@proveanything/smartlinks-auth-ui 0.6.1 → 0.6.2

package/dist/index.js

@@ -14143,7 +14143,13 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             if (urlMode === 'verifyEmail') {
                 log.log('Verifying email with token:', token);
                 const response = await api.verifyEmailWithToken(token);
-                log.log('Email verification response:', { hasToken: !!response.token, hasUser: !!response.user, emailVerificationMode: response.emailVerificationMode, isNewUser: response.isNewUser });
+                log.log('Email verification response:', { hasToken: !!response?.token, hasUser: !!response?.user, emailVerificationMode: response?.emailVerificationMode, isNewUser: response?.isNewUser });
+                // Detect resolved-error shapes (proxy mode serializes errors instead of throwing).
+                // Common case: sign-up intent claim / verification token already consumed → route to login.
+                const resolvedErrorMessage = getActionResultErrorMessage(response);
+                if (resolvedErrorMessage || !response) {
+                    throw new Error(resolvedErrorMessage || 'This verification link has already been used or has expired.');
+                }
                 // Get email verification mode from response or config
                 const verificationMode = response.emailVerificationMode || config?.emailVerification?.mode || 'verify-auto-login';
                 if ((verificationMode === 'verify-auto-login' || verificationMode === 'immediate') && response.token) {
@@ -14205,7 +14211,12 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             else if (urlMode === 'magicLink') {
                 log.log('Verifying magic link token:', token);
                 const response = await api.verifyMagicLink(token);
-                log.log('Magic link verification response:', { hasToken: !!response.token, hasUser: !!response.user, isNewUser: response.isNewUser });
+                log.log('Magic link verification response:', { hasToken: !!response?.token, hasUser: !!response?.user, isNewUser: response?.isNewUser });
+                // Detect resolved-error shapes (proxy mode serializes errors instead of throwing).
+                const resolvedMagicError = getActionResultErrorMessage(response);
+                if (resolvedMagicError || !response) {
+                    throw new Error(resolvedMagicError || 'This magic link has already been used or has expired.');
+                }
                 // Auto-login with magic link if token is provided
                 if (response.token) {
                     // Always await - auth.login now waits for parent ack automatically in iframe mode