chore: fix config client-id issue

Author: lakhansamani

.gitignore

@@ -7,3 +7,6 @@ lib/*
 package-lock.json
 .idea
 .history
+.env
+.env.*
+.pnpm-store

__test__/executeIframe.test.ts

@@ -0,0 +1,40 @@
+/**
+ * @jest-environment jsdom
+ */
+
+import { executeIframe } from '../src/utils';
+
+describe('executeIframe', () => {
+  const authorizerOrigin = 'https://auth.example.com';
+  const authorizeUrl = `${authorizerOrigin}/authorize?x=1`;
+
+  beforeEach(() => {
+    document.body.innerHTML = '';
+  });
+
+  it('ignores postMessage from a different origin', async () => {
+    const p = executeIframe(authorizeUrl, authorizerOrigin, 0.2);
+    await new Promise(r => setTimeout(r, 0));
+    window.dispatchEvent(
+      new MessageEvent('message', {
+        origin: 'https://evil.example',
+        data: { response: { access_token: 'stolen' } },
+        source: window as unknown as MessageEventSource,
+      }),
+    );
+    await expect(p).rejects.toThrow('Authorization timeout');
+  });
+
+  it('resolves when postMessage origin matches authorizer URL', async () => {
+    const p = executeIframe(authorizeUrl, authorizerOrigin, 0.05);
+    await new Promise(r => setTimeout(r, 0));
+    window.dispatchEvent(
+      new MessageEvent('message', {
+        origin: authorizerOrigin,
+        data: { response: { code: 'auth-code' } },
+        source: null,
+      }),
+    );
+    await expect(p).resolves.toEqual({ code: 'auth-code' });
+  });
+});

package.json

@@ -45,29 +45,37 @@
     "path": "path-browserify"
   },
   "dependencies": {
-    "cross-fetch": "^3.1.5"
+    "cross-fetch": "^4.1.0"
   },
   "lint-staged": {
     "**/*.{js,jsx,ts,tsx}": [
       "npm run lint:fix"
     ]
   },
   "devDependencies": {
-    "@antfu/eslint-config": "^2.1.0",
-    "@swc/core": "^1.3.99",
-    "@types/jest": "^29.5.12",
-    "@types/node": "^20.9.4",
-    "@typescript-eslint/eslint-plugin": "^7.8.0",
-    "@typescript-eslint/parser": "^7.8.0",
-    "bumpp": "^9.2.0",
-    "eslint": "^8.54.0",
-    "husky": "^8.0.0",
+    "@antfu/eslint-config": "^2.27.3",
+    "@swc/core": "^1.15.24",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^20.19.39",
+    "@typescript-eslint/eslint-plugin": "^7.18.0",
+    "@typescript-eslint/parser": "^7.18.0",
+    "bumpp": "^9.11.1",
+    "eslint": "^8.57.1",
+    "husky": "^8.0.3",
     "jest": "^29.7.0",
-    "lint-staged": "^15.2.0",
-    "testcontainers": "^10.3.2",
-    "ts-jest": "^29.1.1",
-    "tslib": "^2.6.2",
-    "tsup": "^8.0.1",
-    "typescript": "^5.4.5"
+    "jest-environment-jsdom": "^29.7.0",
+    "lint-staged": "^15.5.2",
+    "testcontainers": "^10.28.0",
+    "ts-jest": "^29.4.9",
+    "tslib": "^2.8.1",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3"
+  },
+  "pnpm": {
+    "overrides": {
+      "undici": ">=6.24.0",
+      "tar": ">=7.5.11",
+      "@tootallnate/once": ">=3.0.1"
+    }
   }
 }