@sanvika/auth 2.2.0 → 2.3.0

package/dist/index.js

@@ -12,7 +12,7 @@ var DEFAULT_AVATAR_SVG = `data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/200
 
 // SanvikaAuthProvider.jsx
 import { jsx } from "react/jsx-runtime";
-var SA_URL = "https://accounts.sanvikaproduction.com";
+var S_AUTH_URL = "https://accounts.sanvikaproduction.com";
 var SanvikaAuthContext = createContext(null);
 function SanvikaAuthProvider({
   children,
@@ -21,7 +21,7 @@ function SanvikaAuthProvider({
   saUrl: saUrlProp,
   dashboardPath
 }) {
-  const saBaseUrl = saUrlProp || SA_URL;
+  const saBaseUrl = saUrlProp || S_AUTH_URL;
   const [user, setUser] = useState(null);
   const [accessToken, setToken] = useState(null);
   const [loading, setLoading] = useState(true);
@@ -40,7 +40,7 @@ function SanvikaAuthProvider({
     }
   }, []);
   const login = async ({ mobile, password, deviceId, deviceName }) => {
-    const response = await fetch(`${SA_URL}/api/auth/login`, {
+    const response = await fetch(`${S_AUTH_URL}/api/auth/login`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
@@ -66,7 +66,7 @@ function SanvikaAuthProvider({
   };
   const logout = async () => {
     try {
-      await fetch(`${SA_URL}/api/auth/logout`, {
+      await fetch(`${S_AUTH_URL}/api/auth/logout`, {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
@@ -216,9 +216,6 @@ function SanvikaAccountButtonContent({
 }) {
   var _a, _b;
   const auth = useSanvikaAuth();
-  console.log("[SanvikaAccountButton] auth context:", auth);
-  console.log("[SanvikaAccountButton] auth type:", typeof auth);
-  console.log("[SanvikaAccountButton] auth is null:", auth === null);
   const [dropdownOpen, setDropdownOpen] = useState2(false);
   const [imgError, setImgError] = useState2(false);
   const [prevImage, setPrevImage] = useState2((_a = auth == null ? void 0 : auth.user) == null ? void 0 : _a.image);
@@ -234,25 +231,14 @@ function SanvikaAccountButtonContent({
     return () => document.removeEventListener("mousedown", handleOutside);
   }, [dropdownOpen]);
   if (!auth) {
-    console.log("[SanvikaAccountButton] Auth is null, showing guest button");
     return /* @__PURE__ */ jsxs(
       "button",
       {
         className: `snvk-guestBtn ${className}`,
         onClick: (e) => {
-          console.log("[SanvikaAccountButton] \u2705\u2705\u2705 BUTTON CLICKED!");
-          console.log("[SanvikaAccountButton] Event target:", e.target);
-          console.log(
-            "[SanvikaAccountButton] Current URL:",
-            window.location.href
-          );
           if (onLoginClick) {
-            console.log("[SanvikaAccountButton] Calling custom onLoginClick");
             onLoginClick();
           } else {
-            console.log(
-              "[SanvikaAccountButton] Redirecting to SA authorize..."
-            );
             window.location.href = "https://accounts.sanvikaproduction.com/authorize";
           }
         },
@@ -283,16 +269,9 @@ function SanvikaAccountButtonContent({
       {
         className: `snvk-guestBtn ${className}`,
         onClick: (e) => {
-          console.log("[SanvikaAccountButton] \u2705\u2705\u2705 BUTTON CLICKED!");
-          console.log("[SanvikaAccountButton] Event target:", e.target);
           if (onLoginClick) {
-            console.log("[SanvikaAccountButton] Calling custom onLoginClick");
             onLoginClick();
           } else {
-            console.log(
-              "[SanvikaAccountButton] Redirecting to SA authorize...",
-              authorizeUrl
-            );
             window.location.href = authorizeUrl;
           }
         },

