@proveanything/smartlinks-auth-ui 0.4.6 → 0.4.7

package/dist/index.js

@@ -278,7 +278,7 @@ const AuthModeToggle = ({ mode, onModeChange, disabled = false, }) => {
     return (jsxRuntime.jsxs("div", { className: "auth-mode-toggle", role: "tablist", "aria-label": "Authentication mode", children: [jsxRuntime.jsx("button", { type: "button", role: "tab", "aria-selected": mode === 'login', className: `auth-mode-toggle-button ${mode === 'login' ? 'auth-mode-toggle-button--active' : ''}`, onClick: () => onModeChange('login'), disabled: disabled, children: "Sign In" }), jsxRuntime.jsx("button", { type: "button", role: "tab", "aria-selected": mode === 'register', className: `auth-mode-toggle-button ${mode === 'register' ? 'auth-mode-toggle-button--active' : ''}`, onClick: () => onModeChange('register'), disabled: disabled, children: "Create Account" })] }));
 };
 
-const EmailAuthForm = ({ mode, onSubmit, onModeSwitch, onForgotPassword, loading, error, signupProminence = 'minimal', schema, registrationFieldsConfig = [], additionalFields = [], }) => {
+const EmailAuthForm = ({ mode, onSubmit, onModeSwitch, onForgotPassword, loading, error, signupProminence = 'minimal', signupRedirectUrl, schema, registrationFieldsConfig = [], additionalFields = [], }) => {
     const [formData, setFormData] = React.useState({
         email: '',
         password: '',
@@ -334,7 +334,7 @@ const EmailAuthForm = ({ mode, onSubmit, onModeSwitch, onForgotPassword, loading
                     if (newMode !== mode) {
                         onModeSwitch();
                     }
-                }, disabled: loading })), jsxRuntime.jsxs("div", { className: "auth-form-header", children: [jsxRuntime.jsx("h2", { className: "auth-form-title", children: title }), jsxRuntime.jsx("p", { className: "auth-form-subtitle", children: subtitle })] }), error && (jsxRuntime.jsxs("div", { className: "auth-error", role: "alert", children: [jsxRuntime.jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsxRuntime.jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error] })), mode === 'register' && (jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "displayName", className: "auth-label", children: "Full Name" }), jsxRuntime.jsx("input", { type: "text", id: "displayName", className: "auth-input", value: formData.displayName || '', onChange: (e) => handleChange('displayName', e.target.value), required: mode === 'register', disabled: loading, placeholder: "John Smith" })] })), jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsxRuntime.jsx("input", { type: "email", id: "email", className: "auth-input", value: formData.email || '', onChange: (e) => handleChange('email', e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] }), jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "password", className: "auth-label", children: "Password" }), jsxRuntime.jsx("input", { type: "password", id: "password", className: "auth-input", value: formData.password || '', onChange: (e) => handleChange('password', e.target.value), required: true, disabled: loading, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", autoComplete: mode === 'login' ? 'current-password' : 'new-password', minLength: 6 })] }), mode === 'register' && hasSchemaFields && schemaFields.inline.map(renderSchemaField), mode === 'register' && hasLegacyFields && additionalFields.map(renderLegacyField), mode === 'register' && hasSchemaFields && schemaFields.postCredentials.length > 0 && (jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [jsxRuntime.jsx("div", { className: "auth-divider", style: { margin: '16px 0' }, children: jsxRuntime.jsx("span", { children: "Additional Information" }) }), schemaFields.postCredentials.map(renderSchemaField)] })), mode === 'login' && (jsxRuntime.jsx("div", { className: "auth-form-footer", children: jsxRuntime.jsx("button", { type: "button", className: "auth-link", onClick: onForgotPassword, disabled: loading, children: "Forgot password?" }) })), jsxRuntime.jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsxRuntime.jsx("span", { className: "auth-spinner" })) : mode === 'login' ? ('Sign in') : ('Create account') }), signupProminence !== 'balanced' && (jsxRuntime.jsxs("div", { className: "auth-divider", children: [jsxRuntime.jsx("span", { children: mode === 'login' ? "Don't have an account?" : 'Already have an account?' }), jsxRuntime.jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onModeSwitch, disabled: loading, children: mode === 'login' ? 'Sign up' : 'Sign in' })] }))] }));
