@oxyhq/core 2.1.0 → 2.1.2

package/dist/cjs/CrossDomainAuth.js

@@ -25,6 +25,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CrossDomainAuth = void 0;
 exports.createCrossDomainAuth = createCrossDomainAuth;
+const loggerUtils_1 = require("./utils/loggerUtils");
 class CrossDomainAuth {
     constructor(oxyServices) {
         this.oxyServices = oxyServices;
@@ -98,7 +99,7 @@ class CrossDomainAuth {
                 return session;
             }
             catch (error) {
-                console.warn('[CrossDomainAuth] FedCM failed, trying popup...', error);
+                loggerUtils_1.logger.warn('FedCM failed, trying popup', { component: 'CrossDomainAuth', method: 'autoSignIn' }, error);
             }
         }
         // 2. Try popup (good UX, widely supported)
@@ -107,7 +108,7 @@ class CrossDomainAuth {
             return await this.signInWithPopup(options);
         }
         catch (error) {
-            console.warn('[CrossDomainAuth] Popup failed, falling back to redirect...', error);
+            loggerUtils_1.logger.warn('Popup failed, falling back to redirect', { component: 'CrossDomainAuth', method: 'autoSignIn' }, error);
             // Popup path failed — close the pre-opened popup before redirecting.
             this.closeOrphanPopup(options.popup);
         }
@@ -176,7 +177,7 @@ class CrossDomainAuth {
                 }
             }
             catch (error) {
-                console.warn('[CrossDomainAuth] FedCM silent sign-in failed:', error);
+                loggerUtils_1.logger.debug('FedCM silent sign-in did not resolve', { component: 'CrossDomainAuth', method: 'silentSignIn' }, error);
             }
         }
         // Fallback to iframe-based silent auth
@@ -184,7 +185,7 @@ class CrossDomainAuth {
             return await this.oxyServices.silentSignIn();
         }
         catch (error) {
-            console.warn('[CrossDomainAuth] Silent sign-in failed:', error);
+            loggerUtils_1.logger.debug('iframe silent sign-in did not resolve', { component: 'CrossDomainAuth', method: 'silentSignIn' }, error);
             return null;
         }
     }
@@ -269,7 +270,7 @@ class CrossDomainAuth {
                 }
             }
             catch (error) {
-                console.warn('[CrossDomainAuth] Stored session invalid:', error);
+                loggerUtils_1.logger.debug('stored session invalid', { component: 'CrossDomainAuth', method: 'initialize' }, error);
             }
         }
         // 3. Try silent sign-in (check for SSO session at auth.oxy.so)

package/dist/cjs/OxyServices.base.js

@@ -10,6 +10,7 @@ const jwt_decode_1 = require("jwt-decode");
 const errorUtils_1 = require("./utils/errorUtils");
 const HttpService_1 = require("./HttpService");
 const OxyServices_errors_1 = require("./OxyServices.errors");
+const fapiAutoDetect_1 = require("./utils/fapiAutoDetect");
 /**
  * Base class for OxyServices with core infrastructure
  */
@@ -21,10 +22,22 @@ class OxyServicesBase {
         if (!config || typeof config !== 'object') {
             throw new Error('OxyConfig is required');
         }
-        this.config = config;
-        this.cloudURL = config.cloudURL || 'https://cloud.oxy.so';
+        // Auto-detect the first-party IdP (`auth.<rp-apex>`) when the caller did not
+        // pin `authWebUrl` explicitly. This mirrors the provider-`baseURL` path in
+        // `@oxyhq/services` (OxyContext), so apps that construct their OWN
+        // `OxyServices` instance and pass it to `<OxyProvider oxyServices={...} />`
+        // get the same same-site IdP resolution. On web at `https://mention.earth`
+        // this yields `https://auth.mention.earth`; on native/SSR (no `window`)
+        // `autoDetectAuthWebUrl()` returns `undefined`, leaving the auth mixins'
+        // `DEFAULT_AUTH_URL` fallback in effect — native behavior is unchanged.
+        // An explicit `authWebUrl` always wins (we only fill it when absent).
+        const resolvedConfig = config.authWebUrl
+            ? config
+            : { ...config, authWebUrl: (0, fapiAutoDetect_1.autoDetectAuthWebUrl)() };
+        this.config = resolvedConfig;
+        this.cloudURL = resolvedConfig.cloudURL || 'https://cloud.oxy.so';
         // Initialize unified HTTP service (handles auth, caching, deduplication, queuing, retry)
-        this.httpService = new HttpService_1.HttpService(config);
+        this.httpService = new HttpService_1.HttpService(resolvedConfig);
     }
     // Test-only utility to reset tokens on this instance between jest tests
     // Note: tokens are now per-instance, so create new instances in tests for isolation