core: do not allow saving empty token response

packages/core/src/api/index.js

@@ -256,16 +256,8 @@ class Database {
             EV.publish(EVENTS.userSubscriptionUpdated, data);
             break;
           }
-          case "userDeleted": {
-            await this.user.logout(false, "Account Deleted");
-            break;
-          }
-          case "userEmailChanged": {
-            await this.user.logout(true, "Email changed");
-            break;
-          }
-          case "userPasswordChanged": {
-            await this.user.logout(true, "Password changed");
+          case "logout": {
+            await this.user.logout(true, data.reason || "Unknown.");
             break;
           }
           case "emailConfirmed": {

packages/core/src/api/token-manager.js

@@ -92,7 +92,9 @@ class TokenManager {
 
       const { refresh_token, scope } = token;
       if (!refresh_token || !scope) {
-        throw new Error("Token not found.");
+        EV.publish(EVENTS.userSessionExpired);
+        this.logger.error(new Error("Token not found."));
+        return;
       }
 
       const refreshTokenResponse = await http.post(
@@ -123,7 +125,15 @@ class TokenManager {
   }
 
   saveToken(tokenResponse) {
-    if (!tokenResponse) return;
+    this.logger.info("Saving new token", tokenResponse);
+    if (
+      !tokenResponse ||
+      !tokenResponse.refresh_token ||
+      !tokenResponse.access_token ||
+      !tokenResponse.scope ||
+      !tokenResponse.expires_in
+    )
+      return;
     let token = { ...tokenResponse, t: Date.now() };
     return this._storage.write("token", token);
   }