@edge-markets/connect-link 1.4.0 → 1.5.1

package/README.md

@@ -93,12 +93,25 @@ interface EdgeLinkConfig {
   onExit?: (metadata) => void   // Called when user exits
   onEvent?: (event) => void     // Called for analytics events
   scopes?: EdgeScope[]          // Scopes to request (default: all)
-  linkUrl?: string              // Custom Link URL (dev only)
-  redirectUri?: string          // Custom redirect URI (default: window.location.origin + '/oauth/edge/callback')
+  linkUrl?: string              // Custom Link URL/origin (dev only)
+  redirectUri?: string          // Legacy popup callback URI (migration only)
 }
 ```
 
-The `redirectUri` is automatically set to `${window.location.origin}/oauth/edge/callback` if not provided.
+The SDK derives the hosted Link URL from `environment`; staging defaults to
+`https://oauth.staging-app.edgeboost.io/oauth/link`. `linkUrl` is only needed for
+nonstandard deployments. If provided as an origin, for example
+`https://oauth.example.com`, the SDK appends `/oauth/link`.
+
+Popup integrations are origin-based. Register your frontend origin with EDGE
+for `postMessage` validation, for example:
+
+- `https://app.partner.com`
+- `http://localhost:3000`
+- `http://localhost:5173`
+
+`redirectUri` is no longer required for popup completion. Keep it only while
+migrating an older integration that still sends a registered callback URL.
 
 ## Callbacks
 
@@ -317,10 +330,3 @@ function ConnectButton() {
 
 MIT
 
-
-
-
-
-
-
-

package/dist/index.d.mts

@@ -53,10 +53,11 @@ export { ALL_EDGE_SCOPES, EDGE_SCOPES, EdgeEnvironment, EdgeError, EdgeLinkEvent
  */
 interface EdgeLinkConfig extends EdgeLinkConfigBase {
     /**
-     * Custom redirect URI after authentication.
-     * Must be registered in your OAuth client settings.
+     * Legacy redirect URI to include in the popup request.
      *
-     * @default `${window.location.origin}/oauth/edge/callback`
+     * Popup completion uses `postMessage` to your frontend origin and does not
+     * require a callback path by default. Keep this only while migrating older
+     * integrations that still expect a registered callback URL.
      */
     redirectUri?: string;
 }

package/dist/index.d.ts

@@ -53,10 +53,11 @@ export { ALL_EDGE_SCOPES, EDGE_SCOPES, EdgeEnvironment, EdgeError, EdgeLinkEvent
  */
 interface EdgeLinkConfig extends EdgeLinkConfigBase {
     /**
-     * Custom redirect URI after authentication.
-     * Must be registered in your OAuth client settings.
+     * Legacy redirect URI to include in the popup request.
      *
-     * @default `${window.location.origin}/oauth/edge/callback`
+     * Popup completion uses `postMessage` to your frontend origin and does not
+     * require a callback path by default. Keep this only while migrating older
+     * integrations that still expect a registered callback URL.
      */
     redirectUri?: string;
 }

package/dist/index.js

@@ -321,6 +321,16 @@ var PopupManager = class {
 };
 
 // src/edge-link.ts
+var hasWarnedLegacyRedirectUri = false;
+function warnLegacyRedirectUriUsage(redirectUri) {
+  if (hasWarnedLegacyRedirectUri) {
+    return;
+  }
+  hasWarnedLegacyRedirectUri = true;
+  console.warn(
+    `EdgeLink: popup flows no longer require redirectUri. Received legacy redirectUri "${redirectUri}". Register your frontend origin with EDGE and remove this option when possible.`
+  );
+}
 var EdgeLink = class {
   /**
    * Creates a new EdgeLink instance.
