react-native-nitro-auth 0.5.7 → 0.5.8

package/android/src/main/java/com/auth/AuthAdapter.kt

@@ -142,6 +142,7 @@ object AuthAdapter {
     }
 
     fun dispose() {
+        clearPkceState()
         moduleScope.cancel()
         moduleScope = CoroutineScope(SupervisorJob() + Dispatchers.IO)
         runCatching { nativeDispose() }
@@ -309,7 +310,8 @@ object AuthAdapter {
         val origin = pendingOrigin
         if (error != null) {
             clearPkceState()
-            nativeOnLoginError(origin, error, errorDescription)
+            val mappedError = mapMicrosoftOAuthError(error)
+            nativeOnLoginError(origin, mappedError, errorDescription ?: error)
             return
         }
         if (state != pendingState) {
@@ -391,7 +393,7 @@ object AuthAdapter {
                 val error = json.optString("error", "token_error")
                 val desc = json.optString("error_description", "Failed to exchange code for tokens")
                 clearPkceState()
-                nativeOnLoginError(origin, error, desc)
+                nativeOnLoginError(origin, mapMicrosoftOAuthError(error), desc)
             } catch (e: Exception) {
                 clearPkceState()
                 nativeOnLoginError(origin, "token_error", "Failed to exchange code for tokens")
@@ -438,6 +440,7 @@ object AuthAdapter {
         }
     }
 
+    @Synchronized
     private fun clearPkceState() {
         pendingOrigin = "login"
         pendingPkceVerifier = null
@@ -450,6 +453,16 @@ object AuthAdapter {
         microsoftAuthInProgress = false
     }
 
+    private fun mapMicrosoftOAuthError(error: String): String {
+        return when (error) {
+            "access_denied", "interaction_required" -> "cancelled"
+            "invalid_client", "unauthorized_client" -> "configuration_error"
+            "invalid_grant", "invalid_request", "invalid_scope" -> "token_error"
+            "temporarily_unavailable", "server_error" -> "network_error"
+            else -> "token_error"
+        }
+    }
+
     private fun decodeJwt(token: String): Map<String, String> {
         return try {
             val parts = token.split(".")
@@ -594,8 +607,10 @@ object AuthAdapter {
         val account = GoogleSignIn.getLastSignedInAccount(ctx)
         if (account != null) {
             val newScopes = scopes.map { Scope(it) }
+            val grantedScopes = account.grantedScopes?.map { it.scopeUri }.orEmpty()
+            val allScopes = (grantedScopes + scopes.toList()).distinct()
             if (GoogleSignIn.hasPermissions(account, *newScopes.toTypedArray())) {
-                onSignInSuccess(account, (pendingScopes + scopes.toList()).distinct(), "scopes")
+                onSignInSuccess(account, allScopes, "scopes")
                 return
             }
             val clientId = getClientIdFromResources(ctx)
@@ -603,7 +618,6 @@ object AuthAdapter {
                 nativeOnLoginError("scopes", "configuration_error", "Google Client ID not configured")
                 return
             }
-            val allScopes = (pendingScopes + scopes.toList()).distinct()
             val intent = GoogleSignInActivity.createIntent(ctx, clientId, allScopes.toTypedArray(), account.email, origin = "scopes")
             ctx.startActivity(intent)
             return
@@ -667,6 +681,7 @@ object AuthAdapter {
     @JvmStatic
     fun logoutSync(context: Context) {
         val ctx = appContext ?: context.applicationContext
+        clearPkceState()
         // Clear Credential Manager state (covers One-Tap / passkey credentials).
         moduleScope.launch {
             try {
@@ -689,6 +704,7 @@ object AuthAdapter {
     @JvmStatic
     fun revokeAccessSync(context: Context) {
         val ctx = appContext ?: context.applicationContext
+        clearPkceState()
         val clientId = getClientIdFromResources(ctx)
         if (clientId != null) {
             val gso = GoogleSignInOptions.Builder(GoogleSignInOptions.DEFAULT_SIGN_IN)
@@ -788,7 +804,7 @@ object AuthAdapter {
                                 val json = org.json.JSONObject(responseBody)
                                 val errorCode = json.optString("error", "token_error")
                                 val errorDesc = json.optString("error_description", "Token refresh failed")
-                                Pair(errorCode, errorDesc)
+                                Pair(mapMicrosoftOAuthError(errorCode), errorDesc)
                             } catch (e: Exception) {
                                 Pair("token_error", "Token refresh failed")
                             }
@@ -871,7 +887,7 @@ object AuthAdapter {
                                 val json = org.json.JSONObject(errorBody)
                                 val errorCode = json.optString("error", "token_error")
                                 val errorDesc = json.optString("error_description", "Token refresh failed")
-                                Pair(errorCode, errorDesc)
+                                Pair(mapMicrosoftOAuthError(errorCode), errorDesc)
                             } catch (e: Exception) {
                                 Pair("token_error", "Token refresh failed")
                             }

