win-portal-auth-sdk 1.5.0 → 1.5.1

package/dist/client/api/auth.api.d.ts

@@ -9,7 +9,7 @@
  * - TOTP (Two-Factor Authentication)
  */
 import { AuthClient } from '../auth-client';
-import { AuthSession, User, AuthTokens } from '../../types';
+import { AuthSession, User } from '../../types';
 export declare class AuthAPI {
     private client;
     constructor(client: AuthClient);
@@ -29,9 +29,20 @@ export declare class AuthAPI {
     profile(): Promise<User>;
     /**
      * Refresh access token using session (for web portal)
-     * Uses current session to refresh access token
+     * Uses current access token from Authorization header to refresh
+     * This endpoint doesn't require refresh_token - it uses the session from the current token
+     *
+     * @example
+     * ```typescript
+     * // Token is already set in client
+     * authClient.setToken(accessToken);
+     * const result = await authClient.auth.refreshSession();
+     * authClient.setToken(result.token);
+     * ```
      */
-    refresh(refresh_token: string): Promise<AuthTokens>;
+    refreshSession(): Promise<{
+        token: string;
+    }>;
     /**
      * Refresh access token using refresh token (for mobile apps and long-lived sessions)
      * This endpoint uses refresh token flow and supports token rotation

package/dist/client/api/auth.api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.api.d.ts","sourceRoot":"","sources":["../../../src/client/api/auth.api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAEL,WAAW,EACX,IAAI,EAGJ,UAAU,EAEX,MAAM,aAAa,CAAC;AAErB,qBAAa,OAAO;IACN,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,UAAU;IAEtC;;OAEG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAMlE;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAK5C;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9B;;;OAGG;IACG,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAMzD;;;;;;;;;;;;;;;;;OAiBG;IACG,gBAAgB,CACpB,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;QACR,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC,WAAW,CAAC;IAevB;;;OAGG;IACG,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAcF;;OAEG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAKpE;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC;QAC7B,UAAU,EAAE,OAAO,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC;QACrB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,YAAY,CAAC,EAAE,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IAeF;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAK/D;;;OAGG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;IASvB;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAKnD;;;OAGG;IACG,yBAAyB,IAAI,OAAO,CAAC;QACzC,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CASH"}
+{"version":3,"file":"auth.api.d.ts","sourceRoot":"","sources":["../../../src/client/api/auth.api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAEL,WAAW,EACX,IAAI,EAGL,MAAM,aAAa,CAAC;AAErB,qBAAa,OAAO;IACN,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,UAAU;IAEtC;;OAEG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAMlE;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAK5C;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9B;;;;;;;;;;;;OAYG;IACG,cAAc,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAKlD;;;;;;;;;;;;;;;;;OAiBG;IACG,gBAAgB,CACpB,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;QACR,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC,WAAW,CAAC;IAevB;;;OAGG;IACG,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAcF;;OAEG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAKpE;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC;QAC7B,UAAU,EAAE,OAAO,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC;QACrB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,YAAY,CAAC,EAAE,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IAeF;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAK/D;;;OAGG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;IASvB;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAKnD;;;OAGG;IACG,yBAAyB,IAAI,OAAO,CAAC;QACzC,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CASH"}

package/dist/client/api/auth.api.js

@@ -39,11 +39,19 @@ class AuthAPI {