+                }, disabled: loading })), jsxRuntime.jsxs("div", { className: "auth-form-header", children: [jsxRuntime.jsx("h2", { className: "auth-form-title", children: title }), jsxRuntime.jsx("p", { className: "auth-form-subtitle", children: subtitle })] }), error && (jsxRuntime.jsxs("div", { className: "auth-error", role: "alert", children: [jsxRuntime.jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsxRuntime.jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error] })), mode === 'register' && (jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "displayName", className: "auth-label", children: "Full Name" }), jsxRuntime.jsx("input", { type: "text", id: "displayName", className: "auth-input", value: formData.displayName || '', onChange: (e) => handleChange('displayName', e.target.value), required: mode === 'register', disabled: loading, placeholder: "John Smith" })] })), jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsxRuntime.jsx("input", { type: "email", id: "email", className: "auth-input", value: formData.email || '', onChange: (e) => handleChange('email', e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] }), jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "password", className: "auth-label", children: "Password" }), jsxRuntime.jsx("input", { type: "password", id: "password", className: "auth-input", value: formData.password || '', onChange: (e) => handleChange('password', e.target.value), required: true, disabled: loading, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", autoComplete: mode === 'login' ? 'current-password' : 'new-password', minLength: 6 })] }), mode === 'register' && hasSchemaFields && schemaFields.inline.map(renderSchemaField), mode === 'register' && hasLegacyFields && additionalFields.map(renderLegacyField), mode === 'register' && hasSchemaFields && schemaFields.postCredentials.length > 0 && (jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [jsxRuntime.jsx("div", { className: "auth-divider", style: { margin: '16px 0' }, children: jsxRuntime.jsx("span", { children: "Additional Information" }) }), schemaFields.postCredentials.map(renderSchemaField)] })), mode === 'login' && (jsxRuntime.jsx("div", { className: "auth-form-footer", children: jsxRuntime.jsx("button", { type: "button", className: "auth-link", onClick: onForgotPassword, disabled: loading, children: "Forgot password?" }) })), jsxRuntime.jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsxRuntime.jsx("span", { className: "auth-spinner" })) : mode === 'login' ? ('Sign in') : ('Create account') }), signupProminence !== 'balanced' && signupProminence !== 'none' && (jsxRuntime.jsxs("div", { className: "auth-divider", children: [jsxRuntime.jsx("span", { children: mode === 'login' ? "Don't have an account?" : 'Already have an account?' }), signupRedirectUrl && mode === 'login' ? (jsxRuntime.jsx("a", { href: signupRedirectUrl, target: "_top", className: "auth-link auth-link-bold", children: "Sign up" })) : (jsxRuntime.jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onModeSwitch, disabled: loading, children: mode === 'login' ? 'Sign up' : 'Sign in' }))] }))] }));
 };
 
 const ProviderButtons = ({ enabledProviders, providerOrder, onEmailLogin, onGoogleLogin, onPhoneLogin, onMagicLinkLogin, loading, }) => {
@@ -10831,7 +10831,7 @@ const PhoneAuthForm = ({ onSubmit, onBack, loading, error, }) => {
                                 : 'Resend code' }) })] })), jsxRuntime.jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsxRuntime.jsx("span", { className: "auth-spinner" })) : codeSent ? ('Verify Code') : ('Send Code') }), jsxRuntime.jsx("div", { className: "auth-divider", children: jsxRuntime.jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onBack, disabled: loading, children: "\u2190 Back to login" }) })] }));
 };
 
-const PasswordResetForm = ({ onSubmit, onBack, loading, error, success, successMessage, token, }) => {
+const PasswordResetForm = ({ onSubmit, onBack, loading, error, success, successMessage, token, resetEmail, }) => {
     const [email, setEmail] = React.useState('');
     const [password, setPassword] = React.useState('');
     const [confirmPassword, setConfirmPassword] = React.useState('');
@@ -10856,14 +10856,14 @@ const PasswordResetForm = ({ onSubmit, onBack, loading, error, success, successM
             await onSubmit(email);
         }
     };
-    if (success) {
+    if (success && !error) {