package/cpp/HybridAuth.cpp

@@ -2,6 +2,7 @@
 #include "PlatformAuth.hpp"
 #include <algorithm>
 #include <chrono>
+#include <stdexcept>
 
 namespace margelo::nitro::NitroAuth {
 
@@ -69,10 +70,19 @@ std::function<void()> HybridAuth::onTokensRefreshed(const std::function<void(con
 }
 
 void HybridAuth::logout() {
+  std::shared_ptr<Promise<AuthTokens>> refreshInFlight;
   {
     std::lock_guard<std::recursive_mutex> lock(_mutex);
+    _sessionGeneration++;
     _currentUser = std::nullopt;
     _grantedScopes.clear();
+    refreshInFlight = _refreshInFlight;
+    _refreshInFlight = nullptr;
+  }
+  if (refreshInFlight) {
+    refreshInFlight->reject(
+      std::make_exception_ptr(std::runtime_error("not_signed_in"))
+    );
   }
   PlatformAuth::logout();
   notifyAuthStateChanged();
@@ -80,12 +90,21 @@ void HybridAuth::logout() {
 
 std::shared_ptr<Promise<void>> HybridAuth::silentRestore() {
   auto promise = Promise<void>::create();
+  uint64_t generation;
+  {
+    std::lock_guard<std::recursive_mutex> lock(_mutex);
+    generation = _sessionGeneration;
+  }
   auto silentPromise = PlatformAuth::silentRestore();
   auto self = shared_from_this();
-  silentPromise->addOnResolvedListener([self, promise](const std::optional<AuthUser>& user) {
+  silentPromise->addOnResolvedListener([self, promise, generation](const std::optional<AuthUser>& user) {
     auto* auth = dynamic_cast<HybridAuth*>(self.get());
     {
       std::lock_guard<std::recursive_mutex> lock(auth->_mutex);
+      if (auth->_sessionGeneration != generation) {
+        promise->resolve();
+        return;
+      }
       auth->_currentUser = user;
       if (user) {
         if (user->scopes) {
@@ -111,13 +130,24 @@ std::shared_ptr<Promise<void>> HybridAuth::silentRestore() {
 
 std::shared_ptr<Promise<void>> HybridAuth::login(AuthProvider provider, const std::optional<LoginOptions>& options) {
   auto promise = Promise<void>::create();
+  uint64_t generation;
+  {
+    std::lock_guard<std::recursive_mutex> lock(_mutex);
+    generation = _sessionGeneration;
+  }
   
   auto self = shared_from_this();
   auto loginPromise = PlatformAuth::login(provider, options);
-  loginPromise->addOnResolvedListener([self, promise, options](const AuthUser& user) {
+  loginPromise->addOnResolvedListener([self, promise, options, generation](const AuthUser& user) {
     auto* auth = dynamic_cast<HybridAuth*>(self.get());
     {
       std::lock_guard<std::recursive_mutex> lock(auth->_mutex);
+      if (auth->_sessionGeneration != generation) {
+        promise->reject(
+          std::make_exception_ptr(std::runtime_error("cancelled"))
+        );
+        return;
+      }
       auth->_currentUser = user;
       if (user.scopes && !user.scopes->empty()) {
         auth->_grantedScopes = *user.scopes;
@@ -144,12 +174,23 @@ std::shared_ptr<Promise<void>> HybridAuth::login(AuthProvider provider, const st
 
