@atlasauth/angular 0.3.0 → 0.4.0

package/dist/lib/atlas.service.d.ts

@@ -1,6 +1,6 @@
 import { OnDestroy, Signal } from '@angular/core';
 import { Observable } from 'rxjs';
-import { FapiClient, type ProviderToken, type SignOutOptions } from '@atlasauth/js';
+import { FapiClient, type ProviderToken, type SignOutOptions, type SignOutResult } from '@atlasauth/js';
 import { type ProtectCondition } from '@atlasauth/authz';
 import { type Appearance, type AppearanceRender, type InstanceDesign } from './appearance';
 import { type Catalog } from './i18n';
@@ -34,6 +34,14 @@ export declare class AtlasService implements OnDestroy {
     private readonly cache;
     private readonly fapiClient;
     private refreshTimer;
+    /**
+     * The sessions this browser signed out of (tombstones in localStorage, per
+     * Frontend API origin), the revoke and its background re-tries. Every reload /
+     * refresh asks it before adopting a session, so a sign-out the server never
+     * confirmed is not undone by the still-valid refresh cookie.
+     */
+    private readonly guard;
+    private stopWatchingSignOut;
     private readonly catalog;
     /**
      * A sign-in attempt handed back by an OAuth redirect that still needs a second
@@ -110,8 +118,19 @@ export declare class AtlasService implements OnDestroy {
     getProviderToken(provider: string): Promise<ProviderToken | null>;
     /** Imperative `has()` — the same evaluation `*atlasProtect` renders on. */
     has(condition: ProtectCondition): boolean;
-    /** Revoke the current session server-side and drop all local auth state. */
-    signOut(options?: SignOutOptions): Promise<void>;
+    /**
+     * Revoke the current session server-side and drop all local auth state.
+     *
+     * The session id is remembered before the revoke (a tombstone shared by every
+     * tab), so a reload, a token refresh, a sibling tab or a tab opened later never
+     * re-adopts it — even when the revoke failed (it is retried once, then again in
+     * the background) and the refresh cookie is still valid. Resolves
+     * `{ revoked, activeSessionId? }`; with `{ strict: true }` an unconfirmed revoke
+     * rejects with a `SignOutError` instead (after the local sign-out). A parked
+     * session the server promoted on revoke is adopted. Front-channel logout runs
+     * unless `{ frontchannel: false }`.
+     */
+    signOut(options?: SignOutOptions): Promise<SignOutResult>;
     /**
      * Switch the active organization (or `null` for the personal account). The
      * new token carries the new org claims, so the app's permission checks update
@@ -132,6 +151,7 @@ export declare class AtlasService implements OnDestroy {
     private call;
     private applyToken;
     private refresh;
+    private clearLocalState;
     /** §7.4: proactive, jittered refresh scheduled from the token's own expiry. */
     private scheduleRefresh;
     private clearRefreshTimer;

package/dist/lib/components/attempt-flow.component.d.ts

@@ -36,8 +36,18 @@ export declare class AttemptFlowComponent {
      * with `needs_captcha`. Null when the flow draws none.
      */
     captcha: CaptchaController | null;
+    /**
+     * The first factors to offer on the `needs_first_factor` step — pass
+     * `AtlasFlowController.firstFactors()`, which drops email code / link while the
+     * app cannot deliver email. Null uses the server's list as-is.
+     */
+    firstFactors: string[] | null;
+    /** The first factor already sent (`AtlasFlowController.preparedFactor()`): its code is collected. */
+    preparedFactor: string | null;
     /** Emits the collected field values when the form is submitted. */
     submitFlow: EventEmitter<Record<string, string>>;
+    /** Emits when the user picks a first factor the server must send first (an emailed code). */
+    chooseFactor: EventEmitter<"email_code">;
     protected values: Record<string, string>;
     protected t(key: string, vars?: Record<string, string>): string;
     protected cls(key: ElementKey, base: string): string;
@@ -47,9 +57,12 @@ export declare class AttemptFlowComponent {
     protected fieldErrorsFor(name: string): FieldError[];
     private step;
     protected showCaptcha(): boolean;
+    /** The first factors on offer at a `needs_first_factor` step (empty on any other). */
+    private offered;
+    protected showEmailCodeOption(): boolean;
     protected showSubmit(): boolean;
     protected fields(): StepField[];
     static ɵfac: i0.ɵɵFactoryDeclaration<AttemptFlowComponent, never>;
-    static ɵcmp: i0.ɵɵComponentDeclaration<AttemptFlowComponent, "atlas-attempt-flow", never, { "attempt": { "alias": "attempt"; "required": false; }; "busy": { "alias": "busy"; "required": false; }; "errors": { "alias": "errors"; "required": false; }; "titleKey": { "alias": "titleKey"; "required": false; }; "captcha": { "alias": "captcha"; "required": false; }; }, { "submitFlow": "submitFlow"; }, never, never, true, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<AttemptFlowComponent, "atlas-attempt-flow", never, { "attempt": { "alias": "attempt"; "required": false; }; "busy": { "alias": "busy"; "required": false; }; "errors": { "alias": "errors"; "required": false; }; "titleKey": { "alias": "titleKey"; "required": false; }; "captcha": { "alias": "captcha"; "required": false; }; "firstFactors": { "alias": "firstFactors"; "required": false; }; "preparedFactor": { "alias": "preparedFactor"; "required": false; }; }, { "submitFlow": "submitFlow"; "chooseFactor": "chooseFactor"; }, never, never, true, never>;
 }
 export {};

