@glideidentity/web-client-sdk 5.0.1 → 5.1.1-beta.3

package/dist/browser.js

@@ -1,8 +1,12 @@
 "use strict";
+// Browser-specific entry point for vanilla JavaScript usage
+// This excludes framework-specific adapters that require Angular/React/Vue
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PhoneAuthManager = exports.ClientManager = exports.BrowserName = exports.BrowserErrorCode = exports.BrowserError = exports.AuthenticationStrategy = exports.UseCase = exports.createErrorBreadcrumb = exports.serializeError = exports.isRetryableError = exports.getRetryDelay = exports.isErrorCode = exports.getUserMessage = exports.isUserError = exports.isPhoneAuthError = exports.PhoneAuthErrorCode = exports.PhoneAuthClient = void 0;
+// Phone Authentication - Core client
 var phone_auth_1 = require("./core/phone-auth");
 Object.defineProperty(exports, "PhoneAuthClient", { enumerable: true, get: function () { return phone_auth_1.PhoneAuthClient; } });
+// Phone Auth Error Utilities
 var phone_auth_2 = require("./core/phone-auth");
 Object.defineProperty(exports, "PhoneAuthErrorCode", { enumerable: true, get: function () { return phone_auth_2.PhoneAuthErrorCode; } });
 Object.defineProperty(exports, "isPhoneAuthError", { enumerable: true, get: function () { return phone_auth_2.isPhoneAuthError; } });
@@ -13,12 +17,14 @@ Object.defineProperty(exports, "getRetryDelay", { enumerable: true, get: functio
 Object.defineProperty(exports, "isRetryableError", { enumerable: true, get: function () { return phone_auth_2.isRetryableError; } });
 Object.defineProperty(exports, "serializeError", { enumerable: true, get: function () { return phone_auth_2.serializeError; } });
 Object.defineProperty(exports, "createErrorBreadcrumb", { enumerable: true, get: function () { return phone_auth_2.createErrorBreadcrumb; } });
+// Export constants for use case and strategy
 var types_1 = require("./core/phone-auth/types");
 Object.defineProperty(exports, "UseCase", { enumerable: true, get: function () { return types_1.USE_CASE; } });
 Object.defineProperty(exports, "AuthenticationStrategy", { enumerable: true, get: function () { return types_1.AUTHENTICATION_STRATEGY; } });
 Object.defineProperty(exports, "BrowserError", { enumerable: true, get: function () { return types_1.BrowserError; } });
 Object.defineProperty(exports, "BrowserErrorCode", { enumerable: true, get: function () { return types_1.BrowserErrorCode; } });
 Object.defineProperty(exports, "BrowserName", { enumerable: true, get: function () { return types_1.BrowserName; } });
+// Vanilla adapters ONLY (no framework dependencies)
 var client_1 = require("./adapters/vanilla/client");
 Object.defineProperty(exports, "ClientManager", { enumerable: true, get: function () { return client_1.VanillaClient; } });
 var phone_auth_3 = require("./adapters/vanilla/phone-auth");

package/dist/core/client.js

@@ -25,6 +25,7 @@ class SDKClient {
                 'Content-Type': 'application/json',
             },
         });
+        // Initialize Phone Auth client
         this.phoneAuth = new phone_auth_1.PhoneAuthClient({
             endpoints: config.phoneAuthEndpoints ? {
                 prepare: config.phoneAuthEndpoints.prepareRequest,
@@ -32,6 +33,7 @@ class SDKClient {
             } : undefined,
             debug: config.debug
         });
+        // Add authentication interceptor
         this.client.interceptors.request.use((config) => __awaiter(this, void 0, void 0, function* () {
             if (this.token) {
                 config.headers.Authorization = `Bearer ${this.token}`;
@@ -39,12 +41,22 @@ class SDKClient {
             return config;
         }));
     }
+    /**
+     * Set authentication token for API requests
+     */
     setToken(token) {
         this.token = token;
     }
+    /**
+     * Clear authentication token
+     */
     clearToken() {
         this.token = undefined;
     }
+    /**
+     * Make a GET request to the API
+     * Note: Requires baseURL to be set in the config
+     */
     get(path, options) {
         return __awaiter(this, void 0, void 0, function* () {
             if (!this.config.baseURL) {

