@abyss-project/commons-front-core 5.0.0 → 6.0.0

package/dist/use-auth.hook-BLaU_u8T.js

@@ -1,391 +0,0 @@
-import { MfaFactorType as U, SessionPlatform as B, AbyssCore as F, Code as J, AuthResultStatus as X } from "@abyss-project/main";
-import { browserSupportsWebAuthn as g, startRegistration as $, browserSupportsWebAuthnAutofill as V, startAuthentication as Q, WebAuthnError as Z } from "@simplewebauthn/browser";
-import { a as c, A as d, s as ee } from "./token-storage-CbWrBeIP.js";
-import { createContext as te, useState as ne, useEffect as se, useMemo as re, useContext as oe } from "react";
-import { jsx as ae } from "react/jsx-runtime";
-var ie = /* @__PURE__ */ ((e) => (e.LOADING = "loading", e.ANONYMOUS = "anonymous", e.AUTHENTICATED = "authenticated", e))(ie || {}), ue = /* @__PURE__ */ ((e) => (e.PASSKEY = "passkey", e.TOTP = "totp", e.PASSWORD = "password", e.EMAIL_CODE = "email-code", e))(ue || {});
-const le = 6e4, x = 3e4, ce = [
-  500,
-  1e3,
-  2e3
-], de = [
-  7500,
-  15e3,
-  22500,
-  27e3
-], G = 3e4, fe = 5e3, pe = "abyss-auth-refresh", he = 2147483647, we = "Token Expired", Ee = (e) => typeof e == "object" && e !== null && e.isAxiosError === !0, H = (e) => {
-  var r;
-  if (!Ee(e) || e.code === "ERR_CANCELED")
-    return { kind: "other" };
-  if (!e.response)
-    return { kind: "network" };
-  const s = (r = e.response.data) == null ? void 0 : r.error;
-  return {
-    kind: "http",
-    status: e.response.status,
-    code: s == null ? void 0 : s.code,
-    message: s == null ? void 0 : s.message,
-    params: s == null ? void 0 : s.params
-  };
-}, me = /* @__PURE__ */ new Map([
-  [
-    U.TOTP,
-    "totp"
-    /* TOTP */
-  ],
-  [
-    U.PASSKEY,
-    "passkey"
-    /* PASSKEY */
-  ]
-]), Ae = (e) => {
-  const s = e == null ? void 0 : e.methods;
-  return Array.isArray(s) ? {
-    methods: s.flatMap((r) => {
-      const i = me.get(r);
-      return i ? [i] : [];
-    })
-  } : {};
-}, ye = (e) => new Promise((s) => setTimeout(s, e)), Re = () => typeof navigator > "u" || navigator.onLine !== !1, Te = () => typeof navigator > "u" ? null : navigator.locks ?? null, De = (e) => {
-  const s = e.bridge.platform === B.WEB, r = e.isOnline ?? Re;
-  let i = {
-    status: "loading"
-    /* LOADING */
-  }, a = null, n = null, E = null, y = null, _ = null, m = null, p = null, l = null, A = 0;
-  const R = /* @__PURE__ */ new Set(), T = /* @__PURE__ */ new Set(), S = (t) => {
-    i = t, R.forEach((o) => o(i));
-  }, D = (t) => {
-    a = t, e.applyToken(t), T.forEach((o) => o(t));
-  }, k = () => {
-    m && (clearTimeout(m), m = null), p && (clearTimeout(p), p = null);
-  }, K = (t) => {
-    const o = Date.parse(t);
-    if (!Number.isFinite(o))
-      return;
-    const u = Math.min(
-      Math.max(o - le - Date.now(), 0),
-      he
-    );
-    m = setTimeout(() => {
-      m = null, h.refresh();
-    }, u);
-  }, P = async (t) => {
-    var o;
-    k(), t.refreshToken && await e.storage.setRefreshToken(t.refreshToken), D(t.accessToken), n = t.user, (o = e.onPersistUser) == null || o.call(e, t.user), S({
-      status: "authenticated",
-      user: t.user,
-      mfaEnrollmentRequired: t.mfaEnrollmentRequired,
-      offline: !1
-    }), K(t.accessTokenExpiresAt);
-  }, N = async () => {
-    var t;
-    A += 1, k(), l = null, await e.storage.setRefreshToken(null), D(null), n = null, (t = e.onPersistUser) == null || t.call(e, null), S({
-      status: "anonymous"
-      /* ANONYMOUS */
-    });
-  }, j = () => {
-    if (l === null)
-      return G;
-    const t = Date.now() - l, o = de.find(
-      (u) => u > t && u < x
-    );
-    return o === void 0 ? (l = null, G) : o - t;
-  }, z = () => {
-    k();
-    const t = i.user ?? n;
-    S(
-      t ? {
-        status: "authenticated",
-        user: t,
-        mfaEnrollmentRequired: i.mfaEnrollmentRequired,
-        offline: !0
-      } : { status: "anonymous", offline: !0 }
-    ), p = setTimeout(() => {
-      p = null, h.refresh();
-    }, j());
-  }, I = async () => {
-    const t = s ? null : await e.storage.getRefreshToken();
-    if (!s && !t)
-      return { kind: "revoked" };
-    if (!r())
-      return { kind: "offline" };
-    const o = Date.now(), u = new AbortController(), f = setTimeout(
-      () => u.abort(),
-      fe
-    );
-    try {
-      const w = await F.sdk.auth.refresh(
-        t ? { refreshToken: t } : void 0,
-        { signal: u.signal }
-      );
-      return w.error ? { kind: "unreachable", sentAt: o } : { kind: "session", session: w.data };
-    } catch (w) {
