decane-connect-kit 2.20.0 → 2.22.0

package/dist/index.d.cts

@@ -229,6 +229,8 @@ interface ConnectResult {
     isNewUser: boolean;
     /** Present when the provider released a profile — see {@link AuthProfile}. */
     profile?: AuthProfile;
+    /** See {@link AuthResult.providerSubject}. */
+    providerSubject?: string;
 }
 /** A recorded on-chain transaction in the user's history. */
 interface TransactionRecord {
@@ -396,6 +398,14 @@ interface DecaneConnect {
     setUnlockPassword(password: string): Promise<void>;
     /** True when this device can open a session from a password alone. */
     canUnlockWithPassword(): Promise<boolean>;
+    /**
+     * "Use a different account." disconnect() keeps one fact about the account
+     * that signed out — its userId — so canSignInWithPasskey() and
+     * canUnlockWithPassword() can offer that account's own way back in even
+     * when several accounts are enrolled on this browser. This drops it. The
+     * device shares themselves are untouched.
+     */
+    forgetLastUser(): void;
     /** Open a session from the password alone — no provider, no passkey. */
     unlockWithPassword(password: string): Promise<ConnectResult>;
     /** Turn the password path off, revoking the token account-wide. */
@@ -547,6 +557,16 @@ interface AuthProfile {
     name?: string;
     email?: string;
     picture?: string;
+    /**
+     * The handle the user signs in under, where the provider has one. X sets it
+     * and releases no email at all, so for those accounts this is the only
+     * human-readable thing there is.
+     *
+     * Display only. A handle can be released by its owner and registered by
+     * somebody else, so never key an account, a lookup or access on it — use
+     * {@link AuthResult.providerSubject}, which cannot move.
+     */
+    username?: string;
 }
 interface AuthResult {
     jwt: string;
@@ -554,6 +574,15 @@ interface AuthResult {
     hasShare: boolean;
     userId: string;
     profile?: AuthProfile;
+    /**
+     * The provider's own stable id for this user — X's numeric user id, for
+     * instance. Present only where the provider gives one.
+     *
+     * Unlike a handle or an email this cannot be reassigned, which is what makes
+     * it safe to match an account against: the same value identifies the same
+     * person on both sides of a migration.
+     */
+    providerSubject?: string;
 }
 
 declare class ApiClient {
@@ -1229,6 +1258,15 @@ interface SocialAuthState {
      * you need it in that state.
      */
     profile: AuthProfile | null;
+    /**
+     * The provider's own stable id for this user, where it gives one — X's
+     * numeric user id, for instance. Null for providers that do not.
+     *
+     * Unlike a handle or an email this cannot be reassigned, so it is the value
+     * to match an account against. Like `profile` it comes from the sign-in and
+     * cannot be re-fetched, so copy it if you need it after a reload.
+     */
+    providerSubject: string | null;
     isUnlocked: boolean;
     sessionExpiresAt: number | null;
     /**
@@ -1322,6 +1360,7 @@ declare function useSocialAuth(): {
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
     profile: AuthProfile | null;
+    providerSubject: string | null;
     phase: "creating" | "unlocking" | null;
     isCreatingWallet: boolean;
     needsReconnect: boolean;
@@ -1413,6 +1452,7 @@ declare function useSocialWallet(): {
     canUnlockWithPassword: () => Promise<boolean>;
     unlockWithPassword: (password: string) => Promise<void>;
     removeUnlockPassword: () => Promise<void>;
+    forgetLastUser: () => void;
     rotateShares: (opts: {
         password: string;
         passwordHint?: string;