package/dist/core/logger.js

@@ -1,4 +1,8 @@
 "use strict";
+/**
+ * Industry-grade logging for Glide Web SDK
+ * Following best practices from Stripe, Auth0, Twilio, and AWS Amplify
+ */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -21,6 +25,9 @@ var LogLevel;
     LogLevel[LogLevel["INFO"] = 3] = "INFO";
     LogLevel[LogLevel["DEBUG"] = 4] = "DEBUG";
 })(LogLevel || (exports.LogLevel = LogLevel = {}));
+/**
+ * Default browser console logger with automatic data sanitization
+ */
 class ConsoleLogger {
     constructor(level = LogLevel.SILENT, prefix = '[Glide]', enableGrouping = false) {
         this.level = level;
@@ -50,7 +57,9 @@ class ConsoleLogger {
     log(level, message, fields) {
         const timestamp = new Date().toISOString();
         const sanitizedFields = fields ? this.sanitizeFields(fields) : {};
+        // Format the message
         const formattedMessage = `${this.prefix} ${timestamp} [${level.toUpperCase()}] ${message}`;
+        // Use console grouping for better readability if enabled
         if (this.enableGrouping && Object.keys(sanitizedFields).length > 0) {
             console.groupCollapsed(formattedMessage);
             Object.entries(sanitizedFields).forEach(([key, value]) => {
@@ -59,6 +68,7 @@ class ConsoleLogger {
             console.groupEnd();
         }
         else {
+            // Standard logging with or without fields
             if (Object.keys(sanitizedFields).length > 0) {
                 console[level](formattedMessage, sanitizedFields);
             }
@@ -67,6 +77,9 @@ class ConsoleLogger {
             }
         }
     }
+    /**
+     * Sanitize sensitive data from log fields
+     */
     sanitizeFields(fields) {
         const sanitized = {};
         for (const [key, value] of Object.entries(fields)) {
@@ -74,7 +87,11 @@ class ConsoleLogger {
         }
         return sanitized;
     }
+    /**
+     * Redact sensitive information based on field name and value patterns
+     */
     sanitizeValue(key, value) {
+        // List of sensitive field patterns
         const sensitiveFields = [
             'apikey', 'api_key', 'apiKey',
             'token', 'accesstoken', 'access_token', 'accessToken',
@@ -84,6 +101,7 @@ class ConsoleLogger {
             'cookie', 'session',
         ];
         const lowerKey = key.toLowerCase();
+        // Check if field name indicates sensitive data
         for (const sensitive of sensitiveFields) {
             if (lowerKey.includes(sensitive.toLowerCase())) {
                 if (typeof value === 'string' && value.length > 4) {
@@ -92,30 +110,38 @@ class ConsoleLogger {
                 return '****[REDACTED]';
             }
         }
+        // Handle specific value patterns
         if (typeof value === 'string') {
+            // Phone number pattern - show area code only
             const phoneRegex = /^\+?[1-9]\d{6,14}$/;
             if (phoneRegex.test(value)) {
                 return value.substring(0, 6) + '****';
             }
+            // Email pattern - show domain only
             const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
             if (emailRegex.test(value)) {
                 const [, domain] = value.split('@');
                 return '****@' + domain;
             }
+            // URL with credentials
             if (value.includes('://') && value.includes('@')) {
                 return value.replace(/\/\/([^:]+):([^@]+)@/, '//****:****@');
             }
+            // JWT tokens
             if (value.startsWith('eyJ') && value.split('.').length === 3) {
                 return value.substring(0, 10) + '****[JWT]';
             }
+            // Credit card numbers
             const creditCardRegex = /\b\d{13,19}\b/;
             if (creditCardRegex.test(value)) {
                 return value.substring(0, 4) + '****' + value.substring(value.length - 4);
             }
         }
+        // Recursively sanitize objects
         if (value && typeof value === 'object' && !Array.isArray(value)) {
             return this.sanitizeFields(value);
         }
+        // Sanitize arrays
         if (Array.isArray(value)) {
             return value.map((item, index) => this.sanitizeValue(`${key}[${index}]`, item));
         }
@@ -123,6 +149,9 @@ class ConsoleLogger {
     }
 }
 exports.ConsoleLogger = ConsoleLogger;
+/**
+ * No-op logger for when logging is disabled
+ */
 class NoopLogger {
     debug(message, fields) { }
     info(message, fields) { }
@@ -130,16 +159,22 @@ class NoopLogger {
     error(message, fields) { }
 }
 exports.NoopLogger = NoopLogger;
+/**
+ * Remote logger for sending logs to a backend service
+ * Useful for debugging production issues
+ */
 class RemoteLogger {
     constructor(endpoint, apiKey, fallbackLogger) {
         this.buffer = [];
-        this.flushInterval = 5000;
+        this.flushInterval = 5000; // 5 seconds
         this.maxBufferSize = 100;
