@redacto.io/consent-sdk-react 9.4.0 → 9.5.0-beta.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @redacto.io/consent-sdk-react
 
+## 9.5.0-beta.0
+
+### Minor Changes
+
+- fix(privacy-center): resolve mobile/org_user_id as contact for mobile-only logins
+
 ## 9.4.0
 
 ### Minor Changes

package/dist/privacy-center.js

@@ -9271,6 +9271,14 @@ var decodeJwtToken = (token) => {
     return null;
   }
 };
+var resolveContactFromJwt = (decoded) => {
+  if (!decoded) {
+    return null;
+  }
+  const userData = decoded.user_data || {};
+  const candidate = decoded.contact || decoded.primary_email || userData.primary_email || userData.primary_mobile || userData.org_user_id;
+  return typeof candidate === "string" && candidate.trim() !== "" ? candidate : null;
+};
 var isJwtExpired = (token, bufferSeconds = 5 * 60) => {
   if (!token || typeof token !== "string") {
     return true;
@@ -9998,9 +10006,9 @@ var syncJwtDataToSessionStorage = (accessToken) => {
   if (!decoded) {
     return;
   }
-  const email = decoded.contact || decoded.primary_email || sessionStorage.getItem("email") || (typeof localStorage !== "undefined" ? localStorage.getItem("userEmail") : null);
-  if (email && typeof email === "string") {
-    sessionStorage.setItem("email", email);
+  const contact = resolveContactFromJwt(decoded) || sessionStorage.getItem("email") || (typeof localStorage !== "undefined" ? localStorage.getItem("userEmail") : null);
+  if (contact && typeof contact === "string") {
+    sessionStorage.setItem("email", contact);
   }
   const orgUuid = decoded.organisation_uuid;
   if (orgUuid && typeof orgUuid === "string") {
@@ -15145,9 +15153,9 @@ function PrivacyCenterLayout({ children, slug, onBack }) {
         if (orgId) sessionStorage.setItem("pc_org_id", orgId);
         if (workspaceId) sessionStorage.setItem("pc_workspace_id", workspaceId);
         if (orgSlug) sessionStorage.setItem("pc_org_slug", orgSlug);
-        const email = decoded.contact || decoded.primary_email;
-        if (email && typeof email === "string") {
-          sessionStorage.setItem("email", email);
+        const contact = resolveContactFromJwt(decoded);
+        if (contact) {
+          sessionStorage.setItem("email", contact);
         }
       }
     }

package/dist/privacy-center.mjs

@@ -9205,6 +9205,14 @@ var decodeJwtToken = (token) => {
     return null;
   }
 };
+var resolveContactFromJwt = (decoded) => {
+  if (!decoded) {
+    return null;
+  }
+  const userData = decoded.user_data || {};
+  const candidate = decoded.contact || decoded.primary_email || userData.primary_email || userData.primary_mobile || userData.org_user_id;
+  return typeof candidate === "string" && candidate.trim() !== "" ? candidate : null;
+};
 var isJwtExpired = (token, bufferSeconds = 5 * 60) => {
   if (!token || typeof token !== "string") {
     return true;
@@ -9932,9 +9940,9 @@ var syncJwtDataToSessionStorage = (accessToken) => {
   if (!decoded) {
     return;
   }
-  const email = decoded.contact || decoded.primary_email || sessionStorage.getItem("email") || (typeof localStorage !== "undefined" ? localStorage.getItem("userEmail") : null);
-  if (email && typeof email === "string") {
-    sessionStorage.setItem("email", email);
+  const contact = resolveContactFromJwt(decoded) || sessionStorage.getItem("email") || (typeof localStorage !== "undefined" ? localStorage.getItem("userEmail") : null);
+  if (contact && typeof contact === "string") {
+    sessionStorage.setItem("email", contact);
   }
   const orgUuid = decoded.organisation_uuid;
   if (orgUuid && typeof orgUuid === "string") {
@@ -15085,9 +15093,9 @@ function PrivacyCenterLayout({ children, slug, onBack }) {
         if (orgId) sessionStorage.setItem("pc_org_id", orgId);
         if (workspaceId) sessionStorage.setItem("pc_workspace_id", workspaceId);
         if (orgSlug) sessionStorage.setItem("pc_org_slug", orgSlug);
-        const email = decoded.contact || decoded.primary_email;
-        if (email && typeof email === "string") {
-          sessionStorage.setItem("email", email);
+        const contact = resolveContactFromJwt(decoded);
+        if (contact) {
+          sessionStorage.setItem("email", contact);
         }
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redacto.io/consent-sdk-react",
-  "version": "9.4.0",
+  "version": "9.5.0-beta.0",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",

package/src/RedactoPrivacyCenter/PrivacyCenterLayout.tsx

@@ -5,6 +5,7 @@ import type { OrganizationDetail } from './lib/types';
 import {
   checkAndRefreshAuth,
   decodeJwtToken,
+  resolveContactFromJwt,
 } from './lib/utils';
 import { useBaseUrl } from './context/BaseUrlContext';
 import { useAuth } from './context/AuthContext';
@@ -56,10 +57,11 @@ export function PrivacyCenterLayout({ children, slug, onBack }: PrivacyCenterLay
         if (workspaceId) sessionStorage.setItem('pc_workspace_id', workspaceId);
         if (orgSlug) sessionStorage.setItem('pc_org_slug', orgSlug);
 
