azirid-react 0.10.3 → 0.10.5

package/README.md

@@ -229,7 +229,7 @@ const [view, setView] = useState<AuthView>('login')
 | `onViewChange`        | `(view: AuthView) => void`              | —         | Callback when navigation links are clicked (controlled mode)                     |
 | `defaultView`         | `AuthView`                              | `'login'` | Initial view for uncontrolled mode                                               |
 | `logo`                | `ReactNode`                             | —         | Logo passed to all child forms                                                   |
-| `showSocialButtons`   | `boolean`                               | `true`    | Show SSO buttons on login/signup                                                 |
+| `showSocialButtons`   | `boolean`                               | `false`   | Show Apple/Google SSO buttons. Only enable when social login is configured in Azirid dashboard |
 | `hideNavigation`      | `boolean`                               | —         | Hide navigation links between views                                              |
 | `resetToken`          | `string`                                | —         | Token for the reset-password view                                                |
 | `defaultValues`       | `{ email?: string; password?: string }` | —         | Default values passed to child forms                                             |
@@ -376,7 +376,7 @@ import { useBootstrap } from 'azirid-react'
 const { bootstrap, isBootstrapping } = useBootstrap()
 ```
 
-> **Note:** The automatic bootstrap on mount runs exactly once, even in React 18 Strict Mode (which double-mounts components in development). Hooks like `usePayphoneCheckout` and `<PayphoneCallback>` wait for bootstrap to complete before making authenticated requests.
+> **Note:** The automatic bootstrap uses request deduplication — if React 18 Strict Mode (or any other scenario) triggers multiple bootstrap calls, only **one HTTP request** is made and all callers await the same promise. This prevents token rotation conflicts that would otherwise invalidate the session on page reload in development mode. Hooks like `usePayphoneCheckout` and `<PayphoneCallback>` wait for bootstrap to complete before making authenticated requests.
 
 ### `useRefresh`
 

package/dist/index.cjs

@@ -165,6 +165,7 @@ function createAccessClient(config, appContext) {
   let refreshToken = ssGet(storageKeyRt);
   let csrfToken = ssGet(storageKeyCsrf);
   let refreshPromise = null;
+  let bootstrapPromise = null;
   let channel = null;
   try {
     if (typeof BroadcastChannel !== "undefined") {
@@ -264,6 +265,13 @@ function createAccessClient(config, appContext) {
     });
     return refreshPromise;
   }
+  function deduplicatedBootstrap() {
+    if (bootstrapPromise) return bootstrapPromise;
+    bootstrapPromise = request("POST", paths.bootstrap).finally(() => {
+      bootstrapPromise = null;
+    });
+    return bootstrapPromise;
+  }
   async function request(method, path, body) {
     const headers = {
       "Content-Type": "application/json",
@@ -365,7 +373,8 @@ function createAccessClient(config, appContext) {
     getRefreshToken,
     setCsrfToken,
     getCsrfToken,
-    refreshSession: (opts) => refreshTokens(opts)
+    refreshSession: (opts) => refreshTokens(opts),
+    bootstrapSession: () => deduplicatedBootstrap()
   };
 }
 
@@ -768,20 +777,14 @@ function AziridProviderInner({
     },
     [client]
   );
-  const bootstrapCalled = react.useRef(false);
   react.useEffect(() => {
     const autoBootstrap = props.autoBootstrap ?? true;
     if (!autoBootstrap) return;
-    if (bootstrapCalled.current) {
-      setIsBootstrapping(false);
-      return;
-    }
-    bootstrapCalled.current = true;
     let cancelled = false;
     async function bootstrap() {
       setIsBootstrapping(true);
       try {
-        const response = await client.post(client.paths.bootstrap);
+        const response = await client.bootstrapSession();
         if (cancelled) return;
         if (response.branding) {
           setBranding(response.branding);
@@ -1161,7 +1164,7 @@ var LoginForm = react.forwardRef(
     submitText: submitTextProp,
     footer,
     forgotPassword,
-    showSocialButtons = true,
+    showSocialButtons = false,
     labels,
     defaultValues
   }, ref) => {
@@ -1347,7 +1350,7 @@ var SignupForm = react.forwardRef(
     logo: logoProp,
     submitText: submitTextProp,
     footer,
-    showSocialButtons = true,
+    showSocialButtons = false,
     labels
   }, ref) => {
     const msg = useMessages();
@@ -4355,7 +4358,7 @@ function usePasswordToggle() {
 }
 
 // src/index.ts
-var SDK_VERSION = "0.10.3";
+var SDK_VERSION = "0.10.5";
 
 exports.AuthForm = AuthForm;
 exports.AziridProvider = AziridProvider;