@oxyhq/core 12.11.1 → 13.2.0

package/dist/esm/utils/officialOrigins.js

@@ -1,6 +1,6 @@
 /**
- * Official first-party web origin allowlist — shared by hub-ticket issuance,
- * OAuth redirect validation, and cross-origin session restore.
+ * Official first-party web origin allowlist — shared by OAuth redirect
+ * validation and the server-side trusted-origin checks.
  */
 import { CENTRAL_IDP_APEX } from './authWebUrl.js';
 import { registrableApex } from './registrableApex.js';
@@ -17,30 +17,9 @@ const OFFICIAL_APEXES = new Set([
     'moovo.now',
     'mercaria.co',
 ]);
-export function buildIdpHubOrigin() {
-    return `https://auth.${CENTRAL_IDP_APEX}`;
-}
-/** Whether the current web origin is the central IdP hub (`auth.oxy.so`). */
-export function isIdpHubOrigin() {
-    if (typeof globalThis === 'undefined') {
-        return false;
-    }
-    const location = globalThis.location;
-    if (!location) {
-        return false;
-    }
-    try {
-        const { hostname } = new URL(location.href);
-        return hostname === `auth.${CENTRAL_IDP_APEX}`;
-    }
-    catch {
-        return false;
-    }
-}
 /**
  * Whether an origin is a loopback / local-dev origin (`localhost`, `127.0.0.1`,
- * or `[::1]` on any port, http or https). Local dev must never be bounced to a
- * hosted IdP for cross-origin session restore.
+ * or `[::1]` on any port, http or https).
  */
 export function isLoopbackOrigin(origin) {
     try {
@@ -76,49 +55,5 @@ export function isOfficialWebOrigin(origin) {
         return false;
     }
 }
-/** Normalize and validate a return URL against official origins. Returns origin only. */
-export function normalizeOfficialReturnOrigin(raw) {
-    try {
-        const parsed = new URL(raw);
-        if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
-            return null;
-        }
-        if (!isOfficialWebOrigin(parsed.origin)) {
-            return null;
-        }
-        return parsed.origin;
-    }
-    catch {
-        return null;
-    }
-}
-/** Validate a hub-sync return URL; returns the full normalized URL string. */
-export function parseHubSyncReturnUrl(raw) {
-    if (!raw) {
-        return null;
-    }
-    try {
-        const parsed = new URL(raw);
-        if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
-            return null;
-        }
-        if (!isOfficialWebOrigin(parsed.origin)) {
-            return null;
-        }
-        return parsed.toString();
-    }
-    catch {
-        return null;
-    }
-}
-/** Build auth.oxy.so/sync redirect URL with a one-time hub ticket. */
-export function buildHubSyncUrl(ticket, returnUrl) {
-    const url = new URL('/sync', buildIdpHubOrigin());
-    url.searchParams.set('ticket', ticket);
-    if (returnUrl) {
-        url.searchParams.set('return', returnUrl);
-    }
-    return url.toString();
-}
 /** @deprecated Use {@link isOfficialWebOrigin}. */
 export const isAllowedDeviceJoinOrigin = isOfficialWebOrigin;