@edge-markets/connect-react-native 1.2.0 → 1.3.0

package/dist/index.d.mts

@@ -1,23 +1,10 @@
-import { EdgeEnvironment, EdgeLinkSuccess, EdgeLinkExit, EdgeScope } from '@edge-markets/connect';
-export { ALL_EDGE_SCOPES, Balance, EDGE_ENVIRONMENTS, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeLinkExit, EdgeLinkSuccess, EdgeNetworkError, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, EdgeTokens, SCOPE_DESCRIPTIONS, Transfer, User, formatScopesForEnvironment, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isNetworkError } from '@edge-markets/connect';
+import { EdgeLinkConfigBase, EdgeEnvironment, EdgeScope, EdgeLinkSuccess, EdgeLinkEvent, PKCEPair } from '@edge-markets/connect';
+export { ALL_EDGE_SCOPES, Balance, EDGE_ENVIRONMENTS, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeLinkEvent, EdgeLinkEventName, EdgeLinkExit, EdgeLinkSuccess, EdgeNetworkError, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, EdgeTokens, PKCEPair, SCOPE_DESCRIPTIONS, Transfer, User, formatScopesForEnvironment, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isNetworkError } from '@edge-markets/connect';
 
-interface EdgeLinkConfig {
-    clientId: string;
-    environment: EdgeEnvironment;
+interface EdgeLinkConfig extends EdgeLinkConfigBase {
     redirectUri: string;
-    onSuccess: (result: EdgeLinkSuccess) => void;
-    onExit?: (metadata: EdgeLinkExit) => void;
-    onEvent?: (event: EdgeLinkEvent) => void;
-    scopes?: EdgeScope[];
-    linkUrl?: string;
     useExternalBrowser?: boolean;
 }
-interface EdgeLinkEvent {
-    eventName: EdgeLinkEventName;
-    timestamp: number;
-    metadata?: Record<string, unknown>;
-}
-type EdgeLinkEventName = 'OPEN' | 'CLOSE' | 'HANDOFF' | 'SUCCESS' | 'ERROR' | 'REDIRECT';
 declare class EdgeLink {
     private readonly config;
     private pkce;
@@ -155,6 +142,8 @@ declare function useEdgeLink(config: UseEdgeLinkConfig): UseEdgeLinkReturn;
 interface UseEdgeLinkHandlerConfig {
     /** Your redirect URI prefix */
     redirectUri: string;
+    /** PKCE code verifier from the EdgeLink instance that initiated the flow */
+    codeVerifier: string;
     /** Called on successful auth */
     onSuccess: (result: EdgeLinkSuccess) => void;
     /** Called on error or user exit */
@@ -188,12 +177,8 @@ declare function useEdgeLinkHandler(config: UseEdgeLinkHandlerConfig): UseEdgeLi
  */
 declare function useEdgeLinkEvents(onEvent: (event: EdgeLinkEvent) => void, deps?: React.DependencyList): void;
 
-interface PKCEPair {
-    verifier: string;
-    challenge: string;
-}
 declare function generatePKCE(): Promise<PKCEPair>;
-declare function generateState(): string;
+declare function generateState(): Promise<string>;
 declare function isSecureCryptoAvailable(): Promise<boolean>;
 
-export { EdgeLink, type EdgeLinkConfig, type EdgeLinkEvent, type EdgeLinkEventName, type PKCEPair, type UseEdgeLinkConfig, type UseEdgeLinkHandlerConfig, type UseEdgeLinkHandlerReturn, type UseEdgeLinkReturn, generatePKCE, generateState, isSecureCryptoAvailable, useEdgeLink, useEdgeLinkEvents, useEdgeLinkHandler };
+export { EdgeLink, type EdgeLinkConfig, type UseEdgeLinkConfig, type UseEdgeLinkHandlerConfig, type UseEdgeLinkHandlerReturn, type UseEdgeLinkReturn, generatePKCE, generateState, isSecureCryptoAvailable, useEdgeLink, useEdgeLinkEvents, useEdgeLinkHandler };

