@orangecheck/auth-client 2.11.0 → 2.13.0

package/dist/index.mjs

@@ -5,6 +5,7 @@ import { startRegistration, startAuthentication } from '@simplewebauthn/browser'
 // src/provider.tsx
 
 // src/types.ts
+var DISPLAY_IDENTITY_KINDS = ["did", "btc", "email", "nostr"];
 var DEFAULT_CONFIG = {
   authOrigin: "https://ochk.io",
   signInPath: "/signin",
@@ -22,6 +23,13 @@ function buildSignInUrl(cfg, returnTo) {
   return u.toString();
 }
 var SessionContext = React3.createContext(null);
+function normalizeDisplayIdentity(raw, didOc) {
+  const di = raw.display_identity ?? raw.displayIdentity;
+  if (di && typeof di === "object" && typeof di.value === "string" && di.value.length > 0 && typeof di.kind === "string" && DISPLAY_IDENTITY_KINDS.includes(di.kind)) {
+    return { kind: di.kind, value: di.value };
+  }
+  return { kind: "did", value: didOc };
+}
 function normalizeAccount(raw) {
   if (!raw) return null;
   const didOc = raw.did_oc ?? raw.didOc;
@@ -36,7 +44,8 @@ function normalizeAccount(raw) {
     nostrNpub: raw.nostr_npub ?? raw.nostrNpub ?? null,
     homeFederation: raw.home_federation_slug ?? raw.homeFederation ?? null,
     signingMethod: raw.signing_method ?? raw.signingMethod ?? null,
-    isOwner: Boolean(raw.is_owner ?? raw.isOwner ?? false)
+    isOwner: Boolean(raw.is_owner ?? raw.isOwner ?? false),
+    displayIdentity: normalizeDisplayIdentity(raw, didOc)
   };
 }
 function OcSessionProvider({
@@ -84,13 +93,41 @@ function OcSessionProvider({
     try {
       await fetch(`${cfg.authOrigin}${cfg.logoutPath}`, {
         method: "POST",
-        credentials: "include"
+        credentials: "include",
+        // `keepalive` lets the logout round-trip complete even if
+        // the caller hard-navigates away in the same tick (e.g.
+        // `<OcAccountMenu>` redirects home immediately on sign-out).
+        // Without it the in-flight request is cancelled on unload
+        // and the `.ochk.io` cookie may never get cleared.
+        keepalive: true
       });
     } catch {
     }
     setAccount(null);
     setStatus("anonymous");
   }, [cfg.authOrigin, cfg.logoutPath]);
+  const setDisplayIdentity = React3.useCallback(
+    async (kind) => {
+      if (typeof window === "undefined") return;
+      const res = await fetch(`${cfg.authOrigin}/api/auth/account`, {
+        method: "PATCH",
+        credentials: "include",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ display_identity: kind })
+      });
+      if (!res.ok) {
+        let reason = `http_${res.status}`;
+        try {
+          const body = await res.json();
+          if (body.reason) reason = body.reason;
+        } catch {
+        }
+        throw new Error(`[@orangecheck/auth-client] setDisplayIdentity failed: ${reason}`);
+      }
+      await refresh();
+    },
+    [cfg.authOrigin, refresh]
+  );
   const value = React3.useMemo(() => {
     const returnTo = defaultReturnTo ?? (typeof window !== "undefined" ? window.location.href : void 0);
     return {
@@ -99,9 +136,10 @@ function OcSessionProvider({
       error,
       refresh,
       signOut,
+      setDisplayIdentity,
       signInUrl: buildSignInUrl(cfg, returnTo)
     };
-  }, [status, account, error, refresh, signOut, cfg, defaultReturnTo]);
+  }, [status, account, error, refresh, signOut, setDisplayIdentity, cfg, defaultReturnTo]);
   return /* @__PURE__ */ jsx(SessionContext.Provider, { value, children });
 }
 function useOcSession() {
@@ -749,6 +787,16 @@ var OcAddressInput = React3.forwardRef(
   }
 );
 var DEFAULT_AUTH_ORIGIN = "https://ochk.io";
+async function fetchOcLinkedIdentities(opts) {
+  const authOrigin = opts?.authOrigin ?? DEFAULT_AUTH_ORIGIN;
+  const r = await fetch(`${authOrigin}/api/auth/identities`, {
+    credentials: "include"
+  });
+  if (r.status === 401) return [];
+  if (!r.ok) throw new Error(`identities fetch failed: http_${r.status}`);
+  const body = await r.json();
+  return body.linked ?? [];
+}
 function OcLinkedIdentities({
   authOrigin = DEFAULT_AUTH_ORIGIN,
   className,
@@ -2448,6 +2496,6 @@ function handleSudoRequired(body, args = {}) {
   return false;
 }
 
-export { DEFAULT_CONFIG, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, buildSignInUrl, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };
+export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, buildSignInUrl, fetchOcLinkedIdentities, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map