@oxyhq/core 3.8.2 → 3.9.1

package/dist/types/mixins/OxyServices.popup.d.ts

@@ -1,170 +0,0 @@
-import type { OxyServicesBase } from "../OxyServices.base";
-import type { SessionLoginResponse } from "../models/session";
-export interface PopupAuthOptions {
-    /** Legacy option. Popup auth is removed; dimensions are ignored. */
-    width?: number;
-    /** Legacy option. Popup auth is removed; dimensions are ignored. */
-    height?: number;
-    /** Legacy option. Popup auth is removed; timeout is ignored. */
-    timeout?: number;
-    /** Legacy option. Signup also fails closed. */
-    mode?: "login" | "signup";
-    /**
-     * A legacy popup window handle. `signInWithPopup` closes it and throws
-     * because popup auth has been removed.
-     */
-    popup?: Window | null;
-}
-export interface SilentAuthOptions {
-    timeout?: number;
-    /**
-     * Override the auth-web (IdP) origin used for the silent iframe, instead of
-     * the instance's configured `resolveAuthUrl()`.
-     *
-     * Why this exists: an instance configured with the CENTRAL IdP
-     * (`authWebUrl=https://auth.oxy.so`, for the opaque-code `/sso` bounce and
-     * FedCM) cannot read the DURABLE per-apex `fedcm_session` cookie via the
-     * central host — that cookie is first-party only on `auth.<rp-apex>` (e.g.
-     * `auth.mention.earth`). The cross-domain reload-restore path must point the
-     * `/auth/silent` iframe at the PER-APEX host so the cookie is same-site to
-     * the RP page (first-party under Safari ITP / Firefox TCP) and the restore
-     * is NOT a top-level navigation (no flash, works in a backgrounded tab).
-     *
-     * When provided this value is used BOTH for the iframe `src` AND for the
-     * `postMessage` origin validation in {@link waitForIframeAuth}, so the
-     * security check still matches the exact origin the iframe was loaded from.
-     * Must be an absolute origin (`https://auth.<apex>`); ignored if empty.
-     */
-    authWebUrlOverride?: string;
-}
-/**
- * Cross-domain browser auth helpers.
- *
- * Popup sign-in is intentionally fail-closed in the clean session model because
- * the historical implementation required bearer-token callback URLs. FedCM,
- * redirect SSO, and silent iframe SSO are the supported browser paths.
- */
-export declare function OxyServicesPopupAuthMixin<T extends typeof OxyServicesBase>(Base: T): {
-    new (...args: any[]): {
-        /** Resolve auth URL from config or static default (method, not getter — getters break in TS mixins) */
-        resolveAuthUrl(): string;
-        /**
-         * Removed popup sign-in. Closes a caller-supplied popup handle and throws.
-         */
-        signInWithPopup(options?: PopupAuthOptions): Promise<SessionLoginResponse>;
-        /**
-         * Removed popup signup. Closes a caller-supplied popup handle and throws.
-         */
-        signUpWithPopup(options?: PopupAuthOptions): Promise<SessionLoginResponse>;
-        /**
-         * Silent sign-in using hidden iframe
-         *
-         * Attempts to automatically re-authenticate the user without any UI.
-         * This is what enables seamless SSO across all Oxy domains.
-         *
-         * How it works:
-         * 1. Creates hidden iframe pointing to auth.oxy.so/silent-auth
-         * 2. If user has valid session at auth.oxy.so, it exchanges an opaque SSO code
-         * 3. If not, iframe responds with null (no error thrown)
-         *
-         * This should be called on app startup to check for existing sessions.
-         *
-         * @param options - Silent auth options
-         * @returns Session if user is signed in, null otherwise
-         *
-         * @example
-         * ```typescript
-         * useEffect(() => {
-         *   const checkAuth = async () => {
-         *     const session = await oxyServices.silentSignIn();
-         *     if (session) {
-         *       setUser(session.user);
-         *     }
-         *   };
-         *   checkAuth();
-         * }, []);
-         * ```
-         */
-        silentSignIn(options?: SilentAuthOptions): Promise<SessionLoginResponse | null>;
-        /**
-         * Open a blank, centered popup window SYNCHRONOUSLY.
-         *
-         * Kept only so legacy callers can pass a handle to the removed popup method,
-         * which closes it before throwing. New auth code should use FedCM or redirect.
-         */
-        openBlankPopup(width?: number, height?: number): Window | null;
-        /**
-         * Open a centered popup window
-         *
-         * @private
-         */
-        openCenteredPopup(url: string, title: string, width: number, height: number): Window | null;
-        /**
-         * Wait for authentication response from iframe
-         *
-         * @private
-         */
-        waitForIframeAuth(iframe: HTMLIFrameElement, timeout: number, expectedOrigin: string): Promise<SessionLoginResponse | null>;
-        /**
-         * Generate nonce for replay attack prevention
-         *
-         * @private
-         */
-        generateNonce(): string;
-        httpService: import("../HttpService").HttpService;
-        cloudURL: string;
-        config: import("../OxyServices.base").OxyConfig;
-        __resetTokensForTests(): void;
-        makeRequest<T_1>(method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE", url: string, data?: any, options?: import("../HttpService").RequestOptions): Promise<T_1>;
-        getBaseURL(): string;
-        getSessionBaseUrl(): string;
-        getClient(): import("../HttpService").HttpService;
-        getMetrics(): {
-            totalRequests: number;
-            successfulRequests: number;
-            failedRequests: number;
-            cacheHits: number;
-            cacheMisses: number;
-            averageResponseTime: number;
-        };
-        clearCache(): void;
-        clearCacheEntry(key: string): void;
-        clearCacheByPrefix(prefix: string): number;
-        getCacheStats(): {
-            size: number;
-            hits: number;
-            misses: number;
-            hitRate: number;
-        };
-        getCloudURL(): string;
-        setTokens(accessToken: string, refreshToken?: string): void;
-        clearTokens(): void;
-        onTokensChanged(listener: (accessToken: string | null) => void): () => void;
-        _cachedUserId: string | null | undefined;
-        _cachedAccessToken: string | null;
-        getCurrentUserId(): string | null;
-        hasValidToken(): boolean;
-        getAccessToken(): string | null;
-        setActingAs(userId: string | null): void;
-        getActingAs(): string | null;
-        waitForAuth(timeoutMs?: number): Promise<boolean>;
-        withAuthRetry<T_1>(operation: () => Promise<T_1>, operationName: string, options?: {
-            maxRetries?: number;
-            retryDelay?: number;
-            authTimeoutMs?: number;
-        }): Promise<T_1>;
-        validate(): Promise<boolean>;
-        handleError(error: unknown): Error;
-        healthCheck(): Promise<{
-            status: string;
-            users?: number;
-            timestamp?: string;
-            [key: string]: any;
-        }>;
-    };
-    readonly DEFAULT_AUTH_URL: "https://auth.oxy.so";
-    readonly POPUP_WIDTH: 500;
-    readonly POPUP_HEIGHT: 700;
-    readonly SILENT_TIMEOUT: 5000;
-} & T;
-export { OxyServicesPopupAuthMixin as PopupAuthMixin };