package/dist/index.d.ts

@@ -229,6 +229,8 @@ interface ConnectResult {
     isNewUser: boolean;
     /** Present when the provider released a profile — see {@link AuthProfile}. */
     profile?: AuthProfile;
+    /** See {@link AuthResult.providerSubject}. */
+    providerSubject?: string;
 }
 /** A recorded on-chain transaction in the user's history. */
 interface TransactionRecord {
@@ -396,6 +398,14 @@ interface DecaneConnect {
     setUnlockPassword(password: string): Promise<void>;
     /** True when this device can open a session from a password alone. */
     canUnlockWithPassword(): Promise<boolean>;
+    /**
+     * "Use a different account." disconnect() keeps one fact about the account
+     * that signed out — its userId — so canSignInWithPasskey() and
+     * canUnlockWithPassword() can offer that account's own way back in even
+     * when several accounts are enrolled on this browser. This drops it. The
+     * device shares themselves are untouched.
+     */
+    forgetLastUser(): void;
     /** Open a session from the password alone — no provider, no passkey. */
     unlockWithPassword(password: string): Promise<ConnectResult>;
     /** Turn the password path off, revoking the token account-wide. */
@@ -547,6 +557,16 @@ interface AuthProfile {
     name?: string;
     email?: string;
     picture?: string;
+    /**
+     * The handle the user signs in under, where the provider has one. X sets it
+     * and releases no email at all, so for those accounts this is the only
+     * human-readable thing there is.
+     *
+     * Display only. A handle can be released by its owner and registered by
+     * somebody else, so never key an account, a lookup or access on it — use
+     * {@link AuthResult.providerSubject}, which cannot move.
+     */
+    username?: string;
 }
 interface AuthResult {
     jwt: string;
@@ -554,6 +574,15 @@ interface AuthResult {
     hasShare: boolean;
     userId: string;
     profile?: AuthProfile;
+    /**
+     * The provider's own stable id for this user — X's numeric user id, for
+     * instance. Present only where the provider gives one.
+     *
+     * Unlike a handle or an email this cannot be reassigned, which is what makes
+     * it safe to match an account against: the same value identifies the same
+     * person on both sides of a migration.
+     */
+    providerSubject?: string;
 }
 
 declare class ApiClient {
@@ -1229,6 +1258,15 @@ interface SocialAuthState {
      * you need it in that state.
      */
     profile: AuthProfile | null;
+    /**
+     * The provider's own stable id for this user, where it gives one — X's
+     * numeric user id, for instance. Null for providers that do not.
+     *
+     * Unlike a handle or an email this cannot be reassigned, so it is the value
+     * to match an account against. Like `profile` it comes from the sign-in and
+     * cannot be re-fetched, so copy it if you need it after a reload.
+     */
+    providerSubject: string | null;
     isUnlocked: boolean;
     sessionExpiresAt: number | null;
     /**
@@ -1322,6 +1360,7 @@ declare function useSocialAuth(): {
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
     profile: AuthProfile | null;
+    providerSubject: string | null;
     phase: "creating" | "unlocking" | null;
     isCreatingWallet: boolean;
     needsReconnect: boolean;
@@ -1413,6 +1452,7 @@ declare function useSocialWallet(): {
     canUnlockWithPassword: () => Promise<boolean>;
     unlockWithPassword: (password: string) => Promise<void>;
     removeUnlockPassword: () => Promise<void>;
+    forgetLastUser: () => void;
     rotateShares: (opts: {
         password: string;
         passwordHint?: string;

