@authowl/react 0.18.9 → 0.18.10

package/README.md

@@ -71,7 +71,7 @@ When the server selects an Akedly Shield V1.2 route, these components fetch a fr
 challenge and complete its proof-of-work and optional Turnstile ceremony automatically.
 Provider API keys and pipeline credentials remain server-side. Custom phone UIs can call
 `phoneOtp.prepare()` and `solvePhoneOtpChallenge()` to implement the same guarded flow.
-See the [complete headless and retry guide](https://github.com/mstfash/authowl-sdk/blob/main/docs/phone-otp.md).
+See the [complete headless and retry guide](https://github.com/authowl/authowl-sdk/blob/main/docs/phone-otp.md).
 
 `@akedly/shield` is installed with `@authowl/core` so every consumer bundler can
 resolve the integration safely. It remains behind a dynamic import, so its

package/dist/index.cjs

@@ -648,7 +648,7 @@ function resolveSignInMethods(config, pageHost) {
   const username = capabilities.usernameSignIn;
   const magicLink = capabilities.magicLinkSignIn;
   const emailOtp = capabilities.emailOtpSignIn && !capabilities.totp && !capabilities.mfaRequired;
-  const phoneOtp = capabilities.phoneSignIn;
+  const phoneOtp = capabilities.phoneSignIn && !capabilities.mfaRequired;
   const passkey = capabilities.passkeySignIn && passkeyReachableFrom(
     config?.authBaseUrl,
     pageHost,
@@ -3328,7 +3328,12 @@ function LegalConsentCheckbox({
 
 // src/components/PhoneOTP.tsx
 var import_jsx_runtime19 = require("react/jsx-runtime");
-function PhoneOTP({ redirectTo, onSignedIn, onBack }) {
+function PhoneOTP({
+  redirectTo,
+  onSignedIn,
+  onBack,
+  onMfaPasswordRequired
+}) {
   const t = useT();
   const { sessionStore } = useAuthClient();
   const { config, isLoading } = usePublicConfig();
@@ -3395,6 +3400,12 @@ function PhoneOTP({ redirectTo, onSignedIn, onBack }) {
             }),
             {
               failure: t("phoneOtp.error.invalidCode"),
+              mapError: (authError) => {
+                if (authError.code === "TWO_FACTOR_REQUIRED") {
+                  onMfaPasswordRequired?.();
+                }
+                return null;
+              },
               onSuccess: () => finishSignIn({ sessionStore, redirectTo, onSignedIn })
             }
           );
@@ -3732,7 +3743,12 @@ function SignIn({
         {
           redirectTo,
           onSignedIn,
-          onBack: () => setView("sign-in")
+          onBack: () => setView("sign-in"),
+          onMfaPasswordRequired: () => {
+            setView("sign-in");
+            setError(t("serverError.TWO_FACTOR_REQUIRED"));
+            requestAnimationFrame(() => emailRef.current?.focus());
+          }
         }
       ),
       badge

package/dist/index.d.cts

@@ -353,9 +353,11 @@ type PhoneOTPProps = {
     onSignedIn?: () => void;
     /** Optional navigation affordance when embedded in another sign-in surface. */
     onBack?: () => void;
+    /** Called when this phone belongs to an account that must use password + MFA. */
+    onMfaPasswordRequired?: () => void;
 };
 /** Egyptian phone sign-in with managed Turnstile, retry-safe send, and code verification. */
-declare function PhoneOTP({ redirectTo, onSignedIn, onBack }: PhoneOTPProps): React.JSX.Element;
+declare function PhoneOTP({ redirectTo, onSignedIn, onBack, onMfaPasswordRequired, }: PhoneOTPProps): React.JSX.Element;
 
 type SignUpProps = {
     redirectTo?: string;

package/dist/index.d.ts

@@ -353,9 +353,11 @@ type PhoneOTPProps = {
     onSignedIn?: () => void;
     /** Optional navigation affordance when embedded in another sign-in surface. */
     onBack?: () => void;
+    /** Called when this phone belongs to an account that must use password + MFA. */
+    onMfaPasswordRequired?: () => void;
 };
 /** Egyptian phone sign-in with managed Turnstile, retry-safe send, and code verification. */
-declare function PhoneOTP({ redirectTo, onSignedIn, onBack }: PhoneOTPProps): React.JSX.Element;
+declare function PhoneOTP({ redirectTo, onSignedIn, onBack, onMfaPasswordRequired, }: PhoneOTPProps): React.JSX.Element;
 
 type SignUpProps = {
     redirectTo?: string;

package/dist/index.js

@@ -567,7 +567,7 @@ function resolveSignInMethods(config, pageHost) {
   const username = capabilities.usernameSignIn;
   const magicLink = capabilities.magicLinkSignIn;
   const emailOtp = capabilities.emailOtpSignIn && !capabilities.totp && !capabilities.mfaRequired;
-  const phoneOtp = capabilities.phoneSignIn;
+  const phoneOtp = capabilities.phoneSignIn && !capabilities.mfaRequired;
   const passkey = capabilities.passkeySignIn && passkeyReachableFrom(
     config?.authBaseUrl,
     pageHost,
@@ -3250,7 +3250,12 @@ function LegalConsentCheckbox({
 
 // src/components/PhoneOTP.tsx
 import { jsx as jsx19, jsxs as jsxs15 } from "react/jsx-runtime";
-function PhoneOTP({ redirectTo, onSignedIn, onBack }) {
+function PhoneOTP({
+  redirectTo,
+  onSignedIn,
+  onBack,
+  onMfaPasswordRequired
+}) {
   const t = useT();
   const { sessionStore } = useAuthClient();
   const { config, isLoading } = usePublicConfig();
@@ -3317,6 +3322,12 @@ function PhoneOTP({ redirectTo, onSignedIn, onBack }) {
             }),
             {
               failure: t("phoneOtp.error.invalidCode"),
+              mapError: (authError) => {
+                if (authError.code === "TWO_FACTOR_REQUIRED") {
+                  onMfaPasswordRequired?.();
+                }
+                return null;
+              },
               onSuccess: () => finishSignIn({ sessionStore, redirectTo, onSignedIn })
             }
           );
@@ -3654,7 +3665,12 @@ function SignIn({
         {
           redirectTo,
           onSignedIn,
-          onBack: () => setView("sign-in")
+          onBack: () => setView("sign-in"),
+          onMfaPasswordRequired: () => {
+            setView("sign-in");
+            setError(t("serverError.TWO_FACTOR_REQUIRED"));
+            requestAnimationFrame(() => emailRef.current?.focus());
+          }
         }
       ),
       badge

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authowl/react",
-  "version": "0.18.9",
+  "version": "0.18.10",
   "description": "React provider, hooks, and drop-in components for AuthOwl, the multi-tenant auth SaaS.",
   "license": "MIT",
   "publishConfig": {
@@ -8,10 +8,10 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/mstfash/authowl-sdk.git",
+    "url": "git+https://github.com/authowl/authowl-sdk.git",
     "directory": "packages/auth-react"
   },
-  "homepage": "https://github.com/mstfash/authowl-sdk#readme",
+  "homepage": "https://authowl.dev",
   "keywords": [
     "authentication",
     "auth",
@@ -47,7 +47,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@authowl/core": "0.15.5"
+    "@authowl/core": "0.15.6"
   },
   "peerDependencies": {
     "react": ">=18",