chore(deps): bump native SDKs to Android 1.3.36 / iOS 1.3.12 - #92
Closed
dianaKhortiuk-frontegg wants to merge 1 commit into
Closed
chore(deps): bump native SDKs to Android 1.3.36 / iOS 1.3.12#92dianaKhortiuk-frontegg wants to merge 1 commit into
dianaKhortiuk-frontegg wants to merge 1 commit into
Conversation
Picks up the July 2026 mobile-SDK audit fixes shipped in the native releases: iOS 1.3.12 and Android 1.3.36.
This was referenced Jul 24, 2026
Closed
Collaborator
Author
|
Consolidated into #104 — combined with the other two RN release-prep PRs (cherry-picked onto current |
dianaKhortiuk-frontegg
added a commit
that referenced
this pull request
Jul 24, 2026
…1.3.12), multi-target SPM (#104) * fix: make logout() awaitable on both platforms — resolve when the session actually ends The bridge logout was fire-and-forget on both platforms: iOS called auth.logout() without the completion overload; Android ignored the SDK's callback parameter. JS had no way to know when the session was actually gone and relied solely on the auth-state event — which can be lost when logout coincides with app-level teardown, leaving the JS state authenticated forever and breaking the next login's state-transition detection (observed on-device). Both native SDKs already expose completion callbacks (iOS FronteggAuth.logout(_ completion:), Android logout(callback:)); the bridge just didn't use them. logout() now returns a Promise that resolves when the native SDK reports completion, and iOS pushes the final auth state to JS before resolving. The JS export is typed Promise<void>. Existing callers that ignore the return value are unaffected. * fix(android): guarantee logout() promise settles via timeout fallback logout(promise) resolved only from the SDK completion callback, so `await logout()` would hang forever if that callback never fired. Add a 10s timeout fallback (parity with the iOS bridge) and an atomic compare-and-set guard so the promise resolves exactly once, even though the SDK callback and the timeout may run on different threads. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * fix(ios): guarantee logout() promise settles via timeout fallback Harden the awaitable logout() so `await logout()` can never hang if the SDK completion never fires: add a 10s main-queue timeout fallback and a `settled` guard so the promise resolves exactly once. Companion to the Android change; both platforms now share the same 10s settle behavior. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * fix(ios): unconditionally replay auth state on listener attach Carried from #97 (closed). startObserving() replayed the current auth state to JS only when a change was missed while unobserved (pendingObservingState). Because the JS-side state copy starts from a default and is only corrected by events, a (re)subscribe that races a native state change left JS permanently stale — e.g. a logout during app-level teardown left useAuth() stuck authenticated. Replay unconditionally so a listener attach always resyncs JS. The companion subscribe() sink-disposal fix from #97 already landed via #100 (FR-25940); this carries only the remaining startObserving() piece. Co-Authored-By: Adam Rowe <52685+airowe@users.noreply.github.com> Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * chore(deps): bump native SDKs to Android 1.3.36 / iOS 1.3.12 Picks up the July 2026 mobile-SDK audit fixes shipped in the native releases: iOS 1.3.12 and Android 1.3.36. * feat(ios): declare FronteggSwift via React Native's spm_dependency helper (multi-target workspaces) ios/frontegg_spm.rb text-patches the host's Pods.xcodeproj with object IDs sized for a single app target. Workspaces with many app targets (white-label products build dozens from one workspace) can't use it — the script writes references for a target layout that doesn't match. React Native >= 0.75 ships an official mechanism for exactly this: spm_dependency() in a library podspec, applied by react_native_post_install to every target that consumes the pod, with no pbxproj text manipulation. Declare FronteggSwift there, guarded by defined?() so autolinking's out-of-process [!] A specification path is required. Usage: $ pod ipc spec PATH Converts a podspec to JSON and prints it to STDOUT. Options: --allow-root Allows CocoaPods to run as root --silent Show nothing --verbose Show more debugging information --no-ansi Show output without ANSI codes --help Show help banner of specified command evaluation (which doesn't load react_native_pods.rb) still parses the spec; frontegg_spm.rb remains the documented fallback for older RN. Validated on a 50-target workspace (RN 0.81.5, static linkage): pod install injects one XCRemoteSwiftPackageReference; Debug and Release builds of two app targets with different team/bundle IDs succeed with no per-target configuration. * chore(ios): pin FronteggSwift SPM to 1.3.12 (podspec + Package.swift) Align the spm_dependency pin and the Package.swift reference manifest to 1.3.12, matching the native-SDK bump in #92 (which covers frontegg_spm.rb and android/build.gradle). Keeps all iOS SPM integration paths on one version. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * chore(ios): bump FronteggSwift SPM pin to 1.3.13 Update all iOS SPM integration paths (podspec spm_dependency, Package.swift reference manifest, and the frontegg_spm.rb fallback) from 1.3.12 to the newly released FronteggSwift 1.3.13. Android SDK pin unchanged (1.3.36). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> --------- Co-authored-by: Adam Rowe <adaminsley@gmail.com> Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com> Co-authored-by: Adam Rowe <52685+airowe@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the bundled native SDK versions so the React Native wrapper picks up the July 2026 mobile-SDK audit fixes:
com.frontegg.sdk:android1.3.35 → 1.3.36ios/frontegg_spm.rb) 1.3.11 → 1.3.12No wrapper API changes.