@blinkdotnew/dev-sdk 2.1.4 → 2.1.5

package/dist/index.d.mts

@@ -1161,6 +1161,10 @@ declare class BlinkAuth {
      * Redirect to Blink auth page
      */
     login(nextUrl?: string): void;
+    /**
+     * Set up listener for tokens from parent window (for iframe OAuth delegation)
+     */
+    private setupParentTokenListener;
     /**
      * Logout and clear stored tokens
      */
@@ -1325,11 +1329,6 @@ declare class BlinkAuth {
      * Uses expo-web-browser to open auth URL and polls for completion
      */
     private signInWithProviderUniversal;
-    /**
-     * OAuth flow via parent window (for iframe context)
-     * Delegates OAuth to parent window since OAuth providers block flows inside iframes
-     */
-    private signInWithProviderViaParent;
     /**
      * Generic provider sign-in method (headless mode)
      *

package/dist/index.d.ts

@@ -1161,6 +1161,10 @@ declare class BlinkAuth {
      * Redirect to Blink auth page
      */
     login(nextUrl?: string): void;
+    /**
+     * Set up listener for tokens from parent window (for iframe OAuth delegation)
+     */
+    private setupParentTokenListener;
     /**
      * Logout and clear stored tokens
      */
@@ -1325,11 +1329,6 @@ declare class BlinkAuth {
      * Uses expo-web-browser to open auth URL and polls for completion
      */
     private signInWithProviderUniversal;
-    /**
-     * OAuth flow via parent window (for iframe context)
-     * Delegates OAuth to parent window since OAuth providers block flows inside iframes
-     */
-    private signInWithProviderViaParent;
     /**
      * Generic provider sign-in method (headless mode)
      *

