@truly-you/trulyyou-web-sdk 0.1.18 → 0.1.20

package/dist/sdk/TrulyYouSDK.d.ts

@@ -52,6 +52,7 @@ export declare class TrulyYouSDK {
      * Probe iframe to check if key exists in iframe's localStorage
      * Also checks backend to verify key exists and is active
      * REQUIRES authFlowId to be loaded first
+     * @param handoff - If true, probes for handoff keyId (with _handoff suffix)
      */
     private probeIframeForKey;
     /**
@@ -81,4 +82,10 @@ export declare class TrulyYouSDK {
      * Fetch with automatic payload signing
      */
     fetchWithSignature(url: string, options?: FetchOptions): Promise<FetchResult>;
+    /**
+     * Public method to probe for keyId - checks localStorage first, then probes TrulyYou frontend via iframe
+     * Returns the keyId if found, null otherwise
+     * @param handoff - If true, probes for handoff keyId (with _handoff suffix)
+     */
+    probeForKeyId(handoff?: boolean): Promise<string | null>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@truly-you/trulyyou-web-sdk",
-  "version": "0.1.18",
+  "version": "0.1.20",
   "description": "TrulyYou Web SDK for secure authentication and payload signing",
   "type": "module",
   "main": "dist/index.esm.js",

package/src/sdk/TrulyYouSDK.ts

@@ -308,8 +308,9 @@ export class TrulyYouSDK {
    * Probe iframe to check if key exists in iframe's localStorage
    * Also checks backend to verify key exists and is active
    * REQUIRES authFlowId to be loaded first
+   * @param handoff - If true, probes for handoff keyId (with _handoff suffix)
    */
-  private async probeIframeForKey(): Promise<string | null> {
+  private async probeIframeForKey(handoff: boolean = false): Promise<string | null> {
     // Ensure authFlowId is loaded before probing
     await this.ensureAuthFlowIdLoaded()
     
@@ -332,7 +333,10 @@ export class TrulyYouSDK {
         // Add authFlowId (guaranteed to exist now after ensureAuthFlowIdLoaded)
         const authFlowId = this.brandingCache!.authFlowId!
         probeUrl.searchParams.set('authFlowId', authFlowId)
-        console.log('[SDK-PROBE]: Adding authFlowId to probe:', authFlowId)
+        if (handoff) {
+          probeUrl.searchParams.set('handoff', 'true')
+        }
+        console.log(`[SDK-PROBE]: Adding authFlowId to probe: ${authFlowId}${handoff ? ' (handoff)' : ''}`)
         
         iframe.src = probeUrl.toString()
 
@@ -1884,5 +1888,35 @@ export class TrulyYouSDK {
       throw error
     }
   }
+
+  /**
+   * Public method to probe for keyId - checks localStorage first, then probes TrulyYou frontend via iframe
+   * Returns the keyId if found, null otherwise
+   * @param handoff - If true, probes for handoff keyId (with _handoff suffix)
+   */
+  async probeForKeyId(handoff: boolean = false): Promise<string | null> {
+    // Ensure authFlowId is loaded first
+    await this.ensureAuthFlowIdLoaded()
+    
+    if (!this.brandingCache?.authFlowId) {
+      console.warn('[SDK-PROBE]: authFlowId is required but not available')
+      return null
+    }
+
+    const authFlowId = this.brandingCache.authFlowId
+
+    // First, check localStorage (same origin - this app's localStorage)
+    const storageKey = handoff ? `trulyYouKeyId_${authFlowId}_handoff` : `trulyYouKeyId_${authFlowId}`
+    const keyIdFromStorage = typeof window !== 'undefined' ? localStorage.getItem(storageKey) : null
+    
+    if (keyIdFromStorage) {
+      console.log(`[SDK-PROBE]: Found ${handoff ? 'handoff ' : ''}keyId in same-origin localStorage`)
+      return keyIdFromStorage
+    }
+
+    // If not found in same-origin localStorage, probe TrulyYou frontend's localStorage via iframe
+    console.log(`[SDK-PROBE]: ${handoff ? 'Handoff ' : ''}KeyId not found in same-origin localStorage, probing TrulyYou frontend...`)
+    return await this.probeIframeForKey(handoff)
+  }
 }