decane-connect-kit 2.9.1 → 2.10.0

package/dist/index.js

@@ -2195,6 +2195,15 @@ var Storage = class {
   async getShare(userId) {
     return (await this._db).get(STORE, userId) ?? null;
   }
+  /**
+   * Every share this browser holds. Needed because signing out clears the
+   * remembered identity while deliberately leaving the share behind, so the
+   * userId that keys it is no longer known and the share can only be found by
+   * enumeration. See passkeyDeviceCandidate().
+   */
+  async listShares() {
+    return (await this._db).getAll(STORE);
+  }
   async putShare(share) {
     await (await this._db).put(STORE, share);
   }
@@ -3948,7 +3957,15 @@ async function createDecaneConnect(config) {
   }
   async function passkeyLoginCandidate() {
     if (!persisted?.userId || !isPasskeySupported()) return null;
-    const stored = await storage.getShare(persisted.userId);
+    return usablePasskeyShare(await storage.getShare(persisted.userId));
+  }
+  async function passkeyDeviceCandidate() {
+    if (!isPasskeySupported()) return null;
+    if (persisted?.userId) return passkeyLoginCandidate();
+    const candidates = (await storage.listShares()).map(usablePasskeyShare).filter(Boolean);
+    return candidates.length === 1 ? candidates[0] : null;
+  }
+  function usablePasskeyShare(stored) {
     if (!stored || stored.unlockMethod !== "passkey") return null;
     if (!stored.credentialId || !stored.prfSalt) return null;
     return stored;
@@ -4107,10 +4124,10 @@ async function createDecaneConnect(config) {
       return handleAuthResult(result);
     },
     async canSignInWithPasskey() {
-      return await passkeyLoginCandidate() !== null;
+      return await passkeyDeviceCandidate() !== null;
     },
     async signInWithPasskey() {
-      const candidate = await passkeyLoginCandidate();
+      const candidate = await passkeyDeviceCandidate();
       if (!candidate) throw new NewDeviceError();
       return passkeyLogin(candidate);
     },
@@ -6694,7 +6711,11 @@ function DecaneKit({ config, children }) {
         "session-expired",
         () => setSocialAuth((p) => ({ ...p, isUnlocked: false, sessionExpiresAt: null }))
       );
-      sdk.on("disconnected", () => setSocialAuth(DEFAULT_SOCIAL));
+      sdk.on("disconnected", () => {
+        setSocialAuth(DEFAULT_SOCIAL);
+        sdk.canSignInWithPasskey().then((can) => setSocialAuth((p) => ({ ...p, canUsePasskey: can }))).catch(() => {
+        });
+      });
       sdk.on("wallet-creating", () => setSocialAuth((p) => ({ ...p, phase: "creating" })));
       sdk.on("wallet-unlocking", () => setSocialAuth((p) => ({ ...p, phase: "unlocking" })));
       sdk.on("connected", () => setSocialAuth((p) => ({ ...p, phase: null })));