-      if (u.signal.aborted)
-        return { kind: "unreachable", sentAt: o };
-      const L = H(w);
-      if (L.kind === "other")
-        throw w;
-      return L.kind === "http" && L.status === 401 ? { kind: "revoked" } : { kind: "unreachable", sentAt: o };
-    } finally {
-      clearTimeout(f);
-    }
-  }, O = async () => {
-    const t = A;
-    l !== null && Date.now() - l >= x && (l = null);
-    let o = await I();
-    const u = l === null ? ce : [];
-    for (const f of u) {
-      if (o.kind !== "unreachable" || t !== A || (l = l ?? o.sentAt, await ye(f), t !== A))
-        break;
-      o = await I();
-    }
-    if (o.kind === "unreachable" ? l = l ?? o.sentAt : o.kind !== "offline" && (l = null), t !== A) {
-      e.applyToken(a);
-      return;
-    }
-    switch (o.kind) {
-      case "session":
-        await P(o.session);
-        return;
-      case "revoked":
-        await N();
-        return;
-      case "offline":
-      case "unreachable":
-        z();
-        return;
-    }
-  }, b = () => {
-    i.offline && (p && (clearTimeout(p), p = null), h.refresh());
-  }, M = () => {
-    document.visibilityState === "visible" && b();
-  };
-  typeof window < "u" && window.addEventListener("online", b), typeof document < "u" && document.addEventListener("visibilitychange", M);
-  const h = {
-    bridge: e.bridge,
-    state: () => i,
-    subscribe: (t) => (R.add(t), () => {
-      R.delete(t);
-    }),
-    accessToken: () => a,
-    subscribeToken: (t) => (T.add(t), t(a), () => {
-      T.delete(t);
-    }),
-    bootstrap: () => (_ || (_ = (async () => {
-      var t;
-      n = await ((t = e.restoreUser) == null ? void 0 : t.call(e)) ?? null, await h.refresh();
-    })()), _),
-    handleResult: async (t) => (t.status === X.AUTHENTICATED && await P(t.session), t),
-    refresh: () => {
-      if (!y) {
-        const t = s ? Te() : null;
-        y = (t ? t.request(pe, O) : O()).finally(() => {
-          y = null;
-        });
-      }
-      return y;
-    },
-    withAuthRetry: async (t) => {
-      const o = a;
-      try {
-        return await t();
-      } catch (u) {
-        const f = H(u);
-        if (f.kind !== "http")
-          throw u;
-        if (f.status === 401 && f.message === we) {
-          if (a === o && await h.refresh(), i.status !== "authenticated" || a === null || a === o)
-            throw u;
-          return t();
-        }
-        if (f.status === 403 && f.code === J.reauthRequired && E) {
-          if (!await E(Ae(f.params)))
-            throw u;
-          return t();
-        }
-        throw u;
-      }
-    },
-    onReauthRequired: (t) => (E = t, () => {
-      E === t && (E = null);
-    }),
-    logout: async () => {
-      try {
-        i.status === "authenticated" && a === null && await h.refresh(), a !== null && await h.withAuthRetry(() => F.sdk.auth.logout());
-      } finally {
-        await N();
-      }
-    },
-    dispose: () => {
-      k(), R.clear(), T.clear(), typeof window < "u" && window.removeEventListener("online", b), typeof document < "u" && document.removeEventListener("visibilitychange", M);
-    }
-  };
-  return h;
-}, ke = "https://accounts.google.com/gsi/client", _e = "https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1.0/en_US/appleid.auth.js", v = /* @__PURE__ */ new Map(), W = (e) => {
-  const s = v.get(e);
-  if (s)
-    return s;
-  const r = new Promise((i, a) => {
-    const n = document.createElement("script");
-    n.src = e, n.async = !0, n.onload = () => i(), n.onerror = () => {
-      v.delete(e), n.remove(), a(
-        new c(
-          d.FAILED,
-          `Could not load ${e}`
-        )
-      );
-    }, document.head.appendChild(n);
-  });
-  return v.set(e, r), r;
-}, Se = [
-  "popup_closed_by_user",
-  "user_cancelled_authorize"
-], Y = (e) => {
-  const { name: s, message: r } = e ?? {}, i = typeof r == "string" ? r : "Passkey ceremony failed";
-  return s === "NotAllowedError" || s === "AbortError" || e instanceof Z && e.code === "ERROR_CEREMONY_ABORTED" ? new c(d.CANCELLED, i, e) : new c(d.FAILED, i, e);
-}, C = (e) => new c(
-  d.UNSUPPORTED,
-  `${e} is not supported by this browser`
-), Pe = (e) => ({
-  platform: B.WEB,
-  passkeySupported: async () => g(),
-  getPasskey: async (s, r = !1) => {
-    if (!g())
-      throw C("WebAuthn");
-    if (r && !await V())
-      throw C("Passkey autofill");
-    try {
-      return await Q({
-        // abyss-main's options are the WebAuthn JSON this call reads (base64url binary fields).