     }
     /**
      * Refresh access token using session (for web portal)
-     * Uses current session to refresh access token
+     * Uses current access token from Authorization header to refresh
+     * This endpoint doesn't require refresh_token - it uses the session from the current token
+     *
+     * @example
+     * ```typescript
+     * // Token is already set in client
+     * authClient.setToken(accessToken);
+     * const result = await authClient.auth.refreshSession();
+     * authClient.setToken(result.token);
+     * ```
      */
-    async refresh(refresh_token) {
-        const payload = { refresh_token };
-        const response = await this.client.post('/auth/refresh', payload);
+    async refreshSession() {
+        const response = await this.client.post('/auth/refresh');
         return response.data.data;
     }
     /**

package/dist/client/auth-client.d.ts

@@ -52,11 +52,15 @@ export interface AutomaticRefreshOptions {
     /**
      * Storage key for refresh token (SDK will manage localStorage automatically)
      * If provided, SDK will handle localStorage operations automatically
+     *
+     * Note: If login doesn't return refresh_token, SDK will use session-based refresh instead
      */
     refreshTokenKey?: string;
     /**
      * Custom callbacks (use if you need custom storage or want to override default behavior)
      * If refreshTokenKey is provided, these will be ignored
+     *
+     * Note: If not provided and no refreshTokenKey, SDK will use session-based refresh (no refresh token needed)
      */
     callbacks?: RefreshTokenCallbacks;
     /**
@@ -220,17 +224,23 @@ export declare class AuthClient {
      * Enable automatic token refresh
      * Call this after user is authenticated to enable automatic refresh
      *
-     * @param options - Options for automatic refresh
+     * @param options - Options for automatic refresh (optional - SDK will use session-based refresh if not provided)
      *
      * @example
      * ```typescript
-     * // Simple: SDK manages localStorage automatically
+     * // Option 1: Session-based refresh (default - no refresh token needed)
+     * // Works when login only returns access_token
+     * await authClient.enableAutomaticRefresh({
+     *   onRefreshFailure: () => window.location.href = '/login'
+     * });
+     *
+     * // Option 2: With refresh token (if login returns refresh_token)
      * await authClient.enableAutomaticRefresh({
      *   refreshTokenKey: 'refresh_token',
      *   onRefreshFailure: () => window.location.href = '/login'
      * });
      *
-     * // Advanced: Custom callbacks
+     * // Option 3: Custom callbacks
      * await authClient.enableAutomaticRefresh({
      *   callbacks: {
      *     getRefreshToken: () => customStorage.get('refresh_token'),
@@ -241,7 +251,7 @@ export declare class AuthClient {
      * });
      * ```
      */
-    enableAutomaticRefresh(options: AutomaticRefreshOptions): Promise<void>;
+    enableAutomaticRefresh(options?: AutomaticRefreshOptions): Promise<void>;
     /**
      * Disable automatic token refresh
      */
@@ -260,6 +270,7 @@ export declare class AuthClient {
     private performRefresh;
     /**
      * Execute refresh token request
+     * Supports both session-based refresh (no refresh token needed) and refresh token flow
      */
     private doRefresh;
     /**
@@ -315,7 +326,7 @@ export declare class AuthClient {
      *
      * Note: ใช้ token expiration time เป็นตัวประมาณ session expiration
      * เพราะเราไม่มี session creation time หรือ last activity time ใน SDK
-     * Token expiration จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน (extend_on_activity)
+     * Token expiration จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน
      */
     private checkSessionExpiration;
     /**

