@sesamy/sesamy-js 1.116.1 → 1.118.0

package/dist/bootstrap.d.ts

@@ -9,10 +9,13 @@
  *     bundle picks this up instead of starting its own fetch, shaving the
  *     userinfo round-trip off the critical path.
  *
- *  2. Load the main bundle with an optional fallback origin — if the
- *     primary `<script>` errors out or does not install `window[namespace]`
- *     within `fallbackTimeoutMs`, a secondary origin is tried. Intended
- *     for multi-cloud resilience (e.g. Cloudflare primary + AWS fallback).
+ *  2. Load the script chain that publishers need to get a working sesamy-js
+ *     app — the auth0-plugin (for SPA auth), capsule-plugin (when DCA is
+ *     enabled), sesamy-components, and the sesamy-js core.  The scripts are
+ *     injected with `async = false` so the browser runs them in insertion
+ *     order — core sees the plugin factories on `window` before auto-init.
+ *     If the core fails or the primary origin never installs `window[ns]`
+ *     within `fallbackTimeoutMs`, an optional fallback origin is tried.
  *
  * `sesamyBootstrap` is self-contained so `renderBootstrapScript()` can
  * serialise it via `.toString()` for inline embedding in SSR templates.
@@ -20,16 +23,21 @@
  */
 export interface BootstrapOptions {
     /**
-     * Your Sesamy client id. When provided, the bundle URL defaults to
-     * `https://scripts.sesamy.com/s/{clientId}/sesamy-js/{version}.js` (the
-     * `.js` suffix selects the IIFE build — the bootstrap injects a classic
-     * `<script>`, which cannot parse the ESM served at the bare URL). Either
-     * `clientId` or an explicit `src` is required.
+     * Your Sesamy client id. When provided, the script chain URLs default to
+     * `https://scripts.sesamy.com/s/{clientId}/{name}/{version}.js` (IIFE
+     * builds — the bootstrap injects classic `<script>` tags, which cannot
+     * parse the ESM served at the bare URL). Either `clientId` or an explicit
+     * `src` is required.
      */
     clientId?: string;
     /** Version channel served by scripts-host. Defaults to `stable`. */
     version?: string;
-    /** Override the primary bundle URL. Takes precedence over `clientId`. */
+    /**
+     * Override the primary core bundle URL. When set, the bootstrap loads
+     * only this one script and skips the plugin/components chain — intended
+     * as an escape hatch for custom CDNs or pre-assembled single-file
+     * bundles that include plugins themselves.
+     */
     src?: string;
     /**
      * Which scripts-host origin to resolve `clientId` against. `'prod'`
@@ -37,7 +45,7 @@ export interface BootstrapOptions {
      * Ignored when `src` is set.
      */
     environment?: 'dev' | 'prod';
-    /** Optional secondary origin loaded if the primary fails. */
+    /** Optional secondary origin loaded if the core script fails. */
     fallbackSrc?: string;
     /** Timeout before the fallback is attempted. Defaults to 3000. */
     fallbackTimeoutMs?: number;
@@ -47,6 +55,22 @@ export interface BootstrapOptions {
     namespace?: string;
     /** Skip the userinfo prefetch (e.g. when using SSR id-token injection). */
     skipAuthPrefetch?: boolean;
+    /** Skip automatic loading of sesamy-components. Defaults to false. */
+    skipComponents?: boolean;
+    /**
+     * Override whether to load auth0-plugin. When undefined (the default), the
+     * bootstrap loads the plugin unless `auth.useHttpCookies === true` in the
+     * `<script id="sesamy-js">` config element. SSR templates that run the
+     * bootstrap before the config element is in the DOM should pass an explicit
+     * value here.
+     */
+    loadAuth0Plugin?: boolean;
+    /**
+     * Override whether to load capsule-plugin. When undefined (the default),
+     * the bootstrap loads the plugin when `capsule.enabled === true` in the
+     * config element. Same SSR caveat as `loadAuth0Plugin`.
+     */
+    loadCapsulePlugin?: boolean;
 }
 declare global {
     interface Window {

