@proveanything/smartlinks-auth-ui 0.3.12 → 0.3.13

package/dist/components/SmartlinksAuthUI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SmartlinksAuthUI.d.ts","sourceRoot":"","sources":["../../src/components/SmartlinksAuthUI.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAY5D,OAAO,KAAK,EAAE,qBAAqB,EAAyF,MAAM,UAAU,CAAC;AA0I7I,QAAA,MAAM,mBAAmB,QAAa,OAAO,CAAC,IAAI,CAmCjD,CAAC;AAwEF,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAK/B,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CA0mD5D,CAAC"}
+{"version":3,"file":"SmartlinksAuthUI.d.ts","sourceRoot":"","sources":["../../src/components/SmartlinksAuthUI.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAY5D,OAAO,KAAK,EAAE,qBAAqB,EAAyF,MAAM,UAAU,CAAC;AA8I7I,QAAA,MAAM,mBAAmB,QAAa,OAAO,CAAC,IAAI,CAmCjD,CAAC;AAwEF,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAK/B,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CA0mD5D,CAAC"}

package/dist/index.esm.js

@@ -12321,7 +12321,7 @@ const getExpirationFromResponse = (response) => {
 // Default Smartlinks Google OAuth Client ID (public - safe to expose)
 const DEFAULT_GOOGLE_CLIENT_ID = '696509063554-jdlbjl8vsjt7cr0vgkjkjf3ffnvi3a70.apps.googleusercontent.com';
 // Default Google OAuth proxy URL (hosted on our whitelisted domain)
-const DEFAULT_GOOGLE_PROXY_URL = 'https://smartlinks-auth-kit.lovable.app/google-proxy.html';
+const DEFAULT_GOOGLE_PROXY_URL = 'https://smartlinks.app/apps/account/stable/google-proxy.html';
 // Exact hostnames where Google OAuth is registered and inline/OneTap flow works directly.
 // Only specific registered origins — NOT broad wildcards like *.lovable.app
 const WHITELISTED_GOOGLE_OAUTH_HOSTS = [
@@ -12333,11 +12333,15 @@ const WHITELISTED_GOOGLE_OAUTH_HOSTS = [
 /**
  * Check if the current domain is whitelisted for direct Google OAuth.
  * Uses exact hostname match (plus subdomain match for smartlinks.app production).
+ * Merges the hardcoded list with any additional domains from auth kit config.
  * Returns true if OneTap/inline flow can work without a proxy.
  */
-const isWhitelistedGoogleDomain = () => {
+const isWhitelistedGoogleDomain = (additionalDomains) => {
     const hostname = window.location.hostname;
-    return WHITELISTED_GOOGLE_OAUTH_HOSTS.some(domain => hostname === domain || hostname.endsWith(`.${domain}`));
+    const allDomains = additionalDomains?.length
+        ? [...WHITELISTED_GOOGLE_OAUTH_HOSTS, ...additionalDomains]
+        : WHITELISTED_GOOGLE_OAUTH_HOSTS;
+    return allDomains.some(domain => hostname === domain || hostname.endsWith(`.${domain}`));
 };
 // Default auth UI configuration when no clientId is provided
 const DEFAULT_AUTH_CONFIG = {
@@ -13118,7 +13122,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         // - If user has their own Google Client ID, they've registered their domains — no proxy needed
         // - If on a whitelisted SmartLinks domain, inline flow works directly
         // - Otherwise, auto-use the default proxy URL
-        const isWhitelisted = isWhitelistedGoogleDomain();
+        const isWhitelisted = isWhitelistedGoogleDomain(config?.whitelistedGoogleDomains);
         const googleProxyUrl = config?.googleOAuthProxyUrl
             || (!hasCustomGoogleClientId && !isWhitelisted ? DEFAULT_GOOGLE_PROXY_URL : undefined);
         log.log('Google Auth initiated:', {