@dynamic-labs/sdk-react-core 3.0.0-alpha.3 → 3.0.0-alpha.31

package/src/lib/utils/hooks/useSocialAuth/useSocialAuth.cjs

@@ -34,19 +34,17 @@ require('@dynamic-labs/store');
 var oauth = require('../../../data/api/oauth/oauth.cjs');
 require('../../../locale/locale.cjs');
 var randomString = require('../../functions/randomString/randomString.cjs');
-var stringifyURIQuery = require('../../functions/stringifyURIQuery/stringifyURIQuery.cjs');
-require('viem');
-require('viem/chains');
 require('../../../context/AccessDeniedContext/AccessDeniedContext.cjs');
 require('../../../context/AccountExistsContext/AccountExistsContext.cjs');
 require('../../../context/UserWalletsContext/UserWalletsContext.cjs');
 require('../../../context/VerificationContext/VerificationContext.cjs');
 require('react-dom');
 require('../../../context/WalletContext/WalletContext.cjs');
+require('../useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/constants.cjs');
 require('../../../context/ThemeContext/ThemeContext.cjs');
 require('../useUserUpdateRequest/useUpdateUser/userFieldsSchema.cjs');
 var useUserAuth = require('../useUserAuth/useUserAuth.cjs');
-var farcaster = require('./farcaster.cjs');
+var farcaster = require('./farcaster/farcaster.cjs');
 require('yup');
 require('../../../context/MockContext/MockContext.cjs');
 require('../../../views/CollectUserDataView/useFields.cjs');
@@ -86,6 +84,17 @@ require('../../../widgets/DynamicWidget/components/DynamicWidgetHeader/DynamicWi
 require('../../../widgets/DynamicWidget/context/DynamicWidgetContext.cjs');
 require('../../../views/TransactionConfirmationView/helpers/transactionErrorMessage.cjs');
 require('../../../widgets/DynamicWidget/views/ManagePasskeysWidgetView/PasskeyCard/PasskeyCard.cjs');
+require('../../../../polyfills.cjs');
+require('../../../context/ErrorBoundary/ErrorBoundaryBase.cjs');
+require('../../../context/ErrorBoundary/ErrorBoundaryContext.cjs');
+require('../../../widgets/DynamicBridgeWidget/context/DynamicBridgeWidgetContext/DynamicBridgeWidgetContext.cjs');
+require('../../../widgets/DynamicWidget/components/DynamicWidgetCard/DynamicWidgetCard.cjs');
+require('../../../context/WidgetRegistry/WidgetRegistryContextProvider.cjs');
+require('../../../context/FundingContext/FundingContext.cjs');
+require('../../../context/SendBalanceContext/SendBalanceContext.cjs');
+require('../../../context/ConnectWithOtpContext/ConnectWithOtpContext.cjs');
+require('../../../context/ConnectWithOtpContext/constants.cjs');
+require('../../../context/ReinitializeContext/ReinitializeContextProvider.cjs');
 var useInternalDynamicContext = require('../../../context/DynamicContext/useDynamicContext/useInternalDynamicContext.cjs');
 
 const socialProviders = [
@@ -97,13 +106,13 @@ const socialProviders = [
     'github',
     'google',
     'instagram',
+    'telegram',
     'twitch',
     'twitter',
 ];
 // pkce params are only required for twitter and break if added for other providers, like google
 // so we should only add provider that support pkce to this list
 const providersRequiringPkce = ['twitter', 'github'];
-const providersWithoutWindowOpenerRefence = ['twitter'];
 // Hook to handle common social auth logic (for social linking and social sign in)
 const useSocialAuth = ({ sessionTimeout, onSettled, onError, onFarcasterUrl, }) => {
     const { environmentId, setShowAuthFlow, projectSettings, consumeNonce, redirectUrl, } = useInternalDynamicContext.useInternalDynamicContext();
@@ -113,14 +122,12 @@ const useSocialAuth = ({ sessionTimeout, onSettled, onError, onFarcasterUrl, })
     });
     const [isProcessing, setIsProcessing] = React.useState(false);
     const [error, setError] = React.useState();
-    const providersWaitingOauthMessage = React.useRef({});
-    const authWindowInterval = React.useRef();
-    const shouldPool = React.useRef(false);
     const clearError = () => {
         setError(undefined);
         setContextError(undefined);
     };
     const onFailed = (provider, reason, options) => {
+        setIsProcessing(false);
         onError === null || onError === void 0 ? void 0 : onError();
         onSettled === null || onSettled === void 0 ? void 0 : onSettled();
         if (provider && (options === null || options === void 0 ? void 0 : options.raiseAuthFailure))
@@ -133,31 +140,10 @@ const useSocialAuth = ({ sessionTimeout, onSettled, onError, onFarcasterUrl, })
     const handleError = (provider, code, message, options) => {
         const error = { code, message };
         logger.logger.error(message);
-        setIsProcessing(false);
         setError(error);
         setErrorMessage(code);
         onFailed(provider, { error }, options);
     };