package/dist/index.js

@@ -1956,10 +1956,13 @@ function readRedirectOutcome(search) {
   const name = params.get("decane_name");
   const email = params.get("decane_email");
   const picture = params.get("decane_picture");
+  const username = params.get("decane_username");
+  const providerSubject = params.get("decane_provider_subject");
   const profile = {
     ...name ? { name } : {},
     ...email ? { email } : {},
-    ...picture ? { picture } : {}
+    ...picture ? { picture } : {},
+    ...username ? { username } : {}
   };
   return {
     kind: "result",
@@ -1972,7 +1975,8 @@ function readRedirectOutcome(search) {
       // test `result.profile` rather than an object that is always present but
       // sometimes empty. X never sends an email, so this is the normal case
       // there rather than an edge one.
-      ...Object.keys(profile).length ? { profile } : {}
+      ...Object.keys(profile).length ? { profile } : {},
+      ...providerSubject ? { providerSubject } : {}
     }
   };
 }
@@ -3603,6 +3607,29 @@ function clearPersisted(key) {
   } catch {
   }
 }
+function makeLastUserKey(apiKey) {
+  return `${makePersistKey(apiKey)}:last-user`;
+}
+function loadLastUser(key) {
+  try {
+    const raw = typeof localStorage !== "undefined" ? localStorage.getItem(key) : null;
+    return raw ? JSON.parse(raw).userId ?? null : null;
+  } catch {
+    return null;
+  }
+}
+function saveLastUser(key, userId) {
+  try {
+    localStorage.setItem(key, JSON.stringify({ userId }));
+  } catch {
+  }
+}
+function clearLastUser(key) {
+  try {
+    localStorage.removeItem(key);
+  } catch {
+  }
+}
 function sessionPersistKey(apiKey) {
   return `decane:sess:${apiKey.slice(0, 20)}`;
 }
@@ -3641,6 +3668,7 @@ async function createDecaneConnect(config) {
   const rpId = config.rpId ?? (typeof window !== "undefined" ? window.location.hostname : "localhost");
   const rpName = config.rpName ?? "Decane Connect";
   const PERSIST_KEY = makePersistKey(config.apiKey);
+  const LAST_USER_KEY = makeLastUserKey(config.apiKey);
   const teeUrl = config.teeUrl ?? DEFAULT_TEE_URL;
   const events = new EventEmitter();
   const api = new ApiClient(baseUrl, config.apiKey, config.appId);
@@ -3653,6 +3681,7 @@ async function createDecaneConnect(config) {
   );
   let auth = null;
   let persisted = loadPersisted(PERSIST_KEY);
+  let lastUserId = loadLastUser(LAST_USER_KEY);
   let ethProvider = null;
   const persistSession = config.persistSession !== false;
   const serverAssistedRecovery = true;
@@ -3798,6 +3827,10 @@ async function createDecaneConnect(config) {
       const stored = await storage.getShare(persisted.userId);
       return hasPasswordUnlock(stored) ? stored : null;
     }
+    if (lastUserId) {
+      const stored = await storage.getShare(lastUserId);
+      return hasPasswordUnlock(stored) ? stored : null;
+    }
     const candidates = (await storage.listShares()).filter(hasPasswordUnlock);
     return candidates.length === 1 ? candidates[0] : null;
   }
@@ -4251,14 +4284,16 @@ async function createDecaneConnect(config) {
   async function passkeyDeviceCandidate() {
     if (!isPasskeySupported()) return null;
     if (persisted?.userId) return passkeyLoginCandidate();
+    if (lastUserId) return usablePasskeyShare(await storage.getShare(lastUserId));
     const candidates = (await storage.listShares()).map(usablePasskeyShare).filter(Boolean);
     return candidates.length === 1 ? candidates[0] : null;
   }
   async function canOfferPasskey() {
     if (!isPasskeySupported()) return false;
     if (await passkeyDeviceCandidate()) return true;
-    if (!persisted?.userId) return false;
-    return await storage.getShare(persisted.userId) == null;
+    const known = persisted?.userId ?? lastUserId;
+    if (!known) return false;
+    return await storage.getShare(known) == null;
   }
   async function rememberProfile(userId, profile) {
     const incoming = Object.fromEntries(Object.entries(profile).filter(([, v]) => v));
@@ -4368,7 +4403,8 @@ async function createDecaneConnect(config) {
     return {
       addresses,
       isNewUser: result.isNewUser,
-      ...result.profile ? { profile: result.profile } : {}
+      ...result.profile ? { profile: result.profile } : {},
+      ...result.providerSubject ? { providerSubject: result.providerSubject } : {}
