powr-sdk-web 5.9.1 → 5.10.1

package/dist/feeds/components/CreatePost.js

@@ -129,7 +129,7 @@ var CreatePost = function CreatePost(_ref) {
   }();
   var handleFileUpload = /*#__PURE__*/function () {
     var _ref3 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(files) {
-      var uploadedFiles, _iterator, _step, file, formData, _yield$apiCall2, data, ok, _t2, _t3;
+      var uploadedFiles, _iterator, _step, file, _data$data, formData, _yield$apiCall2, data, ok, fileUrl, _t2, _t3;
       return _regenerator().w(function (_context2) {
         while (1) switch (_context2.p = _context2.n) {
           case 0:
@@ -148,7 +148,7 @@ var CreatePost = function CreatePost(_ref) {
             formData.append('file', file);
             formData.append('projectId', process.env.NEXT_PUBLIC_PROJECT_ID);
             _context2.n = 4;
-            return (0, _auth.apiCall)(apiUrl, '/files/upload', projectId, {
+            return (0, _auth.apiCall)(apiUrl, '/files', projectId, {
               method: 'POST',
               body: formData
             });
@@ -156,9 +156,10 @@ var CreatePost = function CreatePost(_ref) {
             _yield$apiCall2 = _context2.v;
             data = _yield$apiCall2.data;
             ok = _yield$apiCall2.ok;
-            if (ok && data.success) {
+            fileUrl = (data === null || data === void 0 ? void 0 : data.url) || (data === null || data === void 0 || (_data$data = data.data) === null || _data$data === void 0 ? void 0 : _data$data.url);
+            if (ok && fileUrl) {
               uploadedFiles.push({
-                url: data.data.url,
+                url: fileUrl,
                 type: file.type.startsWith('image/') ? 'image' : 'document',
                 filename: file.name
               });

package/dist/index.js

@@ -1,5 +1,6 @@
 "use strict";
 
