Kimlik Doğrulama

class PayvenClient {
  constructor({ slug, clientId, clientSecret, identityBaseUrl }) {
    this.slug = slug;
    this.clientId = clientId;
    this.clientSecret = clientSecret;
    this.identityBaseUrl = identityBaseUrl;
    this.accessToken = null;
    this.refreshToken = null;
    this.expiresAt = 0;
  }

  async getToken() {
    if (this.accessToken && Date.now() < this.expiresAt - 60_000) {
      return this.accessToken;
    }

    if (this.refreshToken && (await this.tryRefresh())) {
      return this.accessToken;
    }

    const res = await fetch(`${this.identityBaseUrl}/api/v1/auth/${this.slug}/token`, {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body: JSON.stringify({
        client_id: this.clientId,
        client_secret: this.clientSecret,
      }),
    });
    if (!res.ok) throw new Error(`Token alınamadı: ${res.status}`);
    const data = await res.json();
    this.accessToken = data.access_token;
    this.refreshToken = data.refresh_token;
    this.expiresAt = Date.now() + data.expires_in * 1000;
    return this.accessToken;
  }

  async tryRefresh() {
    const res = await fetch(`${this.identityBaseUrl}/api/v1/auth/${this.slug}/refresh`, {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body: JSON.stringify({ refresh_token: this.refreshToken }),
    });
    if (!res.ok) {
      this.refreshToken = null;
      return false;
    }
    const data = await res.json();
    this.accessToken = data.access_token;
    this.refreshToken = data.refresh_token;
    this.expiresAt = Date.now() + data.expires_in * 1000;
    return true;
  }

  async call(productBaseUrl, path, init = {}) {
    const token = await this.getToken();
    return fetch(productBaseUrl + path, {
      ...init,
      headers: {
        ...(init.headers ?? {}),
        Authorization: `Bearer ${token}`,
      },
    });
  }
}