package/dist/client/auth-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-client.d.ts","sourceRoot":"","sources":["../../src/client/auth-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAA8B,MAAM,OAAO,CAAC;AAC5G,OAAO,EAAE,aAAa,EAA8C,MAAM,UAAU,CAAC;AACrF,OAAO,EACL,OAAO,EACP,SAAS,EACT,eAAe,EACf,QAAQ,EACR,WAAW,EACX,UAAU,EACV,QAAQ,EACR,WAAW,EACX,OAAO,EACP,OAAO,EACR,MAAM,OAAO,CAAC;AAuBf,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,eAAe,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9D;;OAEG;IACH,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,GAAG,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClH;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,SAAS,EAAE,0BAA0B,CAAC;IACtC;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,SAAS,EAAE,mBAAmB,CAAC;IAC/B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC,EAAE,CAAC;CAChE;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,QAAQ,CAAwC;IAGxD,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,gBAAgB,CAA8B;IACtD,OAAO,CAAC,uBAAuB,CAAuB;IACtD,OAAO,CAAC,uBAAuB,CAAwB;IACvD,OAAO,CAAC,kBAAkB,CAAa;IACvC,OAAO,CAAC,cAAc,CAAgC;IAGtD,OAAO,CAAC,0BAA0B,CAA2C;IAC7E,OAAO,CAAC,uBAAuB,CAAwC;IACvE,OAAO,CAAC,8BAA8B,CAA8B;IACpE,OAAO,CAAC,8BAA8B,CAA+B;IACrE,OAAO,CAAC,qCAAqC,CAAkD;IAC/F,OAAO,CAAC,eAAe,CAAa;IAGpC,OAAO,CAAC,mBAAmB,CAAoC;IAC/D,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,wBAAwB,CAA+B;IAC/D,OAAO,CAAC,gBAAgB,CAAa;IACrC,OAAO,CAAC,0BAA0B,CAAkB;IACpD,OAAO,CAAC,wBAAwB,CAAa;IAC7C,OAAO,CAAC,wBAAwB,CAAa;IAC7C,OAAO,CAAC,cAAc,CAA6D;IACnF,OAAO,CAAC,eAAe,CAA6B;IACpD,OAAO,CAAC,uBAAuB,CAA+B;IAC9D,OAAO,CAAC,kBAAkB,CAAwC;IAClE,OAAO,CAAC,gBAAgB,CAAsC;IAG9D,SAAgB,IAAI,EAAE,OAAO,CAAC;IAC9B,SAAgB,MAAM,EAAE,SAAS,CAAC;IAClC,SAAgB,YAAY,EAAE,eAAe,CAAC;IAC9C,SAAgB,KAAK,EAAE,QAAQ,CAAC;IAChC,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,OAAO,EAAE,UAAU,CAAC;IACpC,SAAgB,IAAI,EAAE,OAAO,CAAC;IAC9B,SAAgB,IAAI,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,CAAC;gBAEZ,MAAM,EAAE,aAAa;IA0JjC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAW1C;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIvF;;OAEG;IACG,IAAI,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIpG;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAInG;;OAEG;IACG,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIrG;;OAEG;IACG,MAAM,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAI1F;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B;;OAEG;IACH,eAAe,IAAI,MAAM;IAMzB;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,KAAK,GAAG,OAAO,GAAG,QAAgB,GAAG,IAAI;IAcvE;;OAEG;IACH,WAAW,IAAI,KAAK,GAAG,OAAO,GAAG,QAAQ;IAIzC;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI;IAKnD;;OAEG;IACH,cAAc,IAAI,MAAM;IAOxB;;OAEG;IACH,UAAU,IAAI,IAAI;IAMlB;;OAEG;IACH,gBAAgB,IAAI,aAAa;IAIjC;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgC7E;;OAEG;IACH,uBAAuB,IAAI,IAAI;IAO/B;;OAEG;YACW,aAAa;IAS3B;;OAEG;YACW,oBAAoB;IAgBlC;;OAEG;YACW,cAAc;IAmB5B;;OAEG;YACW,SAAS;IAiDvB;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,iCAAiC,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzF;;OAEG;IACH,kCAAkC,IAAI,IAAI;IAO1C;;OAEG;YACW,2BAA2B;IASzC;;OAEG;YACW,kCAAkC;IAmBhD;;OAEG;IACH,OAAO,CAAC,gCAAgC;IAaxC;;OAEG;IACH,OAAO,CAAC,+BAA+B;IAOvC;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAwE9B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAe9B;;OAEG;IACG,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IAMpD;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,yBAAyB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IA0DnF;;OAEG;IACH,0BAA0B,IAAI,IAAI;IAyBlC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAuB9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAc/B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAW/B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAmC5B;;OAEG;IACH,OAAO,CAAC,sBAAsB;CA0B/B"}
+{"version":3,"file":"auth-client.d.ts","sourceRoot":"","sources":["../../src/client/auth-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAA8B,MAAM,OAAO,CAAC;AAC5G,OAAO,EAAE,aAAa,EAA8C,MAAM,UAAU,CAAC;AACrF,OAAO,EACL,OAAO,EACP,SAAS,EACT,eAAe,EACf,QAAQ,EACR,WAAW,EACX,UAAU,EACV,QAAQ,EACR,WAAW,EACX,OAAO,EACP,OAAO,EACR,MAAM,OAAO,CAAC;AAsBf,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,eAAe,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9D;;OAEG;IACH,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,GAAG,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClH;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,SAAS,EAAE,0BAA0B,CAAC;IACtC;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,SAAS,EAAE,mBAAmB,CAAC;IAC/B