 std::shared_ptr<Promise<void>> HybridAuth::requestScopes(const std::vector<std::string>& scopes) {
   auto promise = Promise<void>::create();
+  uint64_t generation;
+  {
+    std::lock_guard<std::recursive_mutex> lock(_mutex);
+    generation = _sessionGeneration;
+  }
   auto self = shared_from_this();
   auto requestPromise = PlatformAuth::requestScopes(scopes);
-  requestPromise->addOnResolvedListener([self, promise, scopes](const AuthUser& user) {
+  requestPromise->addOnResolvedListener([self, promise, scopes, generation](const AuthUser& user) {
     auto* auth = dynamic_cast<HybridAuth*>(self.get());
     {
       std::lock_guard<std::recursive_mutex> lock(auth->_mutex);
+      if (auth->_sessionGeneration != generation) {
+        promise->reject(
+          std::make_exception_ptr(std::runtime_error("cancelled"))
+        );
+        return;
+      }
       auth->_currentUser = user;
       for (const auto& scope : scopes) {
         if (std::find(auth->_grantedScopes.begin(), auth->_grantedScopes.end(), scope) == auth->_grantedScopes.end()) {
@@ -191,9 +232,11 @@ std::shared_ptr<Promise<void>> HybridAuth::revokeScopes(const std::vector<std::s
 std::shared_ptr<Promise<std::optional<std::string>>> HybridAuth::getAccessToken() {
   auto promise = Promise<std::optional<std::string>>::create();
   bool needsRefresh = false;
+  std::optional<std::string> cachedAccessToken;
   {
     std::lock_guard<std::recursive_mutex> lock(_mutex);
     if (_currentUser && _currentUser->accessToken) {
+      cachedAccessToken = _currentUser->accessToken;
       if (_currentUser->expirationTime) {
         auto now = std::chrono::system_clock::now().time_since_epoch() / std::chrono::milliseconds(1);
         if (now + 300000 > *_currentUser->expirationTime) needsRefresh = true;
@@ -210,8 +253,8 @@ std::shared_ptr<Promise<std::optional<std::string>>> HybridAuth::getAccessToken(
 
   if (needsRefresh) {
     auto refreshPromise = refreshToken();
-    refreshPromise->addOnResolvedListener([promise](const AuthTokens& tokens) {
-      promise->resolve(tokens.accessToken);
+    refreshPromise->addOnResolvedListener([promise, cachedAccessToken](const AuthTokens& tokens) {
+      promise->resolve(tokens.accessToken.has_value() ? tokens.accessToken : cachedAccessToken);
     });
     refreshPromise->addOnRejectedListener([promise](const std::exception_ptr& error) {
       promise->reject(error);
@@ -222,21 +265,26 @@ std::shared_ptr<Promise<std::optional<std::string>>> HybridAuth::getAccessToken(
 
 std::shared_ptr<Promise<AuthTokens>> HybridAuth::refreshToken() {
   std::shared_ptr<Promise<AuthTokens>> promise;
+  uint64_t generation;
   {
     std::lock_guard<std::recursive_mutex> lock(_mutex);
     if (_refreshInFlight) {
       return _refreshInFlight;
     }
+    generation = _sessionGeneration;
     promise = Promise<AuthTokens>::create();
     _refreshInFlight = promise;
   }
 
   auto self = shared_from_this();
   auto refreshPromise = PlatformAuth::refreshToken();
-  refreshPromise->addOnResolvedListener([self, promise](const AuthTokens& tokens) {
+  refreshPromise->addOnResolvedListener([self, promise, generation](const AuthTokens& tokens) {
     auto* auth = dynamic_cast<HybridAuth*>(self.get());
     {
       std::lock_guard<std::recursive_mutex> lock(auth->_mutex);
+      if (auth->_sessionGeneration != generation) {
+        return;
+      }
       if (auth->_currentUser) {
         if (tokens.accessToken.has_value()) {
           auth->_currentUser->accessToken = tokens.accessToken;
@@ -260,10 +308,13 @@ std::shared_ptr<Promise<AuthTokens>> HybridAuth::refreshToken() {
     promise->resolve(tokens);
   });
 
