@edge-markets/connect-link 1.3.0 → 1.4.0

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { EdgeLinkConfigBase, EdgeScope, EdgeLinkSuccess, EdgeLinkExit, PKCEPair } from '@edge-markets/connect';
-export { ALL_EDGE_SCOPES, EDGE_SCOPES, EdgeEnvironment, EdgeError, EdgeLinkEvent, EdgeLinkEventName, EdgeLinkExit, EdgeLinkSuccess, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, PKCEPair, isEdgeError } from '@edge-markets/connect';
+import { EdgeLinkConfigBase, EdgeScope, EdgeLinkSuccess, EdgeLinkExit, SdkGeolocation, PKCEPair } from '@edge-markets/connect';
+export { ALL_EDGE_SCOPES, EDGE_SCOPES, EdgeEnvironment, EdgeError, EdgeLinkEvent, EdgeLinkEventName, EdgeLinkExit, EdgeLinkSuccess, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, PKCEPair, SdkGeolocation, isEdgeError } from '@edge-markets/connect';
 
 /**
  * EdgeLink - Popup Authentication for EDGE Connect
@@ -99,6 +99,7 @@ declare class EdgeLink {
     private state;
     private messageHandler;
     private isDestroyed;
+    private isInitializing;
     /**
      * Creates a new EdgeLink instance.
      *
@@ -253,6 +254,7 @@ declare function useEdgeLink(config: UseEdgeLinkConfig): UseEdgeLinkReturn;
  * verify.destroy()
  * ```
  */
+
 /**
  * Event types emitted during the transfer verification flow.
  *
@@ -418,6 +420,25 @@ interface EdgeTransferVerifyConfig {
      * ```
      */
     onEvent?: (event: TransferVerifyEvent) => void;
+    /**
+     * SDK-reported geolocation to forward to the verification page.
+     *
+     * Collect this using `collectGeolocation()` before opening the verification UI.
+     * The server cross-references it against IP-based geolocation for stronger
+     * state-level enforcement.
+     *
+     * @example
+     * ```typescript
+     * import { collectGeolocation } from '@edge-markets/connect-link'
+     *
+     * const geo = await collectGeolocation()
+     * const verify = new EdgeTransferVerify({
+     *   // ...
+     *   geolocation: geo ?? undefined,
+     * })
+     * ```
+     */
+    geolocation?: SdkGeolocation;
 }
 /**
  * EdgeTransferVerify - Transfer verification launcher for EDGE Connect.
@@ -600,6 +621,8 @@ declare class EdgeTransferVerify {
      * Handles the loaded event from the verification page.
      *
      * The verification UI is ready for user interaction.
+     * If geolocation data was provided, forwards it to the verification page
+     * via postMessage for server-side cross-referencing.
      */
     private handleLoaded;
     /**
@@ -718,6 +741,59 @@ declare class IframeManager {
     private hideLoadingState;
 }
 
+/**
+ * Browser Geolocation Collector for EDGE Connect
+ *
+ * Collects the user's geolocation from the Browser Geolocation API.
+ * The result can be passed to {@link EdgeTransferVerify} for cross-referencing
+ * against server-side IP-based geolocation.
+ *
+ * This function **never throws** — it returns `null` on permission denial,
+ * timeout, or API unavailability.
+ *
+ * @module @edge-markets/connect-link
+ */
+
+/**
+ * Options for geolocation collection.
+ */
+interface GeolocationOptions {
+    /** Timeout in milliseconds (default: 10000) */
+    timeout?: number;
+    /** Maximum age of a cached position in milliseconds (default: 60000) */
+    maximumAge?: number;
+    /** Whether to request high-accuracy positioning (default: false) */
+    enableHighAccuracy?: boolean;
+}
+/**
+ * Collects the user's geolocation from the Browser Geolocation API.
+ *
+ * Returns `null` silently if:
+ * - The Geolocation API is not available
+ * - The user denies permission
+ * - The request times out
+ * - Any other error occurs
+ *
+ * @param options - Optional configuration for the geolocation request
+ * @returns The user's geolocation, or `null` if unavailable
+ *
+ * @example
+ * ```typescript
+ * import { collectGeolocation, EdgeTransferVerify } from '@edge-markets/connect-link'
+ *
+ * const geo = await collectGeolocation()
