@sendoracloud/sdk-react-native 0.18.4 → 0.18.6

package/dist/index.cjs

@@ -654,6 +654,29 @@ var Auth = class {
     }
     return { authorizationUrl: parsed.data.authorizationUrl };
   }
+  /**
+   * Kick off a SAML 2.0 SSO flow. Mirrors `startSso` for SAML —
+   * backend POST `/auth-service/sso/saml/start` returns the IdP
+   * AuthnRequest URL. Caller opens it with
+   * ASWebAuthenticationSession (iOS) / Custom Tabs (Android) /
+   * Linking, captures the callback URL via the standard
+   * `Linking.addEventListener` flow, then passes the captured URL to
+   * `consumeSsoFragment(url)`. consumeSsoFragment handles both OIDC
+   * and SAML fragments transparently.
+   */
+  async startSaml(returnTo) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/sso/saml/start",
+      { returnTo }
+    );
+    if (!res || !res.ok) throw new AuthError("SAML_START_FAILED", `HTTP ${res?.status ?? "network"}`);
+    const parsed = await res.json();
+    if (!parsed.success || !parsed.data?.authorizationUrl) {
+      throw new AuthError("SAML_START_FAILED", "Missing authorizationUrl");
+    }
+    return { authorizationUrl: parsed.data.authorizationUrl };
+  }
   /**
    * Consume an OIDC callback URL captured via React Native's
    * `Linking.addEventListener('url', ...)`. Reads the fragment for
@@ -666,10 +689,10 @@ var Auth = class {
       const hashIdx = callbackUrl.indexOf("#");
       const fragment = hashIdx >= 0 ? callbackUrl.slice(hashIdx + 1) : "";
       const params = new URLSearchParams(fragment);
-      const err = params.get("sendora_oidc_error");
+      const err = params.get("sendora_oidc_error") ?? params.get("sendora_saml_error");
       if (err) throw new AuthError("SSO_FAILED", decodeURIComponent(err));
-      const refresh = params.get("sendora_oidc_token");
-      if (!refresh) throw new AuthError("SSO_NO_TOKEN", "Callback URL has no sendora_oidc_token");
+      const refresh = params.get("sendora_oidc_token") ?? params.get("sendora_saml_token");
+      if (!refresh) throw new AuthError("SSO_NO_TOKEN", "Callback URL has no SSO token");
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/token/refresh",
@@ -2071,6 +2094,53 @@ var SendoraSDK = class {
       }
     };
   }
+  /**
+   * In-app messaging namespace — fetch active messages (modals,
+   * banners, slideouts, tooltips) targeted at this user + record
+   * impressions (shown / clicked / dismissed) so the dashboard's
+   * "shown N times" caps and CTR analytics work. Mirrors backend
+   * `/in-app-messages/{active,impressions}` SDK routes and the web
+   * SDK's `InAppMessaging` class.
+   *
+   * Typical use:
+   *   const msgs = await SendoraCloud.messages.fetchActive();
+   *   for (const m of msgs) renderMessage(m);
+   *   // when user sees it:
+   *   await SendoraCloud.messages.recordImpression({ messageId: m.id, action: "shown" });
+   *   // when user clicks CTA:
+   *   await SendoraCloud.messages.recordImpression({ messageId: m.id, action: "clicked" });
+   *
+   * `action` is a free-form string; "shown" / "clicked" / "dismissed"
+   * are the canonical set the dashboard graphs from.
+   */
+  get messages() {
+    const self = this;
+    return {
+      fetchActive: async () => {
+        if (!self.config) throw new Error("[sendoracloud] init() must complete before messages.fetchActive().");
+        const url = `${self.config.apiUrl}/api/v1/in-app-messages/active`;
+        const res = await fetch(url, {
+          method: "GET",
+          headers: { "x-api-key": self.config.publicKey }
+        });
+        if (!res.ok) throw new Error(`[sendoracloud] messages.fetchActive failed (${res.status})`);
+        const parsed = await res.json();
+        if (!parsed.success || !Array.isArray(parsed.data)) {
+          throw new Error("[sendoracloud] messages.fetchActive: bad response");
+        }
+        return parsed.data;
+      },
+      recordImpression: async (input) => {
+        if (!self.config) throw new Error("[sendoracloud] init() must complete before messages.recordImpression().");
+        const res = await post(
+          { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+          "/in-app-messages/impressions",
+          input
+        );
+        if (!res || !res.ok) throw new Error(`[sendoracloud] messages.recordImpression failed (${res?.status ?? "network"})`);
+      }
+    };
+  }
   /**
    * Clear identity + rotate the anonymous id. Call on logout. Awaits
    * the AsyncStorage writes so a caller who kills the app immediately

