@clerk/expo-google-signin 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 Clerk Inc
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/android/build.gradle

@@ -0,0 +1,39 @@
+apply plugin: 'com.android.library'
+apply plugin: 'kotlin-android'
+apply plugin: 'maven-publish'
+
+group = 'expo.modules.clerk.googlesignin'
+version = '1.0.0'
+
+def expoModulesCorePlugin = new File(project(":expo-modules-core").projectDir.absolutePath, "ExpoModulesCorePlugin.gradle")
+apply from: expoModulesCorePlugin
+applyKotlinExpoModulesCorePlugin()
+useCoreDependencies()
+useExpoPublishing()
+
+buildscript {
+  ext.safeExtGet = { prop, fallback ->
+    rootProject.ext.has(prop) ? rootProject.ext.get(prop) : fallback
+  }
+}
+
+android {
+  namespace "expo.modules.clerk.googlesignin"
+
+  compileSdkVersion safeExtGet("compileSdkVersion", 36)
+
+  defaultConfig {
+    minSdkVersion safeExtGet("minSdkVersion", 24)
+    targetSdkVersion safeExtGet("targetSdkVersion", 36)
+    versionCode 1
+    versionName "1.0.0"
+  }
+}
+
+dependencies {
+  implementation project(':expo-modules-core')
+  implementation "androidx.credentials:credentials:1.3.0"
+  implementation "androidx.credentials:credentials-play-services-auth:1.3.0"
+  implementation "com.google.android.libraries.identity.googleid:googleid:1.1.1"
+  implementation "org.jetbrains.kotlinx:kotlinx-coroutines-android:1.7.3"
+}

package/android/src/main/AndroidManifest.xml

@@ -0,0 +1 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android" />

package/android/src/main/java/expo/modules/clerk/googlesignin/ClerkGoogleSignInModule.kt