-    const poolOauthResult = (provider, state) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        if (!shouldPool.current) {
-            return;
-        }
-        const result = yield oauth.getOAuthResult(environmentId, provider, {
-            state,
-        });
-        if ((result === null || result === void 0 ? void 0 : result.status) !== sdkApiCore.OauthResultStatus.Completed) {
-            setTimeout(() => poolOauthResult(provider, state), 1000);
-            return;
-        }
-        shouldPool.current = false;
-        const authMessage = {
-            code: result === null || result === void 0 ? void 0 : result.code,
-            error: result === null || result === void 0 ? void 0 : result.error,
-            provider,
-            type: 'authorization_response',
-        };
-        window.postMessage(authMessage, '*');
-    });
     const checkValidProvider = (provider, authMode) => {
         if (!provider) {
             handleError(provider, types.SocialOAuthErrorCode.NO_PROVIDER, 'Provider is required', { raiseAuthFailure: authMode === 'signin' });
@@ -194,7 +180,6 @@ const useSocialAuth = ({ sessionTimeout, onSettled, onError, onFarcasterUrl, })
     });
     const connectSocialAccount = (_a) => _tslib.__awaiter(void 0, [_a], void 0, function* ({ authMode, provider, validator, captchaToken, }) {
         var _b, _c;
-        clearInterval(authWindowInterval.current);
         clearError();
         setIsProcessing(true);
         if (!authMode) {
@@ -215,161 +200,81 @@ const useSocialAuth = ({ sessionTimeout, onSettled, onError, onFarcasterUrl, })
         });
         if (provider === sdkApiCore.ProviderEnum.Farcaster)
             return connectWithFarcaster(authMode, { captchaToken });
-        const authWindow = window.open('', '_blank', 'width=500,height=600');
         const state = randomString.randomString(8);
         const verifier = randomString.randomString(43);
-        const clearListeners = () => {
-            window.removeEventListener('message', handleAuthWindowMessage);
-            providersWaitingOauthMessage.current = Object.assign(Object.assign({}, providersWaitingOauthMessage.current), { [provider]: false });
-        };
-        const handleAuthWindowMessage = (event) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-            var _d, _e;
-            const message = event.data;
-            const apiProvider = getProviderByType.getProviderByType((_d = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.providers) !== null && _d !== void 0 ? _d : [], provider);
-            if (!(apiProvider === null || apiProvider === void 0 ? void 0 : apiProvider.redirectUrl)) {
-                return;
-            }
-            let expectedOrigin = window.location.origin;
-            if (!providersWithoutWindowOpenerRefence.includes(provider)) {
-                try {
-                    const redirectUri = new URL(apiProvider.redirectUrl);
-                    expectedOrigin = redirectUri.origin;
-                }
-                catch (e) {
-                    logger.logger.error('Failed to parse social provider redirect url', {
-                        error: e,
-                    });
-                    return;
-                }
-            }
-            if ((message === null || message === void 0 ? void 0 : message.type) === 'origin_check' && authWindow) {
-                logger.logger.debug('Origin check message received. Sending response now.', {
-                    data: message,
-                    expectedOrigin,
-                });
-                authWindow.postMessage('origin_check_response', expectedOrigin);
-                return;
-            }
-            const isAuthorizationMessage = (message === null || message === void 0 ? void 0 : message.type) === 'authorization_response';
-            if (isAuthorizationMessage) {
-                logger.logger.debug('Message received', { data: message });
-            }
-            const isExpectedOrigin = event.origin === expectedOrigin;
-            const isValidMessage = isAuthorizationMessage &&
-                (message === null || message === void 0 ? void 0 : message.provider) === provider &&
-                isExpectedOrigin;
-            // don't process invalid messages for provider
-            if (!isValidMessage) {
-                return;
-            }
-            setIsProcessing(true);
-            if (!((_e = providersWaitingOauthMessage.current) === null || _e === void 0 ? void 0 : _e[provider])) {
-                handleError(provider, types.SocialOAuthErrorCode.SESSION_TIMEOUT, `Connecting ${provider} account session timeout.`, { raiseAuthFailure: authMode === 'signin' });
