azirid-react 0.13.0 → 0.13.2

package/dist/index.d.cts

@@ -774,6 +774,29 @@ interface HandoffCallbackProps {
     loadingText?: string;
     errorText?: string;
 }
+/**
+ * Standalone component for handling impersonation handoff redirects.
+ *
+ * Does NOT require AziridProvider — works independently by reading the
+ * API URL from the `&api=` query parameter and exchanging the handoff
+ * code directly. After exchanging, stores tokens in sessionStorage so
+ * AziridProvider picks them up on the next page load.
+ *
+ * Usage:
+ * ```tsx
+ * // app/auth/handoff/page.tsx
+ * import { HandoffCallback } from 'azirid-react'
+ *
+ * export default function HandoffPage() {
+ *   return (
+ *     <HandoffCallback
+ *       onSuccess={() => window.location.href = '/'}
+ *       onError={() => window.location.href = '/login'}
+ *     />
+ *   )
+ * }
+ * ```
+ */
 declare function HandoffCallback({ onSuccess, onError, loadingText, errorText, }: HandoffCallbackProps): react_jsx_runtime.JSX.Element;
 
 declare global {
@@ -914,7 +937,7 @@ interface AccessClient {
     /** Deduplicated bootstrap — safe to call from Strict Mode double-mounts */
     bootstrapSession: <T = unknown>() => Promise<T>;
     /** Exchange a one-time handoff code for session tokens (cross-domain impersonation) */
-    exchangeHandoff: (code: string) => Promise<{
+    exchangeHandoff: (code: string, apiUrl?: string) => Promise<{
         user: unknown;
     }>;
 }

package/dist/index.d.ts

@@ -774,6 +774,29 @@ interface HandoffCallbackProps {
     loadingText?: string;
     errorText?: string;
 }
+/**
+ * Standalone component for handling impersonation handoff redirects.
+ *
+ * Does NOT require AziridProvider — works independently by reading the
+ * API URL from the `&api=` query parameter and exchanging the handoff
+ * code directly. After exchanging, stores tokens in sessionStorage so
+ * AziridProvider picks them up on the next page load.
+ *
+ * Usage:
+ * ```tsx
+ * // app/auth/handoff/page.tsx
+ * import { HandoffCallback } from 'azirid-react'
+ *
+ * export default function HandoffPage() {
+ *   return (
+ *     <HandoffCallback
+ *       onSuccess={() => window.location.href = '/'}
+ *       onError={() => window.location.href = '/login'}
+ *     />
+ *   )
+ * }
+ * ```
+ */
 declare function HandoffCallback({ onSuccess, onError, loadingText, errorText, }: HandoffCallbackProps): react_jsx_runtime.JSX.Element;
 
 declare global {
@@ -914,7 +937,7 @@ interface AccessClient {
     /** Deduplicated bootstrap — safe to call from Strict Mode double-mounts */
     bootstrapSession: <T = unknown>() => Promise<T>;
     /** Exchange a one-time handoff code for session tokens (cross-domain impersonation) */
-    exchangeHandoff: (code: string) => Promise<{
+    exchangeHandoff: (code: string, apiUrl?: string) => Promise<{
         user: unknown;
     }>;
 }