package/dist/index.d.cts

@@ -268,6 +268,19 @@ declare class Auth {
     startSso(returnTo: string): Promise<{
         authorizationUrl: string;
     }>;
+    /**
+     * Kick off a SAML 2.0 SSO flow. Mirrors `startSso` for SAML —
+     * backend POST `/auth-service/sso/saml/start` returns the IdP
+     * AuthnRequest URL. Caller opens it with
+     * ASWebAuthenticationSession (iOS) / Custom Tabs (Android) /
+     * Linking, captures the callback URL via the standard
+     * `Linking.addEventListener` flow, then passes the captured URL to
+     * `consumeSsoFragment(url)`. consumeSsoFragment handles both OIDC
+     * and SAML fragments transparently.
+     */
+    startSaml(returnTo: string): Promise<{
+        authorizationUrl: string;
+    }>;
     /**
      * Consume an OIDC callback URL captured via React Native's
      * `Linking.addEventListener('url', ...)`. Reads the fragment for
@@ -983,6 +996,45 @@ declare class SendoraSDK {
             submittedAt: string;
         }>;
     };
+    /**
+     * In-app messaging namespace — fetch active messages (modals,
+     * banners, slideouts, tooltips) targeted at this user + record
+     * impressions (shown / clicked / dismissed) so the dashboard's
+     * "shown N times" caps and CTR analytics work. Mirrors backend
+     * `/in-app-messages/{active,impressions}` SDK routes and the web
+     * SDK's `InAppMessaging` class.
+     *
+     * Typical use:
+     *   const msgs = await SendoraCloud.messages.fetchActive();
+     *   for (const m of msgs) renderMessage(m);
+     *   // when user sees it:
+     *   await SendoraCloud.messages.recordImpression({ messageId: m.id, action: "shown" });
+     *   // when user clicks CTA:
+     *   await SendoraCloud.messages.recordImpression({ messageId: m.id, action: "clicked" });
+     *
+     * `action` is a free-form string; "shown" / "clicked" / "dismissed"
+     * are the canonical set the dashboard graphs from.
+     */
+    get messages(): {
+        fetchActive: () => Promise<Array<{
+            id: string;
+            type: string;
+            title: string | null;
+            body: string;
+            ctaText: string | null;
+            ctaUrl: string | null;
+            imageUrl: string | null;
+            theme: string | null;
+            priority: number;
+            isActive: boolean;
+            [key: string]: unknown;
+        }>>;
+        recordImpression: (input: {
+            messageId: string;
+            action: string;
+            entityId?: string;
+        }) => Promise<void>;
+    };
     /**
      * Clear identity + rotate the anonymous id. Call on logout. Awaits
      * the AsyncStorage writes so a caller who kills the app immediately

package/dist/index.d.ts

@@ -268,6 +268,19 @@ declare class Auth {
     startSso(returnTo: string): Promise<{
         authorizationUrl: string;
     }>;
+    /**
+     * Kick off a SAML 2.0 SSO flow. Mirrors `startSso` for SAML —
+     * backend POST `/auth-service/sso/saml/start` returns the IdP
+     * AuthnRequest URL. Caller opens it with
+     * ASWebAuthenticationSession (iOS) / Custom Tabs (Android) /
+     * Linking, captures the callback URL via the standard
+     * `Linking.addEventListener` flow, then passes the captured URL to
+     * `consumeSsoFragment(url)`. consumeSsoFragment handles both OIDC
+     * and SAML fragments transparently.
+     */
+    startSaml(returnTo: string): Promise<{
+        authorizationUrl: string;
+    }>;
     /**
      * Consume an OIDC callback URL captured via React Native's
      * `Linking.addEventListener('url', ...)`. Reads the fragment for
@@ -983,6 +996,45 @@ declare class SendoraSDK {
             submittedAt: string;
         }>;
     };
+    /**
+     * In-app messaging namespace — fetch active messages (modals,
+     * banners, slideouts, tooltips) targeted at this user + record
+     * impressions (shown / clicked / dismissed) so the dashboard's
+     * "shown N times" caps and CTR analytics work. Mirrors backend
+     * `/in-app-messages/{active,impressions}` SDK routes and the web
+     * SDK's `InAppMessaging` class.
+     *
+     * Typical use:
+     *   const msgs = await SendoraCloud.messages.fetchActive();
+     *   for (const m of msgs) renderMessage(m);
+     *   // when user sees it:
+     *   await SendoraCloud.messages.recordImpression({ messageId: m.id, action: "shown" });
+     *   // when user clicks CTA:
+     *   await SendoraCloud.messages.recordImpression({ messageId: m.id, action: "clicked" });
+     *
+     * `action` is a free-form string; "shown" / "clicked" / "dismissed"
+     * are the canonical set the dashboard graphs from.
+     */
+    get messages(): {
+        fetchActive: () => Promise<Array<{
+            id: string;
+            type: string;
+            title: string | null;
+            body: string;
+            ctaText: string | null;
+            ctaUrl: string | null;
+            imageUrl: string | null;
+            theme: string | null;
+            priority: number;
+            isActive: boolean;
+            [key: string]: unknown;
+        }>>;
+        recordImpression: (input: {
+            messageId: string;
+            action: string;
+            entityId?: string;
+        }) => Promise<void>;
+    };
     /**
      * Clear identity + rotate the anonymous id. Call on logout. Awaits
      * the AsyncStorage writes so a caller who kills the app immediately

