decane-connect-kit 2.9.1 → 2.11.0

package/dist/index.d.cts

@@ -1126,9 +1126,14 @@ interface SocialAuthState {
      * Who the provider said the user is — `{ name?, email?, picture? }`.
      *
      * `null` until a sign-in returns one, and stays null for email sign-in and
-     * for providers the user withheld a profile from. It is not persisted across
-     * reloads: the backend stores no profile, so a restored session has an
-     * address but no name. Copy it somewhere durable if you need it to survive.
+     * for providers the user withheld a profile from.
+     *
+     * The backend stores no profile, so this cannot be re-fetched — but whatever
+     * a sign-in does reveal is kept beside this device's share, and a passkey
+     * login hands it back. A passkey sign-in therefore carries the same name and
+     * email the original Google sign-in did. A session merely restored from a
+     * reload still has an address and no name, so copy it somewhere durable if
+     * you need it in that state.
      */
     profile: AuthProfile | null;
     isUnlocked: boolean;
@@ -1222,6 +1227,7 @@ declare function useSocialAuth(): {
     } | null;
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
+    profile: AuthProfile | null;
     phase: "creating" | "unlocking" | null;
     isCreatingWallet: boolean;
     needsReconnect: boolean;

package/dist/index.d.ts

@@ -1126,9 +1126,14 @@ interface SocialAuthState {
      * Who the provider said the user is — `{ name?, email?, picture? }`.
      *
      * `null` until a sign-in returns one, and stays null for email sign-in and
-     * for providers the user withheld a profile from. It is not persisted across
-     * reloads: the backend stores no profile, so a restored session has an
-     * address but no name. Copy it somewhere durable if you need it to survive.
+     * for providers the user withheld a profile from.
+     *
+     * The backend stores no profile, so this cannot be re-fetched — but whatever
+     * a sign-in does reveal is kept beside this device's share, and a passkey
+     * login hands it back. A passkey sign-in therefore carries the same name and
+     * email the original Google sign-in did. A session merely restored from a
+     * reload still has an address and no name, so copy it somewhere durable if
+     * you need it in that state.
      */
     profile: AuthProfile | null;
     isUnlocked: boolean;
@@ -1222,6 +1227,7 @@ declare function useSocialAuth(): {
     } | null;
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
+    profile: AuthProfile | null;
     phase: "creating" | "unlocking" | null;
     isCreatingWallet: boolean;
     needsReconnect: boolean;

package/dist/index.js

@@ -2195,6 +2195,15 @@ var Storage = class {
   async getShare(userId) {
     return (await this._db).get(STORE, userId) ?? null;
   }
+  /**
+   * Every share this browser holds. Needed because signing out clears the
+   * remembered identity while deliberately leaving the share behind, so the
+   * userId that keys it is no longer known and the share can only be found by
+   * enumeration. See passkeyDeviceCandidate().
+   */
+  async listShares() {
+    return (await this._db).getAll(STORE);
+  }
   async putShare(share) {
     await (await this._db).put(STORE, share);
   }
@@ -3948,7 +3957,25 @@ async function createDecaneConnect(config) {
   }
   async function passkeyLoginCandidate() {
     if (!persisted?.userId || !isPasskeySupported()) return null;
-    const stored = await storage.getShare(persisted.userId);
+    return usablePasskeyShare(await storage.getShare(persisted.userId));
+  }
+  async function passkeyDeviceCandidate() {
+    if (!isPasskeySupported()) return null;
+    if (persisted?.userId) return passkeyLoginCandidate();
+    const candidates = (await storage.listShares()).map(usablePasskeyShare).filter(Boolean);
+    return candidates.length === 1 ? candidates[0] : null;
+  }
+  async function rememberProfile(userId, profile) {
+    const incoming = Object.fromEntries(Object.entries(profile).filter(([, v]) => v));
+    if (!Object.keys(incoming).length) return;
+    try {
+      const stored = await storage.getShare(userId);
+      if (!stored) return;
+      await storage.putShare({ ...stored, profile: { ...stored.profile, ...incoming } });
+    } catch {
+    }
+  }
+  function usablePasskeyShare(stored) {
     if (!stored || stored.unlockMethod !== "passkey") return null;
     if (!stored.credentialId || !stored.prfSalt) return null;
     return stored;
@@ -3985,7 +4012,11 @@ async function createDecaneConnect(config) {
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
     persistLiveSession();
-    return { addresses, isNewUser: false };
+    return {
+      addresses,
+      isNewUser: false,
+      ...stored.profile ? { profile: stored.profile } : {}
+    };
   }
   async function handleAuthResult(result) {
     let addresses;
@@ -4001,6 +4032,7 @@ async function createDecaneConnect(config) {
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
     persistLiveSession();
+    if (result.profile) await rememberProfile(result.userId, result.profile);
     return {
       addresses,
       isNewUser: result.isNewUser,
@@ -4107,10 +4139,10 @@ async function createDecaneConnect(config) {
       return handleAuthResult(result);
     },
     async canSignInWithPasskey() {
-      return await passkeyLoginCandidate() !== null;
+      return await passkeyDeviceCandidate() !== null;
     },
     async signInWithPasskey() {
-      const candidate = await passkeyLoginCandidate();
+      const candidate = await passkeyDeviceCandidate();
       if (!candidate) throw new NewDeviceError();
       return passkeyLogin(candidate);
     },
@@ -6694,7 +6726,11 @@ function DecaneKit({ config, children }) {
         "session-expired",
         () => setSocialAuth((p) => ({ ...p, isUnlocked: false, sessionExpiresAt: null }))
       );
-      sdk.on("disconnected", () => setSocialAuth(DEFAULT_SOCIAL));
+      sdk.on("disconnected", () => {
+        setSocialAuth(DEFAULT_SOCIAL);
+        sdk.canSignInWithPasskey().then((can) => setSocialAuth((p) => ({ ...p, canUsePasskey: can }))).catch(() => {
+        });
+      });
       sdk.on("wallet-creating", () => setSocialAuth((p) => ({ ...p, phase: "creating" })));
       sdk.on("wallet-unlocking", () => setSocialAuth((p) => ({ ...p, phase: "unlocking" })));
       sdk.on("connected", () => setSocialAuth((p) => ({ ...p, phase: null })));
@@ -7210,6 +7246,11 @@ function useSocialAuth() {
     sessionExpiresAt: socialAuth.sessionExpiresAt,
     // True when this device can skip the full sign-in and resume with a passkey.
     canUsePasskey: socialAuth.canUsePasskey,
+    // Who the provider said the user is — { name?, email?, picture? }, or null.
+    // A passkey sign-in returns the profile recorded on this device when the
+    // user first signed in, so it carries the same name and email a Google
+    // sign-in does rather than coming back anonymous.
+    profile: socialAuth.profile,
     // Long-running work in progress, for driving your own status UI.
     phase: socialAuth.phase,
     isCreatingWallet: socialAuth.phase === "creating",