+ *
+ * const verify = new EdgeTransferVerify({
+ *   verificationUrl: session.verificationUrl,
+ *   sessionId: session.sessionId,
+ *   container: document.getElementById('verify-container')!,
+ *   geolocation: geo ?? undefined,
+ *   onSuccess: (event) => console.log('Verified!'),
+ * })
+ * ```
+ */
+declare function collectGeolocation(options?: GeolocationOptions): Promise<SdkGeolocation | null>;
+
 /**
  * PKCE (Proof Key for Code Exchange) Utilities
  *
@@ -802,4 +878,4 @@ declare function generateState(): string;
  */
 declare function assertCryptoAvailable(): void;
 
-export { EdgeLink, type EdgeLinkConfig, type EdgeLinkOpenOptions, EdgeTransferVerify, type EdgeTransferVerifyConfig, type IframeCallbacks, type IframeConfig, IframeManager, type TransferVerifyEvent, type TransferVerifyEventType, type TransferVerifyMode, type UseEdgeLinkConfig, type UseEdgeLinkReturn, assertCryptoAvailable, generatePKCE, generateState, useEdgeLink };
+export { EdgeLink, type EdgeLinkConfig, type EdgeLinkOpenOptions, EdgeTransferVerify, type EdgeTransferVerifyConfig, type GeolocationOptions, type IframeCallbacks, type IframeConfig, IframeManager, type TransferVerifyEvent, type TransferVerifyEventType, type TransferVerifyMode, type UseEdgeLinkConfig, type UseEdgeLinkReturn, assertCryptoAvailable, collectGeolocation, generatePKCE, generateState, useEdgeLink };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { EdgeLinkConfigBase, EdgeScope, EdgeLinkSuccess, EdgeLinkExit, PKCEPair } from '@edge-markets/connect';
-export { ALL_EDGE_SCOPES, EDGE_SCOPES, EdgeEnvironment, EdgeError, EdgeLinkEvent, EdgeLinkEventName, EdgeLinkExit, EdgeLinkSuccess, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, PKCEPair, isEdgeError } from '@edge-markets/connect';
+import { EdgeLinkConfigBase, EdgeScope, EdgeLinkSuccess, EdgeLinkExit, SdkGeolocation, PKCEPair } from '@edge-markets/connect';
+export { ALL_EDGE_SCOPES, EDGE_SCOPES, EdgeEnvironment, EdgeError, EdgeLinkEvent, EdgeLinkEventName, EdgeLinkExit, EdgeLinkSuccess, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, PKCEPair, SdkGeolocation, isEdgeError } from '@edge-markets/connect';
 
 /**
  * EdgeLink - Popup Authentication for EDGE Connect
@@ -99,6 +99,7 @@ declare class EdgeLink {
     private state;
     private messageHandler;
     private isDestroyed;
+    private isInitializing;
     /**
      * Creates a new EdgeLink instance.
      *
@@ -253,6 +254,7 @@ declare function useEdgeLink(config: UseEdgeLinkConfig): UseEdgeLinkReturn;
  * verify.destroy()
  * ```
  */
+
 /**
  * Event types emitted during the transfer verification flow.
  *
@@ -418,6 +420,25 @@ interface EdgeTransferVerifyConfig {
      * ```
      */
     onEvent?: (event: TransferVerifyEvent) => void;
+    /**
+     * SDK-reported geolocation to forward to the verification page.
+     *
+     * Collect this using `collectGeolocation()` before opening the verification UI.
+     * The server cross-references it against IP-based geolocation for stronger
+     * state-level enforcement.
+     *
+     * @example
+     * ```typescript
+     * import { collectGeolocation } from '@edge-markets/connect-link'
+     *
+     * const geo = await collectGeolocation()
+     * const verify = new EdgeTransferVerify({
+     *   // ...
+     *   geolocation: geo ?? undefined,
+     * })
+     * ```
+     */
+    geolocation?: SdkGeolocation;
 }
 /**
  * EdgeTransferVerify - Transfer verification launcher for EDGE Connect.
@@ -600,6 +621,8 @@ declare class EdgeTransferVerify {
      * Handles the loaded event from the verification page.
      *
      * The verification UI is ready for user interaction.
+     * If geolocation data was provided, forwards it to the verification page
+     * via postMessage for server-side cross-referencing.
      */
     private handleLoaded;
     /**
@@ -718,6 +741,59 @@ declare class IframeManager {
     private hideLoadingState;
 }
 
