@blinkdotnew/sdk 0.14.2 → 0.14.4

package/README.md

@@ -1265,7 +1265,7 @@ All `{{secret_name}}` placeholders are replaced with encrypted values from your
 
 ### React
 
-```typitten
+```typescript
 import { createClient } from '@blinkdotnew/sdk'
 import { useState, useEffect } from 'react'
 

package/dist/index.d.mts

@@ -733,7 +733,6 @@ declare class HttpClient {
 /**
  * Blink Auth Module - Client-side authentication management
  * Handles token storage, user state, and authentication flows
- * Includes iframe token relay support for seamless preview authentication
  */
 
 type AuthStateChangeCallback = (state: AuthState) => void;
@@ -744,16 +743,17 @@ declare class BlinkAuth {
     private readonly authUrl;
     private parentWindowTokens;
     private isIframe;
-    private tokenRequestSent;
+    private initializationPromise;
+    private isInitialized;
     constructor(config: BlinkClientConfig);
     /**
-     * Setup listener for tokens from parent window (iframe only)
+     * Wait for authentication initialization to complete
      */
-    private setupParentWindowListener;
+    private waitForInitialization;
     /**
-     * Request tokens from parent window
+     * Setup listener for tokens from parent window
      */
-    private requestTokensFromParent;
+    private setupParentWindowListener;
     /**
      * Initialize authentication from stored tokens or URL fragments
      */
@@ -792,6 +792,7 @@ declare class BlinkAuth {
     getValidToken(): Promise<string | null>;
     /**
      * Fetch current user profile from API
+     * Gracefully waits for auth initialization to complete before throwing errors
      */
     me(): Promise<BlinkUser>;
     /**

package/dist/index.d.ts

@@ -733,7 +733,6 @@ declare class HttpClient {
 /**
  * Blink Auth Module - Client-side authentication management
  * Handles token storage, user state, and authentication flows
- * Includes iframe token relay support for seamless preview authentication
  */
 
 type AuthStateChangeCallback = (state: AuthState) => void;
@@ -744,16 +743,17 @@ declare class BlinkAuth {
     private readonly authUrl;
     private parentWindowTokens;
     private isIframe;
-    private tokenRequestSent;
+    private initializationPromise;
+    private isInitialized;
     constructor(config: BlinkClientConfig);
     /**
-     * Setup listener for tokens from parent window (iframe only)
+     * Wait for authentication initialization to complete
      */
-    private setupParentWindowListener;
+    private waitForInitialization;
     /**
-     * Request tokens from parent window
+     * Setup listener for tokens from parent window
      */
-    private requestTokensFromParent;
+    private setupParentWindowListener;
     /**
      * Initialize authentication from stored tokens or URL fragments
      */
@@ -792,6 +792,7 @@ declare class BlinkAuth {
     getValidToken(): Promise<string | null>;
     /**
      * Fetch current user profile from API
+     * Gracefully waits for auth initialization to complete before throwing errors
      */
     me(): Promise<BlinkUser>;
     /**

