@rift-finance/react 0.1.1 → 0.1.3

package/README.md

@@ -112,11 +112,18 @@ interface RiftUser {
 }
 ```
 
-## Configuring Google sign-in
+## Auth methods
 
-1. Create an OAuth 2.0 Client ID in Google Cloud Console for your domain.
-2. Paste it into your project's **Auth** tab in the Rift dashboard.
-3. The widget refetches its config on next load — the Google button shows up automatically.
+Email + phone OTP work out of the box — no setup, Rift handles the code delivery. Google sign-in is opt-in: **you** register your own Google OAuth Client ID (not Rift's), then paste it into your project's **Auth** tab in the Rift dashboard. The widget reads it from your project config and uses it on the client; Rift's backend verifies each token's `aud` against your project's allowlist (so one project's tokens can't be replayed against another).
+
+```
+1. Google Cloud Console → APIs & Services → Credentials → Create OAuth 2.0 Client ID
+2. Authorized origins: https://yoursite.com
+3. Copy the Client ID
+4. Rift dashboard → your project → Auth → paste it → Save
+```
+
+Apple Sign In follows the same pattern.
 
 ## Self-hosting the widget
 

package/dist/RiftAuth.d.ts

@@ -0,0 +1,14 @@
+import { RiftUser } from './types';
+interface RiftAuthProps {
+    onSuccess?: (user: RiftUser) => void;
+    onError?: (message: string) => void;
+    onClose?: () => void;
+}
+/**
+ * Renders the modal backdrop + iframe whenever the provider's `isOpen` is
+ * true. Place this once near the root of your app (typically just inside
+ * <RiftProvider>); call `useRift().open()` to show it.
+ */
+export declare function RiftAuth({ onSuccess, onError, onClose }: RiftAuthProps): import("react/jsx-runtime").JSX.Element | null;
+export {};
+//# sourceMappingURL=RiftAuth.d.ts.map

package/dist/RiftAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RiftAuth.d.ts","sourceRoot":"","sources":["../src/RiftAuth.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,UAAU,aAAa;IAErB,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC;IACrC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,aAAa,kDAoFtE"}

package/dist/RiftProvider.d.ts

@@ -0,0 +1,34 @@
+import { ReactNode } from 'react';
+import { RiftConfig, RiftMode, RiftUser } from './types';
+interface RiftContextValue {
+    apiKey: string;
+    widgetUrl: string;
+    user: RiftUser | null;
+    isOpen: boolean;
+    isReady: boolean;
+    error: string | null;
+    open: (opts?: {
+        mode?: RiftMode;
+    }) => void;
+    close: () => void;
+    signOut: () => Promise<void>;
+    /**
+     * Returns a valid access token, refreshing silently if the current
+     * one is missing or about to expire. Rejects if the user is signed
+     * out or the refresh fails (in which case state is cleared and the
+     * caller should prompt re-auth).
+     */
+    getAccessToken: () => Promise<string>;
+    _iframeSrc: string;
+    _iframeHeight: number;
+    _onIframeLoad: () => void;
+}
+export declare function useRiftContext(): RiftContextValue;
+interface RiftProviderProps extends RiftConfig {
+    children: ReactNode;
+    autoOpen?: boolean;
+    persist?: boolean;
+}
+export declare function RiftProvider({ apiKey, widgetUrl, children, autoOpen, persist, }: RiftProviderProps): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=RiftProvider.d.ts.map

package/dist/RiftProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RiftProvider.d.ts","sourceRoot":"","sources":["../src/RiftProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EAAE,UAAU,EAAa,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAuBzE,UAAU,gBAAgB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3C,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B;;;;;OAKG;IACH,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,IAAI,CAAC;CAC3B;AAID,wBAAgB,cAAc,IAAI,gBAAgB,CAQjD;AAED,UAAU,iBAAkB,SAAQ,UAAU;IAC5C,QAAQ,EAAE,SAAS,CAAC;IAGpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAInB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAsBD,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,SAAS,EACT,QAAQ,EACR,QAAgB,EAChB,OAAc,GACf,EAAE,iBAAiB,2CA8PnB"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { RiftProvider } from './RiftProvider';
+export { RiftAuth } from './RiftAuth';
+export { useRift } from './useRift';
+export type { RiftUser, RiftConfig, RiftMode, RiftEvent } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC"}

package/dist/silentRefresh.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Silent-refresh bridge.