+/**
+ * Browser Geolocation Collector for EDGE Connect
+ *
+ * Collects the user's geolocation from the Browser Geolocation API.
+ * The result can be passed to {@link EdgeTransferVerify} for cross-referencing
+ * against server-side IP-based geolocation.
+ *
+ * This function **never throws** — it returns `null` on permission denial,
+ * timeout, or API unavailability.
+ *
+ * @module @edge-markets/connect-link
+ */
+
+/**
+ * Options for geolocation collection.
+ */
+interface GeolocationOptions {
+    /** Timeout in milliseconds (default: 10000) */
+    timeout?: number;
+    /** Maximum age of a cached position in milliseconds (default: 60000) */
+    maximumAge?: number;
+    /** Whether to request high-accuracy positioning (default: false) */
+    enableHighAccuracy?: boolean;
+}
+/**
+ * Collects the user's geolocation from the Browser Geolocation API.
+ *
+ * Returns `null` silently if:
+ * - The Geolocation API is not available
+ * - The user denies permission
+ * - The request times out
+ * - Any other error occurs
+ *
+ * @param options - Optional configuration for the geolocation request
+ * @returns The user's geolocation, or `null` if unavailable
+ *
+ * @example
+ * ```typescript
+ * import { collectGeolocation, EdgeTransferVerify } from '@edge-markets/connect-link'
+ *
+ * const geo = await collectGeolocation()
+ *
+ * const verify = new EdgeTransferVerify({
+ *   verificationUrl: session.verificationUrl,
+ *   sessionId: session.sessionId,
+ *   container: document.getElementById('verify-container')!,
+ *   geolocation: geo ?? undefined,
+ *   onSuccess: (event) => console.log('Verified!'),
+ * })
+ * ```
+ */
+declare function collectGeolocation(options?: GeolocationOptions): Promise<SdkGeolocation | null>;
+
 /**
  * PKCE (Proof Key for Code Exchange) Utilities
  *
@@ -802,4 +878,4 @@ declare function generateState(): string;
  */
 declare function assertCryptoAvailable(): void;
 
-export { EdgeLink, type EdgeLinkConfig, type EdgeLinkOpenOptions, EdgeTransferVerify, type EdgeTransferVerifyConfig, type IframeCallbacks, type IframeConfig, IframeManager, type TransferVerifyEvent, type TransferVerifyEventType, type TransferVerifyMode, type UseEdgeLinkConfig, type UseEdgeLinkReturn, assertCryptoAvailable, generatePKCE, generateState, useEdgeLink };
+export { EdgeLink, type EdgeLinkConfig, type EdgeLinkOpenOptions, EdgeTransferVerify, type EdgeTransferVerifyConfig, type GeolocationOptions, type IframeCallbacks, type IframeConfig, IframeManager, type TransferVerifyEvent, type TransferVerifyEventType, type TransferVerifyMode, type UseEdgeLinkConfig, type UseEdgeLinkReturn, assertCryptoAvailable, collectGeolocation, generatePKCE, generateState, useEdgeLink };

package/dist/index.js

@@ -29,6 +29,7 @@ __export(index_exports, {
   EdgeTransferVerify: () => EdgeTransferVerify,
   IframeManager: () => IframeManager,
   assertCryptoAvailable: () => assertCryptoAvailable,
+  collectGeolocation: () => collectGeolocation,
   generatePKCE: () => generatePKCE,
   generateState: () => generateState,
   isEdgeError: () => import_connect3.isEdgeError,
@@ -332,6 +333,7 @@ var EdgeLink = class {
     this.state = null;
     this.messageHandler = null;
     this.isDestroyed = false;
+    this.isInitializing = false;
     if (!config.clientId) {
       throw new Error("EdgeLink: clientId is required");
     }
@@ -376,7 +378,7 @@ var EdgeLink = class {
     if (this.isDestroyed) {
       throw new Error("EdgeLink: Cannot open - instance has been destroyed");
     }
-    if (this.popup.isOpen()) {
+    if (this.popup.isOpen() || this.isInitializing) {
       this.popup.focus();
       return;
     }
@@ -439,6 +441,7 @@ var EdgeLink = class {
    * Initializes PKCE and navigates popup to auth URL.
    */
   async initializeAuth(scopes) {
+    this.isInitializing = true;
     try {
       this.pkce = await generatePKCE();
       this.state = generateState();
@@ -455,6 +458,8 @@ var EdgeLink = class {
           message: error instanceof Error ? error.message : "Failed to initialize"
         }
       });
+    } finally {
+      this.isInitializing = false;
     }
   }
   /**
@@ -486,6 +491,7 @@ var EdgeLink = class {
    */
   setupMessageListener() {
     this.messageHandler = (event) => {
+      if (this.isDestroyed) return;
       if (event.origin !== this.expectedOrigin) {
         return;
       }
@@ -530,7 +536,7 @@ var EdgeLink = class {
         }
       });
       this.close();
-      throw new import_connect.EdgeStateMismatchError();
+      return;
     }
     if (!this.pkce?.verifier) {
       this.config.onExit?.({
@@ -1160,9 +1166,27 @@ var EdgeTransferVerify = class {
    * Handles the loaded event from the verification page.
    *
    * The verification UI is ready for user interaction.
+   * If geolocation data was provided, forwards it to the verification page
+   * via postMessage for server-side cross-referencing.
    */
   handleLoaded(event) {
     this.config.onLoaded?.(event);
+    if (this.config.geolocation) {
+      const target = this.mode === "popup" ? this.popupManager?.getWindow?.() : this.iframeManager?.getContentWindow?.();
+      if (target) {
+        target.postMessage(
+          {
+            type: "edge:transfer-verify:geo",
+            nonce: this.nonce,
+            latitude: this.config.geolocation.latitude,
+            longitude: this.config.geolocation.longitude,
+            accuracy: this.config.geolocation.accuracy,
+            timestamp: this.config.geolocation.timestamp
+          },
+          this.expectedOrigin
+        );
+      }
+    }
   }
   /**
    * Handles user closing the popup manually (popup mode only).
@@ -1184,6 +1208,30 @@ var EdgeTransferVerify = class {
   }
 };
 