package/dist/index.js

@@ -611,6 +611,29 @@ var Auth = class {
     }
     return { authorizationUrl: parsed.data.authorizationUrl };
   }
+  /**
+   * Kick off a SAML 2.0 SSO flow. Mirrors `startSso` for SAML —
+   * backend POST `/auth-service/sso/saml/start` returns the IdP
+   * AuthnRequest URL. Caller opens it with
+   * ASWebAuthenticationSession (iOS) / Custom Tabs (Android) /
+   * Linking, captures the callback URL via the standard
+   * `Linking.addEventListener` flow, then passes the captured URL to
+   * `consumeSsoFragment(url)`. consumeSsoFragment handles both OIDC
+   * and SAML fragments transparently.
+   */
+  async startSaml(returnTo) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/sso/saml/start",
+      { returnTo }
+    );
+    if (!res || !res.ok) throw new AuthError("SAML_START_FAILED", `HTTP ${res?.status ?? "network"}`);
+    const parsed = await res.json();
+    if (!parsed.success || !parsed.data?.authorizationUrl) {
+      throw new AuthError("SAML_START_FAILED", "Missing authorizationUrl");
+    }
+    return { authorizationUrl: parsed.data.authorizationUrl };
+  }
   /**
    * Consume an OIDC callback URL captured via React Native's
    * `Linking.addEventListener('url', ...)`. Reads the fragment for
@@ -623,10 +646,10 @@ var Auth = class {
       const hashIdx = callbackUrl.indexOf("#");
       const fragment = hashIdx >= 0 ? callbackUrl.slice(hashIdx + 1) : "";
       const params = new URLSearchParams(fragment);
-      const err = params.get("sendora_oidc_error");
+      const err = params.get("sendora_oidc_error") ?? params.get("sendora_saml_error");
       if (err) throw new AuthError("SSO_FAILED", decodeURIComponent(err));
-      const refresh = params.get("sendora_oidc_token");
-      if (!refresh) throw new AuthError("SSO_NO_TOKEN", "Callback URL has no sendora_oidc_token");
+      const refresh = params.get("sendora_oidc_token") ?? params.get("sendora_saml_token");
+      if (!refresh) throw new AuthError("SSO_NO_TOKEN", "Callback URL has no SSO token");
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/token/refresh",
@@ -2033,6 +2056,53 @@ var SendoraSDK = class {
       }
     };
   }
+  /**
+   * In-app messaging namespace — fetch active messages (modals,
+   * banners, slideouts, tooltips) targeted at this user + record
+   * impressions (shown / clicked / dismissed) so the dashboard's
+   * "shown N times" caps and CTR analytics work. Mirrors backend
+   * `/in-app-messages/{active,impressions}` SDK routes and the web
+   * SDK's `InAppMessaging` class.
+   *
+   * Typical use:
+   *   const msgs = await SendoraCloud.messages.fetchActive();
+   *   for (const m of msgs) renderMessage(m);
+   *   // when user sees it:
+   *   await SendoraCloud.messages.recordImpression({ messageId: m.id, action: "shown" });
+   *   // when user clicks CTA:
+   *   await SendoraCloud.messages.recordImpression({ messageId: m.id, action: "clicked" });
+   *
+   * `action` is a free-form string; "shown" / "clicked" / "dismissed"
+   * are the canonical set the dashboard graphs from.
+   */
+  get messages() {
+    const self = this;
+    return {
+      fetchActive: async () => {
+        if (!self.config) throw new Error("[sendoracloud] init() must complete before messages.fetchActive().");
+        const url = `${self.config.apiUrl}/api/v1/in-app-messages/active`;
+        const res = await fetch(url, {
+          method: "GET",
+          headers: { "x-api-key": self.config.publicKey }
+        });
+        if (!res.ok) throw new Error(`[sendoracloud] messages.fetchActive failed (${res.status})`);
+        const parsed = await res.json();
+        if (!parsed.success || !Array.isArray(parsed.data)) {
+          throw new Error("[sendoracloud] messages.fetchActive: bad response");
+        }
+        return parsed.data;
+      },
+      recordImpression: async (input) => {
+        if (!self.config) throw new Error("[sendoracloud] init() must complete before messages.recordImpression().");
+        const res = await post(
+          { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+          "/in-app-messages/impressions",
+          input
+        );
+        if (!res || !res.ok) throw new Error(`[sendoracloud] messages.recordImpression failed (${res?.status ?? "network"})`);
+      }
+    };
+  }
   /**
    * Clear identity + rotate the anonymous id. Call on logout. Awaits
    * the AsyncStorage writes so a caller who kills the app immediately

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "0.18.4",
+  "version": "0.18.6",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",