@hfunlabs/hypurr-connect 0.1.25 → 0.1.26

package/README.md

@@ -126,7 +126,7 @@ interface HypurrConnectConfig {
   isTestnet?: boolean; // Use testnet endpoints (default: false)
   telegram: {
     authHubUrl?: string; // Auth hub URL (default: https://auth.hypurr.fun/login)
-    returnTo?: string | (() => string); // Callback URL (default: current page)
+    redirectUri?: string | (() => string); // OAuth redirect URI (default: current page)
     scope?: string | string[]; // Requested JWT scopes
   };
 }
@@ -148,15 +148,15 @@ for generated protobuf service clients.
 
 1. User clicks "Telegram" in the `LoginModal`.
 2. The SDK opens the configured auth hub in a popup with `client_id`,
-   `return_to`, `state`, requested `scope`, `code_challenge`, and
-   `code_challenge_method=S256`.
-3. The auth hub performs Telegram login and redirects back to `return_to` with
+   `redirect_uri`, `return_to`, `state`, requested `scope`, `code_challenge`,
+   and `code_challenge_method=S256`.
+3. The auth hub performs Telegram login and redirects back to `redirect_uri` with
    either a legacy scoped JWT or an authorization code.
 4. The popup callback page posts `{ token, state }` or `{ code, state }` to the
    opener with `postMessage` and closes.
 5. The opener validates `state`. Legacy tokens are stored directly; auth codes
    are exchanged at the OAuth metadata `token_endpoint` with the stored PKCE
-   verifier.
+   verifier and the original callback URL as `redirect_uri`.
 6. The SDK calls the Hypurr gRPC backend with `Authorization: Bearer <jwt>`
    metadata.
 7. An `ExchangeClient` is created with `GrpcExchangeTransport`; exchange
@@ -164,8 +164,8 @@ for generated protobuf service clients.
 8. The JWT session is persisted in localStorage (`hypurr-connect-tg-jwt`).
 
 If the popup is blocked, the SDK falls back to a full-page redirect. The
-default `returnTo` is the current page with auth query params removed; custom
-`returnTo` URLs should load the app and mount `HypurrConnectProvider` so the
+default `redirectUri` is the current page with auth query params removed; custom
+`redirectUri` URLs should load the app and mount `HypurrConnectProvider` so the
 popup callback bridge can run.
 
 ### EOA Wallet Login

package/dist/index.d.ts

@@ -27,8 +27,8 @@ interface HypurrConnectConfig {
     telegram?: {
         /** Auth hub login URL. Defaults to https://auth.hypurr.fun/login. */
         authHubUrl?: string;
-        /** Optional callback URL. Defaults to the current page without auth query params. */
-        returnTo?: string | (() => string);
+        /** Optional OAuth redirect URI. Defaults to the current page without auth query params. */
+        redirectUri?: string | (() => string);
         /** Requested hub scopes. Defaults to the scopes required by this SDK. */
         scope?: string | string[];
         /** @deprecated Telegram login is handled by the auth hub; this option is ignored. */