+ *
+ * The v2 backend session sits behind an httpOnly refresh cookie scoped
+ * to the widget origin (widget.riftfi.xyz → service.riftfi.xyz). The
+ * cookie cannot be read or sent from the merchant's own JS — only
+ * widget-origin code can use it. So to refresh, we mount a HIDDEN
+ * widget iframe in `?headless=1` mode and ask it (via postMessage) to
+ * call /auth/refresh on our behalf. It posts the new access token back.
+ *
+ * This module owns that iframe as a singleton: we lazily create it on
+ * the first refresh request, keep it alive across the page's lifetime,
+ * and use a requestId-based pending map so concurrent refresh calls
+ * dedupe to one network round trip.
+ */
+export interface RefreshSuccess {
+    accessToken: string;
+    expiresAt: string;
+    expiresIn: number;
+}
+export declare function silentRefresh(opts: {
+    apiKey: string;
+    widgetUrl: string;
+}): Promise<RefreshSuccess>;
+export declare function silentLogout(opts: {
+    apiKey: string;
+    widgetUrl: string;
+}): Promise<void>;
+//# sourceMappingURL=silentRefresh.d.ts.map

package/dist/silentRefresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"silentRefresh.d.ts","sourceRoot":"","sources":["../src/silentRefresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAaH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAsFD,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CAoB1B;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB"}

package/dist/types.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The durable identity of an authenticated user. Note: in v2 session mode
+ * `accessToken` is short-lived (~1h). Consumers should call
+ * `getAccessToken()` from `useRift()` rather than reading `user.accessToken`
+ * directly when making API calls — that getter transparently refreshes
+ * via a hidden widget iframe before expiry.
+ */
+export interface RiftUser {
+    user: string;
+    address: string;
+    btcAddress?: string;
+    accessToken: string;
+    expiresAt?: string;
+}
+export interface RiftConfig {
+    apiKey: string;
+    widgetUrl?: string;
+}
+export type RiftEvent = {
+    type: "rift:ready";
+} | {
+    type: "rift:close";
+} | {
+    type: "rift:resize";
+    height: number;
+} | {
+    type: "rift:signin-success";
+    user: string;
+    address: string;
+    btcAddress?: string;
+    accessToken: string;
+    expiresAt?: string;
+    expiresIn?: number;
+} | {
+    type: "rift:signin-error";
+    message: string;
+} | {
+    type: "rift:refresh-result";
+    requestId: string;
+    accessToken: string;
+    expiresAt: string;
+    expiresIn: number;
+} | {
+    type: "rift:refresh-error";
+    requestId: string;
+    message: string;
+} | {
+    type: "rift:logout-result";
+    requestId: string;
+};
+export type RiftMode = "signin" | "signup";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,WAAW,EAAE,MAAM,CAAC;IAGpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IAEzB,MAAM,EAAE,MAAM,CAAC;IAGf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IACE,IAAI,EAAE,qBAAqB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9C;IACE,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC"}

package/dist/useRift.d.ts

@@ -0,0 +1,35 @@
+import { RiftMode, RiftUser } from './types';
+interface UseRiftReturn {
+    user: RiftUser | null;
+    isAuthenticated: boolean;
+    isOpen: boolean;
+    open: (opts?: {
+        mode?: RiftMode;
+    }) => void;
+    close: () => void;
+    signOut: () => Promise<void>;
+    /**
+     * Async getter for a valid access token. Use this when calling Rift /
+     * your backend — it returns the current token if fresh, or silently
+     * refreshes via a hidden iframe if near expiry. Rejects when the user
+     * isn't signed in or the refresh fails (in which case auth state is
+     * cleared and the host should prompt re-auth).
+     */
+    getAccessToken: () => Promise<string>;
+    error: string | null;
+}
+/**
+ * Read auth state and drive the widget from anywhere inside <RiftProvider>.
+ *
+ *   const { user, isAuthenticated, open, signOut, getAccessToken } = useRift();
+ *   return isAuthenticated
+ *     ? <button onClick={signOut}>Sign out</button>
+ *     : <button onClick={() => open({ mode: 'signup' })}>Get started</button>;
+ *
+ *   // When calling your backend with Rift's session JWT:
+ *   const token = await getAccessToken();
+ *   fetch('/api/my-thing', { headers: { Authorization: `Bearer ${token}` } });
+ */
+export declare function useRift(): UseRiftReturn;
+export {};
+//# sourceMappingURL=useRift.d.ts.map

package/dist/useRift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRift.d.ts","sourceRoot":"","sources":["../src/useRift.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAElD,UAAU,aAAa;IACrB,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3C,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,OAAO,IAAI,aAAa,CAavC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rift-finance/react",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "React bindings for the Rift sign-in widget. Drop in <RiftProvider>, render <RiftAuth>, and read auth state with useRift().",
   "repository": {
     "type": "git",