sendpulse.init returns wrong account (somehow persists)

[Stas-Buzunko]

• I have clients with their SendPulse accounts
• I have firebase cloud functions as backend

Use case:

1. Client A calls endpoint - everything is good
2. Client B calls the same endpoint before that function is off - sendpulse uses Client A credentials.

I've tried everything:

1. i import sendpulse inside function
2. I create a new directory every time !!!
3. I remove old directory every time

sendpulse.init receives correct API_USER_ID and API_SECRET every time but returns wrong data

exports.smsBalance = functions.https.onCall(async (data, context) => {
  const { companyId } = data

  const { API_USER_ID, API_SECRET } = await admin.database().ref('SendPulse/' + companyId)
                                                        .once('value')
                                                        .then(s => s.val())

  const TOKEN_STORAGE = tempy.directory()

  const sendpulse = require("sendpulse-api")

  console.log(companyId, API_USER_ID, TOKEN_STORAGE)

  return new Promise(resolve =>
    sendpulse.init(API_USER_ID,API_SECRET,TOKEN_STORAGE, () =>
      sendpulse.getBalance(
        (data) => {
          resolve(data.balance_currency)
        },
        'UAH'
      )
    )
  )
})
.then(() => {
    rimraf(TOKEN_STORAGE, () => console.log('cleaned up'))
  })

I have no idea how to fix this. help appreciated.

[Stas-Buzunko]

here is an example from firebase logs. companyId, API_USER_ID, TOKEN_STORAGE and are different but sendpulse returns the same account

[Stas-Buzunko]

sendpulse.init(credentials1)
after some time
sendpulse.init(credentials2, different tmp directory) => returns previous token (!!!)

[Stas-Buzunko]

finally found this stupid bug
https://github.com/sendpulse/sendpulse-rest-api-node.js/blob/master/api/sendpulse.js#L96-L99

[Stas-Buzunko]

you don't reset TOKEN on every init invocation