@truly-you/trulyyou-web-sdk 0.1.5 → 0.1.6

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "@truly-you/trulyyou-web-sdk",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "TrulyYou Web SDK for secure authentication and payload signing",
   "type": "module",
   "main": "dist/index.esm.js",
   "module": "dist/index.esm.js",
+  "unpkg": "dist/index.umd.js",
   "types": "dist/index.d.ts",
   "private": false,
   "publishConfig": {

package/src/sdk/TrulyYouSDK.ts

@@ -288,6 +288,10 @@ export class TrulyYouSDK {
         probeUrl.searchParams.set('probe', 'true')
         probeUrl.searchParams.set('origin', origin)
         iframe.src = probeUrl.toString()
+        
+        console.log('[SDK-PROBE]: Creating probe iframe with URL:', probeUrl.toString())
+        console.log('[SDK-PROBE]: Current origin:', origin)
+        console.log('[SDK-PROBE]: Frontend URL:', this.frontendUrl)
 
         let timeout: NodeJS.Timeout | undefined
         let backendCheckPromise: Promise<boolean> | null = null
@@ -303,16 +307,29 @@ export class TrulyYouSDK {
         }
 
         const handleMessage = async (event: MessageEvent) => {
+          console.log('[SDK-PROBE]: Received message:', event.data, 'from origin:', event.origin)
+          
           try {
             const frontendOrigin = new URL(this.frontendUrl).origin
-            if (event.origin !== frontendOrigin) return
+            console.log('[SDK-PROBE]: Checking origin - expected:', frontendOrigin, 'received:', event.origin)
+            if (event.origin !== frontendOrigin) {
+              console.log('[SDK-PROBE]: Origin mismatch, ignoring message')
+              return
+            }
             
           } catch (e) {
-            if (!event.origin.includes(window.location.hostname)) return
+            console.log('[SDK-PROBE]: Origin check failed, using hostname fallback')
+            if (!event.origin.includes(window.location.hostname)) {
+              console.log('[SDK-PROBE]: Hostname not in origin, ignoring message')
+              return
+            }
           }
 
           const data = event.data as any
+          console.log('[SDK-PROBE]: Message passed origin check, type:', data?.type)
+          
           if (data?.type === 'KEY_CHECK_RESULT') {
+            console.log('[SDK-PROBE]: KEY_CHECK_RESULT received - hasKey:', data.hasKey, 'keyId:', data.keyId)
             cleanup()
             if (data.hasKey && data.keyId) {
               // Key found in localStorage - it will be validated when used in /api/signatures/create
@@ -321,6 +338,7 @@ export class TrulyYouSDK {
               resolve(null)
             }
           } else if (data?.type === 'KEY_CHECK_FAILED') {
+            console.log('[SDK-PROBE]: KEY_CHECK_FAILED received')
             cleanup()
             resolve(null)
           }
@@ -328,13 +346,16 @@ export class TrulyYouSDK {
 
         window.addEventListener('message', handleMessage)
         document.body.appendChild(iframe)
+        console.log('[SDK-PROBE]: Iframe appended to body, waiting for response...')
 
         // Short timeout to keep UX snappy
         timeout = setTimeout(() => {
+          console.log('[SDK-PROBE]: Timeout reached (1500ms), no response from iframe')
           cleanup()
           resolve(null)
         }, 1500)
-      } catch {
+      } catch (error) {
+        console.error('[SDK-PROBE]: Error in probeIframeForKey:', error)
         resolve(null)
       }
     })