@authu/react 1.0.38 → 1.0.40

package/dist/AuthUProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthUProvider.d.ts","sourceRoot":"","sources":["../src/AuthUProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AAgBpB,eAAO,MAAM,YAAY,mDAAgD,CAAC;AAO1E,UAAU,kBAAkB;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAID,wBAAgB,aAAa,CAAC,EAAC,MAAM,EAAE,QAAQ,EAAC,EAAE,kBAAkB,2CA0UnE"}
+{"version":3,"file":"AuthUProvider.d.ts","sourceRoot":"","sources":["../src/AuthUProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AAgBpB,eAAO,MAAM,YAAY,mDAAgD,CAAC;AAO1E,UAAU,kBAAkB;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAID,wBAAgB,aAAa,CAAC,EAAC,MAAM,EAAE,QAAQ,EAAC,EAAE,kBAAkB,2CAiVnE"}

package/dist/AuthUProvider.js

@@ -37,11 +37,7 @@ export function AuthUProvider({ config, children }) {
         });
         return `${buildBaseUrl(config.domain)}/authorize?${params.toString()}`;
     }, [config]);
-    const exchangeCodeForTokens = useCallback(async (code) => {
-        const codeVerifier = getCodeVerifier();
-        if (!codeVerifier) {
-            throw new Error('No code verifier found');
-        }
+    const exchangeCodeForTokensWithVerifier = useCallback(async (code, codeVerifier) => {
         const response = await fetch(`${buildBaseUrl(config.domain)}/oauth/token`, {
             method: 'POST',
             headers: { 'Content-Type': 'application/json' },
@@ -57,11 +53,7 @@ export function AuthUProvider({ config, children }) {
             const error = await response.json();
             throw new Error(error.error_description || 'Token exchange failed');
         }
-        const tokens = await response.json();
-        clearCodeVerifier();
-        clearState();
-        clearNonce();
-        return tokens;
+        return response.json();
     }, [config]);
     const parseIdToken = (idToken) => {
         const parts = idToken.split('.');
@@ -189,8 +181,20 @@ export function AuthUProvider({ config, children }) {
                     }));
                     return;
                 }
+                // Get and immediately clear code verifier to prevent duplicate exchanges
+                // (React StrictMode double-mount protection)
+                const codeVerifier = getCodeVerifier();
+                if (!codeVerifier) {
+                    console.log('[AuthU SDK] No code verifier found, skipping duplicate callback');
+                    return;
+                }
+                clearCodeVerifier();
+                clearState();
+                clearNonce();
+                // Clear URL immediately to prevent issues on refresh
+                window.history.replaceState({}, document.title, window.location.pathname);
                 try {
-                    const tokens = await exchangeCodeForTokens(code);
+                    const tokens = await exchangeCodeForTokensWithVerifier(code, codeVerifier);
                     const user = parseIdToken(tokens.id_token);
                     const expiresAt = Date.now() + tokens.expires_in * 1000;
                     localStorage.setItem(TOKEN_STORAGE_KEY, JSON.stringify({
@@ -207,7 +211,6 @@ export function AuthUProvider({ config, children }) {
                         expiresAt,
                         error: null
                     });
-                    window.history.replaceState({}, document.title, window.location.pathname);
                 }
                 catch (err) {
                     setState(prev => ({
@@ -248,7 +251,7 @@ export function AuthUProvider({ config, children }) {
             setState(prev => ({ ...prev, isLoading: false }));
         };
         handleCallback();
-    }, [exchangeCodeForTokens, fetchUserInfo]);
+    }, [exchangeCodeForTokensWithVerifier, fetchUserInfo]);
     const contextValue = {
         isLoading: state.isLoading,
         isAuthenticated: state.isAuthenticated,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authu/react",
-  "version": "1.0.38",
+  "version": "1.0.40",
   "description": "React SDK for AuthU - Centralized Multi-Tenant Authentication Service",
   "type": "module",
   "main": "./dist/index.js",