@@ -0,0 +1,257 @@
+package expo.modules.clerk.googlesignin
+
+import androidx.credentials.ClearCredentialStateRequest
+import androidx.credentials.CredentialManager
+import androidx.credentials.CustomCredential
+import androidx.credentials.GetCredentialRequest
+import androidx.credentials.GetCredentialResponse
+import androidx.credentials.exceptions.GetCredentialCancellationException
+import androidx.credentials.exceptions.GetCredentialException
+import androidx.credentials.exceptions.NoCredentialException
+import com.google.android.libraries.identity.googleid.GetGoogleIdOption
+import com.google.android.libraries.identity.googleid.GetSignInWithGoogleOption
+import com.google.android.libraries.identity.googleid.GoogleIdTokenCredential
+import com.google.android.libraries.identity.googleid.GoogleIdTokenParsingException
+import expo.modules.kotlin.Promise
+import expo.modules.kotlin.modules.Module
+import expo.modules.kotlin.modules.ModuleDefinition
+import kotlinx.coroutines.CoroutineScope
+import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.launch
+
+class ClerkGoogleSignInModule : Module() {
+  private var webClientId: String? = null
+  private var hostedDomain: String? = null
+  private var autoSelectEnabled: Boolean = false
+  private val mainScope = CoroutineScope(Dispatchers.Main)
+
+  private val credentialManager: CredentialManager
+    get() = CredentialManager.create(requireNotNull(appContext.reactContext))
+
+  override fun definition() = ModuleDefinition {
+    Name("ClerkGoogleSignIn")
+
+    Function("configure") { params: Map<String, Any?> ->
+      configure(params)
+    }
+
+    AsyncFunction("signIn") { params: Map<String, Any?>?, promise: Promise ->
+      signIn(params, promise)
+    }
+
+    AsyncFunction("createAccount") { params: Map<String, Any?>?, promise: Promise ->
+      createAccount(params, promise)
+    }
+
+    AsyncFunction("presentExplicitSignIn") { params: Map<String, Any?>?, promise: Promise ->
+      presentExplicitSignIn(params, promise)
+    }
+
+    AsyncFunction("signOut") { promise: Promise ->
+      signOut(promise)
+    }
+  }
+
+  // MARK: - configure
+
+  private fun configure(params: Map<String, Any?>) {
+    webClientId = params["webClientId"] as? String
+    hostedDomain = params["hostedDomain"] as? String
+    autoSelectEnabled = params["autoSelectEnabled"] as? Boolean ?: false
+  }
+
+  // MARK: - signIn
+
+  private fun signIn(params: Map<String, Any?>?, promise: Promise) {
+    val clientId = webClientId ?: run {
+      promise.reject("NOT_CONFIGURED", "Google Sign-In is not configured. Call configure() first.", null)
+      return
+    }
+
+    val activity = appContext.currentActivity ?: run {
+      promise.reject("E_ACTIVITY_UNAVAILABLE", "Activity is not available", null)
+      return
+    }
+
+    mainScope.launch {
+      try {
+        val filterByAuthorized = params?.get("filterByAuthorizedAccounts") as? Boolean ?: true
+        val nonce = params?.get("nonce") as? String
+
+        val googleIdOption = GetGoogleIdOption.Builder()
+          .setFilterByAuthorizedAccounts(filterByAuthorized)
+          .setServerClientId(clientId)
+          .setAutoSelectEnabled(autoSelectEnabled)
+          .apply {
+            nonce?.let { setNonce(it) }
+          }
+          .build()
+
+        val request = GetCredentialRequest.Builder()
+          .addCredentialOption(googleIdOption)
+          .build()
+
+        val result = credentialManager.getCredential(
+          request = request,
+          context = activity
+        )
+
+        handleSignInResult(result, promise)
+      } catch (e: GetCredentialCancellationException) {
+        promise.reject("SIGN_IN_CANCELLED", "User cancelled the sign-in flow", e)
+      } catch (e: NoCredentialException) {
+        promise.reject("NO_SAVED_CREDENTIAL_FOUND", "No saved credential found", e)
+      } catch (e: GetCredentialException) {
+        promise.reject("GOOGLE_SIGN_IN_ERROR", e.message ?: "Unknown error", e)
+      } catch (e: Exception) {
+        promise.reject("GOOGLE_SIGN_IN_ERROR", e.message ?: "Unknown error", e)
+      }
+    }
+  }
+
+  // MARK: - createAccount
+
+  private fun createAccount(params: Map<String, Any?>?, promise: Promise) {
+    val clientId = webClientId ?: run {
+      promise.reject("NOT_CONFIGURED", "Google Sign-In is not configured. Call configure() first.", null)
+      return
+    }
+
+    val activity = appContext.currentActivity ?: run {
+      promise.reject("E_ACTIVITY_UNAVAILABLE", "Activity is not available", null)
+      return
+    }
+
+    mainScope.launch {