package/dist/index.js

@@ -869,7 +869,8 @@ var BlinkAuth = class {
   authUrl = "https://blink.new";
   parentWindowTokens = null;
   isIframe = false;
-  tokenRequestSent = false;
+  initializationPromise = null;
+  isInitialized = false;
   constructor(config) {
     this.config = config;
     this.authState = {
@@ -880,45 +881,39 @@ var BlinkAuth = class {
     };
     if (typeof window !== "undefined") {
       this.isIframe = window.self !== window.top;
-      if (this.isIframe) {
-        console.log("\u{1F5BC}\uFE0F Detected iframe environment, setting up parent window communication");
-        this.setupParentWindowListener();
-      }
-      this.initialize();
+      this.setupParentWindowListener();
+      this.initializationPromise = this.initialize();
+    } else {
+      this.isInitialized = true;
+    }
+  }
+  /**
+   * Wait for authentication initialization to complete
+   */
+  async waitForInitialization() {
+    if (this.isInitialized) return;
+    if (this.initializationPromise) {
+      await this.initializationPromise;
     }
   }
   /**
-   * Setup listener for tokens from parent window (iframe only)
+   * Setup listener for tokens from parent window
    */
   setupParentWindowListener() {
     if (!this.isIframe) return;
     window.addEventListener("message", (event) => {
-      const trustedOrigins = [
-        "https://blink.new",
-        "http://localhost:3000",
-        "http://localhost:3001",
-        "https://localhost:3000",
-        "https://localhost:3001"
-      ];
-      if (!trustedOrigins.includes(event.origin)) {
+      if (event.origin !== "https://blink.new" && event.origin !== "http://localhost:3000" && event.origin !== "http://localhost:3001") {
         return;
       }
       if (event.data?.type === "BLINK_AUTH_TOKENS") {
-        console.log("\u{1F4E5} Received auth tokens from parent window", {
-          hasTokens: !!event.data.tokens,
-          projectId: event.data.projectId
-        });
-        const { tokens, projectId } = event.data;
-        if (projectId && projectId !== this.config.projectId) {
-          console.log("\u26A0\uFE0F Ignoring tokens for different project:", projectId);
-          return;
-        }
+        console.log("\u{1F4E5} Received auth tokens from parent window");
+        const { tokens } = event.data;
         if (tokens) {
           this.parentWindowTokens = tokens;
           this.setTokens(tokens, false).then(() => {
-            console.log("\u2705 Tokens from parent window applied successfully");
+            console.log("\u2705 Tokens from parent window applied");
           }).catch((error) => {
-            console.error("\u274C Failed to apply parent window tokens:", error);
+            console.error("Failed to apply parent window tokens:", error);
           });
         }
       }
@@ -926,31 +921,13 @@ var BlinkAuth = class {
         console.log("\u{1F4E4} Received logout command from parent window");
         this.clearTokens();
       }
-      if (event.data?.type === "BLINK_AUTH_REFRESH") {
-        console.log("\u{1F504} Received token refresh from parent window");
-        const { tokens } = event.data;
-        if (tokens) {
-          this.parentWindowTokens = tokens;
-          this.setTokens(tokens, false).catch((error) => {
-            console.error("\u274C Failed to apply refreshed tokens:", error);
-          });
-        }
-      }
     });
-    this.requestTokensFromParent();
-  }
-  /**
-   * Request tokens from parent window
-   */
-  requestTokensFromParent() {
-    if (!this.isIframe || this.tokenRequestSent) return;
     if (window.parent !== window) {
       console.log("\u{1F504} Requesting auth tokens from parent window");
       window.parent.postMessage({
         type: "BLINK_REQUEST_AUTH_TOKENS",
         projectId: this.config.projectId
       }, "*");
-      this.tokenRequestSent = true;
     }
   }
   /**
@@ -962,15 +939,12 @@ var BlinkAuth = class {
     try {
       if (this.isIframe) {
         console.log("\u{1F50D} Detected iframe environment, waiting for parent tokens...");
-        for (let i = 0; i < 10; i++) {
-          if (this.parentWindowTokens) {
-            console.log("\u2705 Using tokens from parent window");
-            await this.setTokens(this.parentWindowTokens, false);
-            return;
-          }
-          await new Promise((resolve) => setTimeout(resolve, 100));
+        await new Promise((resolve) => setTimeout(resolve, 100));
+        if (this.parentWindowTokens) {
+          console.log("\u2705 Using tokens from parent window");
+          await this.setTokens(this.parentWindowTokens, false);
+          return;
         }
