@truly-you/trulyyou-web-sdk 0.1.8 → 0.1.10

package/dist/sdk/TrulyYouSDK.d.ts

@@ -69,7 +69,7 @@ export declare class TrulyYouSDK {
         uri: string;
         method: string;
         headers?: any;
-    }, signatureId?: string): Promise<SigningResult>;
+    }, signatureId?: string, existingKeyId?: string): Promise<SigningResult>;
     /**
      * Fetch with automatic payload signing
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@truly-you/trulyyou-web-sdk",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "TrulyYou Web SDK for secure authentication and payload signing",
   "type": "module",
   "main": "dist/index.esm.js",

package/src/sdk/TrulyYouSDK.ts

@@ -1657,7 +1657,7 @@ export class TrulyYouSDK {
     uri: string
     method: string
     headers?: any
-  }, signatureId?: string): Promise<SigningResult> {
+  }, signatureId?: string, existingKeyId?: string): Promise<SigningResult> {
     try {
       // Step 1: Check if desktop device first - desktop uses WebSocket handoff (no key probe needed)
       if (this.isDesktopDevice()) {
@@ -1668,21 +1668,24 @@ export class TrulyYouSDK {
         return await this.signWithWebSocketHandoff(apiCallStructure, signatureId)
       }
       
-      // Step 2: Mobile device - probe iframe to check if key exists in iframe's localStorage and is active in backend
-      console.log('[SDK]: Mobile device detected, probing iframe for existing key...')
-      let keyId = await this.probeIframeForKey()
+      // Step 2: Mobile device - use existing keyId if provided, otherwise probe
+      let keyId = existingKeyId
       
       if (!keyId) {
-        // Step 3: No valid active key found (missing, invalid, revoked, or expired) - open enrollment popup
-        console.log('[SDK]: No valid active key found (missing, invalid, revoked, or expired), opening enrollment popup...')
-        await this.enrollWithPopup()
-        
-        // Step 4: After enrollment, probe again to verify new key is active
+        console.log('[SDK]: Mobile device detected, probing iframe for existing key...')
         keyId = await this.probeIframeForKey()
         
         if (!keyId) {
-          throw new Error('Enrollment completed but no valid active key found')
+          // Step 3: No valid active key found (missing, invalid, revoked, or expired) - open enrollment popup
+          console.log('[SDK]: No valid active key found (missing, invalid, revoked, or expired), opening enrollment popup...')
+          keyId = await this.enrollWithPopup()
+          
+          if (!keyId) {
+            throw new Error('Enrollment completed but no valid active key found')
+          }
         }
+      } else {
+        console.log('[SDK]: Using existing keyId from enrollment:', keyId)
       }
       
       console.log('[SDK]: Valid active key found, signing with keyId:', keyId)
@@ -1760,10 +1763,7 @@ export class TrulyYouSDK {
             if (!keyId) {
               // No key found, trigger enrollment
               console.log('[SDK]: No key in iframe either, opening enrollment popup...')
-              await this.enrollWithPopup()
-              
-              // After enrollment, probe again to get the new key
-              keyId = await this.probeIframeForKey()
+              keyId = await this.enrollWithPopup()
               
               if (!keyId) {
                 throw new Error('Enrollment completed but no key found. Please try again.')
@@ -1802,8 +1802,8 @@ export class TrulyYouSDK {
             throw new Error('Failed to create signature: ' + (errorData.error || 'Creation request failed'))
           }
 
-          // Now sign the payload (pass signatureId for desktop handoff)
-          const signingResult = await this.signPayload(apiCallStructure, signatureId)
+          // Now sign the payload (pass signatureId for desktop handoff, and keyId if we have it)
+          const signingResult = await this.signPayload(apiCallStructure, signatureId, keyId || undefined)
 
           // Make the actual API call with signature and signatureId in header
           // Use keyId from signingResult (Device B's keyId for handoff, or localStorage keyId for mobile)