         return (jsxRuntime.jsxs("div", { className: "auth-form", children: [jsxRuntime.jsxs("div", { className: "auth-form-header", children: [jsxRuntime.jsx("div", { style: { textAlign: 'center', marginBottom: '1rem' }, children: jsxRuntime.jsxs("svg", { width: "64", height: "64", viewBox: "0 0 64 64", fill: "none", style: { margin: '0 auto' }, children: [jsxRuntime.jsx("circle", { cx: "32", cy: "32", r: "32", fill: "#10b981", fillOpacity: "0.1" }), jsxRuntime.jsx("path", { d: "M20 32l8 8 16-16", stroke: "#10b981", strokeWidth: "4", strokeLinecap: "round", strokeLinejoin: "round" })] }) }), jsxRuntime.jsx("h2", { className: "auth-form-title", children: token ? 'Password reset!' : 'Check your email' }), jsxRuntime.jsx("p", { className: "auth-form-subtitle", children: token
                                 ? (successMessage || 'Your password has been successfully reset. You can now sign in with your new password.')
                                 : (successMessage || `We've sent password reset instructions to ${email}`) })] }), jsxRuntime.jsx("button", { type: "button", className: "auth-button auth-button-primary", onClick: onBack, children: "Back to Sign in" })] }));
     }
     return (jsxRuntime.jsxs("form", { className: "auth-form", onSubmit: handleSubmit, children: [jsxRuntime.jsxs("div", { className: "auth-form-header", children: [jsxRuntime.jsx("h2", { className: "auth-form-title", children: token ? 'Set new password' : 'Reset your password' }), jsxRuntime.jsx("p", { className: "auth-form-subtitle", children: token
                             ? 'Enter your new password below.'
-                            : "Enter your email address and we'll send you instructions to reset your password." })] }), (error || passwordError) && (jsxRuntime.jsxs("div", { className: "auth-error", role: "alert", children: [jsxRuntime.jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsxRuntime.jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error || passwordError] })), token ? (jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "password", className: "auth-label", children: "New Password" }), jsxRuntime.jsx("input", { type: "password", id: "password", className: "auth-input", value: password, onChange: (e) => setPassword(e.target.value), required: true, disabled: loading, placeholder: "Enter new password", autoComplete: "new-password", minLength: 6 })] }), jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "confirmPassword", className: "auth-label", children: "Confirm Password" }), jsxRuntime.jsx("input", { type: "password", id: "confirmPassword", className: "auth-input", value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), required: true, disabled: loading, placeholder: "Confirm new password", autoComplete: "new-password", minLength: 6 })] })] })) : (jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsxRuntime.jsx("input", { type: "email", id: "email", className: "auth-input", value: email, onChange: (e) => setEmail(e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] })), jsxRuntime.jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsxRuntime.jsx("span", { className: "auth-spinner" })) : token ? ('Reset password') : ('Send reset instructions') }), jsxRuntime.jsx("div", { className: "auth-divider", children: jsxRuntime.jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onBack, disabled: loading, children: "\u2190 Back to Sign in" }) })] }));
+                            : "Enter your email address and we'll send you instructions to reset your password." })] }), (error || passwordError) && (jsxRuntime.jsxs("div", { className: "auth-error", role: "alert", children: [jsxRuntime.jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsxRuntime.jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error || passwordError] })), token ? (jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [resetEmail && (jsxRuntime.jsx("input", { type: "email", value: resetEmail, readOnly: true, autoComplete: "username", style: { position: 'absolute', opacity: 0, height: 0, width: 0, overflow: 'hidden', pointerEvents: 'none' }, tabIndex: -1, "aria-hidden": "true" })), jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "password", className: "auth-label", children: "New Password" }), jsxRuntime.jsx("input", { type: "password", id: "password", className: "auth-input", value: password, onChange: (e) => setPassword(e.target.value), required: true, disabled: loading, placeholder: "Enter new password", autoComplete: "new-password", minLength: 6 })] }), jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "confirmPassword", className: "auth-label", children: "Confirm Password" }), jsxRuntime.jsx("input", { type: "password", id: "confirmPassword", className: "auth-input", value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), required: true, disabled: loading, placeholder: "Confirm new password", autoComplete: "new-password", minLength: 6 })] })] })) : (jsxRuntime.jsxs("div", { className: "auth-form-group", children: [jsxRuntime.jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsxRuntime.jsx("input", { type: "email", id: "email", className: "auth-input", value: email, onChange: (e) => setEmail(e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] })), jsxRuntime.jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsxRuntime.jsx("span", { className: "auth-spinner" })) : token ? ('Reset password') : ('Send reset instructions') }), jsxRuntime.jsx("div", { className: "auth-divider", children: jsxRuntime.jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onBack, disabled: loading, children: "\u2190 Back to Sign in" }) })] }));
 };
 
 const MagicLinkForm = ({ onSubmit, onCancel, loading = false, error, }) => {
@@ -10969,14 +10969,46 @@ class AuthAPI {
         return smartlinks__namespace.authKit.verifyPhoneCode(this.clientId, phoneNumber, code);
     }
     async requestPasswordReset(email, redirectUrl) {
-        return smartlinks__namespace.authKit.requestPasswordReset(this.clientId, {
-            email,
-            redirectUrl,
-            clientName: this.clientName
-        });
+        console.log('[AuthKit:API] requestPasswordReset called', { clientId: this.clientId, email, redirectUrl });
+        try {
+            const result = await smartlinks__namespace.authKit.requestPasswordReset(this.clientId, {
+                email,
+                redirectUrl,
+                clientName: this.clientName
+            });
+            console.log('[AuthKit:API] requestPasswordReset resolved:', JSON.stringify(result));
+            return result;
+        }
+        catch (error) {
+            const err = error;
+            console.error('[AuthKit:API] requestPasswordReset threw:', {
+                type: typeof error,
+                message: err?.message,
+                statusCode: err?.statusCode ?? err?.response?.status,
+                errorCode: err?.errorCode ?? err?.details?.errorCode,
+                details: err?.details ?? err?.response?.data,
+                keys: err ? Object.keys(err) : [],
+            });
+            throw error;
+        }
     }
     async verifyResetToken(token) {
-        return smartlinks__namespace.authKit.verifyResetToken(this.clientId, token);
+        console.log('[AuthKit:API] verifyResetToken called');
+        try {
+            const result = await smartlinks__namespace.authKit.verifyResetToken(this.clientId, token);
+            console.log('[AuthKit:API] verifyResetToken resolved:', JSON.stringify(result));
+            return result;
+        }
+        catch (error) {
+            const err = error;
+            console.error('[AuthKit:API] verifyResetToken threw:', {
+                type: typeof error,
+                message: err?.message,
+                statusCode: err?.statusCode ?? err?.response?.status,
+                errorCode: err?.errorCode ?? err?.details?.errorCode,
+            });
+            throw error;
+        }
     }
     async completePasswordReset(token, newPassword) {
         return smartlinks__namespace.authKit.completePasswordReset(this.clientId, token, newPassword);
@@ -11012,7 +11044,6 @@ class AuthAPI {
             this.log.warn('Failed to fetch UI config, using defaults:', error);
             return {
                 branding: {
-                    title: 'Smartlinks Auth',
                     subtitle: 'Sign in to your account',
                     primaryColor: '#3B82F6',
                     secondaryColor: '#1D4ED8',
@@ -12408,6 +12439,10 @@ function getFriendlyErrorMessage(error) {
     if (isApiErrorLike(error)) {
         // First, check for specific error code (most precise)
         const errorCode = error.errorCode || error.details?.errorCode || error.details?.error;
+        // For rate-limit errors, prefer the backend's message as it includes specific wait times
+        if (errorCode === 'RATE_LIMIT_EXCEEDED' && error.message && error.message !== '[object Object]') {
+            return error.message;
+        }
         if (errorCode && ERROR_CODE_MESSAGES[errorCode]) {
             return ERROR_CODE_MESSAGES[errorCode];
         }
@@ -12415,6 +12450,10 @@ function getFriendlyErrorMessage(error) {
         if (error.statusCode >= 500) {
             return 'Server error. Please try again later.';
         }
+        // For 429 status, prefer backend message (may include wait time)
