@stytch/vanilla-js 6.0.4 → 6.0.5

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @stytch/vanilla-js
 
+## 6.0.5
+
+### Patch Changes
+
+- e7a8be7: Remove token from URL as authenticate() call is made rather than after success. This prevents rare double calling if the user reloads the page while the call was being made.
+
 ## 6.0.4
 
 ### Patch Changes

package/dist/cjs/{StytchSSRProxy-CCeaM1wX.js → StytchSSRProxy-uT0ZmdOT.js}

@@ -2991,18 +2991,17 @@ const clearStytchTokenParams = ()=>{
         if (!parsed.handled) return parsed;
         const { token, tokenType } = parsed;
         const handler = handlers[tokenType];
-        try {
-            const data = await handler(token, options);
-            return {
-                handled: true,
-                tokenType: tokenType,
-                data
-            };
-        } finally{
-            if (shouldClearParams) {
-                clearStytchTokenParams();
-            }
+        // Clear token immediately when it is "consumed" by the authenticate call to prevent reloads
+        // from repeating the call
+        if (shouldClearParams) {
+            clearStytchTokenParams();
         }
+        const data = await handler(token, options);
+        return {
+            handled: true,
+            tokenType: tokenType,
+            data
+        };
     };
     return {
         authenticateByUrl,
@@ -3096,4 +3095,4 @@ exports.parseOAuthAuthorizeParams = parseOAuthAuthorizeParams;
 exports.parseOAuthLogoutParams = parseOAuthLogoutParams;
 exports.removeResponseCommon = removeResponseCommon;
 exports.ssrSafeClientFactory = ssrSafeClientFactory;
-//# sourceMappingURL=StytchSSRProxy-CCeaM1wX.js.map
+//# sourceMappingURL=StytchSSRProxy-uT0ZmdOT.js.map