package/dist/index.d.ts

@@ -1,23 +1,10 @@
-import { EdgeEnvironment, EdgeLinkSuccess, EdgeLinkExit, EdgeScope } from '@edge-markets/connect';
-export { ALL_EDGE_SCOPES, Balance, EDGE_ENVIRONMENTS, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeLinkExit, EdgeLinkSuccess, EdgeNetworkError, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, EdgeTokens, SCOPE_DESCRIPTIONS, Transfer, User, formatScopesForEnvironment, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isNetworkError } from '@edge-markets/connect';
+import { EdgeLinkConfigBase, EdgeEnvironment, EdgeScope, EdgeLinkSuccess, EdgeLinkEvent, PKCEPair } from '@edge-markets/connect';
+export { ALL_EDGE_SCOPES, Balance, EDGE_ENVIRONMENTS, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeLinkEvent, EdgeLinkEventName, EdgeLinkExit, EdgeLinkSuccess, EdgeNetworkError, EdgePopupBlockedError, EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, EdgeTokens, PKCEPair, SCOPE_DESCRIPTIONS, Transfer, User, formatScopesForEnvironment, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isNetworkError } from '@edge-markets/connect';
 
-interface EdgeLinkConfig {
-    clientId: string;
-    environment: EdgeEnvironment;
+interface EdgeLinkConfig extends EdgeLinkConfigBase {
     redirectUri: string;
-    onSuccess: (result: EdgeLinkSuccess) => void;
-    onExit?: (metadata: EdgeLinkExit) => void;
-    onEvent?: (event: EdgeLinkEvent) => void;
-    scopes?: EdgeScope[];
-    linkUrl?: string;
     useExternalBrowser?: boolean;
 }
-interface EdgeLinkEvent {
-    eventName: EdgeLinkEventName;
-    timestamp: number;
-    metadata?: Record<string, unknown>;
-}
-type EdgeLinkEventName = 'OPEN' | 'CLOSE' | 'HANDOFF' | 'SUCCESS' | 'ERROR' | 'REDIRECT';
 declare class EdgeLink {
     private readonly config;
     private pkce;
@@ -155,6 +142,8 @@ declare function useEdgeLink(config: UseEdgeLinkConfig): UseEdgeLinkReturn;
 interface UseEdgeLinkHandlerConfig {
     /** Your redirect URI prefix */
     redirectUri: string;
+    /** PKCE code verifier from the EdgeLink instance that initiated the flow */
+    codeVerifier: string;
     /** Called on successful auth */
     onSuccess: (result: EdgeLinkSuccess) => void;
     /** Called on error or user exit */
@@ -188,12 +177,8 @@ declare function useEdgeLinkHandler(config: UseEdgeLinkHandlerConfig): UseEdgeLi
  */
 declare function useEdgeLinkEvents(onEvent: (event: EdgeLinkEvent) => void, deps?: React.DependencyList): void;
 
-interface PKCEPair {
-    verifier: string;
-    challenge: string;
-}
 declare function generatePKCE(): Promise<PKCEPair>;
-declare function generateState(): string;
+declare function generateState(): Promise<string>;
 declare function isSecureCryptoAvailable(): Promise<boolean>;
 
-export { EdgeLink, type EdgeLinkConfig, type EdgeLinkEvent, type EdgeLinkEventName, type PKCEPair, type UseEdgeLinkConfig, type UseEdgeLinkHandlerConfig, type UseEdgeLinkHandlerReturn, type UseEdgeLinkReturn, generatePKCE, generateState, isSecureCryptoAvailable, useEdgeLink, useEdgeLinkEvents, useEdgeLinkHandler };
+export { EdgeLink, type EdgeLinkConfig, type UseEdgeLinkConfig, type UseEdgeLinkHandlerConfig, type UseEdgeLinkHandlerReturn, type UseEdgeLinkReturn, generatePKCE, generateState, isSecureCryptoAvailable, useEdgeLink, useEdgeLinkEvents, useEdgeLinkHandler };

package/dist/index.js

@@ -233,13 +233,9 @@ async function getRandomBytes(byteLength) {
     return ExpoRandom.getRandomBytes(byteLength);
   } catch {
   }
-  console.warn(
-    "[EdgeLink] Using Math.random fallback - NOT CRYPTOGRAPHICALLY SECURE!\nInstall react-native-get-random-values or expo-random for production."
+  throw new Error(
+    "[EdgeLink] No cryptographically secure random source available. Install react-native-get-random-values (and import it before EdgeLink) or expo-random."
   );
-  for (let i = 0; i < byteLength; i++) {
-    array[i] = Math.floor(Math.random() * 256);
-  }
-  return array;
 }
 async function generateRandomHex(byteLength) {
   const bytes = await getRandomBytes(byteLength);
@@ -281,16 +277,9 @@ async function generatePKCE() {
   const challenge = base64UrlEncode(hash);
   return { verifier, challenge };
 }
-function generateState() {
-  const array = new Uint8Array(32);
-  if (typeof globalThis.crypto?.getRandomValues === "function") {
-    globalThis.crypto.getRandomValues(array);
-  } else {
-    for (let i = 0; i < 32; i++) {
-      array[i] = Math.floor(Math.random() * 256);
-    }
-  }
-  return Array.from(array, (byte) => byte.toString(16).padStart(2, "0")).join("");
+async function generateState() {
+  const bytes = await getRandomBytes(32);
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 async function isSecureCryptoAvailable() {
   if (typeof globalThis.crypto?.getRandomValues === "function") {
@@ -395,7 +384,7 @@ var EdgeLink = class {
     this.isOpen = true;
     try {
       this.pkce = await generatePKCE();
-      this.state = generateState();
+      this.state = await generateState();
       this.setupLinkListener();
       const url = this.buildLinkUrl();
       this.emitEvent("HANDOFF", { url });
@@ -630,7 +619,6 @@ function useEdgeLinkHandler(config) {
         const state = parsed.searchParams.get("state");
         const error = parsed.searchParams.get("error");
         const errorDescription = parsed.searchParams.get("error_description");
-        const codeVerifier = parsed.searchParams.get("code_verifier");
         if (error) {
           config.onError?.({
             code: error,
@@ -641,8 +629,7 @@ function useEdgeLinkHandler(config) {
         if (code && state) {
           config.onSuccess({
             code,
-            codeVerifier: codeVerifier || "",
-            // Might be empty if not passed in URL
+            codeVerifier: config.codeVerifier,
             state
           });
           return true;

package/dist/index.mjs

@@ -198,13 +198,9 @@ async function getRandomBytes(byteLength) {
     return ExpoRandom.getRandomBytes(byteLength);
   } catch {
   }
-  console.warn(
-    "[EdgeLink] Using Math.random fallback - NOT CRYPTOGRAPHICALLY SECURE!\nInstall react-native-get-random-values or expo-random for production."
+  throw new Error(
+    "[EdgeLink] No cryptographically secure random source available. Install react-native-get-random-values (and import it before EdgeLink) or expo-random."
   );
-  for (let i = 0; i < byteLength; i++) {
-    array[i] = Math.floor(Math.random() * 256);
-  }
-  return array;
 }
 async function generateRandomHex(byteLength) {
   const bytes = await getRandomBytes(byteLength);
@@ -246,16 +242,9 @@ async function generatePKCE() {
   const challenge = base64UrlEncode(hash);
   return { verifier, challenge };
 }
-function generateState() {
-  const array = new Uint8Array(32);
-  if (typeof globalThis.crypto?.getRandomValues === "function") {
-    globalThis.crypto.getRandomValues(array);
-  } else {
-    for (let i = 0; i < 32; i++) {
-      array[i] = Math.floor(Math.random() * 256);
-    }
-  }
-  return Array.from(array, (byte) => byte.toString(16).padStart(2, "0")).join("");
+async function generateState() {
+  const bytes = await getRandomBytes(32);
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 async function isSecureCryptoAvailable() {
   if (typeof globalThis.crypto?.getRandomValues === "function") {
@@ -360,7 +349,7 @@ var EdgeLink = class {
     this.isOpen = true;
     try {
       this.pkce = await generatePKCE();
-      this.state = generateState();
+      this.state = await generateState();
       this.setupLinkListener();
       const url = this.buildLinkUrl();
       this.emitEvent("HANDOFF", { url });
@@ -595,7 +584,6 @@ function useEdgeLinkHandler(config) {
         const state = parsed.searchParams.get("state");
         const error = parsed.searchParams.get("error");
         const errorDescription = parsed.searchParams.get("error_description");
-        const codeVerifier = parsed.searchParams.get("code_verifier");
         if (error) {
           config.onError?.({
             code: error,
@@ -606,8 +594,7 @@ function useEdgeLinkHandler(config) {
         if (code && state) {
           config.onSuccess({
             code,
-            codeVerifier: codeVerifier || "",
-            // Might be empty if not passed in URL
+            codeVerifier: config.codeVerifier,
             state
           });
           return true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect-react-native",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "React Native SDK for EDGE Connect authentication flow for mobile apps",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -30,7 +30,7 @@
   "author": "EdgeBoost",
   "license": "MIT",
   "dependencies": {
-    "@edge-markets/connect": "^1.0.0"
+    "@edge-markets/connect": "1.3.0"
   },
   "peerDependencies": {
     "react": ">=18.0.0",