@orangecheck/auth-client 2.27.0 → 2.28.0

package/dist/index.mjs

@@ -10,7 +10,8 @@ var DEFAULT_CONFIG = {
   authOrigin: "https://ochk.io",
   signInPath: "/signin",
   mePath: "/api/auth/me",
-  logoutPath: "/api/auth/logout"
+  logoutPath: "/api/auth/logout",
+  multiAccount: true
 };
 function resolveConfig(cfg) {
   return { ...DEFAULT_CONFIG, ...cfg ?? {} };
@@ -266,7 +267,7 @@ function OcSessionProvider({
   const pinInFlightRef = React4.useRef(false);
   const pinThisTab = React4.useCallback(
     async (didOc) => {
-      if (pinInFlightRef.current || readTabSession()) return;
+      if (!cfg.multiAccount || pinInFlightRef.current || readTabSession()) return;
       pinInFlightRef.current = true;
       try {
         const res = await fetch(`${cfg.authOrigin}/api/auth/tab`, {
@@ -285,7 +286,7 @@ function OcSessionProvider({
         pinInFlightRef.current = false;
       }
     },
-    [cfg.authOrigin]
+    [cfg.authOrigin, cfg.multiAccount]
   );
   const refresh = React4.useCallback(async () => {
     if (typeof window === "undefined") return;
@@ -332,7 +333,7 @@ function OcSessionProvider({
       setError(null);
       if (acct && !pin) void pinThisTab(acct.didOc);
       const currentOrigin = typeof window !== "undefined" ? window.location.origin : null;
-      if (acct && rosterEntries.length === 0 && currentOrigin !== null && !cfg.authOrigin.startsWith(currentOrigin)) {
+      if (cfg.multiAccount && acct && rosterEntries.length === 0 && currentOrigin !== null && !cfg.authOrigin.startsWith(currentOrigin)) {
         const peers = await fetchHostRoster(cfg);
         if (peers.length > 0) setRoster(peers);
       }
@@ -345,15 +346,21 @@ function OcSessionProvider({
     let cancelled = false;
     consumeTabAdoptMarker();
     void (async () => {
-      await consumeTabAccountHint(cfg.authOrigin);
+      if (cfg.multiAccount) await consumeTabAccountHint(cfg.authOrigin);
       if (!cancelled) void refresh();
     })();
     return () => {
       cancelled = true;
     };
-  }, [refresh, cfg.authOrigin]);
-  React4.useEffect(() => installTabFetchInterceptor(cfg.authOrigin), [cfg.authOrigin]);
-  React4.useEffect(() => installTabLinkDecorator(cfg.authOrigin), [cfg.authOrigin]);
+  }, [refresh, cfg.authOrigin, cfg.multiAccount]);
+  React4.useEffect(
+    () => cfg.multiAccount ? installTabFetchInterceptor(cfg.authOrigin) : void 0,
+    [cfg.authOrigin, cfg.multiAccount]
+  );
+  React4.useEffect(
+    () => cfg.multiAccount ? installTabLinkDecorator(cfg.authOrigin) : void 0,
+    [cfg.authOrigin, cfg.multiAccount]
+  );
   const signOut = React4.useCallback(
     async (opts) => {
       const scope = opts?.scope ?? "all";
@@ -2120,16 +2127,21 @@ function OcSignIn({
   returnTo,
   onSuccess,
   resolveReturnTo,
-  linkPrompt = true,
+  linkPrompt: linkPromptProp = true,
   add: addProp,
   authOrigin = "https://ochk.io",
   initialPath,
   providersFirst = true,
   paths,
-  className
+  className,
+  mode,
+  providerHref
 }) {
   const walletEnabled = paths?.wallet ?? true;
   const emailEnabled = paths?.email ?? true;
+  const firstParty = mode === "first-party";
+  const credentials = firstParty ? "omit" : "include";
+  const linkPrompt = linkPromptProp && !firstParty;
   const [resolvedReturn, setResolvedReturn] = React4.useState(
     () => familyReturnTarget(returnTo) ?? safeReturnTo(returnTo)
   );
@@ -2144,15 +2156,19 @@ function OcSignIn({
     const fromQuery = familyReturnTarget(q.get("return_to")) ?? familyReturnTarget(q.get("next"));
     setResolvedReturn(fromQuery ?? "/");
   }, [returnTo]);
-  const [addMode, setAddMode] = React4.useState(Boolean(addProp));
+  const [addMode, setAddMode] = React4.useState(Boolean(addProp) && !firstParty);
   React4.useEffect(() => {
     if (typeof window === "undefined") return;
+    if (firstParty) {
+      setAddMode(false);
+      return;
+    }
     if (addProp !== void 0) {
       setAddMode(Boolean(addProp));
       return;
     }
     setAddMode(new URLSearchParams(window.location.search).get("add") === "1");
-  }, [addProp]);
+  }, [addProp, firstParty]);
   const [path, setPath] = React4.useState(
     initialPath ?? (providersFirst ? "email" : "wallet")
   );
@@ -2309,6 +2325,9 @@ function OcSignIn({
         authOrigin,
         returnTo: resolvedReturn,
         add: addMode,
+        credentials,
+        firstParty,
+        providerHref,
         first: true
       }
     ),
@@ -2368,6 +2387,7 @@ function OcSignIn({
           authOrigin,
           audience,
