@adminforth/two-factors-auth 3.3.2 → 3.3.4

package/build.log

@@ -16,5 +16,5 @@ custom/pnpm-lock.yaml
 custom/tsconfig.json
 custom/utils.js
 
-sent 285,632 bytes  received 229 bytes  571,722.00 bytes/sec
-total size is 284,738  speedup is 1.00
+sent 286,099 bytes  received 229 bytes  572,656.00 bytes/sec
+total size is 285,205  speedup is 1.00

package/custom/TwoFactorsConfirmation.vue

@@ -328,8 +328,8 @@
     try {
       options = PublicKeyCredential.parseRequestOptionsFromJSON(_options);
     } catch (e) {
-      console.error(t('Error parsing request options:', e));
-      adminforth.alert({message: t('Error initiating passkey authentication.'), variant: 'warning'});
+      console.error('Error parsing request options:', e);
+      adminforth.alert({message: t('Error initiating passkey authentication.'), variant: 'danger'});
       return;
     }
     const credential = await authenticate(options);
@@ -361,8 +361,8 @@
     if (response.ok === true) {
       return { _options: response.data, challengeId: response.challengeId };
     } else {
-      adminforth.alert({message: t('Error creating sign-in request.'), variant: 'warning'});
-      codeError.value = t('Error creating sign-in request.');
+      adminforth.alert({message: t('Error creating sign-in request.'), variant: 'danger'});
+      codeError.value = 'Error creating sign-in request.';
     }
   }
 
@@ -400,7 +400,7 @@
         codeError.value = t('A previous passkey attempt was still pending. Please try again.');
         return null;
       } else if (name === 'NotAllowedError') {
-        adminforth.alert({ message: t('The operation either timed out or was not allowed'), variant: 'warning' });
+        adminforth.alert({ message: t('The operation either timed out or was not allowed'), variant: 'danger' });
         codeError.value = t('The operation either timed out or was not allowed.');
         return null;
       } else {

package/custom/TwoFactorsPasskeysSettings.vue

@@ -241,7 +241,23 @@
             return JSON.stringify((credential as PublicKeyCredential).toJSON());
         } catch (error) {
             console.error(t('Error creating WebAuthn credential:', error));
-            adminforth.alert({ message: t('Error creating passkey.'), variant: 'warning' });
+
+            let message = t('Failed to create passkey.');
+
+            if (error?.name === 'InvalidStateError') {
+                message = t('A passkey for this account already exists on this device.');
+            }
+
+            if (error?.name === 'NotAllowedError') {
+                message = t('Passkey creation was cancelled.');
+            }
+
+            if (error?.name === 'NotSupportedError') {
+                message = t('Passkeys are not supported on this device or browser.');
+            }
+
+            adminforth.alert({ message, variant: 'danger'});
+
             return null;
         }
     }

package/custom/utils.js

@@ -122,7 +122,7 @@
         codeError.value = t('A previous passkey attempt was still pending. Please try again.');
         return null;
       } else if (name === 'NotAllowedError') {
-        adminforth.alert({ message: `The operation either timed out or was not allowed`, variant: 'warning' });
+        adminforth.alert({ message: `The operation either timed out or was not allowed`, variant: 'danger' });
         codeError.value = 'The operation either timed out or was not allowed.';
         return null;
       } else {

package/dist/custom/TwoFactorsConfirmation.vue

@@ -328,8 +328,8 @@
     try {
       options = PublicKeyCredential.parseRequestOptionsFromJSON(_options);
     } catch (e) {
-      console.error(t('Error parsing request options:', e));
-      adminforth.alert({message: t('Error initiating passkey authentication.'), variant: 'warning'});
+      console.error('Error parsing request options:', e);
+      adminforth.alert({message: t('Error initiating passkey authentication.'), variant: 'danger'});
       return;
     }
     const credential = await authenticate(options);
@@ -361,8 +361,8 @@
     if (response.ok === true) {
       return { _options: response.data, challengeId: response.challengeId };
     } else {
-      adminforth.alert({message: t('Error creating sign-in request.'), variant: 'warning'});
-      codeError.value = t('Error creating sign-in request.');
+      adminforth.alert({message: t('Error creating sign-in request.'), variant: 'danger'});
+      codeError.value = 'Error creating sign-in request.';
     }
   }
 
@@ -400,7 +400,7 @@
         codeError.value = t('A previous passkey attempt was still pending. Please try again.');
         return null;
       } else if (name === 'NotAllowedError') {
-        adminforth.alert({ message: t('The operation either timed out or was not allowed'), variant: 'warning' });
+        adminforth.alert({ message: t('The operation either timed out or was not allowed'), variant: 'danger' });
         codeError.value = t('The operation either timed out or was not allowed.');
         return null;
       } else {

package/dist/custom/TwoFactorsPasskeysSettings.vue

@@ -241,7 +241,23 @@
             return JSON.stringify((credential as PublicKeyCredential).toJSON());
         } catch (error) {
             console.error(t('Error creating WebAuthn credential:', error));
-            adminforth.alert({ message: t('Error creating passkey.'), variant: 'warning' });
+
+            let message = t('Failed to create passkey.');
+
+            if (error?.name === 'InvalidStateError') {
+                message = t('A passkey for this account already exists on this device.');
+            }
+
+            if (error?.name === 'NotAllowedError') {
+                message = t('Passkey creation was cancelled.');
+            }
+
+            if (error?.name === 'NotSupportedError') {
+                message = t('Passkeys are not supported on this device or browser.');
+            }
+
+            adminforth.alert({ message, variant: 'danger'});
+
             return null;
         }
     }

package/dist/custom/utils.js

@@ -122,7 +122,7 @@
         codeError.value = t('A previous passkey attempt was still pending. Please try again.');
         return null;
       } else if (name === 'NotAllowedError') {
-        adminforth.alert({ message: `The operation either timed out or was not allowed`, variant: 'warning' });
+        adminforth.alert({ message: `The operation either timed out or was not allowed`, variant: 'danger' });
         codeError.value = 'The operation either timed out or was not allowed.';
         return null;
       } else {

package/dist/index.js

@@ -575,7 +575,8 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
                         return { status: 'ok', allowedLogin: true };
                     }
                     else {
-                        return { error: 'Verification failed' };
+                        response.setStatus(403);
+                        return { error: 'Wrong or expired TOTP code', };
                     }
                 }
             })

package/index.ts

@@ -617,7 +617,8 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
             this.adminforth.auth.setAuthCookie({expireInDuration: decoded.sessionDuration, response, username:decoded.userName, pk:decoded.pk})
             return { status: 'ok', allowedLogin: true }
           } else {
-            return {error: 'Verification failed'}
+            response.setStatus(403);
+            return {error: 'Wrong or expired TOTP code', }
           }
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/two-factors-auth",
-  "version": "3.3.2",
+  "version": "3.3.4",
   "description": "AdminForth plugin for two factors authentication",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -32,7 +32,7 @@
   },
   "devDependencies": {
     "@types/node": "^22.10.7",
-    "adminforth": "^2.50.1",
+    "adminforth": "^2.66.0",
     "semantic-release": "^24.2.1",
     "semantic-release-slack-bot": "^4.0.2",
     "typescript": "^5.7.3"