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC,EAAE,CAAC;CAChE;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,QAAQ,CAAwC;IAGxD,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,gBAAgB,CAA8B;IACtD,OAAO,CAAC,uBAAuB,CAAuB;IACtD,OAAO,CAAC,uBAAuB,CAAwB;IACvD,OAAO,CAAC,kBAAkB,CAAa;IACvC,OAAO,CAAC,cAAc,CAAgC;IAGtD,OAAO,CAAC,0BAA0B,CAA2C;IAC7E,OAAO,CAAC,uBAAuB,CAAwC;IACvE,OAAO,CAAC,8BAA8B,CAA8B;IACpE,OAAO,CAAC,8BAA8B,CAA+B;IACrE,OAAO,CAAC,qCAAqC,CAAkD;IAC/F,OAAO,CAAC,eAAe,CAAa;IAGpC,OAAO,CAAC,mBAAmB,CAAoC;IAC/D,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,wBAAwB,CAA+B;IAC/D,OAAO,CAAC,gBAAgB,CAAa;IACrC,OAAO,CAAC,0BAA0B,CAAkB;IACpD,OAAO,CAAC,wBAAwB,CAAa;IAC7C,OAAO,CAAC,wBAAwB,CAAa;IAC7C,OAAO,CAAC,cAAc,CAA6D;IACnF,OAAO,CAAC,eAAe,CAA6B;IACpD,OAAO,CAAC,uBAAuB,CAA+B;IAC9D,OAAO,CAAC,kBAAkB,CAAwC;IAClE,OAAO,CAAC,gBAAgB,CAAsC;IAG9D,SAAgB,IAAI,EAAE,OAAO,CAAC;IAC9B,SAAgB,MAAM,EAAE,SAAS,CAAC;IAClC,SAAgB,YAAY,EAAE,eAAe,CAAC;IAC9C,SAAgB,KAAK,EAAE,QAAQ,CAAC;IAChC,SAAgB,QAAQ,EAAE,WAAW,CAAC;IACtC,SAAgB,OAAO,EAAE,UAAU,CAAC;IACpC,SAAgB,IAAI,EAAE,OAAO,CAAC;IAC9B,SAAgB,IAAI,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,CAAC;gBAEZ,MAAM,EAAE,aAAa;IA0JjC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAW1C;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIvF;;OAEG;IACG,IAAI,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIpG;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAInG;;OAEG;IACG,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAIrG;;OAEG;IACG,MAAM,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAI1F;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B;;OAEG;IACH,eAAe,IAAI,MAAM;IAMzB;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,KAAK,GAAG,OAAO,GAAG,QAAgB,GAAG,IAAI;IAcvE;;OAEG;IACH,WAAW,IAAI,KAAK,GAAG,OAAO,GAAG,QAAQ;IAIzC;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI;IAKnD;;OAEG;IACH,cAAc,IAAI,MAAM;IAOxB;;OAEG;IACH,UAAU,IAAI,IAAI;IAMlB;;OAEG;IACH,gBAAgB,IAAI,aAAa;IAIjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,sBAAsB,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8C9E;;OAEG;IACH,uBAAuB,IAAI,IAAI;IAO/B;;OAEG;YACW,aAAa;IAS3B;;OAEG;YACW,oBAAoB;IAgBlC;;OAEG;YACW,cAAc;IAmB5B;;;OAGG;YACW,SAAS;IAqDvB;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,iCAAiC,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzF;;OAEG;IACH,kCAAkC,IAAI,IAAI;IAO1C;;OAEG;YACW,2BAA2B;IASzC;;OAEG;YACW,kCAAkC;IAmBhD;;OAEG;IACH,OAAO,CAAC,gCAAgC;IAaxC;;OAEG;IACH,OAAO,CAAC,+BAA+B;IAOvC;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAkE9B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAe9B;;OAEG;IACG,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IAMpD;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,yBAAyB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAsDnF;;OAEG;IACH,0BAA0B,IAAI,IAAI;IAyBlC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAuB9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAc/B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAW/B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAmC5B;;OAEG;IACH,OAAO,CAAC,sBAAsB;CA0B/B"}

package/dist/client/auth-client.js

@@ -324,17 +324,23 @@ class AuthClient {
      * Enable automatic token refresh
      * Call this after user is authenticated to enable automatic refresh
      *
-     * @param options - Options for automatic refresh
+     * @param options - Options for automatic refresh (optional - SDK will use session-based refresh if not provided)
      *
      * @example
      * ```typescript
-     * // Simple: SDK manages localStorage automatically
+     * // Option 1: Session-based refresh (default - no refresh token needed)
+     * // Works when login only returns access_token
+     * await authClient.enableAutomaticRefresh({
+     *   onRefreshFailure: () => window.location.href = '/login'
+     * });
+     *
+     * // Option 2: With refresh token (if login returns refresh_token)
      * await authClient.enableAutomaticRefresh({
      *   refreshTokenKey: 'refresh_token',
      *   onRefreshFailure: () => window.location.href = '/login'
      * });
      *
-     * // Advanced: Custom callbacks
+     * // Option 3: Custom callbacks
      * await authClient.enableAutomaticRefresh({
      *   callbacks: {