+      try {
+        val nonce = params?.get("nonce") as? String
+
+        val googleIdOption = GetGoogleIdOption.Builder()
+          .setFilterByAuthorizedAccounts(false) // Show all accounts for creation
+          .setServerClientId(clientId)
+          .apply {
+            nonce?.let { setNonce(it) }
+          }
+          .build()
+
+        val request = GetCredentialRequest.Builder()
+          .addCredentialOption(googleIdOption)
+          .build()
+
+        val result = credentialManager.getCredential(
+          request = request,
+          context = activity
+        )
+
+        handleSignInResult(result, promise)
+      } catch (e: GetCredentialCancellationException) {
+        promise.reject("SIGN_IN_CANCELLED", "User cancelled the sign-in flow", e)
+      } catch (e: NoCredentialException) {
+        promise.reject("NO_SAVED_CREDENTIAL_FOUND", "No saved credential found", e)
+      } catch (e: GetCredentialException) {
+        promise.reject("GOOGLE_SIGN_IN_ERROR", e.message ?: "Unknown error", e)
+      } catch (e: Exception) {
+        promise.reject("GOOGLE_SIGN_IN_ERROR", e.message ?: "Unknown error", e)
+      }
+    }
+  }
+
+  // MARK: - presentExplicitSignIn
+
+  private fun presentExplicitSignIn(params: Map<String, Any?>?, promise: Promise) {
+    val clientId = webClientId ?: run {
+      promise.reject("NOT_CONFIGURED", "Google Sign-In is not configured. Call configure() first.", null)
+      return
+    }
+
+    val activity = appContext.currentActivity ?: run {
+      promise.reject("E_ACTIVITY_UNAVAILABLE", "Activity is not available", null)
+      return
+    }
+
+    mainScope.launch {
+      try {
+        val nonce = params?.get("nonce") as? String
+
+        val signInWithGoogleOption = GetSignInWithGoogleOption.Builder(clientId)
+          .apply {
+            nonce?.let { setNonce(it) }
+            hostedDomain?.let { setHostedDomainFilter(it) }
+          }
+          .build()
+
+        val request = GetCredentialRequest.Builder()
+          .addCredentialOption(signInWithGoogleOption)
+          .build()
+
+        val result = credentialManager.getCredential(
+          request = request,
+          context = activity
+        )
+
+        handleSignInResult(result, promise)
+      } catch (e: GetCredentialCancellationException) {
+        promise.reject("SIGN_IN_CANCELLED", "User cancelled the sign-in flow", e)
+      } catch (e: GetCredentialException) {
+        promise.reject("GOOGLE_SIGN_IN_ERROR", e.message ?: "Unknown error", e)
+      } catch (e: Exception) {
+        promise.reject("GOOGLE_SIGN_IN_ERROR", e.message ?: "Unknown error", e)
+      }
+    }
+  }
+
+  // MARK: - signOut
+
+  private fun signOut(promise: Promise) {
+    mainScope.launch {
+      try {
+        credentialManager.clearCredentialState(ClearCredentialStateRequest())
+        promise.resolve(null)
+      } catch (e: Exception) {
+        promise.reject("GOOGLE_SIGN_IN_ERROR", e.message ?: "Failed to sign out", e)
+      }
+    }
+  }
+
+  // MARK: - Helpers
+
+  private fun handleSignInResult(result: GetCredentialResponse, promise: Promise) {
+    when (val credential = result.credential) {
+      is CustomCredential -> {
+        if (credential.type == GoogleIdTokenCredential.TYPE_GOOGLE_ID_TOKEN_CREDENTIAL) {
+          try {
+            val googleIdTokenCredential = GoogleIdTokenCredential.createFrom(credential.data)
+
+            val user = mapOf(
+              "id" to googleIdTokenCredential.id,
+              "email" to googleIdTokenCredential.id,
+              "name" to googleIdTokenCredential.displayName,
+              "givenName" to googleIdTokenCredential.givenName,
+              "familyName" to googleIdTokenCredential.familyName,
+              "photo" to googleIdTokenCredential.profilePictureUri?.toString()
+            )
+
+            val data = mapOf(
+              "idToken" to googleIdTokenCredential.idToken,
+              "user" to user
+            )
+
+            promise.resolve(
+              mapOf(
+                "type" to "success",
+                "data" to data
+              )
+            )
+          } catch (e: GoogleIdTokenParsingException) {
+            promise.reject("GOOGLE_SIGN_IN_ERROR", "Failed to parse Google ID token: ${e.message}", e)
+          }
+        } else {
+          promise.reject("GOOGLE_SIGN_IN_ERROR", "Unexpected credential type: ${credential.type}", null)
+        }
+      }
+      else -> {
+        promise.reject("GOOGLE_SIGN_IN_ERROR", "Unexpected credential type", null)
+      }
+    }
+  }
+}

