@auth-link/web 2.0.0 → 3.0.0

package/dist/types/core.d.ts

@@ -1,42 +1,8 @@
-import type { AuthLinkClient, DisplayCode, Events, Mode, Snapshot, Ticket } from './types.js';
+import type { BindingTicket } from './types.js';
 export declare class AuthLinkError extends Error {
     readonly code: string;
     constructor(code: string);
 }
-export declare function validateDisplayCode(value: unknown): DisplayCode;
-export declare function validateTicket(value: unknown, expectedMode?: Mode, trustedOrigin?: string): Ticket;
-export declare function qrImage(ticket: Ticket): string;
-export interface ClientOptions {
-    /** Application backend URL, never the AuthLink tenant API. Defaults to /api/authlink. */
-    baseUrl?: string;
-    /** Explicit extra backend origins, e.g. https://api.example.com (no path or wildcard). */
-    allowedBackendOrigins?: readonly string[];
-    /** Defaults to same-origin, or omit when accessToken is provided. */
-    credentials?: RequestCredentials;
-    /** Required for cookie/session authentication, including mixed cookie + Bearer mode. */
-    csrfToken?: () => string | Promise<string>;
-    /** Defaults to X-CSRF-Token; adapt this to your backend framework. */
-    csrfHeaderName?: string;
-    /** Current website login token, read on each request. Never an AuthLink tenant key. */
-    accessToken?: () => string | Promise<string>;
-    /** Extra headers. SDK-controlled authentication and protocol headers cannot be replaced. */
-    headers?: HeadersInit | (() => HeadersInit | Promise<HeadersInit>);
-    authLinkOrigin?: string;
-    fetch?: typeof fetch;
-}
-export declare function createBackendCall(options: ClientOptions): (path: string, body: unknown, signal?: AbortSignal, key?: string) => Promise<unknown>;
-export declare function createAuthLinkClient(options: ClientOptions): AuthLinkClient;
-export declare function requestKey(): string;
-export declare function initialSnapshot(): Snapshot;
-export interface ObserveOptions extends Events {
-    onReady?: (submit: (confirmationCode: string) => Promise<void>) => void;
-    /** Presentation-only timing from the same monotonic clock as code expiry. */
-    onCodeTiming?: (remainingMs: number) => void;
-    expectedMode?: Mode;
-    client: AuthLinkClient;
-    signal: AbortSignal;
-    intervalMs?: number;
-    onUpdate: (value: Snapshot) => void;
-}
-/** Observe a request CREATED BY your backend. Mounting widgets never creates requests. */
-export declare function observeRequest(input: Ticket, options: ObserveOptions): Promise<void>;
+export declare function deadline(value: string): number;
+/** Public QR validation and local rendering only; no network requests. */
+export declare function bindingImage(ticket: BindingTicket, expectedOrigin?: string): string;

package/dist/types/index.d.ts

@@ -1,8 +1,4 @@
-export * from './types.js';
-export { AuthLinkError, createAuthLinkClient, requestKey, validateTicket, qrImage, observeRequest, initialSnapshot } from './core.js';
+export type { Locale, Submit, SubmitContext, VerifyOptions, BindOptions, BindingTicket, AuthLinkModal } from './types.js';
+export { AuthLinkError } from './core.js';
 export { supportedLocales } from './i18n.js';
-export { openAuthLink, openAuthLinkBind, openAuthLinkConfirm } from './modal.js';
-export type { AuthLinkModal, AuthLinkModalOptions } from './modal.js';
-export type { ClientOptions } from './core.js';
-export { openPasscode, createPasscodeClient } from './passcode.js';
-export type { OTPVerification, PasscodeClient, PasscodeOptions } from './passcode.js';
+export { openBind, openVerify } from './modal.js';

