@sylphx/sdk 0.11.2 → 0.12.0

package/dist/nextjs/index.d.ts

@@ -142,6 +142,16 @@ interface SylphxMiddlewareConfig {
      * @default resolved from SYLPHX_SECRET_URL, SYLPHX_URL, SYLPHX_BAAS_URL, or SYLPHX_RUNTIME_URL
      */
     platformUrl?: string;
+    /**
+     * Canonical public application URL used for OAuth callback URLs.
+     *
+     * Set this when the app is served behind a proxy, custom domain, or platform
+     * generated hostname where the request URL may not be the user-facing origin.
+     * Only the origin is used; callback path remains owned by `authPrefix`.
+     *
+     * @default request URL origin
+     */
+    appUrl?: string;
     /**
      * Callback to add custom headers/logic to responses.
      * Called for every non-auth-route request after SDK processing.

package/dist/nextjs/index.mjs

@@ -595,6 +595,19 @@ function resolveSameOriginUrl(request, value, fallbackPath) {
     return null;
   }
 }
+function normalizeAppUrl(value) {
+  if (!value?.trim()) return null;
+  try {
+    const url = new URL(value);
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
+function resolveOAuthCallbackUrl(request, ctx) {
+  const origin = ctx.config.appUrl ?? new URL(request.url).origin;
+  return new URL(`${ctx.config.authPrefix}/callback`, origin);
+}
 function bytesToBase64Url(bytes) {
   let binary = "";
   for (const byte of bytes) binary += String.fromCharCode(byte);
@@ -798,7 +811,7 @@ async function handleOAuthAuthorize(request, ctx) {
     return NextResponse.json({ error: "provider is required" }, { status: 400 });
   }
   const redirectTo = resolveSafeRelativeRedirectPath(rawRedirectTo, ctx.config.afterSignInUrl);
-  const redirectUri = new URL(`${ctx.config.authPrefix}/callback`, request.url);
+  const redirectUri = resolveOAuthCallbackUrl(request, ctx);
   redirectUri.searchParams.set("redirect_to", redirectTo);
   const verifier = randomBase64Url(32);
   const challenge = await sha256Base64Url(verifier);
@@ -1340,6 +1353,7 @@ function createSylphxMiddleware(userConfig = {}) {
     afterSignInUrl: userConfig.afterSignInUrl ?? "/dashboard",
     authPrefix: userConfig.authPrefix ?? "/auth",
     baasPrefix: userConfig.baasPrefix === false ? null : normalizeRoutePrefix(userConfig.baasPrefix ?? DEFAULT_BAAS_PREFIX),
+    appUrl: normalizeAppUrl(userConfig.appUrl),
     debug: userConfig.debug ?? false,
     orgRequired: userConfig.orgRequired ?? false,
     orgSelectionUrl: userConfig.orgSelectionUrl ?? "/select-organization",