@edge-markets/connect-react-native 1.0.3 → 1.3.0

package/README.md

@@ -305,3 +305,9 @@ Install and import `react-native-get-random-values` before any crypto operations
 MIT
 
 
+
+
+
+
+
+

package/dist/index.d.mts

@@ -1,115 +1,10 @@
-import { EdgeEnvironment, EdgeLinkSuccess, EdgeLinkExit, EdgeScope } from '@edge-markets/connect';
-export { ALL_EDGE_SCOPES, Balance, EDGE_ENVIRONMENTS, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeLinkExit, EdgeLinkSuccess, EdgeNetworkError, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, EdgeTokens, SCOPE_DESCRIPTIONS, Transfer, User, formatScopesForEnvironment, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isNetworkError } from '@edge-markets/connect';
+import { EdgeLinkConfigBase, EdgeEnvironment, EdgeScope, EdgeLinkSuccess, EdgeLinkEvent, PKCEPair } from '@edge-markets/connect';
+export { ALL_EDGE_SCOPES, Balance, EDGE_ENVIRONMENTS, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeLinkEvent, EdgeLinkEventName, EdgeLinkExit, EdgeLinkSuccess, EdgeNetworkError, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, EdgeTokens, PKCEPair, SCOPE_DESCRIPTIONS, Transfer, User, formatScopesForEnvironment, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isNetworkError } from '@edge-markets/connect';
 
-/**
- * EdgeLink for React Native - Plaid-Style Authentication Flow
- *
- * Unlike the browser SDK which uses popups, the React Native SDK uses:
- * - In-App Browser (SFSafariViewController / Chrome Custom Tabs)
- * - Deep Links for OAuth callback
- * - Secure storage for PKCE state
- *
- * This provides a native, secure authentication experience similar to Plaid Link.
- *
- * @module @edge-markets/connect-react-native
- *
- * @example
- * ```typescript
- * import { EdgeLink } from '@edge-markets/connect-react-native'
- *
- * const link = new EdgeLink({
- *   clientId: 'your-client-id',
- *   environment: 'staging',
- *   redirectUri: 'myapp://oauth/callback',
- *   onSuccess: async (result) => {
- *     await sendToBackend(result.code, result.codeVerifier)
- *   },
- *   onExit: (metadata) => {
- *     console.log('User exited:', metadata.reason)
- *   },
- * })
- *
- * // Open from a button press
- * <Button onPress={() => link.open()} title="Connect EdgeBoost" />
- * ```
- */
-
-/**
- * Configuration for EdgeLink React Native.
- */
-interface EdgeLinkConfig {
-    /**
-     * Your OAuth client ID from the EdgeBoost partner portal.
-     */
-    clientId: string;
-    /**
-     * Environment to connect to.
-     */
-    environment: EdgeEnvironment;
-    /**
-     * Deep link URI for OAuth callback.
-     *
-     * This must be registered in your app's URL schemes (iOS) and
-     * intent filters (Android), and in your EdgeBoost OAuth client settings.
-     *
-     * @example
-     * - Custom scheme: `myapp://oauth/callback`
-     * - Universal link: `https://myapp.com/oauth/callback`
-     */
+interface EdgeLinkConfig extends EdgeLinkConfigBase {
     redirectUri: string;
-    /**
-     * Called when user successfully authenticates and grants consent.
-     */
-    onSuccess: (result: EdgeLinkSuccess) => void;
-    /**
-     * Called when user exits the flow.
-     */
-    onExit?: (metadata: EdgeLinkExit) => void;
-    /**
-     * Called for various events during the flow.
-     */
-    onEvent?: (event: EdgeLinkEvent) => void;
-    /**
-     * OAuth scopes to request.
-     * @default All available scopes
-     */
-    scopes?: EdgeScope[];
-    /**
-     * Custom URL for the Link page (development only).
-     */
-    linkUrl?: string;
-    /**
-     * Use external browser instead of in-app browser.
-     * @default false
-     */
     useExternalBrowser?: boolean;
 }
-/**
- * Event emitted during the Link flow.
- */
-interface EdgeLinkEvent {
-    eventName: EdgeLinkEventName;
-    timestamp: number;
-    metadata?: Record<string, unknown>;
-}
-type EdgeLinkEventName = 'OPEN' | 'CLOSE' | 'HANDOFF' | 'SUCCESS' | 'ERROR' | 'REDIRECT';
-/**
- * EdgeLink for React Native - handles OAuth flow with in-app browser.
- *
- * @example
- * ```typescript
- * const link = new EdgeLink({
- *   clientId: 'your-client-id',
- *   environment: 'staging',
- *   redirectUri: 'myapp://oauth/callback',
- *   onSuccess: handleSuccess,
- *   onExit: handleExit,
- * })
- *
- * // Later, in response to user action
- * await link.open()
- * ```
- */
 declare class EdgeLink {
     private readonly config;
     private pkce;
@@ -118,31 +13,9 @@ declare class EdgeLink {
     private isOpen;
     private isDestroyed;
     constructor(config: EdgeLinkConfig);
-    /**
-     * Opens the EdgeLink authentication flow.
-     *
-     * This launches an in-app browser with the EdgeBoost login/consent page.
-     * When complete, the browser redirects to your redirectUri and the
-     * onSuccess/onExit callback is called.
-     */
     open(): Promise<void>;
-    /**
-     * Manually handles a deep link URL.
-     *
-     * Use this if you're handling deep links yourself instead of relying
-     * on the automatic listener.
-     *
-     * @param url - The deep link URL received
-     * @returns true if the URL was handled, false otherwise
-     */
     handleDeepLink(url: string): boolean;
-    /**
-     * Closes the EdgeLink flow.
-     */
     close(): Promise<void>;
-    /**
-     * Destroys the EdgeLink instance.
-     */
     destroy(): void;
     private buildLinkUrl;
     private setupLinkListener;
@@ -269,6 +142,8 @@ declare function useEdgeLink(config: UseEdgeLinkConfig): UseEdgeLinkReturn;
 interface UseEdgeLinkHandlerConfig {
     /** Your redirect URI prefix */
     redirectUri: string;
+    /** PKCE code verifier from the EdgeLink instance that initiated the flow */
+    codeVerifier: string;
     /** Called on successful auth */
     onSuccess: (result: EdgeLinkSuccess) => void;
     /** Called on error or user exit */
@@ -302,54 +177,8 @@ declare function useEdgeLinkHandler(config: UseEdgeLinkHandlerConfig): UseEdgeLi
  */
 declare function useEdgeLinkEvents(onEvent: (event: EdgeLinkEvent) => void, deps?: React.DependencyList): void;
 