-        optionsJSON: s,
-        useBrowserAutofill: r
-      });
-    } catch (i) {
-      throw Y(i);
-    }
-  },
-  createPasskey: async (s) => {
-    if (!g())
-      throw C("WebAuthn");
-    try {
-      return await $({
-        optionsJSON: s
-      });
-    } catch (r) {
-      throw Y(r);
-    }
-  },
-  google: async (s) => {
-    await W(ke);
-    const r = window.google;
-    if (!r)
-      throw new c(
-        d.FAILED,
-        "Google Identity Services missing"
-      );
-    return new Promise((i, a) => {
-      r.accounts.id.initialize({
-        client_id: e.googleClientId,
-        // Google copies the raw nonce into the id_token; abyss-main compares it as is.
-        nonce: s,
-        callback: (n) => {
-          if (n.credential) {
-            i({ idToken: n.credential });
-            return;
-          }
-          a(
-            new c(
-              d.FAILED,
-              "Google returned no credential"
-            )
-          );
-        },
-        auto_select: !1,
-        cancel_on_tap_outside: !0,
-        use_fedcm_for_prompt: !0,
-        itp_support: !0
-      }), r.accounts.id.prompt((n) => {
-        if (n.isSkippedMoment()) {
-          a(
-            new c(
-              d.CANCELLED,
-              "Google prompt skipped"
-            )
-          );
-          return;
-        }
-        n.isDismissedMoment() && n.getDismissedReason() !== "credential_returned" && a(
-          new c(
-            d.CANCELLED,
-            "Google prompt dismissed"
-          )
-        );
-      });
-    });
-  },
-  apple: async (s) => {
-    var i;
-    await W(_e);
-    const r = window.AppleID;
-    if (!r)
-      throw new c(
-        d.FAILED,
-        "Sign in with Apple JS missing"
-      );
-    r.auth.init({
-      clientId: e.appleServiceId,
-      scope: "name email",
-      redirectURI: e.appleRedirectUri,
-      usePopup: !0,
-      // Apple carries what it is given; abyss-main compares it with SHA-256(raw nonce) in hex.
-      nonce: await ee(s)
-    });
-    try {
-      const a = await r.auth.signIn(), n = (i = a.user) == null ? void 0 : i.name;
-      return {
-        idToken: a.authorization.id_token,
-        ...n != null && n.firstName ? { givenName: n.firstName } : {},
-        ...n != null && n.lastName ? { familyName: n.lastName } : {}
-      };
-    } catch (a) {
-      const n = a == null ? void 0 : a.error;
-      throw typeof n == "string" && Se.includes(n) ? new c(d.CANCELLED, n, a) : new c(
-        d.FAILED,
-        typeof n == "string" ? n : "Sign in with Apple failed",
-        a
-      );
-    }
-  }
-}), q = te(null), Ne = ({ client: e, children: s }) => {
-  const [r, i] = ne(() => e.state());
-  se(() => {
-    i(e.state());
-    const n = e.subscribe(i);
-    return e.bootstrap(), n;
-  }, [e]);
-  const a = re(() => ({ state: r, client: e }), [r, e]);
-  return /* @__PURE__ */ ae(q.Provider, { value: a, children: s });
-}, Ie = () => {
-  const e = oe(q);
-  if (!e)
-    throw new Error("useAuth() must be called inside <AuthProvider>");
-  return e;
-};
-export {
-  ie as A,
-  ke as G,
-  ce as L,
-  ue as R,
-  G as U,
-  le as a,
-  x as b,
-  de as c,
-  fe as d,
-  pe as e,
-  De as f,
-  _e as g,
-  Pe as h,
-  q as i,
-  Ne as j,
-  Ie as u
-};