poc

src/authToken.ts

@@ -11,16 +11,42 @@ const storeAuthTokenInCache = (token: string): void => {
     storeValueInWindow(cacheAuthTokenKey, token);
 };
 
+/**
+ *
+ * @param embedConfig
+ */
+export async function getAuthTokenWithoutCache(embedConfig: EmbedConfig): Promise<string> {
+    const { authEndpoint, getAuthToken } = embedConfig;
+
+    let authToken = null;
+    if (getAuthToken) {
+        authToken = await getAuthToken();
+    } else {
+        const response = await fetchAuthTokenService(authEndpoint);
+        authToken = await response.text();
+    }
+    try {
+        // this will throw error if the token is not valid
+        await validateAuthToken(embedConfig, authToken);
+    } catch (e) {
+        logger.error(`${ERROR_MESSAGE.INVALID_TOKEN_ERROR} Error : ${e.message}`);
+        throw e;
+    }
+
+    storeAuthTokenInCache(authToken);
+    return authToken;
+}
+
 // This method can be used to get the authToken using the embedConfig
 /**
  *
  * @param embedConfig
  */
-export async function getAuthenticationToken(embedConfig: EmbedConfig): Promise<string> {
+export async function getAuthenticationToken(embedConfig: EmbedConfig, skipvalidation: boolean = false): Promise<string> {
     const cachedAuthToken = getCacheAuthToken();
     // Since we don't have token validation enabled , we cannot tell if the
     // cached token is valid or not. So we will always fetch a new token.
-    if (cachedAuthToken && !embedConfig.disableTokenVerification) {
+    if (cachedAuthToken && !embedConfig.disableTokenVerification && !skipvalidation) {
         let isCachedTokenStillValid;
         try {
             isCachedTokenStillValid = await validateAuthToken(embedConfig, cachedAuthToken, true);

src/embed/ts-embed.ts

@@ -17,7 +17,7 @@ import {
     UIPassthroughRequest,
 } from './hostEventClient/contracts';
 import { logger } from '../utils/logger';
-import { getAuthenticationToken } from '../authToken';
+import { getAuthenticationToken, getAuthTokenWithoutCache } from '../authToken';
 import { AnswerService } from '../utils/graphql/answerService/answerService';
 import {
     getEncodedQueryParamsString,
@@ -507,6 +507,31 @@ export class TsEmbed {
         }
     };
 
+    /**
+     * Refresh the auth token if the autoLogin is true and the authType is TrustedAuthTokenCookieless
+     * @param _
+     * @param responder
+     */
+    private tokenRefresh = async (_: any, responder: any) => {
+        const { authType, autoLogin } = this.embedConfig;
+        const isAutoLoginTrue = autoLogin ?? (authType === AuthType.TrustedAuthTokenCookieless);
+        if (isAutoLoginTrue && authType === AuthType.TrustedAuthTokenCookieless) {
+            try {
+                const authToken = await getAuthTokenWithoutCache(this.embedConfig);
+                responder({
+                    type: EmbedEvent.RefreshAuthToken,
+                    data: { authToken },
+                });
+            } catch (e) {
+                logger.error(`${ERROR_MESSAGE.INVALID_TOKEN_ERROR} Error : ${e?.message}`);
+                processAuthFailure(e, this.isPreRendered ? this.preRenderWrapper : this.el);
+            }
+        } else if (isAutoLoginTrue) {
+            handleAuth();
+        }
+        notifyAuthFailure(AuthFailureType.EXPIRY);
+    }
+
     /**
      * Sends updated auth token to the iFrame to avoid user logout
      * @param _
@@ -566,12 +591,11 @@ export class TsEmbed {
         this.on(EmbedEvent.APP_INIT, this.appInitCb, { start: false }, true);
         this.on(EmbedEvent.AuthExpire, this.updateAuthToken, { start: false }, true);
         this.on(EmbedEvent.IdleSessionTimeout, this.idleSessionTimeout, { start: false }, true);
-
         const embedListenerReadyHandler = this.createEmbedContainerHandler(EmbedEvent.EmbedListenerReady);
         this.on(EmbedEvent.EmbedListenerReady, embedListenerReadyHandler, { start: false }, true);
-
         const authInitHandler = this.createEmbedContainerHandler(EmbedEvent.AuthInit);
         this.on(EmbedEvent.AuthInit, authInitHandler, { start: false }, true);
+        this.on(EmbedEvent.RefreshAuthToken, this.tokenRefresh, { start: false }, true);
     };
 
     /**

src/types.ts

@@ -3115,6 +3115,19 @@ export enum EmbedEvent {
      * @version SDK: 1.43.0 | ThoughtSpot: 10.15.0.cl
      */
     ApiIntercept = 'ApiIntercept',
+
+    /**
+     * @hidden
+     * Emitted when the auth token is about to get expired and needs to be refreshed.
+     * @example
+     * ```js
+     * embed.on(EmbedEvent.RefreshAuthToken, (payload) => {
+     *     console.log('payload', payload);
+     * })
+     * ```
+     * @version SDK: 1.45.0 | ThoughtSpot: 26.2.0.cl
+     */
+    RefreshAuthToken = 'RefreshAuthToken',
 }
 
 /**