@proveanything/smartlinks-auth-ui 0.3.12 → 0.3.13

package/dist/index.js

@@ -12341,7 +12341,7 @@ const getExpirationFromResponse = (response) => {
 // Default Smartlinks Google OAuth Client ID (public - safe to expose)
 const DEFAULT_GOOGLE_CLIENT_ID = '696509063554-jdlbjl8vsjt7cr0vgkjkjf3ffnvi3a70.apps.googleusercontent.com';
 // Default Google OAuth proxy URL (hosted on our whitelisted domain)
-const DEFAULT_GOOGLE_PROXY_URL = 'https://smartlinks-auth-kit.lovable.app/google-proxy.html';
+const DEFAULT_GOOGLE_PROXY_URL = 'https://smartlinks.app/apps/account/stable/google-proxy.html';
 // Exact hostnames where Google OAuth is registered and inline/OneTap flow works directly.
 // Only specific registered origins — NOT broad wildcards like *.lovable.app
 const WHITELISTED_GOOGLE_OAUTH_HOSTS = [
@@ -12353,11 +12353,15 @@ const WHITELISTED_GOOGLE_OAUTH_HOSTS = [
 /**
  * Check if the current domain is whitelisted for direct Google OAuth.
  * Uses exact hostname match (plus subdomain match for smartlinks.app production).
+ * Merges the hardcoded list with any additional domains from auth kit config.
  * Returns true if OneTap/inline flow can work without a proxy.
  */
-const isWhitelistedGoogleDomain = () => {
+const isWhitelistedGoogleDomain = (additionalDomains) => {
     const hostname = window.location.hostname;
-    return WHITELISTED_GOOGLE_OAUTH_HOSTS.some(domain => hostname === domain || hostname.endsWith(`.${domain}`));
+    const allDomains = additionalDomains?.length
+        ? [...WHITELISTED_GOOGLE_OAUTH_HOSTS, ...additionalDomains]
+        : WHITELISTED_GOOGLE_OAUTH_HOSTS;
+    return allDomains.some(domain => hostname === domain || hostname.endsWith(`.${domain}`));
 };
 // Default auth UI configuration when no clientId is provided
 const DEFAULT_AUTH_CONFIG = {
@@ -13138,7 +13142,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         // - If user has their own Google Client ID, they've registered their domains — no proxy needed
         // - If on a whitelisted SmartLinks domain, inline flow works directly
         // - Otherwise, auto-use the default proxy URL
-        const isWhitelisted = isWhitelistedGoogleDomain();
+        const isWhitelisted = isWhitelistedGoogleDomain(config?.whitelistedGoogleDomains);
         const googleProxyUrl = config?.googleOAuthProxyUrl
             || (!hasCustomGoogleClientId && !isWhitelisted ? DEFAULT_GOOGLE_PROXY_URL : undefined);
         log.log('Google Auth initiated:', {