+        if (error.statusCode === 429 && error.message && error.message !== '[object Object]') {
+            return error.message;
+        }
         if (STATUS_MESSAGES[error.statusCode]) {
             return STATUS_MESSAGES[error.statusCode];
         }
@@ -12541,7 +12580,7 @@ function requiresEmailVerification(error) {
 }
 
 // VERSION: Update this when making changes to help identify which version is running
-const AUTH_UI_VERSION = '45';
+const AUTH_UI_VERSION = '46';
 const LOG_PREFIX = `[SmartlinksAuthUI:v${AUTH_UI_VERSION}]`;
 // Helper to check for URL auth params synchronously (runs during initialization)
 // This prevents the form from flashing before detecting deep-link flows
@@ -12565,6 +12604,24 @@ const getExpirationFromResponse = (response) => {
         return Date.now() + response.expiresIn;
     return undefined; // Will use 7-day default in tokenStorage
 };
+const getActionResultErrorMessage = (result) => {
+    if (!result || typeof result !== 'object')
+        return null;
+    const candidate = result;
+    const numericStatusCode = typeof candidate.statusCode === 'string'
+        ? Number(candidate.statusCode)
+        : candidate.statusCode;
+    const hasFailureStatus = typeof numericStatusCode === 'number' && !Number.isNaN(numericStatusCode) && numericStatusCode >= 400;
+    const isFailure = candidate.success === false || candidate.ok === false || !!candidate.errorCode || hasFailureStatus;
+    if (!isFailure)
+        return null;
+    return getFriendlyErrorMessage({
+        statusCode: hasFailureStatus ? numericStatusCode : 400,
+        errorCode: candidate.errorCode,
+        message: candidate.message || 'Request failed. Please try again.',
+        details: candidate.details,
+    });
+};
 // Default Smartlinks Google OAuth Client ID (public - safe to expose)
 const DEFAULT_GOOGLE_CLIENT_ID = '696509063554-jdlbjl8vsjt7cr0vgkjkjf3ffnvi3a70.apps.googleusercontent.com';
 // Default Google OAuth proxy URL (hosted on our whitelisted domain)
@@ -12740,7 +12797,7 @@ const checkSilentGoogleSignIn = async (clientId, googleClientId) => {
     });
 };
 // getFriendlyErrorMessage is now imported from ../utils/errorHandling
-const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAuthSuccess, onAuthError, onRedirect, enabledProviders = ['email', 'google', 'phone'], initialMode, signupProminence, redirectUrl, theme = 'auto', className, customization, skipConfigFetch = false, minimal = false, logger, proxyMode = false, collectionId, disableConfigCache = false, enableSilentGoogleSignIn = false, }) => {
+const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAuthSuccess, onAuthError, onRedirect, enabledProviders = ['email', 'google', 'phone'], initialMode, signupProminence, redirectUrl, theme = 'light', className, customization, skipConfigFetch = false, minimal = false, logger, proxyMode = false, collectionId, disableConfigCache = false, enableSilentGoogleSignIn = false, }) => {
     // Resolve signup prominence from props, customization, config, or default
     const resolvedSignupProminence = signupProminence || customization?.signupProminence || 'minimal';
     // Determine initial mode based on signupProminence setting
@@ -13099,10 +13156,9 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 log.log('Verifying reset token:', token);
                 // Verify token is valid, then show password reset form
                 const verifyResult = await api.verifyResetToken(token);
-                log.log('Reset token verification result:', { valid: verifyResult.valid, hasEmail: !!verifyResult.email, message: verifyResult.message });
-                // Check if token is valid before proceeding
-                if (!verifyResult.valid) {
-                    throw new Error(verifyResult.message || 'Invalid or expired token');
+                // Guard against undefined result (proxy mode may resolve without data)
+                if (!verifyResult || !verifyResult.valid) {
+                    throw new Error(verifyResult?.message || 'Invalid or expired token');
                 }
                 setUrlAuthProcessing(false); // Clear processing state - showing reset form
                 setResetToken(token); // Store token for use in password reset
@@ -13380,17 +13436,46 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             return;
         setLoading(true);
         setError(undefined);
+        setAuthSuccess(false);
+        setResetSuccess(false);
+        setSuccessMessage(undefined);
+        setShowResendVerification(false);
         try {
             const result = await api.requestPasswordReset(resetRequestEmail, getRedirectUrl());