-        console.log("\u23F0 Timeout waiting for parent tokens, continuing with normal flow...");
       }
       const tokensFromUrl = this.extractTokensFromUrl();
       if (tokensFromUrl) {
@@ -1003,14 +977,6 @@ var BlinkAuth = class {
       }
       console.log("\u274C No tokens found");
       if (this.config.authRequired) {
-        if (this.isIframe && !this.tokenRequestSent) {
-          this.requestTokensFromParent();
-          await new Promise((resolve) => setTimeout(resolve, 500));
-          if (this.parentWindowTokens) {
-            await this.setTokens(this.parentWindowTokens, false);
-            return;
-          }
-        }
         console.log("\u{1F504} Auth required, redirecting to auth page...");
         this.redirectToAuth();
       } else {
@@ -1018,6 +984,7 @@ var BlinkAuth = class {
       }
     } finally {
       this.setLoading(false);
+      this.isInitialized = true;
     }
   }
   /**
@@ -1049,12 +1016,6 @@ var BlinkAuth = class {
    */
   logout(redirectUrl) {
     this.clearTokens();
-    if (this.isIframe && window.parent !== window) {
-      window.parent.postMessage({
-        type: "BLINK_AUTH_LOGOUT_IFRAME",
-        projectId: this.config.projectId
-      }, "*");
-    }
     if (redirectUrl && typeof window !== "undefined") {
       window.location.href = redirectUrl;
     }
@@ -1138,8 +1099,36 @@ var BlinkAuth = class {
   }
   /**
    * Fetch current user profile from API
+   * Gracefully waits for auth initialization to complete before throwing errors
    */
   async me() {
+    await this.waitForInitialization();
+    if (this.authState.isAuthenticated && this.authState.user) {
+      return this.authState.user;
+    }
+    if (!this.authState.isAuthenticated) {
+      return new Promise((resolve, reject) => {
+        if (this.authState.user) {
+          resolve(this.authState.user);
+          return;
+        }
+        const timeout = setTimeout(() => {
+          unsubscribe();
+          reject(new BlinkAuthError("Authentication timeout - no user available"));
+        }, 5e3);
+        const unsubscribe = this.onAuthStateChanged((state) => {
+          if (state.user) {
+            clearTimeout(timeout);
+            unsubscribe();
+            resolve(state.user);
+          } else if (!state.isLoading && !state.isAuthenticated) {
+            clearTimeout(timeout);
+            unsubscribe();
+            reject(new BlinkAuthError("Not authenticated"));
+          }
+        });
+      });
+    }
     let token = this.getToken();
     if (!token) {
       throw new BlinkAuthError("No access token available");
@@ -1273,7 +1262,7 @@ var BlinkAuth = class {
         token_type: data.token_type,
         expires_in: data.expires_in,
         refresh_expires_in: data.refresh_expires_in
-      }, !this.isIframe);
+      }, true);
       return true;
     } catch (error) {
       console.error("Token refresh failed:", error);
@@ -1350,7 +1339,7 @@ var BlinkAuth = class {
         return false;
       }
     } catch (error) {
-      console.log("\uFFFD\uFFFD Error validating tokens:", error);
+      console.log("\u{1F4A5} Error validating tokens:", error);
       return false;
     }
   }
@@ -1364,10 +1353,9 @@ var BlinkAuth = class {
       hasAccessToken: !!tokensWithTimestamp.access_token,
       hasRefreshToken: !!tokensWithTimestamp.refresh_token,
       expiresIn: tokensWithTimestamp.expires_in,
-      issuedAt: tokensWithTimestamp.issued_at,
-      isIframe: this.isIframe
+      issuedAt: tokensWithTimestamp.issued_at
     });
-    if (persist && !this.isIframe && typeof window !== "undefined") {
+    if (persist && typeof window !== "undefined") {
       try {
         localStorage.setItem("blink_tokens", JSON.stringify(tokensWithTimestamp));
         console.log("\u{1F4BE} Tokens persisted to localStorage");
@@ -1418,7 +1406,6 @@ var BlinkAuth = class {
     });
   }
   clearTokens() {
-    this.parentWindowTokens = null;
     if (typeof window !== "undefined") {
       try {
         localStorage.removeItem("blink_tokens");
@@ -1436,7 +1423,6 @@ var BlinkAuth = class {
   getStoredTokens() {
     if (typeof window === "undefined") return null;
     if (this.isIframe && this.parentWindowTokens) {
-      console.log("\u{1F4E6} Using parent window tokens");
       return this.parentWindowTokens;
     }
     try {
@@ -1445,7 +1431,7 @@ var BlinkAuth = class {
         hasStoredData: !!stored,
         storedLength: stored?.length || 0,
         origin: window.location.origin,
-        isIframe: this.isIframe
+        isIframe: window.self !== window.top
       });
       if (stored) {
         const tokens = JSON.parse(stored);

