Class TokenManager

Manages OAuth tokens including expiration and refresh

Index

Constructors

Methods

clear getAccessToken getRefreshToken getToken hasRefreshToken isExpired loadFromStorage refreshToken setRefreshCallback setToken shouldRefresh

Constructors

constructor

new TokenManager(
token?: string | OAuthToken,
storage?: TokenStorage,
): TokenManager
Parameters
- Optionaltoken: string | OAuthToken
- Optionalstorage: TokenStorage
Returns TokenManager
- Defined in src/auth/TokenManager.ts:25

Methods

clear

clear(): void
Clear token

Returns void
- Defined in src/auth/TokenManager.ts:167

getAccessToken

getAccessToken(): Promise<string | null>
Get access token (refreshes if expired)

Returns Promise<string | null>
- Defined in src/auth/TokenManager.ts:87

getRefreshToken

getRefreshToken(): string | null
Get refresh token

Returns string | null
- Defined in src/auth/TokenManager.ts:132

getToken

getToken(): OAuthToken | null
Get current token

Returns OAuthToken | null
- Defined in src/auth/TokenManager.ts:80

hasRefreshToken

hasRefreshToken(): boolean
Check if refresh token is available

Returns boolean
- Defined in src/auth/TokenManager.ts:125

isExpired

isExpired(): boolean
Check if token is expired

Returns boolean
- Defined in src/auth/TokenManager.ts:103

loadFromStorage

loadFromStorage(): Promise<void>
Load token from storage

Returns Promise<void>
- Defined in src/auth/TokenManager.ts:177

refreshToken

refreshToken(): Promise<void>
Refresh the access token

Returns Promise<void>
- Defined in src/auth/TokenManager.ts:139

setRefreshCallback

setRefreshCallback(callback: () => Promise<OAuthToken>): void
Set callback for token refresh
Parameters
- callback: () => Promise<OAuthToken>
Returns void
- Defined in src/auth/TokenManager.ts:160

setToken

setToken(token: string | OAuthToken): void
Set token.

If the incoming token does not include a refresh token but we already have one stored, preserve the existing refresh token. This matches the SW Combine OAuth2 contract: refresh tokens are only issued the first time a user authorizes, and the refresh-token grant response also does not include a new refresh token. Without this merge behavior, a second handleCallback or auto-refresh would silently drop the refresh token on the floor, leaving the client unable to recover from future 401s.

To explicitly clear the entire token (including the refresh token), use clear instead.
Parameters
- token: string | OAuthToken
Returns void
- Defined in src/auth/TokenManager.ts:54

shouldRefresh

shouldRefresh(): boolean
Check if token should be refreshed (expired or expiring soon)

Returns boolean
- Defined in src/auth/TokenManager.ts:113