@proveanything/smartlinks-auth-ui 0.3.11 → 0.3.13

package/dist/components/SmartlinksAuthUI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SmartlinksAuthUI.d.ts","sourceRoot":"","sources":["../../src/components/SmartlinksAuthUI.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAY5D,OAAO,KAAK,EAAE,qBAAqB,EAAyF,MAAM,UAAU,CAAC;AA0I7I,QAAA,MAAM,mBAAmB,QAAa,OAAO,CAAC,IAAI,CAmCjD,CAAC;AAwEF,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAK/B,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CA0mD5D,CAAC"}
+{"version":3,"file":"SmartlinksAuthUI.d.ts","sourceRoot":"","sources":["../../src/components/SmartlinksAuthUI.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAY5D,OAAO,KAAK,EAAE,qBAAqB,EAAyF,MAAM,UAAU,CAAC;AA8I7I,QAAA,MAAM,mBAAmB,QAAa,OAAO,CAAC,IAAI,CAmCjD,CAAC;AAwEF,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAK/B,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CA0mD5D,CAAC"}

package/dist/context/AuthContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthContext.d.ts","sourceRoot":"","sources":["../../src/context/AuthContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8E,MAAM,OAAO,CAAC;AAMnG,OAAO,KAAK,EAAqC,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGvG,eAAO,MAAM,WAAW,6CAAyD,CAAC;AAGlF,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAEjC,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAq0BpD,CAAC;AAEF,eAAO,MAAM,OAAO,QAAO,gBAM1B,CAAC"}
+{"version":3,"file":"AuthContext.d.ts","sourceRoot":"","sources":["../../src/context/AuthContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8E,MAAM,OAAO,CAAC;AAOnG,OAAO,KAAK,EAAqC,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGvG,eAAO,MAAM,WAAW,6CAAyD,CAAC;AAGlF,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAEjC,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,iBAAiB,CA+0BpD,CAAC;AAEF,eAAO,MAAM,OAAO,QAAO,gBAM1B,CAAC"}

package/dist/index.esm.js

@@ -2,7 +2,7 @@ import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 import React, { useEffect, useState, useMemo, useRef, useCallback, createContext, useContext } from 'react';
 import * as smartlinks from '@proveanything/smartlinks';
 import { iframe, SmartlinksApiError } from '@proveanything/smartlinks';
-import { post } from '@proveanything/smartlinks/dist/http';
+import { post, getApiHeaders, isProxyEnabled } from '@proveanything/smartlinks/dist/http';
 
