@sylphx/sdk 0.11.2 → 0.12.1

package/dist/nextjs/index.d.ts

@@ -142,6 +142,16 @@ interface SylphxMiddlewareConfig {
      * @default resolved from SYLPHX_SECRET_URL, SYLPHX_URL, SYLPHX_BAAS_URL, or SYLPHX_RUNTIME_URL
      */
     platformUrl?: string;
+    /**
+     * Canonical public application URL used for OAuth callback URLs.
+     *
+     * Set this when the app is served behind a proxy, custom domain, or platform
+     * generated hostname where the request URL may not be the user-facing origin.
+     * Only the origin is used; callback path remains owned by `authPrefix`.
+     *
+     * @default request URL origin
+     */
+    appUrl?: string;
     /**
      * Callback to add custom headers/logic to responses.
      * Called for every non-auth-route request after SDK processing.

package/dist/nextjs/index.mjs

@@ -7,7 +7,13 @@ var ENV_PUBLIC_URL = "NEXT_PUBLIC_SYLPHX_URL";
 var ENV_SECRET_URL = "SYLPHX_SECRET_URL";
 var SDK_API_PATH = `/v1`;
 var DEFAULT_SDK_API_HOST = "api.sylphx.com";
-var SDK_PLATFORM = typeof window !== "undefined" ? "browser" : typeof process !== "undefined" && process.versions?.node ? "node" : "unknown";
+function detectSdkPlatform() {
+  if (typeof window !== "undefined") return "browser";
+  const runtimeGlobal = globalThis;
+  if (typeof runtimeGlobal.EdgeRuntime !== "undefined") return "edge";
+  return "node";
+}
+var SDK_PLATFORM = detectSdkPlatform();
 var TOKEN_EXPIRY_BUFFER_MS = 3e4;
 var SESSION_TOKEN_LIFETIME_SECONDS = 5 * 60;
 var SESSION_TOKEN_LIFETIME_MS = SESSION_TOKEN_LIFETIME_SECONDS * 1e3;
@@ -595,6 +601,19 @@ function resolveSameOriginUrl(request, value, fallbackPath) {
     return null;
   }
 }
+function normalizeAppUrl(value) {
+  if (!value?.trim()) return null;
+  try {
+    const url = new URL(value);
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
+function resolveOAuthCallbackUrl(request, ctx) {
+  const origin = ctx.config.appUrl ?? new URL(request.url).origin;
+  return new URL(`${ctx.config.authPrefix}/callback`, origin);
+}
 function bytesToBase64Url(bytes) {
   let binary = "";
   for (const byte of bytes) binary += String.fromCharCode(byte);
@@ -798,7 +817,7 @@ async function handleOAuthAuthorize(request, ctx) {
     return NextResponse.json({ error: "provider is required" }, { status: 400 });
   }
   const redirectTo = resolveSafeRelativeRedirectPath(rawRedirectTo, ctx.config.afterSignInUrl);
-  const redirectUri = new URL(`${ctx.config.authPrefix}/callback`, request.url);
+  const redirectUri = resolveOAuthCallbackUrl(request, ctx);
   redirectUri.searchParams.set("redirect_to", redirectTo);
   const verifier = randomBase64Url(32);
   const challenge = await sha256Base64Url(verifier);
@@ -1340,6 +1359,7 @@ function createSylphxMiddleware(userConfig = {}) {
     afterSignInUrl: userConfig.afterSignInUrl ?? "/dashboard",
     authPrefix: userConfig.authPrefix ?? "/auth",
     baasPrefix: userConfig.baasPrefix === false ? null : normalizeRoutePrefix(userConfig.baasPrefix ?? DEFAULT_BAAS_PREFIX),
+    appUrl: normalizeAppUrl(userConfig.appUrl),
     debug: userConfig.debug ?? false,
     orgRequired: userConfig.orgRequired ?? false,
     orgSelectionUrl: userConfig.orgSelectionUrl ?? "/select-organization",