@proveanything/smartlinks-auth-ui 0.4.3 → 0.4.5

package/dist/index.js

@@ -12421,8 +12421,32 @@ function getFriendlyErrorMessage(error) {
         // Fall back to the server's message (already human-readable from backend)
         return error.message;
     }
-    // Handle standard Error objects — check message for known patterns
+    // Handle standard Error objects
     if (error instanceof Error) {
+        // SDK bug workaround: SDK may do `throw new Error(responseBodyObject)` which produces
+        // message "[object Object]". Check for API error properties attached to the Error instance.
+        const errAny = error;
+        // Check if the Error has API error properties directly attached (e.g., error.statusCode, error.errorCode)
+        if (typeof errAny.statusCode === 'number' || errAny.errorCode || errAny.response) {
+            // Try to extract from attached properties
+            const apiLike = errAny.response || errAny;
+            if (isApiErrorLike(apiLike)) {
+                return getFriendlyErrorMessage(apiLike);
+            }
+        }
+        // Check if the Error has a `cause` with API error details (modern Error cause pattern)
+        if (errAny.cause && typeof errAny.cause === 'object') {
+            if (isApiErrorLike(errAny.cause)) {
+                return getFriendlyErrorMessage(errAny.cause);
+            }
+        }
+        // If the message is "[object Object]", the error was constructed from a plain object
+        // This is useless - return a generic message instead
+        if (error.message === '[object Object]') {
+            // Log the actual error for debugging
+            console.warn('[AuthKit] Error with [object Object] message. Raw error:', JSON.stringify(errAny, Object.getOwnPropertyNames(errAny)));
+            return 'An unexpected error occurred. Please try again.';
+        }
         // Check if the message itself contains a known API error pattern
         if (/already (registered|exists)/i.test(error.message)) {
             return 'This email is already registered.';
@@ -12494,6 +12518,27 @@ function getErrorCode(error) {
     }
     return undefined;
 }
+/**
+ * Error codes that indicate the user needs to verify their email.
+ */
+const EMAIL_VERIFICATION_ERROR_CODES = new Set([
+    'EMAIL_NOT_VERIFIED',
+    'ACCOUNT_LOCKED',
+    'EMAIL_VERIFICATION_EXPIRED',
+]);
+/**
+ * Checks if an error requires email verification action from the user.
+ */
+function requiresEmailVerification(error) {
+    const code = getErrorCode(error);
+    if (code && EMAIL_VERIFICATION_ERROR_CODES.has(code))
+        return true;
+    // Also check the flag from the response body
+    if (error && typeof error === 'object' && 'requiresEmailVerification' in error) {
+        return error.requiresEmailVerification === true;
+    }
+    return false;
+}
 
