@explorins/pers-signer 1.0.27 → 1.0.32

package/dist/browser.cjs.js

@@ -137,13 +137,11 @@ const SIGNER_CONFIG = {
      * Used as fallback when production signer API is unavailable
      */
     STAGING_SIGNER_API_URL: 'https://signer-api-staging.pers.ninja/v1',
-    // STAGING_SIGNER_API_URL: 'http://localhost:8080/v1',
     /**
      * PERS Platform API URLs
      */
     DEFAULT_PERS_API_URL: 'https://api.pers.ninja/v2',
     STAGING_PERS_API_URL: 'https://dev.api.pers.ninja/v2',
-    // STAGING_PERS_API_URL: 'https://explorins-loyalty.ngrok.io',
     /**
      * Default relying party name for WebAuthn operations
      * This appears in the browser's authentication prompts
@@ -155,8 +153,31 @@ const SIGNER_CONFIG = {
  */
 // Default fallback provider for Sepolia testnet (no API key required)
 const DEFAULT_FALLBACK_PROVIDER = 'https://ethereum-sepolia.publicnode.com';
+/**
+ * WebAuthn configuration constants
+ */
+const WEBAUTHN_CONFIG = {
+    /**
+     * Timeout for WebAuthn operations (in milliseconds)
+     */
+    TIMEOUT: 60000,
+    /**
+     * User verification requirement
+     * 'preferred' - ask for verification if available
+     * 'required' - require verification
+     * 'discouraged' - don't ask for verification
+     */
+    USER_VERIFICATION: 'preferred',
+    /**
+     * Resident key requirement (Passkeys)
+     */
+    RESIDENT_KEY: 'required',
+    /**
+     * Authenticator attachment preference
+     */
+    AUTHENTICATOR_ATTACHMENT: 'platform',
+};
 
-// import serviceState from '../core/ServiceState';
 /**
  * Detects the environment (Staging vs Production) based on the JWT token issuer.
  * Updates the global service state accordingly.
@@ -170,16 +191,8 @@ function detectStagingEnvironmentFromToken(token) {
         // Check if issuer matches staging URL
         if (payload.iss === SIGNER_CONFIG.STAGING_PERS_API_URL
             || SIGNER_CONFIG.STAGING_PERS_API_URL.includes(payload.iss)
-            || SIGNER_CONFIG.STAGING_SIGNER_API_URL.includes(payload.iss)
-        // Temporary additional checks for known staging issuers
-        // || 'https://signer-api-staging.pers.ninja'.includes(payload.iss)
-        // || 'https://dev.api.pers.ninja/v2'.includes(payload.iss)
-        ) {
+            || SIGNER_CONFIG.STAGING_SIGNER_API_URL.includes(payload.iss)) {
             return true;
-            /* } else if (payload.iss === SIGNER_CONFIG.DEFAULT_PERS_API_URL ||
-                       SIGNER_CONFIG.DEFAULT_PERS_API_URL.includes(payload.iss)) {
-               // Explicitly production
-               return false; */
         }
     }
     return false;
@@ -1206,11 +1219,11 @@ class TransactionSigningService {
         let provider;
         try {
             // Try primary provider first
-            console.info(`[TransactionSigningService] Attempting to connect to primary provider: ${ethersProviderUrl}`);
+            //console.info(`[TransactionSigningService] Attempting to connect to primary provider: ${ethersProviderUrl}`);
             provider = new ethers.JsonRpcProvider(ethersProviderUrl);
             // Test the connection with a simple call
             await provider.getNetwork();
-            console.info(`[TransactionSigningService] Successfully connected to primary provider`);
+            //console.info(`[TransactionSigningService] Successfully connected to primary provider`);
         }
         catch (primaryError) {
             console.warn(`[TransactionSigningService] Primary provider failed, falling back to: ${DEFAULT_FALLBACK_PROVIDER}`, primaryError);
@@ -1218,7 +1231,7 @@ class TransactionSigningService {
                 provider = new ethers.JsonRpcProvider(DEFAULT_FALLBACK_PROVIDER);
                 // Test the fallback connection
                 await provider.getNetwork();
-                console.info(`[TransactionSigningService] Successfully connected to fallback provider`);
+                //console.info(`[TransactionSigningService] Successfully connected to fallback provider`);
             }
             catch (fallbackError) {
                 console.error(`[TransactionSigningService] Both primary and fallback providers failed`, { primaryError, fallbackError });
@@ -1282,13 +1295,13 @@ class TransactionSigningService {
         // Validate input parameters first using TransactionValidator
         TransactionValidator.validateSigningParams(params);
         const { transactionId, authTokens, ethersProviderUrl } = params;
