@sendoracloud/sdk-react-native 0.10.0 → 0.10.2

package/dist/index.cjs

@@ -200,11 +200,14 @@ function isAuthApiResponse(v) {
   const user = r.user;
   const tokens = r.tokens;
   if (!user || typeof user.id !== "string" || user.id.length === 0) return false;
-  if (typeof user.isAnonymous !== "boolean") return false;
   if (!tokens) return false;
   if (typeof tokens.accessToken !== "string" || tokens.accessToken.length === 0) return false;
   if (typeof tokens.refreshToken !== "string" || tokens.refreshToken.length === 0) return false;
   if (typeof tokens.expiresIn !== "number" || tokens.expiresIn <= 0) return false;
+  if (user.isAnonymous !== void 0 && typeof user.isAnonymous !== "boolean") return false;
+  if (user.email !== void 0 && user.email !== null && typeof user.email !== "string") return false;
+  if (user.emailVerified !== void 0 && typeof user.emailVerified !== "boolean") return false;
+  if (user.name !== void 0 && user.name !== null && typeof user.name !== "string") return false;
   return true;
 }
 var EmailAlreadyTakenError = class extends Error {
@@ -280,11 +283,29 @@ var Auth = class {
       return data.user;
     });
   }
+  /**
+   * Create an email/password account.
+   *
+   * Industry-standard upgrade-first flow (matches Firebase
+   * `linkWithCredential`, Auth0 anonymous-merge, Supabase
+   * `linkIdentity`): when a refresh token is present in storage we
+   * try `/auth-service/upgrade` first — backend validates the
+   * refresh, checks the bound user is anonymous, and promotes in
+   * place preserving `user.id`. If the bound user is NOT anonymous
+   * (already identified, expired refresh, etc.), backend rejects
+   * with FORBIDDEN_NON_ANONYMOUS / INVALID_REFRESH and we fall back
+   * to a fresh /signup.
+   *
+   * Why we don't gate on the cached `this.user.isAnonymous`
+   * boolean: the in-memory user can be stale during cold start or
+   * fast-refresh races. The refresh token in storage is the
+   * authoritative signal — if it's there, the upgrade path is
+   * worth attempting; backend has the source of truth.
+   */
   signUp(email, password, opts) {
     return this.serialize(async () => {
       const refresh = this.hooks.storage.get(REFRESH_KEY);
-      const isAnonymous = this.user?.isAnonymous === true;
-      if (isAnonymous && refresh) {
+      if (refresh) {
         try {
           const data = await this.callAuth("/api/v1/auth-service/upgrade", {
             refreshToken: refresh,
@@ -298,11 +319,13 @@ var Auth = class {
           if (err instanceof AuthError && (err.code === "CONFLICT" || err.code === "EMAIL_ALREADY_TAKEN")) {
             throw new EmailAlreadyTakenError(err.message);
           }
-          throw err;
+          if (err instanceof AuthError && (err.code === "FORBIDDEN_NON_ANONYMOUS" || err.code === "INVALID_REFRESH" || err.code === "UNAUTHORIZED" || err.code === "REFRESH_EXPIRED")) {
+            await this.wipeLocalIdentity();
+          } else {
+            throw err;
+          }
         }
       }
-      const wasIdentified = this.user !== null && this.user.isAnonymous === false;
-      if (wasIdentified) await this.wipeLocalIdentity();
       try {
         const data = await this.callAuth("/api/v1/auth-service/signup", {
           email,
@@ -767,7 +790,7 @@ function decodeJwtPayload(token) {
 }
 
 // src/index.ts
-var SDK_VERSION = "0.10.0";
+var SDK_VERSION = "0.10.2";
 var DEFAULT_API_URL = "https://api.sendoracloud.com";
 var ANON_KEY = "anon_id";
 var USER_ID_KEY = "user_id";

package/dist/index.d.cts

@@ -123,6 +123,25 @@ declare class Auth {
         name?: string;
         metadata?: Record<string, unknown>;
     }): Promise<AuthUser>;
+    /**
+     * Create an email/password account.
+     *
+     * Industry-standard upgrade-first flow (matches Firebase
+     * `linkWithCredential`, Auth0 anonymous-merge, Supabase
+     * `linkIdentity`): when a refresh token is present in storage we
+     * try `/auth-service/upgrade` first — backend validates the
+     * refresh, checks the bound user is anonymous, and promotes in
+     * place preserving `user.id`. If the bound user is NOT anonymous
+     * (already identified, expired refresh, etc.), backend rejects
+     * with FORBIDDEN_NON_ANONYMOUS / INVALID_REFRESH and we fall back
+     * to a fresh /signup.
+     *
+     * Why we don't gate on the cached `this.user.isAnonymous`
+     * boolean: the in-memory user can be stale during cold start or
+     * fast-refresh races. The refresh token in storage is the
+     * authoritative signal — if it's there, the upgrade path is
+     * worth attempting; backend has the source of truth.
+     */
     signUp(email: string, password: string, opts?: {
         name?: string;
         metadata?: Record<string, unknown>;

