@atlasauth/angular 0.11.0 → 0.13.0

package/dist/esm2022/public-api.mjs

@@ -21,6 +21,7 @@ export { UserButtonComponent } from './lib/components/user-button.component';
 export { OrganizationSwitcherComponent } from './lib/components/organization-switcher.component';
 export { UserProfileComponent } from './lib/components/user-profile.component';
 export { OrganizationProfileComponent } from './lib/components/organization-profile.component';
+export { ManageCibaComponent } from './lib/components/manage-ciba.component';
 export { OrganizationAuditLogComponent } from './lib/components/organization-audit-log.component';
 export { AtlasOrganizationAuditLog } from './lib/components/organization-audit-log';
 export { ImpersonationBannerComponent } from './lib/components/impersonation-banner.component';
@@ -45,4 +46,4 @@ export { SignOutError } from '@atlasauth/js';
 // `onSignOut({ reason })` event types + the `atlas:signout` window event; this SDK's version.
 export { SIGN_OUT_EVENT, onAtlasSignOut } from '@atlasauth/js';
 export { ATLAS_ANGULAR_SDK, ATLAS_ANGULAR_VERSION } from './lib/version';
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist/fesm2022/atlasauth-angular.mjs

@@ -4,7 +4,7 @@ import { isPlatformBrowser, DOCUMENT } from '@angular/common';
 import { toSignal } from '@angular/core/rxjs-interop';
 import { BehaviorSubject, Subject, combineLatest, firstValueFrom } from 'rxjs';
 import { map, distinctUntilChanged, filter, take } from 'rxjs/operators';
-import { createOrganizationAuditLog, POLICY_STRINGS, TokenCache, SignOutNotifier, resolveFrontendApi, withDevBrowser, catalogLocale, configureReferralCapture, FapiClient, SignOutGuard, localizedErrorMessage, reauthenticate, getTemplateToken, getProviderToken, signOutReasonFromClient, readRedirectResult, completeOAuthPopupLanding, mapOAuthPopupPayload, stripRedirectParams, closeOAuthPopupAfterSignIn, SDK_HEADER, sdkHeaderValue, reportSdkAdvisory, readExpiry, msUntilRefresh, policyTranslator, injectPolicyStyles, mountPolicyClickwrap, mountPolicyConsent, controllerForPending, mountPolicyAcceptStep, joinTitles, formatPolicyDate, PolicyGateController, groupSetupKey, enrollmentSubmitKey, nextStep, awaitingSignUpLink, canDownloadRecoveryCodes, copyRecoveryCodes, downloadRecoveryCodes, createCaptchaController, atlasCaptchaLabels, PolicyAcceptanceController, flowFromPending, initialFlow, createMfaEnrollment, mfaChoicesFrom, fetchInstanceSettings, fetchLastSignInMethod, offeredFirstFactors, prepareFactor, signInCaptchaOptions, flowNeedsCaptcha, planFirstFactor, advanceWithCaptcha, loadPolicies, createSignUp, prepareSecondFactorCode, resendSignUpVerification, createPasskeySignUp, finishPasskeySignUp, pendingRecoveryCodes, acknowledgeRecoveryCodes, shouldKeepPolling, pollAttempt, lastUsedMethodLabel, signUp, confirmPolicies, passkeysSupported, awaitingPasskey, OrganizationProfileController, describeAuditAction, actorFromClaims } from '@atlasauth/js';
+import { createOrganizationAuditLog, POLICY_STRINGS, TokenCache, SignOutNotifier, resolveFrontendApi, withDevBrowser, catalogLocale, configureReferralCapture, FapiClient, SignOutGuard, localizedErrorMessage, reauthenticate, getTemplateToken, getProviderToken, signOutReasonFromClient, readRedirectResult, completeOAuthPopupLanding, mapOAuthPopupPayload, stripRedirectParams, closeOAuthPopupAfterSignIn, SDK_HEADER, sdkHeaderValue, reportSdkAdvisory, readExpiry, msUntilRefresh, policyTranslator, injectPolicyStyles, mountPolicyClickwrap, mountPolicyConsent, controllerForPending, mountPolicyAcceptStep, joinTitles, formatPolicyDate, PolicyGateController, groupSetupKey, enrollmentSubmitKey, nextStep, awaitingSignUpLink, canDownloadRecoveryCodes, copyRecoveryCodes, downloadRecoveryCodes, createCaptchaController, atlasCaptchaLabels, PolicyAcceptanceController, flowFromPending, initialFlow, createMfaEnrollment, createPasskeySignInController, startSignInWithAtlas, mfaChoicesFrom, fetchInstanceSettings, fetchLastSignInMethod, offeredFirstFactors, prepareFactor, signInCaptchaOptions, flowNeedsCaptcha, planFirstFactor, advanceWithCaptcha, loadPolicies, createSignUp, prepareSecondFactorCode, resendSignUpVerification, createPasskeySignUp, finishPasskeySignUp, pendingRecoveryCodes, acknowledgeRecoveryCodes, shouldKeepPolling, pollAttempt, lastUsedMethodLabel, signUp, passkeysSupported, confirmPolicies, awaitingPasskey, listCibaRequests, getCibaPin, decideCibaRequest, setCibaPin, clearCibaPin, OrganizationProfileController, describeAuditAction, actorFromClaims } from '@atlasauth/js';
 export { FapiClient, SIGN_OUT_EVENT, SignOutError, advance, flowFromPending, getProviderToken, initialFlow, onAtlasSignOut, pollAttempt, prepareFactor, requestForStep, shouldKeepPolling } from '@atlasauth/js';
 import { evaluate } from '@atlasauth/authz';
 export { evaluate, hasFromClaims } from '@atlasauth/authz';
@@ -204,12 +204,15 @@ const EN_US = {
     'signIn.signUpLink': 'Sign up',
     'signIn.orDivider': 'or',
     'signIn.socialButton': 'Continue with {provider}',
+    'signIn.continueWithAtlas': 'Continue with Atlas',
     'signIn.emailCodeLabel': 'Verification code',
     'signIn.useEmailCode': 'Email me a code',
     'signIn.codeSentTo': 'We sent a code to {email}. Enter it below.',
     'signIn.resendCode': 'Resend code',
     'signIn.sending': 'Sending…',
     'signIn.emailCodeOption': 'Email me a code instead',
+    'signIn.passkeyButton': 'Sign in with a passkey',
+    'signIn.passkeyCancelled': "Passkey sign-in didn't finish. Try again, or use another way to sign in.",
     'signIn.magicLinkSent': 'Check your email for a sign-in link.',
     'signIn.signedIn': 'You\'re signed in.',
     'signIn.sessionNotKept': 'You signed in, but this browser didn\'t keep the session. If it blocks third-party cookies, allow cookies for this site and try again.',
@@ -389,7 +392,7 @@ function withFallback(locale) {
 }
 
 /** This package's version, sent as `X-Atlas-SDK` (kept in step with package.json by a test). */
-const ATLAS_ANGULAR_VERSION = '0.9.0';
+const ATLAS_ANGULAR_VERSION = '0.13.0';
 const ATLAS_ANGULAR_SDK = { name: '@atlasauth/angular', version: ATLAS_ANGULAR_VERSION };
 
 /**
@@ -1639,7 +1642,8 @@ class AttemptFlowComponent {
         const step = this.step();
         switch (step.kind) {
             case 'collect_identifier':
-                return [{ kind: 'input', name: 'identifier', labelKey: 'signIn.identifierLabel', type: 'email' }];
+                // `webauthn`: saved passkeys appear in this field's autofill while <atlas-sign-in> holds a conditional request.
+                return [{ kind: 'input', name: 'identifier', labelKey: 'signIn.identifierLabel', type: 'email', autocomplete: 'username webauthn' }];
             case 'collect_first_factor': {
                 if (this.preparedFactor === 'email_code') {
                     return [{ kind: 'input', name: 'code', labelKey: 'signIn.emailCodeLabel', type: 'text' }];
@@ -1805,6 +1809,7 @@ class AttemptFlowComponent {
                 [class]="cls('formFieldInput', 'atlas-input')"
                 [type]="f.type"
                 [attr.name]="f.name"
+                [attr.autocomplete]="f.autocomplete ?? null"
                 [value]="values[f.name] ?? ''"
                 (input)="setValue(f.name, $any($event.target).value)"
               />
@@ -2016,6 +2021,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImpo
                 [class]="cls('formFieldInput', 'atlas-input')"
                 [type]="f.type"
                 [attr.name]="f.name"
+                [attr.autocomplete]="f.autocomplete ?? null"
                 [value]="values[f.name] ?? ''"
                 (input)="setValue(f.name, $any($event.target).value)"
               />
@@ -2341,6 +2347,13 @@ class AtlasFlowController {
      * {@link create} sends their acceptances and reloads them after a refusal.