      *     getRefreshToken: () => customStorage.get('refresh_token'),
@@ -346,7 +352,16 @@ class AuthClient {
      * ```
      */
     async enableAutomaticRefresh(options) {
-        if (options.refreshTokenKey) {
+        // If no options provided, use session-based refresh (no refresh token needed)
+        if (!options) {
+            this.refreshTokenCallbacks = {
+                getRefreshToken: () => null, // No refresh token available
+                setRefreshToken: () => { }, // No-op
+                clearRefreshToken: () => { }, // No-op
+                onRefreshFailure: undefined,
+            };
+        }
+        else if (options.refreshTokenKey) {
             // Use localStorage with provided key
             const key = options.refreshTokenKey;
             this.refreshTokenCallbacks = {
@@ -376,7 +391,13 @@ class AuthClient {
             };
         }
         else {
-            throw new Error('Either refreshTokenKey or callbacks must be provided');
+            // No refresh token callbacks - use session-based refresh
+            this.refreshTokenCallbacks = {
+                getRefreshToken: () => null,
+                setRefreshToken: () => { },
+                clearRefreshToken: () => { },
+                onRefreshFailure: options.onRefreshFailure,
+            };
         }
         await this.loadJwtConfig();
     }
@@ -438,48 +459,54 @@ class AuthClient {
     }
     /**
      * Execute refresh token request
+     * Supports both session-based refresh (no refresh token needed) and refresh token flow
      */
     async doRefresh() {
-        if (!this.refreshTokenCallbacks) {
-            throw new Error('Refresh token callbacks not configured');
-        }
-        const refreshToken = await this.refreshTokenCallbacks.getRefreshToken();
-        if (!refreshToken) {
-            throw new Error('No refresh token available');
-        }
-        try {
-            // Try refreshWithToken first (for mobile apps with refresh token)
-            const session = await this.auth.refreshWithToken(refreshToken);
-            const newAccessToken = session.access_token;
-            // Update token in client
-            this.token = newAccessToken;
-            // Save new refresh token if rotated
-            if (session.refresh_token) {
-                await this.refreshTokenCallbacks.setRefreshToken(session.refresh_token);
+        // Strategy 1: Try session-based refresh first (works without refresh token)
+        // This is the default for web portal login that only returns access_token
+        if (this.token) {
+            try {
+                logger_1.logger.debug('Attempting session-based refresh...');
+                const result = await this.auth.refreshSession();
+                const newAccessToken = result.token;
+                // Update token in client
+                this.token = newAccessToken;
+                logger_1.logger.debug('Token refreshed successfully (session-based)');
+                return newAccessToken;
+            }
+            catch (error) {
+                // If session-based refresh fails (e.g., session expired), try refresh token flow
+                logger_1.logger.debug('Session-based refresh failed, trying refresh token flow...', {
+                    status: error.response?.status,
+                    message: error.message,
+                });
             }
-            logger_1.logger.debug('Token refreshed successfully');
-            return newAccessToken;
         }
-        catch (error) {
-            // If refreshWithToken fails, try regular refresh endpoint
-            if (error.response?.status === 404 || error.response?.status === 400) {
+        // Strategy 2: Use refresh token flow (for mobile apps or when refresh token is available)
+        if (this.refreshTokenCallbacks) {
+            const refreshToken = await this.refreshTokenCallbacks.getRefreshToken();
+            if (refreshToken) {
                 try {
-                    const tokens = await this.auth.refresh(refreshToken);
-                    const newAccessToken = tokens.access_token;
+                    // Try refreshWithToken first (for mobile apps with refresh token)
