@openkey/sdk 0.10.2 → 0.12.0-beta.0

package/dist/index.mjs

@@ -1,32 +1,32 @@
 // ../core/dist/index.js
-var u = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-function g(e) {
-  let r = "", n = e.length;
-  for (let t = 0; t < n; t += 3) {
-    let c = e[t], d = t + 1 < n ? e[t + 1] : 0, i = t + 2 < n ? e[t + 2] : 0, o = c << 16 | d << 8 | i;
-    r += u[o >> 18 & 63], r += u[o >> 12 & 63], r += t + 1 < n ? u[o >> 6 & 63] : "", r += t + 2 < n ? u[o & 63] : "";
-  }
-  return r.replace(/\+/g, "-").replace(/\//g, "_");
+var y = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+function u(e) {
+  let n = "", t = e.length;
+  for (let r = 0; r < t; r += 3) {
+    let i = e[r], s = r + 1 < t ? e[r + 1] : 0, a = r + 2 < t ? e[r + 2] : 0, c = i << 16 | s << 8 | a;
+    n += y[c >> 18 & 63], n += y[c >> 12 & 63], n += r + 1 < t ? y[c >> 6 & 63] : "", n += r + 2 < t ? y[c & 63] : "";
+  }
+  return n.replace(/\+/g, "-").replace(/\//g, "_");
 }
-function y() {
+function B() {
   let e = new Uint8Array(32);
-  return crypto.getRandomValues(e), g(e);
+  return crypto.getRandomValues(e), u(e);
 }
-async function x(e) {
-  let n = new TextEncoder().encode(e), t = await crypto.subtle.digest("SHA-256", n);
-  return new Uint8Array(t);
+async function I(e) {
+  let t = new TextEncoder().encode(e), r = await crypto.subtle.digest("SHA-256", t);
+  return new Uint8Array(r);
 }
-async function k(e, r) {
-  let t = await (r ?? x)(e);
-  return g(t);
+async function W(e, n) {
+  let r = await (n ?? I)(e);
+  return u(r);
 }
-function m() {
+function j() {
   let e = new Uint8Array(16);
-  return crypto.getRandomValues(e), g(e);
+  return crypto.getRandomValues(e), u(e);
 }
-function T(e) {
-  let { host: r, clientId: n, redirectUri: t, codeChallenge: c, state: d, scopes: i, authorizePath: o = "/api/auth/oauth2/authorize" } = e, s = new URL(o, r);
-  return s.searchParams.set("client_id", n), s.searchParams.set("redirect_uri", t), s.searchParams.set("response_type", "code"), s.searchParams.set("scope", i.join(" ")), s.searchParams.set("state", d), s.searchParams.set("code_challenge", c), s.searchParams.set("code_challenge_method", "S256"), s.toString();
+function G(e) {
+  let { host: n, clientId: t, redirectUri: r, codeChallenge: i, state: s, scopes: a, authorizePath: c = "/api/auth/oauth2/authorize" } = e, d = new URL(c, n);
+  return d.searchParams.set("client_id", t), d.searchParams.set("redirect_uri", r), d.searchParams.set("response_type", "code"), d.searchParams.set("scope", a.join(" ")), d.searchParams.set("state", s), d.searchParams.set("code_challenge", i), d.searchParams.set("code_challenge_method", "S256"), d.toString();
 }
 
 // src/nostr.ts
@@ -141,8 +141,9 @@ var NostrFrame = class {
   }
 };
 var OpenKeyNostr = class {
-  constructor(host) {
+  constructor(host, passkeysSupported = true) {
     this.host = host;
+    this.passkeysSupported = passkeysSupported;
   }
   /**
    * Get-or-create the user's OpenKey-custodied Nostr identity. Always shows
@@ -185,7 +186,8 @@ var OpenKeyNostr = class {
   }
   widgetUrl() {
     const origin = encodeURIComponent(window.location.origin);
-    return `${this.host}/widget/embed/nostr/approve?origin=${origin}`;
+    const passkeysFlag = this.passkeysSupported ? "" : "&passkeys=false";
+    return `${this.host}/widget/embed/nostr/approve?origin=${origin}${passkeysFlag}`;
   }
   run(url, request, onData) {
     return new Promise((resolve, reject) => {
@@ -229,6 +231,9 @@ var OpenKeyNostr = class {
 };
 
