@oxyhq/core 2.1.1 → 2.1.2

package/dist/cjs/OxyServices.base.js

@@ -10,6 +10,7 @@ const jwt_decode_1 = require("jwt-decode");
 const errorUtils_1 = require("./utils/errorUtils");
 const HttpService_1 = require("./HttpService");
 const OxyServices_errors_1 = require("./OxyServices.errors");
+const fapiAutoDetect_1 = require("./utils/fapiAutoDetect");
 /**
  * Base class for OxyServices with core infrastructure
  */
@@ -21,10 +22,22 @@ class OxyServicesBase {
         if (!config || typeof config !== 'object') {
             throw new Error('OxyConfig is required');
         }
-        this.config = config;
-        this.cloudURL = config.cloudURL || 'https://cloud.oxy.so';
+        // Auto-detect the first-party IdP (`auth.<rp-apex>`) when the caller did not
+        // pin `authWebUrl` explicitly. This mirrors the provider-`baseURL` path in
+        // `@oxyhq/services` (OxyContext), so apps that construct their OWN
+        // `OxyServices` instance and pass it to `<OxyProvider oxyServices={...} />`
+        // get the same same-site IdP resolution. On web at `https://mention.earth`
+        // this yields `https://auth.mention.earth`; on native/SSR (no `window`)
+        // `autoDetectAuthWebUrl()` returns `undefined`, leaving the auth mixins'
+        // `DEFAULT_AUTH_URL` fallback in effect — native behavior is unchanged.
+        // An explicit `authWebUrl` always wins (we only fill it when absent).
+        const resolvedConfig = config.authWebUrl
+            ? config
+            : { ...config, authWebUrl: (0, fapiAutoDetect_1.autoDetectAuthWebUrl)() };
+        this.config = resolvedConfig;
+        this.cloudURL = resolvedConfig.cloudURL || 'https://cloud.oxy.so';
         // Initialize unified HTTP service (handles auth, caching, deduplication, queuing, retry)
-        this.httpService = new HttpService_1.HttpService(config);
+        this.httpService = new HttpService_1.HttpService(resolvedConfig);
     }
     // Test-only utility to reset tokens on this instance between jest tests
     // Note: tokens are now per-instance, so create new instances in tests for isolation