dauth-context-react 6.6.1 → 6.6.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dauth-context-react",
-  "version": "6.6.1",
+  "version": "6.6.3",
   "description": "React provider and hook for passwordless authentication via the Dauth service (BFF pattern with httpOnly cookies)",
   "license": "MIT",
   "author": "David T. Pizarro Frick",

package/src/index.tsx

@@ -77,6 +77,27 @@ export const DauthProvider: React.FC<IDauthProviderProps> = (
     }
   }, []);
 
+  // Re-check session when tab becomes visible again (handles mobile CCT flow:
+  // user confirms magic link in Chrome Custom Tab which sets cookies, then
+  // returns to this tab — we need to detect the new session)
+  useEffect(() => {
+    const handleVisibilityChange = () => {
+      if (
+        document.visibilityState === 'visible' &&
+        !dauthState.isAuthenticated &&
+        !dauthState.isLoading
+      ) {
+        action.autoLoginAction(ctx);
+      }
+    };
+    document.addEventListener('visibilitychange', handleVisibilityChange);
+    return () =>
+      document.removeEventListener(
+        'visibilitychange',
+        handleVisibilityChange
+      );
+  }, [ctx, dauthState.isAuthenticated, dauthState.isLoading]);
+
   const loginWithRedirect = useCallback(() => {
     const base = `${getClientBasePath()}/${domainName}/${routes.signin}`;
     const url = env ? `${base}?env=${encodeURIComponent(env)}` : base;

package/src/reducer/dauth.actions.ts

@@ -191,7 +191,9 @@ export async function registerPasskeyAction(
     }
 
     // Step 2: Execute WebAuthn ceremony in the browser
-    const credential = await createPasskeyCredential(startResult.data.options);
+    const credential = await createPasskeyCredential(
+      startResult.data.options as Record<string, unknown>
+    );
 
     // Step 3: Send the credential back to the server
     const finishResult = await finishPasskeyRegistrationAPI(authProxyPath, {