@proveanything/smartlinks-auth-ui 0.4.9 → 0.4.11

package/dist/index.js

@@ -11336,10 +11336,11 @@ class AuthAPI {
             throw err;
         }
     }
-    async sendMagicLink(email, redirectUrl) {
+    async sendMagicLink(email, redirectUrl, displayName) {
         return smartlinks__namespace.authKit.sendMagicLink(this.clientId, {
             email,
-            redirectUrl
+            redirectUrl,
+            accountData: displayName ? { displayName } : undefined,
         });
     }
     async verifyMagicLink(token) {
@@ -12670,7 +12671,9 @@ const WHITELISTED_GOOGLE_OAUTH_HOSTS = [
 ];
 /**
  * Check if the current domain is whitelisted for direct Google OAuth.
- * Uses exact hostname match (plus subdomain match for smartlinks.app production).
+ * Uses EXACT hostname match only — subdomains (e.g. hubdev.smartlinks.app)
+ * are NOT auto-whitelisted because they're not registered with Google Cloud Console.
+ * Unregistered domains must route through the Google OAuth proxy.
  * Merges the hardcoded list with any additional domains from auth kit config.
  * Returns true if OneTap/inline flow can work without a proxy.
  */
@@ -12679,7 +12682,7 @@ const isWhitelistedGoogleDomain = (additionalDomains) => {
     const allDomains = additionalDomains?.length
         ? [...WHITELISTED_GOOGLE_OAUTH_HOSTS, ...additionalDomains]
         : WHITELISTED_GOOGLE_OAUTH_HOSTS;
-    return allDomains.some(domain => hostname === domain || hostname.endsWith(`.${domain}`));
+    return allDomains.some(domain => hostname === domain);
 };
 // Default auth UI configuration when no clientId is provided
 const DEFAULT_AUTH_CONFIG = {
@@ -14035,9 +14038,8 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         setLoading(true);
         setError(undefined);
         try {
-            // Ensure account exists before sending magic link (creates if new, no-op if exists)
-            await api.ensureAccount({ email, displayName });
-            await api.sendMagicLink(email, getRedirectUrl());
+            // Send magic link - backend handles account creation automatically on verify
+            await api.sendMagicLink(email, getRedirectUrl(), displayName);
             setAuthSuccess(true);
             setSuccessMessage('Magic link sent! Check your email to log in.');
         }