-        console.info(`[TransactionSigningService] Starting signature process for ${transactionId}`);
+        // console.info(`[TransactionSigningService] Starting signature process for ${transactionId}`);
         try {
             // Step 2: Prepare wallet for signing
             const wallet = await this.prepareWallet(authTokens, ethersProviderUrl);
             // Step 3: Execute transaction signing
             const signature = await this.executeTransactionSigning(wallet, signingData);
-            console.info(`[TransactionSigningService] Completed signing successfully: ${transactionId}`);
+            // console.info(`[TransactionSigningService] Completed signing successfully: ${transactionId}`);
             return {
                 success: true,
                 transactionId,
@@ -1587,7 +1600,7 @@ class AuthenticationService {
     async combinedAuthentication(identifier, persAccessToken) {
         try {
             // Step 1: Try to login with PERS token first (this will get signer JWT if user exists)
-            let signerToken;
+            let signerToken = null;
             try {
                 const loginResult = await this.loginWithPersToken(persAccessToken);
                 // Extract token from login result
@@ -1601,6 +1614,11 @@ class AuthenticationService {
             catch (loginError) {
                 // Step 2: User doesn't exist - register with v1 API (Unified Flow)
                 try {
+                    // Only proceed to registration if the error is explicitly 'user_not_found'
+                    const errorMessage = loginError instanceof Error ? loginError.message : String(loginError);
+                    if (errorMessage !== 'user_not_found') {
+                        throw loginError;
+                    }
                     const registerResult = await this.registerUser(persAccessToken);
                     if (registerResult && registerResult.access_token) {
                         signerToken = registerResult.access_token;
@@ -1611,9 +1629,13 @@ class AuthenticationService {
                 }
                 catch (registerError) {
                     console.error(`[AuthenticationService] Registration failed for ${identifier}:`, registerError);
+                    // Explicitly rethrow to abort the entire authentication process
                     throw registerError;
                 }
             }
+            if (!signerToken) {
+                throw new Error('Authentication failed: Unable to obtain signer token');
+            }
             const user = {
                 identifier: identifier,
                 signerAuthToken: signerToken,
@@ -1623,8 +1645,9 @@ class AuthenticationService {
             return user;
         }
         catch (error) {
-            console.error(`[PersSignerSDK] Combined authentication failed for ${identifier}:`, error);
-            throw new Error(`Combined authentication failed: ${error}`);
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            console.error(`[PersSignerSDK] Combined authentication failed for ${identifier}:`, errorMessage);
+            throw new Error(`Combined authentication failed: ${errorMessage}`);
         }
     }
 }
@@ -1757,7 +1780,6 @@ class PersSignerSDK {
      * @throws {Error} If required configuration is missing
      */
     constructor(config) {
-        // console.log('DEBUG: v1.2.0')
         this.config = config;
         setConfigProvider(new WebConfigProvider({
             apiUrl: config.apiUrl || SIGNER_CONFIG.DEFAULT_SIGNER_API_URL,
@@ -1966,10 +1988,12 @@ class PersSignerSDK {
                 authTokens,
                 ethersProviderUrl: this.config.ethersProviderUrl ?? DEFAULT_FALLBACK_PROVIDER
             }, signingData);
-            this.triggerStatusUpdate(SigningStatus.COMPLETED, 'Transaction signed successfully', {
-                transactionId: payload.transactionId,
-                signature: result.signature
-            }, statusCallback);
+            if (result.success) {
+                this.triggerStatusUpdate(SigningStatus.COMPLETED, 'Transaction signed successfully', {
+                    transactionId: payload.transactionId,
+                    signature: result.signature
+                }, statusCallback);
+            }
             return result;
         }
         catch (error) {
@@ -2113,6 +2137,28 @@ class PersSignerSDK {
     }
 }
 
+/**
+ * Get the WebAuthn configuration based on the current environment.
