@blinkdotnew/sdk 0.14.1 → 0.14.2

package/dist/index.d.mts

@@ -733,6 +733,7 @@ declare class HttpClient {
 /**
  * Blink Auth Module - Client-side authentication management
  * Handles token storage, user state, and authentication flows
+ * Includes iframe token relay support for seamless preview authentication
  */
 
 type AuthStateChangeCallback = (state: AuthState) => void;
@@ -741,7 +742,18 @@ declare class BlinkAuth {
     private authState;
     private listeners;
     private readonly authUrl;
+    private parentWindowTokens;
+    private isIframe;
+    private tokenRequestSent;
     constructor(config: BlinkClientConfig);
+    /**
+     * Setup listener for tokens from parent window (iframe only)
+     */
+    private setupParentWindowListener;
+    /**
+     * Request tokens from parent window
+     */
+    private requestTokensFromParent;
     /**
      * Initialize authentication from stored tokens or URL fragments
      */

package/dist/index.d.ts

@@ -733,6 +733,7 @@ declare class HttpClient {
 /**
  * Blink Auth Module - Client-side authentication management
  * Handles token storage, user state, and authentication flows
+ * Includes iframe token relay support for seamless preview authentication
  */
 
 type AuthStateChangeCallback = (state: AuthState) => void;
@@ -741,7 +742,18 @@ declare class BlinkAuth {
     private authState;
     private listeners;
     private readonly authUrl;
+    private parentWindowTokens;
+    private isIframe;
+    private tokenRequestSent;
     constructor(config: BlinkClientConfig);
+    /**
+     * Setup listener for tokens from parent window (iframe only)
+     */
+    private setupParentWindowListener;
+    /**
+     * Request tokens from parent window
+     */
+    private requestTokensFromParent;
     /**
      * Initialize authentication from stored tokens or URL fragments
      */