         this.endpoint = endpoint;
         this.apiKey = apiKey;
         this.localLogger = fallbackLogger || new ConsoleLogger(LogLevel.ERROR);
+        // Set up automatic flushing
         if (typeof window !== 'undefined') {
             setInterval(() => this.flush(), this.flushInterval);
+            // Flush on page unload
             window.addEventListener('beforeunload', () => this.flush());
         }
     }
@@ -165,7 +200,9 @@ class RemoteLogger {
             url: typeof window !== 'undefined' ? window.location.href : undefined,
         };
         this.buffer.push(logEntry);
+        // Also log locally for immediate feedback
         this.localLogger[level](message, fields);
+        // Flush if buffer is full
         if (this.buffer.length >= this.maxBufferSize) {
             this.flush();
         }
@@ -187,12 +224,18 @@ class RemoteLogger {
                 });
             }
             catch (error) {
+                // Failed to send logs, log locally
                 this.localLogger.error('Failed to send logs to remote server', { error });
+                // Optionally, put logs back in buffer for retry
+                // this.buffer.unshift(...logs);
             }
         });
     }
 }
 exports.RemoteLogger = RemoteLogger;
+/**
+ * Parse log level from string
+ */
 function parseLogLevel(level) {
     switch (level.toLowerCase()) {
         case 'debug':
@@ -212,7 +255,11 @@ function parseLogLevel(level) {
             return LogLevel.SILENT;
     }
 }
+/**
+ * Get log level from browser environment
+ */
 function getLogLevelFromEnv() {
+    // Check localStorage
     if (typeof localStorage !== 'undefined') {
         const storedLevel = localStorage.getItem('GLIDE_LOG_LEVEL');
         if (storedLevel) {
@@ -223,6 +270,7 @@ function getLogLevelFromEnv() {
             return LogLevel.DEBUG;
         }
     }
+    // Check URL parameters
     if (typeof window !== 'undefined' && window.location) {
         const params = new URLSearchParams(window.location.search);
         const urlLogLevel = params.get('glide_log_level');
@@ -235,19 +283,31 @@ function getLogLevelFromEnv() {
     }
     return LogLevel.SILENT;
 }
+/**
+ * Performance timer for measuring operation duration
+ */
 class PerformanceTimer {
     constructor(logger) {
         this.marks = new Map();
         this.startTime = performance.now();
         this.logger = logger;
     }
+    /**
+     * Mark a point in time
+     */
     mark(name) {
         this.marks.set(name, performance.now());
     }
+    /**
+     * Log elapsed time with optional fields
+     */
     logElapsed(message, fields) {
         const elapsed = performance.now() - this.startTime;
         this.logger.debug(message, Object.assign(Object.assign({}, fields), { elapsedMs: elapsed, elapsed: `${elapsed.toFixed(2)}ms` }));
     }
+    /**
+     * Log time between marks
+     */
     logMarkDuration(fromMark, toMark, message, fields) {
         const from = this.marks.get(fromMark);
         const to = this.marks.get(toMark);
@@ -259,29 +319,49 @@ class PerformanceTimer {
     }
 }
 exports.PerformanceTimer = PerformanceTimer;
+/**
+ * Generate a unique request ID for distributed tracing
+ */
 function generateRequestId() {
     return `req_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;
 }
+/**
+ * Logger factory for creating loggers with consistent configuration
+ */
 class LoggerFactory {
+    /**
+     * Set the default log level for all new loggers
+     */
     static setDefaultLevel(level) {
         this.defaultLevel = level;
     }
+    /**
+     * Set a default logger instance to use
+     */
     static setDefaultLogger(logger) {
         this.defaultLogger = logger;
     }
+    /**
+     * Create a logger instance based on configuration
+     */
     static create(options) {
         var _a, _b;
+        // Use custom logger if provided
         if (options === null || options === void 0 ? void 0 : options.custom) {
             return options.custom;
         }
+        // Use default logger if set
         if (this.defaultLogger) {
             return this.defaultLogger;
         }
+        // Determine log level
         const level = (_b = (_a = options === null || options === void 0 ? void 0 : options.level) !== null && _a !== void 0 ? _a : getLogLevelFromEnv()) !== null && _b !== void 0 ? _b : this.defaultLevel;
+        // Create remote logger if configured
         if (options === null || options === void 0 ? void 0 : options.remote) {
             const fallbackLogger = new ConsoleLogger(level, options === null || options === void 0 ? void 0 : options.prefix);
             return new RemoteLogger(options.remote.endpoint, options.remote.apiKey, fallbackLogger);
         }
+        // Create console logger
         return new ConsoleLogger(level, options === null || options === void 0 ? void 0 : options.prefix);
     }
 }