package/dist/index.js

@@ -1464,6 +1464,17 @@ var BlinkAuth = class {
         console.warn("Failed to parse redirect URL:", e);
       }
     }
+    if (isWeb && this.isIframe && hasWindow() && window.parent !== window) {
+      console.log("\u{1F5BC}\uFE0F In iframe, delegating login to parent window");
+      this.setupParentTokenListener();
+      window.parent.postMessage({
+        type: "BLINK_AUTH_LOGIN_REQUEST",
+        projectId: this.config.projectId,
+        redirectUrl: redirectUrl || "",
+        authUrl: this.authUrl
+      }, "*");
+      return;
+    }
     const authUrl = new URL("/auth", this.authUrl);
     authUrl.searchParams.set("redirect_url", redirectUrl || "");
     if (this.config.projectId) {
@@ -1471,6 +1482,34 @@ var BlinkAuth = class {
     }
     window.location.href = authUrl.toString();
   }
+  /**
+   * Set up listener for tokens from parent window (for iframe OAuth delegation)
+   */
+  setupParentTokenListener() {
+    if (typeof window === "undefined") return;
+    const messageListener = (event) => {
+      const { type, access_token, refresh_token, expires_in, refresh_expires_in, issued_at, projectId, error } = event.data || {};
+      if (type === "BLINK_AUTH_TOKENS") {
+        if (projectId && projectId !== this.config.projectId) {
+          return;
+        }
+        console.log("\u{1F4E5} Received auth tokens from parent window");
+        window.removeEventListener("message", messageListener);
+        this.setTokens({
+          access_token,
+          refresh_token,
+          token_type: "Bearer",
+          expires_in: expires_in || 3600,
+          refresh_expires_in,
+          issued_at: issued_at || Math.floor(Date.now() / 1e3)
+        }, true);
+      } else if (type === "BLINK_AUTH_ERROR") {
+        window.removeEventListener("message", messageListener);
+        console.error("Auth error from parent:", error);
+      }
+    };
+    window.addEventListener("message", messageListener);
+  }
   /**
    * Logout and clear stored tokens
    */
@@ -1966,67 +2005,6 @@ var BlinkAuth = class {
       throw pollError;
     }
   }
-  /**
-   * OAuth flow via parent window (for iframe context)
-   * Delegates OAuth to parent window since OAuth providers block flows inside iframes
-   */
-  signInWithProviderViaParent(provider, options) {
-    return new Promise((resolve, reject) => {
-      const state = this.generateState();
-      const redirectUrl = options?.redirectUrl || getLocationOrigin() || "";
-      let timeoutId;
-      let cleanedUp = false;
-      const cleanup = () => {
-        if (cleanedUp) return;
-        cleanedUp = true;
-        clearTimeout(timeoutId);
-        window.removeEventListener("message", messageListener);
-      };
-      const messageListener = (event) => {
-        const { type, access_token, refresh_token, expires_in, refresh_expires_in, issued_at, projectId, error } = event.data || {};
-        if (type === "BLINK_AUTH_TOKENS") {
-          if (projectId && projectId !== this.config.projectId) {
-            return;
-          }
-          console.log("\u{1F4E5} Received auth tokens from parent window");
-          this.setTokens({
-            access_token,
-            refresh_token,
-            token_type: "Bearer",
-            expires_in: expires_in || 3600,
-            refresh_expires_in,
-            issued_at: issued_at || Math.floor(Date.now() / 1e3)
-          }, true).then(() => {
-            cleanup();
-            resolve(this.authState.user);
-          }).catch((err) => {
-            cleanup();
-            reject(err);
-          });
-        } else if (type === "BLINK_AUTH_ERROR") {
-          cleanup();
-          reject(new BlinkAuthError(
-            "POPUP_CANCELED" /* POPUP_CANCELED */,
-            error || "Authentication failed"
-          ));
-        }
-      };
-      window.addEventListener("message", messageListener);
-      timeoutId = setTimeout(() => {
-        cleanup();
-        reject(new BlinkAuthError("AUTH_TIMEOUT" /* AUTH_TIMEOUT */, "Authentication timed out"));
-      }, 3e5);
-      console.log("\u{1F4E4} Sending OAuth request to parent window");
-      window.parent.postMessage({
-        type: "BLINK_AUTH_OAUTH_REQUEST",
-        provider,
-        projectId: this.config.projectId,
-        redirectUrl,
-        state,
-        authUrl: this.authUrl
-      }, "*");
-    });
-  }
   /**
    * Generic provider sign-in method (headless mode)
    * 
@@ -2073,10 +2051,7 @@ var BlinkAuth = class {
     if (!hasWindow()) {
       throw new BlinkAuthError("NETWORK_ERROR" /* NETWORK_ERROR */, "signInWithProvider requires a browser environment");
     }
-    if (isWeb && this.isIframe && hasWindow() && window.parent !== window) {
-      console.log("\u{1F5BC}\uFE0F In iframe, delegating OAuth to parent window");
-      return this.signInWithProviderViaParent(provider, options);
-    }
+    const shouldPreferRedirect = isWeb && this.isIframe || typeof window !== "undefined" && window.crossOriginIsolated === true;
     const state = this.generateState();
     try {
       const sessionStorage = getSessionStorage();
@@ -2096,7 +2071,6 @@ var BlinkAuth = class {
       url.searchParams.set("opener_origin", getLocationOrigin() || "");
       return url;
     };
-    const shouldPreferRedirect = typeof window !== "undefined" && window.crossOriginIsolated === true;
     if (shouldPreferRedirect) {
       window.location.href = buildAuthUrl("redirect").toString();
       return new Promise(() => {

