decane-connect-kit 2.10.0 → 2.11.0

package/dist/index.d.cts

@@ -1126,9 +1126,14 @@ interface SocialAuthState {
      * Who the provider said the user is — `{ name?, email?, picture? }`.
      *
      * `null` until a sign-in returns one, and stays null for email sign-in and
-     * for providers the user withheld a profile from. It is not persisted across
-     * reloads: the backend stores no profile, so a restored session has an
-     * address but no name. Copy it somewhere durable if you need it to survive.
+     * for providers the user withheld a profile from.
+     *
+     * The backend stores no profile, so this cannot be re-fetched — but whatever
+     * a sign-in does reveal is kept beside this device's share, and a passkey
+     * login hands it back. A passkey sign-in therefore carries the same name and
+     * email the original Google sign-in did. A session merely restored from a
+     * reload still has an address and no name, so copy it somewhere durable if
+     * you need it in that state.
      */
     profile: AuthProfile | null;
     isUnlocked: boolean;
@@ -1222,6 +1227,7 @@ declare function useSocialAuth(): {
     } | null;
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
+    profile: AuthProfile | null;
     phase: "creating" | "unlocking" | null;
     isCreatingWallet: boolean;
     needsReconnect: boolean;

package/dist/index.d.ts

@@ -1126,9 +1126,14 @@ interface SocialAuthState {
      * Who the provider said the user is — `{ name?, email?, picture? }`.
      *
      * `null` until a sign-in returns one, and stays null for email sign-in and
-     * for providers the user withheld a profile from. It is not persisted across
-     * reloads: the backend stores no profile, so a restored session has an
-     * address but no name. Copy it somewhere durable if you need it to survive.
+     * for providers the user withheld a profile from.
+     *
+     * The backend stores no profile, so this cannot be re-fetched — but whatever
+     * a sign-in does reveal is kept beside this device's share, and a passkey
+     * login hands it back. A passkey sign-in therefore carries the same name and
+     * email the original Google sign-in did. A session merely restored from a
+     * reload still has an address and no name, so copy it somewhere durable if
+     * you need it in that state.
      */
     profile: AuthProfile | null;
     isUnlocked: boolean;
@@ -1222,6 +1227,7 @@ declare function useSocialAuth(): {
     } | null;
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
+    profile: AuthProfile | null;
     phase: "creating" | "unlocking" | null;
     isCreatingWallet: boolean;
     needsReconnect: boolean;

package/dist/index.js

@@ -3965,6 +3965,16 @@ async function createDecaneConnect(config) {
     const candidates = (await storage.listShares()).map(usablePasskeyShare).filter(Boolean);
     return candidates.length === 1 ? candidates[0] : null;
   }
+  async function rememberProfile(userId, profile) {
+    const incoming = Object.fromEntries(Object.entries(profile).filter(([, v]) => v));
+    if (!Object.keys(incoming).length) return;
+    try {
+      const stored = await storage.getShare(userId);
+      if (!stored) return;
+      await storage.putShare({ ...stored, profile: { ...stored.profile, ...incoming } });
+    } catch {
+    }
+  }
   function usablePasskeyShare(stored) {
     if (!stored || stored.unlockMethod !== "passkey") return null;
     if (!stored.credentialId || !stored.prfSalt) return null;
@@ -4002,7 +4012,11 @@ async function createDecaneConnect(config) {
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
     persistLiveSession();
-    return { addresses, isNewUser: false };
+    return {
+      addresses,
+      isNewUser: false,
+      ...stored.profile ? { profile: stored.profile } : {}
+    };
   }
   async function handleAuthResult(result) {
     let addresses;
@@ -4018,6 +4032,7 @@ async function createDecaneConnect(config) {
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
     persistLiveSession();
+    if (result.profile) await rememberProfile(result.userId, result.profile);
     return {
       addresses,
       isNewUser: result.isNewUser,
@@ -7231,6 +7246,11 @@ function useSocialAuth() {
     sessionExpiresAt: socialAuth.sessionExpiresAt,
     // True when this device can skip the full sign-in and resume with a passkey.
     canUsePasskey: socialAuth.canUsePasskey,
+    // Who the provider said the user is — { name?, email?, picture? }, or null.
+    // A passkey sign-in returns the profile recorded on this device when the
+    // user first signed in, so it carries the same name and email a Google
+    // sign-in does rather than coming back anonymous.
+    profile: socialAuth.profile,
     // Long-running work in progress, for driving your own status UI.
     phase: socialAuth.phase,
     isCreatingWallet: socialAuth.phase === "creating",