+                    const session = await this.auth.refreshWithToken(refreshToken);
+                    const newAccessToken = session.access_token;
+                    // Update token in client
                     this.token = newAccessToken;
-                    if (tokens.refresh_token) {
-                        await this.refreshTokenCallbacks.setRefreshToken(tokens.refresh_token);
+                    // Save new refresh token if rotated
+                    if (session.refresh_token) {
+                        await this.refreshTokenCallbacks.setRefreshToken(session.refresh_token);
                     }
-                    logger_1.logger.debug('Token refreshed successfully (fallback)');
+                    logger_1.logger.debug('Token refreshed successfully (refresh token flow)');
                     return newAccessToken;
                 }
-                catch (fallbackError) {
-                    logger_1.logger.error('Fallback refresh also failed:', fallbackError);
-                    throw fallbackError;
+                catch (error) {
+                    logger_1.logger.error('Refresh token flow failed:', error);
+                    throw error;
                 }
             }
-            throw error;
         }
+        // If both strategies fail
+        throw new Error('No refresh method available: token expired and no refresh token configured');
     }
     /**
      * Reload JWT config (for when config changes)
@@ -549,10 +576,10 @@ class AuthClient {
             this.sessionManagementConfig = config;
             logger_1.logger.debug('Session management config loaded:', {
                 inactivityEnabled: config.inactivity.enabled,
-                inactivityTimeout: `${config.inactivity.timeout_duration} ${config.inactivity.timeout_unit}`,
+                inactivityTimeoutMinutes: config.inactivity.timeout_minutes,
                 inactivityWarningMinutes: config.inactivity.warning_minutes,
                 lifetimeEnabled: config.lifetime.enabled,
-                lifetimeMax: config.lifetime.enabled ? `${config.lifetime.max_duration} ${config.lifetime.max_unit}` : 'N/A',
+                lifetimeMaxDays: config.lifetime.enabled ? config.lifetime.max_lifetime_days : 'N/A',
             });
         }
         catch (error) {
@@ -589,7 +616,7 @@ class AuthClient {
      *
      * Note: ใช้ token expiration time เป็นตัวประมาณ session expiration
      * เพราะเราไม่มี session creation time หรือ last activity time ใน SDK
-     * Token expiration จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน (extend_on_activity)
+     * Token expiration จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน
      */
     checkSessionExpiration() {
         if (!this.token || !this.sessionExpirationCallbacks || !this.sessionManagementConfig) {
@@ -607,7 +634,7 @@ class AuthClient {
             return;
         }
         // ใช้ token expiration time เป็นตัวประมาณ session expiration
-        // เพราะ token จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน (extend_on_activity)
+        // เพราะ token จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน
         // ดังนั้น token expiration time จะสะท้อน session expiration time ได้ดีพอสมควร
         // ตรวจสอบว่า session expiration monitoring เปิดใช้งานหรือไม่
         const inactivityEnabled = this.sessionManagementConfig.inactivity.enabled;
@@ -623,10 +650,10 @@ class AuthClient {
         }
         // คำนวณ session expiration times จาก config
         const inactivityTimeoutMinutes = inactivityEnabled
-            ? (0, token_utils_1.convertDurationToMinutes)(this.sessionManagementConfig.inactivity.timeout_duration, this.sessionManagementConfig.inactivity.timeout_unit)
+            ? this.sessionManagementConfig.inactivity.timeout_minutes
             : null;
-        const lifetimeMaxMinutes = lifetimeEnabled
-            ? (0, token_utils_1.convertDurationToMinutes)(this.sessionManagementConfig.lifetime.max_duration, this.sessionManagementConfig.lifetime.max_unit)
+        const lifetimeMaxMinutes = lifetimeEnabled && this.sessionManagementConfig.lifetime.max_lifetime_days
