authscape 1.0.778 → 1.0.780

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "authscape",
-  "version": "1.0.778",
+  "version": "1.0.780",
   "description": "",
   "main": "index.js",
   "files": [

package/src/scripts/postinstall.js

@@ -41,6 +41,64 @@ import { createSitemapRoute } from 'authscape/src/lib/sitemap-route';
 export const GET = createSitemapRoute(process.env.apiUri);
 `;
 
+// ---------------------------------------------------------------------------
+// /signin-oidc page templates
+// ---------------------------------------------------------------------------
+// AuthScapeApp reads the PKCE `code` query param from `useSearchParams()`
+// (next/navigation). If the consumer doesn't have a `/signin-oidc` page, the
+// IDP's redirect back lands on Next.js's 404 page — and Webkit/Safari
+// doesn't reliably hydrate `useSearchParams()` on the 404 page. The code is
+// never read, the user is stuck.
+//
+// Making /signin-oidc a real Next.js page (200 status) fixes this in every
+// browser. The page itself is a placeholder; AuthScapeApp's signInValidator
+// does the actual token exchange.
+
+const SIGNIN_OIDC_PAGES_ROUTER_TEMPLATE = `// Auto-generated by AuthScape - Do not edit manually.
+// Exists so /signin-oidc returns HTTP 200 (not the Next.js 404 page).
+// Required for Webkit/Safari: useSearchParams() doesn't hydrate on the 404
+// page in Webkit, so the PKCE 'code' query param is never read and sign-in
+// silently stalls. With this real page in place, AuthScapeApp's
+// signInValidator picks up the code and completes the exchange normally.
+export default function SignInOidc() {
+  return (
+    <div
+      style={{
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "center",
+        minHeight: "60vh",
+        fontFamily: "system-ui, -apple-system, Segoe UI, sans-serif",
+        color: "#666",
+      }}
+    >
+      Signing you in…
+    </div>
+  );
+}
+`;
+
+const SIGNIN_OIDC_APP_ROUTER_TEMPLATE = `// Auto-generated by AuthScape - Do not edit manually.
+// Exists so /signin-oidc returns HTTP 200 (not the Next.js 404 page).
+// Required for Webkit/Safari to pick up the PKCE 'code' query param.
+export default function SignInOidc() {
+  return (
+    <div
+      style={{
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "center",
+        minHeight: "60vh",
+        fontFamily: "system-ui, -apple-system, Segoe UI, sans-serif",
+        color: "#666",
+      }}
+    >
+      Signing you in…
+    </div>
+  );
+}
+`;
+
 function detectProjectStructure() {
   // Get the parent directory where the user ran npm install
   // This goes up from node_modules/authscape to the project root
@@ -118,9 +176,42 @@ function setupSitemap() {
   }
 }
 
+function setupSigninOidc() {
+  const structure = detectProjectStructure();
+  if (!structure) return;
+
+  const targetFile =
+    structure.type === 'app'
+      ? path.join(structure.baseDir, 'signin-oidc', 'page.js')
+      : path.join(structure.baseDir, 'signin-oidc.js');
+
+  if (fs.existsSync(targetFile)) {
+    // File exists, don't overwrite — consumer may have their own handler
+    return;
+  }
+
+  try {
+    fs.mkdirSync(path.dirname(targetFile), { recursive: true });
+    fs.writeFileSync(
+      targetFile,
+      structure.type === 'app' ? SIGNIN_OIDC_APP_ROUTER_TEMPLATE : SIGNIN_OIDC_PAGES_ROUTER_TEMPLATE,
+      'utf8'
+    );
+    console.log(
+      '✅ AuthScape signin-oidc page configured at /signin-oidc (' +
+        (structure.type === 'app' ? 'App Router' : 'Pages Router') +
+        ')'
+    );
+  } catch (error) {
+    console.log('⚠️  Could not auto-configure /signin-oidc:', error.message);
+    console.log('   Without this page, Safari users will fail to sign in.');
+  }
+}
+
 // Run the setup
 try {
   setupSitemap();
+  setupSigninOidc();
 } catch (error) {
   // Completely silent failure to avoid breaking npm install
   // Only log if there's an unexpected error