@umituz/react-native-auth 4.2.15 → 4.2.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@umituz/react-native-auth",
-  "version": "4.2.15",
+  "version": "4.2.16",
   "description": "Authentication service for React Native apps - Secure, type-safe, and production-ready. Provider-agnostic design with dependency injection, configurable validation, and comprehensive error handling.",
   "main": "./src/index.ts",
   "types": "./src/index.ts",

package/src/infrastructure/utils/AuthValidation.ts

@@ -34,7 +34,8 @@ export function validateEmail(
 }
 
 export function validatePasswordForLogin(password: string): ValidationResult {
-  if (!password || password.trim().length === 0) return { isValid: false, error: "auth.validation.passwordRequired" };
+  // Don't trim passwords - whitespace may be intentional
+  if (!password || password.length === 0) return { isValid: false, error: "auth.validation.passwordRequired" };
   return { isValid: true };
 }
 
@@ -42,7 +43,8 @@ export function validatePasswordForRegister(
   password: string,
   config: PasswordConfig,
 ): PasswordStrengthResult {
-  if (!password || password.trim().length === 0) {
+  // Don't trim passwords - whitespace may be intentional
+  if (!password || password.length === 0) {
     return { isValid: false, error: "auth.validation.passwordRequired", requirements: { hasMinLength: false } };
   }
 
@@ -56,7 +58,8 @@ export function validatePasswordForRegister(
 }
 
 export function validatePasswordConfirmation(password: string, confirm: string): ValidationResult {
-  if (!confirm || confirm.trim().length === 0) return { isValid: false, error: "auth.validation.confirmPasswordRequired" };
+  // Don't trim passwords - whitespace may be intentional
+  if (!confirm || confirm.length === 0) return { isValid: false, error: "auth.validation.confirmPasswordRequired" };
   if (password !== confirm) return { isValid: false, error: "auth.validation.passwordsDoNotMatch" };
   return { isValid: true };
 }

package/src/infrastructure/utils/validation/sanitization.ts

@@ -14,31 +14,39 @@ export const SECURITY_LIMITS = {
 export type SecurityLimitKey = keyof typeof SECURITY_LIMITS;
 
 export const sanitizeWhitespace = (input: string): string => {
+  if (!input) return '';
   return input.trim().replace(/\s+/g, ' ');
 };
 
 export const sanitizeEmail = (email: string): string => {
+  if (!email) return '';
   const trimmed = email.trim().toLowerCase();
   return trimmed.substring(0, SECURITY_LIMITS.EMAIL_MAX_LENGTH);
 };
 
 export const sanitizePassword = (password: string): string => {
-  return password.trim().substring(0, SECURITY_LIMITS.PASSWORD_MAX_LENGTH);
+  // Don't trim passwords - leading/trailing whitespace may be intentional
+  // Only enforce max length for security
+  if (!password) return '';
+  return password.substring(0, SECURITY_LIMITS.PASSWORD_MAX_LENGTH);
 };
 
 export const sanitizeName = (name: string): string => {
+  if (!name) return '';
   const trimmed = sanitizeWhitespace(name);
   const noTags = trimmed.replace(/<[^>]*>/g, '');
   return noTags.substring(0, SECURITY_LIMITS.NAME_MAX_LENGTH);
 };
 
 export const sanitizeText = (text: string): string => {
+  if (!text) return '';
   const trimmed = sanitizeWhitespace(text);
   const noTags = trimmed.replace(/<[^>]*>/g, '');
   return noTags.substring(0, SECURITY_LIMITS.GENERAL_TEXT_MAX_LENGTH);
 };
 
 export const containsDangerousChars = (input: string): boolean => {
+  if (!input) return false;
   const dangerousPatterns = [
     /<script/i,
     /javascript:/i,
@@ -54,6 +62,7 @@ export const isWithinLengthLimit = (
   maxLength: number,
   minLength = 0
 ): boolean => {
+  if (!input) return minLength === 0;
   const length = input.trim().length;
   return length >= minLength && length <= maxLength;
 };

package/src/presentation/components/LoginForm.tsx

@@ -68,7 +68,7 @@ export const LoginForm: React.FC<LoginFormProps> = ({
       <AtomicButton
         variant="primary"
         onPress={() => { void handleSignIn(); }}
-        disabled={loading || !email.trim() || !password.trim()}
+        disabled={loading || !email.trim() || !password}
         fullWidth
         style={styles.signInButton}
       >

package/src/presentation/components/RegisterForm.tsx

@@ -128,7 +128,7 @@ export const RegisterForm: React.FC<RegisterFormProps> = ({
       <AtomicButton
         variant="primary"
         onPress={() => { void handleSignUp(); }}
-        disabled={loading || !email.trim() || !password.trim() || !confirmPassword.trim()}
+        disabled={loading || !email.trim() || !password || !confirmPassword}
         fullWidth
         style={styles.signUpButton}
       >

package/src/presentation/screens/PasswordPromptScreen.tsx

@@ -49,7 +49,8 @@ export const PasswordPromptScreen: React.FC<PasswordPromptScreenProps> = ({
     if (typeof __DEV__ !== "undefined" && __DEV__) {
       console.log("[PasswordPromptScreen] handleConfirm called, password length:", password.length);
     }
-    if (!password.trim()) {
+    // Don't trim password - whitespace may be intentional
+    if (!password) {
       setError('Password is required');
       return;
     }

package/src/presentation/stores/initializeAuthListener.ts

@@ -34,14 +34,16 @@ export function initializeAuthListener(
   if (!startInitialization()) {
     // Either already initializing or initialized - handle accordingly
     if (isListenerInitialized()) {
-      return handleExistingInitialization()!;
+      const unsubscribe = handleExistingInitialization();
+      return unsubscribe || handleInitializationInProgress();
     }
     return handleInitializationInProgress();
   }
 
   // If already initialized, increment ref count and return unsubscribe
   if (isListenerInitialized()) {
-    return handleExistingInitialization()!;
+    const unsubscribe = handleExistingInitialization();
+    return unsubscribe || (() => {});
   }
 
   const auth = getFirebaseAuth();