@oxyhq/auth 1.0.0 → 1.1.0

package/dist/cjs/WebOxyProvider.js

@@ -45,30 +45,21 @@ function WebOxyProvider({ children, baseURL, authWebUrl, onAuthStateChange, onEr
     const [isLoading, setIsLoading] = (0, react_1.useState)(!skipAutoCheck);
     const [error, setError] = (0, react_1.useState)(null);
     const [activeSessionId, setActiveSessionId] = (0, react_1.useState)(null);
-    const [sessions, setSessions] = (0, react_1.useState)([]);
+    // Sessions array kept as constant empty for API compatibility.
+    // Multi-session management is handled by @oxyhq/services (OxyContext) for RN apps.
+    const sessions = [];
     const isAuthenticated = !!user;
     const handleAuthSuccess = (0, react_1.useCallback)(async (session, method = 'credentials') => {
         await authManager.handleAuthSuccess(session, method);
-        // Set active session
         if (session.sessionId) {
             setActiveSessionId(session.sessionId);
         }
-        // Fetch full user profile
-        try {
-            const fullUser = await oxyServices.getCurrentUser();
-            if (fullUser) {
-                setUser(fullUser);
-            }
-            else {
-                setUser(session.user);
-            }
-        }
-        catch {
-            setUser(session.user);
-        }
+        // Use the session user directly to avoid an extra API round-trip.
+        // The session already contains user data from the auth exchange.
+        setUser(session.user);
         setError(null);
         setIsLoading(false);
-    }, [authManager, oxyServices]);
+    }, [authManager]);
     const handleAuthError = (0, react_1.useCallback)((err) => {
         const errorMessage = err instanceof Error ? err.message : 'Authentication failed';
         setError(errorMessage);
@@ -119,8 +110,18 @@ function WebOxyProvider({ children, baseURL, authWebUrl, onAuthStateChange, onEr
                     setIsLoading(false);
             }
         };
-        initAuth();
-        return () => { mounted = false; };
+        // Safety timeout: if all auth methods stall, stop loading
+        const INIT_TIMEOUT_MS = 15000;
+        const timeoutId = setTimeout(() => {
+            if (mounted) {
+                setIsLoading(false);
+            }
+        }, INIT_TIMEOUT_MS);
+        initAuth().finally(() => clearTimeout(timeoutId));
+        return () => {
+            mounted = false;
+            clearTimeout(timeoutId);
+        };
     }, [oxyServices, crossDomainAuth, authManager, skipAutoCheck, handleAuthSuccess]);
     (0, react_1.useEffect)(() => {
         onAuthStateChange?.(user);
@@ -184,7 +185,6 @@ function WebOxyProvider({ children, baseURL, authWebUrl, onAuthStateChange, onEr
             await authManager.signOut();
             setUser(null);
             setActiveSessionId(null);
-            setSessions([]);
         }
         catch (err) {
             const errorMessage = err instanceof Error ? err.message : 'Sign out failed';
@@ -210,7 +210,6 @@ function WebOxyProvider({ children, baseURL, authWebUrl, onAuthStateChange, onEr
         await authManager.signOut();
         setUser(null);
         setActiveSessionId(null);
-        setSessions([]);
     }, [authManager]);
     (0, react_1.useEffect)(() => {
         return () => { authManager.destroy(); };

package/dist/cjs/hooks/useWebSSO.js

@@ -57,7 +57,7 @@ function useWebSSO({ oxyServices, onSessionFound, onSSOUnavailable, onError, ena
     const isCheckingRef = (0, react_1.useRef)(false);
     const hasCheckedRef = (0, react_1.useRef)(false);
     // Check FedCM support once
-    const fedCMSupported = isWebBrowser() && oxyServices.isFedCMSupported?.();
+    const fedCMSupported = isWebBrowser() && oxyServices.isFedCMSupported();
     const checkSSO = (0, react_1.useCallback)(async () => {
         if (!isWebBrowser() || isCheckingRef.current) {
             return null;
@@ -74,7 +74,7 @@ function useWebSSO({ oxyServices, onSessionFound, onSSOUnavailable, onError, ena
         }
         isCheckingRef.current = true;
         try {
-            const session = await oxyServices.silentSignInWithFedCM?.();
+            const session = await oxyServices.silentSignInWithFedCM();
             if (session) {
                 await onSessionFound(session);
                 return session;
@@ -106,7 +106,7 @@ function useWebSSO({ oxyServices, onSessionFound, onSSOUnavailable, onError, ena
         }
         isCheckingRef.current = true;
         try {
-            const session = await oxyServices.signInWithFedCM?.();
+            const session = await oxyServices.signInWithFedCM();
             if (session) {
                 await onSessionFound(session);
                 return session;

