@adminforth/two-factors-auth 4.0.1 → 4.1.0

package/build.log

@@ -14,7 +14,8 @@ custom/package-lock.json
 custom/package.json
 custom/pnpm-lock.yaml
 custom/tsconfig.json
+custom/use2faApi.ts
 custom/utils.js
 
-sent 286,243 bytes  received 229 bytes  572,944.00 bytes/sec
-total size is 285,337  speedup is 1.00
+sent 288,076 bytes  received 248 bytes  576,648.00 bytes/sec
+total size is 287,093  speedup is 1.00

package/custom/TwoFAModal.vue

@@ -101,7 +101,7 @@
   <script setup lang="ts">
 
   import VOtpInput from 'vue3-otp-input';
-  import { ref, nextTick, watch, onMounted } from 'vue';
+  import { ref, nextTick, watch } from 'vue';
   import { useUserStore } from '@/stores/user';
   import { useI18n } from 'vue-i18n';
   import { callAdminForthApi } from '@/utils';
@@ -110,26 +110,16 @@
   import { getPasskey } from './utils.js' 
   import { useAdminforth } from '@/adminforth';
   import websocket from '@/websocket';
+  import { getAdminForthClientId } from '@/utils/clientId';
   import type { AdminUser } from '@/types/Common';
-
-  type TwoFaConfirmationResult = { mode: 'totp'; result: string } | { mode: 'passkey'; result: Record<string, any> };
-
-  declare global {
-    interface Window {
-      adminforthTwoFaModal: {
-        get2FaConfirmationResult: (
-          title?: string,
-          verifyingCallback?: (confirmationResult: string) => Promise<boolean>
-        ) => Promise<TwoFaConfirmationResult>;
-      };
-    }
-  }
+  import { useTwoFactorsAuthApi, type TwoFaConfirmationResult } from './use2faApi.js';
   const props = defineProps<{
     autoFinishLogin?: boolean
     adminUser?: AdminUser
   }>();
 
   const { alert } = useAdminforth();
+  const twoFactorsAuthApi = useTwoFactorsAuthApi();
 
   const isAwaiting2FAResult = ref(false);
   let allowAddNewSessions = true;
@@ -150,7 +140,8 @@
   watch( props, () => {
     if (props.adminUser) {
       websocket.unsubscribeByPrefix(`/user2fa/`);
-      websocket.subscribe(`/user2fa/${props.adminUser.pk}`, async (data: {sessionId: string}) => {
+      const user2FaTopic = `/user2fa/${props.adminUser.pk}/${getAdminForthClientId()}`;
+      websocket.subscribe(user2FaTopic, async (data: {sessionId: string}) => {
         if (!allowAddNewSessions) {
           alert({message: t('Some process or user tries to add new actions to confirm. Action was blocked'), variant: 'warning'});
           return;
@@ -162,7 +153,7 @@
         }
         try {
           isAwaiting2FAResult.value = true;
-          confirmationResult = await window.adminforthTwoFaModal.get2FaConfirmationResult();
+          confirmationResult = await twoFactorsAuthApi.get2FaConfirmationResult();
         } catch (error) {
           if (!isTwoFaCancel(error)) {
             console.error('[AdminForth 2FA] Error during 2FA confirmation', error);
@@ -188,7 +179,7 @@
         }
         allowAddNewSessions = true;
       });
-      websocket.subscribe(`/user2fa/${props.adminUser.pk}-resolve`, async (data: {sessionId: string}) => {
+      websocket.subscribe(`${user2FaTopic}/resolve`, async (data: {sessionId: string}) => {
         if (sessionsIdsToResolve.value.includes(data.sessionId) && rejectFn && modelShow.value) {
           onCancel();
           sessionsIdsToResolve.value = sessionsIdsToResolve.value.filter(id => id !== data.sessionId);
@@ -224,7 +215,6 @@
 
   const modelShow = ref(false);
   let resolveFn: ((confirmationResult: any) => void) | null = null;
-  let verifyingCallback: ((confirmationResult: string) => boolean) | null = null;
   let verifyFn: null | ((confirmationResult: string) => Promise<boolean> | boolean) = null;
   let rejectFn: ((err?: any) => void) | null = null;
 