-  refreshPromise->addOnRejectedListener([self, promise](const std::exception_ptr& error) {
+  refreshPromise->addOnRejectedListener([self, promise, generation](const std::exception_ptr& error) {
     auto* auth = dynamic_cast<HybridAuth*>(self.get());
     {
       std::lock_guard<std::recursive_mutex> lock(auth->_mutex);
+      if (auth->_sessionGeneration != generation) {
+        return;
+      }
       if (auth->_refreshInFlight == promise) {
         auth->_refreshInFlight = nullptr;
       }

package/cpp/HybridAuth.hpp

@@ -48,6 +48,7 @@ private:
   std::map<uint64_t, std::function<void(const AuthTokens&)>> _tokenListeners;
   uint64_t _nextTokenListenerId = 0;
   std::shared_ptr<Promise<AuthTokens>> _refreshInFlight;
+  uint64_t _sessionGeneration = 0;
   
   // recursive_mutex: listeners resolved inside a lock scope may re-enter Auth methods
   // that also acquire _mutex, causing deadlock with a non-recursive mutex.

package/ios/AuthAdapter.swift

@@ -261,7 +261,7 @@ public class AuthAdapter: NSObject {
     
     URLSession.shared.dataTask(with: request) { data, response, error in
       DispatchQueue.main.async {
-        if let error = error {
+        if error != nil {
           completion(nil, "network_error")
           return
         }
@@ -626,7 +626,7 @@ public class AuthAdapter: NSObject {
       .data(using: .utf8)
     URLSession.shared.dataTask(with: request) { data, response, error in
       DispatchQueue.main.async {
-        if let error = error {
+        if error != nil {
           completion(nil, "network_error")
           return
         }

package/lib/commonjs/utils/auth-error.js

@@ -11,7 +11,14 @@ function isAuthErrorCode(value) {
   return AUTH_ERROR_CODES.has(value);
 }
 function toAuthErrorCode(raw) {
-  return isAuthErrorCode(raw) ? raw : "unknown";
+  if (isAuthErrorCode(raw)) {
+    return raw;
+  }
+  const prefix = raw.split(":", 1)[0]?.trim();
+  if (prefix && isAuthErrorCode(prefix)) {
+    return prefix;
+  }
+  return "unknown";
 }
 
