lazypock 0.16.0 → 0.16.1

package/dist/index.cjs

@@ -641,9 +641,6 @@ function isSafeBrowserUrl(url) {
     return false;
   }
 }
-function isRecordAuth(value) {
-  return !!value && typeof value === "object" && typeof value.token === "string" && !!value.record && typeof value.record === "object";
-}
 function authorizeWithOAuth2Popup(opts) {
   return new Promise((resolve, reject) => {
     if (typeof window === "undefined") {
@@ -686,18 +683,20 @@ function authorizeWithOAuth2Popup(opts) {
       const data = event.data;
       if (!data || typeof data !== "object") return;
       if (data.type === "lazypock:oauth2") {
-        if (isRecordAuth(data.result)) {
+        const code = data.code;
+        if (typeof code === "string" && code) {
           if (popup) {
             try {
               popup.close();
             } catch {
             }
           }
-          finish(null, data.result);
+          const state = typeof data.state === "string" ? data.state : void 0;
+          finish(null, { code, state });
         } else {
           finish(
             new ApiError(
-              "OAuth2 callback returned an invalid result.",
+              "OAuth2 callback returned no authorization code.",
               data,
               400,
               false,
@@ -708,16 +707,9 @@ function authorizeWithOAuth2Popup(opts) {
         return;
       }
       if (data.type === "lazypock:oauth2:error") {
-        const result = data.result ?? {};
-        const message = typeof result.message === "string" && result.message ? result.message : "OAuth2 authorization failed.";
+        const message = typeof data.message === "string" && data.message ? data.message : "OAuth2 authorization failed.";
         finish(
-          new ApiError(
-            message,
-            result,
-            typeof result.code === "number" ? result.code : 400,
-            false,
-            "oauth2_provider_error"
-          )
+          new ApiError(message, data, 400, false, "oauth2_provider_error")
         );
       }
     };
@@ -1638,14 +1630,13 @@ var CollectionService = class _CollectionService {
   /**
    * Sign in with an OAuth2 provider (PocketBase `authWithOAuth2` parity).
    *
-   * One call handles the whole web flow: fetch the provider's `authURL`,
-   * open a popup (or call `options.urlCallback`), wait for the backend's
-   * `postMessage` result, populate the auth store, and resolve with
-   * `{ token, record, meta }`.
+   * One call handles the whole web flow: fetch the provider's `authURL`, open a
+   * popup (or call `options.urlCallback`), receive the single-use authorization
+   * `code` the backend relays via `postMessage`, exchange it, populate the auth
+   * store, and resolve with `{ token, record, meta }`.
    *
-   * `options.createData` is accepted for PocketBase signature parity but is
-   * **not** forwarded by the backend's popup redirect flow — use
-   * {@link authWithOAuth2Code} when you need extra fields on first sign-up.
+   * `options.createData` is forwarded on first sign-up (the exchange goes
+   * through {@link authWithOAuth2Code}), matching PocketBase.
    *
    * React Native / non-browser: the popup flow depends on
    * `window.postMessage`. Use {@link listAuthMethods} + {@link authWithOAuth2Code}
@@ -1654,6 +1645,7 @@ var CollectionService = class _CollectionService {
   async authWithOAuth2(options) {
     const {
       provider,
+      createData,
       urlCallback,
       popup,
       timeoutMs = DEFAULT_OAUTH2_TIMEOUT_MS
@@ -1671,18 +1663,19 @@ var CollectionService = class _CollectionService {
         "oauth2_unknown_provider"
       );
     }
-    const result = await authorizeWithOAuth2Popup({
+    const { code } = await authorizeWithOAuth2Popup({
       authURL: providerInfo.authURL,
       expectedOrigin: oauth2RedirectOrigin(this.http.baseUrl),
       urlCallback,
       popup,
       timeoutMs
     });
-    if (this.authStore) {
-      this.authStore.setCollectionName(this.collectionName);
-      this.authStore.set(result.token, result.record);
-    }
-    return result;
+    return this.authWithOAuth2Code({
+      provider,
+      code,
+      codeVerifier: providerInfo.codeVerifier,
+      createData
+    });
   }
   /**
    * Exchange an OAuth2 authorization code directly (PocketBase