@flow-industries/id 0.7.1 → 0.8.1

package/dist/sdk/client/create-flow.js

@@ -307,6 +307,17 @@ export function createFlow(options = {}) {
             accessKeyPrep = await accessKeyModule.prepareAccessKey(accessKeyOptions, chain.id);
             extraCapabilities = { accessKeyHash: accessKeyPrep.accessKeyHash };
         }
+        // When the current session is a guest, forward its access token so a
+        // sign-up upgrades that guest in place even where the guest cookie is
+        // unreadable (the iOS top-level sign-up popup). The server verifies it
+        // before honoring it, so an app that never becomes a guest sends nothing.
+        const snapshot = store.getSnapshot();
+        if (snapshot.user?.isGuest && snapshot.jwt) {
+            extraCapabilities = {
+                ...(extraCapabilities ?? {}),
+                guestToken: snapshot.jwt,
+            };
+        }
         const { session, webauthn, refreshToken } = await runLogin({
             dialog: dialogHost,
             store,

package/dist/sdk/client/refresh-store.js

@@ -10,6 +10,11 @@ export function makeRefreshStore(host) {
             }
         },
         set(token) {
+            // Never persist a missing token: localStorage.setItem coerces undefined
+            // to the literal "undefined", which later reads back as a bogus bearer
+            // and 401s as refresh_token_invalid. Fail safe by ignoring it instead.
+            if (!token)
+                return;
             try {
                 localStorage.setItem(key, token);
             }

package/dist/sdk/types/protocol.d.ts

@@ -7,6 +7,13 @@ export type ConnectCapabilities = {
     accessKeyHash?: string;
     signInHeadless?: boolean;
     credentialId?: string;
+    /**
+     * The current guest's access JWT, forwarded so a sign-up upgrades that guest
+     * in place even where the guest cookie is unreadable (the iOS top-level
+     * sign-up popup). The server verifies it before letting it stand in for the
+     * cookie session; see the register endpoint.
+     */
+    guestToken?: string;
 };
 export type ConnectRequest = [{
     capabilities?: ConnectCapabilities;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flow-industries/id",
-  "version": "0.7.1",
+  "version": "0.8.1",
   "main": "./dist/sdk/client/index.js",
   "module": "./dist/sdk/client/index.js",
   "types": "./dist/sdk/client/index.d.ts",