autherr 2.0.40 → 2.0.41

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/src/provider/AutherrProvider.tsx +46 -46
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "autherr",
3
- "version": "2.0.40",
3
+ "version": "2.0.41",
4
4
  "dest": "dist",
5
5
  "main": "dist/index.js",
6
6
  "scripts": {
package/src/provider/AutherrProvider.tsx CHANGED
@@ -68,59 +68,59 @@ export function AutherrProvider({
68
68
  // const signup = () => buildRedirect("signup");
69
69
 
70
70
  // NEW FINAL CODE:
71
+ const buildRedirect = async (path: "login" | "signup") => {
72
+ const state = crypto.randomUUID();
73
+
74
+ const assertion = await createClientAssertion(
75
+ clientId,
76
+ clientPrivateKey
77
+ );
78
+
79
+ // ⏱️ 45 seconds TTL
80
+ const ttlSeconds = 45;
81
+
82
+ // IMPORTANT:
83
+ // - SameSite=Lax → sent on top-level navigation
84
+ // - Secure → HTTPS only (required in prod)
85
+ // - Path=/ → available to auth routes
86
+ document.cookie =
87
+ `autherr_client_assertion=${encodeURIComponent(assertion)}; ` +
88
+ `Max-Age=${ttlSeconds}; ` +
89
+ `Path=/; ` +
90
+ `SameSite=Lax; ` +
91
+ `Secure`;
92
+
93
+ const url = new URL(`${baseUrl}/auth/${path}`);
94
+ url.searchParams.set("client_id", clientId);
95
+ url.searchParams.set("redirect_uri", window.location.origin);
96
+ url.searchParams.set("state", state);
97
+
98
+ window.location.href = url.toString();
99
+ };
100
+
101
+ // let redirecting = false;
71
102
  // const buildRedirect = async (path: "login" | "signup") => {
103
+ // if(redirecting) return;
104
+ // redirecting=true;
72
105
  // const state = crypto.randomUUID();
106
+ // const assertion = await createClientAssertion(clientId, clientPrivateKey);
73
107
 
74
- // const assertion = await createClientAssertion(
75
- // clientId,
76
- // clientPrivateKey
77
- // );
78
-
79
- // // ⏱️ 45 seconds TTL
80
- // const ttlSeconds = 45;
81
-
82
- // // IMPORTANT:
83
- // // - SameSite=Lax → sent on top-level navigation
84
- // // - Secure → HTTPS only (required in prod)
85
- // // - Path=/ → available to auth routes
86
- // document.cookie =
87
- // `autherr_client_assertion=${encodeURIComponent(assertion)}; ` +
88
- // `Max-Age=${ttlSeconds}; ` +
89
- // `Path=/; ` +
90
- // `SameSite=Lax; ` +
91
- // `Secure`;
108
+ // const form = document.createElement("form");
109
+ // form.method = "POST";
110
+ // form.action =
111
+ // `${baseUrl}/auth/${path}` +
112
+ // `?client_id=${encodeURIComponent(clientId)}` +
113
+ // `&redirect_uri=${encodeURIComponent(window.location.origin)}` +
114
+ // `&state=${encodeURIComponent(state)}`;
92
115
 
93
- // const url = new URL(`${baseUrl}/auth/${path}`);
94
- // url.searchParams.set("client_id", clientId);
95
- // url.searchParams.set("redirect_uri", window.location.origin);
96
- // url.searchParams.set("state", state);
116
+ // form.innerHTML = `
117
+ // <input type="hidden" name="client_assertion" value="${encodeURIComponent(assertion)}" />
118
+ // `;
97
119
 
98
- // window.location.href = url.toString();
120
+ // document.body.appendChild(form);
121
+ // form.submit();
99
122
  // };
100
123
 
101
- let redirecting = false;
102
- const buildRedirect = async (path: "login" | "signup") => {
103
- if(redirecting) return;
104
- redirecting=true;
105
- const state = crypto.randomUUID();
106
- const assertion = await createClientAssertion(clientId, clientPrivateKey);
107
-
108
- const form = document.createElement("form");
109
- form.method = "POST";
110
- form.action =
111
- `${baseUrl}/auth/${path}` +
112
- `?client_id=${encodeURIComponent(clientId)}` +
113
- `&redirect_uri=${encodeURIComponent(window.location.origin)}` +
114
- `&state=${encodeURIComponent(state)}`;
115
-
116
- form.innerHTML = `
117
- <input type="hidden" name="client_assertion" value="${encodeURIComponent(assertion)}" />
118
- `;
119
-
120
- document.body.appendChild(form);
121
- form.submit();
122
- };
123
-
124
124
 
125
125
 
126
126