package/dist/index.js

@@ -384,7 +384,8 @@ function createAccessClient(config, appContext) {
     }
     return json;
   }
-  async function exchangeHandoff(code) {
+  async function exchangeHandoff(code, apiUrl) {
+    const exchangeBase = apiUrl?.replace(/\/+$/, "") ?? baseUrl;
     const headers = {
       "Content-Type": "application/json",
       ...config.headers
@@ -394,7 +395,7 @@ function createAccessClient(config, appContext) {
     }
     const devId = getOrCreateDeviceId();
     if (devId) headers["X-Device-Id"] = devId;
-    const res = await fetch(`${baseUrl}/v1/users/auth/handoff/exchange`, {
+    const res = await fetch(`${exchangeBase}/users/auth/handoff/exchange`, {
       method: "POST",
       headers,
       credentials: "include",
@@ -4005,7 +4006,6 @@ function HandoffCallback({
   loadingText = "Signing you in...",
   errorText = "Failed to complete sign-in. The link may have expired."
 }) {
-  const client = useAccessClient();
   const [status, setStatus] = useState("loading");
   const [errorMessage, setErrorMessage] = useState(null);
   const attempted = useRef(false);
@@ -4014,21 +4014,49 @@ function HandoffCallback({
     attempted.current = true;
     const params = new URLSearchParams(window.location.search);
     const code = params.get("code");
+    const apiUrl = params.get("api");
     if (!code) {
       setStatus("error");
       setErrorMessage("No handoff code provided");
       onError?.(new Error("No handoff code provided"));
       return;
     }
-    client.exchangeHandoff(code).then((result) => {
-      onSuccess?.(result.user);
+    if (!apiUrl) {
+      setStatus("error");
+      setErrorMessage("No API URL provided");
+      onError?.(new Error("No API URL in handoff link"));
+      return;
+    }
+    const exchangeUrl = `${apiUrl.replace(/\/+$/, "")}/users/auth/handoff/exchange`;
+    fetch(exchangeUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      credentials: "include",
+      body: JSON.stringify({ code })
+    }).then(async (res) => {
+      if (!res.ok) {
+        const body = await res.json().catch(() => null);
+        throw new Error(body?.error?.message ?? body?.message ?? "Handoff exchange failed");
+      }
+      return res.json();
+    }).then((raw) => {
+      const json = raw && typeof raw === "object" && "data" in raw && "meta" in raw ? raw.data : raw;
+      json.at ?? json.accessToken;
+      const refreshToken = json.rt ?? json.refreshToken;
+      const csrfToken = json.xc ?? json.csrfToken;
+      try {
+        if (refreshToken) sessionStorage.setItem("__azrt", refreshToken);
+        if (csrfToken) sessionStorage.setItem("__azxc", csrfToken);
+      } catch {
+      }
+      onSuccess?.(json.user);
     }).catch((err) => {
       setStatus("error");
       const error = err instanceof Error ? err : new Error("Handoff exchange failed");
       setErrorMessage(error.message);
       onError?.(error);
     });
-  }, [client, onSuccess, onError]);
+  }, [onSuccess, onError]);
   if (status === "error") {
     return /* @__PURE__ */ jsx("div", { style: wrapperStyle, children: /* @__PURE__ */ jsx("p", { style: { ...messageStyle2, color: "#ef4444" }, children: errorMessage || errorText }) });
   }
@@ -4845,7 +4873,7 @@ function usePasswordToggle() {
 }
 
 // src/index.ts
-var SDK_VERSION = "0.13.0";
+var SDK_VERSION = "0.13.2";
 
 export { AuthForm, AziridProvider, BASE_PATHS, CheckoutButton, ForgotPasswordForm, HandoffCallback, InvoiceList, LoginForm, PATHS, PayButton, PayphoneCallback, PayphoneWidgetRenderer, PricingTable, ReferralCard, ReferralStats, ResetPasswordForm, SDK_VERSION, SignupForm, SubscriptionBadge, buildPaths, changePasswordSchema, cn, createAccessClient, createForgotPasswordSchema, createLoginSchema, createMutationHook, createResetPasswordConfirmSchema, createSignupSchema, en, es, forgotPasswordSchema, isAuthError, loginSchema, magicLinkRequestSchema, magicLinkVerifySchema, passkeyRegisterStartSchema, removeStyles, resetPasswordConfirmSchema, resolveMessages, signupSchema, socialLoginSchema, useAccessClient, useAzirid, useBootstrap, useBranches, useBranding, useChangePassword, useCheckout, useFormState, useInvoices, useLogin, useLogout, useMagicLink, useMessages, usePasskeys, usePasswordReset, usePasswordToggle, usePayButton, usePaymentMethods, usePaymentProviders, usePayphoneCheckout, usePayphoneConfirm, usePlans, useReferral, useReferralStats, useRefresh, useSession, useSignup, useSocialLogin, useSubmitTransferProof, useSubscription, useSwitchTenant, useTenantMembers, useTenants, useTransferPayment, useTransferProofs, useUploadTransferProof };
 //# sourceMappingURL=index.js.map