@@ -233,37 +223,42 @@
   }
 
 
-  window.adminforthTwoFaModal = {
-    get2FaConfirmationResult: (title?: string, verifyingCallback?: (confirmationResult: string) => Promise<boolean>) =>
-      new Promise((resolve, reject) => {
-        (async () => {
-          if (modelShow.value) {
-            throw new Error(t('Modal is already open'));
-          }
-          const skipAllowModal = await checkIfSkipAllowModal();
-          if (skipAllowModal) {
-            resolve({ code: "123456" }); // dummy code
-            return;
-          }
-          await checkIfUserHasPasskeys();
-          if (title) {
-            customDialogTitle.value = title;
-          }
-          resolveFn = resolve;
-          rejectFn = reject;
-          verifyFn = verifyingCallback ?? null;
-          modelShow.value = true;
-          if (modalMode.value === 'totp') {
-            await addEventListenerForOTPInput();
-          }
-        })().catch((error) => {
-          if (!isTwoFaCancel(error)) {
-            console.error('[AdminForth 2FA] Failed to open 2FA modal', error);
-          }
-          reject(error);
-        });
-      }),
-  };
+  function get2FaConfirmationResult(
+    title?: string,
+    verifyingCallback?: (confirmationResult: string) => Promise<boolean> | boolean
+  ): Promise<TwoFaConfirmationResult> {
+    return new Promise((resolve, reject) => {
+      (async () => {
+        if (modelShow.value) {
+          throw new Error(t('Modal is already open'));
+        }
+        const skipAllowModal = await checkIfSkipAllowModal();
+        if (skipAllowModal) {
+          resolve({ mode: 'totp', result: '123456' });
+          return;
+        }
+        await checkIfUserHasPasskeys();
+        if (title) {
+          customDialogTitle.value = title;
+        }
+        resolveFn = resolve;
+        rejectFn = reject;
+        verifyFn = verifyingCallback ?? null;
+        modelShow.value = true;
+        if (modalMode.value === 'totp') {
+          await addEventListenerForOTPInput();
+        }
+      })().catch((error) => {
+        if (!isTwoFaCancel(error)) {
+          console.error('[AdminForth 2FA] Failed to open 2FA modal', error);
+        }
+        reject(error);
+      });
+    });
+  }
+
+  twoFactorsAuthApi.setGet2FaConfirmationResultHandler(get2FaConfirmationResult);
+  twoFactorsAuthApi.initGlobalApi();
   
   const { t } = useI18n();
   const user = useUserStore();
@@ -274,15 +269,19 @@
   const doesUserHavePasskeys = ref(false);
   const modalMode = ref<"totp" | "passkey">("totp");
   const isLoading = ref(false);
+  const isFetchingPasskey = ref(false);
   const customDialogTitle = ref("");
   
   async function usePasskeyButtonClick() {
+    isFetchingPasskey.value = true;
     let passkeyData;
     try {
       passkeyData = await getPasskey();
     } catch (error) {
       onCancel();
       return null;
+    } finally {
+      isFetchingPasskey.value = false;
     }
     modelShow.value = false;
     const dataToReturn = {
@@ -291,7 +290,7 @@
     }
     customDialogTitle.value = "";
     removeEventListenerForOTPInput();
-    resolveFn(dataToReturn);
+    resolveFn?.(dataToReturn);
   }
 
   function tagOtpInputs() {
@@ -352,7 +351,7 @@
     bindValue.value = '';
     confirmationResult.value?.clearInput();
     removeEventListenerForOTPInput();
-    rejectFn("Cancel");
+    rejectFn?.("Cancel");
     emit('rejected', new Error('cancelled'));
     emit('closed');
   }
@@ -438,10 +437,10 @@
     ((firstEmpty || inputs[0]) as HTMLInputElement).focus();
   }
 
