win-portal-auth-sdk 1.1.1 → 1.2.1

package/README.md

@@ -64,10 +64,23 @@ import authClient from '@/lib/auth-client';
 
 // Authentication
 const loginResult = await authClient.auth.login('user@example.com', 'password');
+
+// ✅ Set JWT token with explicit type (recommended for better performance)
+authClient.setToken(loginResult.token, 'jwt');
+
+// Or use hybrid mode (backward compatible)
+authClient.setToken(loginResult.token); // defaults to 'jwt'
+authClient.setAuthType('hybrid'); // will try JWT first, then OAuth
+
 const profile = await authClient.auth.profile();
 const refreshed = await authClient.auth.refresh(refreshToken);
 await authClient.auth.logout();
 
+// OAuth Token Usage
+// ✅ Set OAuth token with explicit type (recommended for better performance)
+const oauthToken = await authClient.oauth.exchangeCode(code, codeVerifier);
+authClient.setToken(oauthToken.access_token, 'oauth');
+
 // TOTP (Two-Factor Authentication)
 // 1. Setup TOTP for user
 const totpSetup = await authClient.auth.setupTotp('My App');
@@ -329,10 +342,90 @@ const client = new AuthClient({
 
 #### Utility Methods
 
+- `setToken(token, type?)` - Set authentication token
+  - `type`: `'jwt'` (default) | `'oauth'` | `'hybrid'`
+  - Recommended to specify type for better performance
+- `getAuthType()` - Get current authentication type
+- `setAuthType(type)` - Change authentication type
+- `clearToken()` - Clear authentication token
+- `getTokenMasked()` - Get masked token for display
 - `setApiKey(apiKey)` - Update API key
 - `getApiKeyMasked()` - Get masked API key for display
 - `getAxiosInstance()` - Get underlying axios instance
 
+## Authentication Types
+
+The SDK supports three authentication types through the `X-Auth-Type` header:
+
+### JWT Authentication (Recommended for internal users)
+
+```typescript
+// Login and get JWT token
+const session = await authClient.auth.login('user@example.com', 'password');
+
+// ✅ Specify 'jwt' for best performance (fast path validation)
+authClient.setToken(session.token, 'jwt');
+
+// All subsequent requests will include:
+// Authorization: Bearer <jwt_token>
+// X-Auth-Type: jwt
+```
+
+**Use JWT when:**
+
+- User logs in with username/password
+- Internal application users
+- Need session-based authentication
+
+### OAuth Authentication (Recommended for external apps)
+
+```typescript
+// Exchange authorization code for tokens
+const tokens = await authClient.oauth.exchangeCode(code, codeVerifier);
+
+// ✅ Specify 'oauth' for best performance (fast path validation)
+authClient.setToken(tokens.access_token, 'oauth');
+
+// All subsequent requests will include:
+// Authorization: Bearer <oauth_access_token>
+// X-Auth-Type: oauth
+```
+
+**Use OAuth when:**
+
+- Third-party application integration
+- User consent-based access
+- Need scope-based permissions
+
+### Hybrid Mode (Backward compatible)
+
+```typescript
+// Don't know token type or want automatic detection
+authClient.setToken(someToken, 'hybrid');
+
+// All subsequent requests will include:
+// Authorization: Bearer <token>
+// X-Auth-Type: hybrid
+
+// API will try JWT first, then fallback to OAuth
+```
+
+**Use Hybrid when:**
+
+- Backward compatibility needed
+- Token type is unknown
+- Migrating from old implementation
+
+### Performance Comparison
+
+| Auth Type | Validation           | Performance               | Use Case                       |
+| --------- | -------------------- | ------------------------- | ------------------------------ |
+| `jwt`     | JWT only             | ⚡ Fast (1 validation)    | Internal users, password login |
+| `oauth`   | OAuth only           | ⚡ Fast (1 validation)    | External apps, OAuth flow      |
+| `hybrid`  | JWT → OAuth fallback | 🐌 Slower (2 validations) | Unknown token type             |
+
+**💡 Tip:** Always specify `'jwt'` or `'oauth'` explicitly for ~50% faster authentication!
+
 ## Security Best Practices
 
