@proveanything/smartlinks-auth-ui 0.1.28 → 0.1.29

package/dist/api.d.ts

@@ -19,6 +19,7 @@ export declare class AuthAPI {
         };
         tokenType?: 'id_token' | 'access_token';
     }): Promise<AuthResponse>;
+    loginWithGoogleCode(code: string, redirectUri: string): Promise<AuthResponse>;
     sendPhoneCode(phoneNumber: string): Promise<{
         verificationId: string;
     }>;

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpF;;;GAGG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,GAAG,CAAyC;gBAExC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU;IAQtF,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAI7D,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAWnD,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAC7C,cAAc,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACjF,SAAS,CAAC,EAAE,UAAU,GAAG,cAAc,CAAC;KACzC,GAAG,OAAO,CAAC,YAAY,CAAC;IAmBnB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAIvE,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,CAAC;IAIlB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAQxG,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAIlH,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAIzG,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IASzH,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAIhF,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAStH,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IA2BpC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOjG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAGlF"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpF;;;GAGG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,GAAG,CAAyC;gBAExC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU;IAQtF,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAI7D,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAWnD,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAC7C,cAAc,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACjF,SAAS,CAAC,EAAE,UAAU,GAAG,cAAc,CAAC;KACzC,GAAG,OAAO,CAAC,YAAY,CAAC;IAmBnB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAc7E,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAIvE,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,CAAC;IAIlB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAQxG,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAIlH,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAIzG,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IASzH,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAIhF,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAStH,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IA2BpC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOjG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAGlF"}

package/dist/components/SmartlinksAuthUI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SmartlinksAuthUI.d.ts","sourceRoot":"","sources":["../../src/components/SmartlinksAuthUI.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAW5D,OAAO,KAAK,EAAE,qBAAqB,EAAuD,MAAM,UAAU,CAAC;AAqF3G,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAmlC5D,CAAC"}
+{"version":3,"file":"SmartlinksAuthUI.d.ts","sourceRoot":"","sources":["../../src/components/SmartlinksAuthUI.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAW5D,OAAO,KAAK,EAAE,qBAAqB,EAAuD,MAAM,UAAU,CAAC;AA4G3G,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CA4qC5D,CAAC"}

package/dist/index.esm.js

@@ -2,6 +2,7 @@ import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 import React, { useEffect, useState, useMemo, useRef, useCallback, createContext, useContext } from 'react';
 import * as smartlinks from '@proveanything/smartlinks';
 import { iframe } from '@proveanything/smartlinks';
+import { post } from '@proveanything/smartlinks/dist/http';
 
