@truly-you/trulyyou-web-sdk 0.1.3 → 0.1.5

package/dist/sdk/TrulyYouSDK.d.ts

@@ -10,6 +10,11 @@ export declare class TrulyYouSDK {
     private realtimeUrl;
     private mockMobileDevice;
     constructor(config: TrulyYouSDKConfig);
+    /**
+     * Extract actual keyId from stored value (authFlowId_keyId format)
+     * Returns just the keyId part after the underscore
+     */
+    private extractActualKeyId;
     /**
      * Fetch app branding from SDK backend
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@truly-you/trulyyou-web-sdk",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "TrulyYou Web SDK for secure authentication and payload signing",
   "type": "module",
   "main": "dist/index.esm.js",
@@ -44,4 +44,3 @@
     "pusher-js": "^8.4.0-rc2"
   }
 }
-

package/src/sdk/TrulyYouSDK.ts

@@ -42,6 +42,22 @@ export class TrulyYouSDK {
   }
 
 
+  /**
+   * Extract actual keyId from stored value (authFlowId_keyId format)
+   * Returns just the keyId part after the underscore
+   */
+  private extractActualKeyId(storedKeyId: string): string {
+    // Format is: authFlowId_keyId
+    // We only want the part after the underscore
+    const parts = storedKeyId.split('_')
+    if (parts.length > 1) {
+      // Return everything after the first underscore
+      return parts.slice(1).join('_')
+    }
+    // If no underscore, return as-is (backward compatibility)
+    return storedKeyId
+  }
+
   /**
    * Fetch app branding from SDK backend
    */
@@ -353,12 +369,12 @@ export class TrulyYouSDK {
     const clientId = `client_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`
 
     // Create session directly via SDK backend
+    // Backend will fetch authFlowId from the app document
     const sessionResponse = await fetch(`${this.apiUrl}/api/sessions`, {
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },
       body: JSON.stringify({
         appId: appId,
-        flowId: app.authFlowId,
         clientId: clientId
       })
     })
@@ -1683,7 +1699,8 @@ export class TrulyYouSDK {
           signatureId = `sig_${Date.now()}_${Math.random().toString(36).substring(2, 15)}${Math.random().toString(36).substring(2, 15)}${Math.random().toString(36).substring(2, 15)}${Math.random().toString(36).substring(2, 15)}`
           
           // Get keyId and userId from localStorage
-          let keyId = localStorage.getItem('trulyYouKeyId')
+          let storedKeyId = localStorage.getItem('trulyYouKeyId')
+          let keyId = storedKeyId ? this.extractActualKeyId(storedKeyId) : null
           const userIdStr = localStorage.getItem('trulyYouUserId')
           let userId: string | undefined
           if (userIdStr) {
@@ -1702,7 +1719,8 @@ export class TrulyYouSDK {
             console.log('[SDK]: No key found in localStorage, triggering enrollment...')
             
             // Probe iframe first to check if key exists there
-            keyId = await this.probeIframeForKey()
+            storedKeyId = await this.probeIframeForKey()
+            keyId = storedKeyId ? this.extractActualKeyId(storedKeyId) : null
             
             if (!keyId) {
               // No key found, trigger enrollment
@@ -1710,7 +1728,8 @@ export class TrulyYouSDK {
               await this.enrollWithPopup()
               
               // After enrollment, probe again to get the new key
-              keyId = await this.probeIframeForKey()
+              storedKeyId = await this.probeIframeForKey()
+              keyId = storedKeyId ? this.extractActualKeyId(storedKeyId) : null
               
               if (!keyId) {
                 throw new Error('Enrollment completed but no key found. Please try again.')
@@ -1754,9 +1773,11 @@ export class TrulyYouSDK {
 
           // Make the actual API call with signature and signatureId in header
           // Use keyId from signingResult (Device B's keyId for handoff, or localStorage keyId for mobile)
-          console.log('[SDK]: 🔍 KeyId debug - signingResult.keyId:', signingResult.keyId, 'localStorage keyId:', keyId, 'keyId type:', typeof signingResult.keyId, 'empty?:', signingResult.keyId === '')
-          const keyIdForAuth = signingResult.keyId || keyId || ''
-          console.log('[SDK]: ✅ Final keyId for auth header:', keyIdForAuth, '(from', signingResult.keyId && signingResult.keyId !== '' ? 'Device B' : 'localStorage fallback', ')')
+          // Extract actual keyId from signingResult if it's in authFlowId_keyId format
+          const signingResultKeyId = signingResult.keyId ? this.extractActualKeyId(signingResult.keyId) : ''
+          console.log('[SDK]: 🔍 KeyId debug - signingResult.keyId:', signingResultKeyId, 'localStorage keyId:', keyId, 'keyId type:', typeof signingResultKeyId, 'empty?:', signingResultKeyId === '')
+          const keyIdForAuth = signingResultKeyId || keyId || ''
+          console.log('[SDK]: ✅ Final keyId for auth header:', keyIdForAuth, '(from', signingResultKeyId && signingResultKeyId !== '' ? 'Device B' : 'localStorage fallback', ')')
           const authHeaderValue = btoa(JSON.stringify({ signature: signingResult.signature, keyId: keyIdForAuth, signatureId }))
 
           const response = await fetch(url, {