package/dist/index.mjs

@@ -867,7 +867,8 @@ var BlinkAuth = class {
   authUrl = "https://blink.new";
   parentWindowTokens = null;
   isIframe = false;
-  tokenRequestSent = false;
+  initializationPromise = null;
+  isInitialized = false;
   constructor(config) {
     this.config = config;
     this.authState = {
@@ -878,45 +879,39 @@ var BlinkAuth = class {
     };
     if (typeof window !== "undefined") {
       this.isIframe = window.self !== window.top;
-      if (this.isIframe) {
-        console.log("\u{1F5BC}\uFE0F Detected iframe environment, setting up parent window communication");
-        this.setupParentWindowListener();
-      }
-      this.initialize();
+      this.setupParentWindowListener();
+      this.initializationPromise = this.initialize();
+    } else {
+      this.isInitialized = true;
+    }
+  }
+  /**
+   * Wait for authentication initialization to complete
+   */
+  async waitForInitialization() {
+    if (this.isInitialized) return;
+    if (this.initializationPromise) {
+      await this.initializationPromise;
     }
   }
   /**
-   * Setup listener for tokens from parent window (iframe only)
+   * Setup listener for tokens from parent window
    */
   setupParentWindowListener() {
     if (!this.isIframe) return;
     window.addEventListener("message", (event) => {
-      const trustedOrigins = [
-        "https://blink.new",
-        "http://localhost:3000",
-        "http://localhost:3001",
-        "https://localhost:3000",
-        "https://localhost:3001"
-      ];
-      if (!trustedOrigins.includes(event.origin)) {
+      if (event.origin !== "https://blink.new" && event.origin !== "http://localhost:3000" && event.origin !== "http://localhost:3001") {
         return;
       }
       if (event.data?.type === "BLINK_AUTH_TOKENS") {
-        console.log("\u{1F4E5} Received auth tokens from parent window", {
-          hasTokens: !!event.data.tokens,
-          projectId: event.data.projectId
-        });
-        const { tokens, projectId } = event.data;
-        if (projectId && projectId !== this.config.projectId) {
-          console.log("\u26A0\uFE0F Ignoring tokens for different project:", projectId);
-          return;
-        }
+        console.log("\u{1F4E5} Received auth tokens from parent window");
+        const { tokens } = event.data;
         if (tokens) {
           this.parentWindowTokens = tokens;
           this.setTokens(tokens, false).then(() => {
-            console.log("\u2705 Tokens from parent window applied successfully");
+            console.log("\u2705 Tokens from parent window applied");
           }).catch((error) => {
-            console.error("\u274C Failed to apply parent window tokens:", error);
+            console.error("Failed to apply parent window tokens:", error);
           });
         }
       }
@@ -924,31 +919,13 @@ var BlinkAuth = class {
         console.log("\u{1F4E4} Received logout command from parent window");
         this.clearTokens();
       }
-      if (event.data?.type === "BLINK_AUTH_REFRESH") {
-        console.log("\u{1F504} Received token refresh from parent window");
-        const { tokens } = event.data;
-        if (tokens) {
-          this.parentWindowTokens = tokens;
-          this.setTokens(tokens, false).catch((error) => {
-            console.error("\u274C Failed to apply refreshed tokens:", error);
-          });
-        }
-      }
     });
-    this.requestTokensFromParent();
-  }
-  /**
-   * Request tokens from parent window
-   */
-  requestTokensFromParent() {
-    if (!this.isIframe || this.tokenRequestSent) return;
     if (window.parent !== window) {
       console.log("\u{1F504} Requesting auth tokens from parent window");
       window.parent.postMessage({
         type: "BLINK_REQUEST_AUTH_TOKENS",
         projectId: this.config.projectId
       }, "*");
-      this.tokenRequestSent = true;
     }
   }
   /**
@@ -960,15 +937,12 @@ var BlinkAuth = class {
     try {
       if (this.isIframe) {
         console.log("\u{1F50D} Detected iframe environment, waiting for parent tokens...");
-        for (let i = 0; i < 10; i++) {
-          if (this.parentWindowTokens) {
-            console.log("\u2705 Using tokens from parent window");
-            await this.setTokens(this.parentWindowTokens, false);
-            return;
-          }
-          await new Promise((resolve) => setTimeout(resolve, 100));
+        await new Promise((resolve) => setTimeout(resolve, 100));
+        if (this.parentWindowTokens) {
+          console.log("\u2705 Using tokens from parent window");
+          await this.setTokens(this.parentWindowTokens, false);
+          return;
         }
-        console.log("\u23F0 Timeout waiting for parent tokens, continuing with normal flow...");
       }
       const tokensFromUrl = this.extractTokensFromUrl();