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
@@ -21,6 +22,12 @@ Object.defineProperty(exports, "DEFAULT_COUNTRY_CODE", {
     return _phone.DEFAULT_COUNTRY_CODE;
   }
 });
+Object.defineProperty(exports, "DEFAULT_POWR_TARGETS", {
+  enumerable: true,
+  get: function get() {
+    return _sso.DEFAULT_POWR_TARGETS;
+  }
+});
 Object.defineProperty(exports, "OnboardingShell", {
   enumerable: true,
   get: function get() {
@@ -105,6 +112,12 @@ Object.defineProperty(exports, "PowrBaseReviews", {
     return _reviews["default"];
   }
 });
+Object.defineProperty(exports, "PowrBaseSso", {
+  enumerable: true,
+  get: function get() {
+    return _sso["default"];
+  }
+});
 Object.defineProperty(exports, "PowrBaseSwiper", {
   enumerable: true,
   get: function get() {
@@ -183,6 +196,12 @@ Object.defineProperty(exports, "buildPhoneFromParts", {
     return _phone.buildPhoneFromParts;
   }
 });
+Object.defineProperty(exports, "buildPowrSsoUrl", {
+  enumerable: true,
+  get: function get() {
+    return _sso.buildPowrSsoUrl;
+  }
+});
 Object.defineProperty(exports, "coercePhoneForStorage", {
   enumerable: true,
   get: function get() {
@@ -267,6 +286,24 @@ Object.defineProperty(exports, "isValidPhone", {
     return _phone.isValidPhone;
   }
 });
+Object.defineProperty(exports, "issueLoginCode", {
+  enumerable: true,
+  get: function get() {
+    return _sso.issueLoginCode;
+  }
+});
+Object.defineProperty(exports, "loginWithCode", {
+  enumerable: true,
+  get: function get() {
+    return _sso.loginWithCode;
+  }
+});
+Object.defineProperty(exports, "matchPowrTarget", {
+  enumerable: true,
+  get: function get() {
+    return _sso.matchPowrTarget;
+  }
+});
 Object.defineProperty(exports, "mergePowrSteps", {
   enumerable: true,
   get: function get() {
@@ -291,6 +328,12 @@ Object.defineProperty(exports, "normalizePhone", {
     return _phone.normalizePhone;
   }
 });
+Object.defineProperty(exports, "openPowrLogin", {
+  enumerable: true,
+  get: function get() {
+    return _sso.openPowrLogin;
+  }
+});
 Object.defineProperty(exports, "parsePhone", {
   enumerable: true,
   get: function get() {
@@ -309,6 +352,12 @@ Object.defineProperty(exports, "resolveCountry", {
     return _phone.resolveCountry;
   }
 });
+Object.defineProperty(exports, "safeNextPath", {
+  enumerable: true,
+  get: function get() {
+    return _sso.safeNextPath;
+  }
+});
 var _table = _interopRequireDefault(require("./table"));
 var _swiper = _interopRequireDefault(require("./swiper"));
 var _reviews = _interopRequireDefault(require("./reviews"));
@@ -321,6 +370,7 @@ var _calendar = _interopRequireDefault(require("./calendar"));
 var _blogs = _interopRequireDefault(require("./blogs"));
 var _likes = _interopRequireDefault(require("./likes"));
 var _auth = _interopRequireDefault(require("./auth"));
+var _sso = _interopRequireWildcard(require("./sso"));
 var _forms = _interopRequireDefault(require("./forms"));
 var _chat = _interopRequireDefault(require("./chat"));
 var _feeds = _interopRequireDefault(require("./feeds"));
@@ -334,4 +384,5 @@ var _onboarding = require("./onboarding");
 var _phone = require("./utils/phone");
 var _jwt = require("./utils/jwt");
 var _sessionMessages = require("./utils/sessionMessages");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t in e) "default" !== _t && {}.hasOwnProperty.call(e, _t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t)) && (i.get || i.set) ? o(f, _t, i) : f[_t] = e[_t]); return f; })(e, t); }
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }

package/dist/sso/api.js

@@ -0,0 +1,139 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.issueLoginCode = issueLoginCode;
+exports.loginWithCode = loginWithCode;
+exports.readHandoffParams = readHandoffParams;
+exports.safeNextPath = safeNextPath;
+exports.stripHandoffParams = stripHandoffParams;
+function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
+function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
+function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
+function joinApi(apiUrl, path) {
+  var base = String(apiUrl || "").replace(/\/+$/, "");
+  var p = String(path || "").replace(/^\/+/, "");
+  return "".concat(base, "/").concat(p);
+}
+
+/** Safe in-app path from `?next=` (relative only). */
+function safeNextPath(next) {
+  var fallback = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : "/";
+  if (next && String(next).startsWith("/") && !String(next).startsWith("//")) {
+    return String(next);
+  }
+  return fallback;
+}
+
+/**
+ * Issue a one-time login code (caller must already be authenticated).
+ * @param {string} apiUrl - Powr API base (…/powr)
+ * @param {string} bearerToken
+ */
+function issueLoginCode(_x, _x2) {
+  return _issueLoginCode.apply(this, arguments);
+}
+/**
+ * Exchange loginId for session (same shape as /login).
+ * @param {string} apiUrl
+ * @param {string} loginId
+ */
+function _issueLoginCode() {
+  _issueLoginCode = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(apiUrl, bearerToken) {
+    var res, data;
+    return _regenerator().w(function (_context) {
+      while (1) switch (_context.n) {
+        case 0:
+          _context.n = 1;
+          return fetch(joinApi(apiUrl, "auth/issue-login-code"), {
+            method: "POST",
+            headers: {
+              Authorization: "Bearer ".concat(bearerToken),
+              "Content-Type": "application/json"
+            }
+          });
+        case 1:
+          res = _context.v;
+          _context.n = 2;
+          return res.json()["catch"](function () {
+            return {};
+          });
+        case 2:
+          data = _context.v;
+          if (!(!res.ok || !data.success || !data.loginId)) {
+            _context.n = 3;
+            break;
+          }
+          throw new Error(data.message || "Could not start sign-in");
+        case 3:
+          return _context.a(2, data);
+      }
+    }, _callee);
+  }));
+  return _issueLoginCode.apply(this, arguments);
+}
+function loginWithCode(_x3, _x4) {
+  return _loginWithCode.apply(this, arguments);
+}
+function _loginWithCode() {
+  _loginWithCode = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(apiUrl, loginId) {
+    var res, data, err;
+    return _regenerator().w(function (_context2) {
+      while (1) switch (_context2.n) {
+        case 0:
+          _context2.n = 1;
+          return fetch(joinApi(apiUrl, "auth/login-with-code"), {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json"
+            },
+            body: JSON.stringify({
+              loginId: loginId
+            })
+          });
+        case 1:
+          res = _context2.v;
+          _context2.n = 2;
+          return res.json()["catch"](function () {
+            return {};
+          });
+        case 2:
+          data = _context2.v;
+          if (!(!res.ok || !data.success || !data.token || !data.user)) {
+            _context2.n = 3;
+            break;
+          }
+          err = new Error(data.message || "This login link expired");
+          err.status = res.status;
+          err.data = data;
+          throw err;
+        case 3:
+          return _context2.a(2, data);
+      }
+    }, _callee2);
+  }));
+  return _loginWithCode.apply(this, arguments);
+}
+function readHandoffParams() {
+  if (typeof window === "undefined") {
+    return {
+      loginId: null,
+      next: ""
+    };
+  }
+  var params = new URLSearchParams(window.location.search);
+  return {
+    loginId: params.get("loginId"),
+    next: params.get("next") || ""
+  };
+}
+function stripHandoffParams() {
+  if (typeof window === "undefined") return;
+  var params = new URLSearchParams(window.location.search);
+  params["delete"]("loginId");
+  params["delete"]("next");
+  var rest = params.toString();
+  window.history.replaceState({}, "", "".concat(window.location.pathname).concat(rest ? "?".concat(rest) : "").concat(window.location.hash));
+}