package/app.plugin.d.ts

@@ -0,0 +1,5 @@
+import type { ConfigPlugin } from '@expo/config-plugins';
+
+declare const withClerkExpoGoogleSignIn: ConfigPlugin;
+
+export = withClerkExpoGoogleSignIn;

package/app.plugin.js

@@ -0,0 +1,32 @@
+const { withInfoPlist, createRunOncePlugin } = require('@expo/config-plugins');
+const pkg = require('./package.json');
+
+const withClerkExpoGoogleSignIn = config => {
+  const iosUrlScheme =
+    process.env.EXPO_PUBLIC_CLERK_GOOGLE_IOS_URL_SCHEME ||
+    (config.extra && config.extra.EXPO_PUBLIC_CLERK_GOOGLE_IOS_URL_SCHEME);
+
+  if (!iosUrlScheme) {
+    return config;
+  }
+
+  return withInfoPlist(config, modConfig => {
+    if (!Array.isArray(modConfig.modResults.CFBundleURLTypes)) {
+      modConfig.modResults.CFBundleURLTypes = [];
+    }
+
+    const schemeExists = modConfig.modResults.CFBundleURLTypes.some(urlType =>
+      urlType.CFBundleURLSchemes?.includes(iosUrlScheme),
+    );
+
+    if (!schemeExists) {
+      modConfig.modResults.CFBundleURLTypes.push({
+        CFBundleURLSchemes: [iosUrlScheme],
+      });
+    }
+
+    return modConfig;
+  });
+};
+
+module.exports = createRunOncePlugin(withClerkExpoGoogleSignIn, pkg.name, pkg.version);