       if (tokensFromUrl) {
@@ -1001,14 +975,6 @@ var BlinkAuth = class {
       }
       console.log("\u274C No tokens found");
       if (this.config.authRequired) {
-        if (this.isIframe && !this.tokenRequestSent) {
-          this.requestTokensFromParent();
-          await new Promise((resolve) => setTimeout(resolve, 500));
-          if (this.parentWindowTokens) {
-            await this.setTokens(this.parentWindowTokens, false);
-            return;
-          }
-        }
         console.log("\u{1F504} Auth required, redirecting to auth page...");
         this.redirectToAuth();
       } else {
@@ -1016,6 +982,7 @@ var BlinkAuth = class {
       }
     } finally {
       this.setLoading(false);
+      this.isInitialized = true;
     }
   }
   /**
@@ -1047,12 +1014,6 @@ var BlinkAuth = class {
    */
   logout(redirectUrl) {
     this.clearTokens();
-    if (this.isIframe && window.parent !== window) {
-      window.parent.postMessage({
-        type: "BLINK_AUTH_LOGOUT_IFRAME",
-        projectId: this.config.projectId
-      }, "*");
-    }
     if (redirectUrl && typeof window !== "undefined") {
       window.location.href = redirectUrl;
     }
@@ -1136,8 +1097,36 @@ var BlinkAuth = class {
   }
   /**
    * Fetch current user profile from API
+   * Gracefully waits for auth initialization to complete before throwing errors
    */
   async me() {
+    await this.waitForInitialization();
+    if (this.authState.isAuthenticated && this.authState.user) {
+      return this.authState.user;
+    }
+    if (!this.authState.isAuthenticated) {
+      return new Promise((resolve, reject) => {
+        if (this.authState.user) {
+          resolve(this.authState.user);
+          return;
+        }
+        const timeout = setTimeout(() => {
+          unsubscribe();
+          reject(new BlinkAuthError("Authentication timeout - no user available"));
+        }, 5e3);
+        const unsubscribe = this.onAuthStateChanged((state) => {
+          if (state.user) {
+            clearTimeout(timeout);
+            unsubscribe();
+            resolve(state.user);
+          } else if (!state.isLoading && !state.isAuthenticated) {
+            clearTimeout(timeout);
+            unsubscribe();
+            reject(new BlinkAuthError("Not authenticated"));
+          }
+        });
+      });
+    }
     let token = this.getToken();
     if (!token) {
       throw new BlinkAuthError("No access token available");
@@ -1271,7 +1260,7 @@ var BlinkAuth = class {
         token_type: data.token_type,
         expires_in: data.expires_in,
         refresh_expires_in: data.refresh_expires_in
-      }, !this.isIframe);
+      }, true);
       return true;
     } catch (error) {
       console.error("Token refresh failed:", error);
@@ -1348,7 +1337,7 @@ var BlinkAuth = class {
         return false;
       }
     } catch (error) {
-      console.log("\uFFFD\uFFFD Error validating tokens:", error);
+      console.log("\u{1F4A5} Error validating tokens:", error);
       return false;
     }
   }
@@ -1362,10 +1351,9 @@ var BlinkAuth = class {
       hasAccessToken: !!tokensWithTimestamp.access_token,
       hasRefreshToken: !!tokensWithTimestamp.refresh_token,
       expiresIn: tokensWithTimestamp.expires_in,
-      issuedAt: tokensWithTimestamp.issued_at,
-      isIframe: this.isIframe
+      issuedAt: tokensWithTimestamp.issued_at
     });
-    if (persist && !this.isIframe && typeof window !== "undefined") {
+    if (persist && typeof window !== "undefined") {
       try {
         localStorage.setItem("blink_tokens", JSON.stringify(tokensWithTimestamp));
         console.log("\u{1F4BE} Tokens persisted to localStorage");
@@ -1416,7 +1404,6 @@ var BlinkAuth = class {
     });
   }
   clearTokens() {
-    this.parentWindowTokens = null;
     if (typeof window !== "undefined") {
       try {
         localStorage.removeItem("blink_tokens");
@@ -1434,7 +1421,6 @@ var BlinkAuth = class {
   getStoredTokens() {
     if (typeof window === "undefined") return null;
     if (this.isIframe && this.parentWindowTokens) {
-      console.log("\u{1F4E6} Using parent window tokens");
       return this.parentWindowTokens;
     }
     try {
@@ -1443,7 +1429,7 @@ var BlinkAuth = class {
         hasStoredData: !!stored,
         storedLength: stored?.length || 0,
         origin: window.location.origin,
-        isIframe: this.isIframe
+        isIframe: window.self !== window.top
       });
       if (stored) {
         const tokens = JSON.parse(stored);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blinkdotnew/sdk",
-  "version": "0.14.2",
+  "version": "0.14.4",
   "description": "Blink TypeScript SDK for client-side applications - Zero-boilerplate CRUD + auth + AI + analytics + notifications for modern SaaS/AI apps",
   "keywords": [
     "blink",