cauthy-auth 0.16.0 → 0.17.0

package/dist/react.mjs

@@ -265,7 +265,7 @@ function createAuthClient(options = {}) {
       mfa: (f) => post("/sign-in/mfa", { code: f.code }, checkCode(f.code)),
       mfaMethods: () => post("/sign-in/mfa/methods", {}, null),
       mfaSendCode: () => post("/sign-in/mfa/send", {}, null),
-      magicLink: (f) => post("/sign-in/magic-link", { email: f.email }, checkEmail(f.email), f.captchaToken),
+      magicLink: (f) => post("/sign-in/magic-link", { email: f.email, ...f.create ? { create: true } : {}, ...f.returnTo ? { returnTo: f.returnTo } : {} }, checkEmail(f.email), f.captchaToken),
       magicLinkVerify: (f) => post("/sign-in/magic-link/verify", { token: f.token }, null),
       emailCode: (f) => post("/sign-in/email-code", { code: f.code }, checkCode(f.code)),
       passkeyUrl,
@@ -799,6 +799,9 @@ function useMethods(auth) {
   }, []);
   return methods;
 }
+function sitePath(to) {
+  return to && to.startsWith("/") && !to.startsWith("//") && !to.includes("\\") ? to : void 0;
+}
 function useForm(props) {
   const t = { ...TEXTS[props.locale ?? "en"], ...props.texts, errors: { ...TEXTS[props.locale ?? "en"].errors, ...props.texts?.errors } };
   const cx = (slot) => props.classNames?.[slot] ?? `cauthy-${slot}`;
@@ -807,9 +810,9 @@ function useForm(props) {
   const [error, setError] = useState(null);
   const [busy, setBusy] = useState(false);
   const say = (e) => t.errors[e.code] ?? e.message;
-  const done = () => {
+  const done = (to) => {
     if (props.onSuccess) props.onSuccess();
-    else window.location.assign(props.returnTo ?? "/");
+    else window.location.assign(sitePath(to) ?? props.returnTo ?? "/");
   };
   const root = useRoot(props);
   return { t, cx, Button, Input, error, setError, busy, setBusy, say, done, root };
@@ -899,7 +902,7 @@ function SignIn(props) {
     if (!token) return;
     setStep("opening");
     void auth.signIn.magicLinkVerify({ token }).then((r) => {
-      if (r.ok) return f.done();
+      if (r.ok) return f.done(new URLSearchParams(window.location.search).get("return_to") ?? void 0);
       f.setError(r.error);
       setStep("password");
     });
@@ -930,7 +933,7 @@ function SignIn(props) {
       return f.setError(r.error);
     }
     if (r.status === "mfa_required") return setStep("code");
-    f.done();
+    f.done("returnTo" in r && typeof r.returnTo === "string" ? r.returnTo : void 0);
   };
   const usePasskey = async () => {
     autofill.current?.abort();
@@ -947,7 +950,7 @@ function SignIn(props) {
     autofill.current?.abort();
     f.setBusy(true);
     f.setError(null);
-    const r = await auth.signIn.magicLink({ email, captchaToken: challenge.token });
+    const r = await auth.signIn.magicLink({ email, captchaToken: challenge.token, create: props.createAccounts, returnTo: props.returnTo });
     f.setBusy(false);
     challenge.renew();
     if (!r.ok) return f.setError(r.error);