package/dist/index.js

@@ -867,6 +867,9 @@ var BlinkAuth = class {
   authState;
   listeners = /* @__PURE__ */ new Set();
   authUrl = "https://blink.new";
+  parentWindowTokens = null;
+  isIframe = false;
+  tokenRequestSent = false;
   constructor(config) {
     this.config = config;
     this.authState = {
@@ -876,9 +879,80 @@ var BlinkAuth = class {
       isLoading: false
     };
     if (typeof window !== "undefined") {
+      this.isIframe = window.self !== window.top;
+      if (this.isIframe) {
+        console.log("\u{1F5BC}\uFE0F Detected iframe environment, setting up parent window communication");
+        this.setupParentWindowListener();
+      }
       this.initialize();
     }
   }
+  /**
+   * Setup listener for tokens from parent window (iframe only)
+   */
+  setupParentWindowListener() {
+    if (!this.isIframe) return;
+    window.addEventListener("message", (event) => {
+      const trustedOrigins = [
+        "https://blink.new",
+        "http://localhost:3000",
+        "http://localhost:3001",
+        "https://localhost:3000",
+        "https://localhost:3001"
+      ];
+      if (!trustedOrigins.includes(event.origin)) {
+        return;
+      }
+      if (event.data?.type === "BLINK_AUTH_TOKENS") {
+        console.log("\u{1F4E5} Received auth tokens from parent window", {
+          hasTokens: !!event.data.tokens,
+          projectId: event.data.projectId
+        });
+        const { tokens, projectId } = event.data;
+        if (projectId && projectId !== this.config.projectId) {
+          console.log("\u26A0\uFE0F Ignoring tokens for different project:", projectId);
+          return;
+        }
+        if (tokens) {
+          this.parentWindowTokens = tokens;
+          this.setTokens(tokens, false).then(() => {
+            console.log("\u2705 Tokens from parent window applied successfully");
+          }).catch((error) => {
+            console.error("\u274C Failed to apply parent window tokens:", error);
+          });
+        }
+      }
+      if (event.data?.type === "BLINK_AUTH_LOGOUT") {
+        console.log("\u{1F4E4} Received logout command from parent window");
+        this.clearTokens();
+      }
+      if (event.data?.type === "BLINK_AUTH_REFRESH") {
+        console.log("\u{1F504} Received token refresh from parent window");
+        const { tokens } = event.data;
+        if (tokens) {
+          this.parentWindowTokens = tokens;
+          this.setTokens(tokens, false).catch((error) => {
+            console.error("\u274C Failed to apply refreshed tokens:", error);
+          });
+        }
+      }
+    });
+    this.requestTokensFromParent();
+  }
+  /**
+   * Request tokens from parent window
+   */
+  requestTokensFromParent() {
+    if (!this.isIframe || this.tokenRequestSent) return;
+    if (window.parent !== window) {
+      console.log("\u{1F504} Requesting auth tokens from parent window");
+      window.parent.postMessage({
+        type: "BLINK_REQUEST_AUTH_TOKENS",
+        projectId: this.config.projectId
+      }, "*");
+      this.tokenRequestSent = true;
+    }
+  }
   /**
    * Initialize authentication from stored tokens or URL fragments
    */
@@ -886,6 +960,18 @@ var BlinkAuth = class {
     console.log("\u{1F680} Initializing Blink Auth...");
     this.setLoading(true);
     try {
+      if (this.isIframe) {
+        console.log("\u{1F50D} Detected iframe environment, waiting for parent tokens...");
+        for (let i = 0; i < 10; i++) {
+          if (this.parentWindowTokens) {
+            console.log("\u2705 Using tokens from parent window");
+            await this.setTokens(this.parentWindowTokens, false);
+            return;
+          }
+          await new Promise((resolve) => setTimeout(resolve, 100));
+        }
+        console.log("\u23F0 Timeout waiting for parent tokens, continuing with normal flow...");
+      }
       const tokensFromUrl = this.extractTokensFromUrl();
       if (tokensFromUrl) {
         console.log("\u{1F4E5} Found tokens in URL, setting them...");
@@ -917,6 +1003,14 @@ var BlinkAuth = class {
       }
       console.log("\u274C No tokens found");
       if (this.config.authRequired) {
+        if (this.isIframe && !this.tokenRequestSent) {
+          this.requestTokensFromParent();
+          await new Promise((resolve) => setTimeout(resolve, 500));
+          if (this.parentWindowTokens) {
+            await this.setTokens(this.parentWindowTokens, false);
+            return;
+          }
+        }
         console.log("\u{1F504} Auth required, redirecting to auth page...");
         this.redirectToAuth();
       } else {
@@ -955,6 +1049,12 @@ var BlinkAuth = class {
    */
   logout(redirectUrl) {
     this.clearTokens();
+    if (this.isIframe && window.parent !== window) {
+      window.parent.postMessage({
+        type: "BLINK_AUTH_LOGOUT_IFRAME",
+        projectId: this.config.projectId
+      }, "*");
+    }
     if (redirectUrl && typeof window !== "undefined") {
       window.location.href = redirectUrl;
     }
@@ -1173,7 +1273,7 @@ var BlinkAuth = class {
         token_type: data.token_type,
         expires_in: data.expires_in,
         refresh_expires_in: data.refresh_expires_in
-      }, true);
+      }, !this.isIframe);
       return true;
     } catch (error) {
       console.error("Token refresh failed:", error);
@@ -1250,7 +1350,7 @@ var BlinkAuth = class {
         return false;
       }
     } catch (error) {
-      console.log("\u{1F4A5} Error validating tokens:", error);
+      console.log("\uFFFD\uFFFD Error validating tokens:", error);
       return false;
     }
   }
@@ -1264,9 +1364,10 @@ var BlinkAuth = class {
       hasAccessToken: !!tokensWithTimestamp.access_token,
       hasRefreshToken: !!tokensWithTimestamp.refresh_token,
       expiresIn: tokensWithTimestamp.expires_in,
-      issuedAt: tokensWithTimestamp.issued_at
+      issuedAt: tokensWithTimestamp.issued_at,
+      isIframe: this.isIframe
     });
-    if (persist && typeof window !== "undefined") {
+    if (persist && !this.isIframe && typeof window !== "undefined") {
       try {
         localStorage.setItem("blink_tokens", JSON.stringify(tokensWithTimestamp));
         console.log("\u{1F4BE} Tokens persisted to localStorage");
@@ -1317,6 +1418,7 @@ var BlinkAuth = class {
     });
   }
   clearTokens() {
+    this.parentWindowTokens = null;
     if (typeof window !== "undefined") {
       try {
         localStorage.removeItem("blink_tokens");
@@ -1333,13 +1435,17 @@ var BlinkAuth = class {
   }
   getStoredTokens() {
     if (typeof window === "undefined") return null;
+    if (this.isIframe && this.parentWindowTokens) {
+      console.log("\u{1F4E6} Using parent window tokens");
+      return this.parentWindowTokens;
+    }
     try {
       const stored = localStorage.getItem("blink_tokens");
       console.log("\u{1F50D} Checking localStorage for tokens:", {
         hasStoredData: !!stored,
         storedLength: stored?.length || 0,
         origin: window.location.origin,
-        isIframe: window.self !== window.top
+        isIframe: this.isIframe
       });
       if (stored) {
         const tokens = JSON.parse(stored);

