Socket
Socket
Sign inDemoInstall

@stytch/vanilla-js

Package Overview
Dependencies
3
Maintainers
15
Versions
133
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 4.7.8 to 4.8.0

20

CHANGELOG.md
# @stytch/vanilla-js
## 4.8.0
### Minor Changes
- b007d98: Enable FedCM for use with Google One Tap by default. For users using supported browsers (including Google Chrome and other Chromium-based browsers), Google One Tap will now use [FedCM to provide a sign in experience using native browser prompts](https://developers.google.com/identity/gsi/web/guides/fedcm-migration).
Due to changes in Google's One Tap SDK, this affects One Tap using both floating and embedded positioning. Notably, users of Chrome and other Chromium-based browsers will no longer see a embedded One Tap UI by default. Google will begin to remove support for this UI later this year. We recommend adopting the new default behavior, but we have added new position options if you require different behavior:
- `floating` remains the default option and uses Google's One Tap SDK's default behavior. It uses FedCM (native browser UI) where available, or renders a floating UI in the top right corner otherwise.
- `floatingOrEmbedded` uses FedCM where available, or renders an embedded UI in the existing SDK login form otherwise. This is the new default behavior of the `embedded` position, which has been deprecated and renamed for clarity.
- `embeddedOnly` renders the embedded UI in the existing SDK login form if FedCM is not available, or not at all otherwise. This option is not recommended for new applications. For applications that used `embedded` positioning and do not want to show floating or native browser UI, this option may be useful.
- `forceLegacyEmbedded` retains the legacy behavior by disabling FedCM support even where it is available. This option is not recommended and will stop being honored by Google in the future, at which time you will need to select a different option.
The `embedded` position will still be recognized and treated as `floatingOrEmbedded`, but we recommend updating your configuration to use the new name or a different option.
### Patch Changes
- Updated dependencies [b007d98]
- @stytch/core@2.12.0
## 4.7.8

@@ -4,0 +24,0 @@

1

dist/index.d.ts

@@ -27,2 +27,3 @@ import { IHeadlessCryptoWalletClient, IHeadlessMagicLinksClient, IHeadlessOTPsClient, IHeadlessPasswordClient, IHeadlessSessionClient, IHeadlessTOTPClient, IHeadlessUserClient, IHeadlessWebAuthnClient, StytchClientOptions, IHeadlessOAuthClient, Callbacks, StytchLoginConfig, StyleConfig } from "@stytch/core/public";

* An optional callback function that runs when a user explicitly cancels out of the one tap flow.
* This callback may not be invoked immediately or at all depending on the behavior of the browser and Google's SDK.
*/

@@ -29,0 +30,0 @@ onOneTapCancelled?: () => void;

@@ -27,2 +27,3 @@ import { IHeadlessCryptoWalletClient, IHeadlessMagicLinksClient, IHeadlessOTPsClient, IHeadlessPasswordClient, IHeadlessSessionClient, IHeadlessTOTPClient, IHeadlessUserClient, IHeadlessWebAuthnClient, StytchClientOptions, IHeadlessOAuthClient, Callbacks, StytchLoginConfig, StyleConfig } from "@stytch/core/public";

* An optional callback function that runs when a user explicitly cancels out of the one tap flow.
* This callback may not be invoked immediately or at all depending on the behavior of the browser and Google's SDK.
*/

@@ -29,0 +30,0 @@ onOneTapCancelled?: () => void;

@@ -27,2 +27,3 @@ import { IHeadlessCryptoWalletClient, IHeadlessMagicLinksClient, IHeadlessOTPsClient, IHeadlessPasswordClient, IHeadlessSessionClient, IHeadlessTOTPClient, IHeadlessUserClient, IHeadlessWebAuthnClient, StytchClientOptions, IHeadlessOAuthClient } from "@stytch/core/public";

* An optional callback function that runs when a user explicitly cancels out of the one tap flow.
* This callback may not be invoked immediately or at all depending on the behavior of the browser and Google's SDK.
*/

@@ -29,0 +30,0 @@ onOneTapCancelled?: () => void;

@@ -27,2 +27,3 @@ import { IHeadlessCryptoWalletClient, IHeadlessMagicLinksClient, IHeadlessOTPsClient, IHeadlessPasswordClient, IHeadlessSessionClient, IHeadlessTOTPClient, IHeadlessUserClient, IHeadlessWebAuthnClient, StytchClientOptions, IHeadlessOAuthClient } from "@stytch/core/public";

* An optional callback function that runs when a user explicitly cancels out of the one tap flow.
* This callback may not be invoked immediately or at all depending on the behavior of the browser and Google's SDK.
*/

@@ -29,0 +30,0 @@ onOneTapCancelled?: () => void;

4

package.json
{
"name": "@stytch/vanilla-js",
"version": "4.7.8",
"version": "4.8.0",
"description": "Stytch's official Javascript Client Library",

@@ -40,3 +40,3 @@ "main": "./dist/index.js",

"dependencies": {
"@stytch/core": "2.11.0",
"@stytch/core": "2.12.0",
"@types/google-one-tap": "^1.2.0"

@@ -43,0 +43,0 @@ },

Sorry, the diff of this file is too big to display

Sorry, the diff of this file is too big to display

Sorry, the diff of this file is too big to display

Sorry, the diff of this file is too big to display

Sorry, the diff of this file is too big to display

Sorry, the diff of this file is too big to display

Sorry, the diff of this file is too big to display

Sorry, the diff of this file is too big to display

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc