@elvix.is/sdk 0.5.0 → 0.5.1

package/dist/react.js

@@ -193,6 +193,15 @@ function authInit() {
   const token = getElvixToken();
   return token ? { headers: { authorization: `Bearer ${token}` }, credentials: "omit" } : { headers: {}, credentials: "include" };
 }
+function isSameOrigin(baseUrl) {
+  if (!baseUrl) return true;
+  if (typeof window === "undefined") return true;
+  try {
+    return new URL(baseUrl, window.location.href).origin === window.location.origin;
+  } catch {
+    return true;
+  }
+}
 
 // src/react/elvix-sign-in.tsx
 function ElvixSignIn({
@@ -228,7 +237,7 @@ function ElvixSignIn({
       const res = await fetch(`${ctx.baseUrl}/api/auth/otp/start`, {
         method: "POST",
         headers: { "content-type": "application/json" },
-        credentials: "include",
+        credentials: isSameOrigin(ctx.baseUrl) ? "include" : "omit",
         body: JSON.stringify({
           email: email.trim(),
           intent: "app",
@@ -257,7 +266,7 @@ function ElvixSignIn({
       const res = await fetch(`${ctx.baseUrl}/api/auth/otp/verify`, {
         method: "POST",
         headers: { "content-type": "application/json" },
-        credentials: "include",
+        credentials: isSameOrigin(ctx.baseUrl) ? "include" : "omit",
         body: JSON.stringify({ challengeId, code: code.trim() })
       });
       const body = await res.json();
@@ -682,7 +691,7 @@ function ElvixSessions({
   useEffect4(() => {
     if (!ctx.app) return;
     fetch(`${ctx.baseUrl}/api/account/apps/${ctx.app.applicationId}/sessions`, {
-      credentials: "include"
+      ...authInit()
     }).then((r) => r.json()).then((j) => {
       if (j.success && j.data) setRows(j.data.sessions);
       else setError("load_failed");
@@ -880,7 +889,7 @@ function ElvixAddressBook({
   function reload() {
     if (!ctx.app) return;
     fetch(`${ctx.baseUrl}/api/account/apps/${ctx.app.applicationId}/addresses`, {
-      credentials: "include"
+      ...authInit()
     }).then((r) => r.json()).then((j) => {
       if (j.success && j.data) setRows(j.data.addresses);
       else setError("load_failed");
@@ -940,7 +949,7 @@ function ElvixLegalEntities({
   function reload() {
     if (!ctx.app) return;
     fetch(`${ctx.baseUrl}/api/account/apps/${ctx.app.applicationId}/legal-entities`, {
-      credentials: "include"
+      ...authInit()
     }).then((r) => r.json()).then((j) => {
       if (j.success && j.data) setRows(j.data.entities);
       else setError("load_failed");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elvix.is/sdk",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Official elvix SDK. Drop-in React components, server helpers, and an MCP server so AI coding agents integrate elvix on the first try.",
   "license": "MIT",
   "homepage": "https://elvix.is",