+// src/geolocation.ts
+async function collectGeolocation(options) {
+  if (typeof navigator === "undefined" || !navigator.geolocation) {
+    return null;
+  }
+  try {
+    const position = await new Promise((resolve, reject) => {
+      navigator.geolocation.getCurrentPosition(resolve, reject, {
+        timeout: options?.timeout ?? 1e4,
+        maximumAge: options?.maximumAge ?? 6e4,
+        enableHighAccuracy: options?.enableHighAccuracy ?? false
+      });
+    });
+    return {
+      latitude: position.coords.latitude,
+      longitude: position.coords.longitude,
+      accuracy: position.coords.accuracy,
+      timestamp: new Date(position.timestamp).toISOString()
+    };
+  } catch {
+    return null;
+  }
+}
+
 // src/index.ts
 var import_connect3 = require("@edge-markets/connect");
 var import_connect4 = require("@edge-markets/connect");
@@ -1198,6 +1246,7 @@ var import_connect4 = require("@edge-markets/connect");
   EdgeTransferVerify,
   IframeManager,
   assertCryptoAvailable,
+  collectGeolocation,
   generatePKCE,
   generateState,
   isEdgeError,

package/dist/index.mjs

@@ -1,10 +1,9 @@
 // src/edge-link.ts
 import {
-  getEnvironmentConfig,
   ALL_EDGE_SCOPES,
-  formatScopesForEnvironment,
   EdgePopupBlockedError,
-  EdgeStateMismatchError
+  formatScopesForEnvironment,
+  getEnvironmentConfig
 } from "@edge-markets/connect";
 
 // src/pkce.ts
@@ -300,6 +299,7 @@ var EdgeLink = class {
     this.state = null;
     this.messageHandler = null;
     this.isDestroyed = false;
+    this.isInitializing = false;
     if (!config.clientId) {
       throw new Error("EdgeLink: clientId is required");
     }
@@ -344,7 +344,7 @@ var EdgeLink = class {
     if (this.isDestroyed) {
       throw new Error("EdgeLink: Cannot open - instance has been destroyed");
     }
-    if (this.popup.isOpen()) {
+    if (this.popup.isOpen() || this.isInitializing) {
       this.popup.focus();
       return;
     }
@@ -407,6 +407,7 @@ var EdgeLink = class {
    * Initializes PKCE and navigates popup to auth URL.
    */
   async initializeAuth(scopes) {
+    this.isInitializing = true;
     try {
       this.pkce = await generatePKCE();
       this.state = generateState();
@@ -423,6 +424,8 @@ var EdgeLink = class {
           message: error instanceof Error ? error.message : "Failed to initialize"
         }
       });
+    } finally {
+      this.isInitializing = false;
     }
   }
   /**
@@ -454,6 +457,7 @@ var EdgeLink = class {
    */
   setupMessageListener() {
     this.messageHandler = (event) => {
+      if (this.isDestroyed) return;
       if (event.origin !== this.expectedOrigin) {
         return;
       }
@@ -498,7 +502,7 @@ var EdgeLink = class {
         }
       });
       this.close();
-      throw new EdgeStateMismatchError();
+      return;
     }
     if (!this.pkce?.verifier) {
       this.config.onExit?.({
@@ -616,9 +620,7 @@ function useEdgeLink(config) {
 }
 
