@orangecheck/auth-client 2.27.0 → 2.28.0

package/dist/index.d.mts

@@ -47,6 +47,7 @@ interface OcAuthConfig {
     signInPath?: string;
     mePath?: string;
     logoutPath?: string;
+    multiAccount?: boolean;
 }
 declare const DEFAULT_CONFIG: Required<OcAuthConfig>;
 declare function buildSignInUrl(cfg: Required<OcAuthConfig>, returnTo?: string): string;
@@ -118,7 +119,7 @@ interface UseOcAddressSuggestionReturn {
 declare function useOcAddressSuggestion(options: UseOcAddressSuggestionOptions): UseOcAddressSuggestionReturn;
 declare const OcAddressInput: React.ForwardRefExoticComponent<OcAddressInputProps & React.RefAttributes<HTMLInputElement>>;
 
-interface OcSignInProps {
+interface OcSignInBaseProps {
     audience: string;
     returnTo?: string;
     onSuccess?: (account: OcAccount, token?: string) => void;
@@ -134,9 +135,17 @@ interface OcSignInProps {
     add?: boolean;
     className?: string;
 }
+type OcSignInProps = OcSignInBaseProps & ({
+    mode?: 'family';
+    providerHref?: undefined;
+} | {
+    mode: 'first-party';
+    onSuccess: (account: OcAccount, token?: string) => void;
+    providerHref?: (providerId: string) => string;
+});
 declare function safeReturnTo(input: string | undefined): string;
 declare function familyReturnTarget(input: string | undefined | null): string | undefined;
-declare function OcSignIn({ audience, returnTo, onSuccess, resolveReturnTo, linkPrompt, add: addProp, authOrigin, initialPath, providersFirst, paths, className, }: OcSignInProps): React.ReactElement;
+declare function OcSignIn({ audience, returnTo, onSuccess, resolveReturnTo, linkPrompt: linkPromptProp, add: addProp, authOrigin, initialPath, providersFirst, paths, className, mode, providerHref, }: OcSignInProps): React.ReactElement;
 
 interface OcLinkedIdentity {
     id: string;

package/dist/index.d.ts

@@ -47,6 +47,7 @@ interface OcAuthConfig {
     signInPath?: string;
     mePath?: string;
     logoutPath?: string;
+    multiAccount?: boolean;
 }
 declare const DEFAULT_CONFIG: Required<OcAuthConfig>;
 declare function buildSignInUrl(cfg: Required<OcAuthConfig>, returnTo?: string): string;
@@ -118,7 +119,7 @@ interface UseOcAddressSuggestionReturn {
 declare function useOcAddressSuggestion(options: UseOcAddressSuggestionOptions): UseOcAddressSuggestionReturn;
 declare const OcAddressInput: React.ForwardRefExoticComponent<OcAddressInputProps & React.RefAttributes<HTMLInputElement>>;
 
-interface OcSignInProps {
+interface OcSignInBaseProps {
     audience: string;
     returnTo?: string;
     onSuccess?: (account: OcAccount, token?: string) => void;
@@ -134,9 +135,17 @@ interface OcSignInProps {
     add?: boolean;
     className?: string;
 }
+type OcSignInProps = OcSignInBaseProps & ({
+    mode?: 'family';
+    providerHref?: undefined;
+} | {
+    mode: 'first-party';
+    onSuccess: (account: OcAccount, token?: string) => void;
+    providerHref?: (providerId: string) => string;
+});
 declare function safeReturnTo(input: string | undefined): string;
 declare function familyReturnTarget(input: string | undefined | null): string | undefined;
-declare function OcSignIn({ audience, returnTo, onSuccess, resolveReturnTo, linkPrompt, add: addProp, authOrigin, initialPath, providersFirst, paths, className, }: OcSignInProps): React.ReactElement;
+declare function OcSignIn({ audience, returnTo, onSuccess, resolveReturnTo, linkPrompt: linkPromptProp, add: addProp, authOrigin, initialPath, providersFirst, paths, className, mode, providerHref, }: OcSignInProps): React.ReactElement;
 
 interface OcLinkedIdentity {
     id: string;