package/dist/server.js

@@ -0,0 +1,122 @@
+// server.js
+var _saUrl = () => {
+  var _a;
+  return typeof process !== "undefined" && ((_a = process.env) == null ? void 0 : _a.SA_URL) || "https://accounts.sanvikaproduction.com";
+};
+var _serviceKey = () => {
+  var _a;
+  return typeof process !== "undefined" && ((_a = process.env) == null ? void 0 : _a.AUTH_SERVICE_KEY) || "";
+};
+var _s2sHeaders = () => ({
+  "Content-Type": "application/json",
+  ..._serviceKey() ? { "x-service-key": _serviceKey() } : {}
+});
+async function verifySAToken(request) {
+  try {
+    const auth = request.headers.get("authorization");
+    if (!(auth == null ? void 0 : auth.startsWith("Bearer "))) return null;
+    const res = await fetch(`${_saUrl()}/api/auth/verify-token`, {
+      method: "GET",
+      headers: { Authorization: auth }
+    });
+    if (!res.ok) return null;
+    const json = await res.json();
+    return (json == null ? void 0 : json.success) ? json.payload : null;
+  } catch {
+    return null;
+  }
+}
+async function extractSAUid(request) {
+  const payload = await verifySAToken(request);
+  return (payload == null ? void 0 : payload.sub) || null;
+}
+async function getUserFromSA(uid) {
+  if (!uid) return null;
+  try {
+    const res = await fetch(`${_saUrl()}/api/user/profile?uid=${uid}`, {
+      headers: _s2sHeaders(),
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (!res.ok) return null;
+    const data = await res.json();
+    return data.success ? data.data : null;
+  } catch {
+    return null;
+  }
+}
+async function getUserLocationFromSA(uid) {
+  if (!uid) return null;
+  try {
+    const res = await fetch(`${_saUrl()}/api/location?uid=${uid}`, {
+      headers: _s2sHeaders(),
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (!res.ok) return null;
+    const data = await res.json();
+    return data.success ? data.data : null;
+  } catch {
+    return null;
+  }
+}
+async function getUserByMobileFromSA(mobile, authToken = "") {
+  var _a;
+  if (!mobile) return null;
+  try {
+    const headers = {
+      ..._s2sHeaders(),
+      ...authToken ? { Authorization: `Bearer ${authToken}` } : {}
+    };
+    const res = await fetch(
+      `${_saUrl()}/api/admin/users?search=${encodeURIComponent(mobile)}&limit=1`,
+      { headers, signal: AbortSignal.timeout(5e3) }
+    );
+    if (!res.ok) return null;
+    const data = await res.json();
+    return data.success && ((_a = data.users) == null ? void 0 : _a.length) > 0 ? data.users[0] : null;
+  } catch {
+    return null;
+  }
+}
+async function batchGetUsersFromSA(uids) {
+  const results = /* @__PURE__ */ new Map();
+  const batchSize = 10;
+  for (let i = 0; i < uids.length; i += batchSize) {
+    const batch = uids.slice(i, i + batchSize);
+    await Promise.all(
+      batch.map(async (uid) => {
+        const user = await getUserFromSA(uid);
+        if (user) results.set(uid, user);
+      })
+    );
+  }
+  return results;
+}
+async function listUsersFromSA({ page = 1, limit = 20, search = "", authToken = "" } = {}) {
+  const empty = { users: [], pagination: { page, limit, total: 0, pages: 0 } };
+  try {
+    const params = new URLSearchParams({ page: String(page), limit: String(limit) });
+    if (search) params.set("search", search);
+    const headers = {
+      ..._s2sHeaders(),
+      ...authToken ? { Authorization: `Bearer ${authToken}` } : {}
+    };
+    const res = await fetch(`${_saUrl()}/api/admin/users?${params}`, {
+      headers,
+      signal: AbortSignal.timeout(8e3)
+    });
+    if (!res.ok) return empty;
+    const data = await res.json();
+    return data.success ? { users: data.users || [], pagination: data.pagination || empty.pagination } : empty;
+  } catch {
+    return empty;
+  }
+}
+export {
+  batchGetUsersFromSA,
+  extractSAUid,
+  getUserByMobileFromSA,
+  getUserFromSA,
+  getUserLocationFromSA,
+  listUsersFromSA,
+  verifySAToken
+};

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@sanvika/auth",
-  "version": "2.2.0",
-  "description": "Sanvika Auth SDK — React components and hooks for Sanvika SSO integration",
+  "version": "2.3.0",
+  "description": "Sanvika Auth SDK — React components/hooks + server-side token verification and user proxy",
   "type": "module",
   "main": "dist/index.js",
   "module": "dist/index.js",
   "exports": {
-    ".": "./dist/index.js"
+    ".": "./dist/index.js",
+    "./server": "./dist/server.js"
   },
   "files": [
     "dist"