           add: addMode,
+          credentials,
           onSuccess: (a, t) => void handleSuccess(a, t, "wallet")
         }
       ),
@@ -2376,11 +2396,22 @@ function OcSignIn({
         {
           authOrigin,
           add: addMode,
+          credentials,
           onSuccess: (a, t) => void handleSuccess(a, t, "email")
         }
       )
     ] }),
-    !providersFirst && /* @__PURE__ */ jsx(ProviderSignIn, { authOrigin, returnTo: resolvedReturn, add: addMode }),
+    !providersFirst && /* @__PURE__ */ jsx(
+      ProviderSignIn,
+      {
+        authOrigin,
+        returnTo: resolvedReturn,
+        add: addMode,
+        credentials,
+        firstParty,
+        providerHref
+      }
+    ),
     linkPrompt && /* @__PURE__ */ jsxs("label", { "data-oc-signin-linkalso": "", style: linkAlsoStyle, children: [
       /* @__PURE__ */ jsx(
         "input",
@@ -2453,14 +2484,19 @@ function ProviderSignIn({
   authOrigin,
   returnTo,
   add,
+  credentials,
+  firstParty,
+  providerHref,
   first = false
 }) {
   const [providers, setProviders] = React4.useState(null);
   const [origin, setOrigin] = React4.useState("");
+  const hidden = firstParty && !providerHref;
   React4.useEffect(() => {
     setOrigin(window.location.origin);
+    if (hidden) return;
     let cancelled = false;
-    fetch(`${authOrigin}/api/auth/providers`, { credentials: "include" }).then((r) => r.ok ? r.json() : null).then((body) => {
+    fetch(`${authOrigin}/api/auth/providers`, { credentials }).then((r) => r.ok ? r.json() : null).then((body) => {
       if (!cancelled) setProviders(body?.providers ?? []);
     }).catch(() => {
       if (!cancelled) setProviders([]);
@@ -2468,7 +2504,8 @@ function ProviderSignIn({
     return () => {
       cancelled = true;
     };
-  }, [authOrigin]);
+  }, [authOrigin, credentials, hidden]);
+  if (hidden) return null;
   if (providers !== null && providers.length === 0) return null;
   const providerReturnTo = returnTo.startsWith("/") ? origin ? `${origin}${returnTo}` : returnTo : returnTo;
   const line = { flex: 1, height: 1, background: "var(--border, #27272a)" };
@@ -2526,7 +2563,7 @@ function ProviderSignIn({
   const buttons = providers.map((p, i) => /* @__PURE__ */ jsxs(
     "a",
     {
-      href: `${authOrigin}/api/auth/${p.id}/start?return_to=${encodeURIComponent(
+      href: providerHref ? providerHref(p.id) : `${authOrigin}/api/auth/${p.id}/start?return_to=${encodeURIComponent(
         providerReturnTo
       )}${add ? "&add=1" : ""}`,
       "data-oc-signin-provider": p.id,
@@ -2559,7 +2596,13 @@ async function loadAdapter() {
 async function detectBrowserWallets() {
   return (await loadAdapter()).detectWallets().filter((w) => w.detected && w.id !== "manual").map((w) => ({ id: w.id, name: w.name }));
 }
-function WalletFlow({ authOrigin, audience, add, onSuccess }) {
+function WalletFlow({
+  authOrigin,
+  audience,
+  add,
+  credentials,
+  onSuccess
+}) {
   const uid = React4.useId();
   const ids = {
     address: `${uid}-address`,
@@ -2601,7 +2644,7 @@ function WalletFlow({ authOrigin, audience, add, onSuccess }) {
   async function submitSignature(message, nonce, signature, scheme) {
     const res = await fetch(`${authOrigin}/api/auth/signin`, {
       method: "POST",
-      credentials: "include",
+      credentials,
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         message,
@@ -2802,7 +2845,7 @@ function WalletFlow({ authOrigin, audience, add, onSuccess }) {
     noBrowserWallet && /* @__PURE__ */ jsx(Hint, { children: "No browser wallet found here. You can sign with any wallet and paste." })
   ] });
 }
-function EmailFlow({ authOrigin, add, onSuccess }) {
+function EmailFlow({ authOrigin, add, credentials, onSuccess }) {
   const uid = React4.useId();
   const [stage, setStage] = React4.useState("enter");
   const [email, setEmail] = React4.useState("");
@@ -2816,7 +2859,7 @@ function EmailFlow({ authOrigin, add, onSuccess }) {
     try {
       const res = await fetch(`${authOrigin}/api/auth/email-otp/start`, {
         method: "POST",
-        credentials: "include",
+        credentials,
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({ email: address })
       });
@@ -2868,7 +2911,7 @@ function EmailFlow({ authOrigin, add, onSuccess }) {
     try {
       const res = await fetch(`${authOrigin}/api/auth/email-otp/verify`, {
         method: "POST",
-        credentials: "include",
+        credentials,
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({
           email,