-  function handleGlobalFocusIn(event) {
+  function handleGlobalFocusIn(event: FocusEvent) {
     const inputs = getOtpInputs();
     if (!inputs.length) return;
-    const target = event.target;
+    const target = event.target as Element | null;
     if (!target) return;
     if (!inputs.includes(target)) {
       requestAnimationFrame(() => {

package/custom/TwoFactorsPasskeysSettings.vue

@@ -133,11 +133,13 @@
     import utc from 'dayjs/plugin/utc';
     import timezone from 'dayjs/plugin/timezone';
     import { useCoreStore } from '@/stores/core';
+    import { useTwoFactorsAuth } from './use2faApi';
 
     const { t } = useI18n();
     dayjs.extend(utc);
     dayjs.extend(timezone);
     const coreStore = useCoreStore();
+    const twoFactorsAuth = useTwoFactorsAuth();
 
     interface Passkey {
         id: string;
@@ -176,8 +178,9 @@
     async function startAddPasskey() {
         isFetchingPasskey.value = true;
         try {
-            const confirmationResult = await window.adminforthTwoFaModal
-                .get2FaConfirmationResult(t('To add passkey first verify yourself'));
+            const confirmationResult = await twoFactorsAuth.get2FaConfirmationResult(
+                t('To add passkey first verify yourself')
+            );
 
             if (!confirmationResult) return;
 
@@ -227,7 +230,9 @@
                 body: { mode: addPasskeyMode.value, confirmationResult },
             });
             if (!response.ok) return { error: response.error ?? t('Verification failed') };
+            console.log('Passkey challenge response:', response.data);
             const options = PublicKeyCredential.parseCreationOptionsFromJSON(response.data);
+            console.log('Parsed PublicKeyCredentialCreationOptions:', options);
             return { options, challengeId: response.challengeId };
         } catch (error) {
             console.error('Error requesting passkey challenge:', error);

package/custom/use2faApi.ts

@@ -0,0 +1,52 @@
+import { ref } from 'vue';
+import { defineStore } from 'pinia';
+
+export type TwoFaConfirmationResult =
+  | { mode: 'totp'; result: string }
+  | { mode: 'passkey'; result: Record<string, any> };
+
+type VerifyFn = (confirmationResult: string) => Promise<boolean> | boolean;
+type Get2FaConfirmationResultHandler = (
+  title?: string,
+  verifyingCallback?: VerifyFn
+) => Promise<TwoFaConfirmationResult>;
+
+declare global {
+  interface Window {
+    adminforthTwoFaModal: {
+      get2FaConfirmationResult: Get2FaConfirmationResultHandler;
+    };
+  }
+}
+
+export const useTwoFactorsAuthApi = defineStore('twoFactorsAuthApi', () => {
+  const get2FaConfirmationResultHandler = ref<Get2FaConfirmationResultHandler | null>(null);
+
+  function setGet2FaConfirmationResultHandler(handler: Get2FaConfirmationResultHandler | null) {
+    get2FaConfirmationResultHandler.value = handler;
+  }
+
+  async function get2FaConfirmationResult(
+    title?: string,
+    verifyingCallback?: VerifyFn
+  ): Promise<TwoFaConfirmationResult> {
+    if (!get2FaConfirmationResultHandler.value) {
+      throw new Error('Two factors auth modal API is not initialized');
+    }
+    return get2FaConfirmationResultHandler.value(title, verifyingCallback);
+  }
+
+  function initGlobalApi() {
+    window.adminforthTwoFaModal = {
+      get2FaConfirmationResult,
+    };
+  }
+
+  return {
+    get2FaConfirmationResult,
+    setGet2FaConfirmationResultHandler,
+    initGlobalApi,
+  };
+});
+
+export const useTwoFactorsAuth = useTwoFactorsAuthApi;