package/dist/google-one-tap/ClerkGoogleOneTapSignIn.d.ts

@@ -0,0 +1,86 @@
+import type { CancelledResponse, ConfigureParams, CreateAccountParams, ExplicitSignInParams, NoSavedCredentialFound, OneTapResponse, OneTapSuccessResponse, SignInParams } from './types';
+/**
+ * Check if a response indicates the user cancelled the sign-in flow.
+ */
+export declare function isCancelledResponse(response: OneTapResponse): response is CancelledResponse;
+/**
+ * Check if a response indicates no saved credential was found.
+ */
+export declare function isNoSavedCredentialFoundResponse(response: OneTapResponse): response is NoSavedCredentialFound;
+/**
+ * Check if a response is a successful sign-in.
+ */
+export declare function isSuccessResponse(response: OneTapResponse): response is OneTapSuccessResponse;
+/**
+ * Check if an error has code and message properties (Google Sign-In error).
+ */
+export declare function isErrorWithCode(error: unknown): error is {
+    code: string;
+    message: string;
+};
+/**
+ * Internal Google One Tap Sign-In module.
+ *
+ * This module provides native Google Sign-In functionality using Google's
+ * Credential Manager API with full nonce support for replay attack protection.
+ *
+ * @internal This is an internal module. Use the `useSignInWithGoogle` hook instead.
+ * @platform Android, iOS
+ */
+export declare const ClerkGoogleOneTapSignIn: {
+    /**
+     * Configure Google Sign-In. Must be called before any sign-in methods.
+     *
+     * @param params - Configuration parameters
+     * @param params.webClientId - The web client ID from Google Cloud Console (required)
+     * @param params.hostedDomain - Optional domain restriction
+     * @param params.autoSelectEnabled - Auto-select for single credential (default: false)
+     */
+    configure(params: ConfigureParams): void;
+    /**
+     * Attempt to sign in with saved credentials (One Tap).
+     *
+     * This method will show the One Tap UI if there are saved credentials,
+     * or return a "noSavedCredentialFound" response if there are none.
+     *
+     * @param params - Sign-in parameters
+     * @param params.nonce - Cryptographic nonce for replay protection
+     * @param params.filterByAuthorizedAccounts - Android only. Filter to previously authorized accounts.
+     * @param params.hint - iOS only. Hint for Google Sign-In.
+     *
+     * @returns Promise resolving to OneTapResponse
+     */
+    signIn(params?: SignInParams): Promise<OneTapResponse>;
+    /**
+     * Create a new account (shows all Google accounts).
+     *
+     * This method shows the account picker with all available Google accounts,
+     * not just previously authorized ones.
+     *
+     * @param params - Create account parameters
+     * @param params.nonce - Cryptographic nonce for replay protection
+     *
+     * @returns Promise resolving to OneTapResponse
+     */
+    createAccount(params?: CreateAccountParams): Promise<OneTapResponse>;
+    /**
+     * Present explicit sign-in UI (Google Sign-In button flow).
+     *
+     * This shows the full Google Sign-In UI, similar to clicking a
+     * "Sign in with Google" button.
+     *
+     * @param params - Explicit sign-in parameters
+     * @param params.nonce - Cryptographic nonce for replay protection
+     *
+     * @returns Promise resolving to OneTapResponse
+     */
+    presentExplicitSignIn(params?: ExplicitSignInParams): Promise<OneTapResponse>;
+    /**
+     * Sign out and clear credential state.
+     *
+     * This disables automatic sign-in until the user signs in again.
+     */
+    signOut(): Promise<void>;
+};
+export type { ConfigureParams, SignInParams, CreateAccountParams, ExplicitSignInParams, OneTapResponse, OneTapSuccessResponse, CancelledResponse, NoSavedCredentialFound, GoogleUser, } from './types';
+//# sourceMappingURL=ClerkGoogleOneTapSignIn.d.ts.map

