Bind Session.authFetch so it's safe to pass by reference

[melvincarvalho]

Fixes #11.

Session.authFetch is the authenticated drop-in for fetch, but it was an ordinary unbound class method, so passing it by reference lost this:

const f = session.authFetch
await f(url)   // TypeError: cannot read properties of undefined (reading '_isActive')

That breaks any consumer handing the authed fetch to a library expecting a bare fetch (rdflib Fetcher / UpdateManager, rdf-dereference, solid-logic) or destructuring it.

Change

One line in the Session constructor:

this.authFetch = this.authFetch.bind(this)

Plus a test in test.html that destructures authFetch and calls it with a mocked fetch, which throws pre-bind and passes post-bind.

Notes

Not a live regression for current consumers (they call session.authFetch(...) directly or go through a wrapper); this is hardening so the public API meets its drop-in-fetch contract.

[Copilot]

Pull request overview

This PR hardens the Session public API so Session.authFetch behaves as a true drop-in fetch function even when passed by reference (e.g., via destructuring or when handed to libraries expecting a bare fetch).

Changes:

• Bind Session.authFetch in the Session constructor to preserve this when the method is referenced standalone.
• Add a browser test that destructures { authFetch } and verifies it can be called successfully with a mocked globalThis.fetch.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
solid-oidc.js	Binds authFetch in the constructor so it remains usable when passed by reference.
test.html	Adds a regression test covering destructured/by-reference usage of Session.authFetch.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.