+            ? this.sessionManagementConfig.lifetime.max_lifetime_days * 24 * 60 // Convert days to minutes
             : null;
         // ใช้ token expiration time เป็นตัวประมาณ session expiration
         // เพราะ token จะถูก refresh อัตโนมัติเมื่อมีการใช้งาน
@@ -710,8 +737,7 @@ class AuthClient {
         }
         else if (this.sessionManagementConfig?.inactivity.enabled) {
             // Use session management config
-            this.inactivityTimeoutSeconds =
-                (0, token_utils_1.convertDurationToMinutes)(this.sessionManagementConfig.inactivity.timeout_duration, this.sessionManagementConfig.inactivity.timeout_unit) * 60; // Convert to seconds
+            this.inactivityTimeoutSeconds = this.sessionManagementConfig.inactivity.timeout_minutes * 60; // Convert minutes to seconds
         }
         else {
             // Default: 30 minutes

package/dist/middleware/express.middleware.d.ts

@@ -7,7 +7,7 @@ import { User } from '../types';
 import { MiddlewareConfig, AuthContext } from './types';
 import './express.types';
 /**
- * Create Express/NestJS middleware
+ * Create Express middleware
  *
  * @example
  * ```typescript

package/dist/middleware/express.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"express.middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/express.middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGxD,OAAO,iBAAiB,CAAC;AAUzB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,SAYlC,GAAG,OAAO,GAAG,QAAQ,GAAG,kBAoG5C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,WAAW,CAK7C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG;IACrC,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf,CASA;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,QAM5C"}
+{"version":3,"file":"express.middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/express.middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAMxD,OAAO,iBAAiB,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,SAGlC,GAAG,OAAO,GAAG,QAAQ,GAAG,kBA4B5C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,WAAW,CAK7C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG;IACrC,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf,CASA;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,QAM5C"}

package/dist/middleware/express.middleware.js

@@ -6,12 +6,13 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.clearAuthCache = exports.requireAuth = exports.getAuth = exports.authMiddleware = void 0;
-const client_1 = require("../client");
+const auth_service_1 = require("./shared/auth-service");
+const token_extractor_1 = require("./shared/token-extractor");
+const user_cache_1 = require("./shared/user-cache");
 // Import Express type augmentation
 require("./express.types");
-const userCache = new Map();
 /**
- * Create Express/NestJS middleware
+ * Create Express middleware
  *
  * @example
  * ```typescript
@@ -31,103 +32,29 @@ const userCache = new Map();
  * ```
  */
 function authMiddleware(config) {
-    const client = new client_1.AuthClient({
-        baseURL: config.baseURL,
-        apiKey: config.apiKey,
-        apiKeyHeader: config.apiKeyHeader,
-    });
-    const cacheTimeout = (config.cacheTimeout || 300) * 1000; // Convert to ms
-    const tokenStrategy = config.tokenStrategy || 'bearer';
-    const cookieName = config.cookieName || 'access_token';
-    const excludePaths = config.excludePaths || [];
+    const authService = new auth_service_1.AuthService(config);
     return async (req, res, next) => {
         // No type assertion needed - req already has user/token from Express.Request augmentation
         // Check if path is excluded
-        const shouldSkip = excludePaths.some((pattern) => {
-            if (typeof pattern === 'string') {
-                return req.path === pattern;
-            }
-            return pattern.test(req.path);
-        });
-        if (shouldSkip) {
+        if ((0, token_extractor_1.shouldExcludePath)(req.path, config.excludePaths)) {
             req.user = null;
             req.token = null;
             return next();
         }
-        // Extract token
-        let token = null;
-        if (config.tokenExtractor) {
-            token = config.tokenExtractor(req);
-        }
