@cboxdk/id-js 0.11.2 → 0.11.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +12 -0
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -148,6 +148,18 @@ surfaced rather than hammered.
148
148
 
149
149
  ### Signing in from your own form
150
150
 
151
+ > **This half needs a server that implements it.** `config()` and `session()` are served by
152
+ > the `cboxdk/laravel-id` package itself, so they work against any instance built on it.
153
+ > `signIn()`, `submitSecondFactor()` and the passkey calls are not: they post to
154
+ > `/frontend/v1/sign-in*`, which *is* the sign-in policy and therefore lives in the
155
+ > application rather than the package. [Cbox ID](https://github.com/cboxdk/cbox-id)
156
+ > implements them; a bare `laravel-id` install answers 404 to all four.
157
+ >
158
+ > In a browser a 404 on a cross-origin request is indistinguishable from a dead network, so
159
+ > this surfaces as `FrontendApiError` with `code: 'unavailable'` — nothing mentions a
160
+ > missing route. **If `config()` works and `signIn()` says the service is unreachable, this
161
+ > is why.**
162
+
151
163
  ```ts
152
164
  const result = await frontend.signIn(email, password)
153
165
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cboxdk/id-js",
3
- "version": "0.11.2",
3
+ "version": "0.11.3",
4
4
  "description": "Turnkey Cbox ID client for JavaScript/TypeScript — OpenID Connect login (PKCE + id_token verification via JWKS), hosted profile-management redirect, machine tokens, UserInfo, RFC 7662 introspection, and webhook signature verification. Runs on Node, edge, and the browser, with a first-class Next.js adapter.",
5
5
  "type": "module",
6
6
  "license": "MIT",