 /**

package/lib/commonjs/utils/auth-error.js.map

@@ -1 +1 @@
-{"version":3,"names":["AUTH_ERROR_CODES","Set","isAuthErrorCode","value","has","toAuthErrorCode","raw","AuthError","Error","constructor","message","String","code","name","underlyingMessage","undefined","from","e","exports"],"sourceRoot":"../../../src","sources":["utils/auth-error.ts"],"mappings":";;;;;;;;AAEA,MAAMA,gBAAqC,GAAG,IAAIC,GAAG,CAAgB,CACnE,WAAW,EACX,SAAS,EACT,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,SAAS,CACV,CAAC;AAEK,SAASC,eAAeA,CAACC,KAAa,EAA0B;EACrE,OAAOH,gBAAgB,CAACI,GAAG,CAACD,KAAK,CAAC;AACpC;AAEO,SAASE,eAAeA,CAACC,GAAW,EAAiB;EAC1D,OAAOJ,eAAe,CAACI,GAAG,CAAC,GAAGA,GAAG,GAAG,SAAS;AAC/C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMC,SAAS,SAASC,KAAK,CAAC;EAInCC,WAAWA,CAACH,GAAY,EAAE;IACxB,MAAMI,OAAO,GAAGJ,GAAG,YAAYE,KAAK,GAAGF,GAAG,CAACI,OAAO,GAAGC,MAAM,CAACL,GAAG,CAAC;IAChE,MAAMM,IAAI,GAAGP,eAAe,CAACK,OAAO,CAAC;IACrC,KAAK,CAACE,IAAI,CAAC;IACX,IAAI,CAACC,IAAI,GAAG,WAAW;IACvB,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,iBAAiB,GAAGF,IAAI,KAAKF,OAAO,GAAGA,OAAO,GAAGK,SAAS;EACjE;EAEA,OAAOC,IAAIA,CAACC,CAAU,EAAa;IACjC,OAAOA,CAAC,YAAYV,SAAS,GAAGU,CAAC,GAAG,IAAIV,SAAS,CAACU,CAAC,CAAC;EACtD;AACF;AAACC,OAAA,CAAAX,SAAA,GAAAA,SAAA","ignoreList":[]}
+{"version":3,"names":["AUTH_ERROR_CODES","Set","isAuthErrorCode","value","has","toAuthErrorCode","raw","prefix","split","trim","AuthError","Error","constructor","message","String","code","name","underlyingMessage","undefined","from","e","exports"],"sourceRoot":"../../../src","sources":["utils/auth-error.ts"],"mappings":";;;;;;;;AAEA,MAAMA,gBAAqC,GAAG,IAAIC,GAAG,CAAgB,CACnE,WAAW,EACX,SAAS,EACT,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,SAAS,CACV,CAAC;AAEK,SAASC,eAAeA,CAACC,KAAa,EAA0B;EACrE,OAAOH,gBAAgB,CAACI,GAAG,CAACD,KAAK,CAAC;AACpC;AAEO,SAASE,eAAeA,CAACC,GAAW,EAAiB;EAC1D,IAAIJ,eAAe,CAACI,GAAG,CAAC,EAAE;IACxB,OAAOA,GAAG;EACZ;EAEA,MAAMC,MAAM,GAAGD,GAAG,CAACE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAEC,IAAI,CAAC,CAAC;EAC3C,IAAIF,MAAM,IAAIL,eAAe,CAACK,MAAM,CAAC,EAAE;IACrC,OAAOA,MAAM;EACf;EAEA,OAAO,SAAS;AAClB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMG,SAAS,SAASC,KAAK,CAAC;EAInCC,WAAWA,CAACN,GAAY,EAAE;IACxB,MAAMO,OAAO,GAAGP,GAAG,YAAYK,KAAK,GAAGL,GAAG,CAACO,OAAO,GAAGC,MAAM,CAACR,GAAG,CAAC;IAChE,MAAMS,IAAI,GAAGV,eAAe,CAACQ,OAAO,CAAC;IACrC,KAAK,CAACE,IAAI,CAAC;IACX,IAAI,CAACC,IAAI,GAAG,WAAW;IACvB,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,iBAAiB,GAAGF,IAAI,KAAKF,OAAO,GAAGA,OAAO,GAAGK,SAAS;EACjE;EAEA,OAAOC,IAAIA,CAACC,CAAU,EAAa;IACjC,OAAOA,CAAC,YAAYV,SAAS,GAAGU,CAAC,GAAG,IAAIV,SAAS,CAACU,CAAC,CAAC;EACtD;AACF;AAACC,OAAA,CAAAX,SAAA,GAAAA,SAAA","ignoreList":[]}

package/lib/module/utils/auth-error.js

@@ -5,7 +5,14 @@ export function isAuthErrorCode(value) {
   return AUTH_ERROR_CODES.has(value);
 }
 export function toAuthErrorCode(raw) {
-  return isAuthErrorCode(raw) ? raw : "unknown";
+  if (isAuthErrorCode(raw)) {
+    return raw;
+  }
+  const prefix = raw.split(":", 1)[0]?.trim();
+  if (prefix && isAuthErrorCode(prefix)) {
+    return prefix;
+  }
+  return "unknown";
 }
 