-            // Use resetSuccess (not authSuccess) to show password reset confirmation, not "Login successful"
+            const resultError = getActionResultErrorMessage(result);
+            if (resultError) {
+                setAuthSuccess(false);
+                setResetSuccess(false);
+                setSuccessMessage(undefined);
+                setError(resultError);
+                setShowRequestNewReset(true);
+                return;
+            }
+            const resultAny = result;
+            const isConfirmedSuccess = result && (resultAny.success === true ||
+                resultAny.ok === true ||
+                (resultAny.message && !resultAny.errorCode && !resultAny.statusCode));
+            if (!isConfirmedSuccess) {
+                setAuthSuccess(false);
+                setResetSuccess(false);
+                setSuccessMessage(undefined);
+                setError(resultAny?.message || 'Unable to send password reset email. Please try again.');
+                setShowRequestNewReset(true);
+                return;
+            }
+            setAuthSuccess(false);
+            setMode('reset-password');
             setResetSuccess(true);
-            // Use backend message if available, otherwise default
             setSuccessMessage(result?.message || 'Password reset email sent! Please check your inbox.');
             setShowRequestNewReset(false);
             setResetRequestEmail('');
         }
         catch (err) {
+            setAuthSuccess(false);
+            setResetSuccess(false);
+            setSuccessMessage(undefined);
             setError(getFriendlyErrorMessage(err));
+            setShowRequestNewReset(true);
             onAuthError?.(err instanceof Error ? err : new Error(getFriendlyErrorMessage(err)));
         }
         finally {
@@ -13717,9 +13802,13 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     client_id: googleClientId,
                     origin: window.location.origin,
                 });
+                // Track whether the credential callback has fired (user selected an account)
+                // so we don't show the "blocked" fallback when the prompt closes after a successful selection
+                let credentialCallbackFired = false;
                 google.accounts.id.initialize({
                     client_id: googleClientId,
                     callback: async (response) => {
+                        credentialCallbackFired = true;
                         try {
                             const idToken = response.credential;
                             const authResponse = await api.loginWithGoogle(idToken);
@@ -13747,23 +13836,29 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     cancel_on_tap_outside: true,
                     use_fedcm_for_prompt: true, // Enable FedCM for future browser compatibility
                 });
-                // Use timeout fallback — if no prompt interaction after 5s, assume FedCM was blocked
+                // Use timeout fallback — if no prompt interaction after 15s, assume FedCM was blocked
+                // (15s gives users enough time to choose a Google account from the picker)
                 const promptTimeout = setTimeout(() => {
+                    if (credentialCallbackFired)
+                        return; // Auth is already in progress, don't show fallback
                     log.log('Google OneTap prompt timed out — FedCM may be blocked or unavailable');
                     setGoogleFallbackToPopup(true);
                     setLoading(false);
-                }, 5000);
+                }, 15000);
                 google.accounts.id.prompt((notification) => {
                     clearTimeout(promptTimeout);
+                    // If the credential callback already fired, the user successfully selected an account
+                    // The prompt closing with 'dismissed' is expected — don't show fallback
+                    if (credentialCallbackFired) {
+                        log.log('Google OneTap prompt closed after credential selection — ignoring');
+                        return;
+                    }
                     // Check for FedCM/OneTap dismissal or blocking
-                    // notification may have getMomentType(), getDismissedReason(), getSkippedReason()
                     const momentType = notification?.getMomentType?.();
                     const dismissedReason = notification?.getDismissedReason?.();
                     const skippedReason = notification?.getSkippedReason?.();
