@orangecheck/auth-client 2.8.0 → 2.9.1

package/dist/index.js

@@ -771,6 +771,7 @@ var OcAddressInput = React3__namespace.forwardRef(
   }
 );
 var DEFAULT_AUTH_ORIGIN = "https://ochk.io";
+var LINK_PROMPT_DISMISS_KEY = "oc:linkprompt-dismissed";
 function OcLinkedIdentities({
   authOrigin = DEFAULT_AUTH_ORIGIN,
   className,
@@ -1086,6 +1087,55 @@ function AttestationLink() {
     )
   ] });
 }
+function LinkPromptStep({
+  method,
+  didOc,
+  authOrigin,
+  onResolved
+}) {
+  const [stage, setStage] = React3__namespace.useState("offer");
+  function decline() {
+    try {
+      window.localStorage.setItem(LINK_PROMPT_DISMISS_KEY, String(Date.now()));
+    } catch {
+    }
+    onResolved();
+  }
+  if (stage === "linking") {
+    return method === "btc" ? /* @__PURE__ */ jsxRuntime.jsx(
+      BtcLinkForm,
+      {
+        authOrigin,
+        didOc,
+        onDone: onResolved,
+        onCancel: () => setStage("offer")
+      }
+    ) : /* @__PURE__ */ jsxRuntime.jsx(
+      EmailLinkForm,
+      {
+        authOrigin,
+        onDone: onResolved,
+        onCancel: () => setStage("offer")
+      }
+    );
+  }
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: panelStyle("accent"), "data-oc-linkprompt": method, children: [
+    /* @__PURE__ */ jsxRuntime.jsx(SectionLabel, { tone: "success", children: "\xA7 you're signed in" }),
+    /* @__PURE__ */ jsxRuntime.jsx("p", { style: bodyStyle, children: method === "btc" ? "Optional \u2014 link a Bitcoin address and it becomes a second way to sign in, and unlocks your on-chain footprint. One wallet signature, right here. No pressure: you can always do this later from your account page." : "Optional \u2014 add your email as a backup way to sign in if you ever lose your wallet. One six-digit code, right here. No pressure: you can always do this later from your account page." }),
+    /* @__PURE__ */ jsxRuntime.jsxs(FormButtons, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx(
+        "button",
+        {
+          type: "button",
+          onClick: () => setStage("linking"),
+          style: primaryBtnStyle(false),
+          children: method === "btc" ? "link a Bitcoin address" : "link an email"
+        }
+      ),
+      /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", onClick: decline, style: ghostBtnStyle(false), children: "not now" })
+    ] })
+  ] });
+}
 function EmailLinkForm({
   authOrigin,
   onDone,
@@ -1594,7 +1644,7 @@ function OcSignIn({
   returnTo,
   onSuccess,
   resolveReturnTo,
-  linkPrompt,
+  linkPrompt = true,
   authOrigin = "https://ochk.io",
   initialPath = "wallet",
   paths,
@@ -1619,18 +1669,39 @@ function OcSignIn({
     [resolveReturnTo, safeReturn]
   );
   const handleSuccess = React3__namespace.useCallback(
-    async (account, token) => {
-      if (onSuccess) {
-        onSuccess(account, token);
-        return;
+    async (account, token, via) => {
+      const proceed = () => {
+        if (onSuccess) onSuccess(account, token);
+        else void navigate(account);
+      };
+      let declined = false;
+      try {
+        declined = Boolean(window.localStorage.getItem(LINK_PROMPT_DISMISS_KEY));
+      } catch {
       }
-      if (linkPrompt) {
-        setSignedIn(account);
+      if (!linkPrompt || declined) {
+        proceed();
         return;
       }
-      await navigate(account);
+      try {
+        const meRes = await fetch(`${authOrigin}/api/auth/me`, {
+          credentials: "include",
+          headers: { Accept: "application/json" }
+        });
+        const me = meRes.ok ? await meRes.json() : null;
+        const acct = me?.account;
+        const didOc = acct?.did_oc;
+        const complementary = via === "email" ? "btc" : "email";
+        const alreadyLinked = complementary === "btc" ? Boolean(acct?.primary_btc) : Boolean(acct?.has_email);
+        if (didOc && !alreadyLinked) {
+          setSignedIn({ method: complementary, didOc, proceed });
+          return;
+        }
+      } catch {
+      }
+      proceed();
     },
-    [onSuccess, linkPrompt, navigate]
+    [onSuccess, linkPrompt, navigate, authOrigin]
   );
   if (!walletEnabled && !emailEnabled) {
     return /* @__PURE__ */ jsxRuntime.jsxs(
@@ -1661,8 +1732,10 @@ function OcSignIn({
     return /* @__PURE__ */ jsxRuntime.jsx("div", { className, "data-oc-signin": "", children: /* @__PURE__ */ jsxRuntime.jsx(
       LinkPromptStep,
       {
+        method: signedIn.method,
+        didOc: signedIn.didOc,
         authOrigin,
-        onContinue: () => void navigate(signedIn)
+        onResolved: signedIn.proceed
       }
     ) });
   }
@@ -1701,32 +1774,19 @@ function OcSignIn({
         {
           authOrigin,
           audience,
-          onSuccess: handleSuccess
+          onSuccess: (a, t) => void handleSuccess(a, t, "wallet")
         }
       ),
-      showEmail && /* @__PURE__ */ jsxRuntime.jsx(EmailFlow, { authOrigin, onSuccess: handleSuccess })
+      showEmail && /* @__PURE__ */ jsxRuntime.jsx(
+        EmailFlow,
+        {
+          authOrigin,
+          onSuccess: (a, t) => void handleSuccess(a, t, "email")
+        }
+      )
     ] })
   ] });
 }
-function LinkPromptStep({
-  authOrigin,
-  onContinue
-}) {
-  return /* @__PURE__ */ jsxRuntime.jsxs("div", { "data-oc-signin-linkprompt": "", children: [
-    /* @__PURE__ */ jsxRuntime.jsx(FlowHeader, { label: "\xA7 signed in \xB7 add a backup", children: "You're in. Linking a second way to sign in \u2014 your email or your Bitcoin wallet \u2014 is also your recovery path: lose one, the other still gets you in. Optional; skip with continue." }),
-    /* @__PURE__ */ jsxRuntime.jsx(OcLinkedIdentities, { authOrigin }),
-    /* @__PURE__ */ jsxRuntime.jsx(
-      "button",
-      {
-        type: "button",
-        onClick: onContinue,
-        style: submitStyle(false),
-        "data-oc-signin-continue": "",
-        children: "continue \u2192"
-      }
-    )
-  ] });
-}
 function SigninTab({
   active,
   onClick,