package/dist/core/phone-auth/api-types.d.ts

@@ -25,8 +25,6 @@ export interface SessionInfo {
     session_key: string;
     /** Security nonce */
     nonce?: string;
-    /** Encryption key for secure operations */
-    enc_key?: string;
     /** Additional metadata from server */
     metadata?: Record<string, string>;
 }
@@ -82,7 +80,7 @@ export interface PrepareOptions {
 }
 /**
  * Request to prepare authentication session
- * Note: nonce and id are auto-generated by SDKs if not provided
+ * Note: id is auto-generated by SDK if not provided
  */
 export interface PrepareRequest {
     /** Use case for this authentication (optional when parent_session_id is provided - inherited from parent) */
@@ -92,9 +90,6 @@ export interface PrepareRequest {
     phone_number?: PhoneNumber;
     /** Alternative to phone_number */
     plmn?: PLMN;
-    /** Optional: Auto-generated by SDKs if not provided */
-    /** Unique nonce (SDK generates secure random if not provided) */
-    nonce?: string;
     /** Request identifier (SDK generates unique ID if not provided) */
     id?: string;
     /** Optional fields */

package/dist/core/phone-auth/api-types.js

@@ -1,4 +1,16 @@
 "use strict";
+/**
+ * Glide Phone Authentication API Types
+ *
+ * This file is copied from the master API specification at /glide-api-types.ts
+ * It defines the exact contract that ALL implementations must follow.
+ *
+ * NAMING CONVENTION:
+ * - ALL TYPES USE snake_case FOR API COMMUNICATION
+ * - Frontend SDKs should use snake_case throughout for consistency
+ * - This eliminates conversion errors and makes debugging easier
+ * - While not idiomatic JavaScript, it matches the API exactly
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.E164_REGEX = exports.ERROR_STATUS_CODES = exports.ERROR_MESSAGES = exports.ERROR_CODE = exports.AUTHENTICATION_STRATEGY = exports.USE_CASE = void 0;
 exports.validatePhoneNumber = validatePhoneNumber;
@@ -10,31 +22,52 @@ exports.getErrorStatusCode = getErrorStatusCode;
 exports.isTS43Data = isTS43Data;
 exports.isLinkData = isLinkData;
 exports.isErrorResponse = isErrorResponse;
+// ============================================================================
+// USE CASES
+// ============================================================================
 exports.USE_CASE = {
     GET_PHONE_NUMBER: 'GetPhoneNumber',
     VERIFY_PHONE_NUMBER: 'VerifyPhoneNumber'
 };
+// ============================================================================
+// AUTHENTICATION STRATEGIES
+// ============================================================================
 exports.AUTHENTICATION_STRATEGY = {
     TS43: 'ts43',
     LINK: 'link',
     DESKTOP: 'desktop'
 };
+// ============================================================================
+// ERROR HANDLING
+// ============================================================================
+/**
+ * Error codes - MUST match server implementation
+ */
 exports.ERROR_CODE = {
+    // 400 Bad Request
     INVALID_PHONE_NUMBER: 'INVALID_PHONE_NUMBER',
     MISSING_REQUIRED_FIELD: 'MISSING_REQUIRED_FIELD',
     INVALID_USE_CASE: 'INVALID_USE_CASE',
+    // 404 Not Found
     INVALID_SESSION: 'INVALID_SESSION',
     SESSION_EXPIRED: 'SESSION_EXPIRED',
+    // 422 Unprocessable Entity
     CARRIER_NOT_ELIGIBLE: 'CARRIER_NOT_ELIGIBLE',
     UNSUPPORTED_PLATFORM: 'UNSUPPORTED_PLATFORM',
     PHONE_NUMBER_MISMATCH: 'PHONE_NUMBER_MISMATCH',
     INVALID_CREDENTIAL: 'INVALID_CREDENTIAL',
     VERIFICATION_FAILED: 'VERIFICATION_FAILED',
     USE_CASE_MISMATCH: 'USE_CASE_MISMATCH',
+    // 429 Too Many Requests
     RATE_LIMIT_EXCEEDED: 'RATE_LIMIT_EXCEEDED',
+    // 500 Internal Server Error
     INTERNAL_SERVER_ERROR: 'INTERNAL_SERVER_ERROR',
+    // 503 Service Unavailable
     SERVICE_UNAVAILABLE: 'SERVICE_UNAVAILABLE'
 };
+/**