package/dist/custom/TwoFAModal.vue

@@ -101,7 +101,7 @@
   <script setup lang="ts">
 
   import VOtpInput from 'vue3-otp-input';
-  import { ref, nextTick, watch, onMounted } from 'vue';
+  import { ref, nextTick, watch } from 'vue';
   import { useUserStore } from '@/stores/user';
   import { useI18n } from 'vue-i18n';
   import { callAdminForthApi } from '@/utils';
@@ -110,26 +110,16 @@
   import { getPasskey } from './utils.js' 
   import { useAdminforth } from '@/adminforth';
   import websocket from '@/websocket';
+  import { getAdminForthClientId } from '@/utils/clientId';
   import type { AdminUser } from '@/types/Common';
-
-  type TwoFaConfirmationResult = { mode: 'totp'; result: string } | { mode: 'passkey'; result: Record<string, any> };
-
-  declare global {
-    interface Window {
-      adminforthTwoFaModal: {
-        get2FaConfirmationResult: (
-          title?: string,
-          verifyingCallback?: (confirmationResult: string) => Promise<boolean>
-        ) => Promise<TwoFaConfirmationResult>;
-      };
-    }
-  }
+  import { useTwoFactorsAuthApi, type TwoFaConfirmationResult } from './use2faApi.js';
   const props = defineProps<{
     autoFinishLogin?: boolean
     adminUser?: AdminUser
   }>();
 
   const { alert } = useAdminforth();
+  const twoFactorsAuthApi = useTwoFactorsAuthApi();
 
   const isAwaiting2FAResult = ref(false);
   let allowAddNewSessions = true;
@@ -150,7 +140,8 @@
   watch( props, () => {
     if (props.adminUser) {
       websocket.unsubscribeByPrefix(`/user2fa/`);
-      websocket.subscribe(`/user2fa/${props.adminUser.pk}`, async (data: {sessionId: string}) => {
+      const user2FaTopic = `/user2fa/${props.adminUser.pk}/${getAdminForthClientId()}`;
+      websocket.subscribe(user2FaTopic, async (data: {sessionId: string}) => {
         if (!allowAddNewSessions) {
           alert({message: t('Some process or user tries to add new actions to confirm. Action was blocked'), variant: 'warning'});
           return;
@@ -162,7 +153,7 @@
         }
         try {
           isAwaiting2FAResult.value = true;
-          confirmationResult = await window.adminforthTwoFaModal.get2FaConfirmationResult();
+          confirmationResult = await twoFactorsAuthApi.get2FaConfirmationResult();
         } catch (error) {
           if (!isTwoFaCancel(error)) {
             console.error('[AdminForth 2FA] Error during 2FA confirmation', error);
@@ -188,7 +179,7 @@
         }
         allowAddNewSessions = true;
       });
-      websocket.subscribe(`/user2fa/${props.adminUser.pk}-resolve`, async (data: {sessionId: string}) => {
+      websocket.subscribe(`${user2FaTopic}/resolve`, async (data: {sessionId: string}) => {
         if (sessionsIdsToResolve.value.includes(data.sessionId) && rejectFn && modelShow.value) {
           onCancel();
           sessionsIdsToResolve.value = sessionsIdsToResolve.value.filter(id => id !== data.sessionId);
@@ -224,7 +215,6 @@
 
   const modelShow = ref(false);
   let resolveFn: ((confirmationResult: any) => void) | null = null;
-  let verifyingCallback: ((confirmationResult: string) => boolean) | null = null;
   let verifyFn: null | ((confirmationResult: string) => Promise<boolean> | boolean) = null;
   let rejectFn: ((err?: any) => void) | null = null;
 
