From d2524e6afe04ce50e840b9fbd94490f230479132 Mon Sep 17 00:00:00 2001
From: Cristian Arrieta <cristian@ubidots.com>
Date: Wed, 7 Jan 2026 12:23:31 -0500
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7=20[PB-1278]=20Fix=20OIDC=20authent?=
 =?UTF-8?q?ication=20by=20removing=20NODE=5FAUTH=5FTOKEN=20(#22)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Remove NODE_AUTH_TOKEN env block to enable pure OIDC authentication
- Bump version to 0.2.10 for deployment test
- Empty NODE_AUTH_TOKEN was preventing OIDC from working

Key insight from research: NODE_AUTH_TOKEN must be completely absent
(not even empty string) for npm trusted publishing to work via OIDC.
---
 .github/workflows/deploy.yml | 2 --
 package.json                 | 2 +-
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index a906d90..428aa02 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -77,8 +77,6 @@ jobs:
 
       - name: Publish to NPM
         run: npm publish --access public --tag ${{ steps.version.outputs.tag }} --provenance
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
diff --git a/package.json b/package.json
index 96ac4cc..1e37a57 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@ubidots/react-html-canvas",
-  "version": "0.2.9",
+  "version": "0.2.10",
   "description": "React library to interact with Ubidots Dashboards from HTML Canvas widgets (Provider + hooks + actions)",
   "license": "MIT",
   "author": "Ubidots",