@truly-you/trulyyou-web-sdk 0.1.21 → 0.1.23

package/dist/sdk/TrulyYouSDK.d.ts

@@ -88,4 +88,9 @@ export declare class TrulyYouSDK {
      * @param handoff - If true, probes for handoff keyId (with _handoff suffix)
      */
     probeForKeyId(handoff?: boolean): Promise<string | null>;
+    /**
+     * Clear all keys (both handoff and non-handoff) from localStorage
+     * Clears from both same-origin localStorage and TrulyYou frontend's localStorage via iframe
+     */
+    clearAllKeys(): Promise<void>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@truly-you/trulyyou-web-sdk",
-  "version": "0.1.21",
+  "version": "0.1.23",
   "description": "TrulyYou Web SDK for secure authentication and payload signing",
   "type": "module",
   "main": "dist/index.esm.js",

package/src/sdk/TrulyYouSDK.ts

@@ -1202,6 +1202,44 @@ export class TrulyYouSDK {
               console.warn('[SDK]: ⚠️ WARNING - No keyId received from Device B via socket! Data:', data)
             }
             console.log('[SDK]: ✅ Using keyId from Device B:', deviceBKeyId, '(extracted from socket)')
+            
+            // Store handoff keyId in localStorage (Device A - desktop)
+            if (deviceBKeyId && this.brandingCache?.authFlowId) {
+              const authFlowId = this.brandingCache.authFlowId
+              const handoffStorageKey = `trulyYouKeyId_${authFlowId}_handoff`
+              
+              // Store in same-origin localStorage
+              if (typeof window !== 'undefined') {
+                localStorage.setItem(handoffStorageKey, deviceBKeyId)
+                console.log('[SDK]: ✅ Stored handoff keyId in localStorage:', handoffStorageKey, '=', deviceBKeyId)
+              }
+              
+              // Also store in TrulyYou frontend's localStorage via iframe
+              try {
+                const frontendUrl = this.frontendUrl
+                const iframe = document.createElement('iframe')
+                iframe.style.cssText = 'position: fixed; top: -9999px; left: -9999px; width: 1px; height: 1px; border: none; opacity: 0; pointer-events: none;'
+                
+                const storeUrl = new URL(`${frontendUrl}/store-handoff-keyid.html`)
+                storeUrl.searchParams.set('authFlowId', authFlowId)
+                storeUrl.searchParams.set('keyId', deviceBKeyId)
+                
+                iframe.src = storeUrl.toString()
+                document.body.appendChild(iframe)
+                
+                // Clean up after a delay
+                setTimeout(() => {
+                  if (iframe.parentNode) {
+                    iframe.parentNode.removeChild(iframe)
+                  }
+                }, 2000)
+                
+                console.log('[SDK]: ✅ Stored handoff keyId in TrulyYou frontend localStorage via iframe')
+              } catch (error) {
+                console.warn('[SDK]: Failed to store handoff keyId in TrulyYou frontend localStorage:', error)
+              }
+            }
+            
             const result: SigningResult = {
               signature: signature,
               keyId: deviceBKeyId,
@@ -1931,5 +1969,55 @@ export class TrulyYouSDK {
     console.log(`[SDK-PROBE]: ${handoff ? 'Handoff ' : ''}KeyId not found in same-origin localStorage, probing TrulyYou frontend...`)
     return await this.probeIframeForKey(handoff)
   }
+
+  /**
+   * Clear all keys (both handoff and non-handoff) from localStorage
+   * Clears from both same-origin localStorage and TrulyYou frontend's localStorage via iframe
+   */
+  async clearAllKeys(): Promise<void> {
+    // Ensure authFlowId is loaded first
+    await this.ensureAuthFlowIdLoaded()
+    
+    if (!this.brandingCache?.authFlowId) {
+      console.warn('[SDK-CLEAR]: authFlowId is required but not available')
+      return
+    }
+
+    const authFlowId = this.brandingCache.authFlowId
+
+    // Clear from same-origin localStorage
+    if (typeof window !== 'undefined') {
+      const regularKey = `trulyYouKeyId_${authFlowId}`
+      const handoffKey = `trulyYouKeyId_${authFlowId}_handoff`
+      
+      localStorage.removeItem(regularKey)
+      localStorage.removeItem(handoffKey)
+      
+      console.log('[SDK-CLEAR]: ✅ Cleared keys from same-origin localStorage:', regularKey, handoffKey)
+    }
+
+    // Also clear from TrulyYou frontend's localStorage via iframe
+    try {
+      const iframe = document.createElement('iframe')
+      iframe.style.cssText = 'position: fixed; top: -9999px; left: -9999px; width: 1px; height: 1px; border: none; opacity: 0; pointer-events: none;'
+      
+      const clearUrl = new URL(`${this.frontendUrl}/clear-keys.html`)
+      clearUrl.searchParams.set('authFlowId', authFlowId)
+      
+      iframe.src = clearUrl.toString()
+      document.body.appendChild(iframe)
+      
+      // Clean up after a delay
+      setTimeout(() => {
+        if (iframe.parentNode) {
+          iframe.parentNode.removeChild(iframe)
+        }
+      }, 2000)
+      
+      console.log('[SDK-CLEAR]: ✅ Cleared keys from TrulyYou frontend localStorage via iframe')
+    } catch (error) {
+      console.warn('[SDK-CLEAR]: Failed to clear keys from TrulyYou frontend localStorage:', error)
+    }
+  }
 }