function clearAllStorage() {
   const forceLogin = getStorage(getStorageKey("force_login"));
   const logoutInProgress = getStorage(getStorageKey("logout_in_progress"));
   const preservedTenantKey = getStorage(getStorageKey("preserved_tenant_key"));
   clearAuthSessionStorage();
   clearAuthStorage();
+  clearAllBrowserStorage();
   if (forceLogin === "true") setStorage(getStorageKey("force_login"), "true");
   if (logoutInProgress === "true") setStorage(getStorageKey("logout_in_progress"), "true");
   if (preservedTenantKey) setStorage(getStorageKey("preserved_tenant_key"), preservedTenantKey);
@@ -1464,8 +1476,17 @@ async function refreshAccessToken() {
       const refreshToken = getRefreshToken();
       const clientId = getClientId();
       const tenantId = getTenantId();
+      logger.debug("Token refresh - collected data", {
+        hasRefreshToken: !!refreshToken,
+        clientId,
+        tenantId
+      });
       if (!refreshToken || !clientId || !tenantId) {
-        logger.error("Token refresh failed: missing required data");
+        logger.error("Token refresh failed: missing required data", {
+          hasRefreshToken: !!refreshToken,
+          hasClientId: !!clientId,
+          hasTenantId: !!tenantId
+        });
         throw new Error("Cannot refresh token: missing required data");
       }
       const apiAuthBaseUrl = Config.getApiAuthBaseUrl();
@@ -1480,8 +1501,7 @@ async function refreshAccessToken() {
         method: "POST",
         headers: {
           "Content-Type": "application/x-www-form-urlencoded",
-          "__tenant": tenantId,
-          "Accept": "*/*"
+          "Accept": "application/json"
         },
         body: body.toString()
       });
@@ -1985,6 +2005,8 @@ function setDefaultAuthEngine(engine) {
 }
 
 // src/application/token.ts
+var lastNoRefreshLog = 0;
+var NO_REFRESH_LOG_INTERVAL_MS = 5e3;
 async function ensureValidAccessToken() {
   const engine = getDefaultAuthEngine();
   if (engine) {
@@ -1997,7 +2019,11 @@ async function ensureValidAccessToken() {
   if (token && !isAccessTokenExpired()) return token;
   const refreshToken = getRefreshToken();
   if (!refreshToken) {
-    logger.debug("No refresh token - cannot refresh; login required");
+    const now = Date.now();
+    if (now - lastNoRefreshLog >= NO_REFRESH_LOG_INTERVAL_MS) {
+      lastNoRefreshLog = now;
+      logger.debug("No refresh token - cannot refresh; login required");
+    }
     throw new Error("No refresh token; login required");
   }
   return await refreshAccessToken();
@@ -2475,13 +2501,28 @@ function stopStorageWatcher() {
 // src/utils/cookies.ts
 function clearClientCookies() {
   try {
+    if (typeof document === "undefined" || typeof window === "undefined") return;
     const cookies = document.cookie.split(";");
+    const hostname = window.location.hostname;
+    const hostParts = hostname.split(".").filter(Boolean);
+    const domainsToTry = [hostname];
+    if (hostParts.length > 1) {
+      for (let i = hostParts.length - 2; i >= 0; i--) {
+        const parent = "." + hostParts.slice(i).join(".");
+        if (!domainsToTry.includes(parent)) domainsToTry.push(parent);
+      }
+    }
+    const pathsToTry = ["/", window.location.pathname || "/"].filter(Boolean);
     for (const cookie of cookies) {
       const eqPos = cookie.indexOf("=");
       const name = eqPos > -1 ? cookie.slice(0, eqPos).trim() : cookie.trim();
       if (!name) continue;
-      document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/`;
-      document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/;domain=${window.location.hostname}`;
+      for (const path of pathsToTry) {
+        document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=${path}`;
+        for (const domain of domainsToTry) {
+          document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=${path};domain=${domain}`;
+        }
+      }
     }
     logger.debug("Client-side cookies cleared (best-effort)");
   } catch (error) {
@@ -2547,6 +2588,13 @@ async function callServerLogout(logoutUrl) {
 }
 function performLocalLogoutCleanup() {
   logger.debug("Performing local logout cleanup");
+  try {
+    getAuthRuntime()?.clearCookies?.clearCookies();
+  } catch (error) {
+    logger.debug("Runtime cookie clearer failed (ignored)", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+  }
   clearClientCookies();
   clearAllStorage();
   logger.info("Local logout cleanup completed");
@@ -2633,7 +2681,7 @@ var PUBLIC_CODE_PREFIX = "public-";
 function getTenantByCodeUrl(tenantCode) {
   const apiTenantResolutionBaseUrl = getResolvedTenantBaseUrl();
   const base = apiTenantResolutionBaseUrl.replace(/\/api\/v1\/?$/, "") || apiTenantResolutionBaseUrl;
-  return `${base}/api/tenant/v1/public/tenants/by-code/${encodeURIComponent(tenantCode)}`;
+  return `${base}/api/v1/tenant/public/tenants/by-code/${encodeURIComponent(tenantCode)}`;
 }
 async function resolveTenant(tenantKey) {
   if (!tenantKey || tenantKey.trim() === "") {