-/**
- * PKCE (Proof Key for Code Exchange) Utilities for React Native
- *
- * React Native doesn't have Web Crypto API natively, so we use a
- * compatible implementation that works across platforms.
- *
- * For production apps, consider installing:
- * - `react-native-get-random-values` (polyfill for crypto.getRandomValues)
- * - `expo-crypto` (if using Expo)
- *
- * @module @edge-markets/connect-react-native/pkce
- */
-/**
- * A PKCE code verifier and challenge pair.
- */
-interface PKCEPair {
-    /** High-entropy random string (43-128 characters). Keep secret until token exchange. */
-    verifier: string;
-    /** SHA-256 hash of verifier, base64url encoded. Include in authorization URL. */
-    challenge: string;
-}
-/**
- * Generates a PKCE code verifier and challenge pair.
- *
- * @example
- * ```typescript
- * const pkce = await generatePKCE()
- *
- * // Include challenge in authorization URL
- * const authUrl = `https://auth.example.com/authorize?code_challenge=${pkce.challenge}&code_challenge_method=S256`
- *
- * // Later, include verifier in token exchange
- * const tokens = await exchangeCode(code, pkce.verifier)
- * ```
- */
 declare function generatePKCE(): Promise<PKCEPair>;
-/**
- * Generates a random state parameter for CSRF protection.
- *
- * @returns 64-character hex string (32 bytes of entropy)
- */
-declare function generateState(): string;
-/**
- * Checks if secure crypto is available.
- *
- * Returns false if only Math.random fallback is being used.
- * Use this to warn users in development.
- */
-declare function isSecureCryptoAvailable(): boolean;
+declare function generateState(): Promise<string>;
+declare function isSecureCryptoAvailable(): Promise<boolean>;
 
