@lumiapassport/ui-kit 1.9.0 → 1.9.2

package/dist/index.cjs

@@ -775,8 +775,8 @@ async function ensureDkgAndGetOwner(userId, _clientSeedHex) {
       };
     }
     await iframeManager.authenticate(userId);
-    const { jwtTokenManager: jwtTokenManager3 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
-    const accessToken = jwtTokenManager3.getAccessToken();
+    const { jwtTokenManager: jwtTokenManager4 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+    const accessToken = jwtTokenManager4.getAccessToken();
     if (!accessToken) {
       throw new Error("No access token available for DKG");
     }
@@ -802,8 +802,8 @@ async function signDigestWithMpc(userId, digest32, userOpDetails) {
   };
   try {
     const iframeManager = getIframeManager();
-    const { jwtTokenManager: jwtTokenManager3 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
-    const accessToken = jwtTokenManager3.getAccessToken();
+    const { jwtTokenManager: jwtTokenManager4 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+    const accessToken = jwtTokenManager4.getAccessToken();
     if (!accessToken) {
       throw new Error("No access token available for signing");
     }
@@ -848,8 +848,8 @@ async function signTypedDataWithMpc(userId, digest32, typedData) {
       digest32
     });
     const iframeManager = getIframeManager();
-    const { jwtTokenManager: jwtTokenManager3 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
-    const accessToken = jwtTokenManager3.getAccessToken();
+    const { jwtTokenManager: jwtTokenManager4 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+    const accessToken = jwtTokenManager4.getAccessToken();
     if (!accessToken) {
       console.error("[signTypedDataWithMpc] No access token available");
       throw new Error("No access token available for signing");
@@ -1351,7 +1351,7 @@ async function deleteShare() {
 async function deriveKEKFromPasskey(userId, requiredCredentialId) {
   const challengeString = `lumia-kek:${userId}`;
   const challenge = new TextEncoder().encode(challengeString);
-  function base64urlToUint8Array3(base64url) {
+  function base64urlToUint8Array2(base64url) {
     const base64 = base64url.replace(/-/g, "+").replace(/_/g, "/");
     const pad = base64.length % 4 ? 4 - base64.length % 4 : 0;
     const padded = base64 + "=".repeat(pad);
@@ -1363,7 +1363,7 @@ async function deriveKEKFromPasskey(userId, requiredCredentialId) {
     return bytes;
   }
   const targetCredentialId = requiredCredentialId || createPasskeyHelpers(userId).getCredId();
-  const allowCredentials = targetCredentialId ? [{ id: base64urlToUint8Array3(targetCredentialId), type: "public-key" }] : [];
+  const allowCredentials = targetCredentialId ? [{ id: base64urlToUint8Array2(targetCredentialId), type: "public-key" }] : [];
   try {
     const credential = await navigator.credentials.get({
       publicKey: {
@@ -2077,6 +2077,7 @@ async function verifyEmailLinkCode(email, code) {
   if (!hasValidToken) throw new Error("No authentication token available");
   const response = await (0, import_auth3.authenticatedFetch)(`${getTssUrl3()}/api/auth/link/email/verify-code`, {
     method: "POST",
+    credentials: "include",
     body: JSON.stringify({ email, code })
   });
   if (!response.ok) {
@@ -2112,13 +2113,13 @@ async function beginPasskeyLinking() {
     const begin2 = await res.json();
     const options2 = {
       rp: begin2.rp,
-      user: { id: base64urlToUint8Array2(begin2.user.id), name: begin2.user.name, displayName: begin2.user.displayName },
-      challenge: base64urlToUint8Array2(begin2.challenge),
+      user: { id: base64urlToUint8Array(begin2.user.id), name: begin2.user.name, displayName: begin2.user.displayName },
+      challenge: base64urlToUint8Array(begin2.challenge),
       pubKeyCredParams: begin2.pubKeyCredParams,
       timeout: begin2.timeout,
       attestation: begin2.attestation,
       authenticatorSelection: { ...begin2.authenticatorSelection, residentKey: begin2.authenticatorSelection?.residentKey ?? "preferred", requireResidentKey: begin2.authenticatorSelection?.requireResidentKey ?? false, userVerification: begin2.authenticatorSelection?.userVerification ?? "preferred" },
-      excludeCredentials: begin2.excludeCredentials?.map((cred) => ({ type: cred.type, id: base64urlToUint8Array2(cred.id), transports: cred.transports })) || void 0
+      excludeCredentials: begin2.excludeCredentials?.map((cred) => ({ type: cred.type, id: base64urlToUint8Array(cred.id), transports: cred.transports })) || void 0
     };
     return { challengeId: begin2.challengeId, options: options2 };
   }
@@ -2127,13 +2128,13 @@ async function beginPasskeyLinking() {
   const begin = await res.json();
   const options = {
     rp: begin.rp,
-    user: { id: base64urlToUint8Array2(begin.user.id), name: begin.user.name, displayName: begin.user.displayName },
-    challenge: base64urlToUint8Array2(begin.challenge),
+    user: { id: base64urlToUint8Array(begin.user.id), name: begin.user.name, displayName: begin.user.displayName },
+    challenge: base64urlToUint8Array(begin.challenge),
     pubKeyCredParams: begin.pubKeyCredParams,
     timeout: begin.timeout,
     attestation: begin.attestation,
     authenticatorSelection: { ...begin.authenticatorSelection, residentKey: "preferred", requireResidentKey: false, userVerification: "preferred" },
-    excludeCredentials: begin.excludeCredentials?.map((cred) => ({ type: cred.type, id: base64urlToUint8Array2(cred.id), transports: cred.transports })) || void 0
+    excludeCredentials: begin.excludeCredentials?.map((cred) => ({ type: cred.type, id: base64urlToUint8Array(cred.id), transports: cred.transports })) || void 0
   };
   return { challengeId: begin.challengeId, options };
 }
@@ -2207,18 +2208,10 @@ async function linkPasskeyWithWebAuthn(optionsOverride) {
   const cid = challengeId || "local-" + Date.now();
   await completePasskeyLinking({ challengeId: cid, credential: attestationPayload });
 }
-function base64urlToUint8Array2(base64url) {
-  const base64 = base64url.replace(/-/g, "+").replace(/_/g, "/");
-  const pad = base64.length % 4 ? 4 - base64.length % 4 : 0;
-  const padded = base64 + "=".repeat(pad);
-  const binary = atob(padded);
-  const bytes = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
-  return bytes;
-}
 var init_passkey2 = __esm({
   "src/internal/auth/providers/passkey.ts"() {
     init_auth();
+    init_base64url();
     init_webauthn();
     init_types();
   }
@@ -2347,6 +2340,7 @@ __export(auth_exports, {
   getLinkedProviders: () => getLinkedProviders,
   getProviderDisplayInfo: () => getProviderDisplayInfo,
   getTssUrl: () => getTssUrl3,
+  getValidTokens: () => import_auth3.getValidTokens,
   hasAvailablePasskeys: () => hasAvailablePasskeys,
   hideTelegramWidget: () => hideTelegramWidget,
   initTelegramWidget: () => initTelegramWidget,
@@ -2582,10 +2576,10 @@ var init_iframe_manager = __esm({
        */
       async handleTokenRefreshRequest(message) {
         try {
-          const { jwtTokenManager: jwtTokenManager3 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
-          const refreshSuccess = await jwtTokenManager3.refreshAccessToken();
+          const { jwtTokenManager: jwtTokenManager4 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+          const refreshSuccess = await jwtTokenManager4.refreshAccessToken();
           if (refreshSuccess) {
-            const newAccessToken = jwtTokenManager3.getAccessToken();
+            const newAccessToken = jwtTokenManager4.getAccessToken();
             if (this.iframe && this.iframe.contentWindow) {
               const iframeOrigin = new URL(this.iframeUrl).origin;
               this.iframe.contentWindow.postMessage(
@@ -5782,6 +5776,9 @@ __export(index_exports, {
   UserOpStatus: () => UserOpStatus,
   deployAccount: () => deployAccount,
   getUserProfile: () => getUserProfile,
+  getValidTokens: () => import_auth3.getValidTokens,
+  jwtTokenManager: () => import_auth3.jwtTokenManager,
+  logout: () => import_auth3.logout,
   lumiaBeam: () => lumiaBeam,
   prepareUserOperation: () => prepareUserOperation,
   queryClient: () => queryClient,
@@ -5789,6 +5786,7 @@ __export(index_exports, {
   signTypedData: () => signTypedData,
   updateUserProfile: () => updateUserProfile,
   useAssets: () => useAssets,
+  useLogout: () => useLogout,
   useLumiaPassportConfig: () => useLumiaPassportConfig,
   useLumiaPassportLinkedProfiles: () => useLumiaPassportLinkedProfiles,
   useLumiaPassportSession: () => useLumiaPassportSession,
@@ -8703,7 +8701,7 @@ function useLumiaPassportLinkedProfiles() {
 // package.json
 var package_default = {
   name: "@lumiapassport/ui-kit",
-  version: "1.9.0",
+  version: "1.9.2",
   description: "React UI components and hooks for Lumia Passport authentication and Account Abstraction",
   type: "module",
   main: "./dist/index.cjs",
@@ -10120,9 +10118,46 @@ function useUserOpStatus(options = {}) {
   };
 }
 