package/dist/cjs/utils/storageHelpers.js

@@ -106,7 +106,9 @@ const createNativeStorage = async () => {
         return asyncStorageInstance;
     }
     try {
-        const asyncStorageModule = await Promise.resolve().then(() => __importStar(require('@react-native-async-storage/async-storage')));
+        // Variable indirection prevents bundlers (Vite, webpack) from statically resolving this
+        const moduleName = '@react-native-async-storage/async-storage';
+        const asyncStorageModule = await Promise.resolve(`${moduleName}`).then(s => __importStar(require(s)));
         asyncStorageInstance = asyncStorageModule.default;
         return asyncStorageInstance;
     }

package/dist/esm/WebOxyProvider.js

@@ -40,30 +40,21 @@ export function WebOxyProvider({ children, baseURL, authWebUrl, onAuthStateChang
     const [isLoading, setIsLoading] = useState(!skipAutoCheck);
     const [error, setError] = useState(null);
     const [activeSessionId, setActiveSessionId] = useState(null);
-    const [sessions, setSessions] = useState([]);
+    // Sessions array kept as constant empty for API compatibility.
+    // Multi-session management is handled by @oxyhq/services (OxyContext) for RN apps.
+    const sessions = [];
     const isAuthenticated = !!user;
     const handleAuthSuccess = useCallback(async (session, method = 'credentials') => {
         await authManager.handleAuthSuccess(session, method);
-        // Set active session
         if (session.sessionId) {
             setActiveSessionId(session.sessionId);
         }
-        // Fetch full user profile
-        try {
-            const fullUser = await oxyServices.getCurrentUser();
-            if (fullUser) {
-                setUser(fullUser);
-            }
-            else {
-                setUser(session.user);
-            }
-        }
-        catch {
-            setUser(session.user);
-        }
+        // Use the session user directly to avoid an extra API round-trip.
+        // The session already contains user data from the auth exchange.
+        setUser(session.user);
         setError(null);
         setIsLoading(false);
-    }, [authManager, oxyServices]);
+    }, [authManager]);
     const handleAuthError = useCallback((err) => {
         const errorMessage = err instanceof Error ? err.message : 'Authentication failed';
         setError(errorMessage);
@@ -114,8 +105,18 @@ export function WebOxyProvider({ children, baseURL, authWebUrl, onAuthStateChang
                     setIsLoading(false);
             }
         };
-        initAuth();
-        return () => { mounted = false; };
+        // Safety timeout: if all auth methods stall, stop loading
+        const INIT_TIMEOUT_MS = 15000;
+        const timeoutId = setTimeout(() => {
+            if (mounted) {
+                setIsLoading(false);
+            }
+        }, INIT_TIMEOUT_MS);
+        initAuth().finally(() => clearTimeout(timeoutId));
+        return () => {
+            mounted = false;
+            clearTimeout(timeoutId);
+        };
     }, [oxyServices, crossDomainAuth, authManager, skipAutoCheck, handleAuthSuccess]);
     useEffect(() => {
         onAuthStateChange?.(user);
@@ -179,7 +180,6 @@ export function WebOxyProvider({ children, baseURL, authWebUrl, onAuthStateChang
             await authManager.signOut();
             setUser(null);
             setActiveSessionId(null);
-            setSessions([]);
         }
         catch (err) {
             const errorMessage = err instanceof Error ? err.message : 'Sign out failed';
@@ -205,7 +205,6 @@ export function WebOxyProvider({ children, baseURL, authWebUrl, onAuthStateChang
         await authManager.signOut();
         setUser(null);
         setActiveSessionId(null);
-        setSessions([]);
     }, [authManager]);
     useEffect(() => {
         return () => { authManager.destroy(); };

package/dist/esm/hooks/useWebSSO.js

@@ -53,7 +53,7 @@ export function useWebSSO({ oxyServices, onSessionFound, onSSOUnavailable, onErr
     const isCheckingRef = useRef(false);
     const hasCheckedRef = useRef(false);
     // Check FedCM support once
-    const fedCMSupported = isWebBrowser() && oxyServices.isFedCMSupported?.();
+    const fedCMSupported = isWebBrowser() && oxyServices.isFedCMSupported();
     const checkSSO = useCallback(async () => {
         if (!isWebBrowser() || isCheckingRef.current) {
             return null;
@@ -70,7 +70,7 @@ export function useWebSSO({ oxyServices, onSessionFound, onSSOUnavailable, onErr
         }
         isCheckingRef.current = true;
         try {
-            const session = await oxyServices.silentSignInWithFedCM?.();
+            const session = await oxyServices.silentSignInWithFedCM();
             if (session) {
                 await onSessionFound(session);
                 return session;
@@ -102,7 +102,7 @@ export function useWebSSO({ oxyServices, onSessionFound, onSSOUnavailable, onErr
         }
         isCheckingRef.current = true;
         try {
-            const session = await oxyServices.signInWithFedCM?.();
+            const session = await oxyServices.signInWithFedCM();
             if (session) {
                 await onSessionFound(session);
                 return session;