-export { EdgeLink, type EdgeLinkConfig, type EdgeLinkEvent, type EdgeLinkEventName, type PKCEPair, type UseEdgeLinkConfig, type UseEdgeLinkHandlerConfig, type UseEdgeLinkHandlerReturn, type UseEdgeLinkReturn, generatePKCE, generateState, isSecureCryptoAvailable, useEdgeLink, useEdgeLinkEvents, useEdgeLinkHandler };
+export { EdgeLink, type EdgeLinkConfig, type UseEdgeLinkConfig, type UseEdgeLinkHandlerConfig, type UseEdgeLinkHandlerReturn, type UseEdgeLinkReturn, generatePKCE, generateState, isSecureCryptoAvailable, useEdgeLink, useEdgeLinkEvents, useEdgeLinkHandler };

package/dist/index.d.ts

@@ -1,115 +1,10 @@
-import { EdgeEnvironment, EdgeLinkSuccess, EdgeLinkExit, EdgeScope } from '@edge-markets/connect';
-export { ALL_EDGE_SCOPES, Balance, EDGE_ENVIRONMENTS, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeLinkExit, EdgeLinkSuccess, EdgeNetworkError, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, EdgeTokens, SCOPE_DESCRIPTIONS, Transfer, User, formatScopesForEnvironment, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isNetworkError } from '@edge-markets/connect';
+import { EdgeLinkConfigBase, EdgeEnvironment, EdgeScope, EdgeLinkSuccess, EdgeLinkEvent, PKCEPair } from '@edge-markets/connect';
+export { ALL_EDGE_SCOPES, Balance, EDGE_ENVIRONMENTS, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeLinkEvent, EdgeLinkEventName, EdgeLinkExit, EdgeLinkSuccess, EdgeNetworkError, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, EdgeTokens, PKCEPair, SCOPE_DESCRIPTIONS, Transfer, User, formatScopesForEnvironment, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isNetworkError } from '@edge-markets/connect';
 
