@nebulr-group/bridge-svelte 0.3.0-beta.0 → 0.3.0-beta.2

package/dist/client/components/sdk-auth/LoginForm.svelte

@@ -3,7 +3,7 @@
   import type { HTMLAttributes } from 'svelte/elements';
   import type { AppConfig, FederationConnection } from '@thebridge/auth-core';
   import { onMount } from 'svelte';
-  import { getBridgeAuth, authState, appConfigStore } from '../../../core/bridge-instance.js';
+  import { getBridgeAuth, authState, appConfigStore, ensureAppConfig } from '../../../core/bridge-instance.js';
   import { getConfig } from '../../stores/config.store.js';
   import AuthFormWrapper from './shared/AuthFormWrapper.svelte';
   import Spinner from './shared/Spinner.svelte';
@@ -33,6 +33,13 @@
     onSsoClick?: (connectionType: string) => void;
     heading?: string;
     ssoConnections?: FederationConnection[];
+    /**
+     * SSO kickoff strategy for the built-in SsoButtons.
+     * - 'redirect' (default): full-page navigation to the federation endpoint.
+     * - 'popup': opens window.open and resolves via postMessage.
+     * Ignored when `onSsoClick` is provided (the caller handles the click).
+     */
+    ssoMode?: 'redirect' | 'popup';
     footer?: Snippet;
   }
 
@@ -48,6 +55,7 @@
     onSsoClick,
     heading = '',
     ssoConnections = [],
+    ssoMode = 'redirect',
     footer,
     class: className,
     style,
@@ -164,6 +172,15 @@
 
   onMount(async () => {
     if (typeof window === 'undefined') return;
+
+    // Ensure the anonymous app config is loaded. `initBridge()` kicks off the
+    // same fetch on startup, but LoginForm can mount before that promise
+    // settles (slow network, failed init, etc.), so we call it again here.
+    // `ensureAppConfig()` is idempotent and logs errors — the store update
+    // triggers reactivity and the SSO buttons / magic-link / passkey toggles
+    // render when it resolves.
+    void ensureAppConfig();
+
     const params = new URLSearchParams(window.location.search);
     const magicToken = params.get('bridge_magic_link_token');
     if (!magicToken) return;
@@ -391,6 +408,7 @@
         {:else}
           <SsoButton
             connection={conn}
+            mode={ssoMode}
             onSuccess={onLogin}
             onError={onError}
             class="bridge-btn bridge-btn-secondary bridge-sso-btn"

package/dist/client/components/sdk-auth/LoginForm.svelte.d.ts

@@ -18,6 +18,13 @@ interface Props extends HTMLAttributes<HTMLDivElement> {
     onSsoClick?: (connectionType: string) => void;
     heading?: string;
     ssoConnections?: FederationConnection[];
+    /**
+     * SSO kickoff strategy for the built-in SsoButtons.
+     * - 'redirect' (default): full-page navigation to the federation endpoint.
+     * - 'popup': opens window.open and resolves via postMessage.
+     * Ignored when `onSsoClick` is provided (the caller handles the click).
+     */
+    ssoMode?: 'redirect' | 'popup';
     footer?: Snippet;
 }
 declare const LoginForm: import("svelte").Component<Props, {}, "">;

package/dist/client/components/sdk-auth/SsoButton.svelte

@@ -8,6 +8,14 @@
   interface Props extends HTMLButtonAttributes {
     connection: FederationConnection;
     label?: string;
+    /**
+     * SSO kickoff strategy.
+     * - 'redirect' (default): full-page navigation to the federation endpoint,
+     *   provider returns via the normal OAuth callback chain.
+     * - 'popup': opens window.open and resolves via postMessage — useful for
+     *   embedded widgets that must not unload the host page.
+     */
+    mode?: 'redirect' | 'popup';
     onSuccess?: () => void;
     onError?: (error: Error) => void;
     icon?: Snippet;
@@ -16,6 +24,7 @@
   let {
     connection,
     label,
+    mode = 'redirect',
     onSuccess,
     onError,
     icon,
@@ -31,7 +40,7 @@
     if (loading) return;
     loading = true;
     try {
-      const result = await getBridgeAuth().startSsoLogin(connection.type);
+      const result = await getBridgeAuth().startSsoLogin(connection.type, { mode });
       if (result.type === 'auth_success') {
         onSuccess?.();
       } else if (result.type === 'auth_error') {

package/dist/client/components/sdk-auth/SsoButton.svelte.d.ts

@@ -4,6 +4,14 @@ import type { FederationConnection } from '@thebridge/auth-core';
 interface Props extends HTMLButtonAttributes {
     connection: FederationConnection;
     label?: string;
+    /**
+     * SSO kickoff strategy.
+     * - 'redirect' (default): full-page navigation to the federation endpoint,
+     *   provider returns via the normal OAuth callback chain.
+     * - 'popup': opens window.open and resolves via postMessage — useful for
+     *   embedded widgets that must not unload the host page.
+     */
+    mode?: 'redirect' | 'popup';
     onSuccess?: () => void;
     onError?: (error: Error) => void;
     icon?: Snippet;

package/dist/core/bridge-instance.d.ts

@@ -8,6 +8,16 @@
 import { BridgeAuth, type AppConfig, type AuthState, type BridgeAuthConfig, type Plan, type Profile, type SubscriptionStatus, type TenantUser, type TokenSet } from '@nebulr-group/bridge-auth-core';
 import { type Readable, type Writable } from 'svelte/store';
 export declare function initBridge(config: BridgeAuthConfig): BridgeAuth;
+/**
+ * Load the anonymous app config into `appConfigStore` if it isn't already.
+ *
+ * Idempotent: concurrent callers share the in-flight fetch, and once the
+ * store holds a value this function resolves immediately.
+ *
+ * Resolves with the loaded config on success or `null` on failure (the
+ * fetch error is logged — it is not silently swallowed).
+ */
+export declare function ensureAppConfig(): Promise<AppConfig | null>;
 export declare function getBridgeAuth(): BridgeAuth;
 export declare function markReady(): void;
 export declare function waitForBridge(): Promise<void>;

