fix(react-native): storage key per publishable key — was shared across all apps (@authon/react-native@0.3.5)

Author: mikusnuz

README.md

@@ -19,7 +19,7 @@ Official SDKs for [Authon](https://authon.dev) — a modern authentication platf
 | [`@authon/nuxt`](./packages/nuxt) | 0.3.3 | Auto-imported composables and middleware for Nuxt 3 | [npm](https://www.npmjs.com/package/@authon/nuxt) |
 | [`@authon/svelte`](./packages/svelte) | 0.3.3 | Stores and components for Svelte | [npm](https://www.npmjs.com/package/@authon/svelte) |
 | [`@authon/angular`](./packages/angular) | 0.3.3 | Service, guard, and components for Angular | [npm](https://www.npmjs.com/package/@authon/angular) |
-| [`@authon/react-native`](./packages/react-native) | 0.3.4 | Mobile authentication for React Native | [npm](https://www.npmjs.com/package/@authon/react-native) |
+| [`@authon/react-native`](./packages/react-native) | 0.3.5 | Mobile authentication for React Native | [npm](https://www.npmjs.com/package/@authon/react-native) |
 | [`@authon/create-app`](./packages/create-authon-app) | 0.1.0 | CLI scaffolding tool — create new projects with Authon pre-configured | [npm](https://www.npmjs.com/package/@authon/create-app) |
 
 ## Features

packages/react-native/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authon/react-native",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "Authon React Native SDK — mobile authentication",
   "type": "module",
   "main": "./dist/index.cjs",

packages/react-native/src/client.ts

@@ -36,11 +36,14 @@ interface ProvidersResponse {
 
 type OAuthPollResponse = OAuthCompletedResponse | OAuthErrorResponse;
 
-const STORAGE_KEY = 'authon-tokens';
+function getStorageKey(publishableKey: string): string {
+  return `authon_session_${publishableKey.slice(0, 16)}`;
+}
 
 export class AuthonMobileClient {
   private apiUrl: string;
   private publishableKey: string;
+  private storageKey: string;
   private tokens: TokenPair | null = null;
   private user: AuthonUser | null = null;
   private storage: TokenStorage | null = null;
@@ -55,6 +58,7 @@ export class AuthonMobileClient {
   constructor(config: AuthonReactNativeConfig) {
     this.publishableKey = config.publishableKey;
     this.apiUrl = (config.apiUrl || DEFAULT_API_URL).replace(/\/$/, '');
+    this.storageKey = getStorageKey(config.publishableKey);
   }
 
   setStorage(storage: TokenStorage) {
@@ -66,7 +70,7 @@ export class AuthonMobileClient {
   async initialize(): Promise<TokenPair | null> {
     if (!this.storage) return null;
 
-    const stored = await this.storage.getItem(STORAGE_KEY);
+    const stored = await this.storage.getItem(this.storageKey);
     if (!stored) return null;
 
     try {
@@ -79,7 +83,7 @@ export class AuthonMobileClient {
       // Try refreshing
       return await this.refreshToken(tokens.refreshToken);
     } catch {
-      await this.storage.removeItem(STORAGE_KEY);
+      await this.storage.removeItem(this.storageKey);
       return null;
     }
   }
@@ -430,7 +434,7 @@ export class AuthonMobileClient {
     this.user = null;
     this.clearRefreshTimer();
     if (this.storage) {
-      this.storage.removeItem(STORAGE_KEY).catch(() => {});
+      this.storage.removeItem(this.storageKey).catch(() => {});
     }
   }
 
@@ -452,7 +456,7 @@ export class AuthonMobileClient {
 
   private async persistTokens(): Promise<void> {
     if (this.storage && this.tokens) {
-      await this.storage.setItem(STORAGE_KEY, JSON.stringify(this.tokens));
+      await this.storage.setItem(this.storageKey, JSON.stringify(this.tokens));
     }
   }