package/dist/sso/index.js

@@ -0,0 +1,244 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "DEFAULT_POWR_TARGETS", {
+  enumerable: true,
+  get: function get() {
+    return _openPowrLogin.DEFAULT_POWR_TARGETS;
+  }
+});
+Object.defineProperty(exports, "buildPowrSsoUrl", {
+  enumerable: true,
+  get: function get() {
+    return _openPowrLogin.buildPowrSsoUrl;
+  }
+});
+exports["default"] = PowrBaseSso;
+Object.defineProperty(exports, "issueLoginCode", {
+  enumerable: true,
+  get: function get() {
+    return _api.issueLoginCode;
+  }
+});
+Object.defineProperty(exports, "loginWithCode", {
+  enumerable: true,
+  get: function get() {
+    return _api.loginWithCode;
+  }
+});
+Object.defineProperty(exports, "matchPowrTarget", {
+  enumerable: true,
+  get: function get() {
+    return _openPowrLogin.matchPowrTarget;
+  }
+});
+Object.defineProperty(exports, "openPowrLogin", {
+  enumerable: true,
+  get: function get() {
+    return _openPowrLogin.openPowrLogin;
+  }
+});
+Object.defineProperty(exports, "readHandoffParams", {
+  enumerable: true,
+  get: function get() {
+    return _api.readHandoffParams;
+  }
+});
+Object.defineProperty(exports, "safeNextPath", {
+  enumerable: true,
+  get: function get() {
+    return _api.safeNextPath;
+  }
+});
+Object.defineProperty(exports, "stripHandoffParams", {
+  enumerable: true,
+  get: function get() {
+    return _api.stripHandoffParams;
+  }
+});
+var _react = _interopRequireWildcard(require("react"));
+var _api = require("./api");
+var _openPowrLogin = require("./openPowrLogin");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t in e) "default" !== _t && {}.hasOwnProperty.call(e, _t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t)) && (i.get || i.set) ? o(f, _t, i) : f[_t] = e[_t]); return f; })(e, t); }
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
+function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
+function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
+function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
+function _slicedToArray(r, e) { return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest(); }
+function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
+function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
+function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _iterableToArrayLimit(r, l) { var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (null != t) { var e, n, i, u, a = [], f = !0, o = !1; try { if (i = (t = t.call(r)).next, 0 === l) { if (Object(t) !== t) return; f = !1; } else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = !0); } catch (r) { o = !0, n = r; } finally { try { if (!f && null != t["return"] && (u = t["return"](), Object(u) !== u)) return; } finally { if (o) throw n; } } return a; } }
+function _arrayWithHoles(r) { if (Array.isArray(r)) return r; }
+function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
+function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
+function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
+function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+var shellStyle = {
+  display: "flex",
+  minHeight: "100vh",
+  flexDirection: "column",
+  alignItems: "center",
+  justifyContent: "center",
+  padding: "0 1.5rem",
+  textAlign: "center",
+  background: "var(--background, #fafafa)",
+  color: "var(--foreground, #111)",
+  fontFamily: "system-ui, -apple-system, Segoe UI, Roboto, sans-serif"
+};
+var mutedStyle = {
+  fontSize: "0.875rem",
+  fontWeight: 500,
+  color: "var(--muted-foreground, #737373)",
+  margin: 0
+};
+var titleStyle = {
+  marginTop: "1.5rem",
+  fontSize: "1.25rem",
+  fontWeight: 600,
+  letterSpacing: "-0.025em",
+  marginBottom: 0
+};
+var bodyStyle = {
+  marginTop: "0.5rem",
+  maxWidth: "24rem",
+  fontSize: "0.875rem",
+  color: "var(--muted-foreground, #737373)",
+  marginBottom: 0
+};
+var errorTextStyle = _objectSpread(_objectSpread({}, bodyStyle), {}, {
+  color: "var(--destructive, #dc2626)"
+});
+var spinnerStyle = {
+  marginTop: "1.5rem",
+  width: "2.5rem",
+  height: "2.5rem",
+  borderRadius: "9999px",
+  border: "2px solid var(--primary, #2563eb)",
+  borderTopColor: "transparent",
+  animation: "powr-sso-spin 0.7s linear infinite"
+};
+var btnStyle = {
+  marginTop: "1.5rem",
+  display: "inline-flex",
+  alignItems: "center",
+  justifyContent: "center",
+  borderRadius: "0.5rem",
+  background: "var(--primary, #2563eb)",
+  color: "var(--primary-foreground, #fff)",
+  padding: "0.5rem 1rem",
+  fontSize: "0.875rem",
+  fontWeight: 500,
+  textDecoration: "none",
+  border: "none",
+  cursor: "pointer"
+};
+
+/**
+ * Cross-app SSO handoff UI (UrbanStall → Powr apps).
