@seaverse/auth-sdk 0.3.3 → 0.3.5

package/README.md

@@ -353,6 +353,7 @@ const authModal = new AuthModal({
 
 **配置字段说明**：
 - `returnUrl`：**可选** - OAuth 登录后返回的 URL，不填则默认为 `window.location.href`
+- `oauthDesktopURL`：**可选** - 桌面应用 OAuth 回调 URL，如果提供则优先使用此 URL（优先级：`oauthDesktopURL` > `returnUrl` > `window.location.href`）
 - `enableOAuth.google`：是否启用 Google 登录
 - `enableOAuth.discord`：是否启用 Discord 登录
 - `enableOAuth.github`：是否启用 GitHub 登录
@@ -386,6 +387,19 @@ const authModal3 = new AuthModal({
     github: true,
   },
 });
+
+// 示例4：桌面应用 OAuth 回调（优先级最高）
+const authModal4 = new AuthModal({
+  client,
+  theme: 'dark',
+  oauthDesktopURL: 'myapp://oauth/callback', // 桌面应用自定义协议 URL
+  enableOAuth: {
+    google: true,
+    discord: true,
+    github: true,
+  },
+});
+// 登录成功后会跳转到 myapp://oauth/callback?token=xxx
 ```
 
 #### 处理 OAuth 回调

package/dist/index.cjs

@@ -1353,6 +1353,17 @@ class SeaVerseBackendAPIClient {
             // 1. { data: { token, user }, success: true } (新格式)
             // 2. { token, user } (旧格式)
             const responseData = response.data;
+            // ⚠️ 检查响应体中的 INVITE_CODE_REQUIRED 错误 (HTTP 200 + 错误响应体)
+            if (responseData?.code === 'INVITE_CODE_REQUIRED' && responseData?.data?.redirectUrl) {
+                const redirectUrl = responseData.data.redirectUrl;
+                // Only redirect in browser environment
+                if (typeof window !== 'undefined') {
+                    console.log('[AuthSDK] INVITE_CODE_REQUIRED detected in response, redirecting to:', redirectUrl);
+                    window.location.href = redirectUrl;
+                    // Return a pending promise to prevent further execution
+                    return new Promise(() => { });
+                }
+            }
             if (responseData.data && typeof responseData.data === 'object') {
                 // 新格式: 解包 data 字段
                 return responseData.data;
@@ -1361,14 +1372,14 @@ class SeaVerseBackendAPIClient {
             return responseData;
         }
         catch (error) {
-            // Handle error response
+            // Handle HTTP error response (4xx, 5xx status codes)
             const errorResponse = error.response?.data;
             // Check if error is INVITE_CODE_REQUIRED and has redirectUrl
             if (errorResponse?.code === 'INVITE_CODE_REQUIRED' && errorResponse?.data?.redirectUrl) {
                 const redirectUrl = errorResponse.data.redirectUrl;
                 // Only redirect in browser environment
                 if (typeof window !== 'undefined') {
-                    console.log('[AuthSDK] INVITE_CODE_REQUIRED detected, redirecting to:', redirectUrl);
+                    console.log('[AuthSDK] INVITE_CODE_REQUIRED detected in error, redirecting to:', redirectUrl);
                     window.location.href = redirectUrl;
                     // Return a pending promise to prevent further execution
                     return new Promise(() => { });
@@ -3739,7 +3750,8 @@ class AuthModal {
     async startOAuthFlow(provider) {
         try {
             // Get the return URL (where user should be redirected after OAuth)
-            const return_url = this.options.returnUrl || window.location.href;
+            // Priority: oauthDesktopURL > returnUrl > window.location.href
+            const return_url = this.options.oauthDesktopURL || this.options.returnUrl || window.location.href;
             // Call backend to get OAuth authorization URL
             let authorizeUrl;
             switch (provider) {
@@ -3774,6 +3786,7 @@ class AuthModal {
      *
      * In Backend Proxy Mode, the backend redirects to returnUrl with token in query param.
      * This static method checks if current URL has a token and processes it.
+     * If oauthDesktopURL is provided, it will redirect to that URL with the token.
      */
     static handleOAuthCallback(options) {
         const urlParams = new URLSearchParams(window.location.search);
@@ -3781,6 +3794,19 @@ class AuthModal {
         if (!token) {
             return null; // Not an OAuth callback
         }
+        // If oauthDesktopURL is provided, redirect to it with the token
+        if (options.oauthDesktopURL) {
+            // Construct the desktop URL with token parameter
+            const desktopUrl = new URL(options.oauthDesktopURL);
+            desktopUrl.searchParams.set('token', token);
+            // Redirect to desktop app
+            window.location.href = desktopUrl.toString();
+            // Return result (though redirect will happen immediately)
+            return {
+                success: true,
+                token,
+            };
+        }
         // Clean up URL (remove token from query string)
         const url = new URL(window.location.href);
         url.searchParams.delete('token');