-/**
- * EdgeLink for React Native - Plaid-Style Authentication Flow
- *
- * Unlike the browser SDK which uses popups, the React Native SDK uses:
- * - In-App Browser (SFSafariViewController / Chrome Custom Tabs)
- * - Deep Links for OAuth callback
- * - Secure storage for PKCE state
- *
- * This provides a native, secure authentication experience similar to Plaid Link.
- *
- * @module @edge-markets/connect-react-native
- *
- * @example
- * ```typescript
- * import { EdgeLink } from '@edge-markets/connect-react-native'
- *
- * const link = new EdgeLink({
- *   clientId: 'your-client-id',
- *   environment: 'staging',
- *   redirectUri: 'myapp://oauth/callback',
- *   onSuccess: async (result) => {
- *     await sendToBackend(result.code, result.codeVerifier)
- *   },
- *   onExit: (metadata) => {
- *     console.log('User exited:', metadata.reason)
- *   },
- * })
- *
- * // Open from a button press
- * <Button onPress={() => link.open()} title="Connect EdgeBoost" />
- * ```
- */
-
-/**
- * Configuration for EdgeLink React Native.
- */
-interface EdgeLinkConfig {
-    /**
-     * Your OAuth client ID from the EdgeBoost partner portal.
-     */
-    clientId: string;
-    /**
-     * Environment to connect to.
-     */
-    environment: EdgeEnvironment;
-    /**
-     * Deep link URI for OAuth callback.
-     *
-     * This must be registered in your app's URL schemes (iOS) and
-     * intent filters (Android), and in your EdgeBoost OAuth client settings.
-     *
-     * @example
-     * - Custom scheme: `myapp://oauth/callback`
-     * - Universal link: `https://myapp.com/oauth/callback`
-     */
+interface EdgeLinkConfig extends EdgeLinkConfigBase {
     redirectUri: string;
-    /**
-     * Called when user successfully authenticates and grants consent.
-     */
-    onSuccess: (result: EdgeLinkSuccess) => void;
-    /**
-     * Called when user exits the flow.
-     */
-    onExit?: (metadata: EdgeLinkExit) => void;
-    /**
-     * Called for various events during the flow.
-     */
-    onEvent?: (event: EdgeLinkEvent) => void;
-    /**
-     * OAuth scopes to request.
-     * @default All available scopes
-     */
-    scopes?: EdgeScope[];
-    /**
-     * Custom URL for the Link page (development only).
-     */
-    linkUrl?: string;
-    /**
-     * Use external browser instead of in-app browser.
-     * @default false
-     */
     useExternalBrowser?: boolean;
 }
-/**
- * Event emitted during the Link flow.
- */
-interface EdgeLinkEvent {
-    eventName: EdgeLinkEventName;
-    timestamp: number;
-    metadata?: Record<string, unknown>;
-}
-type EdgeLinkEventName = 'OPEN' | 'CLOSE' | 'HANDOFF' | 'SUCCESS' | 'ERROR' | 'REDIRECT';
-/**
- * EdgeLink for React Native - handles OAuth flow with in-app browser.
- *
- * @example
- * ```typescript
- * const link = new EdgeLink({
- *   clientId: 'your-client-id',
- *   environment: 'staging',
- *   redirectUri: 'myapp://oauth/callback',
- *   onSuccess: handleSuccess,
- *   onExit: handleExit,
- * })
- *
- * // Later, in response to user action
- * await link.open()
- * ```
- */
 declare class EdgeLink {
     private readonly config;
     private pkce;
@@ -118,31 +13,9 @@ declare class EdgeLink {
     private isOpen;
     private isDestroyed;
     constructor(config: EdgeLinkConfig);
-    /**
-     * Opens the EdgeLink authentication flow.
-     *
-     * This launches an in-app browser with the EdgeBoost login/consent page.
-     * When complete, the browser redirects to your redirectUri and the
-     * onSuccess/onExit callback is called.
-     */
     open(): Promise<void>;
-    /**
-     * Manually handles a deep link URL.
-     *
-     * Use this if you're handling deep links yourself instead of relying
-     * on the automatic listener.
-     *
-     * @param url - The deep link URL received
-     * @returns true if the URL was handled, false otherwise
-     */
     handleDeepLink(url: string): boolean;
-    /**
-     * Closes the EdgeLink flow.
-     */
     close(): Promise<void>;
-    /**
-     * Destroys the EdgeLink instance.
-     */
     destroy(): void;
     private buildLinkUrl;
     private setupLinkListener;
@@ -269,6 +142,8 @@ declare function useEdgeLink(config: UseEdgeLinkConfig): UseEdgeLinkReturn;
 interface UseEdgeLinkHandlerConfig {
     /** Your redirect URI prefix */
     redirectUri: string;
+    /** PKCE code verifier from the EdgeLink instance that initiated the flow */
+    codeVerifier: string;
     /** Called on successful auth */
     onSuccess: (result: EdgeLinkSuccess) => void;
     /** Called on error or user exit */
@@ -302,54 +177,8 @@ declare function useEdgeLinkHandler(config: UseEdgeLinkHandlerConfig): UseEdgeLi
  */
 declare function useEdgeLinkEvents(onEvent: (event: EdgeLinkEvent) => void, deps?: React.DependencyList): void;
 
-/**
- * PKCE (Proof Key for Code Exchange) Utilities for React Native
- *
- * React Native doesn't have Web Crypto API natively, so we use a
- * compatible implementation that works across platforms.
- *
- * For production apps, consider installing:
- * - `react-native-get-random-values` (polyfill for crypto.getRandomValues)
- * - `expo-crypto` (if using Expo)
- *
- * @module @edge-markets/connect-react-native/pkce
- */
-/**
- * A PKCE code verifier and challenge pair.
- */
-interface PKCEPair {
-    /** High-entropy random string (43-128 characters). Keep secret until token exchange. */
-    verifier: string;
-    /** SHA-256 hash of verifier, base64url encoded. Include in authorization URL. */
-    challenge: string;
-}
-/**
- * Generates a PKCE code verifier and challenge pair.
- *
- * @example
- * ```typescript
- * const pkce = await generatePKCE()
- *
- * // Include challenge in authorization URL
- * const authUrl = `https://auth.example.com/authorize?code_challenge=${pkce.challenge}&code_challenge_method=S256`
- *
- * // Later, include verifier in token exchange
- * const tokens = await exchangeCode(code, pkce.verifier)
- * ```
- */
 declare function generatePKCE(): Promise<PKCEPair>;
-/**
- * Generates a random state parameter for CSRF protection.
- *
- * @returns 64-character hex string (32 bytes of entropy)
- */
-declare function generateState(): string;
-/**
- * Checks if secure crypto is available.
- *
- * Returns false if only Math.random fallback is being used.
- * Use this to warn users in development.
- */
-declare function isSecureCryptoAvailable(): boolean;
+declare function generateState(): Promise<string>;
+declare function isSecureCryptoAvailable(): Promise<boolean>;
 
