Added

IdP Hints for Express Auth SDK

📣 Wristband Express Auth SDK 6.1.0 Release 🎉

Release v6.1.0

New Features

✨ IDP Hint Support

The login() flow now forwards the idp_hint query parameter to the Wristband Authorize Endpoint when present. This allows applications to bypass the Wristband-hosted Tenant Login Page and send users directly to a specific identity provider.

Behavior:

  • Matching external IDP — redirects user straight to that IDP's login page (e.g. Google)
  • Wristband IDP name — shows only the Wristband login form, no external IDP buttons
  • Unrecognized or invalid value — ignored, login page displays as normal

Bug Fixes

🐛 Fix: Explicit redirectUri no longer fails when OAuth2 client has multiple redirect URIs

Previously, providing redirectUri explicitly in the SDK config would still throw an error during auto-configuration if the Wristband OAuth2 client had multiple redirect URIs configured (causing the endpoint to return null). The SDK now correctly uses the manually provided value and skips the null endpoint response.


Improvements

🔧 Removed axios Dependency

Replaced axios with Node 20's built-in fetch API. No behavior changes; purely an internal refactor to eliminate a third-party HTTP client dependency.