@edge-markets/connect-link 1.4.0 → 1.5.0

package/README.md

@@ -94,11 +94,19 @@ interface EdgeLinkConfig {
   onEvent?: (event) => void     // Called for analytics events
   scopes?: EdgeScope[]          // Scopes to request (default: all)
   linkUrl?: string              // Custom Link URL (dev only)
-  redirectUri?: string          // Custom redirect URI (default: window.location.origin + '/oauth/edge/callback')
+  redirectUri?: string          // Legacy popup callback URI (migration only)
 }
 ```
 
-The `redirectUri` is automatically set to `${window.location.origin}/oauth/edge/callback` if not provided.
+Popup integrations are origin-based. Register your frontend origin with EDGE
+for `postMessage` validation, for example:
+
+- `https://app.partner.com`
+- `http://localhost:3000`
+- `http://localhost:5173`
+
+`redirectUri` is no longer required for popup completion. Keep it only while
+migrating an older integration that still sends a registered callback URL.
 
 ## Callbacks
 
@@ -323,4 +331,3 @@ MIT
 
 
 
-

package/dist/index.d.mts

@@ -53,10 +53,11 @@ export { ALL_EDGE_SCOPES, EDGE_SCOPES, EdgeEnvironment, EdgeError, EdgeLinkEvent
  */
 interface EdgeLinkConfig extends EdgeLinkConfigBase {
     /**
-     * Custom redirect URI after authentication.
-     * Must be registered in your OAuth client settings.
+     * Legacy redirect URI to include in the popup request.
      *
-     * @default `${window.location.origin}/oauth/edge/callback`
+     * Popup completion uses `postMessage` to your frontend origin and does not
+     * require a callback path by default. Keep this only while migrating older
+     * integrations that still expect a registered callback URL.
      */
     redirectUri?: string;
 }

package/dist/index.d.ts

@@ -53,10 +53,11 @@ export { ALL_EDGE_SCOPES, EDGE_SCOPES, EdgeEnvironment, EdgeError, EdgeLinkEvent
  */
 interface EdgeLinkConfig extends EdgeLinkConfigBase {
     /**
-     * Custom redirect URI after authentication.
-     * Must be registered in your OAuth client settings.
+     * Legacy redirect URI to include in the popup request.
      *
-     * @default `${window.location.origin}/oauth/edge/callback`
+     * Popup completion uses `postMessage` to your frontend origin and does not
+     * require a callback path by default. Keep this only while migrating older
+     * integrations that still expect a registered callback URL.
      */
     redirectUri?: string;
 }

package/dist/index.js

@@ -321,6 +321,16 @@ var PopupManager = class {
 };
 
 // src/edge-link.ts
+var hasWarnedLegacyRedirectUri = false;
+function warnLegacyRedirectUriUsage(redirectUri) {
+  if (hasWarnedLegacyRedirectUri) {
+    return;
+  }
+  hasWarnedLegacyRedirectUri = true;
+  console.warn(
+    `EdgeLink: popup flows no longer require redirectUri. Received legacy redirectUri "${redirectUri}". Register your frontend origin with EDGE and remove this option when possible.`
+  );
+}
 var EdgeLink = class {
   /**
    * Creates a new EdgeLink instance.
@@ -481,9 +491,12 @@ var EdgeLink = class {
     url.searchParams.set("code_challenge_method", "S256");
     const formattedScopes = (0, import_connect.formatScopesForEnvironment)(scopes, this.config.environment);
     url.searchParams.set("scope", formattedScopes.join(" "));
-    const redirectUri = this.config.redirectUri || `${window.location.origin}/oauth/edge/callback`;
-    url.searchParams.set("redirect_uri", redirectUri);
+    url.searchParams.set("flow", "popup");
     url.searchParams.set("origin", window.location.origin);
+    if (this.config.redirectUri) {
+      url.searchParams.set("redirect_uri", this.config.redirectUri);
+      warnLegacyRedirectUriUsage(this.config.redirectUri);
+    }
     return url.toString();
   }
   /**

package/dist/index.mjs

@@ -287,6 +287,16 @@ var PopupManager = class {
 };
 
 // src/edge-link.ts
+var hasWarnedLegacyRedirectUri = false;
+function warnLegacyRedirectUriUsage(redirectUri) {
+  if (hasWarnedLegacyRedirectUri) {
+    return;
+  }
+  hasWarnedLegacyRedirectUri = true;
+  console.warn(
+    `EdgeLink: popup flows no longer require redirectUri. Received legacy redirectUri "${redirectUri}". Register your frontend origin with EDGE and remove this option when possible.`
+  );
+}
 var EdgeLink = class {
   /**
    * Creates a new EdgeLink instance.
@@ -447,9 +457,12 @@ var EdgeLink = class {
     url.searchParams.set("code_challenge_method", "S256");
     const formattedScopes = formatScopesForEnvironment(scopes, this.config.environment);
     url.searchParams.set("scope", formattedScopes.join(" "));
-    const redirectUri = this.config.redirectUri || `${window.location.origin}/oauth/edge/callback`;
-    url.searchParams.set("redirect_uri", redirectUri);
+    url.searchParams.set("flow", "popup");
     url.searchParams.set("origin", window.location.origin);
+    if (this.config.redirectUri) {
+      url.searchParams.set("redirect_uri", this.config.redirectUri);
+      warnLegacyRedirectUriUsage(this.config.redirectUri);
+    }
     return url.toString();
   }
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect-link",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "Browser SDK for EDGE Connect popup authentication",
   "author": "EdgeBoost",
   "license": "MIT",
@@ -21,7 +21,7 @@
     }
   },
   "dependencies": {
-    "@edge-markets/connect": "1.5.0"
+    "@edge-markets/connect": "^1.5.1"
   },
   "peerDependencies": {
     "react": ">=17.0.0"