@orangecheck/auth-client 2.8.0 → 2.9.0

package/dist/index.mjs

@@ -1064,6 +1064,48 @@ function AttestationLink() {
     )
   ] });
 }
+function LinkPromptStep({
+  method,
+  didOc,
+  authOrigin,
+  onResolved
+}) {
+  const [stage, setStage] = React3.useState("offer");
+  if (stage === "linking") {
+    return method === "btc" ? /* @__PURE__ */ jsx(
+      BtcLinkForm,
+      {
+        authOrigin,
+        didOc,
+        onDone: onResolved,
+        onCancel: () => setStage("offer")
+      }
+    ) : /* @__PURE__ */ jsx(
+      EmailLinkForm,
+      {
+        authOrigin,
+        onDone: onResolved,
+        onCancel: () => setStage("offer")
+      }
+    );
+  }
+  return /* @__PURE__ */ jsxs("div", { style: panelStyle("accent"), "data-oc-linkprompt": method, children: [
+    /* @__PURE__ */ jsx(SectionLabel, { tone: "success", children: "\xA7 signed in" }),
+    /* @__PURE__ */ jsx("p", { style: bodyStyle, children: method === "btc" ? "You're in. Link a Bitcoin address now \u2014 a second way to sign in, and it unlocks your on-chain footprint. You prove it with one wallet signature, right here \u2014 no separate trip to your account page." : "You're in. Add your email now \u2014 a backup way to sign in if you ever lose your wallet. You prove it with a one-time code, right here \u2014 no separate trip to your account page." }),
+    /* @__PURE__ */ jsxs(FormButtons, { children: [
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          onClick: () => setStage("linking"),
+          style: primaryBtnStyle(false),
+          children: method === "btc" ? "link a Bitcoin address" : "link an email"
+        }
+      ),
+      /* @__PURE__ */ jsx("button", { type: "button", onClick: onResolved, style: ghostBtnStyle(false), children: "skip" })
+    ] })
+  ] });
+}
 function EmailLinkForm({
   authOrigin,
   onDone,
@@ -1572,7 +1614,7 @@ function OcSignIn({
   returnTo,
   onSuccess,
   resolveReturnTo,
-  linkPrompt,
+  linkPrompt = true,
   authOrigin = "https://ochk.io",
   initialPath = "wallet",
   paths,
@@ -1597,18 +1639,34 @@ function OcSignIn({
     [resolveReturnTo, safeReturn]
   );
   const handleSuccess = React3.useCallback(
-    async (account, token) => {
-      if (onSuccess) {
-        onSuccess(account, token);
+    async (account, token, via) => {
+      const proceed = () => {
+        if (onSuccess) onSuccess(account, token);
+        else void navigate(account);
+      };
+      if (!linkPrompt) {
+        proceed();
         return;
       }
-      if (linkPrompt) {
-        setSignedIn(account);
-        return;
+      try {
+        const meRes = await fetch(`${authOrigin}/api/auth/me`, {
+          credentials: "include",
+          headers: { Accept: "application/json" }
+        });
+        const me = meRes.ok ? await meRes.json() : null;
+        const acct = me?.account;
+        const didOc = acct?.did_oc;
+        const complementary = via === "email" ? "btc" : "email";
+        const alreadyLinked = complementary === "btc" ? Boolean(acct?.primary_btc) : Boolean(acct?.has_email);
+        if (didOc && !alreadyLinked) {
+          setSignedIn({ method: complementary, didOc, proceed });
+          return;
+        }
+      } catch {
       }
-      await navigate(account);
+      proceed();
     },
-    [onSuccess, linkPrompt, navigate]
+    [onSuccess, linkPrompt, navigate, authOrigin]
   );
   if (!walletEnabled && !emailEnabled) {
     return /* @__PURE__ */ jsxs(
@@ -1639,8 +1697,10 @@ function OcSignIn({
     return /* @__PURE__ */ jsx("div", { className, "data-oc-signin": "", children: /* @__PURE__ */ jsx(
       LinkPromptStep,
       {
+        method: signedIn.method,
+        didOc: signedIn.didOc,
         authOrigin,
-        onContinue: () => void navigate(signedIn)
+        onResolved: signedIn.proceed
       }
     ) });
   }
@@ -1679,32 +1739,19 @@ function OcSignIn({
         {
           authOrigin,
           audience,
-          onSuccess: handleSuccess
+          onSuccess: (a, t) => void handleSuccess(a, t, "wallet")
         }
       ),
-      showEmail && /* @__PURE__ */ jsx(EmailFlow, { authOrigin, onSuccess: handleSuccess })
+      showEmail && /* @__PURE__ */ jsx(
+        EmailFlow,
+        {
+          authOrigin,
+          onSuccess: (a, t) => void handleSuccess(a, t, "email")
+        }
+      )
     ] })
   ] });
 }
-function LinkPromptStep({
-  authOrigin,
-  onContinue
-}) {
-  return /* @__PURE__ */ jsxs("div", { "data-oc-signin-linkprompt": "", children: [
-    /* @__PURE__ */ jsx(FlowHeader, { label: "\xA7 signed in \xB7 add a backup", children: "You're in. Linking a second way to sign in \u2014 your email or your Bitcoin wallet \u2014 is also your recovery path: lose one, the other still gets you in. Optional; skip with continue." }),
-    /* @__PURE__ */ jsx(OcLinkedIdentities, { authOrigin }),
-    /* @__PURE__ */ jsx(
-      "button",
-      {
-        type: "button",
-        onClick: onContinue,
-        style: submitStyle(false),
-        "data-oc-signin-continue": "",
-        children: "continue \u2192"
-      }
-    )
-  ] });
-}
 function SigninTab({
   active,
   onClick,