-export { EdgeLink, type EdgeLinkConfig, type EdgeLinkEvent, type EdgeLinkEventName, type PKCEPair, type UseEdgeLinkConfig, type UseEdgeLinkHandlerConfig, type UseEdgeLinkHandlerReturn, type UseEdgeLinkReturn, generatePKCE, generateState, isSecureCryptoAvailable, useEdgeLink, useEdgeLinkEvents, useEdgeLinkHandler };
+export { EdgeLink, type EdgeLinkConfig, type UseEdgeLinkConfig, type UseEdgeLinkHandlerConfig, type UseEdgeLinkHandlerReturn, type UseEdgeLinkReturn, generatePKCE, generateState, isSecureCryptoAvailable, useEdgeLink, useEdgeLinkEvents, useEdgeLinkHandler };

package/dist/index.js

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/index.ts
@@ -58,7 +68,7 @@ function hasNativeCrypto() {
 }
 async function sha256Fallback(message) {
   try {
-    const ExpoCrypto = require("expo-crypto");
+    const ExpoCrypto = await import("expo-crypto");
     const hash = await ExpoCrypto.digestStringAsync(
       ExpoCrypto.CryptoDigestAlgorithm.SHA256,
       message,
@@ -73,8 +83,8 @@ async function sha256Fallback(message) {
   } catch {
   }
   try {
-    const { createHash } = require("react-native-quick-crypto");
-    const hash = createHash("sha256").update(message).digest();
+    const quickCrypto = await import("react-native-quick-crypto");
+    const hash = quickCrypto.createHash("sha256").update(message).digest();
     return hash.buffer;
   } catch {
   }
@@ -212,27 +222,23 @@ function pureJsSha256(message) {
     return (x >>> n | x << 32 - n) >>> 0;
   }
 }
-function getRandomBytes(byteLength) {
+async function getRandomBytes(byteLength) {
   const array = new Uint8Array(byteLength);
   if (typeof globalThis.crypto?.getRandomValues === "function") {
     globalThis.crypto.getRandomValues(array);
     return array;
   }
   try {
-    const ExpoRandom = require("expo-random");
+    const ExpoRandom = await import("expo-random");
     return ExpoRandom.getRandomBytes(byteLength);
   } catch {
   }
-  console.warn(
-    "[EdgeLink] Using Math.random fallback - NOT CRYPTOGRAPHICALLY SECURE!\nInstall react-native-get-random-values or expo-random for production."
+  throw new Error(
+    "[EdgeLink] No cryptographically secure random source available. Install react-native-get-random-values (and import it before EdgeLink) or expo-random."
   );
-  for (let i = 0; i < byteLength; i++) {
-    array[i] = Math.floor(Math.random() * 256);
-  }
-  return array;
 }
-function generateRandomHex(byteLength) {
-  const bytes = getRandomBytes(byteLength);
+async function generateRandomHex(byteLength) {
+  const bytes = await getRandomBytes(byteLength);
   return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 async function sha256(plain) {
@@ -266,20 +272,21 @@ function base64UrlEncode(buffer) {
   return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 async function generatePKCE() {
-  const verifier = generateRandomHex(64);
+  const verifier = await generateRandomHex(64);
   const hash = await sha256(verifier);
   const challenge = base64UrlEncode(hash);
   return { verifier, challenge };
 }
-function generateState() {
-  return generateRandomHex(32);
+async function generateState() {
+  const bytes = await getRandomBytes(32);
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
-function isSecureCryptoAvailable() {
+async function isSecureCryptoAvailable() {
   if (typeof globalThis.crypto?.getRandomValues === "function") {
     return true;
   }
   try {
-    require("expo-random");
+    await import("expo-random");
     return true;
   } catch {
     return false;
@@ -293,10 +300,10 @@ async function openInAppBrowser(url, useExternal = false) {
     return;
   }
   try {
-    const InAppBrowser = require("react-native-inappbrowser-reborn").default;
+    const module2 = await import("react-native-inappbrowser-reborn");
+    const InAppBrowser = module2.default;
     if (await InAppBrowser.isAvailable()) {
       await InAppBrowser.openAuth(url, "", {
-        // iOS options
         dismissButtonStyle: "cancel",
