@authu/react 0.1.21 → 1.0.10

package/README.md

@@ -164,6 +164,16 @@ pnpm publish --access public
 
 The `--access public` flag is required for scoped packages.
 
+## Changelog
+
+### 1.0.10
+
+- **Fix**: Changed PKCE storage from `sessionStorage` to `localStorage` to prevent state/code_verifier loss during cross-domain OAuth redirects
+
+### 1.0.9
+
+- Initial stable release
+
 ## License
 
 MIT

package/dist/AuthUProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthUProvider.d.ts","sourceRoot":"","sources":["../src/AuthUProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AAgBpB,eAAO,MAAM,YAAY,mDAAgD,CAAC;AAE1E,UAAU,kBAAkB;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAID,wBAAgB,aAAa,CAAC,EAAC,MAAM,EAAE,QAAQ,EAAC,EAAE,kBAAkB,2CAySnE"}
+{"version":3,"file":"AuthUProvider.d.ts","sourceRoot":"","sources":["../src/AuthUProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AAgBpB,eAAO,MAAM,YAAY,mDAAgD,CAAC;AAO1E,UAAU,kBAAkB;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAID,wBAAgB,aAAa,CAAC,EAAC,MAAM,EAAE,QAAQ,EAAC,EAAE,kBAAkB,2CA+SnE"}

package/dist/AuthUProvider.js

@@ -2,6 +2,10 @@ import { jsx as _jsx } from "react/jsx-runtime";
 import { createContext, useEffect, useState, useCallback } from 'react';
 import { generateCodeVerifier, generateCodeChallenge, generateState, generateNonce, storeCodeVerifier, storeState, storeNonce, getCodeVerifier, getStoredState, clearCodeVerifier, clearState, clearNonce } from './pkce.js';
 export const AuthUContext = createContext(null);
+function buildBaseUrl(domain) {
+    const protocol = domain.startsWith('localhost') ? 'http' : 'https';
+    return `${protocol}://${domain}`;
+}
 const TOKEN_STORAGE_KEY = 'authu_tokens';
 export function AuthUProvider({ config, children }) {
     const [state, setState] = useState({
@@ -31,14 +35,14 @@ export function AuthUProvider({ config, children }) {
             code_challenge: codeChallenge,
             code_challenge_method: 'S256'
         });
-        return `https://${config.domain}/authorize?${params.toString()}`;
+        return `${buildBaseUrl(config.domain)}/authorize?${params.toString()}`;
     }, [config]);
     const exchangeCodeForTokens = useCallback(async (code) => {
         const codeVerifier = getCodeVerifier();
         if (!codeVerifier) {
             throw new Error('No code verifier found');
         }
-        const response = await fetch(`https://${config.domain}/oauth/token`, {
+        const response = await fetch(`${buildBaseUrl(config.domain)}/oauth/token`, {
             method: 'POST',
             headers: { 'Content-Type': 'application/json' },
             body: JSON.stringify({
@@ -91,7 +95,7 @@ export function AuthUProvider({ config, children }) {
     }, []);
     const fetchUserInfo = useCallback(async (accessToken) => {
         try {
-            const response = await fetch(`https://${config.domain}/oauth/userinfo`, {
+            const response = await fetch(`${buildBaseUrl(config.domain)}/oauth/userinfo`, {
                 headers: { Authorization: `Bearer ${accessToken}` }
             });
             if (!response.ok)
@@ -113,7 +117,7 @@ export function AuthUProvider({ config, children }) {
         if (!state.refreshToken)
             return false;
         try {
-            const response = await fetch(`https://${config.domain}/oauth/token`, {
+            const response = await fetch(`${buildBaseUrl(config.domain)}/oauth/token`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
                 body: JSON.stringify({

package/dist/pkce.js

@@ -38,29 +38,29 @@ const STORAGE_KEY_VERIFIER = 'authu_code_verifier';
 const STORAGE_KEY_STATE = 'authu_state';
 const STORAGE_KEY_NONCE = 'authu_nonce';
 export function storeCodeVerifier(verifier) {
-    sessionStorage.setItem(STORAGE_KEY_VERIFIER, verifier);
+    localStorage.setItem(STORAGE_KEY_VERIFIER, verifier);
 }
 export function getCodeVerifier() {
-    return sessionStorage.getItem(STORAGE_KEY_VERIFIER);
+    return localStorage.getItem(STORAGE_KEY_VERIFIER);
 }
 export function clearCodeVerifier() {
-    sessionStorage.removeItem(STORAGE_KEY_VERIFIER);
+    localStorage.removeItem(STORAGE_KEY_VERIFIER);
 }
 export function storeState(state) {
-    sessionStorage.setItem(STORAGE_KEY_STATE, state);
+    localStorage.setItem(STORAGE_KEY_STATE, state);
 }
 export function getStoredState() {
-    return sessionStorage.getItem(STORAGE_KEY_STATE);
+    return localStorage.getItem(STORAGE_KEY_STATE);
 }
 export function clearState() {
-    sessionStorage.removeItem(STORAGE_KEY_STATE);
+    localStorage.removeItem(STORAGE_KEY_STATE);
 }
 export function storeNonce(nonce) {
-    sessionStorage.setItem(STORAGE_KEY_NONCE, nonce);
+    localStorage.setItem(STORAGE_KEY_NONCE, nonce);
 }
 export function getStoredNonce() {
-    return sessionStorage.getItem(STORAGE_KEY_NONCE);
+    return localStorage.getItem(STORAGE_KEY_NONCE);
 }
 export function clearNonce() {
-    sessionStorage.removeItem(STORAGE_KEY_NONCE);
+    localStorage.removeItem(STORAGE_KEY_NONCE);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authu/react",
-  "version": "0.1.21",
+  "version": "1.0.10",
   "description": "React SDK for AuthU - Centralized Multi-Tenant Authentication Service",
   "type": "module",
   "main": "./dist/index.js",
@@ -15,6 +15,14 @@
   "files": [
     "dist"
   ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "eslint": "eslint src --cache",
+    "typecheck": "tsc --noEmit",
+    "lint": "pnpm run eslint && pnpm run typecheck",
+    "prepublishOnly": "pnpm run build"
+  },
   "keywords": [
     "authu",
     "auth",
@@ -39,12 +47,5 @@
     "react": "^19.0.0",
     "typescript": "^5.7.3",
     "typescript-eslint": "^8.44.1"
-  },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "eslint": "eslint src --cache",
-    "typecheck": "tsc --noEmit",
-    "lint": "pnpm run eslint && pnpm run typecheck"
   }
-}
+}