@@ -233,37 +223,42 @@
   }
 
 
-  window.adminforthTwoFaModal = {
-    get2FaConfirmationResult: (title?: string, verifyingCallback?: (confirmationResult: string) => Promise<boolean>) =>
-      new Promise((resolve, reject) => {
-        (async () => {
-          if (modelShow.value) {
-            throw new Error(t('Modal is already open'));
-          }
-          const skipAllowModal = await checkIfSkipAllowModal();
-          if (skipAllowModal) {
-            resolve({ code: "123456" }); // dummy code
-            return;
-          }
-          await checkIfUserHasPasskeys();
-          if (title) {
-            customDialogTitle.value = title;
-          }
-          resolveFn = resolve;
-          rejectFn = reject;
-          verifyFn = verifyingCallback ?? null;
-          modelShow.value = true;
-          if (modalMode.value === 'totp') {
-            await addEventListenerForOTPInput();
-          }
-        })().catch((error) => {
-          if (!isTwoFaCancel(error)) {
-            console.error('[AdminForth 2FA] Failed to open 2FA modal', error);
-          }
-          reject(error);
-        });
-      }),
-  };
+  function get2FaConfirmationResult(
+    title?: string,
+    verifyingCallback?: (confirmationResult: string) => Promise<boolean> | boolean
+  ): Promise<TwoFaConfirmationResult> {
+    return new Promise((resolve, reject) => {
+      (async () => {
+        if (modelShow.value) {
+          throw new Error(t('Modal is already open'));
+        }
+        const skipAllowModal = await checkIfSkipAllowModal();
+        if (skipAllowModal) {
+          resolve({ mode: 'totp', result: '123456' });
+          return;
+        }
+        await checkIfUserHasPasskeys();
+        if (title) {
+          customDialogTitle.value = title;
+        }
+        resolveFn = resolve;
+        rejectFn = reject;
+        verifyFn = verifyingCallback ?? null;
+        modelShow.value = true;
+        if (modalMode.value === 'totp') {
+          await addEventListenerForOTPInput();
+        }
+      })().catch((error) => {
+        if (!isTwoFaCancel(error)) {
+          console.error('[AdminForth 2FA] Failed to open 2FA modal', error);
+        }
+        reject(error);
+      });
+    });
+  }
+
+  twoFactorsAuthApi.setGet2FaConfirmationResultHandler(get2FaConfirmationResult);
+  twoFactorsAuthApi.initGlobalApi();
   
   const { t } = useI18n();
   const user = useUserStore();
@@ -274,15 +269,19 @@
   const doesUserHavePasskeys = ref(false);
   const modalMode = ref<"totp" | "passkey">("totp");
   const isLoading = ref(false);
+  const isFetchingPasskey = ref(false);
   const customDialogTitle = ref("");
   
   async function usePasskeyButtonClick() {
+    isFetchingPasskey.value = true;
     let passkeyData;
     try {
       passkeyData = await getPasskey();
     } catch (error) {
       onCancel();
       return null;
+    } finally {
+      isFetchingPasskey.value = false;
     }
     modelShow.value = false;
     const dataToReturn = {
@@ -291,7 +290,7 @@
     }
     customDialogTitle.value = "";
     removeEventListenerForOTPInput();
-    resolveFn(dataToReturn);
+    resolveFn?.(dataToReturn);
   }
 
   function tagOtpInputs() {
@@ -352,7 +351,7 @@
     bindValue.value = '';
     confirmationResult.value?.clearInput();
     removeEventListenerForOTPInput();
-    rejectFn("Cancel");
+    rejectFn?.("Cancel");
     emit('rejected', new Error('cancelled'));
     emit('closed');
   }
@@ -438,10 +437,10 @@
     ((firstEmpty || inputs[0]) as HTMLInputElement).focus();
   }
 
