@atlasauth/svelte 0.8.0 → 0.9.0

package/dist/components/SignUpForm.svelte

@@ -10,6 +10,8 @@ export let busy = false;
 export let errors = [];
 export let captcha = null;
 export let onSubmit;
+export let passkey = null;
+export let onSwitchMode = void 0;
 const atlas = useAtlas();
 const cls = (key, base) => classFor(key, atlas.appearance, base);
 const t = (key, vars) => translate(atlas.catalog, key, vars);
@@ -20,7 +22,9 @@ $: legal = settings?.legal;
 $: showLegal = !!legal && (!!legal.termsUrl || !!legal.privacyUrl);
 $: consentOk = !legal?.required || agreed;
 $: fields = settings?.signUpFields ?? [];
-$: emailUnavailable = settings?.emailDelivery?.passwordSignUp === false;
+$: emailUnavailable = settings?.emailDelivery?.passwordSignUp === false && !(passkey && passkey.email !== "required");
+$: showEmail = !passkey || passkey.email !== "off";
+$: emailRequired = !passkey || passkey.email === "required";
 const label = (f) => f.required ? f.label : t("signUp.optionalField", { label: f.label });
 const inputType = (f) => ["email", "tel", "url", "number", "date"].includes(f.type) ? f.type : "text";
 const picked = (key) => values[key] ? values[key].split(", ") : [];
@@ -123,22 +127,29 @@ function handleSubmit(event) {
         {/if}
       {/each}
 
-      <label class={cls('formField', 'atlas-field')}>
-        <span class={cls('formFieldLabel', 'atlas-field-label')}>{t('signUp.emailLabel')}</span>
-        <input
-          class={cls('formFieldInput', 'atlas-input')}
-          type="email"
-          name="email"
-          autocomplete="email"
-          required
-          value={values.email ?? ''}
-          on:input={(e) => (values.email = e.currentTarget.value)}
-        />
-        {#each errors.filter((e) => e.param === 'email') as error (error.code)}
-          <span class={cls('formFieldError', 'atlas-error')}>{errorText(error)}</span>
-        {/each}
-      </label>
+      {#if showEmail}
+        <label class={cls('formField', 'atlas-field')}>
+          <span class={cls('formFieldLabel', 'atlas-field-label')}
+            >{emailRequired ? t('signUp.emailLabel') : t('signUp.optionalField', { label: t('signUp.emailLabel') })}</span
+          >
+          <input
+            class={cls('formFieldInput', 'atlas-input')}
+            type="email"
+            name="email"
+            autocomplete="email"
+            required={emailRequired}
+            value={values.email ?? ''}
+            on:input={(e) => (values.email = e.currentTarget.value)}
+          />
+          {#each errors.filter((e) => e.param === 'email') as error (error.code)}
+            <span class={cls('formFieldError', 'atlas-error')}>{errorText(error)}</span>
+          {/each}
+        </label>
+      {/if}
 
+      {#if passkey}
+        <p class="atlas-text">{t('signUp.passkeyIntro')}</p>
+      {:else}
       <label class={cls('formField', 'atlas-field')}>
         <span class={cls('formFieldLabel', 'atlas-field-label')}>{t('signUp.passwordLabel')}</span>
         <input
@@ -154,6 +165,7 @@ function handleSubmit(event) {
           <span class={cls('formFieldError', 'atlas-error')}>{errorText(error)}</span>
         {/each}
       </label>
+      {/if}
 
       {#if showLegal && legal}
         <label class={cls('formField', 'atlas-consent')}>
@@ -187,6 +199,19 @@ function handleSubmit(event) {
       >
         {t('signUp.submit')}
       </button>
+      {#if onSwitchMode}
+        <div class="atlas-alternatives">
+          <button
+            type="button"
+            class={cls('formButtonSecondary', 'atlas-button-secondary')}
+            data-atlas-sign-up-mode={passkey ? 'password' : 'passkey'}
+            disabled={busy}
+            on:click={() => onSwitchMode?.()}
+          >
+            {t(passkey ? 'signUp.passwordOption' : 'signUp.passkeyOption')}
+          </button>
+        </div>
+      {/if}
     </form>
   {/if}
 </div>