     };
   }
   const client = {
@@ -4470,8 +4506,9 @@ async function createDecaneConnect(config) {
     async signInWithPasskey() {
       const candidate = await passkeyDeviceCandidate();
       if (candidate) return passkeyLogin(candidate);
-      if (isPasskeySupported() && persisted?.userId && await storage.getShare(persisted.userId) == null) {
-        return passkeyLoginWithoutShare(persisted.userId);
+      const known = persisted?.userId ?? lastUserId;
+      if (isPasskeySupported() && known && await storage.getShare(known) == null) {
+        return passkeyLoginWithoutShare(known);
       }
       throw new NewDeviceError();
     },
@@ -4811,12 +4848,21 @@ async function createDecaneConnect(config) {
         await api.revoke(auth.jwt).catch(() => {
         });
       }
+      const leaving = auth?.userId ?? persisted?.userId ?? null;
+      if (leaving) {
+        lastUserId = leaving;
+        saveLastUser(LAST_USER_KEY, leaving);
+      }
       auth = null;
       persisted = null;
       clearPersisted(PERSIST_KEY);
       dropLiveSession();
       events.emit("disconnected");
     },
+    forgetLastUser() {
+      lastUserId = null;
+      clearLastUser(LAST_USER_KEY);
+    },
     getAddresses() {
       return auth?.addresses ?? persisted?.addresses ?? null;
     },
@@ -7188,6 +7234,7 @@ var DEFAULT_SOCIAL = {
   addresses: null,
   isNewUser: false,
   profile: null,
+  providerSubject: null,
   isUnlocked: false,
   sessionExpiresAt: null,
   needsReconnect: false,
@@ -7323,6 +7370,7 @@ function DecaneKit({ config, children }) {
       addresses: result.addresses,
       isNewUser: result.isNewUser,
       profile: result.profile ?? null,
+      providerSubject: result.providerSubject ?? null,
       isUnlocked: sdk?.isUnlocked() ?? false,
       sessionExpiresAt: sdk?.sessionExpiresAt() ?? null,
       needsReconnect: false,
@@ -7529,6 +7577,14 @@ function DecaneKit({ config, children }) {
     if (!sdk) return false;
     return sdk.canUnlockWithPassword();
   }, []);
+  const socialForgetLastUser = useCallback3(() => {
+    socialRef.current?.forgetLastUser();
+    const sdk = socialRef.current;
+    if (sdk) {
+      sdk.canSignInWithPasskey().then((can) => setSocialAuth((p) => ({ ...p, canUsePasskey: can }))).catch(() => {
+      });
+    }
+  }, []);
   const socialUnlockWithPassword = useCallback3(async (password) => {
     const sdk = socialRef.current;
     if (!sdk) throw new Error("Social wallet not connected");
@@ -7605,6 +7661,7 @@ function DecaneKit({ config, children }) {
         socialAddPasskey,
         socialSetUnlockPassword,
         socialCanUnlockWithPassword,
+        socialForgetLastUser,
         socialUnlockWithPassword,
         socialRemoveUnlockPassword,
         socialShouldPromptRecovery,
@@ -7855,6 +7912,9 @@ function useSocialAuth() {
     // user first signed in, so it carries the same name and email a Google
     // sign-in does rather than coming back anonymous.
     profile: socialAuth.profile,
+    // The provider's stable id, where it gives one. Null otherwise. Safe to
+    // match an account on, unlike the handle in `profile.username`.
+    providerSubject: socialAuth.providerSubject,
     // Long-running work in progress, for driving your own status UI.
     phase: socialAuth.phase,
     isCreatingWallet: socialAuth.phase === "creating",
@@ -7911,6 +7971,7 @@ function useSocialWallet() {
     socialAddPasskey,
     socialSetUnlockPassword,
     socialCanUnlockWithPassword,
+    socialForgetLastUser,
     socialUnlockWithPassword,
     socialRemoveUnlockPassword,
     socialShouldPromptRecovery,
@@ -8019,6 +8080,7 @@ function useSocialWallet() {
       throw e;
     }
   }, [socialSetUnlockPassword]);
+  const forgetLastUser = useCallback4(() => socialForgetLastUser(), [socialForgetLastUser]);
   const canUnlockWithPassword = useCallback4(
     () => socialCanUnlockWithPassword(),
     [socialCanUnlockWithPassword]
@@ -8104,6 +8166,8 @@ function useSocialWallet() {
     canUnlockWithPassword,
     unlockWithPassword,
     removeUnlockPassword,
+    // "Use a different account": stop offering the account that signed out.
+    forgetLastUser,
     // Recovery (2-of-3 Shamir share set)
     rotateShares,
     exportPortableBackup,