+// src/hooks/useLogout.ts
+var import_react22 = require("react");
+var import_auth10 = require("@lumiapassport/core/auth");
+init_LumiaPassportContext();
+function useLogout() {
+  const { setSession, setAddress, setStatus, setError, address } = useLumiaPassportSession();
+  const { callbacks } = useLumiaPassportConfig();
+  const logout2 = (0, import_react22.useCallback)(async () => {
+    const prevAddress = address;
+    let userId = null;
+    try {
+      userId = import_auth10.jwtTokenManager.getUserId() || null;
+    } catch (error) {
+      console.warn("[useLogout] Could not get userId:", error);
+    }
+    try {
+      await (0, import_auth10.logout)();
+    } catch (error) {
+      console.warn("[useLogout] Core logout failed:", error);
+    }
+    setSession(null);
+    setAddress(null);
+    setStatus("idle");
+    setError(null);
+    try {
+      callbacks?.onLumiaPassportDisconnect?.({
+        address: prevAddress,
+        userId
+      });
+    } catch (error) {
+      console.warn("[useLogout] Callback error:", error);
+    }
+  }, [address, setAddress, setError, setSession, setStatus, callbacks]);
+  return { logout: logout2 };
+}
+
 // src/index.ts
 init_account();
 init_base();
+init_auth();
 init_profile();
 init_wagmi();
 
@@ -10269,6 +10304,9 @@ function useSmartAccountTransactions() {
   UserOpStatus,
   deployAccount,
   getUserProfile,
+  getValidTokens,
+  jwtTokenManager,
+  logout,
   lumiaBeam,
   prepareUserOperation,
   queryClient,
@@ -10276,6 +10314,7 @@ function useSmartAccountTransactions() {
   signTypedData,
   updateUserProfile,
   useAssets,
+  useLogout,
   useLumiaPassportConfig,
   useLumiaPassportLinkedProfiles,
   useLumiaPassportSession,