package/dist/components/SignUpForm.svelte.d.ts

@@ -16,6 +16,10 @@ declare const __propDef: {
         errors?: FieldError[];
         captcha?: CaptchaController | null;
         onSubmit: (values: Record<string, string>, consent: boolean) => void;
+        /** Passkey-only sign-up: no password field; the email per the instance's mode. */ passkey?: {
+            email: "off" | "optional" | "required";
+        } | null;
+        /** Toggle between the password and passkey forms (only when both are offered). */ onSwitchMode?: (() => void) | undefined;
     };
     events: {
         [evt: string]: CustomEvent<any>;

package/dist/context.d.ts

@@ -1,5 +1,5 @@
 import { type Readable } from 'svelte/store';
-import { type ProviderToken, type SignOutOptions, type SignOutResult, type SignOutEvent, type SignOutListener, type ReferralConsent } from '@atlasauth/js';
+import { type ProviderToken, type SignOutOptions, type SignOutResult, type EndImpersonationResult, type SignOutEvent, type SignOutListener, type ReferralConsent } from '@atlasauth/js';
 import { type Catalog } from './i18n';
 import { type Appearance, type InstanceDesign } from './appearance';
 import type { AtlasOrganizationMembership, AtlasSession, AtlasUser, SessionClaims } from './types';
@@ -126,6 +126,13 @@ export interface AtlasClient extends AtlasStores {
      */
     signOut(options?: SignOutOptions): Promise<SignOutResult>;
     setActiveOrganization(organizationId: string | null): Promise<void>;
+    /**
+     * End the active impersonation ("return to admin"): the impersonator's own
+     * session on this browser becomes active again with no sign-in
+     * (`resumed: true`); with none, another account signed in here is adopted,
+     * or this browser is signed out.
+     */
+    endImpersonation(): Promise<EndImpersonationResult>;
     /** Re-boot from the Frontend API. Resolves true when a session now exists in this browser. */
     reload(): Promise<boolean>;
     /**

package/dist/context.js

@@ -235,6 +235,22 @@ export function createAtlasClient(options) {
         applyToken(body.jwt, current.sessionId);
         await reload();
     }
+    async function endImpersonation() {
+        const outcome = await guard.endImpersonation(cache.peek()?.sessionId ?? get(session)?.id ?? null);
+        if (!outcome.ended)
+            return outcome;
+        if (!outcome.activeSessionId) {
+            if (timer)
+                clearTimeout(timer);
+            timer = null;
+            clearSession('user');
+            return outcome;
+        }
+        if (outcome.jwt)
+            applyToken(outcome.jwt, outcome.activeSessionId);
+        await reload();
+        return outcome;
+    }
     async function boot() {
         if (booted)
             return;
@@ -322,6 +338,7 @@ export function createAtlasClient(options) {
         getProviderToken,
         signOut,
         setActiveOrganization,
+        endImpersonation,
         reload,
         boot,
         loadInstanceDesign,