package/dist/types/modal.d.ts

@@ -1,19 +1,3 @@
-import type { ViewNode } from './view.js';
-import type { Locale, WidgetOptions } from './types.js';
-export interface AuthLinkModalOptions extends WidgetOptions {
-    className?: string;
-    onClose?: () => void;
-}
-export interface AuthLinkModal {
-    /** Close the UI and abort observation. Does not reject or delete the server request. */
-    close(): void;
-    /** Component cleanup: close without delivering a user-close callback. */
-    destroy(): void;
-    setLocale(locale?: Locale): void;
-    retry(): void;
-}
-export declare function element(value: ViewNode | string, svg?: boolean): Node;
-/** Show a backend-created request. This function never creates or authorizes a request. */
-export declare function openAuthLink(options: AuthLinkModalOptions): AuthLinkModal;
-export declare const openAuthLinkBind: (options: AuthLinkModalOptions) => AuthLinkModal;
-export declare const openAuthLinkConfirm: (options: AuthLinkModalOptions) => AuthLinkModal;
+import type { AuthLinkModal, BindOptions, VerifyOptions } from './types.js';
+export declare const openVerify: (options: VerifyOptions) => AuthLinkModal;
+export declare const openBind: (options: BindOptions) => AuthLinkModal;

package/dist/types/react.d.ts

@@ -1,15 +1,4 @@
-import type { Snapshot, WidgetOptions } from './types.js';
-import type { AuthLinkModalOptions } from './modal.js';
-import type { PasscodeOptions } from './passcode.js';
-export type { PasscodeOptions, PasscodeClient, OTPVerification } from './passcode.js';
-export declare function AuthLinkPasscode(props: PasscodeOptions): null;
-export type { Ticket, Confirmation, Rejection, Snapshot, AuthLinkClient, Locale } from './types.js';
-export declare function useAuthLink(options: WidgetOptions): {
-    snapshot: Snapshot;
-    retry: () => void;
-    submitCode: (code: string) => Promise<void>;
-};
-export interface AuthLinkWidgetProps extends AuthLinkModalOptions {
-}
-export declare function AuthLinkBind(props: AuthLinkWidgetProps): import("react").JSX.Element;
-export declare function AuthLinkConfirm(props: AuthLinkWidgetProps): import("react").JSX.Element;
+import type { BindOptions, VerifyOptions } from './types.js';
+export type { BindOptions, VerifyOptions, Submit, SubmitContext, Locale } from './types.js';
+export declare function AuthLinkVerify(props: VerifyOptions): import("react").JSX.Element;
+export declare function AuthLinkBind(props: BindOptions): import("react").JSX.Element;

package/dist/types/types.d.ts

@@ -1,69 +1,45 @@
-export type Mode = 'bind' | 'confirm';
-export type Status = 'idle' | 'pending' | 'confirmed' | 'rejected' | 'expired' | 'error';
 export type Locale = 'en' | 'zh-CN' | 'zh-TW' | 'ja' | 'bn' | 'es' | 'fil' | 'hi' | 'id' | 'ms' | 'pt' | 'th' | 'vi';
-/** Current display only. The generation secret must never reach the browser. */
-export interface DisplayCode {
-    value: string;
-    serverTime: string;
-    validUntil: string;
-    periodSeconds: 30;
+export type Status = 'pending' | 'confirmed' | 'expired' | 'error';
+export interface SubmitContext {
+    signal: AbortSignal;
+}
+/** Resolve only after the CMS has verified and committed its operation.
+ * Throw on HTTP OR business failure. No AuthLink receipt is required here. */
+export type Submit = (passcode: string, context: SubmitContext) => Promise<void>;
+export interface VerifyOptions {
+    submit: Submit;
+    /** Optional CMS action deadline, NOT the App code lifetime. */
+    expiresAt?: string;
+    locale?: Locale;
+    onSuccess?: () => void | Promise<void>;
+    onClose?: () => void;
+    onExpired?: () => void | Promise<void>;
+    onError?: (error: Error) => void;
 }
-export interface Ticket {
-    requestId: string;
-    purpose: Mode;
+export interface BindingTicket {
+    /** CMS-returned QR payload, not an image URL. */
     qr: string;
-    pairingCode: string;
+    /** Original server deadline; at most 60 minutes from creation. */
     expiresAt: string;
-    displayCode?: DisplayCode;
-}
-export interface Confirmation {
-    status: 'confirmed';
-    requestId: string;
-    verificationId: string;
-    authenticationPolicy: 'device-presence.v1';
-    purpose: Mode;
-    expiresAt: string;
-}
-/** Business result delivered when the phone rejects a request. Not an HTTP status. */
-export interface Rejection {
-    status: 'rejected';
-    code: 'REJECTED';
-    requestId: string;
-    purpose: Mode;
 }
-export interface PendingResult {
-    status: 'new' | 'pending' | 'approved' | 'consumed' | 'rejected' | 'expired';
-    requestId: string;
-    displayCode?: DisplayCode;
-}
-export type Result = Confirmation | PendingResult;
-export interface AuthLinkClient {
-    create(mode: Mode, options: {
-        idempotencyKey: string;
-        signal?: AbortSignal;
-    }): Promise<Ticket>;
-    result(ticket: Ticket, signal: AbortSignal, confirmationCode?: string): Promise<Result>;
+export interface BindOptions extends Omit<VerifyOptions, 'expiresAt'>, BindingTicket {
+    /** Expected AuthLink API origin. Never a CMS backend URL. */
+    authLinkOrigin?: string;
+    /** Explicit user refresh only; no automatic QR creation. */
+    onRefresh?: (context: SubmitContext) => Promise<BindingTicket>;
+}
+export interface AuthLinkModal {
+    /** Abort browser work; does not roll back CMS operations. */
+    close(): void;
+    /** Unmount without onClose. */
+    destroy(): void;
+    setLocale(locale?: Locale): void;
+    /** Clear errors without submitting or making requests. */
+    retry(): void;
 }
 export interface Snapshot {
     status: Status;
-    submitting?: boolean;
-    code: string | null;
-    secondsRemaining: number;
-    codeSecondsRemaining: number;
+    submitting: boolean;
+    secondsRemaining?: number;
     error: Error | null;
 }
-export interface Events {
-    onConfirmed?: (result: Confirmation) => void | Promise<void>;
-    onRejected?: (result: Rejection) => void | Promise<void>;
-    onExpired?: () => void | Promise<void>;
-    onError?: (error: Error) => void;
-}
-export interface WidgetOptions extends Events {
-    mode?: Mode;
-    ticket: Ticket;
-    client: AuthLinkClient;
-    locale?: Locale;
-    showQr?: boolean;
-    intervalMs?: number;
-    onRefresh?: () => void;
-}

package/dist/types/view.d.ts

@@ -1,20 +1,16 @@
-import type { Locale, Mode, Snapshot } from './types.js';
+import type { Locale, Snapshot } from './types.js';
 export interface ViewNode {
     tag: string;
     props: Record<string, unknown>;
     children: (ViewNode | string)[];
 }
 export declare function widgetView(options: {
-    mode: Mode;
+    mode: 'bind' | 'confirm';
     locale?: Locale;
     snapshot: Snapshot;
-    passcodeMode?: boolean;
     qr?: string;
-    showQr?: boolean;
-    submitCode?: (code: string) => Promise<void>;
-    inputCode?: string;
-    setCode?: (code: string) => void;
-    retry: () => void;
-    refresh?: () => void;
-    className?: string;
+    inputCode: string;
+    setCode: (code: string) => void;
+    submitCode: (code: string) => Promise<void>;
+    refresh?: () => Promise<void>;
 }): ViewNode;

package/dist/types/vue.d.ts

@@ -1,16 +1,5 @@
-import type { DefineComponent, ShallowRef } from 'vue';
-import type { Snapshot, WidgetOptions } from './types.js';
-import type { AuthLinkModalOptions } from './modal.js';
-import type { PasscodeOptions } from './passcode.js';
-export type { PasscodeOptions, PasscodeClient, OTPVerification } from './passcode.js';
-export declare const AuthLinkPasscode: DefineComponent<PasscodeOptions>;
-export type { Ticket, Confirmation, Rejection, Snapshot, AuthLinkClient, Locale } from './types.js';
-export declare function useAuthLink(getOptions: () => WidgetOptions): {
-    snapshot: ShallowRef<Snapshot>;
-    retry: () => void;
-    submitCode: (code: string) => Promise<void>;
-};
-export interface AuthLinkWidgetProps extends Omit<AuthLinkModalOptions, 'mode'> {
-}
-export declare const AuthLinkBind: DefineComponent<AuthLinkWidgetProps>;
-export declare const AuthLinkConfirm: DefineComponent<AuthLinkWidgetProps>;
+import type { DefineComponent } from 'vue';
+import type { BindOptions, VerifyOptions } from './types.js';
+export type { BindOptions, VerifyOptions, Submit, SubmitContext, Locale } from './types.js';
+export declare const AuthLinkVerify: DefineComponent<VerifyOptions>;
+export declare const AuthLinkBind: DefineComponent<BindOptions>;