      */
     policies = new PolicyAcceptanceController([]);
+    /**
+     * Passkey sign-in (the "Sign in with a passkey" button and passkey autofill on
+     * the identifier field). The outcome goes through the same completion as every sign-in.
+     */
+    passkey;
+    /** Whether this browser can run WebAuthn; `<atlas-sign-in>` sets it after it is created in a browser. */
+    passkeySupported = signal(false);
     pollTimer = null;
     identifier = '';
     constructor(client, reload, pending, 
@@ -2355,9 +2368,36 @@ class AtlasFlowController {
         this.enrollment = createMfaEnrollment(this.client, () => this.mfaChoices());
         this.enrollmentState = signal(this.enrollment.state);
         this.enrollment.subscribe((next) => this.enrollmentState.set(next));
+        this.passkey = createPasskeySignInController({
+            client: this.client,
+            onStart: () => this.state.update((current) => ({ ...current, busy: true, errors: [] })),
+            onResult: (next) => this.finish(next),
+            captcha: () => this.captcha,
+            cancelledMessage: () => this.t('signIn.passkeyCancelled'),
+        });
         this.syncCaptcha();
         this.syncEnrollment();
     }
+    /** Why "Continue with Atlas" could not start (the server's message); null otherwise. */
+    signInWithAtlasError = signal(null);
+    /**
+     * "Continue with Atlas" (when `settings().signInWithAtlas` is set): starts the
+     * SSO sign-in and sends the browser to Atlas.
+     */
+    async signInWithAtlas(connectionId) {
+        if (typeof window === 'undefined')
+            return;
+        this.signInWithAtlasError.set(null);
+        const started = await startSignInWithAtlas(this.client, connectionId, window.location.href);
+        if ('url' in started)
+            window.location.assign(started.url);
+        else
+            this.signInWithAtlasError.set(started.error);
+    }
+    /** "Sign in with a passkey" is offered: the first step, the instance turned passkey sign-in on, and the browser can. */
+    passkeyOffered() {
+        return this.passkeySupported() && !this.state().attempt && this.settings()?.passkeySignIn === true;
+    }
     /** What the app lets the MFA steps offer (from {@link settings}). */
     mfaChoices() {
         return mfaChoicesFrom(this.settings()?.account);
@@ -2632,6 +2672,7 @@ class AtlasFlowController {
     }
     /** Release the poll timer and the captcha widgets — call from the component's `ngOnDestroy`. */
     destroy() {
+        this.passkey.stopAutofill();
         this.stopPolling();
         this.captcha.destroy();
         this.signUpCaptcha.destroy();
@@ -2667,6 +2708,12 @@ class SignInComponent {
             return null;
         return lastUsedMethodLabel(this.flow.lastMethod(), (key) => this.t(key));
     }
+    /** The "Sign in with Atlas" connection, on the first step, when the instance has it on. */
+    atlasConnection() {
+        if (this.flow.state().attempt || this.flow.recoveryCodes())
+            return null;
+        return this.flow.settings()?.signInWithAtlas?.connectionId ?? null;
+    }
     signUpHref() {
         if (this.signUpUrl === null)
             return null;
@@ -2686,7 +2733,16 @@ class SignInComponent {
     flow = new AtlasFlowController(this.atlas.createFapiClient(), () => this.atlas.reload(), 
     // Resume mid-flow if an OAuth redirect came back owing a second factor.
     this.atlas.pendingAttempt, (key) => translate(this.atlas.localization, key));
+    // Passkey autofill runs while the first step offers passkeys (a computed, so it re-arms only when that changes).
+    passkeyOffered = computed(() => this.flow.passkeyOffered());
+    passkeyAutofill = effect(() => (this.passkeyOffered() ? this.flow.passkey.armAutofill() : this.flow.passkey.stopAutofill()));
+    submitIdentifier(values) {
+        this.flow.passkey.stopAutofill();
+        void this.flow.submit(values);
+    }
     ngOnInit() {
+        if (typeof window !== 'undefined')
+            this.flow.passkeySupported.set(passkeysSupported());
         // If seeded from a pending attempt that is already pollable, start polling.