-                return;
-            }
-            clearListeners();
-            const { code, error, state: authState } = message;
-            if (error && error !== 'undefined') {
-                handleError(provider, types.SocialOAuthErrorCode.OAUTH_ERROR, `Failed to connect ${provider} social account: ${error}`, { raiseAuthFailure: authMode === 'signin' });
-                return;
-            }
-            // check that the state we receive from message is the same state we calculated earlier
-            // this could be an attack
-            // this state check is used only by providers with an open window opener reference (eg, not twitter)
-            if (!providersWithoutWindowOpenerRefence.includes(provider) &&
-                state !== authState) {
-                handleError(provider, types.SocialOAuthErrorCode.OAUTH_ERROR, `Failed to connect ${provider} social account: Invalid random state`, { raiseAuthFailure: authMode === 'signin' });
-                return;
-            }
-            if (!code) {
-                handleError(provider, types.SocialOAuthErrorCode.NO_AUTH_CODE, `Failed to connect ${provider} social account: no authorization code`, { raiseAuthFailure: authMode === 'signin' });
-                return;
-            }
-            if (authMode === 'signin') {
-                const apiCall = () => oauth.signInOAuth(environmentId, provider, {
-                    captchaToken,
-                    code,
-                    codeVerifier: verifier,
-                    state,
-                });
-                yield signInAccount(provider, apiCall);
-            }
-            else {
-                const apiCall = () => oauth.verifyOAuth(environmentId, provider, {
-                    code,
-                    codeVerifier: verifier,
-                    state,
-                });
-                yield linkAccount(provider, apiCall);
-            }
-            setIsProcessing(false);
-        });
-        const loginUrl = getOauthLoginUrl.getOauthLoginUrl((_b = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.providers) !== null && _b !== void 0 ? _b : [], provider);
-        if (!loginUrl) {
+        const loginUrlString = getOauthLoginUrl.getOauthLoginUrl((_b = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.providers) !== null && _b !== void 0 ? _b : [], provider);
+        if (!loginUrlString) {
             handleError(provider, types.SocialOAuthErrorCode.NO_OAUTH_URL, `Failed to get login url to connect social account: ${provider}`, { raiseAuthFailure: authMode === 'signin' });
             return;
         }
-        if (!((_c = providersWaitingOauthMessage.current) === null || _c === void 0 ? void 0 : _c[provider])) {
-            window.addEventListener('message', handleAuthWindowMessage);
-            providersWaitingOauthMessage.current = Object.assign(Object.assign({}, providersWaitingOauthMessage.current), { [provider]: true });
-        }
-        // add state param for all providers
-        const stateParam = stringifyURIQuery.stringifyURIQuery({
-            state,
-        });
-        let oauthLoginUrl = `${loginUrl}&${stateParam}`;
+        const oauthLoginUrl = new URL(loginUrlString);
+        oauthLoginUrl.searchParams.set('state', state);
         // only add pkce params for providers that support/require it
         if (providersRequiringPkce.includes(provider)) {
             const digest = yield digestSHA256.digestSHA256(verifier);
-            const pkceParams = stringifyURIQuery.stringifyURIQuery({
-                code_challenge: encodeBase64URL.encodeBase64URL(digest),
-                code_challenge_method: 'S256',
-            });
-            oauthLoginUrl = `${oauthLoginUrl}&${pkceParams}`;
+            oauthLoginUrl.searchParams.set('code_challenge', encodeBase64URL.encodeBase64URL(digest));
+            oauthLoginUrl.searchParams.set('code_challenge_method', 'S256');
         }
-        authWindow === null || authWindow === void 0 ? void 0 : authWindow.location.assign(oauthLoginUrl);
-        if (!providersWithoutWindowOpenerRefence.includes(provider)) {
-            // For provider that support window.opener, we need to clear all states/listeners when the window is closed
-            authWindowInterval.current = setInterval(() => {
-                var _a;
-                if (!(authWindow === null || authWindow === void 0 ? void 0 : authWindow.closed)) {
-                    return;
+        try {
+            const authCode = yield utils.Oauth2Service.getOauthCode({
+                apiProvider: getProviderByType.getProviderByType((_c = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.providers) !== null && _c !== void 0 ? _c : [], provider),
