cauthy-auth 0.16.0 → 0.18.0

package/dist/react.mjs

@@ -265,14 +265,15 @@ function createAuthClient(options = {}) {
       mfa: (f) => post("/sign-in/mfa", { code: f.code }, checkCode(f.code)),
       mfaMethods: () => post("/sign-in/mfa/methods", {}, null),
       mfaSendCode: () => post("/sign-in/mfa/send", {}, null),
-      magicLink: (f) => post("/sign-in/magic-link", { email: f.email }, checkEmail(f.email), f.captchaToken),
+      magicLink: (f) => post("/sign-in/magic-link", { email: f.email, ...f.create ? { create: true } : {}, ...f.returnTo ? { returnTo: f.returnTo } : {} }, checkEmail(f.email), f.captchaToken),
       magicLinkVerify: (f) => post("/sign-in/magic-link/verify", { token: f.token }, null),
       emailCode: (f) => post("/sign-in/email-code", { code: f.code }, checkCode(f.code)),
       passkeyUrl,
       async passkey(o) {
         const m = await methods();
         if (m.passkeyHere && canUsePasskeys()) {
-          const r = await ceremony("/sign-in/passkey/begin", "/sign-in/passkey/finish", {}, getPasskey);
+          const email = o?.email?.trim() ?? "";
+          const r = await ceremony("/sign-in/passkey/begin", "/sign-in/passkey/finish", email !== "" && checkEmail(email) === null ? { email } : {}, getPasskey);
           if (r.ok || r.error.code !== "passkey_unavailable" || !m.passkeyOnCauthy) return r;
         } else if (!m.passkeyOnCauthy) {
           return { ok: false, error: { code: "passkey_unavailable", message: "Passkeys cannot be used here." } };
@@ -799,6 +800,9 @@ function useMethods(auth) {
   }, []);
   return methods;
 }
+function sitePath(to) {
+  return to && to.startsWith("/") && !to.startsWith("//") && !to.includes("\\") ? to : void 0;
+}
 function useForm(props) {
   const t = { ...TEXTS[props.locale ?? "en"], ...props.texts, errors: { ...TEXTS[props.locale ?? "en"].errors, ...props.texts?.errors } };
   const cx = (slot) => props.classNames?.[slot] ?? `cauthy-${slot}`;
@@ -807,9 +811,9 @@ function useForm(props) {
   const [error, setError] = useState(null);
   const [busy, setBusy] = useState(false);
   const say = (e) => t.errors[e.code] ?? e.message;
-  const done = () => {
+  const done = (to) => {
     if (props.onSuccess) props.onSuccess();
-    else window.location.assign(props.returnTo ?? "/");
+    else window.location.assign(sitePath(to) ?? props.returnTo ?? "/");
   };
   const root = useRoot(props);
   return { t, cx, Button, Input, error, setError, busy, setBusy, say, done, root };
@@ -899,7 +903,7 @@ function SignIn(props) {
     if (!token) return;
     setStep("opening");
     void auth.signIn.magicLinkVerify({ token }).then((r) => {
-      if (r.ok) return f.done();
+      if (r.ok) return f.done(new URLSearchParams(window.location.search).get("return_to") ?? void 0);
       f.setError(r.error);
       setStep("password");
     });
@@ -930,13 +934,13 @@ function SignIn(props) {
       return f.setError(r.error);
     }
     if (r.status === "mfa_required") return setStep("code");
-    f.done();
+    f.done("returnTo" in r && typeof r.returnTo === "string" ? r.returnTo : void 0);
   };
   const usePasskey = async () => {
     autofill.current?.abort();
     f.setBusy(true);
     f.setError(null);
-    const r = await auth.signIn.passkey({ returnTo: props.returnTo, locale: props.locale });
+    const r = await auth.signIn.passkey({ returnTo: props.returnTo, locale: props.locale, email });
     if (r.ok && r.status === "redirected") return;
     f.setBusy(false);
     if (!r.ok) setOffer((n) => n + 1);
@@ -947,7 +951,7 @@ function SignIn(props) {
     autofill.current?.abort();
     f.setBusy(true);
     f.setError(null);
-    const r = await auth.signIn.magicLink({ email, captchaToken: challenge.token });
+    const r = await auth.signIn.magicLink({ email, captchaToken: challenge.token, create: props.createAccounts, returnTo: props.returnTo });
     f.setBusy(false);
     challenge.renew();
     if (!r.ok) return f.setError(r.error);