@base44-preview/sdk 0.8.24-pr.134.4e99e37 → 0.8.24-pr.134.cd7b8e1

package/dist/modules/auth.js

@@ -5,14 +5,15 @@ function isInsideIframe() {
 }
 /**
  * Opens a URL in a centered popup and waits for the backend to postMessage
- * the auth result back. On success, calls onToken so the SDK can set the
- * token and fire auth state change events — no page redirect needed.
+ * the auth result back. On success, redirects the current window to
+ * redirectUrl with the token params appended, preserving the same behaviour
+ * as a normal full-page redirect flow.
  *
  * @param url - The login URL to open in the popup (should include popup_origin).
+ * @param redirectUrl - Where to redirect after auth (the original fromUrl).
  * @param expectedOrigin - The origin we expect the postMessage to come from.
- * @param onToken - Callback invoked with the access_token when auth completes.
  */
-function loginViaPopup(url, expectedOrigin, onToken) {
+function loginViaPopup(url, redirectUrl, expectedOrigin) {
     const width = 500;
     const height = 600;
     const left = Math.round(window.screenX + (window.outerWidth - width) / 2);
@@ -36,7 +37,13 @@ function loginViaPopup(url, expectedOrigin, onToken) {
         if (!((_a = event.data) === null || _a === void 0 ? void 0 : _a.access_token))
             return;
         cleanup();
-        onToken(event.data.access_token);
+        const callbackUrl = new URL(redirectUrl);
+        const { access_token, is_new_user } = event.data;
+        callbackUrl.searchParams.set("access_token", access_token);
+        if (is_new_user != null) {
+            callbackUrl.searchParams.set("is_new_user", String(is_new_user));
+        }
+        window.location.href = callbackUrl.toString();
     };
     // Only used to detect the user closing the popup before auth completes
     const pollTimer = setInterval(() => {
@@ -57,7 +64,6 @@ function loginViaPopup(url, expectedOrigin, onToken) {
  */
 export function createAuthModule(axios, functionsAxiosClient, appId, options) {
     const listeners = new Set();
-    let hasToken = false;
     function notify(event, data = {}) {
         listeners.forEach((cb) => cb(event, data));
     }
@@ -105,9 +111,7 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
             // blocking iframe navigation.
             if (isInsideIframe()) {
                 const popupLoginUrl = `${loginUrl}&popup_origin=${encodeURIComponent(window.location.origin)}`;
-                return loginViaPopup(popupLoginUrl, window.location.origin, (token) => {
-                    this.setToken(token);
-                });
+                return loginViaPopup(popupLoginUrl, redirectUrl, window.location.origin);
             }
             // Default: full-page redirect
             window.location.href = loginUrl;
@@ -116,7 +120,6 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
         logout(redirectUrl) {
             // Remove token from axios headers (always do this)
             delete axios.defaults.headers.common["Authorization"];
-            hasToken = false;
             notify("SIGNED_OUT");
             // Only do the rest if in a browser environment
             if (typeof window !== "undefined") {
@@ -142,7 +145,6 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
         setToken(token, saveToStorage = true) {
             if (!token)
                 return;
-            const event = hasToken ? "TOKEN_REFRESHED" : "SIGNED_IN";
             // handle token change for axios clients
             axios.defaults.headers.common["Authorization"] = `Bearer ${token}`;
             functionsAxiosClient.defaults.headers.common["Authorization"] = `Bearer ${token}`;
@@ -159,8 +161,6 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
                     console.error("Failed to save token to localStorage:", e);
                 }
             }
-            hasToken = true;
-            notify(event, { access_token: token });
         },
         // Login using username and password
         async loginViaEmailPassword(email, password, turnstileToken) {
@@ -174,6 +174,7 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
                 const { access_token, user } = response;
                 if (access_token) {
                     this.setToken(access_token);
+                    notify("SIGNED_IN", { access_token });
                 }
                 return {
                     access_token,

package/dist/modules/auth.types.d.ts

@@ -96,7 +96,7 @@ export interface AuthModuleOptions {
 /**
  * Auth state change event types.
  */
-export type AuthEvent = "SIGNED_IN" | "SIGNED_OUT" | "TOKEN_REFRESHED";
+export type AuthEvent = "SIGNED_IN" | "SIGNED_OUT";
 /**
  * Data passed to auth state change callbacks.
  */
@@ -499,7 +499,6 @@ export interface AuthModule {
      * Events:
      * - `SIGNED_IN` — fired after a successful login (email/password, OAuth, or popup).
      * - `SIGNED_OUT` — fired after logout.
-     * - `TOKEN_REFRESHED` — fired when `setToken` is called while already authenticated.
      *
      * Returns an unsubscribe function. Call it to stop receiving events.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@base44-preview/sdk",
-  "version": "0.8.24-pr.134.4e99e37",
+  "version": "0.8.24-pr.134.cd7b8e1",
   "description": "JavaScript SDK for Base44 API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",