         this.flow.syncPolling();
         // §5 the instance's captcha settings (switching captcha on in the dashboard
@@ -2705,6 +2761,14 @@ class SignInComponent {
         {{ t('signIn.lastUsed') }}: {{ label }}
       </p>
     }
+    @if (atlasConnection(); as connectionId) {
+      <button type="button" class="atlas-social-button" data-atlas-provider="atlas" (click)="flow.signInWithAtlas(connectionId)">
+        {{ t('signIn.continueWithAtlas') }}
+      </button>
+      @if (flow.signInWithAtlasError(); as message) {
+        <p class="atlas-error" role="alert">{{ message }}</p>
+      }
+    }
     @if (flow.recoveryCodes(); as codes) {
       <atlas-recovery-codes [codes]="codes" [busy]="flow.state().busy" (saved)="flow.saveRecoveryCodes()"></atlas-recovery-codes>
     } @else {
@@ -2719,7 +2783,7 @@ class SignInComponent {
       [preparedFactor]="flow.preparedFactor()"
       [offerEmailSecondFactor]="flow.settings()?.account?.emailSecondFactor === true"
       [emailedSecondFactor]="flow.emailSecondFactor()"
-      (submitFlow)="flow.submit($event)"
+      (submitFlow)="submitIdentifier($event)"
       (chooseFactor)="flow.prepare($event)"
       [offerSmsSecondFactor]="flow.settings() !== null && flow.mfaChoices().sms"
       [textedSecondFactor]="flow.smsSecondFactor()"
@@ -2730,6 +2794,17 @@ class SignInComponent {
       (policyDeclined)="flow.declinePolicy($event)"
     ></atlas-attempt-flow>
     }
+    @if (flow.passkeyOffered() && !flow.recoveryCodes()) {
+      <button
+        type="button"
+        class="atlas-social-button atlas-passkey-button"
+        data-atlas-passkey-sign-in=""
+        [disabled]="flow.state().busy"
+        (click)="flow.passkey.signIn()"
+      >
+        {{ t('signIn.passkeyButton') }}
+      </button>
+    }
     @if (flow.state().attempt?.status !== 'complete' && signUpHref(); as href) {
       <p class="atlas-footer" data-atlas-sign-up-prompt="">
         {{ t('signIn.noAccount') }} <a class="atlas-link" [href]="href">{{ t('signIn.signUpLink') }}</a>
@@ -2750,6 +2825,14 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImpo
         {{ t('signIn.lastUsed') }}: {{ label }}
       </p>
     }
+    @if (atlasConnection(); as connectionId) {
+      <button type="button" class="atlas-social-button" data-atlas-provider="atlas" (click)="flow.signInWithAtlas(connectionId)">
+        {{ t('signIn.continueWithAtlas') }}
+      </button>
+      @if (flow.signInWithAtlasError(); as message) {
+        <p class="atlas-error" role="alert">{{ message }}</p>
+      }
+    }
     @if (flow.recoveryCodes(); as codes) {
       <atlas-recovery-codes [codes]="codes" [busy]="flow.state().busy" (saved)="flow.saveRecoveryCodes()"></atlas-recovery-codes>
     } @else {
@@ -2764,7 +2847,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImpo
       [preparedFactor]="flow.preparedFactor()"
       [offerEmailSecondFactor]="flow.settings()?.account?.emailSecondFactor === true"
       [emailedSecondFactor]="flow.emailSecondFactor()"
-      (submitFlow)="flow.submit($event)"
+      (submitFlow)="submitIdentifier($event)"
       (chooseFactor)="flow.prepare($event)"
       [offerSmsSecondFactor]="flow.settings() !== null && flow.mfaChoices().sms"
       [textedSecondFactor]="flow.smsSecondFactor()"
@@ -2775,6 +2858,17 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImpo
       (policyDeclined)="flow.declinePolicy($event)"
     ></atlas-attempt-flow>
     }
+    @if (flow.passkeyOffered() && !flow.recoveryCodes()) {
+      <button
+        type="button"
+        class="atlas-social-button atlas-passkey-button"
+        data-atlas-passkey-sign-in=""
+        [disabled]="flow.state().busy"
+        (click)="flow.passkey.signIn()"
+      >
+        {{ t('signIn.passkeyButton') }}
+      </button>
+    }
     @if (flow.state().attempt?.status !== 'complete' && signUpHref(); as href) {
       <p class="atlas-footer" data-atlas-sign-up-prompt="">
         {{ t('signIn.noAccount') }} <a class="atlas-link" [href]="href">{{ t('signIn.signUpLink') }}</a>
@@ -3647,6 +3741,151 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImpo
                 }]
         }] });
 
+/**
+ * `<atlas-manage-ciba>` — sign-in requests apps start on the user's behalf (CIBA), with approve and deny, and
+ * the optional CIBA PIN apps must send as the user code. The Angular peer of React's `<ManageCiba/>`. Renders
+ * nothing when there is no request, no PIN and no app that could ask.