-        // Extract and set email from JWT for sidebar and consent manager
-        const email = decoded.contact || decoded.primary_email;
-        if (email && typeof email === 'string') {
-          sessionStorage.setItem('email', email);
+        // Resolve the contact identifier (email, or mobile/org_user_id for
+        // mobile-only logins) for the sidebar and consent manager.
+        const contact = resolveContactFromJwt(decoded);
+        if (contact) {
+          sessionStorage.setItem('email', contact);
         }
       }
     }

package/src/RedactoPrivacyCenter/context/AuthContext.tsx

@@ -1,5 +1,5 @@
 import { createContext, useContext, useState, useEffect, useCallback, useMemo, type ReactNode } from 'react';
-import { setRefreshTokenCookie, decodeJwtToken, setSessionExpiredListener } from '../lib/utils';
+import { setRefreshTokenCookie, decodeJwtToken, resolveContactFromJwt, setSessionExpiredListener } from '../lib/utils';
 import type { AuthContextValue } from './types';
 
 export type { AuthContextValue } from './types';
@@ -25,12 +25,14 @@ const syncJwtDataToSessionStorage = (accessToken: string): void => {
     return;
   }
 
-  // Extract email from JWT (contact or primary_email), fall back to existing sources
-  const email = decoded.contact || decoded.primary_email
+  // Resolve the user's contact identifier (email, or mobile/org_user_id for
+  // mobile-only logins) so case + consent-management actions have a subject.
+  // Falls back to previously stored values when the token omits identifiers.
+  const contact = resolveContactFromJwt(decoded)
     || sessionStorage.getItem('email')
     || (typeof localStorage !== 'undefined' ? localStorage.getItem('userEmail') : null);
-  if (email && typeof email === 'string') {
-    sessionStorage.setItem('email', email);
+  if (contact && typeof contact === 'string') {
+    sessionStorage.setItem('email', contact);
   }
 
   // Extract organization UUID

package/src/RedactoPrivacyCenter/lib/utils.ts

@@ -244,6 +244,34 @@ export const decodeJwtToken = (token: string): { organisation_uuid?: string; org
   }
 };
 
+/**
+ * Resolve the user's contact identifier from a decoded JWT.
+ *
+ * Identifiers live under `user_data` (primary_email / primary_mobile /
+ * org_user_id); some token shapes also expose `contact`/`primary_email` at the
+ * top level. Email is preferred, but a mobile-only login must still resolve to
+ * the phone (or org_user_id) so case/grievance and consent-management actions —
+ * which key off this contact — work without an email. The backend matches
+ * identifiers type-aware (phone-to-phone), so storing the mobile here is safe.
+ */
+export const resolveContactFromJwt = (
+  decoded: { [key: string]: any } | null,
+): string | null => {
+  if (!decoded) {
+    return null;
+  }
+  const userData = (decoded.user_data as Record<string, unknown>) || {};
+  const candidate =
+    decoded.contact ||
+    decoded.primary_email ||
+    userData.primary_email ||
+    userData.primary_mobile ||
+    userData.org_user_id;
+  return typeof candidate === 'string' && candidate.trim() !== ''
+    ? candidate
+    : null;
+};
+
 /**
  * Decode JWT payload and check if token is expired or will expire soon
  * @param token - JWT token string

package/tests/resolveContactFromJwt.test.ts

@@ -0,0 +1,44 @@
+import { describe, expect, it } from 'vitest';
+
+import { resolveContactFromJwt } from '../src/RedactoPrivacyCenter/lib/utils';
+
+describe('resolveContactFromJwt', () => {
+  it('prefers the email when present in user_data', () => {
+    const decoded = {
+      user_data: {
+        primary_email: 'user@example.com',
+        primary_mobile: '+918955610253',
+        org_user_id: '+918955610253',
+      },
+    };
+    expect(resolveContactFromJwt(decoded)).toBe('user@example.com');
+  });
+
+  it('falls back to the mobile for a mobile-only login (no email)', () => {
+    const decoded = {
+      user_data: {
+        primary_email: null,
+        primary_mobile: '+918955610253',
+        org_user_id: '+918955610253',
+      },
+    };
+    expect(resolveContactFromJwt(decoded)).toBe('+918955610253');
+  });
+
+  it('falls back to org_user_id when neither email nor mobile is present', () => {
+    const decoded = { user_data: { org_user_id: 'ucid-123' } };
+    expect(resolveContactFromJwt(decoded)).toBe('ucid-123');
+  });
+
+  it('reads top-level contact / primary_email when not nested', () => {
+    expect(resolveContactFromJwt({ contact: 'a@b.com' })).toBe('a@b.com');
+    expect(resolveContactFromJwt({ primary_email: 'c@d.com' })).toBe('c@d.com');
+  });
+
+  it('returns null for missing, empty, or whitespace identifiers', () => {
+    expect(resolveContactFromJwt(null)).toBeNull();
+    expect(resolveContactFromJwt({})).toBeNull();
+    expect(resolveContactFromJwt({ user_data: {} })).toBeNull();
+    expect(resolveContactFromJwt({ user_data: { primary_mobile: '   ' } })).toBeNull();
+  });
+});