         preferredBarTintColor: "#1a1a2e",
         preferredControlTintColor: "#00d4aa",
@@ -304,7 +311,6 @@ async function openInAppBrowser(url, useExternal = false) {
         animated: true,
         modalEnabled: true,
         enableBarCollapsing: false,
-        // Android options
         showTitle: true,
         toolbarColor: "#1a1a2e",
         secondaryToolbarColor: "#16213e",
@@ -325,7 +331,7 @@ async function openInAppBrowser(url, useExternal = false) {
   } catch {
   }
   try {
-    const WebBrowser = require("expo-web-browser");
+    const WebBrowser = await import("expo-web-browser");
     await WebBrowser.openAuthSessionAsync(url, "");
     return;
   } catch {
@@ -335,12 +341,12 @@ async function openInAppBrowser(url, useExternal = false) {
 }
 async function closeInAppBrowser() {
   try {
-    const InAppBrowser = require("react-native-inappbrowser-reborn").default;
-    InAppBrowser.close();
+    const module2 = await import("react-native-inappbrowser-reborn");
+    module2.default.close();
   } catch {
   }
   try {
-    const WebBrowser = require("expo-web-browser");
+    const WebBrowser = await import("expo-web-browser");
     WebBrowser.dismissBrowser();
   } catch {
   }
@@ -366,13 +372,6 @@ var EdgeLink = class {
     }
     this.config = config;
   }
-  /**
-   * Opens the EdgeLink authentication flow.
-   *
-   * This launches an in-app browser with the EdgeBoost login/consent page.
-   * When complete, the browser redirects to your redirectUri and the
-   * onSuccess/onExit callback is called.
-   */
   async open() {
     if (this.isDestroyed) {
       throw new Error("EdgeLink: Cannot open - instance has been destroyed");
@@ -385,7 +384,7 @@ var EdgeLink = class {
     this.isOpen = true;
     try {
       this.pkce = await generatePKCE();
-      this.state = generateState();
+      this.state = await generateState();
       this.setupLinkListener();
       const url = this.buildLinkUrl();
       this.emitEvent("HANDOFF", { url });
@@ -402,15 +401,6 @@ var EdgeLink = class {
       });
     }
   }
-  /**
-   * Manually handles a deep link URL.
-   *
-   * Use this if you're handling deep links yourself instead of relying
-   * on the automatic listener.
-   *
-   * @param url - The deep link URL received
-   * @returns true if the URL was handled, false otherwise
-   */
   handleDeepLink(url) {
     if (!this.isOpen || !url.startsWith(this.config.redirectUri)) {
       return false;
@@ -418,9 +408,6 @@ var EdgeLink = class {
     this.processCallback(url);
     return true;
   }
-  /**
-   * Closes the EdgeLink flow.
-   */
   async close() {
     if (!this.isOpen) return;
     await closeInAppBrowser();
@@ -430,16 +417,10 @@ var EdgeLink = class {
       reason: "user_closed"
     });
   }
-  /**
-   * Destroys the EdgeLink instance.
-   */
   destroy() {
     this.isDestroyed = true;
     this.cleanup();
   }
-  // ===========================================================================
-  // PRIVATE METHODS
-  // ===========================================================================
   buildLinkUrl() {
     const envConfig = (0, import_connect.getEnvironmentConfig)(this.config.environment);
     const baseUrl = this.config.linkUrl || `${envConfig.userClientUrl}/oauth/link`;
@@ -638,7 +619,6 @@ function useEdgeLinkHandler(config) {
         const state = parsed.searchParams.get("state");
         const error = parsed.searchParams.get("error");
         const errorDescription = parsed.searchParams.get("error_description");
-        const codeVerifier = parsed.searchParams.get("code_verifier");
         if (error) {
           config.onError?.({
             code: error,
@@ -649,8 +629,7 @@ function useEdgeLinkHandler(config) {
         if (code && state) {
           config.onSuccess({
             code,
-            codeVerifier: codeVerifier || "",
-            // Might be empty if not passed in URL
+            codeVerifier: config.codeVerifier,
             state
           });
           return true;