-        else if (tokenStrategy === 'bearer') {
-            const authHeader = req.headers.authorization;
-            if (authHeader && authHeader.startsWith('Bearer ')) {
-                token = authHeader.substring(7);
-            }
-        }
-        else if (tokenStrategy === 'cookie') {
-            token = req.cookies?.[cookieName] || null;
-        }
-        // No token found
-        if (!token) {
-            if (config.optional) {
-                req.user = null;
-                req.token = null;
-                return next();
-            }
-            return res.status(401).json({
-                statusCode: 401,
-                message: 'Authentication required',
-                error: 'Unauthorized',
-            });
-        }
-        try {
-            // Check cache first
-            const cached = userCache.get(token);
-            if (cached && Date.now() - cached.timestamp < cacheTimeout) {
-                req.user = cached.user;
-                req.token = token;
-                return next();
-            }
-            // Fetch user profile from API
-            client.setToken(token);
-            const user = await client.auth.profile();
-            // Update cache
-            userCache.set(token, {
-                user,
-                timestamp: Date.now(),
-            });
-            // Clean up old cache entries (simple cleanup)
-            if (userCache.size > 1000) {
-                const now = Date.now();
-                const entries = Array.from(userCache.entries());
-                for (const [key, entry] of entries) {
-                    if (now - entry.timestamp > cacheTimeout) {
-                        userCache.delete(key);
-                    }
-                }
-            }
-            // Attach user to request
-            req.user = user;
-            req.token = token;
-            next();
-        }
-        catch (error) {
-            // Clear cache on error
-            userCache.delete(token);
-            if (config.optional) {
-                req.user = null;
-                req.token = null;
-                return next();
-            }
-            const status = error.response?.status || 401;
-            const message = error.response?.data?.message || 'Authentication failed';
-            return res.status(status).json({
-                statusCode: status,
-                message,
+        // Authenticate request
+        const result = await authService.authenticate(req);
+        // Handle error
+        if (result.error) {
+            return res.status(result.error.status).json({
+                statusCode: result.error.status,
+                message: result.error.message,
                 error: 'Unauthorized',
             });
         }
+        // Attach user and token to request
+        req.user = result.user;
+        req.token = result.token;
+        next();
     };
 }
 exports.authMiddleware = authMiddleware;
@@ -176,10 +103,10 @@ exports.requireAuth = requireAuth;
  */
 function clearAuthCache(token) {
     if (token) {
-        userCache.delete(token);
+        user_cache_1.userCache.delete(token);
     }
     else {
-        userCache.clear();
+        user_cache_1.userCache.clear();
     }
 }
 exports.clearAuthCache = clearAuthCache;

package/dist/middleware/nestjs.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nestjs.guard.d.ts","sourceRoot":"","sources":["../../src/middleware/nestjs.guard.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,gBAAgB,EAAe,MAAM,SAAS,CAAC;AAWxD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC;;6BAY3C,GAAG,GAAG,QAAQ,OAAO,CAAC;;EAgEpD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC;;6BAYnD,GAAG,GAAG,QAAQ,OAAO,CAAC;;EAyDpD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,QAMhD"}
+{"version":3,"file":"nestjs.guard.d.ts","sourceRoot":"","sources":["../../src/middleware/nestjs.guard.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAI3C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC;;6BAO3C,GAAG,GAAG,QAAQ,OAAO,CAAC;;EAoBpD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC;;6BAOnD,GAAG,GAAG,QAAQ,OAAO,CAAC;;EAepD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,QAMhD"}