@hfunlabs/hypurr-connect 0.1.23 → 0.1.24

package/README.md

@@ -49,7 +49,6 @@ const config = {
   grpcUrl: "https://grpc.hypurr.fun",
   telegram: {
     authHubUrl: "https://auth.hypurr.fun/login",
-    // tokenUrl defaults to https://auth.hypurr.fun/token
     scope: [
       "telegram:user:read",
       "telegram:wallet:read",
@@ -127,7 +126,6 @@ interface HypurrConnectConfig {
   isTestnet?: boolean; // Use testnet endpoints (default: false)
   telegram: {
     authHubUrl?: string; // Auth hub URL (default: https://auth.hypurr.fun/login)
-    tokenUrl?: string; // Token exchange URL (default: auth hub /token)
     returnTo?: string | (() => string); // Callback URL (default: current page)
     scope?: string | string[]; // Requested JWT scopes
   };
@@ -157,7 +155,8 @@ for generated protobuf service clients.
 4. The popup callback page posts `{ token, state }` or `{ code, state }` to the
    opener with `postMessage` and closes.
 5. The opener validates `state`. Legacy tokens are stored directly; auth codes
-   are exchanged at the configured token URL with the stored PKCE verifier.
+   are exchanged at the OAuth metadata `token_endpoint` with the stored PKCE
+   verifier.
 6. The SDK calls the Hypurr gRPC backend with `Authorization: Bearer <jwt>`
    metadata.
 7. An `ExchangeClient` is created with `GrpcExchangeTransport`; exchange

package/dist/index.d.ts

@@ -27,8 +27,6 @@ interface HypurrConnectConfig {
     telegram?: {
         /** Auth hub login URL. Defaults to https://auth.hypurr.fun/login. */
         authHubUrl?: string;
-        /** Auth hub token exchange URL. Defaults to the auth hub login URL with `/login` replaced by `/token`. */
-        tokenUrl?: string;
         /** Optional callback URL. Defaults to the current page without auth query params. */
         returnTo?: string | (() => string);
         /** Requested hub scopes. Defaults to the scopes required by this SDK. */

package/dist/index.js

@@ -542,17 +542,51 @@ function takeTelegramAuthSession(state) {
   sessionStorage.removeItem(returnToKey);
   return { codeVerifier, returnTo };
 }
-function resolveAuthTokenUrl(authHubUrl, tokenUrl) {
-  const configuredTokenUrl = tokenUrl?.trim();
-  if (configuredTokenUrl) return configuredTokenUrl;
+function fallbackAuthTokenUrl(authHubUrl) {
   const url = new URL(authHubUrl || DEFAULT_AUTH_HUB_URL);
-  const pathWithoutTrailingSlash = url.pathname.replace(/\/+$/, "");
-  const basePath = pathWithoutTrailingSlash.replace(/\/[^/]*$/, "");
-  url.pathname = `${basePath}/token`;
+  url.pathname = "/oauth/token";
   url.search = "";
   url.hash = "";
   return url.toString();
 }
+function authMetadataUrls(authHubUrl) {
+  const authUrl = new URL(authHubUrl || DEFAULT_AUTH_HUB_URL);
+  const urls = [
+    new URL("/.well-known/oauth-authorization-server", authUrl).toString(),
+    new URL("/.well-known/openid-configuration", authUrl).toString()
+  ];
+  const authPath = authUrl.pathname.replace(/\/+$/, "");
+  const basePath = authPath.replace(/\/[^/]*$/, "");
+  if (basePath) {
+    urls.push(
+      new URL(
+        `/.well-known/oauth-authorization-server${basePath}`,
+        authUrl
+      ).toString()
+    );
+  }
+  return Array.from(new Set(urls));
+}
+async function tokenUrlFromMetadata(authHubUrl) {
+  for (const metadataUrl of authMetadataUrls(authHubUrl)) {
+    try {
+      const response = await fetch(metadataUrl, {
+        headers: { accept: "application/json" }
+      });
+      if (!response.ok) continue;
+      const metadata = await response.json();
+      const tokenEndpoint = metadata.token_endpoint;
+      if (typeof tokenEndpoint === "string" && tokenEndpoint.trim()) {
+        return tokenEndpoint.trim();
+      }
+    } catch {
+    }
+  }
+  return void 0;
+}
+async function resolveAuthTokenUrl(authHubUrl) {
+  return await tokenUrlFromMetadata(authHubUrl) || fallbackAuthTokenUrl(authHubUrl);
+}
 function getTokenFromExchangeResponse(data) {
   if (typeof data === "string") {
     const token = data.trim();
@@ -570,8 +604,7 @@ async function exchangeTelegramAuthCode({
   clientId,
   code,
   codeVerifier,
-  returnTo,
-  tokenUrl
+  returnTo
 }) {
   const body = new URLSearchParams({
     client_id: clientId,
@@ -580,7 +613,7 @@ async function exchangeTelegramAuthCode({
     grant_type: "authorization_code",
     return_to: returnTo
   });
-  const response = await fetch(resolveAuthTokenUrl(authHubUrl, tokenUrl), {
+  const response = await fetch(await resolveAuthTokenUrl(authHubUrl), {
     method: "POST",
     headers: {
       accept: "application/json",
@@ -697,8 +730,7 @@ function HypurrConnectProvider({
           clientId: normalizeClientId(config.clientId),
           code: callback.code,
           codeVerifier: authSession.codeVerifier,
-          returnTo: authSession.returnTo || currentReturnTo(),
-          tokenUrl: config.telegram?.tokenUrl
+          returnTo: authSession.returnTo || currentReturnTo()
         }).then(acceptTelegramToken).catch(
           (err) => setTgError(err instanceof Error ? err.message : String(err))
         ).finally(() => setTgLoading(false));
@@ -713,8 +745,7 @@ function HypurrConnectProvider({
     [
       acceptTelegramToken,
       config.clientId,
-      config.telegram?.authHubUrl,
-      config.telegram?.tokenUrl
+      config.telegram?.authHubUrl
     ]
   );
   useEffect(() => {