package/dist/index.mjs

@@ -1,10 +1,3 @@
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
-
 // src/index.ts
 import {
   getEnvironmentConfig as getEnvironmentConfig2,
@@ -40,7 +33,7 @@ function hasNativeCrypto() {
 }
 async function sha256Fallback(message) {
   try {
-    const ExpoCrypto = __require("expo-crypto");
+    const ExpoCrypto = await import("expo-crypto");
     const hash = await ExpoCrypto.digestStringAsync(
       ExpoCrypto.CryptoDigestAlgorithm.SHA256,
       message,
@@ -55,8 +48,8 @@ async function sha256Fallback(message) {
   } catch {
   }
   try {
-    const { createHash } = __require("react-native-quick-crypto");
-    const hash = createHash("sha256").update(message).digest();
+    const quickCrypto = await import("react-native-quick-crypto");
+    const hash = quickCrypto.createHash("sha256").update(message).digest();
     return hash.buffer;
   } catch {
   }
@@ -194,27 +187,23 @@ function pureJsSha256(message) {
     return (x >>> n | x << 32 - n) >>> 0;
   }
 }
-function getRandomBytes(byteLength) {
+async function getRandomBytes(byteLength) {
   const array = new Uint8Array(byteLength);
   if (typeof globalThis.crypto?.getRandomValues === "function") {
     globalThis.crypto.getRandomValues(array);
     return array;
   }
   try {
-    const ExpoRandom = __require("expo-random");
+    const ExpoRandom = await import("expo-random");
     return ExpoRandom.getRandomBytes(byteLength);
   } catch {
   }
-  console.warn(
-    "[EdgeLink] Using Math.random fallback - NOT CRYPTOGRAPHICALLY SECURE!\nInstall react-native-get-random-values or expo-random for production."
+  throw new Error(
+    "[EdgeLink] No cryptographically secure random source available. Install react-native-get-random-values (and import it before EdgeLink) or expo-random."
   );
-  for (let i = 0; i < byteLength; i++) {
-    array[i] = Math.floor(Math.random() * 256);
-  }
-  return array;
 }
-function generateRandomHex(byteLength) {
-  const bytes = getRandomBytes(byteLength);
+async function generateRandomHex(byteLength) {
+  const bytes = await getRandomBytes(byteLength);
   return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 async function sha256(plain) {
@@ -248,20 +237,21 @@ function base64UrlEncode(buffer) {
   return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 async function generatePKCE() {
-  const verifier = generateRandomHex(64);
+  const verifier = await generateRandomHex(64);
   const hash = await sha256(verifier);
   const challenge = base64UrlEncode(hash);
   return { verifier, challenge };
 }
-function generateState() {
-  return generateRandomHex(32);
+async function generateState() {
+  const bytes = await getRandomBytes(32);
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
-function isSecureCryptoAvailable() {
+async function isSecureCryptoAvailable() {
   if (typeof globalThis.crypto?.getRandomValues === "function") {
     return true;
   }
   try {
-    __require("expo-random");
+    await import("expo-random");
     return true;
   } catch {
     return false;
@@ -275,10 +265,10 @@ async function openInAppBrowser(url, useExternal = false) {
     return;
   }
   try {
-    const InAppBrowser = __require("react-native-inappbrowser-reborn").default;
+    const module = await import("react-native-inappbrowser-reborn");
+    const InAppBrowser = module.default;
     if (await InAppBrowser.isAvailable()) {
       await InAppBrowser.openAuth(url, "", {
-        // iOS options
         dismissButtonStyle: "cancel",
         preferredBarTintColor: "#1a1a2e",
         preferredControlTintColor: "#00d4aa",
@@ -286,7 +276,6 @@ async function openInAppBrowser(url, useExternal = false) {
         animated: true,
         modalEnabled: true,
         enableBarCollapsing: false,
-        // Android options
         showTitle: true,
         toolbarColor: "#1a1a2e",
         secondaryToolbarColor: "#16213e",
@@ -307,7 +296,7 @@ async function openInAppBrowser(url, useExternal = false) {
   } catch {
   }
   try {
-    const WebBrowser = __require("expo-web-browser");
+    const WebBrowser = await import("expo-web-browser");
     await WebBrowser.openAuthSessionAsync(url, "");
     return;
   } catch {
@@ -317,12 +306,12 @@ async function openInAppBrowser(url, useExternal = false) {
 }
 async function closeInAppBrowser() {
