@oxyhq/core 2.1.0 → 2.1.2

package/dist/esm/CrossDomainAuth.js

@@ -21,6 +21,7 @@
  * const session = await auth.signInWithPopup();
  * ```
  */
+import { logger } from './utils/loggerUtils.js';
 export class CrossDomainAuth {
     constructor(oxyServices) {
         this.oxyServices = oxyServices;
@@ -94,7 +95,7 @@ export class CrossDomainAuth {
                 return session;
             }
             catch (error) {
-                console.warn('[CrossDomainAuth] FedCM failed, trying popup...', error);
+                logger.warn('FedCM failed, trying popup', { component: 'CrossDomainAuth', method: 'autoSignIn' }, error);
             }
         }
         // 2. Try popup (good UX, widely supported)
@@ -103,7 +104,7 @@ export class CrossDomainAuth {
             return await this.signInWithPopup(options);
         }
         catch (error) {
-            console.warn('[CrossDomainAuth] Popup failed, falling back to redirect...', error);
+            logger.warn('Popup failed, falling back to redirect', { component: 'CrossDomainAuth', method: 'autoSignIn' }, error);
             // Popup path failed — close the pre-opened popup before redirecting.
             this.closeOrphanPopup(options.popup);
         }
@@ -172,7 +173,7 @@ export class CrossDomainAuth {
                 }
             }
             catch (error) {
-                console.warn('[CrossDomainAuth] FedCM silent sign-in failed:', error);
+                logger.debug('FedCM silent sign-in did not resolve', { component: 'CrossDomainAuth', method: 'silentSignIn' }, error);
             }
         }
         // Fallback to iframe-based silent auth
@@ -180,7 +181,7 @@ export class CrossDomainAuth {
             return await this.oxyServices.silentSignIn();
         }
         catch (error) {
-            console.warn('[CrossDomainAuth] Silent sign-in failed:', error);
+            logger.debug('iframe silent sign-in did not resolve', { component: 'CrossDomainAuth', method: 'silentSignIn' }, error);
             return null;
         }
     }
@@ -265,7 +266,7 @@ export class CrossDomainAuth {
                 }
             }
             catch (error) {
-                console.warn('[CrossDomainAuth] Stored session invalid:', error);
+                logger.debug('stored session invalid', { component: 'CrossDomainAuth', method: 'initialize' }, error);
             }
         }
         // 3. Try silent sign-in (check for SSO session at auth.oxy.so)

package/dist/esm/OxyServices.base.js

@@ -7,6 +7,7 @@ import { jwtDecode } from 'jwt-decode';
 import { handleHttpError } from './utils/errorUtils.js';
 import { HttpService } from './HttpService.js';
 import { OxyAuthenticationError, OxyAuthenticationTimeoutError } from './OxyServices.errors.js';
+import { autoDetectAuthWebUrl } from './utils/fapiAutoDetect.js';
 /**
  * Base class for OxyServices with core infrastructure
  */
@@ -18,10 +19,22 @@ export class OxyServicesBase {
         if (!config || typeof config !== 'object') {
             throw new Error('OxyConfig is required');
         }
-        this.config = config;
-        this.cloudURL = config.cloudURL || 'https://cloud.oxy.so';
+        // Auto-detect the first-party IdP (`auth.<rp-apex>`) when the caller did not
+        // pin `authWebUrl` explicitly. This mirrors the provider-`baseURL` path in
+        // `@oxyhq/services` (OxyContext), so apps that construct their OWN
+        // `OxyServices` instance and pass it to `<OxyProvider oxyServices={...} />`
+        // get the same same-site IdP resolution. On web at `https://mention.earth`
+        // this yields `https://auth.mention.earth`; on native/SSR (no `window`)
+        // `autoDetectAuthWebUrl()` returns `undefined`, leaving the auth mixins'
+        // `DEFAULT_AUTH_URL` fallback in effect — native behavior is unchanged.
+        // An explicit `authWebUrl` always wins (we only fill it when absent).
+        const resolvedConfig = config.authWebUrl
+            ? config
+            : { ...config, authWebUrl: autoDetectAuthWebUrl() };
+        this.config = resolvedConfig;
+        this.cloudURL = resolvedConfig.cloudURL || 'https://cloud.oxy.so';
         // Initialize unified HTTP service (handles auth, caching, deduplication, queuing, retry)
-        this.httpService = new HttpService(config);
+        this.httpService = new HttpService(resolvedConfig);
     }
     // Test-only utility to reset tokens on this instance between jest tests
     // Note: tokens are now per-instance, so create new instances in tests for isolation