@@ -346,8 +356,7 @@ var EdgeLink = class {
     assertCryptoAvailable();
     this.config = config;
     this.popup = new PopupManager();
-    const envConfig = (0, import_connect.getEnvironmentConfig)(config.environment);
-    this.expectedOrigin = config.linkUrl ? new URL(config.linkUrl).origin : new URL(envConfig.userClientUrl).origin;
+    this.expectedOrigin = new URL((0, import_connect.getLinkUrl)(config.environment, config.linkUrl)).origin;
     this.setupMessageListener();
   }
   // ===========================================================================
@@ -472,18 +481,19 @@ var EdgeLink = class {
    * - Returning code via postMessage
    */
   buildLinkUrl(scopes) {
-    const envConfig = (0, import_connect.getEnvironmentConfig)(this.config.environment);
-    const baseUrl = this.config.linkUrl || `${envConfig.userClientUrl}/oauth/link`;
-    const url = new URL(baseUrl);
+    const url = new URL((0, import_connect.getLinkUrl)(this.config.environment, this.config.linkUrl));
     url.searchParams.set("client_id", this.config.clientId);
     url.searchParams.set("state", this.state);
     url.searchParams.set("code_challenge", this.pkce.challenge);
     url.searchParams.set("code_challenge_method", "S256");
     const formattedScopes = (0, import_connect.formatScopesForEnvironment)(scopes, this.config.environment);
     url.searchParams.set("scope", formattedScopes.join(" "));
-    const redirectUri = this.config.redirectUri || `${window.location.origin}/oauth/edge/callback`;
-    url.searchParams.set("redirect_uri", redirectUri);
+    url.searchParams.set("flow", "popup");
     url.searchParams.set("origin", window.location.origin);
+    if (this.config.redirectUri) {
+      url.searchParams.set("redirect_uri", this.config.redirectUri);
+      warnLegacyRedirectUriUsage(this.config.redirectUri);
+    }
     return url.toString();
   }
   /**

package/dist/index.mjs

@@ -3,7 +3,7 @@ import {
   ALL_EDGE_SCOPES,
   EdgePopupBlockedError,
   formatScopesForEnvironment,
-  getEnvironmentConfig
+  getLinkUrl
 } from "@edge-markets/connect";
 
 // src/pkce.ts
@@ -287,6 +287,16 @@ var PopupManager = class {
 };
 
 // src/edge-link.ts
+var hasWarnedLegacyRedirectUri = false;
+function warnLegacyRedirectUriUsage(redirectUri) {
+  if (hasWarnedLegacyRedirectUri) {
+    return;
+  }
+  hasWarnedLegacyRedirectUri = true;
+  console.warn(
+    `EdgeLink: popup flows no longer require redirectUri. Received legacy redirectUri "${redirectUri}". Register your frontend origin with EDGE and remove this option when possible.`
+  );
+}
 var EdgeLink = class {
   /**
    * Creates a new EdgeLink instance.
@@ -312,8 +322,7 @@ var EdgeLink = class {
     assertCryptoAvailable();
     this.config = config;
     this.popup = new PopupManager();
-    const envConfig = getEnvironmentConfig(config.environment);
-    this.expectedOrigin = config.linkUrl ? new URL(config.linkUrl).origin : new URL(envConfig.userClientUrl).origin;
+    this.expectedOrigin = new URL(getLinkUrl(config.environment, config.linkUrl)).origin;
     this.setupMessageListener();
   }
   // ===========================================================================
@@ -438,18 +447,19 @@ var EdgeLink = class {
    * - Returning code via postMessage
    */
   buildLinkUrl(scopes) {
-    const envConfig = getEnvironmentConfig(this.config.environment);
-    const baseUrl = this.config.linkUrl || `${envConfig.userClientUrl}/oauth/link`;
-    const url = new URL(baseUrl);
+    const url = new URL(getLinkUrl(this.config.environment, this.config.linkUrl));
     url.searchParams.set("client_id", this.config.clientId);
     url.searchParams.set("state", this.state);
     url.searchParams.set("code_challenge", this.pkce.challenge);
     url.searchParams.set("code_challenge_method", "S256");
     const formattedScopes = formatScopesForEnvironment(scopes, this.config.environment);
     url.searchParams.set("scope", formattedScopes.join(" "));
-    const redirectUri = this.config.redirectUri || `${window.location.origin}/oauth/edge/callback`;
-    url.searchParams.set("redirect_uri", redirectUri);
+    url.searchParams.set("flow", "popup");
     url.searchParams.set("origin", window.location.origin);
+    if (this.config.redirectUri) {
+      url.searchParams.set("redirect_uri", this.config.redirectUri);
+      warnLegacyRedirectUriUsage(this.config.redirectUri);
+    }
     return url.toString();
   }
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect-link",
-  "version": "1.4.0",
+  "version": "1.5.1",
   "description": "Browser SDK for EDGE Connect popup authentication",
   "author": "EdgeBoost",
   "license": "MIT",
@@ -21,7 +21,7 @@
     }
   },
   "dependencies": {
-    "@edge-markets/connect": "1.5.0"
+    "@edge-markets/connect": "^1.6.1"
   },
   "peerDependencies": {
     "react": ">=17.0.0"