-  function handleGlobalFocusIn(event) {
+  function handleGlobalFocusIn(event: FocusEvent) {
     const inputs = getOtpInputs();
     if (!inputs.length) return;
-    const target = event.target;
+    const target = event.target as Element | null;
     if (!target) return;
     if (!inputs.includes(target)) {
       requestAnimationFrame(() => {

package/dist/custom/TwoFactorsPasskeysSettings.vue

@@ -133,11 +133,13 @@
     import utc from 'dayjs/plugin/utc';
     import timezone from 'dayjs/plugin/timezone';
     import { useCoreStore } from '@/stores/core';
+    import { useTwoFactorsAuth } from './use2faApi';
 
     const { t } = useI18n();
     dayjs.extend(utc);
     dayjs.extend(timezone);
     const coreStore = useCoreStore();
+    const twoFactorsAuth = useTwoFactorsAuth();
 
     interface Passkey {
         id: string;
@@ -176,8 +178,9 @@
     async function startAddPasskey() {
         isFetchingPasskey.value = true;
         try {
-            const confirmationResult = await window.adminforthTwoFaModal
-                .get2FaConfirmationResult(t('To add passkey first verify yourself'));
+            const confirmationResult = await twoFactorsAuth.get2FaConfirmationResult(
+                t('To add passkey first verify yourself')
+            );
 
             if (!confirmationResult) return;
 
@@ -227,7 +230,9 @@
                 body: { mode: addPasskeyMode.value, confirmationResult },
             });
             if (!response.ok) return { error: response.error ?? t('Verification failed') };
+            console.log('Passkey challenge response:', response.data);
             const options = PublicKeyCredential.parseCreationOptionsFromJSON(response.data);
+            console.log('Parsed PublicKeyCredentialCreationOptions:', options);
             return { options, challengeId: response.challengeId };
         } catch (error) {
             console.error('Error requesting passkey challenge:', error);

package/dist/custom/use2faApi.ts

@@ -0,0 +1,52 @@
+import { ref } from 'vue';
+import { defineStore } from 'pinia';
+
+export type TwoFaConfirmationResult =
+  | { mode: 'totp'; result: string }
+  | { mode: 'passkey'; result: Record<string, any> };
+
+type VerifyFn = (confirmationResult: string) => Promise<boolean> | boolean;
+type Get2FaConfirmationResultHandler = (
+  title?: string,
+  verifyingCallback?: VerifyFn
+) => Promise<TwoFaConfirmationResult>;
+
+declare global {
+  interface Window {
+    adminforthTwoFaModal: {
+      get2FaConfirmationResult: Get2FaConfirmationResultHandler;
+    };
+  }
+}
+
+export const useTwoFactorsAuthApi = defineStore('twoFactorsAuthApi', () => {
+  const get2FaConfirmationResultHandler = ref<Get2FaConfirmationResultHandler | null>(null);
+
+  function setGet2FaConfirmationResultHandler(handler: Get2FaConfirmationResultHandler | null) {
+    get2FaConfirmationResultHandler.value = handler;
+  }
+
+  async function get2FaConfirmationResult(
+    title?: string,
+    verifyingCallback?: VerifyFn
+  ): Promise<TwoFaConfirmationResult> {
+    if (!get2FaConfirmationResultHandler.value) {
+      throw new Error('Two factors auth modal API is not initialized');
+    }
+    return get2FaConfirmationResultHandler.value(title, verifyingCallback);
+  }
+
+  function initGlobalApi() {
+    window.adminforthTwoFaModal = {
+      get2FaConfirmationResult,
+    };
+  }
+
+  return {
+    get2FaConfirmationResult,
+    setGet2FaConfirmationResultHandler,
+    initGlobalApi,
+  };
+});
+
+export const useTwoFactorsAuth = useTwoFactorsAuthApi;