package/dist/google-one-tap/ClerkGoogleOneTapSignIn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClerkGoogleOneTapSignIn.d.ts","sourceRoot":"","sources":["../../src/google-one-tap/ClerkGoogleOneTapSignIn.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,YAAY,EACb,MAAM,SAAS,CAAC;AAYjB;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,IAAI,iBAAiB,CAE3F;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,IAAI,sBAAsB,CAE7G;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,IAAI,qBAAqB,CAE7F;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAS1F;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;IAClC;;;;;;;OAOG;sBACe,eAAe,GAAG,IAAI;IAIxC;;;;;;;;;;;;OAYG;oBACmB,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IAgB5D;;;;;;;;;;OAUG;2BAC0B,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAgB1E;;;;;;;;;;OAUG;mCACkC,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;IAanF;;;;OAIG;eACc,OAAO,CAAC,IAAI,CAAC;CAG/B,CAAC;AAEF,YAAY,EACV,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,UAAU,GACX,MAAM,SAAS,CAAC"}

package/dist/google-one-tap/ClerkGoogleOneTapSignIn.js

@@ -0,0 +1,165 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var ClerkGoogleOneTapSignIn_exports = {};
+__export(ClerkGoogleOneTapSignIn_exports, {
+  ClerkGoogleOneTapSignIn: () => ClerkGoogleOneTapSignIn,
+  isCancelledResponse: () => isCancelledResponse,
+  isErrorWithCode: () => isErrorWithCode,
+  isNoSavedCredentialFoundResponse: () => isNoSavedCredentialFoundResponse,
+  isSuccessResponse: () => isSuccessResponse
+});
+module.exports = __toCommonJS(ClerkGoogleOneTapSignIn_exports);
+var import_NativeClerkGoogleSignIn = __toESM(require("../specs/NativeClerkGoogleSignIn"));
+function getNativeModule() {
+  if (!import_NativeClerkGoogleSignIn.default) {
+    throw new Error(
+      "ClerkGoogleSignIn native module is not available. Ensure the @clerk/expo-google-signin plugin is added to your app.json and you have run a development build."
+    );
+  }
+  return import_NativeClerkGoogleSignIn.default;
+}
+function isCancelledResponse(response) {
+  return response.type === "cancelled";
+}
+function isNoSavedCredentialFoundResponse(response) {
+  return response.type === "noSavedCredentialFound";
+}
+function isSuccessResponse(response) {
+  return response.type === "success";
+}
+function isErrorWithCode(error) {
+  return error !== null && typeof error === "object" && "code" in error && typeof error.code === "string" && "message" in error && typeof error.message === "string";
+}
+const ClerkGoogleOneTapSignIn = {
+  /**
+   * Configure Google Sign-In. Must be called before any sign-in methods.
+   *
+   * @param params - Configuration parameters
+   * @param params.webClientId - The web client ID from Google Cloud Console (required)
+   * @param params.hostedDomain - Optional domain restriction
+   * @param params.autoSelectEnabled - Auto-select for single credential (default: false)
+   */
+  configure(params) {
+    getNativeModule().configure(params);
+  },
+  /**
+   * Attempt to sign in with saved credentials (One Tap).
+   *
+   * This method will show the One Tap UI if there are saved credentials,
+   * or return a "noSavedCredentialFound" response if there are none.
+   *
+   * @param params - Sign-in parameters
+   * @param params.nonce - Cryptographic nonce for replay protection
+   * @param params.filterByAuthorizedAccounts - Android only. Filter to previously authorized accounts.
+   * @param params.hint - iOS only. Hint for Google Sign-In.
+   *
+   * @returns Promise resolving to OneTapResponse
+   */
+  async signIn(params) {
+    try {
+      return await getNativeModule().signIn(params != null ? params : null);
+    } catch (error) {
+      if (isErrorWithCode(error)) {
+        if (error.code === "SIGN_IN_CANCELLED") {
+          return { type: "cancelled", data: null };
+        }
+        if (error.code === "NO_SAVED_CREDENTIAL_FOUND") {
+          return { type: "noSavedCredentialFound", data: null };
+        }
+      }
+      throw error;
+    }
+  },
+  /**
+   * Create a new account (shows all Google accounts).
+   *
+   * This method shows the account picker with all available Google accounts,
+   * not just previously authorized ones.
+   *
+   * @param params - Create account parameters
+   * @param params.nonce - Cryptographic nonce for replay protection
+   *
+   * @returns Promise resolving to OneTapResponse
+   */
+  async createAccount(params) {
+    try {
+      return await getNativeModule().createAccount(params != null ? params : null);
+    } catch (error) {
+      if (isErrorWithCode(error)) {
+        if (error.code === "SIGN_IN_CANCELLED") {
+          return { type: "cancelled", data: null };
+        }
+        if (error.code === "NO_SAVED_CREDENTIAL_FOUND") {
+          return { type: "noSavedCredentialFound", data: null };
+        }
+      }
+      throw error;
+    }
+  },
+  /**
+   * Present explicit sign-in UI (Google Sign-In button flow).
+   *
+   * This shows the full Google Sign-In UI, similar to clicking a
+   * "Sign in with Google" button.
+   *
+   * @param params - Explicit sign-in parameters
+   * @param params.nonce - Cryptographic nonce for replay protection
+   *
+   * @returns Promise resolving to OneTapResponse
+   */
+  async presentExplicitSignIn(params) {
+    try {
+      return await getNativeModule().presentExplicitSignIn(params != null ? params : null);
+    } catch (error) {
+      if (isErrorWithCode(error)) {
+        if (error.code === "SIGN_IN_CANCELLED") {
+          return { type: "cancelled", data: null };
+        }
+      }
+      throw error;
+    }
+  },
+  /**
+   * Sign out and clear credential state.
+   *
+   * This disables automatic sign-in until the user signs in again.
+   */
+  async signOut() {
+    await getNativeModule().signOut();
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ClerkGoogleOneTapSignIn,
+  isCancelledResponse,
+  isErrorWithCode,
+  isNoSavedCredentialFoundResponse,
+  isSuccessResponse
+});
+//# sourceMappingURL=ClerkGoogleOneTapSignIn.js.map

