CodeCow/stack
1
0
Fork 0
mirror of https://github.com/stack-auth/stack.git synced 2026-06-19 21:00:40 +08:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
3c60b6923e
stack/packages/template
History
Bilal Godil 3c60b6923e fix(sdk): stop nested cross-domain auth from re-bouncing after the OAuth callback consumed code+state 
On the code-return hop of the nested cross-domain handshake, the
constructor schedules callOAuthCallback before
_maybeHandleNestedCrossDomainAuth. The former synchronously strips
code+state from the URL (history.replaceState) before starting its
token exchange, so the latter's 'a real OAuth callback wins' guard read
an already-stripped URL, decided no callback was happening, and bounced
back to the source domain with fresh handoff params - cancelling the
in-flight exchange and restarting the whole redirect chain. Users saw
5-8+ redirects ping-ponging between their app and the hosted components
site before the race happened to resolve.

Capture the URL at construction time and let the nested handler consult
it in addition to the live URL, so a stripped callback still counts as
a callback.
2026-06-10 16:53:39 -07:00
..
scripts Fix Vite environment variables 2026-06-05 16:42:11 -07:00
src fix(sdk): stop nested cross-domain auth from re-bouncing after the OAuth callback consumed code+state 2026-06-10 16:53:39 -07:00
.env Vanilla JS client library (#408) 2025-02-08 02:31:03 +01:00
.eslintrc.cjs Fix Vite environment variables 2026-06-05 16:42:11 -07:00
.gitignore Vanilla JS client library (#408) 2025-02-08 02:31:03 +01:00
components.json Vanilla JS client library (#408) 2025-02-08 02:31:03 +01:00
LICENSE Vanilla JS client library (#408) 2025-02-08 02:31:03 +01:00
next-env.d.ts Vanilla JS client library (#408) 2025-02-08 02:31:03 +01:00
package-template.json fix(rde): graceful config load errors + lightweight /config import path (#1557) 2026-06-10 11:40:19 -07:00
package.json fix(rde): graceful config load errors + lightweight /config import path (#1557) 2026-06-10 11:40:19 -07:00
postcss.config.js Vanilla JS client library (#408) 2025-02-08 02:31:03 +01:00
quetzal.config.json Vanilla JS client library (#408) 2025-02-08 02:31:03 +01:00
README.md Update package README 2026-05-28 09:59:54 -07:00
tailwind.config.js feat(hexclave): PR 3 — native @hexclave/* source rename + delete dual-publish wiring (#1482) 2026-05-29 15:21:59 -07:00
tsconfig.json In-source unit tests (#429) 2025-02-14 11:47:52 -08:00
tsdown.config.ts Fix build 2026-02-27 00:48:07 -08:00
vitest.config.ts feat(hexclave): PR 3 — native @hexclave/* source rename + delete dual-publish wiring (#1482) 2026-05-29 15:21:59 -07:00

README.md

This package has been renamed.

Stack Auth is now Hexclave! The new packages are:

  • @hexclave/next
  • @hexclave/react
  • @hexclave/js
  • @hexclave/cli

See the migration guide for more information.