+ */
+class ManageCibaComponent {
+    atlas = inject(AtlasService);
+    requests = signal([]);
+    pin = signal(null);
+    newPin = signal('');
+    password = signal('');
+    message = signal(null);
+    client = this.atlas.createFapiClient();
+    ngOnInit() {
+        void this.load();
+    }
+    async load() {
+        const [r, p] = await Promise.all([listCibaRequests(this.client).catch(() => []), getCibaPin(this.client).catch(() => null)]);
+        this.requests.set(r);
+        this.pin.set(p);
+    }
+    async run(fn, fallback) {
+        this.message.set(null);
+        try {
+            await fn();
+            this.newPin.set('');
+            this.password.set('');
+            await this.load();
+        }
+        catch (e) {
+            this.message.set(e instanceof Error && e.message ? e.message : fallback);
+        }
+    }
+    decide(id, decision) {
+        return this.run(() => decideCibaRequest(this.client, id, decision), decision === 'approve' ? 'Could not approve.' : 'Could not deny.');
+    }
+    save(event) {
+        event.preventDefault();
+        return this.run(() => setCibaPin(this.client, { pin: this.newPin(), currentPassword: this.password() }), 'Could not save the PIN.');
+    }
+    remove() {
+        return this.run(() => clearCibaPin(this.client, { currentPassword: this.password() }), 'Could not remove the PIN.');
+    }
+    cls(key, base) {
+        return classFor(key, this.atlas.appearance, base);
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: ManageCibaComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "17.3.12", type: ManageCibaComponent, isStandalone: true, selector: "atlas-manage-ciba", ngImport: i0, template: `
+    @if (requests().length || (pin() && (pin()!.set || pin()!.available))) {
+      <section [class]="cls('card', 'atlas-card')" data-atlas="manage-ciba">
+        @if (requests().length) {
+          <h2>Sign-in requests from apps</h2>
+          <ul>
+            @for (r of requests(); track r.id) {
+              <li>
+                <strong>{{ r.client_name }}</strong>
+                @if (r.binding_message) {
+                  <div>{{ r.binding_message }}</div>
+                }
+                <small>{{ r.scope.join(', ') }}</small>
+                <button [class]="cls('formButtonSecondary', 'atlas-button-secondary')" type="button" (click)="decide(r.id, 'approve')">Approve</button>
+                <button [class]="cls('formButtonSecondary', 'atlas-button-secondary')" type="button" (click)="decide(r.id, 'deny')">Deny</button>
+              </li>
+            }
+          </ul>
+        }
+        @if (pin(); as p) {
+          @if (p.set || p.available) {
+            <form (submit)="save($event)">
+              <h2>CIBA PIN</h2>
+              <p>{{ p.set ? 'You have a CIBA PIN.' : 'You have not set a CIBA PIN.' }} Apps that start a sign-in request for you must send it.</p>
+              <input type="password" autocomplete="current-password" placeholder="Current password" aria-label="Current password" [value]="password()" (input)="password.set($any($event.target).value)" />
+              <input type="password" inputmode="numeric" autocomplete="off" placeholder="6 to 12 digits" aria-label="New CIBA PIN" [value]="newPin()" (input)="newPin.set($any($event.target).value)" />
+              <button [class]="cls('formButtonSecondary', 'atlas-button-secondary')" type="submit">{{ p.set ? 'Change PIN' : 'Set PIN' }}</button>
+              @if (p.set) {
+                <button [class]="cls('formButtonSecondary', 'atlas-button-secondary')" type="button" (click)="remove()">Remove PIN</button>
+              }
+              @if (message(); as m) {
+                <small role="status">{{ m }}</small>
+              }
+            </form>
+          }
+        }
+        @if (message(); as m) {
+          @if (!pin() || !(pin()!.set || pin()!.available)) {
+            <small role="status">{{ m }}</small>
+          }
+        }
+      </section>
+    }
+  `, isInline: true, changeDetection: i0.ChangeDetectionStrategy.OnPush });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: ManageCibaComponent, decorators: [{
+            type: Component,
+            args: [{
+                    selector: 'atlas-manage-ciba',
+                    standalone: true,
+                    changeDetection: ChangeDetectionStrategy.OnPush,
+                    template: `
+    @if (requests().length || (pin() && (pin()!.set || pin()!.available))) {
+      <section [class]="cls('card', 'atlas-card')" data-atlas="manage-ciba">
+        @if (requests().length) {
+          <h2>Sign-in requests from apps</h2>
+          <ul>
+            @for (r of requests(); track r.id) {
+              <li>
+                <strong>{{ r.client_name }}</strong>
+                @if (r.binding_message) {
+                  <div>{{ r.binding_message }}</div>
+                }
+                <small>{{ r.scope.join(', ') }}</small>
+                <button [class]="cls('formButtonSecondary', 'atlas-button-secondary')" type="button" (click)="decide(r.id, 'approve')">Approve</button>
+                <button [class]="cls('formButtonSecondary', 'atlas-button-secondary')" type="button" (click)="decide(r.id, 'deny')">Deny</button>
+              </li>
+            }
+          </ul>
+        }
+        @if (pin(); as p) {
+          @if (p.set || p.available) {
+            <form (submit)="save($event)">
+              <h2>CIBA PIN</h2>
+              <p>{{ p.set ? 'You have a CIBA PIN.' : 'You have not set a CIBA PIN.' }} Apps that start a sign-in request for you must send it.</p>
+              <input type="password" autocomplete="current-password" placeholder="Current password" aria-label="Current password" [value]="password()" (input)="password.set($any($event.target).value)" />
+              <input type="password" inputmode="numeric" autocomplete="off" placeholder="6 to 12 digits" aria-label="New CIBA PIN" [value]="newPin()" (input)="newPin.set($any($event.target).value)" />
+              <button [class]="cls('formButtonSecondary', 'atlas-button-secondary')" type="submit">{{ p.set ? 'Change PIN' : 'Set PIN' }}</button>
+              @if (p.set) {
+                <button [class]="cls('formButtonSecondary', 'atlas-button-secondary')" type="button" (click)="remove()">Remove PIN</button>
+              }
+              @if (message(); as m) {
+                <small role="status">{{ m }}</small>
+              }
+            </form>
+          }
+        }
+        @if (message(); as m) {
+          @if (!pin() || !(pin()!.set || pin()!.available)) {
+            <small role="status">{{ m }}</small>
+          }
+        }
+      </section>
+    }
+  `,
+                }]
+        }] });
+
 /**
  * `<atlas-user-profile>` — the signed-in user's account surface (emails,
  * security). The Angular peer of React's `<UserProfile/>`. Renders nothing when
@@ -3753,15 +3992,18 @@ class UserProfileComponent {
           <h2>{{ t('userProfile.securitySection') }}</h2>
           <p>{{ user.mfa_enabled ? '2FA on' : '2FA off' }}</p>
         </section>
+
+        <atlas-manage-ciba />
       </div>
     }
-  `, isInline: true, changeDetection: i0.ChangeDetectionStrategy.OnPush });
+  `, isInline: true, dependencies: [{ kind: "component", type: ManageCibaComponent, selector: "atlas-manage-ciba" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: UserProfileComponent, decorators: [{
             type: Component,
             args: [{
                     selector: 'atlas-user-profile',
                     standalone: true,
+                    imports: [ManageCibaComponent],
                     changeDetection: ChangeDetectionStrategy.OnPush,
                     template: `
     @if (atlas.user(); as user) {
@@ -3818,6 +4060,8 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImpo
           <h2>{{ t('userProfile.securitySection') }}</h2>
           <p>{{ user.mfa_enabled ? '2FA on' : '2FA off' }}</p>
         </section>
+
+        <atlas-manage-ciba />
       </div>
     }
   `,
@@ -4582,6 +4826,7 @@ const ATLAS_UI = [
     UserProfileComponent,
     OrganizationProfileComponent,
     OrganizationAuditLogComponent,
