@passkeyme/auth 2.0.12 → 2.1.0

package/dist/index.js

@@ -1018,10 +1018,7 @@ class PasskeymeAuth {
     redirectToOAuth(provider, redirectUri) {
         const finalRedirectUri = redirectUri || this.config.redirectUri;
         // Build direct OAuth initiation URL - use apiUrl for backend API endpoints
-        const apiBaseUrl = this.config.apiUrl ||
-            (typeof window !== "undefined" && window.location.hostname !== "localhost"
-                ? "https://api.passkeyme.com"
-                : "http://localhost:8000");
+        const apiBaseUrl = this.config.apiUrl || "https://api.passkeyme.com";
         const params = new URLSearchParams({
             redirect_uri: finalRedirectUri,
         });
@@ -1052,6 +1049,25 @@ class PasskeymeAuth {
             });
         }
     }
+    /**
+     * Internal helper: Redirect to login in hosted mode, or throw error in direct mode
+     */
+    redirectOrThrow(userMessage, technicalMessage) {
+        if (this.config.mode === "hosted") {
+            this.redirectToLogin();
+            return { method: "redirect" };
+        }
+        else {
+            throw new PasskeymeError({
+                code: exports.PasskeymeErrorCode.PASSKEY_NOT_SUPPORTED,
+                message: technicalMessage,
+                userMessage: userMessage,
+                recoverable: true,
+                retryable: false,
+                suggestedAction: "Use OAuth sign-in instead",
+            });
+        }
+    }
     /**
      * Handle authentication callback from hosted auth page
      */
@@ -1518,7 +1534,7 @@ class PasskeymeAuth {
      * 1. Check app config for discoverable credentials support
      * 2. If supported: attempt discoverable credentials first (no username)
      * 3. If not supported or fails: use stored username or prompt for username
-     * 4. Fallback to hosted auth if all passkey attempts fail
+     * 4. Fallback to hosted auth if all passkey attempts fail (unless mode is 'direct')
      */
     async smartLogin(username, apiKey) {
         logger.debug("[DEBUG] smartLogin called with:", {
@@ -1533,8 +1549,9 @@ class PasskeymeAuth {
         logger.debug("[DEBUG] Passkey support check:", isSupported);
         if (!isSupported || !effectiveApiKey) {
             logger.debug("Conditions not met, redirecting to hosted auth. isSupported:", isSupported, "hasApiKey:", !!effectiveApiKey);
-            this.redirectToLogin();
-            return { method: "redirect" };
+            return this.redirectOrThrow(isSupported
+                ? "API key is required for passkey authentication."
+                : "Your device doesn't support passkeys.", "Passkey authentication not available");
         }
         try {
             // Get app configuration to check discoverable credentials support
@@ -1557,8 +1574,7 @@ class PasskeymeAuth {
             // If passkeys are disabled at the app level, fallback to hosted auth
             if (!appConfig.passkeyEnabled) {
                 logger.debug("Passkeys disabled for this app, falling back to hosted auth");
-                this.redirectToLogin();
-                return { method: "redirect" };
+                return this.redirectOrThrow("Passkey authentication is not available for this app.", "Passkeys are disabled for this application");
             }
             let authUsername = username;
             // Smart username resolution following industry best practices
@@ -1580,15 +1596,13 @@ class PasskeymeAuth {
                 const storageKey = `last_username_${this.config.appId}`;
                 logger.debug("Looking for stored username with key:", storageKey);
                 const storedUsername = await this.storage.getItem(storageKey);
-                logger.debug("Found stored username:", storedUsername);
                 if (storedUsername) {
                     logger.debug("Using stored username for targeted authentication:", storedUsername);
                     authUsername = storedUsername;
                 }
                 else {
                     logger.debug("No username available and discoverable auth failed/unsupported, falling back to hosted auth");
-                    this.redirectToLogin();
-                    return { method: "redirect" };
+                    return this.redirectOrThrow("Unable to authenticate with passkey. Please sign in with another method.", "No username available for passkey authentication");
                 }
             }
             // Attempt passkey authentication with username
@@ -1607,9 +1621,15 @@ class PasskeymeAuth {
             if (this.config.debug) {
                 logger.error("[PasskeymeAuth] Passkey authentication error details:", error);
             }
-            // Fallback to hosted auth for any passkey failures
-            this.redirectToLogin();
-            return { method: "redirect" };
+            // Fallback to hosted auth for any passkey failures (unless mode is 'direct')
+            // In direct mode, re-throw the original error for the caller to handle
+            if (this.config.mode === "hosted") {
+                this.redirectToLogin();
+                return { method: "redirect" };
+            }
+            else {
+                throw error;
+            }
         }
     }
     /**