+ * Apps keep a thin `/sso` page that renders this with `apiUrl` + `onSuccess`.
+ *
+ * @param {object} props
+ * @param {string} props.apiUrl - Powr API base ending in /powr (or /powr/)
+ * @param {string} [props.appName]
+ * @param {boolean} [props.ready=true] - Wait (e.g. auth hydrate) before exchanging code
+ * @param {string} [props.loginHref="/login"]
+ * @param {string} [props.loginId] - Defaults to ?loginId=
+ * @param {string} [props.next] - Defaults to ?next=
+ * @param {(data: object, ctx: { next: string, safeNext: string }) => void | Promise<void>} props.onSuccess
+ * @param {string} [props.signingInTitle]
+ * @param {string} [props.signingInMessage]
+ * @param {string} [props.errorTitle]
+ */
+function PowrBaseSso(_ref) {
+  var apiUrl = _ref.apiUrl,
+    _ref$appName = _ref.appName,
+    appName = _ref$appName === void 0 ? "App" : _ref$appName,
+    _ref$ready = _ref.ready,
+    ready = _ref$ready === void 0 ? true : _ref$ready,
+    _ref$loginHref = _ref.loginHref,
+    loginHref = _ref$loginHref === void 0 ? "/login" : _ref$loginHref,
+    loginIdProp = _ref.loginId,
+    nextProp = _ref.next,
+    onSuccess = _ref.onSuccess,
+    _ref$signingInTitle = _ref.signingInTitle,
+    signingInTitle = _ref$signingInTitle === void 0 ? "Signing you in…" : _ref$signingInTitle,
+    _ref$signingInMessage = _ref.signingInMessage,
+    signingInMessage = _ref$signingInMessage === void 0 ? "Finishing your UrbanStall handoff. This only takes a moment." : _ref$signingInMessage,
+    _ref$errorTitle = _ref.errorTitle,
+    errorTitle = _ref$errorTitle === void 0 ? "Sign-in link expired" : _ref$errorTitle;
+  var fromUrl = (0, _react.useState)(function () {
+    return (0, _api.readHandoffParams)();
+  })[0];
+  var loginId = loginIdProp !== undefined ? loginIdProp : fromUrl.loginId;
+  var next = nextProp !== undefined ? nextProp : fromUrl.next;
+  var _useState = (0, _react.useState)(loginId ? null : "Missing login link"),
+    _useState2 = _slicedToArray(_useState, 2),
+    error = _useState2[0],
+    setError = _useState2[1];
+  var _useState3 = (0, _react.useState)(Boolean(loginId)),
+    _useState4 = _slicedToArray(_useState3, 2),
+    busy = _useState4[0],
+    setBusy = _useState4[1];
+  var started = (0, _react.useRef)(false);
+  var onSuccessRef = (0, _react.useRef)(onSuccess);
+  onSuccessRef.current = onSuccess;
+  (0, _react.useEffect)(function () {
+    if (!loginId || !ready || !apiUrl || started.current) return;
+    started.current = true;
+    setBusy(true);
+    (0, _api.loginWithCode)(apiUrl, loginId).then(/*#__PURE__*/function () {
+      var _ref2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(data) {
+        var cb;
+        return _regenerator().w(function (_context) {
+          while (1) switch (_context.n) {
+            case 0:
+              (0, _api.stripHandoffParams)();
+              cb = onSuccessRef.current;
+              if (!(typeof cb === "function")) {
+                _context.n = 1;
+                break;
+              }
+              _context.n = 1;
+              return cb(data, {
+                next: next,
+                safeNext: (0, _api.safeNextPath)(next, "/")
+              });
+            case 1:
+              return _context.a(2);
+          }
+        }, _callee);
+      }));
+      return function (_x) {
+        return _ref2.apply(this, arguments);
+      };
+    }())["catch"](function (err) {
+      (0, _api.stripHandoffParams)();
+      setError((err === null || err === void 0 ? void 0 : err.message) || "Could not finish sign-in");
+      setBusy(false);
+    });
+  }, [loginId, next, ready, apiUrl]);
+  return /*#__PURE__*/_react["default"].createElement("div", {
+    style: shellStyle
+  }, /*#__PURE__*/_react["default"].createElement("style", null, "@keyframes powr-sso-spin{to{transform:rotate(360deg)}}"), /*#__PURE__*/_react["default"].createElement("p", {
+    style: mutedStyle
+  }, appName), busy && !error ? /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, /*#__PURE__*/_react["default"].createElement("div", {
+    style: spinnerStyle,
+    "aria-hidden": true
+  }), /*#__PURE__*/_react["default"].createElement("h1", {
+    style: titleStyle
+  }, signingInTitle), /*#__PURE__*/_react["default"].createElement("p", {
+    style: bodyStyle
+  }, signingInMessage)) : null, error ? /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, /*#__PURE__*/_react["default"].createElement("h1", {
+    style: titleStyle
+  }, errorTitle), /*#__PURE__*/_react["default"].createElement("p", {
+    style: errorTextStyle
+  }, error), /*#__PURE__*/_react["default"].createElement("a", {
+    href: loginHref,
+    style: btnStyle
+  }, "Continue to login")) : null);
+}

