@zoreal/oauth2-react 0.2.24 → 0.2.25

package/README.md

@@ -269,7 +269,7 @@ What the modal does:
 | **Live status** | The copy and the title follow the pairing: waiting for a scan, then waiting for approval once the holder has claimed the code (the spent QR blurs out behind a phone glyph). |
 | **Title** | Says what the scan is for, inferred from the request: "Scan to sign in" for `openid`, `email` and `profile.name`; "Scan to verify your identity" once a document attribute such as `zoreal.age` or `profile.birthdate` is requested; "Scan to prove you are a real human" for `openid` alone with `acr_values: 'zoreal.live'`. Override with `intent`, one of `'sign-in'`, `'identify'`, `'presence'`, when the scope does not say. |
 | **Countdown** | Counts down to expiry, turning amber under 20s. Reads the clock each tick rather than decrementing, so a backgrounded tab comes back honest. |
-| **Timeout** | Closes and cancels at zero. Defaults to 120s; override with `pairingTimeoutMs`. The provider's own expiry wins when it is shorter. |
+| **Timeout** | Closes and cancels at zero. Follows the provider's expiry (five minutes); `pairingTimeoutMs` can shorten it, never extend it. |
 | **Cancel** | The X, the Cancel button, `Escape`, clicking outside and the timeout are one behaviour: abort the poll, close the modal. An orphaned poll is exactly how a request gets cancelled for over-polling. |
 | **No ZOREAL ID yet** | A footer says the same code also installs the app. Without it the panel reads as "scan this with something I do not have", and the flow dead-ends at the one moment it can still be recovered. |
 | **Themes** | `theme="auto"` (default) follows `prefers-color-scheme`; `"light"` and `"dark"` force it. In dark mode the code is drawn light on the dark surface, the mark included, and the light around it runs brighter and wider. |

package/dist/index.cjs

@@ -42,7 +42,7 @@ var import_react2 = require("react");
 
 // src/wire.ts
 var WIRE_VERSION = 1;
-var SDK_VERSION = "0.2.24";
+var SDK_VERSION = "0.2.25";
 var DEFAULT_ISSUER = "https://id.zoreal.com";
 var POLL_INTERVAL_MS = 2e3;
 var POLL_INTERVAL_ENROLLING_MS = 5e3;
@@ -1462,7 +1462,7 @@ function ensureStyles() {
 
 // src/PairingModal.tsx
 var import_jsx_runtime3 = require("react/jsx-runtime");
-var DEFAULT_PAIRING_TIMEOUT_MS = 12e4;
+var DEFAULT_PAIRING_TIMEOUT_MS = 3e5;
 var URGENT_SECONDS = 20;
 function mmss(totalSeconds) {
   const m = Math.floor(totalSeconds / 60);
@@ -1484,14 +1484,14 @@ function PairingModal({
   onCancel,
   locale,
   theme = "auto",
-  timeoutMs = DEFAULT_PAIRING_TIMEOUT_MS,
+  timeoutMs,
   intent = "sign-in"
 }) {
   const t = strings(locale);
   const titleId = (0, import_react.useId)();
   const closeRef = (0, import_react.useRef)(null);
   const deadlineRef = (0, import_react.useRef)(0);
-  const [remaining, setRemaining] = (0, import_react.useState)(Math.round(timeoutMs / 1e3));
+  const [remaining, setRemaining] = (0, import_react.useState)(Math.round((timeoutMs ?? DEFAULT_PAIRING_TIMEOUT_MS) / 1e3));
   const settled = state.status === "claimed" || state.status === "enrolling";
   const [frameUrl, setFrameUrl] = (0, import_react.useState)(qrUrl);
   (0, import_react.useEffect)(() => {
@@ -1517,8 +1517,10 @@ function PairingModal({
   }, []);
   (0, import_react.useEffect)(() => {
     const serverMs = typeof state.expiresIn === "number" ? state.expiresIn * 1e3 : Infinity;
-    deadlineRef.current = Date.now() + Math.min(timeoutMs, serverMs);
-    setRemaining(Math.round(Math.min(timeoutMs, serverMs) / 1e3));
+    const capMs = timeoutMs ?? (Number.isFinite(serverMs) ? serverMs : DEFAULT_PAIRING_TIMEOUT_MS);
+    const ms = Math.min(capMs, serverMs);
+    deadlineRef.current = Date.now() + ms;
+    setRemaining(Math.round(ms / 1e3));
     const id = setInterval(() => {
       const left = Math.max(0, Math.ceil((deadlineRef.current - Date.now()) / 1e3));
       setRemaining(left);