package/dist/esm/utils/storageHelpers.js

@@ -70,7 +70,9 @@ const createNativeStorage = async () => {
         return asyncStorageInstance;
     }
     try {
-        const asyncStorageModule = await import('@react-native-async-storage/async-storage');
+        // Variable indirection prevents bundlers (Vite, webpack) from statically resolving this
+        const moduleName = '@react-native-async-storage/async-storage';
+        const asyncStorageModule = await import(moduleName);
         asyncStorageInstance = asyncStorageModule.default;
         return asyncStorageInstance;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/auth",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "OxyHQ Web Authentication SDK — headless auth with React hooks for Next.js, Vite, and web apps",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",

package/src/WebOxyProvider.tsx

@@ -105,7 +105,10 @@ export function WebOxyProvider({
   const [isLoading, setIsLoading] = useState(!skipAutoCheck);
   const [error, setError] = useState<string | null>(null);
   const [activeSessionId, setActiveSessionId] = useState<string | null>(null);
-  const [sessions, setSessions] = useState<ClientSession[]>([]);
+
+  // Sessions array kept as constant empty for API compatibility.
+  // Multi-session management is handled by @oxyhq/services (OxyContext) for RN apps.
+  const sessions: ClientSession[] = [];
 
   const isAuthenticated = !!user;
 
@@ -115,26 +118,16 @@ export function WebOxyProvider({
   ) => {
     await authManager.handleAuthSuccess(session, method);
 
-    // Set active session
     if (session.sessionId) {
       setActiveSessionId(session.sessionId);
     }
 
-    // Fetch full user profile
-    try {
-      const fullUser = await oxyServices.getCurrentUser();
-      if (fullUser) {
-        setUser(fullUser);
-      } else {
-        setUser(session.user as User);
-      }
-    } catch {
-      setUser(session.user as User);
-    }
-
+    // Use the session user directly to avoid an extra API round-trip.
+    // The session already contains user data from the auth exchange.
+    setUser(session.user as User);
     setError(null);
     setIsLoading(false);
-  }, [authManager, oxyServices]);
+  }, [authManager]);
 
   const handleAuthError = useCallback((err: unknown) => {
     const errorMessage = err instanceof Error ? err.message : 'Authentication failed';
@@ -187,8 +180,20 @@ export function WebOxyProvider({
       }
     };
 
-    initAuth();
-    return () => { mounted = false; };
+    // Safety timeout: if all auth methods stall, stop loading
+    const INIT_TIMEOUT_MS = 15_000;
+    const timeoutId = setTimeout(() => {
+      if (mounted) {
+        setIsLoading(false);
+      }
+    }, INIT_TIMEOUT_MS);
+
+    initAuth().finally(() => clearTimeout(timeoutId));
+
+    return () => {
+      mounted = false;
+      clearTimeout(timeoutId);
+    };
   }, [oxyServices, crossDomainAuth, authManager, skipAutoCheck, handleAuthSuccess]);
 
   useEffect(() => {
@@ -258,7 +263,6 @@ export function WebOxyProvider({
       await authManager.signOut();
       setUser(null);
       setActiveSessionId(null);
-      setSessions([]);
     } catch (err) {
       const errorMessage = err instanceof Error ? err.message : 'Sign out failed';
       setError(errorMessage);
@@ -283,7 +287,6 @@ export function WebOxyProvider({
     await authManager.signOut();
     setUser(null);
     setActiveSessionId(null);
-    setSessions([]);
   }, [authManager]);
 
   useEffect(() => {

package/src/hooks/useWebSSO.ts

@@ -84,7 +84,7 @@ export function useWebSSO({
   const hasCheckedRef = useRef(false);
 
   // Check FedCM support once
-  const fedCMSupported = isWebBrowser() && (oxyServices as any).isFedCMSupported?.();
+  const fedCMSupported = isWebBrowser() && oxyServices.isFedCMSupported();
 
   const checkSSO = useCallback(async (): Promise<SessionLoginResponse | null> => {
     if (!isWebBrowser() || isCheckingRef.current) {
@@ -106,7 +106,7 @@ export function useWebSSO({
     isCheckingRef.current = true;
 
     try {
-      const session = await (oxyServices as any).silentSignInWithFedCM?.();
+      const session = await oxyServices.silentSignInWithFedCM();
 
       if (session) {
         await onSessionFound(session);
@@ -142,7 +142,7 @@ export function useWebSSO({
     isCheckingRef.current = true;
 
     try {
-      const session = await (oxyServices as any).signInWithFedCM?.();
+      const session = await oxyServices.signInWithFedCM();
 
       if (session) {
         await onSessionFound(session);

package/src/utils/storageHelpers.ts

@@ -85,7 +85,9 @@ const createNativeStorage = async (): Promise<StorageInterface> => {
   }
 
   try {
-    const asyncStorageModule = await import('@react-native-async-storage/async-storage');
+    // Variable indirection prevents bundlers (Vite, webpack) from statically resolving this
+    const moduleName = '@react-native-async-storage/async-storage';
+    const asyncStorageModule = await import(moduleName);
     asyncStorageInstance = asyncStorageModule.default as unknown as StorageInterface;
     return asyncStorageInstance;
   } catch (error) {