package/dist/sso/openPowrLogin.js

@@ -0,0 +1,165 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.DEFAULT_POWR_TARGETS = void 0;
+exports.buildPowrSsoUrl = buildPowrSsoUrl;
+exports.matchPowrTarget = matchPowrTarget;
+exports.openPowrLogin = openPowrLogin;
+var _api = require("./api");
+function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
+function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
+function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
+function _createForOfIteratorHelper(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
+function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function normalizeOrigin(value) {
+  return String(value || "").replace(/\/$/, "").toLowerCase();
+}
+
+/**
+ * Default Lawazia Powr app origin → /powr API map (prod + common local Quiz).
+ * Host apps can pass `targets` to override (e.g. from NEXT_PUBLIC_* env).
+ */
+var DEFAULT_POWR_TARGETS = exports.DEFAULT_POWR_TARGETS = [{
+  origins: ["https://rasoi.lawazia.tech"],
+  powrApiUrl: "https://rasoiapp-api-690167968218.europe-west1.run.app/powr"
+}, {
+  origins: ["https://win.urbanstall.app"],
+  powrApiUrl: "https://quizapp-api-new-762437065717.asia-south1.run.app/powr"
+}, {
+  origins: ["http://localhost:3001", "http://127.0.0.1:3001", "http://localhost:3010", "http://127.0.0.1:3010"],
+  powrApiUrl: "http://localhost:3000/powr"
+}, {
+  origins: ["https://earn.urbanstall.app"],
+  powrApiUrl: "https://ads-app-api-429552207832.asia-east1.run.app/powr"
+}];
+
+/**
+ * @param {string} url
+ * @param {Array<{ origins: string[], powrApiUrl: string }>} [targets]
+ * @returns {{ origin: string, powrApiUrl: string, pathname: string, search: string, hash: string } | null}
+ */
+function matchPowrTarget(url) {
+  var targets = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_POWR_TARGETS;
+  var parsed;
+  try {
+    parsed = new URL(url);
+  } catch (_unused) {
+    return null;
+  }
+  var origin = normalizeOrigin(parsed.origin);
+  var _iterator = _createForOfIteratorHelper(targets),
+    _step;
+  try {
+    for (_iterator.s(); !(_step = _iterator.n()).done;) {
+      var target = _step.value;
+      if ((target.origins || []).some(function (o) {
+        return normalizeOrigin(o) === origin;
+      })) {
+        return {
+          origin: parsed.origin.replace(/\/$/, ""),
+          powrApiUrl: String(target.powrApiUrl).replace(/\/$/, ""),
+          pathname: parsed.pathname || "/",
+          search: parsed.search || "",
+          hash: parsed.hash || ""
+        };
+      }
+    }
+  } catch (err) {
+    _iterator.e(err);
+  } finally {
+    _iterator.f();
+  }
+  return null;
+}
+
+/**
+ * Build destination `/sso?loginId=` (+ optional `next`) on the sibling app.
+ */
+function buildPowrSsoUrl(target, loginId) {
+  var _ref = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {},
+    _ref$ssoPath = _ref.ssoPath,
+    ssoPath = _ref$ssoPath === void 0 ? "/sso" : _ref$ssoPath;
+  var params = new URLSearchParams();
+  params.set("loginId", loginId);
+  var path = target.pathname || "/";
+  if (path && path !== "/" && path !== "/login" && path !== ssoPath) {
+    params.set("next", "".concat(path).concat(target.search || ""));
+  }
+  var basePath = ssoPath.startsWith("/") ? ssoPath : "/".concat(ssoPath);
+  return "".concat(target.origin).concat(basePath, "?").concat(params.toString());
+}
+function openPlain(url) {
+  if (typeof window === "undefined") return;
+  window.open(url, "_blank", "noopener,noreferrer");
+}
+
+/**
+ * Issue a login code on the target Powr API and navigate to `/sso?loginId=`.
+ * Falls back to opening the original URL when there is no token, no match, or issue fails.
+ *
+ * @param {string} url - Destination app URL (banner link, etc.)