package/dist/bootstrap.iife.js

@@ -1 +1 @@
-var sesamyBootstrap=(function(e){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});function t(e){let t=e.namespace||`sesamy`,n=e.fallbackSrc,r=e.environment===`dev`?`scripts.sesamy.dev`:`scripts.sesamy.com`,i=e.src||`https://`+r+`/s/`+e.clientId+`/sesamy-js/`+(e.version||`stable`)+`.js`,a=window;if(!e.skipAuthPrefetch&&!a.__sesamyBoot){let t=null;try{let e=sessionStorage.getItem(`sesamy:userinfo`);if(e){let n=JSON.parse(e),r=n._cachedAt;r&&Date.now()-r<=36e5&&(t=n)}}catch{}t?a.__sesamyBoot=Promise.resolve(t):(`; `+document.cookie).indexOf(`; sesamy_is_authenticated=true`)>=0&&(a.__sesamyBoot=fetch((e.apiBaseUrl||``)+`/auth/userinfo`,{credentials:`include`,headers:{Accept:`application/json`}}).then(e=>e.ok?e.json():null).catch(()=>null))}let o=!1,s=()=>{if(o||!n||a[t])return;o=!0;let e=document.createElement(`script`);e.src=n,e.async=!0,document.head.appendChild(e)},c=document.createElement(`script`);c.src=i,c.async=!0,c.onerror=s,document.head.appendChild(c),n&&setTimeout(s,e.fallbackTimeoutMs||3e3)}function n(e){return`(`+t.toString()+`)(`+JSON.stringify(e)+`);`}if(typeof window<`u`){window.sesamyBootstrap=t;try{let e=document.getElementById(`sesamy-js`),n=e&&e.textContent?JSON.parse(e.textContent):null;n&&n.clientId&&t({clientId:n.clientId})}catch{}}return e.renderBootstrapScript=n,e.sesamyBootstrap=t,e})({});
+var sesamyBootstrap=(function(e){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});function t(e){let t=e.namespace||`sesamy`,n=e.fallbackSrc,r=e.version||`stable`,i=e.environment===`dev`?`scripts.sesamy.dev`:`scripts.sesamy.com`,a={};try{let e=document.getElementById(`sesamy-js`);e&&e.textContent&&(a=JSON.parse(e.textContent)||{})}catch{}let o=e.clientId||a.clientId,s=o?`https://`+i+`/s/`+o:``,c=e.src||(o?s+`/sesamy-js/`+r+`.js`:void 0),l=!e.src&&!!s,u=window;if(!e.skipAuthPrefetch&&!u.__sesamyBoot){let t=null;try{let e=sessionStorage.getItem(`sesamy:userinfo`);if(e){let n=JSON.parse(e),r=n._cachedAt;r&&Date.now()-r<=36e5&&(t=n)}}catch{}t?u.__sesamyBoot=Promise.resolve(t):(`; `+document.cookie).indexOf(`; sesamy_is_authenticated=true`)>=0&&(u.__sesamyBoot=fetch((e.apiBaseUrl||``)+`/auth/userinfo`,{credentials:`include`,headers:{Accept:`application/json`}}).then(e=>e.ok?e.json():null).catch(()=>null))}if(!c)return;let d=a.auth&&a.auth.useHttpCookies===!0,f=l&&(e.loadAuth0Plugin===void 0?!d:e.loadAuth0Plugin),p=l&&(e.loadCapsulePlugin===void 0?a.capsule&&a.capsule.enabled===!0:e.loadCapsulePlugin),m=l&&!e.skipComponents,h=[];f&&h.push(s+`/auth0-plugin/`+r+`.js`),p&&h.push(s+`/capsule-plugin/`+r+`.js`),m&&h.push(s+`/sesamy-components/`+r+`.js`),h.push(c);let g=!1,_=()=>{if(g||!n||u[t])return;g=!0;let e=document.createElement(`script`);e.src=n,e.async=!0,document.head.appendChild(e)},v=null;for(let e of h){let t=document.createElement(`script`);t.src=e,t.async=!1,document.head.appendChild(t),e===c&&(v=t)}v&&(v.onerror=_),n&&setTimeout(_,e.fallbackTimeoutMs||3e3)}function n(e){return`(`+t.toString()+`)(`+JSON.stringify(e)+`);`}var r=[`clientId`,`environment`,`version`,`src`,`fallbackSrc`,`fallbackTimeoutMs`,`apiBaseUrl`,`namespace`,`skipAuthPrefetch`,`skipComponents`,`loadAuth0Plugin`,`loadCapsulePlugin`];if(typeof window<`u`){window.sesamyBootstrap=t;try{let e=document.getElementById(`sesamy-js`),n=e&&e.textContent?JSON.parse(e.textContent):null;if(n&&(n.clientId||n.src)){let e={};for(let t of r)n[t]!==void 0&&(e[t]=n[t]);t(e)}}catch{}}return e.renderBootstrapScript=n,e.sesamyBootstrap=t,e})({});