+    ManageCibaComponent,
     AtlasPoliciesDirective,
     PolicyAcceptStepComponent,
     PolicyGateComponent,
@@ -4642,7 +4887,7 @@ class AtlasModule {
         return { ngModule: AtlasModule, providers };
     }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: AtlasModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule });
-    static ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "17.3.12", ngImport: i0, type: AtlasModule, imports: [AtlasSignedInDirective, AtlasSignedOutDirective, AtlasLoadingDirective, AtlasLoadedDirective, AtlasProtectDirective, AtlasRootDirective, SignInComponent, SignUpComponent, UserButtonComponent, OrganizationSwitcherComponent, UserProfileComponent, OrganizationProfileComponent, OrganizationAuditLogComponent, AtlasPoliciesDirective, PolicyAcceptStepComponent, PolicyGateComponent], exports: [AtlasSignedInDirective, AtlasSignedOutDirective, AtlasLoadingDirective, AtlasLoadedDirective, AtlasProtectDirective, AtlasRootDirective, SignInComponent, SignUpComponent, UserButtonComponent, OrganizationSwitcherComponent, UserProfileComponent, OrganizationProfileComponent, OrganizationAuditLogComponent, AtlasPoliciesDirective, PolicyAcceptStepComponent, PolicyGateComponent] });
+    static ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "17.3.12", ngImport: i0, type: AtlasModule, imports: [AtlasSignedInDirective, AtlasSignedOutDirective, AtlasLoadingDirective, AtlasLoadedDirective, AtlasProtectDirective, AtlasRootDirective, SignInComponent, SignUpComponent, UserButtonComponent, OrganizationSwitcherComponent, UserProfileComponent, OrganizationProfileComponent, OrganizationAuditLogComponent, ManageCibaComponent, AtlasPoliciesDirective, PolicyAcceptStepComponent, PolicyGateComponent], exports: [AtlasSignedInDirective, AtlasSignedOutDirective, AtlasLoadingDirective, AtlasLoadedDirective, AtlasProtectDirective, AtlasRootDirective, SignInComponent, SignUpComponent, UserButtonComponent, OrganizationSwitcherComponent, UserProfileComponent, OrganizationProfileComponent, OrganizationAuditLogComponent, ManageCibaComponent, AtlasPoliciesDirective, PolicyAcceptStepComponent, PolicyGateComponent] });
     static ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: AtlasModule });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: AtlasModule, decorators: [{
@@ -4803,5 +5048,5 @@ function atlasChildGuard(options = {}) {
  * Generated bundle index. Do not edit.
  */
 
-export { ATLAS_ANGULAR_SDK, ATLAS_ANGULAR_VERSION, ATLAS_OPTIONS, ATLAS_UI, AtlasCaptchaSlotDirective, AtlasFlowController, AtlasLoadedDirective, AtlasLoadingDirective, AtlasModule, AtlasOrganizationAuditLog, AtlasPoliciesDirective, AtlasProtectDirective, AtlasRootDirective, AtlasService, AtlasSignedInDirective, AtlasSignedOutDirective, AttemptFlowComponent, DEFAULT_TOKENS, EN_US, ImpersonationBannerComponent, OrganizationAuditLogComponent, OrganizationProfileComponent, OrganizationSwitcherComponent, PolicyAcceptStepComponent, PolicyGateComponent, SignInComponent, SignUpComponent, SignUpFormComponent, THEMES, UserButtonComponent, UserProfileComponent, atlasChildGuard, atlasGuard, classFor, cssVariables, explicitTokens, provideAtlas, renderAppearance, resolveTokens, translate, withFallback };
+export { ATLAS_ANGULAR_SDK, ATLAS_ANGULAR_VERSION, ATLAS_OPTIONS, ATLAS_UI, AtlasCaptchaSlotDirective, AtlasFlowController, AtlasLoadedDirective, AtlasLoadingDirective, AtlasModule, AtlasOrganizationAuditLog, AtlasPoliciesDirective, AtlasProtectDirective, AtlasRootDirective, AtlasService, AtlasSignedInDirective, AtlasSignedOutDirective, AttemptFlowComponent, DEFAULT_TOKENS, EN_US, ImpersonationBannerComponent, ManageCibaComponent, OrganizationAuditLogComponent, OrganizationProfileComponent, OrganizationSwitcherComponent, PolicyAcceptStepComponent, PolicyGateComponent, SignInComponent, SignUpComponent, SignUpFormComponent, THEMES, UserButtonComponent, UserProfileComponent, atlasChildGuard, atlasGuard, classFor, cssVariables, explicitTokens, provideAtlas, renderAppearance, resolveTokens, translate, withFallback };
 //# sourceMappingURL=atlasauth-angular.mjs.map