@authu/react 0.1.27 → 1.0.15

package/README.md

@@ -164,6 +164,16 @@ pnpm publish --access public
 
 The `--access public` flag is required for scoped packages.
 
+## Changelog
+
+### 1.0.10
+
+- **Fix**: Changed PKCE storage from `sessionStorage` to `localStorage` to prevent state/code_verifier loss during cross-domain OAuth redirects
+
+### 1.0.9
+
+- Initial stable release
+
 ## License
 
 MIT

package/dist/AuthUProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthUProvider.d.ts","sourceRoot":"","sources":["../src/AuthUProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AAgBpB,eAAO,MAAM,YAAY,mDAAgD,CAAC;AAO1E,UAAU,kBAAkB;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAID,wBAAgB,aAAa,CAAC,EAAC,MAAM,EAAE,QAAQ,EAAC,EAAE,kBAAkB,2CA+SnE"}
+{"version":3,"file":"AuthUProvider.d.ts","sourceRoot":"","sources":["../src/AuthUProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AAgBpB,eAAO,MAAM,YAAY,mDAAgD,CAAC;AAO1E,UAAU,kBAAkB;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAID,wBAAgB,aAAa,CAAC,EAAC,MAAM,EAAE,QAAQ,EAAC,EAAE,kBAAkB,2CA0UnE"}

package/dist/AuthUProvider.js

@@ -79,6 +79,7 @@ export function AuthUProvider({ config, children }) {
     };
     const login = useCallback(async () => {
         const url = await getAuthorizationUrl();
+        console.log('[AuthU SDK] login() called, redirecting to:', url);
         window.location.href = url;
     }, [getAuthorizationUrl]);
     const logout = useCallback(() => {
@@ -164,10 +165,12 @@ export function AuthUProvider({ config, children }) {
     }, [state.accessToken, state.expiresAt, refreshTokens]);
     useEffect(() => {
         const handleCallback = async () => {
+            console.log('[AuthU SDK] handleCallback starting, URL:', window.location.href);
             const params = new URLSearchParams(window.location.search);
             const code = params.get('code');
             const returnedState = params.get('state');
             const error = params.get('error');
+            console.log('[AuthU SDK] handleCallback params - code:', !!code, 'state:', returnedState, 'error:', error);
             if (error) {
                 setState(prev => ({
                     ...prev,
@@ -216,11 +219,14 @@ export function AuthUProvider({ config, children }) {
                 return;
             }
             const stored = localStorage.getItem(TOKEN_STORAGE_KEY);
+            console.log('[AuthU SDK] Checking localStorage for tokens:', !!stored);
             if (stored) {
                 try {
                     const tokens = JSON.parse(stored);
+                    console.log('[AuthU SDK] Found tokens, expiresAt:', tokens.expiresAt, 'now:', Date.now(), 'valid:', tokens.expiresAt > Date.now());
                     if (tokens.expiresAt > Date.now()) {
                         const user = await fetchUserInfo(tokens.accessToken);
+                        console.log('[AuthU SDK] Tokens valid, user:', user);
                         setState({
                             isLoading: false,
                             isAuthenticated: true,
@@ -234,9 +240,11 @@ export function AuthUProvider({ config, children }) {
                     }
                 }
                 catch {
+                    console.log('[AuthU SDK] Error parsing stored tokens, removing');
                     localStorage.removeItem(TOKEN_STORAGE_KEY);
                 }
             }
+            console.log('[AuthU SDK] No valid tokens found, setting isLoading: false');
             setState(prev => ({ ...prev, isLoading: false }));
         };
         handleCallback();

package/dist/PrivateRoute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PrivateRoute.d.ts","sourceRoot":"","sources":["../src/PrivateRoute.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,OAAO,CAAC;AAGrC,UAAU,iBAAiB;IACzB,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,QAAe,EACf,sBAA6B,EAC9B,EAAE,iBAAiB,+TAenB"}
+{"version":3,"file":"PrivateRoute.d.ts","sourceRoot":"","sources":["../src/PrivateRoute.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,OAAO,CAAC;AAGrC,UAAU,iBAAiB;IACzB,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,QAAe,EACf,sBAA6B,EAC9B,EAAE,iBAAiB,+TA6BnB"}

package/dist/PrivateRoute.js

@@ -2,14 +2,19 @@ import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
 import { useAuthU } from './useAuthU.js';
 export function PrivateRoute({ children, fallback = null, loginOnUnauthenticated = true }) {
     const { isLoading, isAuthenticated, login } = useAuthU();
+    console.log('[AuthU SDK PrivateRoute] isLoading:', isLoading, 'isAuthenticated:', isAuthenticated);
     if (isLoading) {
+        console.log('[AuthU SDK PrivateRoute] Loading...');
         return fallback;
     }
     if (!isAuthenticated) {
+        console.log('[AuthU SDK PrivateRoute] Not authenticated, loginOnUnauthenticated:', loginOnUnauthenticated);
         if (loginOnUnauthenticated) {
+            console.log('[AuthU SDK PrivateRoute] Triggering login()');
             login();
         }
         return fallback;
     }
+    console.log('[AuthU SDK PrivateRoute] Authenticated, rendering children');
     return _jsx(_Fragment, { children: children });
 }

package/dist/pkce.js

@@ -38,29 +38,29 @@ const STORAGE_KEY_VERIFIER = 'authu_code_verifier';
 const STORAGE_KEY_STATE = 'authu_state';
 const STORAGE_KEY_NONCE = 'authu_nonce';
 export function storeCodeVerifier(verifier) {
-    sessionStorage.setItem(STORAGE_KEY_VERIFIER, verifier);
+    localStorage.setItem(STORAGE_KEY_VERIFIER, verifier);
 }
 export function getCodeVerifier() {
-    return sessionStorage.getItem(STORAGE_KEY_VERIFIER);
+    return localStorage.getItem(STORAGE_KEY_VERIFIER);
 }
 export function clearCodeVerifier() {
-    sessionStorage.removeItem(STORAGE_KEY_VERIFIER);
+    localStorage.removeItem(STORAGE_KEY_VERIFIER);
 }
 export function storeState(state) {
-    sessionStorage.setItem(STORAGE_KEY_STATE, state);
+    localStorage.setItem(STORAGE_KEY_STATE, state);
 }
 export function getStoredState() {
-    return sessionStorage.getItem(STORAGE_KEY_STATE);
+    return localStorage.getItem(STORAGE_KEY_STATE);
 }
 export function clearState() {
-    sessionStorage.removeItem(STORAGE_KEY_STATE);
+    localStorage.removeItem(STORAGE_KEY_STATE);
 }
 export function storeNonce(nonce) {
-    sessionStorage.setItem(STORAGE_KEY_NONCE, nonce);
+    localStorage.setItem(STORAGE_KEY_NONCE, nonce);
 }
 export function getStoredNonce() {
-    return sessionStorage.getItem(STORAGE_KEY_NONCE);
+    return localStorage.getItem(STORAGE_KEY_NONCE);
 }
 export function clearNonce() {
-    sessionStorage.removeItem(STORAGE_KEY_NONCE);
+    localStorage.removeItem(STORAGE_KEY_NONCE);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authu/react",
-  "version": "0.1.27",
+  "version": "1.0.15",
   "description": "React SDK for AuthU - Centralized Multi-Tenant Authentication Service",
   "type": "module",
   "main": "./dist/index.js",