@proveanything/smartlinks-auth-ui 0.4.10 → 0.4.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -12671,7 +12671,9 @@ const WHITELISTED_GOOGLE_OAUTH_HOSTS = [
12671
12671
  ];
12672
12672
  /**
12673
12673
  * Check if the current domain is whitelisted for direct Google OAuth.
12674
- * Uses exact hostname match (plus subdomain match for smartlinks.app production).
12674
+ * Uses EXACT hostname match only subdomains (e.g. hubdev.smartlinks.app)
12675
+ * are NOT auto-whitelisted because they're not registered with Google Cloud Console.
12676
+ * Unregistered domains must route through the Google OAuth proxy.
12675
12677
  * Merges the hardcoded list with any additional domains from auth kit config.
12676
12678
  * Returns true if OneTap/inline flow can work without a proxy.
12677
12679
  */
@@ -12680,7 +12682,7 @@ const isWhitelistedGoogleDomain = (additionalDomains) => {
12680
12682
  const allDomains = additionalDomains?.length
12681
12683
  ? [...WHITELISTED_GOOGLE_OAUTH_HOSTS, ...additionalDomains]
12682
12684
  : WHITELISTED_GOOGLE_OAUTH_HOSTS;
12683
- return allDomains.some(domain => hostname === domain || hostname.endsWith(`.${domain}`));
12685
+ return allDomains.some(domain => hostname === domain);
12684
12686
  };
12685
12687
  // Default auth UI configuration when no clientId is provided
12686
12688
  const DEFAULT_AUTH_CONFIG = {