@authowl/react 0.18.2 → 0.18.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.cjs CHANGED
@@ -625,14 +625,18 @@ var KNOWN_METHODS = [
625
625
  function emailAutocomplete(isPasskeyHost) {
626
626
  return isPasskeyHost ? "email webauthn" : "email";
627
627
  }
628
- function passkeyReachableFrom(authBaseUrl, pageHost) {
629
- if (pageHost === void 0 || !authBaseUrl) return true;
630
- let rpId;
631
- try {
632
- rpId = new URL(authBaseUrl).hostname;
633
- } catch {
634
- return true;
628
+ function passkeyReachableFrom(authBaseUrl, pageHost, relyingPartyId) {
629
+ if (pageHost === void 0) return true;
630
+ let rpId = relyingPartyId ?? void 0;
631
+ if (!rpId) {
632
+ if (!authBaseUrl) return true;
633
+ try {
634
+ rpId = new URL(authBaseUrl).hostname;
635
+ } catch {
636
+ return true;
637
+ }
635
638
  }
639
+ if (rpId !== "localhost" && !rpId.includes(".")) return false;
636
640
  return pageHost === rpId || pageHost.endsWith(`.${rpId}`);
637
641
  }
638
642
  function resolveSignInMethods(config, pageHost) {
@@ -645,7 +649,11 @@ function resolveSignInMethods(config, pageHost) {
645
649
  const magicLink = capabilities.magicLinkSignIn;
646
650
  const emailOtp = capabilities.emailOtpSignIn && !capabilities.totp && !capabilities.mfaRequired;
647
651
  const phoneOtp = capabilities.phoneSignIn;
648
- const passkey = capabilities.passkeySignIn && passkeyReachableFrom(config?.authBaseUrl, pageHost);
652
+ const passkey = capabilities.passkeySignIn && passkeyReachableFrom(
653
+ config?.authBaseUrl,
654
+ pageHost,
655
+ config?.authentication?.passkey?.relyingPartyId
656
+ );
649
657
  const sso = has("sso");
650
658
  const renderable = password || username || magicLink || emailOtp || phoneOtp || passkey || sso || social.length > 0;
651
659
  const emptyReason = renderable ? null : methods.length > 0 ? "unsupported" : "none";
package/dist/index.js CHANGED
@@ -544,14 +544,18 @@ var KNOWN_METHODS = [
544
544
  function emailAutocomplete(isPasskeyHost) {
545
545
  return isPasskeyHost ? "email webauthn" : "email";
546
546
  }
547
- function passkeyReachableFrom(authBaseUrl, pageHost) {
548
- if (pageHost === void 0 || !authBaseUrl) return true;
549
- let rpId;
550
- try {
551
- rpId = new URL(authBaseUrl).hostname;
552
- } catch {
553
- return true;
547
+ function passkeyReachableFrom(authBaseUrl, pageHost, relyingPartyId) {
548
+ if (pageHost === void 0) return true;
549
+ let rpId = relyingPartyId ?? void 0;
550
+ if (!rpId) {
551
+ if (!authBaseUrl) return true;
552
+ try {
553
+ rpId = new URL(authBaseUrl).hostname;
554
+ } catch {
555
+ return true;
556
+ }
554
557
  }
558
+ if (rpId !== "localhost" && !rpId.includes(".")) return false;
555
559
  return pageHost === rpId || pageHost.endsWith(`.${rpId}`);
556
560
  }
557
561
  function resolveSignInMethods(config, pageHost) {
@@ -564,7 +568,11 @@ function resolveSignInMethods(config, pageHost) {
564
568
  const magicLink = capabilities.magicLinkSignIn;
565
569
  const emailOtp = capabilities.emailOtpSignIn && !capabilities.totp && !capabilities.mfaRequired;
566
570
  const phoneOtp = capabilities.phoneSignIn;
567
- const passkey = capabilities.passkeySignIn && passkeyReachableFrom(config?.authBaseUrl, pageHost);
571
+ const passkey = capabilities.passkeySignIn && passkeyReachableFrom(
572
+ config?.authBaseUrl,
573
+ pageHost,
574
+ config?.authentication?.passkey?.relyingPartyId
575
+ );
568
576
  const sso = has("sso");
569
577
  const renderable = password || username || magicLink || emailOtp || phoneOtp || passkey || sso || social.length > 0;
570
578
  const emptyReason = renderable ? null : methods.length > 0 ? "unsupported" : "none";
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@authowl/react",
3
- "version": "0.18.2",
3
+ "version": "0.18.3",
4
4
  "description": "React provider, hooks, and drop-in components for AuthOwl, the multi-tenant auth SaaS.",
5
5
  "license": "MIT",
6
6
  "publishConfig": {
@@ -47,7 +47,7 @@
47
47
  "LICENSE"
48
48
  ],
49
49
  "dependencies": {
50
- "@authowl/core": "0.15.0"
50
+ "@authowl/core": "0.15.1"
51
51
  },
52
52
  "peerDependencies": {
53
53
  "react": ">=18",