@lumiapassport/ui-kit 1.14.14 → 1.14.15

package/dist/iframe/index.html

@@ -15,7 +15,7 @@
     <meta http-equiv="X-Content-Type-Options" content="nosniff" />
     <meta http-equiv="Referrer-Policy" content="strict-origin-when-cross-origin" />
 
-    <title>Lumia Passport Secure Wallet - iframe version 1.14.14</title>
+    <title>Lumia Passport Secure Wallet - iframe version 1.14.15</title>
 
     <!-- Styles will be injected by build process -->
     <style>

package/dist/iframe/main.js

@@ -1476,6 +1476,13 @@ var AuthorizationManager = class {
     this.metadataCache = /* @__PURE__ */ new Map();
     console.log("[iframe][Auth] Initialized");
   }
+  /**
+   * Check if project is a trusted authorized app (auto-skip auth dialog)
+   */
+  async isTrustedAuthorizedApp(projectId) {
+    const metadata = await this.fetchProjectMetadata(projectId);
+    return metadata?.trustedAuthorizedApp === true;
+  }
   /**
    * Fetch project metadata from public API (with caching)
    */
@@ -4221,7 +4228,7 @@ var SigningManager = class extends TokenRefreshApiClient {
 };
 
 // src/iframe/main.ts
-var IFRAME_VERSION = "1.14.14";
+var IFRAME_VERSION = "1.14.15";
 var IframeWallet = class {
   constructor() {
     console.log("=".repeat(60));
@@ -4355,20 +4362,27 @@ var IframeWallet = class {
     console.log(`[iframe] AUTHENTICATE: userId=${userId}, projectId=${projectId}`);
     const isAuthorized = await this.authManager.checkAuthorization(userId, projectId);
     if (!isAuthorized) {
-      console.log(`[iframe] Authorization needed for project: ${projectId}`);
-      const projectInfo = {
-        id: projectId,
-        name: "Application",
-        logoUrl: "",
-        website: origin,
-        domains: [origin]
-      };
-      const consent = await this.authManager.requestAuthorization(projectInfo, origin, { avatar, displayName });
-      if (!consent) {
-        throw new Error("User denied authorization");
+      const isTrustedApp = await this.authManager.isTrustedAuthorizedApp(projectId);
+      if (isTrustedApp) {
+        console.log(`[iframe] Project ${projectId} is a trusted authorized app, auto-authorizing`);
+        await this.authManager.storeAuthorization(userId, projectId, origin);
+        console.log(`[iframe] \u2705 Auto-authorization granted for trusted app: ${userId} -> ${projectId}`);
+      } else {
+        console.log(`[iframe] Authorization needed for project: ${projectId}`);
+        const projectInfo = {
+          id: projectId,
+          name: "Application",
+          logoUrl: "",
+          website: origin,
+          domains: [origin]
+        };
+        const consent = await this.authManager.requestAuthorization(projectInfo, origin, { avatar, displayName });
+        if (!consent) {
+          throw new Error("User denied authorization");
+        }
+        await this.authManager.storeAuthorization(userId, projectId, origin);
+        console.log(`[iframe] \u2705 Authorization granted: ${userId} -> ${projectId}`);
       }
-      await this.authManager.storeAuthorization(userId, projectId, origin);
-      console.log(`[iframe] \u2705 Authorization granted: ${userId} -> ${projectId}`);
     }
     const address = this.storage.getOwnerAddress(userId);
     this.messenger.sendResponse(