+ * Error messages - User-friendly messages for each error code
+ */
 exports.ERROR_MESSAGES = {
     [exports.ERROR_CODE.INVALID_PHONE_NUMBER]: "Phone number must be in E.164 format",
     [exports.ERROR_CODE.MISSING_REQUIRED_FIELD]: "Required field is missing",
@@ -51,6 +84,9 @@ exports.ERROR_MESSAGES = {
     [exports.ERROR_CODE.INTERNAL_SERVER_ERROR]: "An unexpected error occurred",
     [exports.ERROR_CODE.SERVICE_UNAVAILABLE]: "Service temporarily unavailable"
 };
+/**
+ * HTTP status codes for each error
+ */
 exports.ERROR_STATUS_CODES = {
     [exports.ERROR_CODE.INVALID_PHONE_NUMBER]: 400,
     [exports.ERROR_CODE.MISSING_REQUIRED_FIELD]: 400,
@@ -67,26 +103,50 @@ exports.ERROR_STATUS_CODES = {
     [exports.ERROR_CODE.INTERNAL_SERVER_ERROR]: 500,
     [exports.ERROR_CODE.SERVICE_UNAVAILABLE]: 503
 };
+// ============================================================================
+// VALIDATION HELPERS
+// ============================================================================
+/**
+ * E.164 phone number validation regex
+ */
 exports.E164_REGEX = /^\+[1-9]\d{1,14}$/;
+/**
+ * Validate phone number format
+ */
 function validatePhoneNumber(phone) {
     return exports.E164_REGEX.test(phone);
 }
+/**
+ * Validate PLMN format
+ */
 function validatePLMN(plmn) {
+    // MCC: exactly 3 digits
     if (!/^\d{3}$/.test(plmn.mcc))
         return false;
+    // MNC: 2 or 3 digits
     if (!/^\d{2,3}$/.test(plmn.mnc))
         return false;
     return true;
 }
+/**
+ * Validate session info
+ */
 function validateSession(session) {
     if (!session.session_key || session.session_key.length < 16)
         return false;
+    // nonce is optional and stored in metadata if needed
     return true;
 }
+/**
+ * Validate use case
+ */
 function validateUseCase(useCase) {
     return useCase === exports.USE_CASE.GET_PHONE_NUMBER ||
         useCase === exports.USE_CASE.VERIFY_PHONE_NUMBER;
 }
+/**
+ * Create error response helper
+ */
 function createErrorResponse(code, details, requestId) {
     return {
         code,
@@ -96,37 +156,60 @@ function createErrorResponse(code, details, requestId) {
         details
     };
 }
+/**
+ * Get HTTP status code for error
+ */
 function getErrorStatusCode(code) {
     return exports.ERROR_STATUS_CODES[code] || 500;
 }
+// ============================================================================
+// TYPE GUARDS
+// ============================================================================
+/**
+ * Check if data is TS43 strategy data
+ */
 function isTS43Data(data) {
+    // Check for TS43 data structure - has protocol and data.dcql_query
     return data &&
         typeof data.protocol === 'string' &&
         data.data &&
         data.data.dcql_query;
 }
+/**
+ * Check if data is Link strategy data
+ */
 function isLinkData(data) {
     return data && data.url && typeof data.url === 'string';
 }
+/**
+ * Check if response is an error
+ */
 function isErrorResponse(response) {
     return response &&
         typeof response.code === 'string' &&
         typeof response.message === 'string';
 }
+// ============================================================================
+// EXPORTS FOR CONVENIENCE
+// ============================================================================
 exports.default = {
+    // Constants
     USE_CASE: exports.USE_CASE,
     AUTHENTICATION_STRATEGY: exports.AUTHENTICATION_STRATEGY,
     ERROR_CODE: exports.ERROR_CODE,
     ERROR_MESSAGES: exports.ERROR_MESSAGES,
     ERROR_STATUS_CODES: exports.ERROR_STATUS_CODES,
     E164_REGEX: exports.E164_REGEX,
+    // Validators
     validatePhoneNumber,
     validatePLMN,
     validateSession,
     validateUseCase,
+    // Type guards
     isTS43Data,
     isLinkData,
     isErrorResponse,
+    // Helpers
     createErrorResponse,
     getErrorStatusCode
 };