feat: add new token fetching via comlink

[ryanbonial]

Description

Adds token refresh functionality for SDK instances running within the Sanity dashboard. This implementation enables seamless token renewal without requiring users to re-authenticate when their session expires.

The changes include:

• New setAuthToken action to update authentication state
• getIsInDashboardState selector to detect if SDK is running in dashboard context
• Comlink message types for token refresh communication
• ComlinkTokenRefreshProvider component for React applications

What to review

• The new token refresh flow between iframe and parent window
• Implementation of setAuthToken in authStore.ts
• The ComlinkTokenRefresh component and its configuration options
• Updates to client store to properly handle middleware
• Exported types and functions in the public API

Testing

Tested the token refresh flow in both dashboard and standalone contexts to ensure:

• Token requests are properly sent from SDK to parent
• Received tokens are correctly applied to the auth state
• Client instances are updated with new tokens
• The feature is only active when explicitly enabled and running in dashboard

Fun gif

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
sdk-docs	❌ Failed (Inspect)			May 1, 2025 9:11pm
sdk-kitchensink-react	❌ Failed (Inspect)			May 1, 2025 9:11pm