@erikey/react 0.4.29 → 0.4.31

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erikey/react",
-  "version": "0.4.29",
+  "version": "0.4.31",
   "description": "React SDK for Erikey - B2B authentication and user management. UI components based on better-auth-ui.",
   "main": "./dist/index.mjs",
   "module": "./dist/index.mjs",

package/src/auth-client.ts

@@ -13,7 +13,7 @@
  */
 
 import { createAuthClient as createBetterAuthClient } from 'better-auth/react';
-import { siweClient } from 'better-auth/client/plugins';
+import { siweClient, emailOTPClient } from 'better-auth/client/plugins';
 import {
   shouldUseBearerAuth,
   storeToken,
@@ -145,8 +145,8 @@ export function createAuthClient(config: AuthClientConfig) {
     fetchOptions,
     // For same-origin, include cookies (cross-origin uses Bearer from fetchOptions.auth)
     ...(!useBearerAuth && { credentials: 'include' as const }),
-    // Enable SIWE (Sign-In with Ethereum) support
-    plugins: [siweClient()],
+    // Enable SIWE (Sign-In with Ethereum) and email OTP support
+    plugins: [siweClient(), emailOTPClient()],
   });
 
   return client;

package/src/ui/components/auth/forms/sign-up-form.tsx

@@ -384,13 +384,25 @@ export function SignUpForm({
                 fetchOptions
             })
 
-            if ("token" in data && data.token) {
+            // Check for 2FA redirect first (same pattern as sign-in form)
+            if ((data as { twoFactorRedirect?: boolean }).twoFactorRedirect) {
+                navigate(
+                    `${basePath}/${viewPaths.TWO_FACTOR}${window.location.search}`
+                )
+            } else if ("token" in data && data.token) {
+                // Token present = verified or no verification required
                 await onSuccess()
-            } else if (emailVerification?.otp) {
+            } else if (
+                data.user &&
+                (data.user as { emailVerified?: boolean }).emailVerified === false
+            ) {
+                // No token + emailVerified: false = needs verification
+                // This is response-based (Better Auth pattern), not config-based
                 navigate(
                     `${basePath}/${viewPaths.EMAIL_VERIFICATION}?email=${encodeURIComponent(email as string)}`
                 )
             } else {
+                // Fallback: redirect to sign-in (e.g., link-based verification sent)
                 navigate(
                     `${basePath}/${viewPaths.SIGN_IN}${window.location.search}`
                 )