decane-connect-kit 2.9.1 → 2.11.0

package/dist/index.cjs

@@ -2271,6 +2271,15 @@ var Storage = class {
   async getShare(userId) {
     return (await this._db).get(STORE, userId) ?? null;
   }
+  /**
+   * Every share this browser holds. Needed because signing out clears the
+   * remembered identity while deliberately leaving the share behind, so the
+   * userId that keys it is no longer known and the share can only be found by
+   * enumeration. See passkeyDeviceCandidate().
+   */
+  async listShares() {
+    return (await this._db).getAll(STORE);
+  }
   async putShare(share) {
     await (await this._db).put(STORE, share);
   }
@@ -4024,7 +4033,25 @@ async function createDecaneConnect(config) {
   }
   async function passkeyLoginCandidate() {
     if (!persisted?.userId || !isPasskeySupported()) return null;
-    const stored = await storage.getShare(persisted.userId);
+    return usablePasskeyShare(await storage.getShare(persisted.userId));
+  }
+  async function passkeyDeviceCandidate() {
+    if (!isPasskeySupported()) return null;
+    if (persisted?.userId) return passkeyLoginCandidate();
+    const candidates = (await storage.listShares()).map(usablePasskeyShare).filter(Boolean);
+    return candidates.length === 1 ? candidates[0] : null;
+  }
+  async function rememberProfile(userId, profile) {
+    const incoming = Object.fromEntries(Object.entries(profile).filter(([, v]) => v));
+    if (!Object.keys(incoming).length) return;
+    try {
+      const stored = await storage.getShare(userId);
+      if (!stored) return;
+      await storage.putShare({ ...stored, profile: { ...stored.profile, ...incoming } });
+    } catch {
+    }
+  }
+  function usablePasskeyShare(stored) {
     if (!stored || stored.unlockMethod !== "passkey") return null;
     if (!stored.credentialId || !stored.prfSalt) return null;
     return stored;
@@ -4061,7 +4088,11 @@ async function createDecaneConnect(config) {
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
     persistLiveSession();
-    return { addresses, isNewUser: false };
+    return {
+      addresses,
+      isNewUser: false,
+      ...stored.profile ? { profile: stored.profile } : {}
+    };
   }
   async function handleAuthResult(result) {
     let addresses;
@@ -4077,6 +4108,7 @@ async function createDecaneConnect(config) {
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
     persistLiveSession();
+    if (result.profile) await rememberProfile(result.userId, result.profile);
     return {
       addresses,
       isNewUser: result.isNewUser,
@@ -4183,10 +4215,10 @@ async function createDecaneConnect(config) {
       return handleAuthResult(result);
     },
     async canSignInWithPasskey() {
-      return await passkeyLoginCandidate() !== null;
+      return await passkeyDeviceCandidate() !== null;
     },
     async signInWithPasskey() {
-      const candidate = await passkeyLoginCandidate();
+      const candidate = await passkeyDeviceCandidate();
       if (!candidate) throw new NewDeviceError();
       return passkeyLogin(candidate);
     },
@@ -6763,7 +6795,11 @@ function DecaneKit({ config, children }) {
         "session-expired",
         () => setSocialAuth((p) => ({ ...p, isUnlocked: false, sessionExpiresAt: null }))
       );
-      sdk.on("disconnected", () => setSocialAuth(DEFAULT_SOCIAL));
+      sdk.on("disconnected", () => {
+        setSocialAuth(DEFAULT_SOCIAL);
+        sdk.canSignInWithPasskey().then((can) => setSocialAuth((p) => ({ ...p, canUsePasskey: can }))).catch(() => {
+        });
+      });
       sdk.on("wallet-creating", () => setSocialAuth((p) => ({ ...p, phase: "creating" })));
       sdk.on("wallet-unlocking", () => setSocialAuth((p) => ({ ...p, phase: "unlocking" })));
       sdk.on("connected", () => setSocialAuth((p) => ({ ...p, phase: null })));
@@ -7279,6 +7315,11 @@ function useSocialAuth() {
     sessionExpiresAt: socialAuth.sessionExpiresAt,
     // True when this device can skip the full sign-in and resume with a passkey.
     canUsePasskey: socialAuth.canUsePasskey,
+    // Who the provider said the user is — { name?, email?, picture? }, or null.
+    // A passkey sign-in returns the profile recorded on this device when the
+    // user first signed in, so it carries the same name and email a Google
+    // sign-in does rather than coming back anonymous.
+    profile: socialAuth.profile,
     // Long-running work in progress, for driving your own status UI.
     phase: socialAuth.phase,
     isCreatingWallet: socialAuth.phase === "creating",