@abyss-project/commons-front-core 5.0.1 → 6.0.0

package/dist/use-auth.hook-DatVLGxS.js

@@ -1,394 +0,0 @@
-import { SessionPlatform as H, AbyssCore as U, Code as J, AuthResultStatus as V, MfaFactorType as x } from "@abyss-project/main";
-import { l as X } from "./lazy-value-Co76vxsM.js";
-import { browserSupportsWebAuthn as g, startRegistration as $, browserSupportsWebAuthnAutofill as Q, startAuthentication as Z, WebAuthnError as ee } from "@simplewebauthn/browser";
-import { a as c, A as d, s as te } from "./token-storage-CbWrBeIP.js";
-import { createContext as ne, useState as se, useEffect as re, useMemo as oe, useContext as ae } from "react";
-import { jsx as ie } from "react/jsx-runtime";
-var ue = /* @__PURE__ */ ((e) => (e.LOADING = "loading", e.ANONYMOUS = "anonymous", e.AUTHENTICATED = "authenticated", e))(ue || {}), le = /* @__PURE__ */ ((e) => (e.PASSKEY = "passkey", e.TOTP = "totp", e.PASSWORD = "password", e.EMAIL_CODE = "email-code", e))(le || {});
-const ce = 6e4, F = 3e4, de = [
-  500,
-  1e3,
-  2e3
-], fe = [
-  7500,
-  15e3,
-  22500,
-  27e3
-], G = 3e4, pe = 5e3, he = "abyss-auth-refresh", we = 2147483647, me = "Token Expired", Ee = (e) => typeof e == "object" && e !== null && e.isAxiosError === !0, W = (e) => {
-  var r;
-  if (!Ee(e) || e.code === "ERR_CANCELED")
-    return { kind: "other" };
-  if (!e.response)
-    return { kind: "network" };
-  const s = (r = e.response.data) == null ? void 0 : r.error;
-  return {
-    kind: "http",
-    status: e.response.status,
-    code: s == null ? void 0 : s.code,
-    message: s == null ? void 0 : s.message,
-    params: s == null ? void 0 : s.params
-  };
-}, Ae = X(
-  () => /* @__PURE__ */ new Map([
-    [
-      x.TOTP,
-      "totp"
-      /* TOTP */
-    ],
-    [
-      x.PASSKEY,
-      "passkey"
-      /* PASSKEY */
-    ]
-  ])
-), ye = (e) => {
-  const s = e == null ? void 0 : e.methods;
-  return Array.isArray(s) ? {
-    methods: s.flatMap((r) => {
-      const i = Ae().get(r);
-      return i ? [i] : [];
-    })
-  } : {};
-}, Re = (e) => new Promise((s) => setTimeout(s, e)), ke = () => typeof navigator > "u" || navigator.onLine !== !1, Te = () => typeof navigator > "u" ? null : navigator.locks ?? null, Ne = (e) => {
-  const s = e.bridge.platform === H.WEB, r = e.isOnline ?? ke;
-  let i = {
-    status: "loading"
-    /* LOADING */
-  }, a = null, n = null, m = null, y = null, _ = null, E = null, p = null, l = null, A = 0;
-  const R = /* @__PURE__ */ new Set(), k = /* @__PURE__ */ new Set(), S = (t) => {
-    i = t, R.forEach((o) => o(i));
-  }, P = (t) => {
-    a = t, e.applyToken(t), k.forEach((o) => o(t));
-  }, T = () => {
-    E && (clearTimeout(E), E = null), p && (clearTimeout(p), p = null);
-  }, z = (t) => {
-    const o = Date.parse(t);
-    if (!Number.isFinite(o))
-      return;
-    const u = Math.min(
-      Math.max(o - ce - Date.now(), 0),
-      we
-    );
-    E = setTimeout(() => {
-      E = null, h.refresh();
-    }, u);
-  }, D = async (t) => {
-    var o;
-    T(), t.refreshToken && await e.storage.setRefreshToken(t.refreshToken), P(t.accessToken), n = t.user, (o = e.onPersistUser) == null || o.call(e, t.user), S({
-      status: "authenticated",
-      user: t.user,
-      mfaEnrollmentRequired: t.mfaEnrollmentRequired,
-      offline: !1
-    }), z(t.accessTokenExpiresAt);
-  }, N = async () => {
-    var t;
-    A += 1, T(), l = null, await e.storage.setRefreshToken(null), P(null), n = null, (t = e.onPersistUser) == null || t.call(e, null), S({
-      status: "anonymous"
-      /* ANONYMOUS */
-    });
-  }, K = () => {
-    if (l === null)
-      return G;
-    const t = Date.now() - l, o = fe.find(
-      (u) => u > t && u < F
-    );
-    return o === void 0 ? (l = null, G) : o - t;
-  }, j = () => {
-    T();
-    const t = i.user ?? n;
-    S(
-      t ? {
-        status: "authenticated",
-        user: t,
-        mfaEnrollmentRequired: i.mfaEnrollmentRequired,
-        offline: !0
-      } : { status: "anonymous", offline: !0 }
-    ), p = setTimeout(() => {
-      p = null, h.refresh();
-    }, K());
-  }, I = async () => {
-    const t = s ? null : await e.storage.getRefreshToken();
-    if (!s && !t)
-      return { kind: "revoked" };
-    if (!r())
-      return { kind: "offline" };
-    const o = Date.now(), u = new AbortController(), f = setTimeout(
-      () => u.abort(),
-      pe
-    );
-    try {
-      const w = await U.sdk.auth.refresh(
-        t ? { refreshToken: t } : void 0,
-        { signal: u.signal }
-      );
-      return w.error ? { kind: "unreachable", sentAt: o } : { kind: "session", session: w.data };
