@bounded-sh/client 0.0.25 → 0.0.26

package/dist/auth/oidc-auth.d.ts

@@ -16,6 +16,13 @@ export interface OidcLoginOptions {
      * when the issuer explicitly enables text OTP.
      */
     provider?: HostedAuthMethod;
+    /**
+     * Standard OIDC `prompt`. Pass `'login'` to FORCE a fresh sign-in even if the
+     * issuer already has a session — so the user can choose a DIFFERENT account
+     * (e.g. retry with another email after an access denial) instead of being
+     * silently re-signed-in as the same one. `'select_account'` behaves the same.
+     */
+    prompt?: 'login' | 'select_account' | 'consent' | 'none' | (string & {});
 }
 export interface PopupLoginOptions extends OidcLoginOptions {
     width?: number;

package/dist/index.js

@@ -4305,6 +4305,10 @@ function appendHostedLoginHints(params, opts) {
     const provider = normalizeMethod(opts.provider);
     if (provider)
         params.set('bounded_provider', provider);
+    // Standard OIDC prompt (e.g. 'login' to force a fresh sign-in / account choice).
+    const prompt = normalizeMethod(opts.prompt);
+    if (prompt)
+        params.set('prompt', prompt);
 }
 // Build the authorize URL + the PKCE state that pairs with it. PURE: no storage,
 // no navigation — so it's shared verbatim by the web redirect/popup paths and the