@authowl/react 0.18.0 → 0.18.2

package/dist/index.d.cts

@@ -311,12 +311,9 @@ type SignInPlan = {
  * passkeys inline. One place owns the token string.
  */
 declare function emailAutocomplete(isPasskeyHost: boolean): string;
-/**
- * Resolve the sign-in surfaces from a project's public config. On a config error
- * (`config` null) fall back to password - the safe default that always renders -
- * rather than showing nothing.
- */
-declare function resolveSignInMethods(config: PublicConfig | null): SignInPlan;
+declare function resolveSignInMethods(config: PublicConfig | null, 
+/** The hostname the form is rendering on; omit when it is not knowable. */
+pageHost?: string): SignInPlan;
 
 type SignInProps = {
     redirectTo?: string;
@@ -432,10 +429,13 @@ type MFARequiredGateProps = {
  * gate only wraps protected content, they re-sign-in into another pending
  * session without ever seeing enrolment.
  *
- * Before showing enrolment it CONFIRMS with an uncached session read: the
- * cookie-cached pending flag can be stale-true for up to 5 minutes after
- * another device completed enrolment, and re-running enrolment would
- * regenerate the user's TOTP secret.
+ * NOT REQUIRED for a client-rendered <SignIn/>: that component now finishes
+ * enrolment in place, so a project can turn required MFA on without every app
+ * having to adopt this gate first. The gate still matters for server-redirect
+ * layouts and for apps that reach protected content by another route.
+ *
+ * The stale-flag confirmation both surfaces depend on lives in
+ * `useConfirmedMfaPending`.
  */
 declare function MFARequiredGate({ children, title }: MFARequiredGateProps): React.JSX.Element | null;
 

package/dist/index.d.ts

@@ -311,12 +311,9 @@ type SignInPlan = {
  * passkeys inline. One place owns the token string.
  */
 declare function emailAutocomplete(isPasskeyHost: boolean): string;
-/**
- * Resolve the sign-in surfaces from a project's public config. On a config error
- * (`config` null) fall back to password - the safe default that always renders -
- * rather than showing nothing.
- */
-declare function resolveSignInMethods(config: PublicConfig | null): SignInPlan;
+declare function resolveSignInMethods(config: PublicConfig | null, 
+/** The hostname the form is rendering on; omit when it is not knowable. */
+pageHost?: string): SignInPlan;
 
 type SignInProps = {
     redirectTo?: string;
@@ -432,10 +429,13 @@ type MFARequiredGateProps = {
  * gate only wraps protected content, they re-sign-in into another pending
  * session without ever seeing enrolment.
  *
- * Before showing enrolment it CONFIRMS with an uncached session read: the
- * cookie-cached pending flag can be stale-true for up to 5 minutes after
- * another device completed enrolment, and re-running enrolment would
- * regenerate the user's TOTP secret.
+ * NOT REQUIRED for a client-rendered <SignIn/>: that component now finishes
+ * enrolment in place, so a project can turn required MFA on without every app
+ * having to adopt this gate first. The gate still matters for server-redirect
+ * layouts and for apps that reach protected content by another route.
+ *
+ * The stale-flag confirmation both surfaces depend on lives in
+ * `useConfirmedMfaPending`.
  */
 declare function MFARequiredGate({ children, title }: MFARequiredGateProps): React.JSX.Element | null;