-    } catch (w) {
-      if (u.signal.aborted)
-        return { kind: "unreachable", sentAt: o };
-      const L = W(w);
-      if (L.kind === "other")
-        throw w;
-      return L.kind === "http" && L.status === 401 ? { kind: "revoked" } : { kind: "unreachable", sentAt: o };
-    } finally {
-      clearTimeout(f);
-    }
-  }, O = async () => {
-    const t = A;
-    l !== null && Date.now() - l >= F && (l = null);
-    let o = await I();
-    const u = l === null ? de : [];
-    for (const f of u) {
-      if (o.kind !== "unreachable" || t !== A || (l = l ?? o.sentAt, await Re(f), t !== A))
-        break;
-      o = await I();
-    }
-    if (o.kind === "unreachable" ? l = l ?? o.sentAt : o.kind !== "offline" && (l = null), t !== A) {
-      e.applyToken(a);
-      return;
-    }
-    switch (o.kind) {
-      case "session":
-        await D(o.session);
-        return;
-      case "revoked":
-        await N();
-        return;
-      case "offline":
-      case "unreachable":
-        j();
-        return;
-    }
-  }, b = () => {
-    i.offline && (p && (clearTimeout(p), p = null), h.refresh());
-  }, M = () => {
-    document.visibilityState === "visible" && b();
-  };
-  typeof window < "u" && window.addEventListener("online", b), typeof document < "u" && document.addEventListener("visibilitychange", M);
-  const h = {
-    bridge: e.bridge,
-    state: () => i,
-    subscribe: (t) => (R.add(t), () => {
-      R.delete(t);
-    }),
-    accessToken: () => a,
-    subscribeToken: (t) => (k.add(t), t(a), () => {
-      k.delete(t);
-    }),
-    bootstrap: () => (_ || (_ = (async () => {
-      var t;
-      n = await ((t = e.restoreUser) == null ? void 0 : t.call(e)) ?? null, await h.refresh();
-    })()), _),
-    handleResult: async (t) => (t.status === V.AUTHENTICATED && await D(t.session), t),
-    refresh: () => {
-      if (!y) {
-        const t = s ? Te() : null;
-        y = (t ? t.request(he, O) : O()).finally(() => {
-          y = null;
-        });
-      }
-      return y;
-    },
-    withAuthRetry: async (t) => {
-      const o = a;
-      try {
-        return await t();
-      } catch (u) {
-        const f = W(u);
-        if (f.kind !== "http")
-          throw u;
-        if (f.status === 401 && f.message === me) {
-          if (a === o && await h.refresh(), i.status !== "authenticated" || a === null || a === o)
-            throw u;
-          return t();
-        }
-        if (f.status === 403 && f.code === J.reauthRequired && m) {
-          if (!await m(ye(f.params)))
-            throw u;
-          return t();
-        }
-        throw u;
-      }
-    },
-    onReauthRequired: (t) => (m = t, () => {
-      m === t && (m = null);
-    }),
-    logout: async () => {
-      try {
-        i.status === "authenticated" && a === null && await h.refresh(), a !== null && await h.withAuthRetry(() => U.sdk.auth.logout());
-      } finally {
-        await N();
-      }
-    },
-    dispose: () => {
-      T(), R.clear(), k.clear(), typeof window < "u" && window.removeEventListener("online", b), typeof document < "u" && document.removeEventListener("visibilitychange", M);
-    }
-  };
-  return h;
-}, _e = "https://accounts.google.com/gsi/client", Se = "https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1.0/en_US/appleid.auth.js", v = /* @__PURE__ */ new Map(), Y = (e) => {
-  const s = v.get(e);
-  if (s)
-    return s;
-  const r = new Promise((i, a) => {
-    const n = document.createElement("script");
-    n.src = e, n.async = !0, n.onload = () => i(), n.onerror = () => {
-      v.delete(e), n.remove(), a(
-        new c(
-          d.FAILED,
-          `Could not load ${e}`
-        )
-      );
-    }, document.head.appendChild(n);
-  });
-  return v.set(e, r), r;
-}, be = [
-  "popup_closed_by_user",
-  "user_cancelled_authorize"
-], B = (e) => {
-  const { name: s, message: r } = e ?? {}, i = typeof r == "string" ? r : "Passkey ceremony failed";
-  return s === "NotAllowedError" || s === "AbortError" || e instanceof ee && e.code === "ERROR_CEREMONY_ABORTED" ? new c(d.CANCELLED, i, e) : new c(d.FAILED, i, e);
-}, C = (e) => new c(
-  d.UNSUPPORTED,
-  `${e} is not supported by this browser`
-), Ie = (e) => ({
-  platform: H.WEB,
-  passkeySupported: async () => g(),
-  getPasskey: async (s, r = !1) => {
-    if (!g())
-      throw C("WebAuthn");
-    if (r && !await Q())
-      throw C("Passkey autofill");
-    try {
-      return await Z({
-        // abyss-main's options are the WebAuthn JSON this call reads (base64url binary fields).