 const AuthContainer = ({ children, theme = 'light', className = '', config, minimal = false, }) => {
     // Apply CSS variables for customization
@@ -10849,7 +10849,7 @@ class AuthAPI {
         });
         // Exchange authorization code for tokens via backend
         // Use direct HTTP call since SDK may not have this method in authKit namespace yet
-        return post(`/api/v1/authkit/${this.clientId}/google-code`, {
+        return post(`/authkit/${this.clientId}/google-code`, {
             code,
             redirectUri,
         });
@@ -11640,32 +11640,42 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
         const initializeAuth = async () => {
             try {
                 if (proxyMode) {
-                    try {
-                        const accountResponse = await smartlinks.auth.getAccount();
-                        const accountAny = accountResponse;
-                        const hasValidSession = accountAny?.uid && accountAny.uid.length > 0;
-                        if (hasValidSession && isMounted) {
-                            const userFromAccount = {
-                                uid: accountAny.uid,
-                                email: accountAny?.email,
-                                displayName: accountAny?.displayName || accountAny?.name,
-                                phoneNumber: accountAny?.phoneNumber,
-                            };
-                            setUser(userFromAccount);
-                            setAccountData(accountResponse);
-                            setAccountInfo(accountResponse);
-                            setIsVerified(true);
-                            notifyAuthStateChange('LOGIN', userFromAccount, null, accountResponse, accountResponse, true);
-                            // Sync contact in background (proxy mode) - use ref for stable dependency
-                            syncContactRef.current?.(userFromAccount, accountResponse);
+                    // Check if credentials exist before making the API call
+                    const headers = getApiHeaders();
+                    const hasBearer = !!headers['Authorization'];
+                    const hasSdkProxy = isProxyEnabled();
+                    if (!hasBearer && !hasSdkProxy) {
+                        console.debug('[AuthContext] Skipping getAccount - no credentials available');
+                        // Fall through to "no valid session" state
+                    }
+                    else {
+                        try {
+                            const accountResponse = await smartlinks.auth.getAccount();
+                            const accountAny = accountResponse;
+                            const hasValidSession = accountAny?.uid && accountAny.uid.length > 0;
+                            if (hasValidSession && isMounted) {
+                                const userFromAccount = {
+                                    uid: accountAny.uid,
+                                    email: accountAny?.email,
+                                    displayName: accountAny?.displayName || accountAny?.name,
+                                    phoneNumber: accountAny?.phoneNumber,
+                                };
+                                setUser(userFromAccount);
+                                setAccountData(accountResponse);
+                                setAccountInfo(accountResponse);
+                                setIsVerified(true);
+                                notifyAuthStateChange('LOGIN', userFromAccount, null, accountResponse, accountResponse, true);
+                                // Sync contact in background (proxy mode) - use ref for stable dependency
+                                syncContactRef.current?.(userFromAccount, accountResponse);
+                            }
+                            else if (isMounted) {
+                                // No valid session, awaiting login
+                            }
                         }
-                        else if (isMounted) {
-                            // No valid session, awaiting login
+                        catch (error) {
+                            // auth.getAccount() failed, awaiting login
                         }
-                    }
-                    catch (error) {
-                        // auth.getAccount() failed, awaiting login
-                    }
+                    } // end else (has credentials)
                     if (isMounted) {
                         setIsLoading(false);
                         initializingRef.current = false;
@@ -12311,7 +12321,7 @@ const getExpirationFromResponse = (response) => {
 // Default Smartlinks Google OAuth Client ID (public - safe to expose)
 const DEFAULT_GOOGLE_CLIENT_ID = '696509063554-jdlbjl8vsjt7cr0vgkjkjf3ffnvi3a70.apps.googleusercontent.com';
 // Default Google OAuth proxy URL (hosted on our whitelisted domain)
-const DEFAULT_GOOGLE_PROXY_URL = 'https://smartlinks-auth-kit.lovable.app/google-proxy.html';
+const DEFAULT_GOOGLE_PROXY_URL = 'https://smartlinks.app/apps/account/stable/google-proxy.html';
 // Exact hostnames where Google OAuth is registered and inline/OneTap flow works directly.
 // Only specific registered origins — NOT broad wildcards like *.lovable.app
 const WHITELISTED_GOOGLE_OAUTH_HOSTS = [
@@ -12323,11 +12333,15 @@ const WHITELISTED_GOOGLE_OAUTH_HOSTS = [
 /**
  * Check if the current domain is whitelisted for direct Google OAuth.
  * Uses exact hostname match (plus subdomain match for smartlinks.app production).
+ * Merges the hardcoded list with any additional domains from auth kit config.
  * Returns true if OneTap/inline flow can work without a proxy.
  */
-const isWhitelistedGoogleDomain = () => {
+const isWhitelistedGoogleDomain = (additionalDomains) => {
     const hostname = window.location.hostname;
-    return WHITELISTED_GOOGLE_OAUTH_HOSTS.some(domain => hostname === domain || hostname.endsWith(`.${domain}`));
+    const allDomains = additionalDomains?.length
+        ? [...WHITELISTED_GOOGLE_OAUTH_HOSTS, ...additionalDomains]
+        : WHITELISTED_GOOGLE_OAUTH_HOSTS;
+    return allDomains.some(domain => hostname === domain || hostname.endsWith(`.${domain}`));
 };
 // Default auth UI configuration when no clientId is provided
 const DEFAULT_AUTH_CONFIG = {
@@ -13108,7 +13122,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         // - If user has their own Google Client ID, they've registered their domains — no proxy needed
         // - If on a whitelisted SmartLinks domain, inline flow works directly
         // - Otherwise, auto-use the default proxy URL
-        const isWhitelisted = isWhitelistedGoogleDomain();
+        const isWhitelisted = isWhitelistedGoogleDomain(config?.whitelistedGoogleDomains);
         const googleProxyUrl = config?.googleOAuthProxyUrl
             || (!hasCustomGoogleClientId && !isWhitelisted ? DEFAULT_GOOGLE_PROXY_URL : undefined);
         log.log('Google Auth initiated:', {