corbado · incorbador · Mar 14, 2025 · Mar 11, 2025 · Mar 11, 2025 · Mar 11, 2025
diff --git a/packages/connect-react/src/components/append/AppendInitScreen.tsx b/packages/connect-react/src/components/append/AppendInitScreen.tsx
@@ -133,7 +133,7 @@ const AppendInitScreen = () => {
       setAttestationOptions(startAppendRes.val.attestationOptions);
       statefulLoader.current.finish();
 
-      if (flags?.hasSupportForAutomaticAppend()) {
+      if (startAppendRes.val.autoAppend) {
         await handleSubmit(startAppendRes.val.attestationOptions, false);
       }
     };

diff --git a/packages/connect-react/src/components/append/AppendSuccessScreen.tsx b/packages/connect-react/src/components/append/AppendSuccessScreen.tsx
@@ -1,6 +1,7 @@
 import React from 'react';
 
 import useAppendProcess from '../../hooks/useAppendProcess';
+import useShared from '../../hooks/useShared';
 import { PasskeySuccessIcon } from '../shared/icons/PasskeySuccessIcon';
 import { PrimaryButton } from '../shared/PrimaryButton';
 
@@ -11,6 +12,7 @@ type Props = {
 
 const AppendSuccessScreen = ({ aaguidName }: Props) => {
   const { config } = useAppendProcess();
+  const { getConnectService } = useShared();
 
   const [completing, setCompleting] = React.useState(false);
 
@@ -40,7 +42,7 @@ const AppendSuccessScreen = ({ aaguidName }: Props) => {
             }
 
             setCompleting(true);
-            void config.onComplete('complete');
+            void config.onComplete('complete', getConnectService().encodeClientState());
           }}
         >
           Continue

diff --git a/packages/connect-react/src/components/login/LoginErrorScreenHard.tsx b/packages/connect-react/src/components/login/LoginErrorScreenHard.tsx
@@ -60,7 +60,7 @@ const LoginErrorScreenHard = ({ previousAssertionOptions }: Props) => {
     setLoading(false);
 
     try {
-      await config.onComplete(connectLoginFinishToComplete(resFinish.val));
+      await config.onComplete(connectLoginFinishToComplete(resFinish.val), getConnectService().encodeClientState());
     } catch {
       return handleSituation(LoginSituationCode.CtApiNotAvailablePostAuthenticator);
     }

diff --git a/packages/connect-react/src/components/login/LoginErrorScreenSoft.tsx b/packages/connect-react/src/components/login/LoginErrorScreenSoft.tsx
@@ -51,7 +51,7 @@ const LoginErrorScreenSoft = ({ previousAssertionOptions }: Props) => {
     }
 
     try {
-      await config.onComplete(connectLoginFinishToComplete(resFinish.val));
+      await config.onComplete(connectLoginFinishToComplete(resFinish.val), getConnectService().encodeClientState());
       setLoading(false);
     } catch {
       handleSituation(LoginSituationCode.CtApiNotAvailablePostAuthenticator);

diff --git a/packages/connect-react/src/components/login/LoginHybridScreen.tsx b/packages/connect-react/src/components/login/LoginHybridScreen.tsx
@@ -31,7 +31,7 @@ const LoginHybridScreen = (resStart: ConnectLoginStartRsp) => {
     }
 
     try {
-      await config.onComplete(connectLoginFinishToComplete(res.val));
+      await config.onComplete(connectLoginFinishToComplete(res.val), getConnectService().encodeClientState());
     } catch {
       return handleSituation(LoginSituationCode.CtApiNotAvailablePostAuthenticator);
     }

diff --git a/packages/connect-react/src/components/login/LoginInitScreen.tsx b/packages/connect-react/src/components/login/LoginInitScreen.tsx
@@ -90,10 +90,7 @@ const LoginInitScreen: FC<Props> = ({ showFallback = false }) => {
         getConnectService().setInvitation(invitationToken);
       }
 
-      const na = url.searchParams.get('not_authenticated');
-      if (na === '1') {
-        getConnectService().handleNa();
-      }
+      getConnectService().enrichClientState(config.clientState);
 
       const res = await getConnectService().loginInit(ac);
       if (res.err) {
@@ -180,7 +177,7 @@ const LoginInitScreen: FC<Props> = ({ showFallback = false }) => {
     }
 
     try {
-      await config.onComplete(connectLoginFinishToComplete(res.val));
+      await config.onComplete(connectLoginFinishToComplete(res.val), getConnectService().encodeClientState());
     } catch {
       return handleSituation(LoginSituationCode.CtApiNotAvailablePostAuthenticator);
     }
@@ -226,7 +223,7 @@ const LoginInitScreen: FC<Props> = ({ showFallback = false }) => {
     }
 
     try {
-      await config.onComplete(connectLoginFinishToComplete(res.val));
+      await config.onComplete(connectLoginFinishToComplete(res.val), getConnectService().encodeClientState());
     } catch {
       void getConnectService().recordEventLoginErrorUntyped();
       return handleSituation(LoginSituationCode.CtApiNotAvailablePostAuthenticator);

diff --git a/packages/connect-react/src/components/login/LoginPasskeyReLoginScreen.tsx b/packages/connect-react/src/components/login/LoginPasskeyReLoginScreen.tsx
@@ -52,7 +52,7 @@ export const LoginPasskeyReLoginScreen = () => {
     }
 
     try {
-      await config.onComplete(connectLoginFinishToComplete(resFinish.val));
+      await config.onComplete(connectLoginFinishToComplete(resFinish.val), getConnectService().encodeClientState());
     } catch {
       return handleSituation(LoginSituationCode.CtApiNotAvailablePostAuthenticator);
     }