                     log.log('Google OneTap prompt notification:', { momentType, dismissedReason, skippedReason });
                     if (momentType === 'skipped' || momentType === 'dismissed') {
-                        // User dismissed the prompt, or browser blocked it (FedCM disabled)
-                        // Offer popup flow as alternative
                         log.log('Google OneTap was dismissed/skipped, offering popup fallback');
                         setGoogleFallbackToPopup(true);
                     }
@@ -13825,6 +13920,9 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
     const handlePasswordReset = async (emailOrPassword, confirmPassword) => {
         setLoading(true);
         setError(undefined);
+        setAuthSuccess(false);
+        setResetSuccess(false);
+        setSuccessMessage(undefined);
         const effectiveRedirectUrl = getRedirectUrl();
         try {
             if (resetToken && confirmPassword) {
@@ -13833,6 +13931,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 // Auto-login with the new password if we have the email
                 if (resetEmail) {
                     try {
+                        log.log('Auto-login after password reset for:', resetEmail);
                         const loginResponse = await api.login(resetEmail, emailOrPassword);
                         if (loginResponse.token) {
                             await auth.login(loginResponse.token, loginResponse.user, loginResponse.accountData, false);
@@ -13845,9 +13944,12 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                         }
                     }
                     catch (loginErr) {
-                        // Auto-login failed, fall back to showing success message
+                        log.warn('Auto-login after password reset failed, requiring manual login:', loginErr);
                     }
                 }
+                else {
+                    log.warn('No resetEmail available for auto-login after password reset');
+                }
                 // Fallback: show success but require manual login
                 setResetSuccess(true);
                 setSuccessMessage('Password reset successful! Please sign in with your new password.');
@@ -13857,14 +13959,35 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             else {
                 // Request password reset email
                 const result = await api.requestPasswordReset(emailOrPassword, effectiveRedirectUrl);
+                const resultError = getActionResultErrorMessage(result);
+                if (resultError) {
+                    setAuthSuccess(false);
+                    setResetSuccess(false);
+                    setSuccessMessage(undefined);
+                    setError(resultError);
+                    return;
+                }
+                const resultAny = result;
+                const isConfirmedSuccess = result && (resultAny.success === true ||
+                    resultAny.ok === true ||
+                    (resultAny.message && !resultAny.errorCode && !resultAny.statusCode));
+                if (!isConfirmedSuccess) {
+                    setAuthSuccess(false);
+                    setResetSuccess(false);
+                    setSuccessMessage(undefined);
+                    setError(resultAny?.message || 'Unable to send password reset email. Please try again.');
+                    return;
+                }
                 setResetSuccess(true);
-                // Use backend message if available
                 if (result?.message) {
                     setSuccessMessage(result.message);
                 }
             }
         }
         catch (err) {
+            setAuthSuccess(false);
+            setResetSuccess(false);
+            setSuccessMessage(undefined);
             setError(getFriendlyErrorMessage(err));
             onAuthError?.(err instanceof Error ? err : new Error(getFriendlyErrorMessage(err)));
         }
@@ -13928,7 +14051,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 setResetToken(undefined); // Clear token when going back
                 setResetEmail(undefined); // Clear email when going back
                 setSuccessMessage(undefined); // Clear success message
-            }, loading: loading, error: error, success: resetSuccess, successMessage: successMessage, token: resetToken })) : (mode === 'login' || mode === 'register') ? (jsxRuntime.jsx(jsxRuntime.Fragment, { children: showResendVerification ? (jsxRuntime.jsxs("div", { style: {