+ * @param {string|null|undefined} token - Caller auth JWT (UrbanStall or Powr)
+ * @param {object} [options]
+ * @param {Array<{ origins: string[], powrApiUrl: string }>} [options.targets]
+ * @param {string} [options.ssoPath="/sso"]
+ * @param {(url: string) => void} [options.onFallback] - default window.open
+ * @param {(ssoUrl: string) => void} [options.navigate] - default location.assign
+ */
+function openPowrLogin(_x, _x2) {
+  return _openPowrLogin.apply(this, arguments);
+}
+function _openPowrLogin() {
+  _openPowrLogin = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(url, token) {
+    var options,
+      _options$targets,
+      targets,
+      _options$ssoPath,
+      ssoPath,
+      _options$onFallback,
+      onFallback,
+      _options$navigate,
+      navigate,
+      target,
+      data,
+      _args = arguments,
+      _t;
+    return _regenerator().w(function (_context) {
+      while (1) switch (_context.p = _context.n) {
+        case 0:
+          options = _args.length > 2 && _args[2] !== undefined ? _args[2] : {};
+          _options$targets = options.targets, targets = _options$targets === void 0 ? DEFAULT_POWR_TARGETS : _options$targets, _options$ssoPath = options.ssoPath, ssoPath = _options$ssoPath === void 0 ? "/sso" : _options$ssoPath, _options$onFallback = options.onFallback, onFallback = _options$onFallback === void 0 ? openPlain : _options$onFallback, _options$navigate = options.navigate, navigate = _options$navigate === void 0 ? function (ssoUrl) {
+            if (typeof window !== "undefined") window.location.assign(ssoUrl);
+          } : _options$navigate;
+          target = matchPowrTarget(url, targets);
+          if (!(!target || !token)) {
+            _context.n = 1;
+            break;
+          }
+          onFallback(url);
+          return _context.a(2);
+        case 1:
+          _context.p = 1;
+          _context.n = 2;
+          return (0, _api.issueLoginCode)(target.powrApiUrl, token);
+        case 2:
+          data = _context.v;
+          navigate(buildPowrSsoUrl(target, data.loginId, {
+            ssoPath: ssoPath
+          }));
+          _context.n = 4;
+          break;
+        case 3:
+          _context.p = 3;
+          _t = _context.v;
+          onFallback(url);
+        case 4:
+          return _context.a(2);
+      }
+    }, _callee, null, [[1, 3]]);
+  }));
+  return _openPowrLogin.apply(this, arguments);
+}

package/dist/utils/auth.js

@@ -4,9 +4,11 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.getAuthToken = exports.createAuthHeaders = exports.apiCall = void 0;
+var _excluded = ["headers"];
 function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
 function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
-function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
+function _objectWithoutProperties(e, t) { if (null == e) return {}; var o, r, i = _objectWithoutPropertiesLoose(e, t); if (Object.getOwnPropertySymbols) { var n = Object.getOwnPropertySymbols(e); for (r = 0; r < n.length; r++) o = n[r], -1 === t.indexOf(o) && {}.propertyIsEnumerable.call(e, o) && (i[o] = e[o]); } return i; }
+function _objectWithoutPropertiesLoose(r, e) { if (null == r) return {}; var t = {}; for (var n in r) if ({}.hasOwnProperty.call(r, n)) { if (-1 !== e.indexOf(n)) continue; t[n] = r[n]; } return t; }
 function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
 function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
 function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
@@ -14,6 +16,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
 function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
 var config = require('../config');
 