 const AuthContainer = ({ children, theme = 'light', className = '', config, minimal = false, }) => {
     // Apply CSS variables for customization
@@ -10789,6 +10790,18 @@ class AuthAPI {
         // Pass token to SDK - backend verifies with Google
         return smartlinks.authKit.googleLogin(this.clientId, token);
     }
+    async loginWithGoogleCode(code, redirectUri) {
+        this.log.log('loginWithGoogleCode called:', {
+            codeLength: code?.length,
+            redirectUri,
+        });
+        // Exchange authorization code for tokens via backend
+        // Use direct HTTP call since SDK may not have this method in authKit namespace yet
+        return post(`/api/v1/authkit/${this.clientId}/google-code`, {
+            code,
+            redirectUri,
+        });
+    }
     async sendPhoneCode(phoneNumber) {
         return smartlinks.authKit.sendPhoneCode(this.clientId, phoneNumber);
     }
@@ -12176,6 +12189,28 @@ const loadGoogleIdentityServices = () => {
         document.head.appendChild(script);
     });
 };
+// Helper to detect WebView environments (Android/iOS)
+const detectWebView = () => {
+    const ua = navigator.userAgent;
+    // Android WebView detection
+    if (/Android/i.test(ua)) {
+        // Modern Android WebViews include "wv" in UA string
+        if (/\bwv\b/i.test(ua))
+            return true;
+        // Check for legacy Android bridge
+        if (typeof window.Android !== 'undefined')
+            return true;
+    }
+    // iOS WKWebView detection
+    if (/iPhone|iPad|iPod/i.test(ua)) {
+        const hasWebKitHandlers = !!window.webkit?.messageHandlers;
+        const isSafari = !!window.safari;
+        // WKWebView has webkit handlers but no safari object
+        if (hasWebKitHandlers && !isSafari)
+            return true;
+    }
+    return false;
+};
 // Helper to convert generic SDK errors to user-friendly messages
 const getFriendlyErrorMessage = (errorMessage) => {
     // Check for common HTTP status codes in the error message
@@ -12437,8 +12472,15 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         const params = getUrlParams();
         const urlMode = params.get('mode');
         const token = params.get('token');
-        log.log('URL params detected:', { urlMode, token, hash: window.location.hash, search: window.location.search });
-        if (urlMode && token) {
+        // Check for Google OAuth redirect callback
+        const authCode = params.get('code');
+        const state = params.get('state');
+        log.log('URL params detected:', { urlMode, token, authCode: !!authCode, state: !!state, hash: window.location.hash, search: window.location.search });
+        if (authCode && state) {
+            // Google OAuth redirect callback
+            handleGoogleAuthCodeCallback(authCode, state);
+        }
+        else if (urlMode && token) {
             handleURLBasedAuth(urlMode, token);
         }
     }, []);
@@ -12551,6 +12593,43 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             setLoading(false);
         }
     };
+    // Handle Google OAuth authorization code callback (from redirect flow)
+    const handleGoogleAuthCodeCallback = async (code, stateParam) => {
+        setLoading(true);
+        setError(undefined);
+        try {
+            // Parse state to get context
+            const state = JSON.parse(decodeURIComponent(stateParam));
+            log.log('Google OAuth redirect callback:', { clientId: state.clientId, returnPath: state.returnPath });
+            // Determine the redirect URI that was used (must match exactly)
+            const redirectUri = state.redirectUri || window.location.origin + window.location.pathname;
+            // Exchange authorization code for tokens
+            const response = await api.loginWithGoogleCode(code, redirectUri);
+            if (response.token) {
+                auth.login(response.token, response.user, response.accountData, response.isNewUser, getExpirationFromResponse(response));
+                setAuthSuccess(true);
+                setSuccessMessage('Google login successful!');
+                onAuthSuccess(response.token, response.user, response.accountData);
+            }
+            else {
+                throw new Error('Authentication failed - no token received');
+            }
+            // Clean URL parameters
+            const cleanUrl = window.location.origin + window.location.pathname + (state.returnPath?.includes('#') ? state.returnPath.split('?')[0] : window.location.hash.split('?')[0]);
+            window.history.replaceState({}, document.title, cleanUrl);
+        }
+        catch (err) {
+            const errorMessage = err instanceof Error ? err.message : 'Google login failed';
+            setError(getFriendlyErrorMessage(errorMessage));
+            onAuthError?.(err instanceof Error ? err : new Error(errorMessage));
+            // Clean URL parameters even on error
+            const cleanUrl = window.location.origin + window.location.pathname + window.location.hash.split('?')[0];
+            window.history.replaceState({}, document.title, cleanUrl);
+        }
+        finally {
+            setLoading(false);
+        }
+    };
     const handleEmailAuth = async (data) => {
         setLoading(true);
         setError(undefined);
@@ -12703,11 +12782,16 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         // Use custom client ID from config, or fall back to default Smartlinks client ID
         const googleClientId = config?.googleClientId || DEFAULT_GOOGLE_CLIENT_ID;
         // Determine OAuth flow: default to 'oneTap' for better UX, but allow 'popup' for iframe compatibility
-        const oauthFlow = config?.googleOAuthFlow || 'oneTap';
+        const configuredFlow = config?.googleOAuthFlow || 'oneTap';
+        // For oneTap, automatically use redirect flow in WebView environments
+        const isWebView = detectWebView();
+        const oauthFlow = (configuredFlow === 'oneTap' && isWebView) ? 'redirect' : configuredFlow;
         // Log Google Auth configuration for debugging
         log.log('Google Auth initiated:', {
             googleClientId,
-            oauthFlow,
+            configuredFlow,
+            effectiveFlow: oauthFlow,
+            isWebView,
             currentOrigin: window.location.origin,
             currentHref: window.location.href,
             configGoogleClientId: config?.googleClientId,
@@ -12723,7 +12807,37 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 throw new Error('Google Identity Services failed to initialize');
             }
             log.log('Google Identity Services loaded, using flow:', oauthFlow);
-            if (oauthFlow === 'popup') {
+            if (oauthFlow === 'redirect') {
+                // Use OAuth2 redirect flow (works in WebViews and everywhere)
+                if (!google.accounts.oauth2) {
+                    throw new Error('Google OAuth2 not available');
+                }
+                // Build the redirect URI - use current URL without query params
+                const redirectUri = getRedirectUrl();
+                // Build state parameter to preserve context across redirect
+                const state = encodeURIComponent(JSON.stringify({
+                    clientId,
+                    returnPath: window.location.hash || window.location.pathname,
+                    redirectUri,
+                }));
+                log.log('Initializing Google OAuth2 redirect flow:', {
+                    client_id: googleClientId,
+                    scope: 'openid email profile',
+                    redirect_uri: redirectUri,
+                    state,
+                });
+                const client = google.accounts.oauth2.initCodeClient({
+                    client_id: googleClientId,
+                    scope: 'openid email profile',
+                    ux_mode: 'redirect',
+                    redirect_uri: redirectUri,
+                    state,
+                });
+                // This will navigate away from the page
+                client.requestCode();
+                return; // Don't set loading to false - we're navigating away
+            }
+            else if (oauthFlow === 'popup') {
                 // Use OAuth2 popup flow (works in iframes but requires popup permission)
                 if (!google.accounts.oauth2) {
                     throw new Error('Google OAuth2 not available');
@@ -12814,7 +12928,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 client.requestAccessToken();
             }
             else {
-                // Use One Tap / Sign-In button flow (smoother UX but doesn't work in iframes)
+                // Use One Tap / Sign-In button flow (smoother UX but doesn't work in iframes or WebViews)
                 log.log('Initializing Google OneTap flow:', {
                     client_id: googleClientId,
                     origin: window.location.origin,
@@ -12847,8 +12961,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     },
                     auto_select: false,
                     cancel_on_tap_outside: true,
-                    // Note: use_fedcm_for_prompt omitted - requires Permissions-Policy header on hosting server
-                    // Will be needed when FedCM becomes mandatory in the future
+                    use_fedcm_for_prompt: true, // Enable FedCM for future browser compatibility
                 });
                 // Use timeout fallback instead of deprecated notification methods
                 // (isNotDisplayed/isSkippedMoment will stop working when FedCM becomes mandatory)