 /**

package/lib/module/utils/auth-error.js.map

@@ -1 +1 @@
-{"version":3,"names":["AUTH_ERROR_CODES","Set","isAuthErrorCode","value","has","toAuthErrorCode","raw","AuthError","Error","constructor","message","String","code","name","underlyingMessage","undefined","from","e"],"sourceRoot":"../../../src","sources":["utils/auth-error.ts"],"mappings":";;AAEA,MAAMA,gBAAqC,GAAG,IAAIC,GAAG,CAAgB,CACnE,WAAW,EACX,SAAS,EACT,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,SAAS,CACV,CAAC;AAEF,OAAO,SAASC,eAAeA,CAACC,KAAa,EAA0B;EACrE,OAAOH,gBAAgB,CAACI,GAAG,CAACD,KAAK,CAAC;AACpC;AAEA,OAAO,SAASE,eAAeA,CAACC,GAAW,EAAiB;EAC1D,OAAOJ,eAAe,CAACI,GAAG,CAAC,GAAGA,GAAG,GAAG,SAAS;AAC/C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,SAAS,SAASC,KAAK,CAAC;EAInCC,WAAWA,CAACH,GAAY,EAAE;IACxB,MAAMI,OAAO,GAAGJ,GAAG,YAAYE,KAAK,GAAGF,GAAG,CAACI,OAAO,GAAGC,MAAM,CAACL,GAAG,CAAC;IAChE,MAAMM,IAAI,GAAGP,eAAe,CAACK,OAAO,CAAC;IACrC,KAAK,CAACE,IAAI,CAAC;IACX,IAAI,CAACC,IAAI,GAAG,WAAW;IACvB,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,iBAAiB,GAAGF,IAAI,KAAKF,OAAO,GAAGA,OAAO,GAAGK,SAAS;EACjE;EAEA,OAAOC,IAAIA,CAACC,CAAU,EAAa;IACjC,OAAOA,CAAC,YAAYV,SAAS,GAAGU,CAAC,GAAG,IAAIV,SAAS,CAACU,CAAC,CAAC;EACtD;AACF","ignoreList":[]}
+{"version":3,"names":["AUTH_ERROR_CODES","Set","isAuthErrorCode","value","has","toAuthErrorCode","raw","prefix","split","trim","AuthError","Error","constructor","message","String","code","name","underlyingMessage","undefined","from","e"],"sourceRoot":"../../../src","sources":["utils/auth-error.ts"],"mappings":";;AAEA,MAAMA,gBAAqC,GAAG,IAAIC,GAAG,CAAgB,CACnE,WAAW,EACX,SAAS,EACT,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,SAAS,CACV,CAAC;AAEF,OAAO,SAASC,eAAeA,CAACC,KAAa,EAA0B;EACrE,OAAOH,gBAAgB,CAACI,GAAG,CAACD,KAAK,CAAC;AACpC;AAEA,OAAO,SAASE,eAAeA,CAACC,GAAW,EAAiB;EAC1D,IAAIJ,eAAe,CAACI,GAAG,CAAC,EAAE;IACxB,OAAOA,GAAG;EACZ;EAEA,MAAMC,MAAM,GAAGD,GAAG,CAACE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAEC,IAAI,CAAC,CAAC;EAC3C,IAAIF,MAAM,IAAIL,eAAe,CAACK,MAAM,CAAC,EAAE;IACrC,OAAOA,MAAM;EACf;EAEA,OAAO,SAAS;AAClB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMG,SAAS,SAASC,KAAK,CAAC;EAInCC,WAAWA,CAACN,GAAY,EAAE;IACxB,MAAMO,OAAO,GAAGP,GAAG,YAAYK,KAAK,GAAGL,GAAG,CAACO,OAAO,GAAGC,MAAM,CAACR,GAAG,CAAC;IAChE,MAAMS,IAAI,GAAGV,eAAe,CAACQ,OAAO,CAAC;IACrC,KAAK,CAACE,IAAI,CAAC;IACX,IAAI,CAACC,IAAI,GAAG,WAAW;IACvB,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,iBAAiB,GAAGF,IAAI,KAAKF,OAAO,GAAGA,OAAO,GAAGK,SAAS;EACjE;EAEA,OAAOC,IAAIA,CAACC,CAAU,EAAa;IACjC,OAAOA,CAAC,YAAYV,SAAS,GAAGU,CAAC,GAAG,IAAIV,SAAS,CAACU,CAAC,CAAC;EACtD;AACF","ignoreList":[]}