package/dist/core/bridge-instance.js

@@ -28,6 +28,12 @@ let _resolveReady = null;
 const _readyPromise = new Promise((resolve) => {
     _resolveReady = resolve;
 });
+// ── App config load gate ───────────────────────────────────────────────────────
+//
+// The anonymous app config drives SSO button visibility, signup/magic-link
+// toggles, etc. on LoginForm. We cache the in-flight fetch so concurrent
+// callers share a single network request and can await the result.
+let _appConfigPromise = null;
 // ── Init / access ──────────────────────────────────────────────────────────────
 export function initBridge(config) {
     if (_instance) {
@@ -78,11 +84,42 @@ export function initBridge(config) {
     _instance.on('auth:error', (err) => {
         _error.set(err.message);
     });
-    // Load app config anonymously (drives SSO buttons etc.)
-    _instance.getAppConfig().then((cfg) => _appConfig.set(cfg)).catch(() => { });
+    // Load app config anonymously (drives SSO buttons, signup toggle, etc.).
+    // Cached in `_appConfigPromise` so LoginForm (and others) can await the
+    // result via `ensureAppConfig()` instead of racing the store update.
+    void ensureAppConfig();
     logger.debug('[bridge-instance] initialized');
     return _instance;
 }
+/**
+ * Load the anonymous app config into `appConfigStore` if it isn't already.
+ *
+ * Idempotent: concurrent callers share the in-flight fetch, and once the
+ * store holds a value this function resolves immediately.
+ *
+ * Resolves with the loaded config on success or `null` on failure (the
+ * fetch error is logged — it is not silently swallowed).
+ */
+export function ensureAppConfig() {
+    const existing = get(_appConfig);
+    if (existing)
+        return Promise.resolve(existing);
+    if (_appConfigPromise)
+        return _appConfigPromise;
+    _appConfigPromise = getBridgeAuth()
+        .getAppConfig()
+        .then((cfg) => {
+        _appConfig.set(cfg);
+        return cfg;
+    })
+        .catch((err) => {
+        logger.warn('[bridge-instance] getAppConfig failed:', err);
+        // Allow a later call to retry
+        _appConfigPromise = null;
+        return null;
+    });
+    return _appConfigPromise;
+}
 export function getBridgeAuth() {
     if (!_instance) {
         throw new Error('BridgeAuth not initialized. Call initBridge() first (via bridgeConfig.initConfig).');

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export * from './client/BridgeBootstrap.js';
 export * from './client/stores/config.store.js';
-export { initBridge, getBridgeAuth, markReady, waitForBridge, auth, tokenStore, isAuthenticated, isLoading, authError, authState, isOnboarded, hasMultiTenantAccess, tenantUsersStore, profileStore, flagsStore, bridgeReadyStore, appConfigStore, subscriptionStore, loadSubscription, } from './core/bridge-instance.js';
+export { initBridge, getBridgeAuth, markReady, waitForBridge, auth, tokenStore, isAuthenticated, isLoading, authError, authState, isOnboarded, hasMultiTenantAccess, tenantUsersStore, profileStore, flagsStore, bridgeReadyStore, appConfigStore, ensureAppConfig, subscriptionStore, loadSubscription, } from './core/bridge-instance.js';
 export { default as BridgeBootstrap, default as BridgeProvider } from './client/BridgeBootstrap.svelte';
 export { default as ApiTokenManagement } from './client/components/developer/ApiTokenManagement.svelte';
 export { default as FeatureFlag } from './client/components/FeatureFlag.svelte';

package/dist/index.js

@@ -2,7 +2,7 @@
 export * from './client/BridgeBootstrap.js';
 export * from './client/stores/config.store.js';
 // Bridge instance (singleton + Svelte stores)
-export { initBridge, getBridgeAuth, markReady, waitForBridge, auth, tokenStore, isAuthenticated, isLoading, authError, authState, isOnboarded, hasMultiTenantAccess, tenantUsersStore, profileStore, flagsStore, bridgeReadyStore, appConfigStore, subscriptionStore, loadSubscription, } from './core/bridge-instance.js';
+export { initBridge, getBridgeAuth, markReady, waitForBridge, auth, tokenStore, isAuthenticated, isLoading, authError, authState, isOnboarded, hasMultiTenantAccess, tenantUsersStore, profileStore, flagsStore, bridgeReadyStore, appConfigStore, ensureAppConfig, subscriptionStore, loadSubscription, } from './core/bridge-instance.js';
 // Components (Svelte components must have `export default`)
 export { default as BridgeBootstrap, default as BridgeProvider } from './client/BridgeBootstrap.svelte';
 export { default as ApiTokenManagement } from './client/components/developer/ApiTokenManagement.svelte';

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@nebulr-group/bridge-svelte",
-	"version": "0.3.0-beta.0",
+	"version": "0.3.0-beta.2",
 	"description": "Bridge Svelte library, This library helps you to add bridge authentication and feature flags, and payments to your svelte application.",
 	"author": "Iman Pouya",
 	"license": "MIT",
@@ -60,7 +60,7 @@
 		}
 	},
 	"dependencies": {
-		"@nebulr-group/bridge-auth-core": "^0.1.0-beta.0"
+		"@nebulr-group/bridge-auth-core": "0.1.0-beta.2"
 	},
 	"devDependencies": {
 		"@sveltejs/kit": "^2.16.0",