@truly-you/trulyyou-web-sdk 0.1.21 → 0.1.22

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@truly-you/trulyyou-web-sdk",
-  "version": "0.1.21",
+  "version": "0.1.22",
   "description": "TrulyYou Web SDK for secure authentication and payload signing",
   "type": "module",
   "main": "dist/index.esm.js",

package/src/sdk/TrulyYouSDK.ts

@@ -1202,6 +1202,44 @@ export class TrulyYouSDK {
               console.warn('[SDK]: ⚠️ WARNING - No keyId received from Device B via socket! Data:', data)
             }
             console.log('[SDK]: ✅ Using keyId from Device B:', deviceBKeyId, '(extracted from socket)')
+            
+            // Store handoff keyId in localStorage (Device A - desktop)
+            if (deviceBKeyId && this.brandingCache?.authFlowId) {
+              const authFlowId = this.brandingCache.authFlowId
+              const handoffStorageKey = `trulyYouKeyId_${authFlowId}_handoff`
+              
+              // Store in same-origin localStorage
+              if (typeof window !== 'undefined') {
+                localStorage.setItem(handoffStorageKey, deviceBKeyId)
+                console.log('[SDK]: ✅ Stored handoff keyId in localStorage:', handoffStorageKey, '=', deviceBKeyId)
+              }
+              
+              // Also store in TrulyYou frontend's localStorage via iframe
+              try {
+                const frontendUrl = this.frontendUrl
+                const iframe = document.createElement('iframe')
+                iframe.style.cssText = 'position: fixed; top: -9999px; left: -9999px; width: 1px; height: 1px; border: none; opacity: 0; pointer-events: none;'
+                
+                const storeUrl = new URL(`${frontendUrl}/store-handoff-keyid.html`)
+                storeUrl.searchParams.set('authFlowId', authFlowId)
+                storeUrl.searchParams.set('keyId', deviceBKeyId)
+                
+                iframe.src = storeUrl.toString()
+                document.body.appendChild(iframe)
+                
+                // Clean up after a delay
+                setTimeout(() => {
+                  if (iframe.parentNode) {
+                    iframe.parentNode.removeChild(iframe)
+                  }
+                }, 2000)
+                
+                console.log('[SDK]: ✅ Stored handoff keyId in TrulyYou frontend localStorage via iframe')
+              } catch (error) {
+                console.warn('[SDK]: Failed to store handoff keyId in TrulyYou frontend localStorage:', error)
+              }
+            }
+            
             const result: SigningResult = {
               signature: signature,
               keyId: deviceBKeyId,