diff --git a/packages/connect-react/src/contexts/AppendProcessProvider.tsx b/packages/connect-react/src/contexts/AppendProcessProvider.tsx
@@ -76,7 +76,7 @@ export const AppendProcessProvider: FC<PropsWithChildren<Props>> = ({ children,
     log.debug('error (credential-exists)');
 
     await getConnectService().recordEventAppendCredentialExistsError();
-    void config.onComplete('complete-noop');
+    void config.onComplete('complete-noop', getConnectService().encodeClientState());
   }, [getConnectService, config]);
 
   const contextValue = useMemo<AppendProcessContextProps>(

diff --git a/packages/types/src/connect/config.ts b/packages/types/src/connect/config.ts
@@ -4,11 +4,12 @@ export type CorbadoConnectLoginConfig = {
   onFallbackCustom?(identifier: string, code: string, payload: string): void;
   onError?(error: string): void;
   onLoaded?(message: string, isFallBackTriggered: boolean): void;
-  onComplete(signedPasskeyData: string): Promise<void>;
+  onComplete(signedPasskeyData: string, clientState: string): Promise<void>;
   onConditionalLoginStart?(ac: AbortController): void;
   onLoginStart?(): void;
   onHelpClick?(): void;
   onSignupClick?(): void;
+  clientState?: string;
 };
 
 export type CorbadoConnectLoginSecondFactorConfig = {
@@ -23,7 +24,7 @@ export type CorbadoConnectAppendConfig = {
   appendTokenProvider(): Promise<string>;
   onError?(error: string): void;
   onSkip(status: AppendStatus): Promise<void>;
-  onComplete(status: AppendStatus): Promise<void>;
+  onComplete(status: AppendStatus, clientState: string): Promise<void>;
 };
 
 export type AppendStatus = 'skip-implicit' | 'skip-explicit' | 'complete' | 'complete-noop';

diff --git a/packages/web-core/openapi/spec_v2.yaml b/packages/web-core/openapi/spec_v2.yaml
@@ -1248,6 +1248,8 @@ components:
           type: string
         identifierHintAvailable:
           type: boolean
+        oneTapMeta:
+          $ref: '#/components/schemas/clientStateMeta'
 
     connectLoginStartRsp:
       type: object
@@ -1352,6 +1354,7 @@ components:
         - attestationOptions
         - variant
         - isRestrictedBrowser
+        - autoAppend
       properties:
         attestationOptions:
           type: string
@@ -1363,6 +1366,8 @@ components:
             - after-error
         isRestrictedBrowser:
           type: boolean
+        autoAppend:
+          type: boolean
 
     connectAppendFinishReq:
       type: object
@@ -1945,6 +1950,20 @@ components:
           type: boolean
         privateMode:
           type: boolean
+        clientEnvHandleMeta:
+          $ref: '#/components/schemas/clientStateMeta'
+
+    clientStateMeta:
+      type: object
+      required:
+        - ts
+        - source
+      properties:
+        ts:
+          type: integer
+        source:
+          type: string
+          enum: [ 'ls', 'url' ]
 
     clientCapabilities:
       type: object

diff --git a/packages/web-core/src/api/v2/api.ts b/packages/web-core/src/api/v2/api.ts
@@ -246,7 +246,40 @@ export interface ClientInformation {
      * @memberof ClientInformation
      */
     'privateMode'?: boolean;
+    /**
+     * 
+     * @type {ClientStateMeta}
+     * @memberof ClientInformation
+     */
+    'clientEnvHandleMeta'?: ClientStateMeta;
+}
+/**
+ * 
+ * @export
+ * @interface ClientStateMeta
+ */
+export interface ClientStateMeta {
+    /**
+     * 
+     * @type {number}
+     * @memberof ClientStateMeta
+     */
+    'ts': number;
+    /**
+     * 
+     * @type {string}
+     * @memberof ClientStateMeta
+     */
+    'source': ClientStateMetaSourceEnum;
 }
+
+export const ClientStateMetaSourceEnum = {
+    Ls: 'ls',
+    Url: 'url'
+} as const;
+
+export type ClientStateMetaSourceEnum = typeof ClientStateMetaSourceEnum[keyof typeof ClientStateMetaSourceEnum];
+
 /**
  * 
  * @export
@@ -390,6 +423,12 @@ export interface ConnectAppendStartRsp {
      * @memberof ConnectAppendStartRsp
      */
     'isRestrictedBrowser': boolean;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof ConnectAppendStartRsp
+     */
+    'autoAppend': boolean;
 }
 
 export const ConnectAppendStartRspVariantEnum = {
@@ -593,6 +632,12 @@ export interface ConnectLoginStartReq {
      * @memberof ConnectLoginStartReq
      */
     'identifierHintAvailable'?: boolean;
+    /**
+     * 
+     * @type {ClientStateMeta}
+     * @memberof ConnectLoginStartReq
+     */
+    'oneTapMeta'?: ClientStateMeta;
 }
 
 export const ConnectLoginStartReqSourceEnum = {

diff --git a/packages/web-core/src/index.ts b/packages/web-core/src/index.ts
@@ -6,6 +6,4 @@ export * from './api';
 export * from './models/emailVerifyFromUrl';
 export * from './models/lastIdentifier';
 
-export * from './models/connect/connectLastLogin';
-
 export { CredentialRequestOptionsJSON } from '@corbado/webauthn-json';
diff --git a/packages/web-core/src/models/connect/connectLastLogin.ts b/packages/web-core/src/models/connect/connectLastLogin.ts