package/dist/index.mjs

@@ -1462,6 +1462,17 @@ var BlinkAuth = class {
         console.warn("Failed to parse redirect URL:", e);
       }
     }
+    if (isWeb && this.isIframe && hasWindow() && window.parent !== window) {
+      console.log("\u{1F5BC}\uFE0F In iframe, delegating login to parent window");
+      this.setupParentTokenListener();
+      window.parent.postMessage({
+        type: "BLINK_AUTH_LOGIN_REQUEST",
+        projectId: this.config.projectId,
+        redirectUrl: redirectUrl || "",
+        authUrl: this.authUrl
+      }, "*");
+      return;
+    }
     const authUrl = new URL("/auth", this.authUrl);
     authUrl.searchParams.set("redirect_url", redirectUrl || "");
     if (this.config.projectId) {
@@ -1469,6 +1480,34 @@ var BlinkAuth = class {
     }
     window.location.href = authUrl.toString();
   }
+  /**
+   * Set up listener for tokens from parent window (for iframe OAuth delegation)
+   */
+  setupParentTokenListener() {
+    if (typeof window === "undefined") return;
+    const messageListener = (event) => {
+      const { type, access_token, refresh_token, expires_in, refresh_expires_in, issued_at, projectId, error } = event.data || {};
+      if (type === "BLINK_AUTH_TOKENS") {
+        if (projectId && projectId !== this.config.projectId) {
+          return;
+        }
+        console.log("\u{1F4E5} Received auth tokens from parent window");
+        window.removeEventListener("message", messageListener);
+        this.setTokens({
+          access_token,
+          refresh_token,
+          token_type: "Bearer",
+          expires_in: expires_in || 3600,
+          refresh_expires_in,
+          issued_at: issued_at || Math.floor(Date.now() / 1e3)
+        }, true);
+      } else if (type === "BLINK_AUTH_ERROR") {
+        window.removeEventListener("message", messageListener);
+        console.error("Auth error from parent:", error);
+      }
+    };
+    window.addEventListener("message", messageListener);
+  }
   /**
    * Logout and clear stored tokens
    */
@@ -1964,67 +2003,6 @@ var BlinkAuth = class {
       throw pollError;
     }
   }
-  /**
-   * OAuth flow via parent window (for iframe context)
-   * Delegates OAuth to parent window since OAuth providers block flows inside iframes
-   */
-  signInWithProviderViaParent(provider, options) {
-    return new Promise((resolve, reject) => {
-      const state = this.generateState();
-      const redirectUrl = options?.redirectUrl || getLocationOrigin() || "";
-      let timeoutId;
-      let cleanedUp = false;
-      const cleanup = () => {
-        if (cleanedUp) return;
-        cleanedUp = true;
-        clearTimeout(timeoutId);
-        window.removeEventListener("message", messageListener);
-      };
-      const messageListener = (event) => {
-        const { type, access_token, refresh_token, expires_in, refresh_expires_in, issued_at, projectId, error } = event.data || {};
-        if (type === "BLINK_AUTH_TOKENS") {
-          if (projectId && projectId !== this.config.projectId) {
-            return;
-          }
-          console.log("\u{1F4E5} Received auth tokens from parent window");
-          this.setTokens({
-            access_token,
-            refresh_token,
-            token_type: "Bearer",
-            expires_in: expires_in || 3600,
-            refresh_expires_in,
-            issued_at: issued_at || Math.floor(Date.now() / 1e3)
-          }, true).then(() => {
-            cleanup();
-            resolve(this.authState.user);
-          }).catch((err) => {
-            cleanup();
-            reject(err);
-          });
-        } else if (type === "BLINK_AUTH_ERROR") {
-          cleanup();
-          reject(new BlinkAuthError(
-            "POPUP_CANCELED" /* POPUP_CANCELED */,
-            error || "Authentication failed"
-          ));
-        }
-      };
-      window.addEventListener("message", messageListener);
-      timeoutId = setTimeout(() => {
-        cleanup();
-        reject(new BlinkAuthError("AUTH_TIMEOUT" /* AUTH_TIMEOUT */, "Authentication timed out"));
-      }, 3e5);
-      console.log("\u{1F4E4} Sending OAuth request to parent window");
-      window.parent.postMessage({
-        type: "BLINK_AUTH_OAUTH_REQUEST",
-        provider,
-        projectId: this.config.projectId,
-        redirectUrl,
-        state,
-        authUrl: this.authUrl
-      }, "*");
-    });
-  }
   /**
    * Generic provider sign-in method (headless mode)
    * 
@@ -2071,10 +2049,7 @@ var BlinkAuth = class {
     if (!hasWindow()) {
       throw new BlinkAuthError("NETWORK_ERROR" /* NETWORK_ERROR */, "signInWithProvider requires a browser environment");
     }
-    if (isWeb && this.isIframe && hasWindow() && window.parent !== window) {
-      console.log("\u{1F5BC}\uFE0F In iframe, delegating OAuth to parent window");
-      return this.signInWithProviderViaParent(provider, options);
-    }
+    const shouldPreferRedirect = isWeb && this.isIframe || typeof window !== "undefined" && window.crossOriginIsolated === true;
     const state = this.generateState();
     try {
       const sessionStorage = getSessionStorage();
@@ -2094,7 +2069,6 @@ var BlinkAuth = class {
       url.searchParams.set("opener_origin", getLocationOrigin() || "");
       return url;
     };
-    const shouldPreferRedirect = typeof window !== "undefined" && window.crossOriginIsolated === true;
     if (shouldPreferRedirect) {
       window.location.href = buildAuthUrl("redirect").toString();
       return new Promise(() => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blinkdotnew/dev-sdk",
-  "version": "2.1.4",
+  "version": "2.1.5",
   "description": "Blink TypeScript SDK for client-side applications - Zero-boilerplate CRUD + auth + AI + analytics + notifications for modern SaaS/AI apps",
   "keywords": [
     "blink",