@appboxo/web-sdk 1.0.7 → 1.0.8

package/README.md

@@ -40,27 +40,21 @@ const sdk = new AppboxoWebSDK({
   userId?: string;       // Optional, user reference identifier
   baseUrl?: string;      // Optional, default: "https://dashboard.appboxo.com/api/v1"
   debug?: boolean;        // Optional, default: false
-  onGetAuthCode?: () => Promise<string>; // Optional, for automatic auth code retrieval (OAuth)
-  onGetAuthTokens?: () => Promise<LoginResponse>; // Optional, for Boxo Connect Direct
+  onGetAuthCode?: () => Promise<string>; // Optional, for automatic auth code retrieval
+  onGetAuthTokens?: () => Promise<LoginResponse>; // Optional, for direct auth tokens
   onPaymentRequest?: (params: PaymentRequest) => Promise<PaymentResponse>; // Optional, for handling payment requests
 });
 ```
 
 ### Authentication
 
-The SDK supports two authentication methods: **Boxo Connect OAuth** and **Boxo Connect Direct**.
-
-#### Boxo Connect OAuth
-
-Traditional OAuth 2.0 flow where the host app backend provides auth codes and access tokens to the Boxo Platform.
-
-**1. Set auth code explicitly**
+**OAuth flow:**
 
 ```typescript
 sdk.setAuthCode(authCode);
 ```
 
-**2. Provide callback**
+Or provide a callback:
 
 ```typescript
 const sdk = new AppboxoWebSDK({
@@ -73,47 +67,25 @@ const sdk = new AppboxoWebSDK({
 });
 ```
 
-The SDK will try OAuth methods in this order:
-1. Explicitly set auth code
-2. Callback function (`onGetAuthCode`)
-3. Mock auth code (fallback for testing)
-
-#### Boxo Connect Direct
-
-Direct authentication flow where the host app backend calls Boxo Dashboard connect endpoint to get miniapp tokens, then provides them directly to the SDK.
-
-**1. Use `onAuth` lifecycle hook (Recommended)**
+**Direct auth flow:**
 
 ```typescript
-const sdk = new AppboxoWebSDK({
-  clientId: "your-client-id",
-  appId: "your-app-id"
-});
-
-// onAuth hook is triggered when miniapp calls login()
 sdk.onAuth(async () => {
-  // Your backend calls Boxo Dashboard connect endpoint to get miniapp tokens
-  const response = await fetch('/api/get-miniapp-tokens', {
-    headers: { 'Authorization': `Bearer ${yourHostAppToken}` }
-  });
+  const response = await fetch('/api/get-miniapp-tokens');
   const tokens = await response.json();
-  
-  // Set tokens directly
   sdk.setAuthTokens(tokens.access_token, tokens.refresh_token);
 });
 ```
 
-**2. Use `onGetAuthTokens` callback**
+Or use callback:
 
 ```typescript
 const sdk = new AppboxoWebSDK({
   clientId: "your-client-id",
   appId: "your-app-id",
   onGetAuthTokens: async () => {
-    const response = await fetch('/api/get-miniapp-tokens', {
-      headers: { 'Authorization': `Bearer ${yourHostAppToken}` }
-    });
-    const result = await response.json();
+    const res = await fetch('/api/get-miniapp-tokens');
+    const result = await res.json();
     return {
       token: result.access_token,
       refresh_token: result.refresh_token
@@ -122,25 +94,18 @@ const sdk = new AppboxoWebSDK({
 });
 ```
 
-**3. Pre-set tokens before login**
+Or set tokens directly:
 
 ```typescript
-const sdk = new AppboxoWebSDK({
-  clientId: "your-client-id",
-  appId: "your-app-id"
-});
-
-// If you already have tokens, set them before miniapp calls login()
 const tokens = await getTokensFromBackend();
 sdk.setAuthTokens(tokens.access_token, tokens.refresh_token);
 ```
 
-**Authentication Priority Order:**
+The SDK will try these in order:
 
-When the miniapp calls `login()`, the SDK will try these methods in order:
-1. Pre-set tokens (via `setAuthTokens()`)
-2. `onGetAuthTokens` callback
-3. OAuth flow (`setAuthCode()` or `onGetAuthCode` callback)
+1. Pre-set tokens (`setAuthTokens`)
+2. Direct auth callback (`onGetAuthTokens`)
+3. OAuth auth code (`setAuthCode` or `onGetAuthCode` callback)
 
 ### Payment Processing
 
@@ -183,9 +148,9 @@ Note: When `onPaymentRequest` is set, the SDK automatically tells the miniapp it
 
 | Method | Description |
 |--------|-------------|
-| `setAuthCode(code)` | Set authentication code (OAuth) |
-| `setAuthTokens(token, refreshToken?)` | Set authentication tokens directly (Boxo Connect Direct) |
-| `onAuth(callback)` | Register lifecycle hook for authentication (Boxo Connect Direct) |
+| `setAuthCode(code)` | Set authentication code |
+| `setAuthTokens(token, refreshToken?)` | Set authentication tokens directly |
+| `onAuth(callback)` | Register callback for authentication events |
 | `mount(config)` | Create iframe and initialize SDK |
 | `setIframe(iframe)` | Set iframe element manually |
 | `initialize()` | Start listening for events |
@@ -235,15 +200,7 @@ function App() {
       },
     });
     
-    // Boxo Connect OAuth
-    // s.setAuthCode("your-auth-code");
-    
-    // Boxo Connect Direct - onAuth hook
-    s.onAuth(async () => {
-      const response = await fetch('/api/get-miniapp-tokens');
-      const tokens = await response.json();
-      s.setAuthTokens(tokens.access_token, tokens.refresh_token);
-    });
+    s.setAuthCode("your-auth-code");
     
     s.onLoginComplete((success, data) => {
       console.log('Login:', success ? 'success' : 'failed', data);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appboxo/web-sdk",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "Boxo Desktop Host App SDK for handling miniapp events",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",