package/dist/google-one-tap/ClerkGoogleOneTapSignIn.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/google-one-tap/ClerkGoogleOneTapSignIn.ts"],"sourcesContent":["import NativeClerkGoogleSignIn from '../specs/NativeClerkGoogleSignIn';\nimport type {\n  CancelledResponse,\n  ConfigureParams,\n  CreateAccountParams,\n  ExplicitSignInParams,\n  NoSavedCredentialFound,\n  OneTapResponse,\n  OneTapSuccessResponse,\n  SignInParams,\n} from './types';\n\nfunction getNativeModule(): NonNullable<typeof NativeClerkGoogleSignIn> {\n  if (!NativeClerkGoogleSignIn) {\n    throw new Error(\n      'ClerkGoogleSignIn native module is not available. ' +\n        'Ensure the @clerk/expo-google-signin plugin is added to your app.json and you have run a development build.',\n    );\n  }\n  return NativeClerkGoogleSignIn;\n}\n\n/**\n * Check if a response indicates the user cancelled the sign-in flow.\n */\nexport function isCancelledResponse(response: OneTapResponse): response is CancelledResponse {\n  return response.type === 'cancelled';\n}\n\n/**\n * Check if a response indicates no saved credential was found.\n */\nexport function isNoSavedCredentialFoundResponse(response: OneTapResponse): response is NoSavedCredentialFound {\n  return response.type === 'noSavedCredentialFound';\n}\n\n/**\n * Check if a response is a successful sign-in.\n */\nexport function isSuccessResponse(response: OneTapResponse): response is OneTapSuccessResponse {\n  return response.type === 'success';\n}\n\n/**\n * Check if an error has code and message properties (Google Sign-In error).\n */\nexport function isErrorWithCode(error: unknown): error is { code: string; message: string } {\n  return (\n    error !== null &&\n    typeof error === 'object' &&\n    'code' in error &&\n    typeof (error as { code: unknown }).code === 'string' &&\n    'message' in error &&\n    typeof (error as { message: unknown }).message === 'string'\n  );\n}\n\n/**\n * Internal Google One Tap Sign-In module.\n *\n * This module provides native Google Sign-In functionality using Google's\n * Credential Manager API with full nonce support for replay attack protection.\n *\n * @internal This is an internal module. Use the `useSignInWithGoogle` hook instead.\n * @platform Android, iOS\n */\nexport const ClerkGoogleOneTapSignIn = {\n  /**\n   * Configure Google Sign-In. Must be called before any sign-in methods.\n   *\n   * @param params - Configuration parameters\n   * @param params.webClientId - The web client ID from Google Cloud Console (required)\n   * @param params.hostedDomain - Optional domain restriction\n   * @param params.autoSelectEnabled - Auto-select for single credential (default: false)\n   */\n  configure(params: ConfigureParams): void {\n    getNativeModule().configure(params as any);\n  },\n\n  /**\n   * Attempt to sign in with saved credentials (One Tap).\n   *\n   * This method will show the One Tap UI if there are saved credentials,\n   * or return a \"noSavedCredentialFound\" response if there are none.\n   *\n   * @param params - Sign-in parameters\n   * @param params.nonce - Cryptographic nonce for replay protection\n   * @param params.filterByAuthorizedAccounts - Android only. Filter to previously authorized accounts.\n   * @param params.hint - iOS only. Hint for Google Sign-In.\n   *\n   * @returns Promise resolving to OneTapResponse\n   */\n  async signIn(params?: SignInParams): Promise<OneTapResponse> {\n    try {\n      return (await getNativeModule().signIn((params as any) ?? null)) as unknown as OneTapResponse;\n    } catch (error) {\n      if (isErrorWithCode(error)) {\n        if (error.code === 'SIGN_IN_CANCELLED') {\n          return { type: 'cancelled', data: null };\n        }\n        if (error.code === 'NO_SAVED_CREDENTIAL_FOUND') {\n          return { type: 'noSavedCredentialFound', data: null };\n        }\n      }\n      throw error;\n    }\n  },\n\n  /**\n   * Create a new account (shows all Google accounts).\n   *\n   * This method shows the account picker with all available Google accounts,\n   * not just previously authorized ones.