@phantom/embedded-provider-core 1.0.3 → 1.0.5

package/dist/index.mjs

@@ -1,6 +1,6 @@
 // src/embedded-provider.ts
 import { base64urlEncode, stringToBase64url } from "@phantom/base64url";
-import { AddressType, PhantomClient, SpendingLimitError } from "@phantom/client";
+import { AddressType, PhantomClient, SpendingLimitError, isAuthenticationError } from "@phantom/client";
 import {
   parseSignMessageResponse,
   parseTransactionResponse,
@@ -488,7 +488,8 @@ var EmbeddedProvider = class {
     });
     if (session.status !== "completed") {
       const urlSessionId = this.urlParamsAccessor.getParam("session_id");
-      if (session.status === "pending" && !urlSessionId) {
+      const urlCode = this.urlParamsAccessor.getParam("code");
+      if (session.status === "pending" && !urlSessionId && !urlCode) {
         this.logger.warn("EMBEDDED_PROVIDER", "Session mismatch detected - pending session without redirect context", {
           sessionId: session.sessionId,
           status: session.status
@@ -561,7 +562,7 @@ var EmbeddedProvider = class {
     }
     this.logger.log("EMBEDDED_PROVIDER", "No completed session found, checking for redirect resume");
     if (this.authProvider.resumeAuthFromRedirect) {
-      const authResult = this.authProvider.resumeAuthFromRedirect(session.authProvider);
+      const authResult = await this.authProvider.resumeAuthFromRedirect(session.authProvider);
       if (authResult) {
         this.logger.info("EMBEDDED_PROVIDER", "Resuming from redirect", {
           walletId: authResult.walletId,
@@ -840,6 +841,21 @@ var EmbeddedProvider = class {
       });
     }
   }
+  /**
+   * Handles errors from signing operations.
+   * Disconnects the user if the server returns a 401/403 (revoked or expired authenticator).
+   */
+  async handleSigningError(error) {
+    if (isAuthenticationError(error)) {
+      this.logger.warn("EMBEDDED_PROVIDER", "Authenticator rejected by server (401/403), disconnecting", { error });
+      await this.disconnect(false);
+      throw new Error("Authenticator revoked");
+    }
+    if (error instanceof SpendingLimitError) {
+      this.emit("spending_limit_reached", { error });
+    }
+    throw error;
+  }
   async signMessage(params) {
     if (!this.client || !this.walletId) {
       throw new Error("Not connected");
@@ -856,7 +872,7 @@ var EmbeddedProvider = class {
       message: params.message,
       networkId: params.networkId,
       derivationIndex
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Message signed successfully", {
       walletId: this.walletId,
       message: params.message
@@ -889,7 +905,7 @@ var EmbeddedProvider = class {
       message: base64UrlMessage,
       networkId: params.networkId,
       derivationIndex
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Message signed successfully", {
       walletId: this.walletId,
       message: params.message
@@ -912,7 +928,7 @@ var EmbeddedProvider = class {
       typedData: params.typedData,
       networkId: params.networkId,
       derivationIndex
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Typed data signed successfully", {
       walletId: this.walletId
     });
@@ -949,7 +965,7 @@ var EmbeddedProvider = class {
       networkId: params.networkId,
       derivationIndex,
       account
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Transaction signed successfully", {
       walletId: this.walletId,
       networkId: params.networkId,
@@ -982,21 +998,13 @@ var EmbeddedProvider = class {
     if (!account) {
       throw new Error(`No address found for network ${params.networkId}`);
     }
-    let rawResponse;
-    try {
-      rawResponse = await this.client.signAndSendTransaction({
-        walletId: this.walletId,
-        transaction: transactionPayload,
-        networkId: params.networkId,
-        derivationIndex,
-        account
-      });
-    } catch (error) {
-      if (error instanceof SpendingLimitError) {
-        this.emit("spending_limit_reached", { error });
-      }
-      throw error;
-    }
+    const rawResponse = await this.client.signAndSendTransaction({
+      walletId: this.walletId,
+      transaction: transactionPayload,
+      networkId: params.networkId,
+      derivationIndex,
+      account
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Transaction signed and sent successfully", {
       walletId: this.walletId,
       networkId: params.networkId,
@@ -1195,6 +1203,7 @@ var EmbeddedProvider = class {
       tempSession.authProvider = authResult.provider || tempSession.authProvider;
       tempSession.accountDerivationIndex = authResult.accountDerivationIndex;
       tempSession.authUserId = authResult.authUserId;
+      tempSession.bearerToken = authResult.bearerToken;
       tempSession.status = "completed";
       tempSession.lastUsed = Date.now();
       if (authResult.expiresInMs > 0) {
@@ -1224,6 +1233,7 @@ var EmbeddedProvider = class {
     session.organizationId = authResult.organizationId;
     session.accountDerivationIndex = authResult.accountDerivationIndex;
     session.authUserId = authResult.authUserId;
+    session.bearerToken = authResult.bearerToken;
     session.status = "completed";
     session.lastUsed = Date.now();
     if (authResult.expiresInMs > 0) {
@@ -1293,7 +1303,8 @@ var EmbeddedProvider = class {
         organizationId: session.organizationId,
         headers: {
           ...this.platform.analyticsHeaders || {},
-          ...session.authUserId ? { "x-auth-user-id": session.authUserId } : {}
+          ...session.authUserId ? { "x-auth-user-id": session.authUserId } : {},
+          ...session.bearerToken ? { Authorization: session.bearerToken } : {}
         }
       },
       this.stamper