json_rest_client 0.2.0

A small, dependency-light JSON HTTP client with typed exceptions, pluggable auth token storage, user-agent injection, and refresh-on-401 retry with a single-flight refresh lock.

0.2.0 - 2026-10-16

• Added RetryPolicy with exponential backoff, jitter, exact Retry-After support, per-status retry rules, and a retryNonIdempotent opt-in.
• The client retries network failures and retryable statuses for GET, HEAD, PUT, and DELETE; timeouts are never retried.
• Added sync onRequest, onResponse, and onError interceptor hooks that fire once per HTTP exchange, including retry and refresh attempts.
• Added tests for the per-call timeout override on get and sendRaw.

0.1.3

• Documentation and internal cleanup.

0.1.2

• Rewrite the README. Document sendRaw, RestResponse, ResponseLimitException, and the refresh rules.

0.1.1

• RestClientException and every subtype now expose the statusCode and headers of the response that caused the failure, when one exists.
• Added RestResponse and JsonRestClient.sendRaw for status-and-bytes access without JSON decoding or error mapping.
• Added ResponseLimitException, thrown by sendRaw when a response body exceeds maxResponseBytes; the body stream is abandoned as soon as the limit is crossed.

0.1.0

• Initial release: extracted the app's networking layer into a standalone, pure-Dart package.
• Added JsonRestClient with get and post helpers that JSON-decode responses and return null for empty successful bodies.
• Added typed exceptions (RestClientException and its subtypes) for network, timeout, HTTP status, and deserialization failures.
• HTTP status exceptions carry the raw response body as message, falling back to 'HTTP <status>' only when the body is empty.
• Errors thrown by caller-supplied callbacks (decoder, onUnauthorized, tokenStore, userAgentProvider) and JSON-encoding failures of an unsupported body propagate unchanged.
• Added single-flight refresh on 401/403: the token returned by onUnauthorized is used for exactly one retry, and a missing token or a still-unauthorized retry raises UnauthorizedException.
• Request paths resolve relative to baseUrl, ignoring a leading /.
• Headers merge case-insensitively in the order defaultHeaders, computed user-agent/authorization, then per-call headers; per-call values win.
• close() releases the internally created http.Client only; injected clients remain the caller's responsibility.
• Pure-Dart scope using dart:io for SocketException, so the package targets mobile, desktop, and server apps (not web).