package/dist/lib/components/flow-controller.d.ts

@@ -34,6 +34,12 @@ export declare class AtlasFlowController {
     readonly captchaDrawn: WritableSignal<boolean>;
     /** Whether {@link signUpCaptcha} currently draws a widget (for templates). */
     readonly signUpCaptchaDrawn: WritableSignal<boolean>;
+    /**
+     * The first factor the server was asked to send ({@link prepare}) on the
+     * current `needs_first_factor` step — the form then collects its code. Null
+     * otherwise.
+     */
+    readonly preparedFactor: WritableSignal<"email_code">;
     private pollTimer;
     private identifier;
     constructor(client: FapiClient, reload: () => Promise<void>, pending: {
@@ -44,6 +50,26 @@ export declare class AtlasFlowController {
     t?: (key: string) => string);
     /** Fetch the instance's public settings and draw whatever captcha they require. */
     loadSettings(): Promise<void>;
+    /**
+     * The first factors to offer on a `needs_first_factor` step: the server's list
+     * without email code / link while the app cannot deliver email
+     * (`settings.emailDelivery.available === false`). Empty on any other step.
+     */
+    firstFactors(): string[];
+    /**
+     * True when email + password sign-up cannot complete because the app cannot
+     * send the verification email (`settings.emailDelivery.passwordSignUp === false`):
+     * `<atlas-sign-up>` shows the "can't send email" notice instead of the form.
+     */
+    signUpEmailUnavailable(): boolean;
+    /** False when a password reset email cannot be delivered — hide "Forgot password?". */
+    passwordResetAvailable(): boolean;
+    /**
+     * Ask the server to email a sign-in code for the current `needs_first_factor`
+     * step (`POST …/prepare_first_factor`); the form then collects the code, which
+     * {@link submit} posts as the `email_code` strategy.
+     */
+    prepare(strategy: 'email_code'): Promise<void>;
     /** Keep both captchas in step with the settings and the flow's current step. */
     private syncCaptcha;
     private setState;

package/dist/lib/components/sign-up-form.component.d.ts

@@ -11,7 +11,9 @@ export interface SignUpFormSubmit {
  * The create-account step of `<atlas-sign-up>`: the instance's configured extra
  * fields, email + password, the legal-consent row and — when the instance
  * requires one on sign-up — the captcha widget. Values live on the component so
- * a refused submit never clears them.
+ * a refused submit never clears them. When the app cannot send the verification
+ * email (`settings.emailDelivery.passwordSignUp === false`) it shows the
+ * `signUp.emailUnavailable` notice instead of the form.
  */
 export declare class SignUpFormComponent {
     private readonly atlas;
@@ -26,6 +28,8 @@ export declare class SignUpFormComponent {
     protected t(key: string, vars?: Record<string, string>): string;
     protected cls(key: ElementKey, base: string): string;
     protected setValue(name: string, value: string): void;
+    /** Email + password sign-up cannot complete: the app cannot send the verification email. */
+    protected emailUnavailable(): boolean;
     protected fields(): PublicSignUpField[];
     protected label(f: PublicSignUpField): string;
     protected inputType(f: PublicSignUpField): string;

package/dist/public-api.d.ts

@@ -28,4 +28,5 @@ export * from './lib/i18n';
 export * from './lib/protect';
 export * from './lib/types';
 export * from './lib/fapi';
-export type { InstanceSettings, PublicSignUpField, CaptchaController, CaptchaFlowKey, CaptchaWidgetMode, FlowCaptcha, } from '@atlasauth/js';
+export type { InstanceSettings, PublicSignUpField, CaptchaController, CaptchaFlowKey, CaptchaWidgetMode, FlowCaptcha, EmailDelivery, SignOutOptions, SignOutResult, } from '@atlasauth/js';
+export { SignOutError } from '@atlasauth/js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/angular",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Official Angular SDK for Atlas — the Angular peer of @atlasauth/react.",
   "license": "MIT",
   "module": "./dist/fesm2022/atlas-angular.mjs",
@@ -19,9 +19,9 @@
   "sideEffects": false,
   "dependencies": {
     "tslib": "^2.6.3",
-    "@atlasauth/design": "0.1.0",
-    "@atlasauth/authz": "0.1.1",
-    "@atlasauth/js": "0.6.0"
+    "@atlasauth/design": "0.2.0",
+    "@atlasauth/js": "0.8.0",
+    "@atlasauth/authz": "0.1.1"
   },
   "peerDependencies": {
     "@angular/core": ">=17",
@@ -64,6 +64,7 @@
   },
   "scripts": {
     "build": "ng-packagr -p ng-package.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
   }
 }