package/dist/index.d.ts

@@ -123,6 +123,25 @@ declare class Auth {
         name?: string;
         metadata?: Record<string, unknown>;
     }): Promise<AuthUser>;
+    /**
+     * Create an email/password account.
+     *
+     * Industry-standard upgrade-first flow (matches Firebase
+     * `linkWithCredential`, Auth0 anonymous-merge, Supabase
+     * `linkIdentity`): when a refresh token is present in storage we
+     * try `/auth-service/upgrade` first — backend validates the
+     * refresh, checks the bound user is anonymous, and promotes in
+     * place preserving `user.id`. If the bound user is NOT anonymous
+     * (already identified, expired refresh, etc.), backend rejects
+     * with FORBIDDEN_NON_ANONYMOUS / INVALID_REFRESH and we fall back
+     * to a fresh /signup.
+     *
+     * Why we don't gate on the cached `this.user.isAnonymous`
+     * boolean: the in-memory user can be stale during cold start or
+     * fast-refresh races. The refresh token in storage is the
+     * authoritative signal — if it's there, the upgrade path is
+     * worth attempting; backend has the source of truth.
+     */
     signUp(email: string, password: string, opts?: {
         name?: string;
         metadata?: Record<string, unknown>;

package/dist/index.js

@@ -160,11 +160,14 @@ function isAuthApiResponse(v) {
   const user = r.user;
   const tokens = r.tokens;
   if (!user || typeof user.id !== "string" || user.id.length === 0) return false;
-  if (typeof user.isAnonymous !== "boolean") return false;
   if (!tokens) return false;
   if (typeof tokens.accessToken !== "string" || tokens.accessToken.length === 0) return false;
   if (typeof tokens.refreshToken !== "string" || tokens.refreshToken.length === 0) return false;
   if (typeof tokens.expiresIn !== "number" || tokens.expiresIn <= 0) return false;
+  if (user.isAnonymous !== void 0 && typeof user.isAnonymous !== "boolean") return false;
+  if (user.email !== void 0 && user.email !== null && typeof user.email !== "string") return false;
+  if (user.emailVerified !== void 0 && typeof user.emailVerified !== "boolean") return false;
+  if (user.name !== void 0 && user.name !== null && typeof user.name !== "string") return false;
   return true;
 }
 var EmailAlreadyTakenError = class extends Error {
@@ -240,11 +243,29 @@ var Auth = class {
       return data.user;
     });
   }
+  /**
+   * Create an email/password account.
+   *
+   * Industry-standard upgrade-first flow (matches Firebase
+   * `linkWithCredential`, Auth0 anonymous-merge, Supabase
+   * `linkIdentity`): when a refresh token is present in storage we
+   * try `/auth-service/upgrade` first — backend validates the
+   * refresh, checks the bound user is anonymous, and promotes in
+   * place preserving `user.id`. If the bound user is NOT anonymous
+   * (already identified, expired refresh, etc.), backend rejects
+   * with FORBIDDEN_NON_ANONYMOUS / INVALID_REFRESH and we fall back
+   * to a fresh /signup.
+   *
+   * Why we don't gate on the cached `this.user.isAnonymous`
+   * boolean: the in-memory user can be stale during cold start or
+   * fast-refresh races. The refresh token in storage is the
+   * authoritative signal — if it's there, the upgrade path is
+   * worth attempting; backend has the source of truth.
+   */
   signUp(email, password, opts) {
     return this.serialize(async () => {
       const refresh = this.hooks.storage.get(REFRESH_KEY);
-      const isAnonymous = this.user?.isAnonymous === true;
-      if (isAnonymous && refresh) {
+      if (refresh) {
         try {
           const data = await this.callAuth("/api/v1/auth-service/upgrade", {
             refreshToken: refresh,
@@ -258,11 +279,13 @@ var Auth = class {
           if (err instanceof AuthError && (err.code === "CONFLICT" || err.code === "EMAIL_ALREADY_TAKEN")) {
             throw new EmailAlreadyTakenError(err.message);
           }
-          throw err;
+          if (err instanceof AuthError && (err.code === "FORBIDDEN_NON_ANONYMOUS" || err.code === "INVALID_REFRESH" || err.code === "UNAUTHORIZED" || err.code === "REFRESH_EXPIRED")) {
+            await this.wipeLocalIdentity();
+          } else {
+            throw err;
+          }
         }
       }
-      const wasIdentified = this.user !== null && this.user.isAnonymous === false;
-      if (wasIdentified) await this.wipeLocalIdentity();
       try {
         const data = await this.callAuth("/api/v1/auth-service/signup", {
           email,
@@ -727,7 +750,7 @@ function decodeJwtPayload(token) {
 }
 
 // src/index.ts
-var SDK_VERSION = "0.10.0";
+var SDK_VERSION = "0.10.2";
 var DEFAULT_API_URL = "https://api.sendoracloud.com";
 var ANON_KEY = "anon_id";
 var USER_ID_KEY = "user_id";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth. Expo Go compatible, no native modules beyond AsyncStorage.",
   "type": "module",
   "main": "./dist/index.cjs",