package/dist/index.mjs

@@ -865,6 +865,9 @@ var BlinkAuth = class {
   authState;
   listeners = /* @__PURE__ */ new Set();
   authUrl = "https://blink.new";
+  parentWindowTokens = null;
+  isIframe = false;
+  tokenRequestSent = false;
   constructor(config) {
     this.config = config;
     this.authState = {
@@ -874,9 +877,80 @@ var BlinkAuth = class {
       isLoading: false
     };
     if (typeof window !== "undefined") {
+      this.isIframe = window.self !== window.top;
+      if (this.isIframe) {
+        console.log("\u{1F5BC}\uFE0F Detected iframe environment, setting up parent window communication");
+        this.setupParentWindowListener();
+      }
       this.initialize();
     }
   }
+  /**
+   * Setup listener for tokens from parent window (iframe only)
+   */
+  setupParentWindowListener() {
+    if (!this.isIframe) return;
+    window.addEventListener("message", (event) => {
+      const trustedOrigins = [
+        "https://blink.new",
+        "http://localhost:3000",
+        "http://localhost:3001",
+        "https://localhost:3000",
+        "https://localhost:3001"
+      ];
+      if (!trustedOrigins.includes(event.origin)) {
+        return;
+      }
+      if (event.data?.type === "BLINK_AUTH_TOKENS") {
+        console.log("\u{1F4E5} Received auth tokens from parent window", {
+          hasTokens: !!event.data.tokens,
+          projectId: event.data.projectId
+        });
+        const { tokens, projectId } = event.data;
+        if (projectId && projectId !== this.config.projectId) {
+          console.log("\u26A0\uFE0F Ignoring tokens for different project:", projectId);
+          return;
+        }
+        if (tokens) {
+          this.parentWindowTokens = tokens;
+          this.setTokens(tokens, false).then(() => {
+            console.log("\u2705 Tokens from parent window applied successfully");
+          }).catch((error) => {
+            console.error("\u274C Failed to apply parent window tokens:", error);
+          });
+        }
+      }
+      if (event.data?.type === "BLINK_AUTH_LOGOUT") {
+        console.log("\u{1F4E4} Received logout command from parent window");
+        this.clearTokens();
+      }
+      if (event.data?.type === "BLINK_AUTH_REFRESH") {
+        console.log("\u{1F504} Received token refresh from parent window");
+        const { tokens } = event.data;
+        if (tokens) {
+          this.parentWindowTokens = tokens;
+          this.setTokens(tokens, false).catch((error) => {
+            console.error("\u274C Failed to apply refreshed tokens:", error);
+          });
+        }
+      }
+    });
+    this.requestTokensFromParent();
+  }
+  /**
+   * Request tokens from parent window
+   */
+  requestTokensFromParent() {
+    if (!this.isIframe || this.tokenRequestSent) return;
+    if (window.parent !== window) {
+      console.log("\u{1F504} Requesting auth tokens from parent window");
+      window.parent.postMessage({
+        type: "BLINK_REQUEST_AUTH_TOKENS",
+        projectId: this.config.projectId
+      }, "*");
+      this.tokenRequestSent = true;
+    }
+  }
   /**
    * Initialize authentication from stored tokens or URL fragments
    */
@@ -884,6 +958,18 @@ var BlinkAuth = class {
     console.log("\u{1F680} Initializing Blink Auth...");
     this.setLoading(true);
     try {
+      if (this.isIframe) {
+        console.log("\u{1F50D} Detected iframe environment, waiting for parent tokens...");
+        for (let i = 0; i < 10; i++) {
+          if (this.parentWindowTokens) {
+            console.log("\u2705 Using tokens from parent window");
+            await this.setTokens(this.parentWindowTokens, false);
+            return;
+          }
+          await new Promise((resolve) => setTimeout(resolve, 100));