package/dist/bootstrap.mjs

@@ -1,7 +1,12 @@
 //#region src/bootstrap.ts
 function e(e) {
-	let t = e.namespace || "sesamy", n = e.fallbackSrc, r = e.environment === "dev" ? "scripts.sesamy.dev" : "scripts.sesamy.com", i = e.src || "https://" + r + "/s/" + e.clientId + "/sesamy-js/" + (e.version || "stable") + ".js", a = window;
-	if (!e.skipAuthPrefetch && !a.__sesamyBoot) {
+	let t = e.namespace || "sesamy", n = e.fallbackSrc, r = e.version || "stable", i = e.environment === "dev" ? "scripts.sesamy.dev" : "scripts.sesamy.com", a = {};
+	try {
+		let e = document.getElementById("sesamy-js");
+		e && e.textContent && (a = JSON.parse(e.textContent) || {});
+	} catch {}
+	let o = e.clientId || a.clientId, s = o ? "https://" + i + "/s/" + o : "", c = e.src || (o ? s + "/sesamy-js/" + r + ".js" : void 0), l = !e.src && !!s, u = window;
+	if (!e.skipAuthPrefetch && !u.__sesamyBoot) {
 		let t = null;
 		try {
 			let e = sessionStorage.getItem("sesamy:userinfo");
@@ -10,27 +15,52 @@ function e(e) {
 				r && Date.now() - r <= 36e5 && (t = n);
 			}
 		} catch {}
-		t ? a.__sesamyBoot = Promise.resolve(t) : ("; " + document.cookie).indexOf("; sesamy_is_authenticated=true") >= 0 && (a.__sesamyBoot = fetch((e.apiBaseUrl || "") + "/auth/userinfo", {
+		t ? u.__sesamyBoot = Promise.resolve(t) : ("; " + document.cookie).indexOf("; sesamy_is_authenticated=true") >= 0 && (u.__sesamyBoot = fetch((e.apiBaseUrl || "") + "/auth/userinfo", {
 			credentials: "include",
 			headers: { Accept: "application/json" }
 		}).then((e) => e.ok ? e.json() : null).catch(() => null));
 	}
-	let o = !1, s = () => {
-		if (o || !n || a[t]) return;
-		o = !0;
+	if (!c) return;
+	let d = a.auth && a.auth.useHttpCookies === !0, f = l && (e.loadAuth0Plugin === void 0 ? !d : e.loadAuth0Plugin), p = l && (e.loadCapsulePlugin === void 0 ? a.capsule && a.capsule.enabled === !0 : e.loadCapsulePlugin), m = l && !e.skipComponents, h = [];
+	f && h.push(s + "/auth0-plugin/" + r + ".js"), p && h.push(s + "/capsule-plugin/" + r + ".js"), m && h.push(s + "/sesamy-components/" + r + ".js"), h.push(c);
+	let g = !1, _ = () => {
+		if (g || !n || u[t]) return;
+		g = !0;
 		let e = document.createElement("script");
 		e.src = n, e.async = !0, document.head.appendChild(e);
-	}, c = document.createElement("script");
-	c.src = i, c.async = !0, c.onerror = s, document.head.appendChild(c), n && setTimeout(s, e.fallbackTimeoutMs || 3e3);
+	}, v = null;
+	for (let e of h) {
+		let t = document.createElement("script");
+		t.src = e, t.async = !1, document.head.appendChild(t), e === c && (v = t);
+	}
+	v && (v.onerror = _), n && setTimeout(_, e.fallbackTimeoutMs || 3e3);
 }
 function t(t) {
 	return "(" + e.toString() + ")(" + JSON.stringify(t) + ");";
 }
+var n = [
+	"clientId",
+	"environment",
+	"version",
+	"src",
+	"fallbackSrc",
+	"fallbackTimeoutMs",
+	"apiBaseUrl",
+	"namespace",
+	"skipAuthPrefetch",
+	"skipComponents",
+	"loadAuth0Plugin",
+	"loadCapsulePlugin"
+];
 if (typeof window < "u") {
 	window.sesamyBootstrap = e;
 	try {
-		let t = document.getElementById("sesamy-js"), n = t && t.textContent ? JSON.parse(t.textContent) : null;
-		n && n.clientId && e({ clientId: n.clientId });
+		let t = document.getElementById("sesamy-js"), r = t && t.textContent ? JSON.parse(t.textContent) : null;
+		if (r && (r.clientId || r.src)) {
+			let t = {};
+			for (let e of n) r[e] !== void 0 && (t[e] = r[e]);
+			e(t);
+		}
 	} catch {}
 }
 //#endregion