@insforge/react 1.1.6 → 1.1.7

package/dist/index.js

@@ -544,10 +544,27 @@ var InsforgeManager = class _InsforgeManager {
     const state = this.getState();
     this.listeners.forEach((listener) => listener(state));
   }
+  /**
+   * Clean up sensitive auth parameters from URL
+   * This is needed because SDK's detectAuthCallback may not run in Next.js
+   * when the SDK client is created at module level (before hydration)
+   */
+  cleanUrlParams() {
+    if (typeof window === "undefined") return;
+    const params = new URLSearchParams(window.location.search);
+    const authParams = ["access_token", "user_id", "email", "name", "csrf_token", "error"];
+    const hasAuthParams = authParams.some((p) => params.has(p));
+    if (hasAuthParams) {
+      const url = new URL(window.location.href);
+      authParams.forEach((p) => url.searchParams.delete(p));
+      window.history.replaceState({}, document.title, url.toString());
+    }
+  }
   // Load auth state
   // Gets session and user data from getCurrentSession()
   // Called after hydration to restore authentication state
   async loadAuthState() {
+    this.cleanUrlParams();
     try {
       const {
         data: { session }
@@ -4164,6 +4181,11 @@ function SignInForm({
 }
 
 // src/lib/hosted-auth.ts
+function getCsrfTokenFromCookie() {
+  if (typeof document === "undefined") return null;
+  const match2 = document.cookie.match(/(?:^|;\s*)insforge_csrf_token=([^;]*)/);
+  return match2 ? decodeURIComponent(match2[1]) : null;
+}
 function isHostedAuthEnvironment() {
   if (typeof window === "undefined") {
     return false;
@@ -4214,11 +4236,13 @@ function SignIn({ onError, ...uiProps }) {
             isHandlingOAuthRedirectRef.current = false;
             return;
           }
+          const csrfToken = getCsrfTokenFromCookie();
           const legacyUrl = buildLegacyAuthUrl(redirectUrl, {
             accessToken: session.accessToken,
             userId: session.user.id,
             email: session.user.email,
-            name: session.user.profile?.name || ""
+            name: session.user.profile?.name || "",
+            csrfToken: csrfToken || void 0
           });
           window.location.href = legacyUrl;
         } catch (err) {
@@ -4509,11 +4533,13 @@ function SignUp({ onError, emailRedirectTo, ...uiProps }) {
             isHandlingOAuthRedirectRef.current = false;
             return;
           }
+          const csrfToken = getCsrfTokenFromCookie();
           const legacyUrl = buildLegacyAuthUrl(redirectUrl, {
             accessToken: session.accessToken,
             userId: session.user.id,
             email: session.user.email,
-            name: session.user.profile?.name || ""
+            name: session.user.profile?.name || "",
+            csrfToken: csrfToken || void 0
           });
           window.location.href = legacyUrl;
         } catch (err) {