nocal-auth-sdk 0.2.1 → 0.2.2

package/dist/index.d.ts

@@ -13,7 +13,7 @@ export declare class NocalAuthSDK {
         user: NocalUser;
         session: NocalSession;
     }>;
-    private exchangeCodeForToken;
+    exchangeCodeForToken(code: string, codeVerifier: string): Promise<NocalSession>;
     private fetchUserInfo;
     getUser(): Promise<NocalUser | null>;
     getSession(): Promise<NocalSession | null>;

package/dist/index.js

@@ -60,8 +60,12 @@ export class NocalAuthSDK {
         authUrl.searchParams.set("code_challenge_method", "S256");
         const width = 480;
         const height = 680;
-        const left = typeof window !== "undefined" ? window.screenX + (window.outerWidth - width) / 2 : 0;
-        const top = typeof window !== "undefined" ? window.screenY + (window.outerHeight - height) / 2 : 0;
+        const left = typeof window !== "undefined"
+            ? window.screenX + (window.outerWidth - width) / 2
+            : 0;
+        const top = typeof window !== "undefined"
+            ? window.screenY + (window.outerHeight - height) / 2
+            : 0;
         const popup = window.open(authUrl.toString(), "NocalAuthPopup", `width=${width},height=${height},left=${left},top=${top},status=yes,scrollbars=yes`);
         if (!popup) {
             throw new Error("POPUP_BLOCKED");
@@ -72,8 +76,9 @@ export class NocalAuthSDK {
                 if (event.origin !== allowedOrigin)
                     return;
                 const data = event.data;
-                if (!data || (data.type !== "NOCAL_OAUTH_CODE" && data.type !== "NOCAL_OAUTH_ERROR")) {
-                    // Hoặc kiểm tra URL redirect của popup nếu Supabase native redirect trực tiếp
+                if (!data ||
+                    (data.type !== "NOCAL_OAUTH_CODE" &&
+                        data.type !== "NOCAL_OAUTH_ERROR")) {
                     return;
                 }
                 window.removeEventListener("message", messageListener);
@@ -115,17 +120,14 @@ export class NocalAuthSDK {
                     if (popup.closed) {
                         clearInterval(checkClosedTimer);
                         window.removeEventListener("message", messageListener);
-                        // Kiểm tra nếu popup đóng và đã có code trong redirect URL (nếu dùng redirect thuần)
                         reject(new Error("POPUP_CLOSED_BY_USER"));
                     }
                     else {
-                        // Lắng nghe URL thay đổi nếu Supabase redirect trực tiếp về redirectUri
                         try {
                             const popupUrl = new URL(popup.location.href);
                             if (popupUrl.origin === new URL(this.redirectUri).origin) {
                                 const code = popupUrl.searchParams.get("code");
                                 const error = popupUrl.searchParams.get("error");
-                                const returnedState = popupUrl.searchParams.get("state");
                                 if (code || error) {
                                     clearInterval(checkClosedTimer);
                                     window.removeEventListener("message", messageListener);
@@ -151,7 +153,7 @@ export class NocalAuthSDK {
                             }
                         }
                         catch (e) {
-                            // Cross-origin check while on Supabase auth domain
+                            // Cross-origin check
                         }
                     }
                 }
@@ -162,22 +164,24 @@ export class NocalAuthSDK {
         });
     }
     async exchangeCodeForToken(code, codeVerifier) {
-        const res = await fetch(`${this.authServerUrl}/auth/v1/oauth/token`, {
+        const params = new URLSearchParams();
+        params.set("grant_type", "authorization_code");
+        params.set("client_id", this.clientId);
+        params.set("redirect_uri", this.redirectUri);
+        params.set("code", code);
+        params.set("code_verifier", codeVerifier); // PKCE xác thực thay cho secret
+        const response = await fetch(`${this.authServerUrl}/auth/v1/oauth/token`, {
             method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({
-                grant_type: "authorization_code",
-                code,
-                client_id: this.clientId,
-                redirect_uri: this.redirectUri,
-                code_verifier: codeVerifier,
-            }),
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: params.toString(),
         });
-        const data = await res.json();
-        if (!res.ok) {
-            throw new Error(data.error_description || data.error || "FAILED_TO_EXCHANGE_TOKEN");
+        if (!response.ok) {
+            const errorData = await response.json();
+            throw new Error(`Supabase Auth Error: ${errorData.error_description || errorData.error}`);
         }
-        return data;
+        return (await response.json());
     }
     async fetchUserInfo(accessToken) {
         const res = await fetch(`${this.authServerUrl}/auth/v1/oauth/userinfo`, {

package/dist/types.d.ts

@@ -2,9 +2,12 @@ export interface NocalClientConfig {
     clientId: string;
     redirectUri: string;
     authServerUrl?: string;
+    storageKey?: string;
 }
 export interface OAuthLoginReq {
     state?: string;
+    provider?: string;
+    redirectTo?: string;
 }
 export interface NocalUser {
     sub: string;
@@ -12,12 +15,13 @@ export interface NocalUser {
     phone?: string;
     email_confirmed?: boolean;
     phone_confirmed?: boolean;
-    user_metadata?: Record<string, any>;
-    [key: string]: any;
+    user_metadata?: Record<string, unknown>;
+    [key: string]: unknown;
 }
 export interface NocalSession {
     access_token: string;
     refresh_token: string;
     token_type: string;
     expires_in: number;
+    expires_at?: number;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nocal-auth-sdk",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Nocal Auth - client-side SDK for Login with Nocal (popup flow)",
   "type": "module",
   "main": "dist/index.js",