package/dist/index.js

@@ -32,7 +32,8 @@ var DEFAULT_CONFIG = {
   authOrigin: "https://ochk.io",
   signInPath: "/signin",
   mePath: "/api/auth/me",
-  logoutPath: "/api/auth/logout"
+  logoutPath: "/api/auth/logout",
+  multiAccount: true
 };
 function resolveConfig(cfg) {
   return { ...DEFAULT_CONFIG, ...cfg ?? {} };
@@ -288,7 +289,7 @@ function OcSessionProvider({
   const pinInFlightRef = React4__namespace.useRef(false);
   const pinThisTab = React4__namespace.useCallback(
     async (didOc) => {
-      if (pinInFlightRef.current || readTabSession()) return;
+      if (!cfg.multiAccount || pinInFlightRef.current || readTabSession()) return;
       pinInFlightRef.current = true;
       try {
         const res = await fetch(`${cfg.authOrigin}/api/auth/tab`, {
@@ -307,7 +308,7 @@ function OcSessionProvider({
         pinInFlightRef.current = false;
       }
     },
-    [cfg.authOrigin]
+    [cfg.authOrigin, cfg.multiAccount]
   );
   const refresh = React4__namespace.useCallback(async () => {
     if (typeof window === "undefined") return;
@@ -354,7 +355,7 @@ function OcSessionProvider({
       setError(null);
       if (acct && !pin) void pinThisTab(acct.didOc);
       const currentOrigin = typeof window !== "undefined" ? window.location.origin : null;
-      if (acct && rosterEntries.length === 0 && currentOrigin !== null && !cfg.authOrigin.startsWith(currentOrigin)) {
+      if (cfg.multiAccount && acct && rosterEntries.length === 0 && currentOrigin !== null && !cfg.authOrigin.startsWith(currentOrigin)) {
         const peers = await fetchHostRoster(cfg);
         if (peers.length > 0) setRoster(peers);
       }
@@ -367,15 +368,21 @@ function OcSessionProvider({
     let cancelled = false;
     consumeTabAdoptMarker();
     void (async () => {
-      await consumeTabAccountHint(cfg.authOrigin);
+      if (cfg.multiAccount) await consumeTabAccountHint(cfg.authOrigin);
       if (!cancelled) void refresh();
     })();
     return () => {
       cancelled = true;
     };
-  }, [refresh, cfg.authOrigin]);
-  React4__namespace.useEffect(() => installTabFetchInterceptor(cfg.authOrigin), [cfg.authOrigin]);
-  React4__namespace.useEffect(() => installTabLinkDecorator(cfg.authOrigin), [cfg.authOrigin]);
+  }, [refresh, cfg.authOrigin, cfg.multiAccount]);
+  React4__namespace.useEffect(
+    () => cfg.multiAccount ? installTabFetchInterceptor(cfg.authOrigin) : void 0,
+    [cfg.authOrigin, cfg.multiAccount]
+  );
+  React4__namespace.useEffect(
+    () => cfg.multiAccount ? installTabLinkDecorator(cfg.authOrigin) : void 0,
+    [cfg.authOrigin, cfg.multiAccount]
+  );
   const signOut = React4__namespace.useCallback(
     async (opts) => {
       const scope = opts?.scope ?? "all";
@@ -2142,16 +2149,21 @@ function OcSignIn({
   returnTo,
   onSuccess,
   resolveReturnTo,
-  linkPrompt = true,
+  linkPrompt: linkPromptProp = true,
   add: addProp,
   authOrigin = "https://ochk.io",
   initialPath,
   providersFirst = true,
   paths,
-  className
+  className,
+  mode,
+  providerHref
 }) {
   const walletEnabled = paths?.wallet ?? true;
   const emailEnabled = paths?.email ?? true;
+  const firstParty = mode === "first-party";
+  const credentials = firstParty ? "omit" : "include";
+  const linkPrompt = linkPromptProp && !firstParty;
   const [resolvedReturn, setResolvedReturn] = React4__namespace.useState(
     () => familyReturnTarget(returnTo) ?? safeReturnTo(returnTo)
   );
@@ -2166,15 +2178,19 @@ function OcSignIn({
     const fromQuery = familyReturnTarget(q.get("return_to")) ?? familyReturnTarget(q.get("next"));
     setResolvedReturn(fromQuery ?? "/");
   }, [returnTo]);
-  const [addMode, setAddMode] = React4__namespace.useState(Boolean(addProp));
+  const [addMode, setAddMode] = React4__namespace.useState(Boolean(addProp) && !firstParty);
   React4__namespace.useEffect(() => {
     if (typeof window === "undefined") return;
+    if (firstParty) {
+      setAddMode(false);
+      return;
+    }
     if (addProp !== void 0) {
       setAddMode(Boolean(addProp));
       return;
     }
     setAddMode(new URLSearchParams(window.location.search).get("add") === "1");
-  }, [addProp]);
+  }, [addProp, firstParty]);
   const [path, setPath] = React4__namespace.useState(
     initialPath ?? (providersFirst ? "email" : "wallet")
   );
@@ -2331,6 +2347,9 @@ function OcSignIn({
         authOrigin,
         returnTo: resolvedReturn,
         add: addMode,
+        credentials,
+        firstParty,
+        providerHref,
         first: true
       }
     ),
@@ -2390,6 +2409,7 @@ function OcSignIn({
           authOrigin,
           audience,
           add: addMode,