+            }, loading: loading, error: error, success: resetSuccess, successMessage: successMessage, token: resetToken, resetEmail: resetEmail })) : (mode === 'login' || mode === 'register') ? (jsxRuntime.jsx(jsxRuntime.Fragment, { children: showResendVerification ? (jsxRuntime.jsxs("div", { style: {
                     marginTop: '1rem',
                     padding: '1.5rem',
                     backgroundColor: config?.branding?.inheritHostStyles
@@ -14026,7 +14149,16 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                             color: config?.branding?.inheritHostStyles
                                 ? 'hsl(var(--foreground, 215 25% 15%))'
                                 : (resolvedTheme === 'dark' ? '#f1f5f9' : '#374151')
-                        }, children: "Password Reset Link Expired" }), jsxRuntime.jsx("p", { style: {
+                        }, children: "Password Reset Link Expired" }), error && (jsxRuntime.jsx("div", { style: {
+                            marginBottom: '1rem',
+                            padding: '0.75rem',
+                            backgroundColor: resolvedTheme === 'dark' ? 'rgba(239, 68, 68, 0.15)' : 'rgba(239, 68, 68, 0.1)',
+                            border: `1px solid ${resolvedTheme === 'dark' ? 'rgba(239, 68, 68, 0.3)' : 'rgba(239, 68, 68, 0.2)'}`,
+                            borderRadius: '0.375rem',
+                            color: resolvedTheme === 'dark' ? '#fca5a5' : '#dc2626',
+                            fontSize: '0.875rem',
+                            lineHeight: '1.5',
+                        }, children: error })), jsxRuntime.jsx("p", { style: {
                             marginBottom: '1rem',
                             fontSize: '0.875rem',
                             color: config?.branding?.inheritHostStyles
@@ -14162,6 +14294,11 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                         const emailDisplayMode = config?.emailDisplayMode || 'form';
                         const providerOrder = config?.providerOrder || (config?.enabledProviders || enabledProviders);
                         const actualProviders = config?.enabledProviders || enabledProviders;
+                        const hasEmailProvider = actualProviders.includes('email');
+                        // If email provider is not enabled, only show provider buttons (no email/password form)
+                        if (!hasEmailProvider) {
+                            return (jsxRuntime.jsx(ProviderButtons, { enabledProviders: actualProviders, providerOrder: providerOrder, onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }));
+                        }
                         // Button mode: show provider selection first, then email form if email is selected
                         if (emailDisplayMode === 'button' && !showEmailForm) {
                             return (jsxRuntime.jsx(ProviderButtons, { enabledProviders: actualProviders, providerOrder: providerOrder, onEmailLogin: () => setShowEmailForm(true), onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }));
@@ -14183,7 +14320,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                                         setShowResendVerification(false);
                                         setShowRequestNewReset(false);
                                         setError(undefined);
-                                    }, onForgotPassword: () => setMode('reset-password'), loading: loading, error: error, signupProminence: resolvedSignupProminence, schema: contactSchema, registrationFieldsConfig: config?.registrationFields, additionalFields: config?.signupAdditionalFields }), emailDisplayMode === 'form' && actualProviders.length > 1 && (jsxRuntime.jsx(ProviderButtons, { enabledProviders: actualProviders.filter((p) => p !== 'email'), providerOrder: providerOrder, onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }))] }));
+                                    }, onForgotPassword: () => setMode('reset-password'), loading: loading, error: error, signupProminence: resolvedSignupProminence, signupRedirectUrl: config?.signupRedirectUrl || customization?.signupRedirectUrl, schema: contactSchema, registrationFieldsConfig: config?.registrationFields, additionalFields: config?.signupAdditionalFields }), emailDisplayMode === 'form' && actualProviders.length > 1 && (jsxRuntime.jsx(ProviderButtons, { enabledProviders: actualProviders.filter((p) => p !== 'email'), providerOrder: providerOrder, onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }))] }));
                     })()] })) })) : null }));
 };