 1. **Never commit API keys** - Use environment variables

package/dist/client/api/oauth.api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.api.d.ts","sourceRoot":"","sources":["../../../src/client/api/oauth.api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,qCAAqC,EAAE,MAAM,EAAE,CAAC;IAChD,qCAAqC,EAAE,MAAM,EAAE,CAAC;IAChD,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,qBAAa,QAAQ;IAEjB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,MAAM;gBADN,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,WAAW;IAG7B;;;;;;;;;;;;;;;OAeG;IACH,mBAAmB,CAAC,OAAO,GAAE,uBAA4B,GAAG,MAAM;IAqBlE;;;;;;;;;;;;;;;;OAgBG;IACG,oBAAoB,CACxB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;QACP,YAAY,CAAC,EAAE,MAAM,CAAC;KAClB,GACL,OAAO,CAAC,aAAa,CAAC;IAsBzB;;;;;;;OAOG;IACG,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAetE;;;;;;;;OAQG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IASzD;;;;;;;OAOG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,cAAc,GAAG,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjG;;;;;;;;;;OAUG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAC5C,MAAM,EAAE,OAAO,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IAcF;;;;;;;;;OASG;IACG,oBAAoB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAKxD;;;;;;;;OAQG;IACG,OAAO,IAAI,OAAO,CAAC;QACvB,IAAI,EAAE,KAAK,CAAC;YACV,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,CAAC,EAAE,MAAM,CAAC;YACV,CAAC,EAAE,MAAM,CAAC;SACX,CAAC,CAAC;KACJ,CAAC;CAIH;AAuCD;;;;;;;;;GASG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC,CAUD;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}
+{"version":3,"file":"oauth.api.d.ts","sourceRoot":"","sources":["../../../src/client/api/oauth.api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,qCAAqC,EAAE,MAAM,EAAE,CAAC;IAChD,qCAAqC,EAAE,MAAM,EAAE,CAAC;IAChD,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,qBAAa,QAAQ;IAEjB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,MAAM;gBADN,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,WAAW;IAG7B;;;;;;;;;;;;;;;OAeG;IACH,mBAAmB,CAAC,OAAO,GAAE,uBAA4B,GAAG,MAAM;IAqBlE;;;;;;;;;;;;;;;;OAgBG;IACG,oBAAoB,CACxB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;QACP,YAAY,CAAC,EAAE,MAAM,CAAC;KAClB,GACL,OAAO,CAAC,aAAa,CAAC;IA8BzB;;;;;;;OAOG;IACG,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAetE;;;;;;;;OAQG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IASzD;;;;;;;OAOG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,cAAc,GAAG,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjG;;;;;;;;;;OAUG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAC5C,MAAM,EAAE,OAAO,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IAcF;;;;;;;;;OASG;IACG,oBAAoB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAKxD;;;;;;;;OAQG;IACG,OAAO,IAAI,OAAO,CAAC;QACvB,IAAI,EAAE,KAAK,CAAC;YACV,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,CAAC,EAAE,MAAM,CAAC;YACV,CAAC,EAAE,MAAM,CAAC;SACX,CAAC,CAAC;KACJ,CAAC;CAIH;AAuCD;;;;;;;;;GASG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC,CAUD;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/client/api/oauth.api.js

@@ -77,6 +77,13 @@ class OAuthAPI {
         if (options.codeVerifier) {
             data.code_verifier = options.codeVerifier;
         }
+        const baseURL = this.client['client'].defaults.baseURL;
+        console.log('[OAuth] Exchanging code for token:', {
+            endpoint: `${baseURL}/oauth/token`,
+            clientId: this.config.clientId,
+            redirectUri: this.config.redirectUri,
+            hasCodeVerifier: !!options.codeVerifier,
+        });
         const response = await this.client.post('/oauth/token', data);
         return response.data;
     }

package/dist/client/auth-client.d.ts

@@ -13,6 +13,7 @@ export declare class AuthClient {
     private apiKey;
     private apiKeyHeader;
     private token;
+    private authType;
     readonly auth: AuthAPI;
     readonly health: HealthAPI;
     readonly systemConfig: SystemConfigAPI;
@@ -64,8 +65,33 @@ export declare class AuthClient {
     getApiKeyMasked(): string;
     /**
      * Set JWT token for authenticated requests
+     *
+     * @param token - JWT access token
+     * @param type - Token type: 'jwt' (default), 'oauth', or 'hybrid'
+     *
+     * @example
+     * ```typescript
+     * // JWT token from /auth/login
+     * authClient.setToken(session.token, 'jwt');
+     *
+     * // OAuth access token
+     * authClient.setToken(oauthToken, 'oauth');
+     *
+     * // Auto-detect (hybrid mode)
+     * authClient.setToken(token);
+     * ```
+     */
+    setToken(token: string, type?: 'jwt' | 'oauth' | 'hybrid'): void;
+    /**
+     * Get current token type
+     */
+    getAuthType(): 'jwt' | 'oauth' | 'hybrid';
+    /**
+     * Set authentication type
+     *
+     * @param type - Authentication type: 'jwt', 'oauth', or 'hybrid'
      */
-    setToken(token: string): void;
+    setAuthType(type: 'jwt' | 'oauth' | 'hybrid'): void;
     /**
      * Get current token (masked)
      */