package/dist/index.js

@@ -315,7 +315,7 @@ var TELEGRAM_STORAGE_KEY = "hypurr-connect-tg-jwt";
 var LEGACY_TELEGRAM_STORAGE_KEY = "hypurr-connect-tg-user";
 var TELEGRAM_AUTH_STATE_KEY = "hypurr-connect-auth-state";
 var TELEGRAM_AUTH_CODE_VERIFIER_PREFIX = "hypurr-connect-auth-code-verifier:";
-var TELEGRAM_AUTH_RETURN_TO_PREFIX = "hypurr-connect-auth-return-to:";
+var TELEGRAM_AUTH_REDIRECT_URI_PREFIX = "hypurr-connect-auth-redirect-uri:";
 var TELEGRAM_AUTH_MESSAGE = "hypurr-connect:telegram-auth";
 var DEFAULT_AUTH_HUB_URL = "https://auth.hypurr.fun/login";
 var DEFAULT_MEDIA_URL = "https://media.hypurr.fun";
@@ -448,7 +448,7 @@ function withExpectedFrom(transaction, address) {
   }
   return transaction.from ? transaction : { ...transaction, from: address };
 }
-function currentReturnTo() {
+function currentRedirectUri() {
   const url = new URL(window.location.href);
   for (const param of [
     "code",
@@ -525,23 +525,23 @@ function normalizeClientId(clientId) {
 function codeVerifierStorageKey(state) {
   return `${TELEGRAM_AUTH_CODE_VERIFIER_PREFIX}${state}`;
 }
-function returnToStorageKey(state) {
-  return `${TELEGRAM_AUTH_RETURN_TO_PREFIX}${state}`;
+function redirectUriStorageKey(state) {
+  return `${TELEGRAM_AUTH_REDIRECT_URI_PREFIX}${state}`;
 }
-function storeTelegramAuthSession(state, codeVerifier, returnTo) {
+function storeTelegramAuthSession(state, codeVerifier, redirectUri) {
   const previousState = sessionStorage.getItem(TELEGRAM_AUTH_STATE_KEY);
   if (previousState) {
     sessionStorage.removeItem(codeVerifierStorageKey(previousState));
-    sessionStorage.removeItem(returnToStorageKey(previousState));
+    sessionStorage.removeItem(redirectUriStorageKey(previousState));
   }
   sessionStorage.setItem(TELEGRAM_AUTH_STATE_KEY, state);
   sessionStorage.setItem(codeVerifierStorageKey(state), codeVerifier);
-  sessionStorage.setItem(returnToStorageKey(state), returnTo);
+  sessionStorage.setItem(redirectUriStorageKey(state), redirectUri);
 }
 function clearTelegramAuthSession(state) {
   sessionStorage.removeItem(TELEGRAM_AUTH_STATE_KEY);
   sessionStorage.removeItem(codeVerifierStorageKey(state));
-  sessionStorage.removeItem(returnToStorageKey(state));
+  sessionStorage.removeItem(redirectUriStorageKey(state));
 }
 function takeTelegramAuthSession(state) {
   const expectedState = sessionStorage.getItem(TELEGRAM_AUTH_STATE_KEY);
@@ -549,17 +549,17 @@ function takeTelegramAuthSession(state) {
   if (!expectedState || state !== expectedState) {
     if (expectedState) {
       sessionStorage.removeItem(codeVerifierStorageKey(expectedState));
-      sessionStorage.removeItem(returnToStorageKey(expectedState));
+      sessionStorage.removeItem(redirectUriStorageKey(expectedState));
     }
     return null;
   }
   const codeVerifierKey = codeVerifierStorageKey(state);
-  const returnToKey = returnToStorageKey(state);
+  const redirectUriKey = redirectUriStorageKey(state);
   const codeVerifier = sessionStorage.getItem(codeVerifierKey);
-  const returnTo = sessionStorage.getItem(returnToKey);
+  const redirectUri = sessionStorage.getItem(redirectUriKey);
   sessionStorage.removeItem(codeVerifierKey);
-  sessionStorage.removeItem(returnToKey);
-  return { codeVerifier, returnTo };
+  sessionStorage.removeItem(redirectUriKey);
+  return { codeVerifier, redirectUri };
 }
 function fallbackAuthTokenUrl(authHubUrl) {
   const url = new URL(authHubUrl || DEFAULT_AUTH_HUB_URL);
@@ -623,14 +623,14 @@ async function exchangeTelegramAuthCode({
   clientId,
   code,
   codeVerifier,
-  returnTo
+  redirectUri
 }) {
   const body = new URLSearchParams({
     client_id: clientId,
     code,
     code_verifier: codeVerifier,
     grant_type: "authorization_code",
-    return_to: returnTo
+    redirect_uri: redirectUri
   });
   const response = await fetch(await resolveAuthTokenUrl(authHubUrl), {
     method: "POST",
@@ -749,7 +749,7 @@ function HypurrConnectProvider({
           clientId: normalizeClientId(config.clientId),
           code: callback.code,
           codeVerifier: authSession.codeVerifier,
-          returnTo: authSession.returnTo || currentReturnTo()
+          redirectUri: authSession.redirectUri || currentRedirectUri()
         }).then(acceptTelegramToken).catch(
           (err) => setTgError(err instanceof Error ? err.message : String(err))
         ).finally(() => setTgLoading(false));
@@ -1548,9 +1548,9 @@ function HypurrConnectProvider({
   const loginTelegram = useCallback(() => {
     const state = randomState();
     const codeVerifier = randomCodeVerifier();
-    const configuredReturnTo = config.telegram?.returnTo;
-    const returnTo = typeof configuredReturnTo === "function" ? configuredReturnTo() : configuredReturnTo || currentReturnTo();
-    storeTelegramAuthSession(state, codeVerifier, returnTo);
+    const configuredRedirectUri = config.telegram?.redirectUri;
+    const redirectUri = typeof configuredRedirectUri === "function" ? configuredRedirectUri() : configuredRedirectUri || currentRedirectUri();
+    storeTelegramAuthSession(state, codeVerifier, redirectUri);
     const width = 520;
     const height = 720;
     const left = window.screenX + Math.max(0, (window.outerWidth - width) / 2);
@@ -1576,7 +1576,8 @@ function HypurrConnectProvider({
           "client_id",
           normalizeClientId(config.clientId)
         );
-        authUrl.searchParams.set("return_to", returnTo);
+        authUrl.searchParams.set("redirect_uri", redirectUri);
+        authUrl.searchParams.set("return_to", redirectUri);
         authUrl.searchParams.set("state", state);
         authUrl.searchParams.set(
           "scope",
@@ -1602,7 +1603,7 @@ function HypurrConnectProvider({
   }, [
     config.clientId,
     config.telegram?.authHubUrl,
-    config.telegram?.returnTo,
+    config.telegram?.redirectUri,
     config.telegram?.scope
   ]);
   const connectEoa = useCallback(