package/dist/i18n.js

@@ -18,6 +18,7 @@ export const EN_US = {
     'signIn.submit': 'Continue',
     'signIn.forgotPassword': 'Forgot password?',
     'signIn.noAccount': 'No account?',
+    'signIn.lastUsed': 'Last used',
     'signIn.signUpLink': 'Sign up',
     'signIn.orDivider': 'or',
     'signIn.socialButton': 'Continue with {provider}',
@@ -49,6 +50,13 @@ export const EN_US = {
     'signUp.and': 'and',
     // Shown instead of the email + password form when the app cannot send email.
     'signUp.emailUnavailable': EMAIL_UNAVAILABLE_MESSAGE,
+    'signUp.passkeyOption': 'Sign up with a passkey instead',
+    'signUp.passwordOption': 'Sign up with a password instead',
+    'signUp.passkeyIntro': "No password needed: you'll sign in with a passkey saved on this device or in your password manager.",
+    'signUp.passkeyPrompt': 'Create a passkey to finish setting up your account.',
+    'signUp.passkeyCreate': 'Create passkey',
+    'signUp.passkeyCancelled': "The passkey wasn't created. Try again when you're ready.",
+    'signUp.linkSentTo': 'We sent a confirmation link to {email}. Open it on any device; this page continues on its own.',
     'captcha.prompt': 'Complete the security check to continue.',
     'captcha.required': 'Please complete the security check, then try again.',
     'captcha.failed': "The security check didn't pass. Please try again.",
@@ -66,6 +74,24 @@ export const EN_US = {
     'mfa.usePasskey': 'Use a passkey instead',
     'mfa.useBackupCode': 'Use a recovery code',
     'mfa.submit': 'Verify',
+    'mfa.enrollChoose': 'Set up a second step for signing in.',
+    'mfa.enrollTotpOption': 'Use an authenticator app',
+    'mfa.enrollSmsOption': 'Use text messages',
+    'mfa.enrollScan': 'Scan this QR code with your authenticator app, or enter the setup key.',
+    'mfa.enrollQrAlt': 'QR code for your authenticator app',
+    'mfa.enrollSetupKey': 'Setup key',
+    'mfa.enrollPreparing': 'Setting up…',
+    'mfa.phoneLabel': 'Mobile number',
+    'mfa.phoneHint': 'Include the country code, for example +14155550101.',
+    'mfa.sendCode': 'Text me a code',
+    'mfa.codeTextedTo': 'Enter the code we texted to {phone}.',
+    'mfa.smsCodeOption': 'Text me a code instead',
+    'mfa.recoveryCodesTitle': 'Save your recovery codes',
+    'mfa.recoveryCodesHelp': "Each code works once. If you can't use your second step, sign in with one of these. Keep them somewhere safe: they won't be shown again.",
+    'mfa.recoveryCodesCopy': 'Copy codes',
+    'mfa.recoveryCodesCopied': 'Copied.',
+    'mfa.recoveryCodesDownload': 'Download as .txt',
+    'mfa.recoveryCodesSaved': "I've saved my codes",
     'reset.title': 'Reset your password',
     'reset.submit': 'Send reset code',
     'reset.newPasswordLabel': 'New password',
@@ -93,6 +119,35 @@ export const EN_US = {
     'organization.members': 'Members',
     'organization.invite': 'Invite member',
     'organization.roleLabel': 'Role',
+    'organization.invitations': 'Invitations',
+    'organization.settings': 'Settings',
+    'organization.emailLabel': 'Email address',
+    'organization.sendInvite': 'Send invitation',
+    'organization.noInvitations': 'No pending invitations.',
+    'organization.remove': 'Remove',
+    'organization.revoke': 'Revoke',
+    'organization.resend': 'Resend',
+    'organization.you': '(you)',
+    'organization.leave': 'Leave organization',
+    'organization.leaveConfirm': 'Leave {name}? You will lose access until you are invited again.',
+    'organization.delete': 'Delete organization',
+    'organization.deleteConfirm': 'Delete {name} for every member? This cannot be undone.',
+    'organization.confirm': 'Confirm',
+    'organization.cancel': 'Cancel',
+    'organization.unnamedMember': 'Unnamed member',
+    'organization.passwordPrompt': 'Enter your password to confirm.',
+    'organization.roles': 'Roles',
+    'organization.roleName': 'Role name',
+    'organization.roleKey': 'Role key (for example org:auditor)',
+    'organization.rolePermissions': 'Permissions',
+    'organization.createRole': 'Create role',
+    'organization.saveRole': 'Save role',
+    'organization.editRole': 'Edit',
+    'organization.deleteRole': 'Delete',
+    'organization.noCustomRoles': 'This organization has no roles of its own yet.',
+    'impersonation.banner': 'You are signed in as {name} on someone else\'s behalf.',
+    'impersonation.returnToAdmin': 'Return to admin',
+    'impersonation.end': 'End impersonation',
     'error.generic': 'Something went wrong. Please try again.',
     'error.network': 'We could not reach the server. Check your connection.',
     // Server errors, by the stable `reason` the Frontend API sends. Shown instead