+          credentials,
           onSuccess: (a, t) => void handleSuccess(a, t, "wallet")
         }
       ),
@@ -2398,11 +2418,22 @@ function OcSignIn({
         {
           authOrigin,
           add: addMode,
+          credentials,
           onSuccess: (a, t) => void handleSuccess(a, t, "email")
         }
       )
     ] }),
-    !providersFirst && /* @__PURE__ */ jsxRuntime.jsx(ProviderSignIn, { authOrigin, returnTo: resolvedReturn, add: addMode }),
+    !providersFirst && /* @__PURE__ */ jsxRuntime.jsx(
+      ProviderSignIn,
+      {
+        authOrigin,
+        returnTo: resolvedReturn,
+        add: addMode,
+        credentials,
+        firstParty,
+        providerHref
+      }
+    ),
     linkPrompt && /* @__PURE__ */ jsxRuntime.jsxs("label", { "data-oc-signin-linkalso": "", style: linkAlsoStyle, children: [
       /* @__PURE__ */ jsxRuntime.jsx(
         "input",
@@ -2475,14 +2506,19 @@ function ProviderSignIn({
   authOrigin,
   returnTo,
   add,
+  credentials,
+  firstParty,
+  providerHref,
   first = false
 }) {
   const [providers, setProviders] = React4__namespace.useState(null);
   const [origin, setOrigin] = React4__namespace.useState("");
+  const hidden = firstParty && !providerHref;
   React4__namespace.useEffect(() => {
     setOrigin(window.location.origin);
+    if (hidden) return;
     let cancelled = false;
-    fetch(`${authOrigin}/api/auth/providers`, { credentials: "include" }).then((r) => r.ok ? r.json() : null).then((body) => {
+    fetch(`${authOrigin}/api/auth/providers`, { credentials }).then((r) => r.ok ? r.json() : null).then((body) => {
       if (!cancelled) setProviders(body?.providers ?? []);
     }).catch(() => {
       if (!cancelled) setProviders([]);
@@ -2490,7 +2526,8 @@ function ProviderSignIn({
     return () => {
       cancelled = true;
     };
-  }, [authOrigin]);
+  }, [authOrigin, credentials, hidden]);
+  if (hidden) return null;
   if (providers !== null && providers.length === 0) return null;
   const providerReturnTo = returnTo.startsWith("/") ? origin ? `${origin}${returnTo}` : returnTo : returnTo;
   const line = { flex: 1, height: 1, background: "var(--border, #27272a)" };
@@ -2548,7 +2585,7 @@ function ProviderSignIn({
   const buttons = providers.map((p, i) => /* @__PURE__ */ jsxRuntime.jsxs(
     "a",
     {
-      href: `${authOrigin}/api/auth/${p.id}/start?return_to=${encodeURIComponent(
+      href: providerHref ? providerHref(p.id) : `${authOrigin}/api/auth/${p.id}/start?return_to=${encodeURIComponent(
         providerReturnTo
       )}${add ? "&add=1" : ""}`,
       "data-oc-signin-provider": p.id,
@@ -2581,7 +2618,13 @@ async function loadAdapter() {
 async function detectBrowserWallets() {
   return (await loadAdapter()).detectWallets().filter((w) => w.detected && w.id !== "manual").map((w) => ({ id: w.id, name: w.name }));
 }
-function WalletFlow({ authOrigin, audience, add, onSuccess }) {
+function WalletFlow({
+  authOrigin,
+  audience,
+  add,
+  credentials,
+  onSuccess
+}) {
   const uid = React4__namespace.useId();
   const ids = {
     address: `${uid}-address`,
@@ -2623,7 +2666,7 @@ function WalletFlow({ authOrigin, audience, add, onSuccess }) {
   async function submitSignature(message, nonce, signature, scheme) {
     const res = await fetch(`${authOrigin}/api/auth/signin`, {
       method: "POST",
-      credentials: "include",
+      credentials,
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         message,
@@ -2824,7 +2867,7 @@ function WalletFlow({ authOrigin, audience, add, onSuccess }) {
     noBrowserWallet && /* @__PURE__ */ jsxRuntime.jsx(Hint, { children: "No browser wallet found here. You can sign with any wallet and paste." })
   ] });
 }
-function EmailFlow({ authOrigin, add, onSuccess }) {
+function EmailFlow({ authOrigin, add, credentials, onSuccess }) {
   const uid = React4__namespace.useId();
   const [stage, setStage] = React4__namespace.useState("enter");
   const [email, setEmail] = React4__namespace.useState("");
@@ -2838,7 +2881,7 @@ function EmailFlow({ authOrigin, add, onSuccess }) {
     try {
       const res = await fetch(`${authOrigin}/api/auth/email-otp/start`, {
         method: "POST",
-        credentials: "include",
+        credentials,
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({ email: address })
       });
@@ -2890,7 +2933,7 @@ function EmailFlow({ authOrigin, add, onSuccess }) {
     try {
       const res = await fetch(`${authOrigin}/api/auth/email-otp/verify`, {
         method: "POST",
-        credentials: "include",
+        credentials,
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({
           email,