 // Get auth token from localStorage or other auth mechanism
@@ -28,24 +31,46 @@ var getAuthToken = exports.getAuthToken = function getAuthToken() {
   }
   return null;
 };
+var isFormDataBody = function isFormDataBody(body) {
+  if (!body || _typeof(body) !== 'object') return false;
+  if (typeof FormData !== 'undefined' && body instanceof FormData) return true;
+  return Object.prototype.toString.call(body) === '[object FormData]';
+};
 
-// Create headers with authentication 
+// Create headers with authentication.
+// FormData must not set Content-Type — the browser needs the multipart boundary.
 var createAuthHeaders = exports.createAuthHeaders = function createAuthHeaders() {
   var additionalHeaders = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+  var _ref = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {},
+    omitJsonContentType = _ref.omitJsonContentType;
   var token = getAuthToken();
-  return _objectSpread(_objectSpread({
-    'Content-Type': 'application/json'
-  }, token && {
+  var headers = _objectSpread(_objectSpread({}, token && {
     'Authorization': "Bearer ".concat(token)
   }), additionalHeaders);
+  if (omitJsonContentType) {
+    Object.keys(headers).forEach(function (key) {
+      if (key.toLowerCase() === 'content-type') delete headers[key];
+    });
+    return headers;
+  }
+  var hasContentType = Object.keys(headers).some(function (key) {
+    return key.toLowerCase() === 'content-type';
+  });
+  if (!hasContentType) {
+    headers['Content-Type'] = 'application/json';
+  }
+  return headers;
 };
 
 // API helper function with authentication
 var apiCall = exports.apiCall = /*#__PURE__*/function () {
-  var _ref = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(apiUrl, endpoint, projectId) {
+  var _ref2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(apiUrl, endpoint, projectId) {
     var options,
       url,
       separator,
+      optionHeaders,
+      rest,
+      isFormData,
       requestConfig,
       response,
       data,
@@ -65,11 +90,14 @@ var apiCall = exports.apiCall = /*#__PURE__*/function () {
             separator = endpoint.includes('?') ? '&' : '?';
             url = "".concat(url).concat(separator, "projectId=").concat(projectId);
           }
-          console.log('url', url);
-          requestConfig = _objectSpread({
-            headers: createAuthHeaders(options.headers)
-          }, options); // If body is provided and is an object, stringify it
-          if (requestConfig.body && _typeof(requestConfig.body) === 'object' && !(requestConfig.body instanceof FormData)) {
+          optionHeaders = options.headers, rest = _objectWithoutProperties(options, _excluded);
+          isFormData = isFormDataBody(rest.body);
+          requestConfig = _objectSpread(_objectSpread({}, rest), {}, {
+            headers: createAuthHeaders(optionHeaders, {
+              omitJsonContentType: isFormData
+            })
+          });
+          if (requestConfig.body && _typeof(requestConfig.body) === 'object' && !isFormData) {
             requestConfig.body = JSON.stringify(requestConfig.body);
           }
           _context.n = 1;
@@ -89,6 +117,6 @@ var apiCall = exports.apiCall = /*#__PURE__*/function () {
     }, _callee);
   }));
   return function apiCall(_x, _x2, _x3) {
-    return _ref.apply(this, arguments);
+    return _ref2.apply(this, arguments);
   };
 }();

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "powr-sdk-web",
-    "version": "5.9.1",
+    "version": "5.10.1",
     "main": "dist/index.js",
     "scripts": {
         "build": "babel src -d dist --copy-files",