@makefully/adaptfully 5.0.0 → 5.0.1

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to this project are documented in this file.
 
+## 5.0.1 — 2026-09-17
+
+### Changed
+
+- **`google-auth`** requires `config.googleClientId` (no built-in Entanglement client id default).
+- **`social-auth`** no longer falls back to `config.googleClientId` for Capgo `webClientId` — use `platforms.<name>.socialLogin.google.webClientId` only.
+- Docs: browser GIS vs Capacitor Google client ids are documented as separate fan-out surfaces.
+
 ## 5.0.0 — 2026-09-11
 
 ### Changed

package/README.md

@@ -136,7 +136,7 @@ Games should call `adaptfully.has('analytics')` before `get` during rollout if o
 
 | Plugin key | Registration | Runtime |
 |------------|--------------|---------|
-| `google-auth` | `adaptfully.register('auth', adaptfully.auth.Google)` | Web, Android, iOS |
+| `google-auth` | `adaptfully.register('auth', adaptfully.auth.Google)` | Web (Google Identity Services) |
 | `steam-auth` | `adaptfully.register('auth', adaptfully.auth.Steam)` | Steam / Electron (via [steamworks.js](https://github.com/ceifa/steamworks.js)) |
 | `social-auth` | `adaptfully.register('auth', adaptfully.auth.Social)` | Capacitor (via [@capgo/capacitor-social-login](https://github.com/Cap-go/capacitor-social-login)) |
 | `dev-auth` | `adaptfully.register('auth', adaptfully.auth.Dev)` | Local / testing |
@@ -188,6 +188,13 @@ Android/iOS Wrapfully builds use the **`capacitor`** builder family. Cordova/Pho
 
 **`social-auth` requires `packager: "capacitor"`** and `platforms.<name>.socialLogin` (Capgo provider client IDs). Wrapfully installs `@capgo/capacitor-social-login` when building.
 
+Google client IDs are **not** interchangeable across plugins:
+
+| Surface | Config | Notes |
+|---------|--------|--------|
+| Browser GIS (`google-auth`) | `config.googleClientId` (via your config registration / bridge) | OAuth **Web** client whose authorized JavaScript origins include the site origin |
+| Capacitor Capgo (`social-auth`) | `platforms.<name>.socialLogin.google.webClientId` | Server / web client id for native Google Sign-In — do **not** put this in `googleClientId` |
+
 ```json
 {
   "config": {
@@ -220,6 +227,19 @@ Android/iOS Wrapfully builds use the **`capacitor`** builder family. Cordova/Pho
 }
 ```
 
+#### Google auth (`google-auth`)
+
+Browser-only plugin using [Google Identity Services](https://developers.google.com/identity/oauth2/web/guides/overview) (`accounts.google.com/gsi/client`). Requires `config.googleClientId` — there is no built-in default. GIS authorized origins are **per OAuth client**; reusing `socialLogin.google.webClientId` here is a common failure mode when mobile and web need different clients.
+
+Optional config keys:
+
+| Key | Default | Purpose |
+|-----|---------|---------|
+| `googleClientId` | *(required)* | Browser GIS OAuth client id |
+| `googleTokenKey` | `adaptfully_google_token` | `sessionStorage` key for the access token |
+| `googleScopes` | `openid email profile` | OAuth scopes |
+| `autoLoginStorageKey` | `lastLoggedIn` | Storage key written with the user id on login |
+
 #### Steam auth (`steam-auth`)
 
 When `steam-auth` is registered on an **`electron`** platform, Adaptfully prebuild writes:
@@ -242,6 +262,8 @@ The runtime plugin calls Capgo `SocialLogin.initialize` / `login` / `logout` / `
 
 **Apple-only iOS** (`providers.google: false`, `providers.apple: true`) is supported — Google `webClientId` is not required. On iOS, if `apple.clientId` is omitted, Adaptfully defaults it to the platform `packageName` (Capgo uses this as a plugin label on native iOS, not an Apple Services ID). On Android, Apple Sign-In still requires `apple.clientId`. At runtime, an empty Apple `clientId` also falls back to `window.gameConfig.packageName`.
 
+Google Sign-In on Capacitor reads **`socialLogin.google.webClientId` only** (via `social-login-config.js`). It does not fall back to `config.googleClientId`.
+
 Optional config keys:
 
 | Key | Default | Purpose |

package/lib/runtime/auth/google-auth.js

@@ -3,7 +3,6 @@
 (function registerGoogleAuth(ns) {
     const { configValue, getStorage } = ns.auth.helpers;
 
-    const DEFAULT_CLIENT_ID = '225754014403.apps.googleusercontent.com';
     const DEFAULT_SCOPES = 'openid email profile';
     const DEFAULT_TOKEN_KEY = 'adaptfully_google_token';
     const DEFAULT_AUTO_LOGIN_KEY = 'lastLoggedIn';
@@ -33,8 +32,13 @@
             return configValue('googleTokenKey', DEFAULT_TOKEN_KEY);
         }
 
+        /**
+         * Browser GIS OAuth client id only (`config.googleClientId`).
+         * Capacitor / Capgo builds use `platforms.<name>.socialLogin.google.webClientId` instead.
+         */
         #clientId() {
-            return configValue('googleClientId', DEFAULT_CLIENT_ID);
+            const clientId = configValue('googleClientId', '');
+            return typeof clientId === 'string' ? clientId.trim() : '';
         }
 
         #scopes() {
@@ -47,8 +51,17 @@
 
         whenReady(done) {
             const setup = () => {
+                const clientId = this.#clientId();
+                if (!clientId) {
+                    console.error(
+                        'google-auth: config.googleClientId is required '
+                        + '(browser GIS OAuth client; do not reuse socialLogin.google.webClientId).',
+                    );
+                    done({ error: 'google-auth: config.googleClientId is required' });
+                    return;
+                }
                 this.tokenClient = google.accounts.oauth2.initTokenClient({
-                    client_id: this.#clientId(),
+                    client_id: clientId,
                     scope: this.#scopes(),
                     callback: () => {},
                 });

package/lib/runtime/auth/social-auth.js

@@ -107,9 +107,11 @@
             const options = {};
 
             if (config.providers?.google !== false) {
+                // Capgo webClientId comes only from platforms.<name>.socialLogin
+                // (written to __ADAPTFULLY_SOCIAL_LOGIN__). Do not fall back to
+                // config.googleClientId — that key is for browser google-auth / GIS.
                 options.google = {
-                    webClientId: config.google?.webClientId
-                        || configValue('googleClientId', ''),
+                    webClientId: config.google?.webClientId || '',
                     iOSClientId: config.google?.iOSClientId,
                     iOSServerClientId: config.google?.iOSServerClientId
                         || config.google?.webClientId,

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@makefully/adaptfully",
-    "version": "5.0.0",
+    "version": "5.0.1",
     "description": "Platform abstraction and Wrapfully deploy client for Makefully games",
     "type": "module",
     "main": "./lib/node/index.js",