package/dist/client/auth-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-client.d.ts","sourceRoot":"","sources":["../../src/client/auth-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEnH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,KAAK,CAAuB;IAGpC,SAAgB,IAAI,EAAE,OAAO,CAAC;IAC9B,SAAgB,MAAM,EAAE,SAAS,CAAC;IAClC,SAAgB,YAAY,EAAE,eAAe,CAAC;IAC9C,SAAgB,KAAK,EAAE,QAAQ,CAAC;IAChC,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,IAAI,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,CAAC;gBAEZ,MAAM,EAAE,aAAa;IAoDjC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAI1C;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIvF;;OAEG;IACG,IAAI,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIpG;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAInG;;OAEG;IACG,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIrG;;OAEG;IACG,MAAM,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAI1F;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B;;OAEG;IACH,eAAe,IAAI,MAAM;IAMzB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI7B;;OAEG;IACH,cAAc,IAAI,MAAM;IAOxB;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,gBAAgB,IAAI,aAAa;CAGlC"}
+{"version":3,"file":"auth-client.d.ts","sourceRoot":"","sources":["../../src/client/auth-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEnH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,QAAQ,CAAwC;IAGxD,SAAgB,IAAI,EAAE,OAAO,CAAC;IAC9B,SAAgB,MAAM,EAAE,SAAS,CAAC;IAClC,SAAgB,YAAY,EAAE,eAAe,CAAC;IAC9C,SAAgB,KAAK,EAAE,QAAQ,CAAC;IAChC,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,IAAI,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,CAAC;gBAEZ,MAAM,EAAE,aAAa;IA4DjC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAW1C;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIvF;;OAEG;IACG,IAAI,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIpG;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAInG;;OAEG;IACG,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIrG;;OAEG;IACG,MAAM,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAI1F;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B;;OAEG;IACH,eAAe,IAAI,MAAM;IAMzB;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,KAAK,GAAG,OAAO,GAAG,QAAgB,GAAG,IAAI;IAMvE;;OAEG;IACH,WAAW,IAAI,KAAK,GAAG,OAAO,GAAG,QAAQ;IAIzC;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI;IAKnD;;OAEG;IACH,cAAc,IAAI,MAAM;IAOxB;;OAEG;IACH,UAAU,IAAI,IAAI;IAKlB;;OAEG;IACH,gBAAgB,IAAI,aAAa;CAGlC"}

package/dist/client/auth-client.js

@@ -16,8 +16,14 @@ const api_1 = require("./api");
 class AuthClient {
     constructor(config) {
         this.token = null;
+        this.authType = 'hybrid'; // Default to hybrid
         this.apiKey = config.apiKey;
         this.apiKeyHeader = config.apiKeyHeader || 'X-API-Key';
+        console.log('[AuthClient] Initializing with config:', {
+            baseURL: config.baseURL,
+            timeout: config.timeout,
+            apiKeyHeader: this.apiKeyHeader,
+        });
         this.client = axios_1.default.create({
             baseURL: config.baseURL,
             timeout: config.timeout || 30000,
@@ -32,6 +38,8 @@ class AuthClient {
                 // Inject JWT token if available
                 if (this.token) {
                     requestConfig.headers['Authorization'] = `Bearer ${this.token}`;
+                    // ✅ Inject X-Auth-Type header for better performance
+                    requestConfig.headers['X-Auth-Type'] = this.authType;
                 }
             }
             return requestConfig;
@@ -69,6 +77,12 @@ class AuthClient {
      * ```
      */
     initializeOAuth(config) {
+        console.log('[AuthClient] Initializing OAuth with:', {
+            clientId: config.clientId,
+            redirectUri: config.redirectUri,
+            scope: config.scope,
+            baseURL: this.client.defaults.baseURL,
+        });
         this.oauth = new api_1.OAuthAPI(this, config);
     }
     /**
@@ -118,9 +132,41 @@ class AuthClient {
     }
     /**
      * Set JWT token for authenticated requests
+     *
+     * @param token - JWT access token
+     * @param type - Token type: 'jwt' (default), 'oauth', or 'hybrid'
+     *
+     * @example
+     * ```typescript
+     * // JWT token from /auth/login
+     * authClient.setToken(session.token, 'jwt');
+     *
+     * // OAuth access token
+     * authClient.setToken(oauthToken, 'oauth');
+     *
+     * // Auto-detect (hybrid mode)
+     * authClient.setToken(token);
+     * ```
      */
-    setToken(token) {
+    setToken(token, type = 'jwt') {
         this.token = token;
+        this.authType = type;
+        console.log(`[AuthClient] Token set with type: ${type}`);
+    }
+    /**
+     * Get current token type
+     */
+    getAuthType() {
+        return this.authType;
+    }
+    /**
+     * Set authentication type
+     *
+     * @param type - Authentication type: 'jwt', 'oauth', or 'hybrid'
+     */
+    setAuthType(type) {
+        this.authType = type;
+        console.log(`[AuthClient] Auth type changed to: ${type}`);
     }
     /**
      * Get current token (masked)
@@ -138,6 +184,7 @@ class AuthClient {
      */
     clearToken() {
         this.token = null;
+        this.authType = 'hybrid';
     }
     /**
      * Get axios instance for advanced usage

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "win-portal-auth-sdk",
-  "version": "1.1.1",
-  "description": "Shared authentication SDK for Win Portal applications using API Key authentication",
+  "version": "1.2.1",
+  "description": "Shared authentication SDK for Win Portal applications with JWT and OAuth support",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [