@moon-x/react-sdk 0.1.0 → 0.2.0

package/README.md

@@ -238,4 +238,4 @@ For React Native apps, use [`@moon-x/react-native-sdk`](https://www.npmjs.com/pa
 
 ## License
 
-MIT.
+UNLICENSED. All rights reserved.

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 export { LoginWithEmailState, PasskeyStatusEntry, RegisterPasskeyResult, UseAddPasskeyResult, UseLoginWithEmailCallbacks, UsePasskeyStatusResult, UseRemovePasskeyResult, useAddPasskey, useLoginWithEmail, usePasskeyStatus, useRegisterPasskey, useRemovePasskey, useUser } from '@moon-x/core/react';
-import { WalletListEntry, AuthAppearance, PrefillConfig, WalletChainType, MoonKeyThemeConfig, PasskeyEnrollConfig, SignMessageConfig, ExportKeyConfig, SignTransactionConfig, SendTransactionConfig, Chain, LogoutResponse, EmailOtpFlowState, Wallet } from '@moon-x/core/types';
+import { WalletListEntry, AuthAppearance, PrefillConfig, WalletChainType, MoonKeyThemeConfig, PasskeyEnrollConfig, SignMessageConfig, ExportKeyConfig, SignTransactionConfig, SendTransactionConfig, Chain, LogoutResponse, EmailOtpFlowState, SendEmailOtpResponse, Wallet } from '@moon-x/core/types';
 export { Chain, Factor, IdpProvider, Network, PublicEthereumWallet, PublicWallet, WalletConnectConfig, WalletListEntry } from '@moon-x/core/types';
 import React$1, { ReactNode } from 'react';
 export { e as ethereum } from './ethereum-DobH9IQl.mjs';
@@ -150,7 +150,6 @@ interface MoonKeyConfig {
     theme?: MoonKeyThemeConfig;
     emailConfig?: {
         skipVerifiedSuccess?: boolean;
-        expiresIn?: number;
         verifiedDisplayTime?: number;
         verifyEmailTitle?: string;
         verifyEmailResendTitle?: string;
@@ -212,6 +211,29 @@ interface MoonKeyInstance {
         refreshToken: string;
         expiresAt: number;
     } | null>;
+    /**
+     * Run a passkey-asserted step-up ceremony and return a short-lived
+     * presence token. The token (JWT, `tt:"presence"`) is signed with
+     * the app's JWKS key and intended to be passed to your backend in a
+     * header (e.g. `X-MoonX-Presence`) on high-risk routes. Your backend
+     * verifies it via `@moon-x/node-sdk`'s
+     * `client.auth.verifyPresenceToken(token)`.
+     *
+     * Must be invoked synchronously from a click handler — WebAuthn
+     * requires transient activation. Throws if the user has no
+     * enrolled passkey or cancels the prompt.
+     *
+     * @example
+     * const { presenceToken } = await getPresenceToken();
+     * await fetch('/api/sensitive', {
+     *   method: 'POST',
+     *   headers: { 'X-MoonX-Presence': presenceToken },
+     * });
+     */
+    getPresenceToken: () => Promise<{
+        presenceToken: string;
+        expiresAt: number;
+    }>;
     /**
      * Start authentication flow (UI-based)
      * @param params - Optional configuration to override provider-level config
@@ -241,10 +263,15 @@ interface MoonKeyInstance {
      */
     setAppearance: (appearance: AuthAppearance) => void;
     publishableKey: string;
+    /**
+     * Send the OTP. Returns the platform response — including the
+     * authoritative `expires_at` (unix seconds) so headless consumers
+     * can render an accurate countdown without inventing their own TTL.
+     */
     sendCode: (params: {
         email: string;
         disableSignup?: boolean;
-    }) => Promise<void>;
+    }) => Promise<SendEmailOtpResponse>;
     loginWithCode: (params: {
         code: string;
     }) => Promise<void>;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { LoginWithEmailState, PasskeyStatusEntry, RegisterPasskeyResult, UseAddPasskeyResult, UseLoginWithEmailCallbacks, UsePasskeyStatusResult, UseRemovePasskeyResult, useAddPasskey, useLoginWithEmail, usePasskeyStatus, useRegisterPasskey, useRemovePasskey, useUser } from '@moon-x/core/react';
-import { WalletListEntry, AuthAppearance, PrefillConfig, WalletChainType, MoonKeyThemeConfig, PasskeyEnrollConfig, SignMessageConfig, ExportKeyConfig, SignTransactionConfig, SendTransactionConfig, Chain, LogoutResponse, EmailOtpFlowState, Wallet } from '@moon-x/core/types';
+import { WalletListEntry, AuthAppearance, PrefillConfig, WalletChainType, MoonKeyThemeConfig, PasskeyEnrollConfig, SignMessageConfig, ExportKeyConfig, SignTransactionConfig, SendTransactionConfig, Chain, LogoutResponse, EmailOtpFlowState, SendEmailOtpResponse, Wallet } from '@moon-x/core/types';
 export { Chain, Factor, IdpProvider, Network, PublicEthereumWallet, PublicWallet, WalletConnectConfig, WalletListEntry } from '@moon-x/core/types';
 import React$1, { ReactNode } from 'react';
 export { e as ethereum } from './ethereum-BRGKpUFH.js';
@@ -150,7 +150,6 @@ interface MoonKeyConfig {
     theme?: MoonKeyThemeConfig;
     emailConfig?: {
         skipVerifiedSuccess?: boolean;
-        expiresIn?: number;
         verifiedDisplayTime?: number;
         verifyEmailTitle?: string;
         verifyEmailResendTitle?: string;
@@ -212,6 +211,29 @@ interface MoonKeyInstance {
         refreshToken: string;
         expiresAt: number;
     } | null>;
+    /**
+     * Run a passkey-asserted step-up ceremony and return a short-lived
+     * presence token. The token (JWT, `tt:"presence"`) is signed with
+     * the app's JWKS key and intended to be passed to your backend in a
+     * header (e.g. `X-MoonX-Presence`) on high-risk routes. Your backend
+     * verifies it via `@moon-x/node-sdk`'s
+     * `client.auth.verifyPresenceToken(token)`.
+     *
+     * Must be invoked synchronously from a click handler — WebAuthn
+     * requires transient activation. Throws if the user has no
+     * enrolled passkey or cancels the prompt.
+     *
+     * @example
+     * const { presenceToken } = await getPresenceToken();
+     * await fetch('/api/sensitive', {
+     *   method: 'POST',
+     *   headers: { 'X-MoonX-Presence': presenceToken },
+     * });
+     */
+    getPresenceToken: () => Promise<{
+        presenceToken: string;
+        expiresAt: number;
+    }>;
     /**
      * Start authentication flow (UI-based)
      * @param params - Optional configuration to override provider-level config
@@ -241,10 +263,15 @@ interface MoonKeyInstance {
      */
     setAppearance: (appearance: AuthAppearance) => void;
     publishableKey: string;
+    /**
+     * Send the OTP. Returns the platform response — including the
+     * authoritative `expires_at` (unix seconds) so headless consumers
+     * can render an accurate countdown without inventing their own TTL.
+     */
     sendCode: (params: {
         email: string;
         disableSignup?: boolean;
-    }) => Promise<void>;
+    }) => Promise<SendEmailOtpResponse>;
     loginWithCode: (params: {
         code: string;
     }) => Promise<void>;