package/lib/typescript/commonjs/utils/auth-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-error.d.ts","sourceRoot":"","sources":["../../../../src/utils/auth-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAoBnD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAErE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAE1D;AAED;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEnC,GAAG,EAAE,OAAO;IASxB,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS;CAGnC"}
+{"version":3,"file":"auth-error.d.ts","sourceRoot":"","sources":["../../../../src/utils/auth-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAoBnD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAErE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAW1D;AAED;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEnC,GAAG,EAAE,OAAO;IASxB,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS;CAGnC"}

package/lib/typescript/module/utils/auth-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-error.d.ts","sourceRoot":"","sources":["../../../../src/utils/auth-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAoBnD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAErE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAE1D;AAED;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEnC,GAAG,EAAE,OAAO;IASxB,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS;CAGnC"}
+{"version":3,"file":"auth-error.d.ts","sourceRoot":"","sources":["../../../../src/utils/auth-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAoBnD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAErE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAW1D;AAED;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEnC,GAAG,EAAE,OAAO;IASxB,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS;CAGnC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-nitro-auth",
-  "version": "0.5.7",
+  "version": "0.5.8",
   "description": "High-performance authentication library for React Native with Google Sign-In, Apple Sign-In, and Microsoft Sign-In support, powered by Nitro Modules (JSI)",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -39,9 +39,10 @@
     "test": "jest",
     "test:coverage": "jest --coverage",
     "test:cpp": "node scripts/test-cpp.js",
-    "prepublishOnly": "bun run clean && bun run build",
-    "prepack": "node -e \"const fs=require('fs'); fs.copyFileSync('../../README.md','./README.md'); try{fs.copyFileSync('../../LICENSE','./LICENSE')}catch(e){}\"",
-    "postpack": "node -e \"const fs=require('fs'); ['./README.md','./LICENSE'].forEach(f=>fs.existsSync(f)&&fs.unlinkSync(f))\""
+    "prepublishOnly": "bun run clean && bun run codegen && bun run build && bun run typecheck && bun run lint && bun run test && bun run test:cpp",
+    "prepack": "bun ../../scripts/sync-package-docs.ts",
+    "pack:dry-run": "bun pm pack --dry-run",
+    "publish:dry-run": "bun publish --dry-run --access public"
   },
   "keywords": [
     "react-native",
@@ -80,13 +81,13 @@
     "access": "public"
   },
   "devDependencies": {
-    "@expo/config-plugins": "^55.0.6",
+    "@expo/config-plugins": "^55.0.8",
     "@react-native/babel-preset": "^0.83.0",
     "@testing-library/react": "^16.3.2",
     "@types/node": "^22.19.11",
     "jest-environment-jsdom": "^29.7.0",
     "react": "19.2.0",
-    "react-native": "0.83.2",
+    "react-native": "0.83.4",
     "react-native-nitro-modules": "^0.35.4",
     "react-native-web": "^0.21.2",
     "typescript": "^5.9.3"

package/src/utils/auth-error.ts

@@ -23,7 +23,16 @@ export function isAuthErrorCode(value: string): value is AuthErrorCode {
 }
 
 export function toAuthErrorCode(raw: string): AuthErrorCode {
-  return isAuthErrorCode(raw) ? raw : "unknown";
+  if (isAuthErrorCode(raw)) {
+    return raw;
+  }
+
+  const prefix = raw.split(":", 1)[0]?.trim();
+  if (prefix && isAuthErrorCode(prefix)) {
+    return prefix;
+  }
+
+  return "unknown";
 }
 
 /**