@truly-you/trulyyou-web-sdk 0.1.7 → 0.1.9

package/dist/sdk/TrulyYouSDK.d.ts

@@ -11,10 +11,10 @@ export declare class TrulyYouSDK {
     private mockMobileDevice;
     constructor(config: TrulyYouSDKConfig);
     /**
-     * Extract actual keyId from stored value (authFlowId_keyId format)
-     * Returns just the keyId part after the underscore
+     * Helper to get keyId by authFlowId from localStorage
+     * Keys are stored as: trulyYouKeyId_<authFlowId> with value being just the keyId
      */
-    private extractActualKeyId;
+    private getKeyIdByAuthFlowId;
     /**
      * Fetch app branding from SDK backend
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@truly-you/trulyyou-web-sdk",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "TrulyYou Web SDK for secure authentication and payload signing",
   "type": "module",
   "main": "dist/index.esm.js",

package/src/sdk/TrulyYouSDK.ts

@@ -8,7 +8,7 @@ export class TrulyYouSDK {
   private authAppId: string | undefined
   private invisible: boolean
   private targetElement: string | HTMLElement | undefined
-  private brandingCache: { primary?: string; background?: string; secondary?: string; textColor?: string; icon?: string; name?: string } | null = null
+  private brandingCache: { primary?: string; background?: string; secondary?: string; textColor?: string; icon?: string; name?: string; authFlowId?: string } | null = null
   private realtimeUrl: string
   private mockMobileDevice: boolean
 
@@ -43,19 +43,22 @@ export class TrulyYouSDK {
 
 
   /**
-   * Extract actual keyId from stored value (authFlowId_keyId format)
-   * Returns just the keyId part after the underscore
+   * Helper to get keyId by authFlowId from localStorage
+   * Keys are stored as: trulyYouKeyId_<authFlowId> with value being just the keyId
    */
-  private extractActualKeyId(storedKeyId: string): string {
-    // Format is: authFlowId_keyId
-    // We only want the part after the underscore
-    const parts = storedKeyId.split('_')
-    if (parts.length > 1) {
-      // Return everything after the first underscore
-      return parts.slice(1).join('_')
+  private getKeyIdByAuthFlowId(authFlowId: string): string | null {
+    if (typeof window === 'undefined') return null
+    
+    const storageKey = `trulyYouKeyId_${authFlowId}`
+    const keyId = localStorage.getItem(storageKey)
+    
+    if (keyId) {
+      console.log(`[SDK]: Found keyId for authFlowId ${authFlowId}, key: ${storageKey}`)
+      return keyId
     }
-    // If no underscore, return as-is (backward compatibility)
-    return storedKeyId
+    
+    console.log(`[SDK]: No keyId found for authFlowId: ${authFlowId}`)
+    return null
   }
 
   /**
@@ -74,16 +77,17 @@ export class TrulyYouSDK {
         const data = await response.json()
         // Handle both formats: { app: {...} } or direct app object
         const app = data.app || data
-        if (app?.colors || app?.icon || app?.name) {
+        if (app?.colors || app?.icon || app?.name || app?.authFlowId) {
           this.brandingCache = {
             primary: app.colors?.primary,
             background: app.colors?.background,
             secondary: app.colors?.secondary,
             textColor: app.colors?.textColor,
             icon: app.icon,
-            name: app.name
+            name: app.name,
+            authFlowId: app.authFlowId
           }
-          console.log('[SDK]: Branding fetched and cached:', this.brandingCache)
+          console.log('[SDK]: Branding and authFlowId fetched and cached:', this.brandingCache)
         }
       }
     } catch (error) {
@@ -287,6 +291,15 @@ export class TrulyYouSDK {
         const probeUrl = new URL(`${this.frontendUrl}/sign`)
         probeUrl.searchParams.set('probe', 'true')
         probeUrl.searchParams.set('origin', origin)
+        
+        // Add authFlowId if available from branding cache
+        if (this.brandingCache?.authFlowId) {
+          probeUrl.searchParams.set('authFlowId', this.brandingCache.authFlowId)
+          console.log('[SDK-PROBE]: Adding authFlowId to probe:', this.brandingCache.authFlowId)
+        } else {
+          console.log('[SDK-PROBE]: No authFlowId available in cache, will check for any key')
+        }
+        
         iframe.src = probeUrl.toString()
         
         console.log('[SDK-PROBE]: Creating probe iframe with URL:', probeUrl.toString())
@@ -481,24 +494,23 @@ export class TrulyYouSDK {
           // Remove listener
           window.removeEventListener('message', handleMessage)
 
