@payez/next-mvp 4.0.30 → 4.0.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -243,7 +243,7 @@ async function exchangeOAuthForIdpTokens(sessionToken, provider = 'google') {
243
243
  headers: { 'Content-Type': 'application/json' },
244
244
  body: JSON.stringify({
245
245
  provider,
246
- provider_account_id: baUserId,
246
+ provider_account_id: email, // Cross-System Identity Standard v1.1: always use verified email, never opaque session IDs
247
247
  email,
248
248
  name,
249
249
  image,
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@payez/next-mvp",
3
- "version": "4.0.30",
3
+ "version": "4.0.31",
4
4
  "sideEffects": false,
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
@@ -236,7 +236,7 @@ export async function exchangeOAuthForIdpTokens(
236
236
  headers: { 'Content-Type': 'application/json' },
237
237
  body: JSON.stringify({
238
238
  provider,
239
- provider_account_id: baUserId,
239
+ provider_account_id: email, // Cross-System Identity Standard v1.1: always use verified email, never opaque session IDs
240
240
  email,
241
241
  name,
242
242
  image,