-        optionsJSON: s,
-        useBrowserAutofill: r
-      });
-    } catch (i) {
-      throw B(i);
-    }
-  },
-  createPasskey: async (s) => {
-    if (!g())
-      throw C("WebAuthn");
-    try {
-      return await $({
-        optionsJSON: s
-      });
-    } catch (r) {
-      throw B(r);
-    }
-  },
-  google: async (s) => {
-    await Y(_e);
-    const r = window.google;
-    if (!r)
-      throw new c(
-        d.FAILED,
-        "Google Identity Services missing"
-      );
-    return new Promise((i, a) => {
-      r.accounts.id.initialize({
-        client_id: e.googleClientId,
-        // Google copies the raw nonce into the id_token; abyss-main compares it as is.
-        nonce: s,
-        callback: (n) => {
-          if (n.credential) {
-            i({ idToken: n.credential });
-            return;
-          }
-          a(
-            new c(
-              d.FAILED,
-              "Google returned no credential"
-            )
-          );
-        },
-        auto_select: !1,
-        cancel_on_tap_outside: !0,
-        use_fedcm_for_prompt: !0,
-        itp_support: !0
-      }), r.accounts.id.prompt((n) => {
-        if (n.isSkippedMoment()) {
-          a(
-            new c(
-              d.CANCELLED,
-              "Google prompt skipped"
-            )
-          );
-          return;
-        }
-        n.isDismissedMoment() && n.getDismissedReason() !== "credential_returned" && a(
-          new c(
-            d.CANCELLED,
-            "Google prompt dismissed"
-          )
-        );
-      });
-    });
-  },
-  apple: async (s) => {
-    var i;
-    await Y(Se);
-    const r = window.AppleID;
-    if (!r)
-      throw new c(
-        d.FAILED,
-        "Sign in with Apple JS missing"
-      );
-    r.auth.init({
-      clientId: e.appleServiceId,
-      scope: "name email",
-      redirectURI: e.appleRedirectUri,
-      usePopup: !0,
-      // Apple carries what it is given; abyss-main compares it with SHA-256(raw nonce) in hex.
-      nonce: await te(s)
-    });
-    try {
-      const a = await r.auth.signIn(), n = (i = a.user) == null ? void 0 : i.name;
-      return {
-        idToken: a.authorization.id_token,
-        ...n != null && n.firstName ? { givenName: n.firstName } : {},
-        ...n != null && n.lastName ? { familyName: n.lastName } : {}
-      };
-    } catch (a) {
-      const n = a == null ? void 0 : a.error;
-      throw typeof n == "string" && be.includes(n) ? new c(d.CANCELLED, n, a) : new c(
-        d.FAILED,
-        typeof n == "string" ? n : "Sign in with Apple failed",
-        a
-      );
-    }
-  }
-}), q = ne(null), Oe = ({ client: e, children: s }) => {
-  const [r, i] = se(() => e.state());
-  re(() => {
-    i(e.state());
-    const n = e.subscribe(i);
-    return e.bootstrap(), n;
-  }, [e]);
-  const a = oe(() => ({ state: r, client: e }), [r, e]);
-  return /* @__PURE__ */ ie(q.Provider, { value: a, children: s });
-}, Me = () => {
-  const e = ae(q);
-  if (!e)
-    throw new Error("useAuth() must be called inside <AuthProvider>");
-  return e;
-};
-export {
-  ue as A,
-  _e as G,
-  de as L,
-  le as R,
-  G as U,
-  ce as a,
-  F as b,
-  fe as c,
-  pe as d,
-  he as e,
-  Ne as f,
-  Se as g,
-  Ie as h,
-  q as i,
-  Oe as j,
-  Me as u
-};