+ * This logic is shared between browser and React Native implementations
+ * to ensure consistent behavior while respecting platform differences.
+ */
+function getWebAuthnConfig() {
+    // Check if running in a browser environment with window.location available
+    // We use a safe check that won't crash in React Native
+    const isBrowser = typeof window !== 'undefined' && !!window.location && !!window.location.hostname;
+    return {
+        relyingParty: {
+            // In browser, prefer the actual hostname to avoid RP ID mismatch errors
+            // In React Native, use the configured default RP ID
+            id: isBrowser ? window.location.hostname : SIGNER_CONFIG.DEFAULT_RELYING_PARTY_ID,
+            name: SIGNER_CONFIG.DEFAULT_RELYING_PARTY_NAME,
+            // In browser, use the actual origin
+            // In React Native, fallback to the default RP ID (or a configured origin if added later)
+            origin: isBrowser ? window.location.origin : SIGNER_CONFIG.DEFAULT_RELYING_PARTY_ID,
+        }
+    };
+}
+
 /**
  * Base64URL encoding/decoding utilities
  * Used for WebAuthn credential ID and challenge handling
@@ -2176,9 +2222,8 @@ class BrowserWebAuthnProvider {
             // 1. Prepare options for navigator.credentials.create
             // We construct authenticatorSelection manually to ensure no conflicting legacy properties are present
             const authenticatorSelection = {
-                residentKey: 'required', // Force Passkey (discoverable credential)
-                // requireResidentKey: true, // REMOVED: Legacy property that can cause conflicts with 1Password
-                userVerification: challenge.authenticatorSelection?.userVerification || 'preferred',
+                residentKey: WEBAUTHN_CONFIG.RESIDENT_KEY, // Force Passkey (discoverable credential)
+                userVerification: challenge.authenticatorSelection?.userVerification || WEBAUTHN_CONFIG.USER_VERIFICATION,
             };
             const publicKey = {
                 challenge: base64UrlToBuffer(challenge.challenge),
@@ -2194,16 +2239,13 @@ class BrowserWebAuthnProvider {
                 pubKeyCredParams: challenge.pubKeyCredParams,
                 authenticatorSelection,
                 attestation: 'none',
-                timeout: challenge.timeout || 60000,
+                timeout: challenge.timeout || WEBAUTHN_CONFIG.TIMEOUT,
                 excludeCredentials: challenge.excludeCredentials?.map((cred) => ({
                     id: base64UrlToBuffer(cred.id),
                     type: 'public-key',
                     transports: cred.transports,
                 })),
             };
-            // console.log('WebAuthn create options:', publicKey);
-            // console.log('WebAuthn create challenge:', challenge);
-            // console.log('this.config', this.config)
             // 2. Call the browser's native WebAuthn API
             const credential = await navigator.credentials.create({ publicKey });
             if (!credential)
@@ -2227,8 +2269,8 @@ class BrowserWebAuthnProvider {
             const publicKey = {
                 challenge: base64UrlToBuffer(challenge.challenge),
                 rpId: challenge.rpId || this.config.relyingParty.id,
-                userVerification: challenge.userVerification || 'preferred',
-                timeout: 60000,
+                userVerification: challenge.userVerification || WEBAUTHN_CONFIG.USER_VERIFICATION,
+                timeout: WEBAUTHN_CONFIG.TIMEOUT,
                 allowCredentials: challenge.allowCredentials?.webauthn?.map((cred) => ({
                     id: base64UrlToBuffer(cred.id),
                     type: 'public-key',
@@ -2267,13 +2309,7 @@ class BrowserWebAuthnProvider {
  * Get WebAuthn provider for browser environments
  */
 async function getBrowserWebAuthnProvider() {
-    const config = {
-        relyingParty: {
-            id: typeof window !== 'undefined' ? window.location.hostname : SIGNER_CONFIG.DEFAULT_RELYING_PARTY_ID,
-            name: SIGNER_CONFIG.DEFAULT_RELYING_PARTY_NAME,
-            origin: typeof window !== 'undefined' ? window.location.origin : SIGNER_CONFIG.DEFAULT_RELYING_PARTY_ID,
-        }
-    };
+    const config = getWebAuthnConfig();
     return new BrowserWebAuthnProvider(config);
 }