@explorins/pers-sdk-react-native 1.5.29 → 1.5.31

package/README.md

@@ -398,6 +398,15 @@ The `PersSDKProvider` accepts a `config` object allowing you to customize behavi
 </PersSDKProvider>
 ```
 
+### Storage Fallback Strategy
+
+The SDK implements a robust **Hybrid Storage Strategy**:
+1.  **Primary**: Attempts to use **Android Keystore / iOS Keychain** (via `react-native-keychain`) for maximum security.
+2.  **Fallback**: If hardware storage is unavailable or fails, it automatically falls back to **AsyncStorage**.
+3.  **Web**: Uses `localStorage` automatically.
+
+This ensures your app works reliably across all devices while prioritizing security where available.
+
 ### Custom Authentication Provider
 
 The SDK automatically uses `ReactNativeSecureStorage` for React Native (iOS/Android) and `LocalStorageTokenStorage` for Web. You can customize this if needed:

package/dist/index.js

@@ -32215,16 +32215,26 @@ function createReactNativeAuthProvider(projectKey, config = {}) {
     if (!projectKey || typeof projectKey !== 'string') {
         throw new Error('createReactNativeAuthProvider: projectKey is required and must be a string');
     }
-    const { keyPrefix = `pers_${projectKey.slice(0, 8)}_`, debug = false, customStorage, authType = 'user' } = config;
+    const { keyPrefix = `pers_${projectKey.slice(0, 8)}_`, debug = false, customStorage, authType = 'user', dpop } = config;
     // Platform-specific storage selection
     const tokenStorage = customStorage || (isWebPlatform
         ? new LocalStorageTokenStorage()
         : new ReactNativeSecureStorage(keyPrefix));
+    // Prepare DPoP config ensuring enabled is boolean (default true)
+    const dpopConfig = dpop ? {
+        enabled: dpop.enabled ?? true,
+        cryptoProvider: dpop.cryptoProvider
+    } : undefined;
+    // DEBUG LOGGING
+    if (debug) {
+        console.log('[ReactNativeAuthProvider] Creating provider with DPoP config:', JSON.stringify(dpopConfig));
+    }
     // Return DefaultAuthProvider configured with platform-appropriate storage
     return new DefaultAuthProvider({
         authType,
         projectKey,
-        storage: tokenStorage
+        storage: tokenStorage,
+        dpop: dpopConfig
     });
 }
 
@@ -32548,6 +32558,17 @@ const PersSDKProvider = ({ children, config }) => {
         try {
             // Create HTTP client
             const httpClient = new ReactNativeHttpClient();
+            const dpopConfig = config.dpop ?? {};
+            const isDpopEnabled = dpopConfig.enabled ?? true;
+            // Prepare DPoP settings for Auth Provider
+            const dpopSettings = {
+                enabled: isDpopEnabled,
+                cryptoProvider: dpopConfig.cryptoProvider
+            };
+            // Inject Native DPoP Provider (crypto-based) for mobile platforms if not already provided
+            if (reactNative.Platform.OS !== 'web' && isDpopEnabled && !dpopSettings.cryptoProvider) {
+                dpopSettings.cryptoProvider = new ReactNativeDPoPProvider();
+            }
             // Create platform-aware auth provider if not provided
             let authProvider;
             if (config.authProvider) {
@@ -32556,23 +32577,16 @@ const PersSDKProvider = ({ children, config }) => {
             else {
                 // Use our platform-aware auth provider that automatically selects LocalStorage (web) or AsyncStorage (mobile)
                 authProvider = createReactNativeAuthProvider(config.apiProjectKey || 'default-project', {
-                    debug: false
+                    debug: false,
+                    dpop: dpopSettings
                 });
             }
             // Enhanced config with platform-appropriate auth provider
             const sdkConfig = {
                 ...config,
-                authProvider
+                authProvider,
+                dpop: dpopSettings
             };
-            // Inject Native DPoP Provider (crypto-based) for mobile platforms
-            // Web platforms use built-in WebCrypto provider by default
-            if (reactNative.Platform.OS !== 'web' && (!config.dpop?.cryptoProvider)) {
-                sdkConfig.dpop = {
-                    ...(config.dpop || {}),
-                    enabled: config.dpop?.enabled ?? true,
-                    cryptoProvider: new ReactNativeDPoPProvider()
-                };
-            }
             // Initialize PersSDK with platform-aware auth provider
             const sdkInstance = new PersSDK(httpClient, sdkConfig);
             setAuthProvider(authProvider);