\n   *\n   * @param params - Create account parameters\n   * @param params.nonce - Cryptographic nonce for replay protection\n   *\n   * @returns Promise resolving to OneTapResponse\n   */\n  async createAccount(params?: CreateAccountParams): Promise<OneTapResponse> {\n    try {\n      return (await getNativeModule().createAccount((params as any) ?? null)) as unknown as OneTapResponse;\n    } catch (error) {\n      if (isErrorWithCode(error)) {\n        if (error.code === 'SIGN_IN_CANCELLED') {\n          return { type: 'cancelled', data: null };\n        }\n        if (error.code === 'NO_SAVED_CREDENTIAL_FOUND') {\n          return { type: 'noSavedCredentialFound', data: null };\n        }\n      }\n      throw error;\n    }\n  },\n\n  /**\n   * Present explicit sign-in UI (Google Sign-In button flow).\n   *\n   * This shows the full Google Sign-In UI, similar to clicking a\n   * \"Sign in with Google\" button.\n   *\n   * @param params - Explicit sign-in parameters\n   * @param params.nonce - Cryptographic nonce for replay protection\n   *\n   * @returns Promise resolving to OneTapResponse\n   */\n  async presentExplicitSignIn(params?: ExplicitSignInParams): Promise<OneTapResponse> {\n    try {\n      return (await getNativeModule().presentExplicitSignIn((params as any) ?? null)) as unknown as OneTapResponse;\n    } catch (error) {\n      if (isErrorWithCode(error)) {\n        if (error.code === 'SIGN_IN_CANCELLED') {\n          return { type: 'cancelled', data: null };\n        }\n      }\n      throw error;\n    }\n  },\n\n  /**\n   * Sign out and clear credential state.\n   *\n   * This disables automatic sign-in until the user signs in again.\n   */\n  async signOut(): Promise<void> {\n    await getNativeModule().signOut();\n  },\n};\n\nexport type {\n  ConfigureParams,\n  SignInParams,\n  CreateAccountParams,\n  ExplicitSignInParams,\n  OneTapResponse,\n  OneTapSuccessResponse,\n  CancelledResponse,\n  NoSavedCredentialFound,\n  GoogleUser,\n} from './types';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qCAAoC;AAYpC,SAAS,kBAA+D;AACtE,MAAI,CAAC,+BAAAA,SAAyB;AAC5B,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,SAAO,+BAAAA;AACT;AAKO,SAAS,oBAAoB,UAAyD;AAC3F,SAAO,SAAS,SAAS;AAC3B;AAKO,SAAS,iCAAiC,UAA8D;AAC7G,SAAO,SAAS,SAAS;AAC3B;AAKO,SAAS,kBAAkB,UAA6D;AAC7F,SAAO,SAAS,SAAS;AAC3B;AAKO,SAAS,gBAAgB,OAA4D;AAC1F,SACE,UAAU,QACV,OAAO,UAAU,YACjB,UAAU,SACV,OAAQ,MAA4B,SAAS,YAC7C,aAAa,SACb,OAAQ,MAA+B,YAAY;AAEvD;AAWO,MAAM,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASrC,UAAU,QAA+B;AACvC,oBAAgB,EAAE,UAAU,MAAa;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,OAAO,QAAgD;AAC3D,QAAI;AACF,aAAQ,MAAM,gBAAgB,EAAE,OAAQ,0BAAkB,IAAI;AAAA,IAChE,SAAS,OAAO;AACd,UAAI,gBAAgB,KAAK,GAAG;AAC1B,YAAI,MAAM,SAAS,qBAAqB;AACtC,iBAAO,EAAE,MAAM,aAAa,MAAM,KAAK;AAAA,QACzC;AACA,YAAI,MAAM,SAAS,6BAA6B;AAC9C,iBAAO,EAAE,MAAM,0BAA0B,MAAM,KAAK;AAAA,QACtD;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,cAAc,QAAuD;AACzE,QAAI;AACF,aAAQ,MAAM,gBAAgB,EAAE,cAAe,0BAAkB,IAAI;AAAA,IACvE,SAAS,OAAO;AACd,UAAI,gBAAgB,KAAK,GAAG;AAC1B,YAAI,MAAM,SAAS,qBAAqB;AACtC,iBAAO,EAAE,MAAM,aAAa,MAAM,KAAK;AAAA,QACzC;AACA,YAAI,MAAM,SAAS,6BAA6B;AAC9C,iBAAO,EAAE,MAAM,0BAA0B,MAAM,KAAK;AAAA,QACtD;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,sBAAsB,QAAwD;AAClF,QAAI;AACF,aAAQ,MAAM,gBAAgB,EAAE,sBAAuB,0BAAkB,IAAI;AAAA,IAC/E,SAAS,OAAO;AACd,UAAI,gBAAgB,KAAK,GAAG;AAC1B,YAAI,MAAM,SAAS,qBAAqB;AACtC,iBAAO,EAAE,MAAM,aAAa,MAAM,KAAK;AAAA,QACzC;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UAAyB;AAC7B,UAAM,gBAAgB,EAAE,QAAQ;AAAA,EAClC;AACF;","names":["NativeClerkGoogleSignIn"]}

package/dist/google-one-tap/index.d.ts

@@ -0,0 +1,3 @@
+export { ClerkGoogleOneTapSignIn, isCancelledResponse, isNoSavedCredentialFoundResponse, isSuccessResponse, isErrorWithCode, } from './ClerkGoogleOneTapSignIn';
+export type { ConfigureParams, SignInParams, CreateAccountParams, ExplicitSignInParams, OneTapResponse, OneTapSuccessResponse, CancelledResponse, NoSavedCredentialFound, GoogleUser, GoogleSignInError, GoogleSignInErrorCode, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/google-one-tap/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/google-one-tap/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,gCAAgC,EAChC,iBAAiB,EACjB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACV,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,UAAU,EACV,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,SAAS,CAAC"}