@oxyhq/core 3.17.1 → 3.18.1

package/dist/esm/mixins/OxyServices.auth.js

@@ -689,7 +689,9 @@ export function OxyServicesAuthMixin(Base) {
                     continue;
                 }
                 const userId = e.user.id ?? e.user._id;
-                if (!userId || !e.user.username || !e.user.name?.displayName) {
+                // `name.displayName` is optional on the contract — do NOT drop no-name
+                // accounts. Only an absent userId or username makes the entry unusable.
+                if (!userId || !e.user.username) {
                     continue;
                 }
                 if (typeof e.authuser !== 'number') {
@@ -703,7 +705,9 @@ export function OxyServicesAuthMixin(Base) {
                     user: {
                         id: userId,
                         username: e.user.username,
-                        name: e.user.name,
+                        // `name.displayName` is optional; carry whatever structured name the
+                        // server sent (possibly an empty object) and let consumers fall back.
+                        name: e.user.name ?? {},
                         avatar: e.user.avatar ?? null,
                         email: e.user.email,
                         color: e.user.color ?? null,

package/dist/esm/mixins/OxyServices.sso.js

@@ -138,13 +138,16 @@ export function OxyServicesSsoMixin(Base) {
                 throw this.handleError(new Error('SSO exchange returned no sessionId'));
             }
             const userId = payload.user?.id ?? payload.user?._id;
-            if (!userId || typeof payload.user?.username !== 'string' || typeof payload.user.name?.displayName !== 'string') {
+            if (!userId || typeof payload.user?.username !== 'string') {
                 throw this.handleError(new Error('SSO exchange returned an invalid user'));
             }
             const user = {
                 id: userId,
                 username: payload.user.username,
-                name: payload.user.name,
+                // `name.displayName` is optional on the contract. A no-name user is
+                // valid; carry whatever structured name the server sent (possibly an
+                // empty object) and let consumers fall back to a handle.
+                name: payload.user.name ?? {},
                 avatar: payload.user.avatar,
             };
             // Plant the access token exactly like exchangeIdTokenForSession does.