@authvia/payment-method-create 0.8.0 → 0.9.0

package/README.md

@@ -113,7 +113,7 @@ See `demo.html` in this repo for a full page example.
 Load the built script after Vue (for example the output of `npm run build:wc`):
 
 ```html
-<script type="module" src=".https://cdn.authvia.com/web-components/authvia-payment-method-create/authvia-payment-method-create.js"></script>
+<script type="module" src="https://cdn.authvia.com/web-components/authvia-payment-method-create/authvia-payment-method-create.js"></script>
 ```
 
 ### Web component events

package/dist/entry/web-component.d.ts

@@ -46,19 +46,9 @@ declare class AuthviaPaymentMethodFormElement extends HTMLElement {
      */
     private syncContainerThemeTokens;
     private getComponentProps;
-    /**
-     * Resolves the bare API hostname using two sources in priority order:
-     *
-     * 1. **Token `iss` claim** — stripped of `https://` prefix and trailing slashes.
-     * 2. **CDN script URL** (`WC_SCRIPT_URL`) — maps well-known hostname patterns
-     *    (`nonprod`, `dev-authvia`, `authvia`) to the corresponding API host.
-     *
-     * Returns an empty string when neither source yields a usable value.
-     */
-    private resolveApiHost;
     /**
      * Applies resolved API host and Plaid environment to `useHostService`.
-     * No-op when neither the token `iss` nor the CDN script URL yields a host.
+     * Uses `resolveApiHost` from tokenUtils, with `WC_SCRIPT_URL` as the CDN fallback.
      */
     private applyHostConfigFromToken;
     private dispatchCustomEvent;

package/dist/utils/config.d.ts

@@ -17,17 +17,25 @@ export declare const config: {
  */
 export declare function getApiEndpoint(path: string): string;
 /**
- * Default `src` for the credit-card loader script (absolute URL). {@link getCdnUrl} does not prefix {@link config.cdnUrl} onto http(s) URLs.
+ * Default `src` for the credit-card loader script (absolute URL).
+ * {@link getCdnUrl} does not prefix {@link config.cdnUrl} onto http(s) URLs.
  */
+export declare const CREDIT_CARD_SCRIPT_PATH: string;
 export declare const DEFAULT_CREDIT_CARD_SCRIPT_PATH: string;
+/** Nonprod CDN URL for the credit-card script. */
+export declare const NONPROD_CREDIT_CARD_SCRIPT_PATH: string;
+/** Production CDN URL for the credit-card script. */
+export declare const PROD_CREDIT_CARD_SCRIPT_URL: string;
 /**
  * Resolves the `src` for the authvia-credit-card loader script via {@link getCdnUrl}.
- * `VITE_APP_CDN_URL` must be a CDN base (no trailing slash required); the script path defaults to
- * {@link DEFAULT_CREDIT_CARD_SCRIPT_PATH} or `VITE_APP_CREDIT_CARD_SCRIPT_PATH` when the file lives elsewhere on the CDN.
  *
+ * Pass the JWT token so the correct CDN environment is selected from its `iss` claim.
+ * Falls back to {@link DEFAULT_CREDIT_CARD_SCRIPT_PATH} when `token` is omitted or has no `iss`.
+ *
+ * @param token - JWT token string (e.g. `props.token`)
  * @returns A non-empty string suitable for a script element `src`
  */
-export declare function getCreditCardScriptSrc(): string;
+export declare function getCreditCardScriptSrc(token?: string): string;
 /**
  * Get CDN URL for assets
  */

package/dist/utils/tokenUtils.d.ts

@@ -48,6 +48,18 @@ export declare function isTokenExpired(tokenParam: string, bufferSeconds?: numbe
  * Returns false if the token cannot be parsed or `scope` is missing.
  */
 export declare function hasPaymentMethodsCreateScope(tokenParam: string): boolean;
+/**
+ * Derives the API hostname from a JWT's `iss` claim.
+ *
+ * If `token` contains a valid `iss` claim the hostname portion is returned (scheme and trailing
+ * slashes stripped). When the token is absent or malformed, `scriptUrl` is used as a fallback:
+ * the URL string is matched against known environment substrings to return the correct hostname.
+ * Returns an empty string when neither source yields a value.
+ *
+ * @param token     - JWT token string (e.g. from the `data-token` attribute)
+ * @param scriptUrl - Optional script URL used as an environment fallback (e.g. `WC_SCRIPT_URL`)
+ */
+export declare function resolveApiHost(token?: string, scriptUrl?: string): string;
 /**
  * True when `error` is a normal token validation failure (malformed JWT, missing user claim, etc.).
  * Used to avoid reporting expected embedder or end-user mistakes to Sentry.