 // src/index.ts
+function passkeysQueryFlag(passkeysSupported) {
+  return passkeysSupported ? "" : "&passkeys=false";
+}
 var DEFAULT_HOST = "https://openkey.so";
 var POPUP_WIDTH = 400;
 var POPUP_HEIGHT = 600;
@@ -281,9 +286,9 @@ function resolveAuthorizeTinyCloudRouting(state) {
   const requestKeyId = rawRequestKeyId && rawRequestKeyId.length > 0 ? rawRequestKeyId : null;
   const knownKeys = state.knownKeys ?? [];
   const lookupType = (id) => {
-    for (const k2 of knownKeys) {
-      if (k2.id === id) return k2.keyType;
-      if (k2.address && k2.address.toLowerCase() === id.toLowerCase()) return k2.keyType;
+    for (const k of knownKeys) {
+      if (k.id === id) return k.keyType;
+      if (k.address && k.address.toLowerCase() === id.toLowerCase()) return k.keyType;
     }
     if (id.startsWith("external:")) return "EXTERNAL";
     return null;
@@ -548,6 +553,7 @@ var OpenKey = class {
   oauthHost;
   appName;
   mode;
+  passkeysSupported;
   config;
   popup = null;
   lastAuth = null;
@@ -568,7 +574,8 @@ var OpenKey = class {
     this.oauthHost = config.oauthHost || this.deriveOAuthHost(this.host);
     this.appName = config.appName || window.location.hostname;
     this.mode = config.mode ?? "iframe";
-    this.nostr = new OpenKeyNostr(this.host);
+    this.passkeysSupported = config.passkeysSupported ?? true;
+    this.nostr = new OpenKeyNostr(this.host, this.passkeysSupported);
     if (typeof window !== "undefined") {
       this.discoveredProviders = [];
       window.addEventListener("eip6963:announceProvider", (event) => {
@@ -1038,14 +1045,14 @@ var OpenKey = class {
      * @returns Promise that resolves with authorization code after user consent
      */
     connect: async (config) => {
-      const verifier = y();
-      const challenge = await k(verifier);
-      const state = config.state || m();
+      const verifier = B();
+      const challenge = await W(verifier);
+      const state = config.state || j();
       sessionStorage.setItem(
         OAUTH_STORAGE_KEY,
         JSON.stringify({ verifier, state })
       );
-      const authUrl = T({
+      const authUrl = G({
         host: this.oauthHost,
         clientId: config.clientId,
         redirectUri: config.redirectUri,
@@ -1215,17 +1222,18 @@ var OpenKey = class {
     const mode = this.resolveMode(modeOverride);
     const origin = encodeURIComponent(window.location.origin);
     const eoaFlag = action === "connect" && this.hasDetectedEoa() ? "&hasEoa=true" : "";
+    const passkeysFlag = passkeysQueryFlag(this.passkeysSupported);
     if (mode === "popup") {
-      const url2 = `${this.host}/widget/${action}?origin=${origin}${eoaFlag}`;
+      const url2 = `${this.host}/widget/${action}?origin=${origin}${eoaFlag}${passkeysFlag}`;
       return new Promise((resolve, reject) => this.openPopup(action, url2, message, resolve, reject));
     }
     if (mode === "redirect") {
-      const url2 = `${this.host}/widget/${action}?origin=${origin}${eoaFlag}`;
+      const url2 = `${this.host}/widget/${action}?origin=${origin}${eoaFlag}${passkeysFlag}`;
       window.location.href = url2;
       return new Promise(() => {
       });
     }
-    const url = `${this.host}/widget/embed/${action}?origin=${origin}${eoaFlag}`;
+    const url = `${this.host}/widget/embed/${action}?origin=${origin}${eoaFlag}${passkeysFlag}`;
     return this.openIframeModal(url, action, message, origin);
   }
   openIframeModal(url, action, message, origin) {
@@ -1331,7 +1339,7 @@ var OpenKey = class {
         cleanup();
         console.warn("OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP.");
         showToast();
-        const popupUrl = `${this.host}/widget/${action}?origin=${origin}`;
+        const popupUrl = `${this.host}/widget/${action}?origin=${origin}${passkeysQueryFlag(this.passkeysSupported)}`;
         this.openPopup(action, popupUrl, message, (val) => settle(() => resolve(val)), (err) => settle(() => reject(err)));
       }, IFRAME_READY_TIMEOUT);
       const overallTimeout = setTimeout(() => {
@@ -1635,6 +1643,7 @@ export {
   OpenKeyProvider,
   index_default as default,
   getOpenKey,
+  passkeysQueryFlag,
   resolveAuthorizeTinyCloudRouting,
   shouldRouteAuthorizeTinyCloudExternal,
   validateIframeResize