@auth-link/web 0.0.1 → 0.0.2

package/dist/types/core.d.ts

@@ -7,9 +7,20 @@ export declare function validateDisplayCode(value: unknown): DisplayCode;
 export declare function validateTicket(value: unknown, expectedMode?: Mode, trustedOrigin?: string): Ticket;
 export declare function qrImage(ticket: Ticket): string;
 export interface ClientOptions {
-    /** Same-origin application backend, never the AuthLink tenant API. */
+    /** Application backend URL, never the AuthLink tenant API. Defaults to /api/authlink. */
     baseUrl?: string;
-    csrfToken: () => string | Promise<string>;
+    /** Explicit extra backend origins, e.g. https://api.example.com (no path or wildcard). */
+    allowedBackendOrigins?: readonly string[];
+    /** Defaults to same-origin, or omit when accessToken is provided. */
+    credentials?: RequestCredentials;
+    /** Required for cookie/session authentication, including mixed cookie + Bearer mode. */
+    csrfToken?: () => string | Promise<string>;
+    /** Defaults to X-CSRF-Token; adapt this to your backend framework. */
+    csrfHeaderName?: string;
+    /** Current website login token, read on each request. Never an AuthLink tenant key. */
+    accessToken?: () => string | Promise<string>;
+    /** Extra headers. SDK-controlled authentication and protocol headers cannot be replaced. */
+    headers?: HeadersInit | (() => HeadersInit | Promise<HeadersInit>);
     authLinkOrigin?: string;
     fetch?: typeof fetch;
 }

package/dist/types/index.d.ts

@@ -3,3 +3,4 @@ export { AuthLinkError, createAuthLinkClient, requestKey, validateTicket, qrImag
 export { supportedLocales } from './i18n.js';
 export { openAuthLink, openAuthLinkBind, openAuthLinkConfirm } from './modal.js';
 export type { AuthLinkModal, AuthLinkModalOptions } from './modal.js';
+export type { ClientOptions } from './core.js';

package/dist/vue.js

@@ -1,5 +1,5 @@
 // src/vue.ts
-import { defineComponent, onBeforeUnmount, onMounted, shallowRef, watch } from "vue";
+import { defineComponent, normalizeClass, onBeforeUnmount, onMounted, shallowRef, watch } from "vue";
 
 // node_modules/qrcode-generator/dist/qrcode.mjs
 var qrcode = function(typeNumber, errorCorrectionLevel) {
@@ -2490,6 +2490,7 @@ function widget(mode) {
       variant: { type: String, default: "A" },
       intervalMs: Number,
       showQr: Boolean,
+      className: String,
       onRefresh: Function
     },
     emits: ["confirmed", "rejected", "expired", "error", "close"],
@@ -2508,7 +2509,8 @@ function widget(mode) {
         modal = openAuthLink({
           ...props,
           mode,
-          className: typeof attrs.class === "string" ? attrs.class : void 0,
+          className: normalizeClass([props.className, attrs.class]),
+          onRefresh: props.onRefresh ? () => props.onRefresh?.() : void 0,
           onConfirmed: (value) => once("confirmed", () => emit("confirmed", value)),
           onRejected: (result) => once("rejected", () => emit("rejected", result)),
           onExpired: () => once("expired", () => emit("expired")),
@@ -2520,7 +2522,14 @@ function widget(mode) {
         mounted = true;
         open();
       });
-      watch([() => props.ticket, () => props.client, () => props.intervalMs, () => props.showQr], open);
+      watch([
+        () => props.ticket,
+        () => props.client,
+        () => props.intervalMs,
+        () => props.showQr,
+        () => props.className,
+        () => Boolean(props.onRefresh)
+      ], open);
       watch(() => props.locale, (value) => modal?.setLocale(value));
       watch(() => props.variant, (value) => modal?.setVariant(value));
       onBeforeUnmount(() => {