@hmyapps/auth-browser

Haaremy SSO Browser-Client — In-App-Login gemäß CEO-Spec.

Features

• Access-Token im JS-Memory (nicht localStorage)
• Refresh-Token via HttpOnly Cookie auf .haaremy.de
• Auto-Refresh 60s vor Ablauf
• 401→Silent-Refresh-Retry
• MFA (TOTP) Support
• BroadcastChannel-kompatibel für Tab-Sync

Installation

npm install @hmyapps/auth-browser

Verwendung

import { init, login, logout, authFetch, getUser } from '@hmyapps/auth-browser';

// Page-Load: Silent Refresh
const loggedIn = await init();
if (!loggedIn) {
  // Login-Form anzeigen
  await login('username', 'password');
}

// User-Info
const user = getUser();

// Authentifizierter Fetch
const resp = await authFetch('/api/data');

// Logout
await logout();

Konfiguration

import { configure } from '@hmyapps/auth-browser';
configure({ issuer: 'https://sso.haaremy.de' });