   try {
-    const InAppBrowser = __require("react-native-inappbrowser-reborn").default;
-    InAppBrowser.close();
+    const module = await import("react-native-inappbrowser-reborn");
+    module.default.close();
   } catch {
   }
   try {
-    const WebBrowser = __require("expo-web-browser");
+    const WebBrowser = await import("expo-web-browser");
     WebBrowser.dismissBrowser();
   } catch {
   }
@@ -348,13 +337,6 @@ var EdgeLink = class {
     }
     this.config = config;
   }
-  /**
-   * Opens the EdgeLink authentication flow.
-   *
-   * This launches an in-app browser with the EdgeBoost login/consent page.
-   * When complete, the browser redirects to your redirectUri and the
-   * onSuccess/onExit callback is called.
-   */
   async open() {
     if (this.isDestroyed) {
       throw new Error("EdgeLink: Cannot open - instance has been destroyed");
@@ -367,7 +349,7 @@ var EdgeLink = class {
     this.isOpen = true;
     try {
       this.pkce = await generatePKCE();
-      this.state = generateState();
+      this.state = await generateState();
       this.setupLinkListener();
       const url = this.buildLinkUrl();
       this.emitEvent("HANDOFF", { url });
@@ -384,15 +366,6 @@ var EdgeLink = class {
       });
     }
   }
-  /**
-   * Manually handles a deep link URL.
-   *
-   * Use this if you're handling deep links yourself instead of relying
-   * on the automatic listener.
-   *
-   * @param url - The deep link URL received
-   * @returns true if the URL was handled, false otherwise
-   */
   handleDeepLink(url) {
     if (!this.isOpen || !url.startsWith(this.config.redirectUri)) {
       return false;
@@ -400,9 +373,6 @@ var EdgeLink = class {
     this.processCallback(url);
     return true;
   }
-  /**
-   * Closes the EdgeLink flow.
-   */
   async close() {
     if (!this.isOpen) return;
     await closeInAppBrowser();
@@ -412,16 +382,10 @@ var EdgeLink = class {
       reason: "user_closed"
     });
   }
-  /**
-   * Destroys the EdgeLink instance.
-   */
   destroy() {
     this.isDestroyed = true;
     this.cleanup();
   }
-  // ===========================================================================
-  // PRIVATE METHODS
-  // ===========================================================================
   buildLinkUrl() {
     const envConfig = getEnvironmentConfig(this.config.environment);
     const baseUrl = this.config.linkUrl || `${envConfig.userClientUrl}/oauth/link`;
@@ -620,7 +584,6 @@ function useEdgeLinkHandler(config) {
         const state = parsed.searchParams.get("state");
         const error = parsed.searchParams.get("error");
         const errorDescription = parsed.searchParams.get("error_description");
-        const codeVerifier = parsed.searchParams.get("code_verifier");
         if (error) {
           config.onError?.({
             code: error,
@@ -631,8 +594,7 @@ function useEdgeLinkHandler(config) {
         if (code && state) {
           config.onSuccess({
             code,
-            codeVerifier: codeVerifier || "",
-            // Might be empty if not passed in URL
+            codeVerifier: config.codeVerifier,
             state
           });
           return true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect-react-native",
-  "version": "1.0.3",
+  "version": "1.3.0",
   "description": "React Native SDK for EDGE Connect authentication flow for mobile apps",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -13,11 +13,6 @@
     }
   },
   "sideEffects": false,
-  "scripts": {
-    "build": "tsup src/index.ts --format cjs,esm --dts --clean",
-    "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
-    "typecheck": "tsc --noEmit"
-  },
   "files": [
     "dist",
     "README.md"
@@ -35,7 +30,7 @@
   "author": "EdgeBoost",
   "license": "MIT",
   "dependencies": {
-    "@edge-markets/connect": "^1.0.0"
+    "@edge-markets/connect": "1.3.0"
   },
   "peerDependencies": {
     "react": ">=18.0.0",
@@ -57,6 +52,10 @@
     "type": "git",
     "url": "https://github.com/edgeboost/edge-connect-sdk.git",
     "directory": "packages/react-native"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts --format cjs,esm --dts --clean",
+    "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
+    "typecheck": "tsc --noEmit"
   }
-}
-
+}