package/dist/index.js

@@ -8,6 +8,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 import { AdminForthPlugin, suggestIfTypo } from "adminforth";
+import * as AdminForthRuntime from "adminforth";
 import { PasskeyService } from "./services/passkeyService.js";
 import { TotpService } from "./services/totpService.js";
 import { verifyMfaConfirmation } from "./services/verifyMfaConfirmation.js";
@@ -19,6 +20,7 @@ import { createPasskeyHandlers } from "./handlers/createPasskeyHandlers.js";
 import { createTwoFaHandlers } from "./handlers/createTwoFaHandlers.js";
 import { parsePeriod } from "./utils/parsePeriod.js";
 import crypto from 'crypto';
+const getRequestWebsocketClientId = AdminForthRuntime.getRequestWebsocketClientId;
 export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
     constructor(options) {
         super(options, import.meta.url);
@@ -77,12 +79,16 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
     }
     verifyAuto(adminUser) {
         return __awaiter(this, void 0, void 0, function* () {
+            const websocketClientId = getRequestWebsocketClientId === null || getRequestWebsocketClientId === void 0 ? void 0 : getRequestWebsocketClientId();
+            if (!websocketClientId) {
+                return { ok: false, error: '2FA auto verification requires an active browser request context' };
+            }
             const sessionId = crypto.randomUUID();
             const jwt = this.adminforth.auth.issueJWT({ sessionId, adminUserPk: adminUser.pk }, 'auto2FA', '5m');
             const resultPromise = this.waitForResponse(jwt, 5 * 60 * 1000);
-            this.adminforth.websocket.publish(`/user2fa/${adminUser.pk}`, { sessionId: jwt });
+            this.adminforth.websocket.publish(`/user2fa/${adminUser.pk}/${websocketClientId}`, { sessionId: jwt });
             const result = yield resultPromise;
-            this.adminforth.websocket.publish(`/user2fa/${adminUser.pk}-resolve`, { sessionId: jwt });
+            this.adminforth.websocket.publish(`/user2fa/${adminUser.pk}/${websocketClientId}/resolve`, { sessionId: jwt });
             return result;
         });
     }

package/index.ts

@@ -1,4 +1,5 @@
 import {  AdminForthPlugin, suggestIfTypo, HttpExtra } from "adminforth";
+import * as AdminForthRuntime from "adminforth";
 import type { AdminForthResource, AdminUser, IAdminForth, IHttpServer, IAdminForthAuth, IAdminForthHttpResponse } from "adminforth";
 import  { PluginOptions } from "./types.js"
 import { PasskeyService } from "./services/passkeyService.js";
@@ -13,6 +14,10 @@ import { createTwoFaHandlers } from "./handlers/createTwoFaHandlers.js";
 import { parsePeriod } from "./utils/parsePeriod.js";
 import crypto from 'crypto';
 
+const getRequestWebsocketClientId = (AdminForthRuntime as typeof AdminForthRuntime & {
+  getRequestWebsocketClientId?: () => string | undefined;
+}).getRequestWebsocketClientId;
+
 export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
   options: PluginOptions;
   adminforth: IAdminForth;
@@ -87,15 +92,19 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
   }
 
   public async verifyAuto(adminUser: AdminUser) {
+    const websocketClientId = getRequestWebsocketClientId?.();
+    if (!websocketClientId) {
+      return { ok: false, error: '2FA auto verification requires an active browser request context' };
+    }
     const sessionId = crypto.randomUUID();
     const jwt = this.adminforth.auth.issueJWT({sessionId, adminUserPk: adminUser.pk}, 'auto2FA', '5m');
     const resultPromise = this.waitForResponse(jwt, 5 * 60 * 1000);
 
-    this.adminforth.websocket.publish(`/user2fa/${adminUser.pk}`, { sessionId: jwt });
+    this.adminforth.websocket.publish(`/user2fa/${adminUser.pk}/${websocketClientId}`, { sessionId: jwt });
 
     const result = await resultPromise;
 
-    this.adminforth.websocket.publish(`/user2fa/${adminUser.pk}-resolve`, { sessionId: jwt });
+    this.adminforth.websocket.publish(`/user2fa/${adminUser.pk}/${websocketClientId}/resolve`, { sessionId: jwt });
 
     return result;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/two-factors-auth",
-  "version": "4.0.1",
+  "version": "4.1.0",
   "description": "AdminForth plugin for two factors authentication",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/pnpm-workspace.yaml

@@ -0,0 +1,4 @@
+allowBuilds:
+  adminforth: true
+minimumReleaseAgeExclude:
+  - adminforth@3.0.1