+                getOAuthResultFromApi: () => oauth.getOAuthResult(environmentId, provider, {
+                    state,
+                }),
+                isMobile: utils.isMobile(),
+                oauthLoginUrl,
+                onSettled,
+                provider,
+                sessionTimeout,
+                setIsProcessing,
+                state,
+            });
+            if (authMode === 'signin') {
+                if (provider === sdkApiCore.ProviderEnum.Telegram) {
+                    const apiCall = () => oauth.telegramSignIn(environmentId, { state });
+                    yield signInAccount(provider, apiCall);
                 }
-                clearInterval(authWindowInterval.current);
-                setIsProcessing(false);
-                // user didn't complete oauth
-                if ((_a = providersWaitingOauthMessage.current) === null || _a === void 0 ? void 0 : _a[provider]) {
-                    onFailed(provider, 'user-cancelled');
+                else {
+                    const apiCall = () => oauth.signInOAuth(environmentId, provider, {
+                        captchaToken,
+                        code: authCode,
+                        codeVerifier: verifier,
+                        state,
+                    });
+                    yield signInAccount(provider, apiCall);
                 }
-            }, 2000);
-        }
-        else {
-            // For provider that don't support window.opener, we need to use a timeout to pool the oauth result
-            // If we don't get a valid result in {async sessionTimeout} ms, we'll assume the user closed the window
-            // and we'll clear all states/listeners
-            // start pooling oauth result
-            shouldPool.current = true;
-            poolOauthResult(provider, state);
-            // if this is mobile, set a longer timeout to allow the user to login to the provider in the browser
-            let authWindowTimeout = sessionTimeout;
-            if (utils.isMobile()) {
-                authWindowTimeout = authWindowTimeout * 3;
             }
-            authWindowInterval.current = setInterval(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-                var _f;
-                shouldPool.current = false;
-                // clear all states/listeners, assuming user closed the window before completing oauth
-                if ((_f = providersWaitingOauthMessage.current) === null || _f === void 0 ? void 0 : _f[provider]) {
-                    clearListeners();
-                    handleError(provider, types.SocialOAuthErrorCode.OAUTH_WINDOW_TIMEOUT, `Connecting ${provider} account window timeout.`, { raiseAuthFailure: authMode === 'signin' });
+            else {
+                if (provider === sdkApiCore.ProviderEnum.Telegram) {
+                    const apiCall = () => oauth.telegramVerify(environmentId, { state });
+                    yield linkAccount(provider, apiCall);
+                }
+                else {
+                    const apiCall = () => oauth.verifyOAuth(environmentId, provider, {
+                        code: authCode,
+                        codeVerifier: verifier,
+                        state,
+                    });
+                    yield linkAccount(provider, apiCall);
                 }
-                clearInterval(authWindowInterval.current);
-                setIsProcessing(false);
-                onSettled === null || onSettled === void 0 ? void 0 : onSettled();
-            }), authWindowTimeout);
+            }
+        }
+        catch (error) {
+            if (!utils.Oauth2Service.isGetOauthCodeError(error)) {
+                logger.logger.error('Social connection failed with unexpected error:', error);
+                onFailed(provider, { error }, { raiseAuthFailure: authMode === 'signin' });
+                return;
+            }
+            if (error === 'user-cancelled')
+                onFailed(provider, 'user-cancelled');
+            else {
+                handleError(provider, error.code, error.message, {
+                    raiseAuthFailure: authMode === 'signin',
+                });
+            }
         }
     });
-    const connectWithFarcaster = (authMode_1, _g) => _tslib.__awaiter(void 0, [authMode_1, _g], void 0, function* (authMode, { captchaToken }) {
+    const connectWithFarcaster = (authMode_1, _d) => _tslib.__awaiter(void 0, [authMode_1, _d], void 0, function* (authMode, { captchaToken }) {
         const dynamicNonce = consumeNonce();
         const domain = utils.PlatformService.getHost();
         const data = yield farcaster.connect({