 // src/edge-transfer-verify.ts
-import {
-  EdgePopupBlockedError as EdgePopupBlockedError2
-} from "@edge-markets/connect";
+import { EdgePopupBlockedError as EdgePopupBlockedError2 } from "@edge-markets/connect";
 
 // src/iframe-manager.ts
 var DEFAULT_TITLE = "EDGE Connect Transfer Verification";
@@ -1130,9 +1132,27 @@ var EdgeTransferVerify = class {
    * Handles the loaded event from the verification page.
    *
    * The verification UI is ready for user interaction.
+   * If geolocation data was provided, forwards it to the verification page
+   * via postMessage for server-side cross-referencing.
    */
   handleLoaded(event) {
     this.config.onLoaded?.(event);
+    if (this.config.geolocation) {
+      const target = this.mode === "popup" ? this.popupManager?.getWindow?.() : this.iframeManager?.getContentWindow?.();
+      if (target) {
+        target.postMessage(
+          {
+            type: "edge:transfer-verify:geo",
+            nonce: this.nonce,
+            latitude: this.config.geolocation.latitude,
+            longitude: this.config.geolocation.longitude,
+            accuracy: this.config.geolocation.accuracy,
+            timestamp: this.config.geolocation.timestamp
+          },
+          this.expectedOrigin
+        );
+      }
+    }
   }
   /**
    * Handles user closing the popup manually (popup mode only).
@@ -1154,27 +1174,44 @@ var EdgeTransferVerify = class {
   }
 };
 
+// src/geolocation.ts
+async function collectGeolocation(options) {
+  if (typeof navigator === "undefined" || !navigator.geolocation) {
+    return null;
+  }
+  try {
+    const position = await new Promise((resolve, reject) => {
+      navigator.geolocation.getCurrentPosition(resolve, reject, {
+        timeout: options?.timeout ?? 1e4,
+        maximumAge: options?.maximumAge ?? 6e4,
+        enableHighAccuracy: options?.enableHighAccuracy ?? false
+      });
+    });
+    return {
+      latitude: position.coords.latitude,
+      longitude: position.coords.longitude,
+      accuracy: position.coords.accuracy,
+      timestamp: new Date(position.timestamp).toISOString()
+    };
+  } catch {
+    return null;
+  }
+}
+
 // src/index.ts
-import {
-  EdgePopupBlockedError as EdgePopupBlockedError3,
-  EdgeStateMismatchError as EdgeStateMismatchError2,
-  EdgeError,
-  isEdgeError
-} from "@edge-markets/connect";
-import {
-  EDGE_SCOPES,
-  ALL_EDGE_SCOPES as ALL_EDGE_SCOPES2
-} from "@edge-markets/connect";
+import { EdgeError, EdgePopupBlockedError as EdgePopupBlockedError3, EdgeStateMismatchError, isEdgeError } from "@edge-markets/connect";
+import { ALL_EDGE_SCOPES as ALL_EDGE_SCOPES2, EDGE_SCOPES } from "@edge-markets/connect";
 export {
   ALL_EDGE_SCOPES2 as ALL_EDGE_SCOPES,
   EDGE_SCOPES,
   EdgeError,
   EdgeLink,
   EdgePopupBlockedError3 as EdgePopupBlockedError,
-  EdgeStateMismatchError2 as EdgeStateMismatchError,
+  EdgeStateMismatchError,
   EdgeTransferVerify,
   IframeManager,
   assertCryptoAvailable,
+  collectGeolocation,
   generatePKCE,
   generateState,
   isEdgeError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect-link",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Browser SDK for EDGE Connect popup authentication",
   "author": "EdgeBoost",
   "license": "MIT",
@@ -21,7 +21,7 @@
     }
   },
   "dependencies": {
-    "@edge-markets/connect": "1.3.0"
+    "@edge-markets/connect": "1.5.0"
   },
   "peerDependencies": {
     "react": ">=17.0.0"
@@ -32,7 +32,9 @@
     }
   },
   "devDependencies": {
+    "@types/jsdom": "^28.0.1",
     "@types/react": "^18.2.0",
+    "jsdom": "^29.0.2",
     "tsup": "^8.0.0",
     "typescript": "^5.3.0",
     "vitest": "^1.0.0"