@authowl/react 0.24.1 → 0.24.3

package/dist/index.cjs

@@ -5239,11 +5239,22 @@ init_FormError();
 var import_jsx_runtime13 = require("react/jsx-runtime");
 function MFAChallenge({ onVerified, allowTrustDevice = true }) {
   const t = useT();
+  const { config } = usePublicConfig();
   const { verifyTotp, verifyBackupCode, sendOtp, verifyOtp } = useMFA();
   const { pending, error, setError, run } = useSubmitAction();
   const [mode, setMode] = React12.useState("totp");
   const [code, setCode] = React12.useState("");
   const [trustDevice, setTrustDevice] = React12.useState(false);
+  const canTrustDevice = allowTrustDevice && (config?.mfa?.trustDevice ?? true);
+  const canUseEmailOtp = config?.mfa?.emailOtpFallback ?? true;
+  React12.useEffect(() => {
+    if (!canTrustDevice) setTrustDevice(false);
+    if (!canUseEmailOtp && mode === "otp") {
+      setMode("totp");
+      setCode("");
+      setError(null);
+    }
+  }, [canTrustDevice, canUseEmailOtp, mode, setError]);
   const switchMode = (next) => {
     setMode(next);
     setCode("");
@@ -5287,7 +5298,7 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
         }
       )
     ] }),
-    mode !== "backup" && allowTrustDevice && /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("label", { className: "ba-consent ba-consent-centered", children: [
+    mode !== "backup" && canTrustDevice && /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("label", { className: "ba-consent ba-consent-centered", children: [
       /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("span", { className: "ba-checkbox-control", children: [
         /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("input", { className: "ba-checkbox", type: "checkbox", checked: trustDevice, onChange: (e) => setTrustDevice(e.target.checked) }),
         /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("span", { className: "ba-checkbox-check" }) })
@@ -5298,7 +5309,7 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
     /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.challenge.submit") }) }),
     mode !== "totp" && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("totp"), children: t("mfa.challenge.useTotp") }),
     mode !== "backup" && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("backup"), children: t("mfa.challenge.useBackup") }),
-    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") })
+    canUseEmailOtp && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") })
   ] });
 }
 

package/dist/index.d.cts

@@ -676,7 +676,10 @@ declare function MFAEnrollment({ onEnrolled, title }: MFAEnrollmentProps): React
 type MFAChallengeProps = {
     /** Called once the challenge clears and a session is issued. */
     onVerified?: () => void | Promise<void>;
-    /** Show the "trust this device for 30 days" option on the TOTP step (default true). */
+    /**
+     * Allow the "trust this device" option when the project's posture permits it.
+     * The server capability always wins over this presentation override.
+     */
     allowTrustDevice?: boolean;
 };
 /**

package/dist/index.d.ts

@@ -676,7 +676,10 @@ declare function MFAEnrollment({ onEnrolled, title }: MFAEnrollmentProps): React
 type MFAChallengeProps = {
     /** Called once the challenge clears and a session is issued. */
     onVerified?: () => void | Promise<void>;
-    /** Show the "trust this device for 30 days" option on the TOTP step (default true). */
+    /**
+     * Allow the "trust this device" option when the project's posture permits it.
+     * The server capability always wins over this presentation override.
+     */
     allowTrustDevice?: boolean;
 };
 /**

package/dist/index.js

@@ -622,11 +622,22 @@ import * as React5 from "react";
 import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 function MFAChallenge({ onVerified, allowTrustDevice = true }) {
   const t = useT();
+  const { config } = usePublicConfig();
   const { verifyTotp, verifyBackupCode, sendOtp, verifyOtp } = useMFA();
   const { pending, error, setError, run } = useSubmitAction();
   const [mode, setMode] = React5.useState("totp");
   const [code, setCode] = React5.useState("");
   const [trustDevice, setTrustDevice] = React5.useState(false);
+  const canTrustDevice = allowTrustDevice && (config?.mfa?.trustDevice ?? true);
+  const canUseEmailOtp = config?.mfa?.emailOtpFallback ?? true;
+  React5.useEffect(() => {
+    if (!canTrustDevice) setTrustDevice(false);
+    if (!canUseEmailOtp && mode === "otp") {
+      setMode("totp");
+      setCode("");
+      setError(null);
+    }
+  }, [canTrustDevice, canUseEmailOtp, mode, setError]);
   const switchMode = (next) => {
     setMode(next);
     setCode("");
@@ -670,7 +681,7 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
         }
       )
     ] }),
-    mode !== "backup" && allowTrustDevice && /* @__PURE__ */ jsxs7("label", { className: "ba-consent ba-consent-centered", children: [
+    mode !== "backup" && canTrustDevice && /* @__PURE__ */ jsxs7("label", { className: "ba-consent ba-consent-centered", children: [
       /* @__PURE__ */ jsxs7("span", { className: "ba-checkbox-control", children: [
         /* @__PURE__ */ jsx7("input", { className: "ba-checkbox", type: "checkbox", checked: trustDevice, onChange: (e) => setTrustDevice(e.target.checked) }),
         /* @__PURE__ */ jsx7("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ jsx7("span", { className: "ba-checkbox-check" }) })
@@ -681,7 +692,7 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
     /* @__PURE__ */ jsx7("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx7(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.challenge.submit") }) }),
     mode !== "totp" && /* @__PURE__ */ jsx7("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("totp"), children: t("mfa.challenge.useTotp") }),
     mode !== "backup" && /* @__PURE__ */ jsx7("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("backup"), children: t("mfa.challenge.useBackup") }),
-    /* @__PURE__ */ jsx7("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") })
+    canUseEmailOtp && /* @__PURE__ */ jsx7("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") })
   ] });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authowl/react",
-  "version": "0.24.1",
+  "version": "0.24.3",
   "description": "React provider, hooks, and drop-in components for AuthOwl, the multi-tenant auth SaaS.",
   "license": "MIT",
   "publishConfig": {
@@ -47,7 +47,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@authowl/core": "0.21.1"
+    "@authowl/core": "0.22.1"
   },
   "peerDependencies": {
     "react": ">=18",