 // VERSION: Update this when making changes to help identify which version is running
 const AUTH_UI_VERSION = '44';
@@ -13236,10 +13281,18 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 if (response.token) {
                     // Check for account lock or verification requirements
                     if (response.accountLocked) {
-                        throw new Error('Your account has been locked due to unverified email. Please check your email or request a new verification link.');
+                        setShowResendVerification(true);
+                        setResendEmail(data.email);
+                        setError('Your account has been locked due to unverified email. Click below to resend the verification link.');
+                        setLoading(false);
+                        return;
                     }
                     if (response.requiresEmailVerification) {
-                        throw new Error('Please verify your email before logging in. Check your inbox for the verification link.');
+                        setShowResendVerification(true);
+                        setResendEmail(data.email);
+                        setError('Please verify your email before signing in. Click below to resend the verification link.');
+                        setLoading(false);
+                        return;
                     }
                     await auth.login(response.token, response.user, response.accountData, false, getExpirationFromResponse(response));
                     setAuthSuccess(true);
@@ -13248,14 +13301,26 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     // Note: No automatic redirect - app controls navigation via onAuthSuccess callback
                 }
                 else {
-                    throw new Error('Authentication failed - please verify your email before logging in.');
+                    // No token returned - likely requires email verification
+                    setShowResendVerification(true);
+                    setResendEmail(data.email);
+                    setError('Please verify your email before signing in. Click below to resend the verification link.');
+                    setLoading(false);
+                    return;
                 }
             }
         }
         catch (err) {
+            // Debug: log the raw error shape to help diagnose SDK error wrapping issues
+            log.error('handleEmailAuth error:', typeof err, err instanceof Error ? `Error.message=${err.message}` : '', JSON.stringify(err, Object.getOwnPropertyNames(err || {})));
+            // Check if error requires email verification (403 EMAIL_NOT_VERIFIED, ACCOUNT_LOCKED, etc.)
+            if (requiresEmailVerification(err)) {
+                setShowResendVerification(true);
+                setResendEmail(data.email);
+                setError(getFriendlyErrorMessage(err) + ' Click below to resend the verification link.');
+            }
             // Check if error is about email already registered (409 conflict)
-            // Handle both SmartlinksApiError (statusCode 409) and plain Error with keyword matching
-            if (mode === 'register' && (isConflictError(err) ||
+            else if (mode === 'register' && (isConflictError(err) ||
                 (err instanceof Error && /already (registered|exists)/i.test(err.message)))) {
                 setShowResendVerification(true);
                 setResendEmail(data.email);
@@ -13264,7 +13329,8 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             else {
                 setError(getFriendlyErrorMessage(err));
             }
-            onAuthError?.(err instanceof Error ? err : new Error(getFriendlyErrorMessage(err)));
+            const friendlyMsg = getFriendlyErrorMessage(err);
+            onAuthError?.(err instanceof Error ? new Error(friendlyMsg) : new Error(friendlyMsg));
         }
         finally {
             setLoading(false);
@@ -13852,14 +13918,14 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                             color: config?.branding?.inheritHostStyles
                                 ? 'hsl(var(--foreground, 215 25% 15%))'
                                 : (resolvedTheme === 'dark' ? '#f1f5f9' : '#374151')
-                        }, children: "Verification Link Expired" }), jsxRuntime.jsx("p", { style: {
+                        }, children: "Email Verification Required" }), jsxRuntime.jsx("p", { style: {
                             marginBottom: '1rem',
                             fontSize: '0.875rem',
                             color: config?.branding?.inheritHostStyles
                                 ? 'hsl(var(--muted-foreground, 215 15% 45%))'
                                 : (resolvedTheme === 'dark' ? '#94a3b8' : '#6B7280'),
                             lineHeight: '1.5'
-                        }, children: "Your verification link has expired or is no longer valid. Please enter your email address below and we'll send you a new verification link." }), jsxRuntime.jsx("input", { type: "email", value: resendEmail || '', onChange: (e) => setResendEmail(e.target.value), placeholder: "your@email.com", className: config?.branding?.inheritHostStyles ? 'auth-input' : undefined, style: config?.branding?.inheritHostStyles ? {
+                        }, children: "Your email address needs to be verified before you can sign in. Enter your email below and we'll send you a verification link." }), jsxRuntime.jsx("input", { type: "email", value: resendEmail || '', onChange: (e) => setResendEmail(e.target.value), placeholder: "your@email.com", className: config?.branding?.inheritHostStyles ? 'auth-input' : undefined, style: config?.branding?.inheritHostStyles ? {
                             width: '100%',
                             padding: '0.625rem',
                             marginBottom: '1rem',
@@ -14852,7 +14918,15 @@ function useIframeMessages(iframeRef, options) {
         }
         catch (err) {
             console.error('[SmartlinksFrame] Proxy error:', err);
-            response.error = err?.message || 'Unknown error';
+            const statusCode = err?.statusCode ?? err?.response?.status ?? err?.response?.statusCode;
+            const errorBody = err?.details ?? err?.response?.data ?? err?.response ?? err?.cause;
+            response.error = typeof err?.message === 'string' ? err.message : 'Unknown error';
+            if (typeof statusCode === 'number') {
+                response.statusCode = statusCode;
+            }
+            if (errorBody && typeof errorBody === 'object') {
+                response.errorBody = JSON.parse(JSON.stringify(errorBody));
+            }
             onErrorRef.current?.(err);
         }
         sendResponse(event.source, event.origin, response);