+        }
+        console.log("\u23F0 Timeout waiting for parent tokens, continuing with normal flow...");
+      }
       const tokensFromUrl = this.extractTokensFromUrl();
       if (tokensFromUrl) {
         console.log("\u{1F4E5} Found tokens in URL, setting them...");
@@ -915,6 +1001,14 @@ var BlinkAuth = class {
       }
       console.log("\u274C No tokens found");
       if (this.config.authRequired) {
+        if (this.isIframe && !this.tokenRequestSent) {
+          this.requestTokensFromParent();
+          await new Promise((resolve) => setTimeout(resolve, 500));
+          if (this.parentWindowTokens) {
+            await this.setTokens(this.parentWindowTokens, false);
+            return;
+          }
+        }
         console.log("\u{1F504} Auth required, redirecting to auth page...");
         this.redirectToAuth();
       } else {
@@ -953,6 +1047,12 @@ var BlinkAuth = class {
    */
   logout(redirectUrl) {
     this.clearTokens();
+    if (this.isIframe && window.parent !== window) {
+      window.parent.postMessage({
+        type: "BLINK_AUTH_LOGOUT_IFRAME",
+        projectId: this.config.projectId
+      }, "*");
+    }
     if (redirectUrl && typeof window !== "undefined") {
       window.location.href = redirectUrl;
     }
@@ -1171,7 +1271,7 @@ var BlinkAuth = class {
         token_type: data.token_type,
         expires_in: data.expires_in,
         refresh_expires_in: data.refresh_expires_in
-      }, true);
+      }, !this.isIframe);
       return true;
     } catch (error) {
       console.error("Token refresh failed:", error);
@@ -1248,7 +1348,7 @@ var BlinkAuth = class {
         return false;
       }
     } catch (error) {
-      console.log("\u{1F4A5} Error validating tokens:", error);
+      console.log("\uFFFD\uFFFD Error validating tokens:", error);
       return false;
     }
   }
@@ -1262,9 +1362,10 @@ var BlinkAuth = class {
       hasAccessToken: !!tokensWithTimestamp.access_token,
       hasRefreshToken: !!tokensWithTimestamp.refresh_token,
       expiresIn: tokensWithTimestamp.expires_in,
-      issuedAt: tokensWithTimestamp.issued_at
+      issuedAt: tokensWithTimestamp.issued_at,
+      isIframe: this.isIframe
     });
-    if (persist && typeof window !== "undefined") {
+    if (persist && !this.isIframe && typeof window !== "undefined") {
       try {
         localStorage.setItem("blink_tokens", JSON.stringify(tokensWithTimestamp));
         console.log("\u{1F4BE} Tokens persisted to localStorage");
@@ -1315,6 +1416,7 @@ var BlinkAuth = class {
     });
   }
   clearTokens() {
+    this.parentWindowTokens = null;
     if (typeof window !== "undefined") {
       try {
         localStorage.removeItem("blink_tokens");
@@ -1331,13 +1433,17 @@ var BlinkAuth = class {
   }
   getStoredTokens() {
     if (typeof window === "undefined") return null;
+    if (this.isIframe && this.parentWindowTokens) {
+      console.log("\u{1F4E6} Using parent window tokens");
+      return this.parentWindowTokens;
+    }
     try {
       const stored = localStorage.getItem("blink_tokens");
       console.log("\u{1F50D} Checking localStorage for tokens:", {
         hasStoredData: !!stored,
         storedLength: stored?.length || 0,
         origin: window.location.origin,
-        isIframe: window.self !== window.top
+        isIframe: this.isIframe
       });
       if (stored) {
         const tokens = JSON.parse(stored);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blinkdotnew/sdk",
-  "version": "0.14.1",
+  "version": "0.14.2",
   "description": "Blink TypeScript SDK for client-side applications - Zero-boilerplate CRUD + auth + AI + analytics + notifications for modern SaaS/AI apps",
   "keywords": [
     "blink",