-          // Get keyId from message first (avoids race condition with localStorage)
-          // Fallback to localStorage if not in message
+          // Get keyId from message (enrollment page already stored it with authFlowId)
           const keyIdFromMessage = event.data.keyId
-          const trulyYouKeyId = keyIdFromMessage || localStorage.getItem('trulyYouKeyId')
           
-          if (trulyYouKeyId) {
-            console.log('[SDK]: Enrollment successful, keyId obtained:', trulyYouKeyId, keyIdFromMessage ? '(from message)' : '(from localStorage)')
-            // Also ensure it's in localStorage for future use
-            if (keyIdFromMessage && !localStorage.getItem('trulyYouKeyId')) {
-              localStorage.setItem('trulyYouKeyId', keyIdFromMessage)
-            }
-            resolve(trulyYouKeyId)
+          if (keyIdFromMessage) {
+            console.log('[SDK]: Enrollment successful, keyId obtained from message:', keyIdFromMessage)
+            // Note: keyId is already stored by enrollment page as trulyYouKeyId_<authFlowId>
+            resolve(keyIdFromMessage)
           } else {
-            // Final fallback: wait a bit and check localStorage again (race condition mitigation)
+            // Fallback: check localStorage using authFlowId
             setTimeout(() => {
-              const delayedKeyId = localStorage.getItem('trulyYouKeyId')
+              let delayedKeyId: string | null = null
+              if (this.brandingCache?.authFlowId) {
+                delayedKeyId = this.getKeyIdByAuthFlowId(this.brandingCache.authFlowId)
+              }
+              
               if (delayedKeyId) {
-                console.log('[SDK]: Enrollment successful, keyId obtained (delayed):', delayedKeyId)
+                console.log('[SDK]: Enrollment successful, keyId obtained (delayed) using authFlowId:', delayedKeyId)
                 resolve(delayedKeyId)
               } else {
                 reject(new Error('Enrollment completed but no keyId found in message or localStorage'))
@@ -1719,9 +1731,12 @@ export class TrulyYouSDK {
           // Generate a long, unique signatureId
           signatureId = `sig_${Date.now()}_${Math.random().toString(36).substring(2, 15)}${Math.random().toString(36).substring(2, 15)}${Math.random().toString(36).substring(2, 15)}${Math.random().toString(36).substring(2, 15)}`
           
-          // Get keyId and userId from localStorage
-          let storedKeyId = localStorage.getItem('trulyYouKeyId')
-          let keyId = storedKeyId ? this.extractActualKeyId(storedKeyId) : null
+          // Get keyId using authFlowId
+          let keyId: string | null = null
+          if (this.brandingCache?.authFlowId) {
+            keyId = this.getKeyIdByAuthFlowId(this.brandingCache.authFlowId)
+          }
+          
           const userIdStr = localStorage.getItem('trulyYouUserId')
           let userId: string | undefined
           if (userIdStr) {
@@ -1740,17 +1755,12 @@ export class TrulyYouSDK {
             console.log('[SDK]: No key found in localStorage, triggering enrollment...')
             
             // Probe iframe first to check if key exists there
-            storedKeyId = await this.probeIframeForKey()
-            keyId = storedKeyId ? this.extractActualKeyId(storedKeyId) : null
+            keyId = await this.probeIframeForKey()
             
             if (!keyId) {
               // No key found, trigger enrollment
               console.log('[SDK]: No key in iframe either, opening enrollment popup...')
-              await this.enrollWithPopup()
-              
-              // After enrollment, probe again to get the new key
-              storedKeyId = await this.probeIframeForKey()
-              keyId = storedKeyId ? this.extractActualKeyId(storedKeyId) : null
+              keyId = await this.enrollWithPopup()
               
               if (!keyId) {
                 throw new Error('Enrollment completed but no key found. Please try again.')
@@ -1794,8 +1804,7 @@ export class TrulyYouSDK {
 
           // Make the actual API call with signature and signatureId in header
           // Use keyId from signingResult (Device B's keyId for handoff, or localStorage keyId for mobile)
-          // Extract actual keyId from signingResult if it's in authFlowId_keyId format
-          const signingResultKeyId = signingResult.keyId ? this.extractActualKeyId(signingResult.keyId) : ''
+          const signingResultKeyId = signingResult.keyId || ''
           console.log('[SDK]: 🔍 KeyId debug - signingResult.keyId:', signingResultKeyId, 'localStorage keyId:', keyId, 'keyId type:', typeof signingResultKeyId, 'empty?:', signingResultKeyId === '')
           const keyIdForAuth = signingResultKeyId || keyId || ''
           console.log('[SDK]: ✅ Final keyId for auth header:', keyIdForAuth, '(from', signingResultKeyId && signingResultKeyId !== '' ? 'Device B' : 'localStorage fallback', ')')