package/dist/index.d.ts

@@ -16,7 +16,7 @@ export * from './i18n';
 export * from './types';
 export * from './fapi';
 export { ATLAS_KEY, initAtlas, createAtlasClient, useAtlas, type AuthStatus, type AtlasInitOptions, type AtlasStores, type AtlasClient, } from './context';
-export { getUser, getSession, getAuth, getOrganization, getToken, signIn, signUp, signOut, type UseUser, type UseSession, type UseAuth, type UseOrganization, type FlowController, } from './accessors';
+export { getUser, getSession, getAuth, getOrganization, getOrganizationAuditLog, getToken, signIn, signUp, signOut, type UseUser, type UseSession, type UseAuth, type UseOrganization, type OrganizationAuditLogStore, type FlowController, } from './accessors';
 export { default as AtlasProvider } from './components/AtlasProvider.svelte';
 export { default as SignedIn } from './components/SignedIn.svelte';
 export { default as SignedOut } from './components/SignedOut.svelte';
@@ -29,6 +29,9 @@ export { default as UserButton } from './components/UserButton.svelte';
 export { default as UserProfile } from './components/UserProfile.svelte';
 export { default as OrganizationSwitcher } from './components/OrganizationSwitcher.svelte';
 export { default as OrganizationProfile } from './components/OrganizationProfile.svelte';
+export { default as OrganizationAuditLog } from './components/OrganizationAuditLog.svelte';
+export type { OrganizationAuditLogEntry, OrganizationAuditLogState } from '@atlasauth/js';
+export { default as ImpersonationBanner } from './components/ImpersonationBanner.svelte';
 export type { InstanceSettings, EmailDelivery, PublicSignUpField, CaptchaController, CaptchaFlowKey, CaptchaWidgetMode, FlowCaptcha, } from '@atlasauth/js';
 export { SignOutError } from '@atlasauth/js';
 export type { SignOutOptions, SignOutResult } from '@atlasauth/js';

package/dist/index.js

@@ -19,7 +19,7 @@ export * from './fapi';
 // The client, context install, and the base accessor.
 export { ATLAS_KEY, initAtlas, createAtlasClient, useAtlas, } from './context';
 // Store accessors (peers of the React hooks) and action helpers.
-export { getUser, getSession, getAuth, getOrganization, getToken, signIn, signUp, signOut, } from './accessors';
+export { getUser, getSession, getAuth, getOrganization, getOrganizationAuditLog, getToken, signIn, signUp, signOut, } from './accessors';
 // Components.
 export { default as AtlasProvider } from './components/AtlasProvider.svelte';
 export { default as SignedIn } from './components/SignedIn.svelte';
@@ -33,6 +33,8 @@ export { default as UserButton } from './components/UserButton.svelte';
 export { default as UserProfile } from './components/UserProfile.svelte';
 export { default as OrganizationSwitcher } from './components/OrganizationSwitcher.svelte';
 export { default as OrganizationProfile } from './components/OrganizationProfile.svelte';
+export { default as OrganizationAuditLog } from './components/OrganizationAuditLog.svelte';
+export { default as ImpersonationBanner } from './components/ImpersonationBanner.svelte';
 // What `signOut()` resolves with, and what it rejects with under `{ strict: true }`.
 export { SignOutError } from '@atlasauth/js';
 // `onSignOut({ reason })` event types + the `atlas:signout` window event; this SDK's version.

package/dist/types.d.ts

@@ -39,4 +39,10 @@ export interface AtlasSession {
     id: string;
     status: string;
     last_active_organization_id: string | null;
+    /** On an impersonation session: who is acting (the token's `act` claim). */
+    actor?: {
+        sub: string;
+    } | null;
+    /** On an impersonation session: the impersonator's own session that "return to admin" resumes, or null. */
+    actor_session_id?: string | null;
 }

package/dist/version.d.ts

@@ -1,4 +1,4 @@
 import type { AtlasSdkInfo } from '@atlasauth/js';
 /** This package's version, sent as `X-Atlas-SDK` (kept in step with package.json by a test). */
-export declare const ATLAS_SVELTE_VERSION = "0.8.0";
+export declare const ATLAS_SVELTE_VERSION = "0.9.0";
 export declare const ATLAS_SVELTE_SDK: AtlasSdkInfo;

package/dist/version.js

@@ -1,3 +1,3 @@
 /** This package's version, sent as `X-Atlas-SDK` (kept in step with package.json by a test). */
-export const ATLAS_SVELTE_VERSION = '0.8.0';
+export const ATLAS_SVELTE_VERSION = '0.9.0';
 export const ATLAS_SVELTE_SDK = { name: '@atlasauth/svelte', version: ATLAS_SVELTE_VERSION };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/svelte",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "type": "module",
   "svelte": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -23,9 +23,9 @@
   },
   "dependencies": {
     "@atlasauth/design": "0.2.0",
-    "@atlasauth/backend": "0.14.0",
-    "@atlasauth/authz": "0.1.1",
-    "@atlasauth/js": "0.15.0"
+    "@atlasauth/authz": "0.2.0",
+    "@atlasauth/backend": "0.15.0",
+    "@atlasauth/js": "0.16.0"
   },
   "peerDependencies": {
     "svelte": ">=4",