@authup/client-auth-console 1.0.0-beta.65 → 1.0.0-beta.66

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@authup/client-auth-console",
-    "version": "1.0.0-beta.65",
+    "version": "1.0.0-beta.66",
     "type": "module",
     "license": "AGPL-3.0-only",
     "description": "Authup's auth console: the SSR auth workflow UI (authorize, register, activate, password recovery, logout) rendered by server-core on the IdP origin.",
@@ -25,28 +25,28 @@
         "node": "^22.13.0 || ^23.5.0 || >=24.0.0"
     },
     "dependencies": {
-        "@authup/core-http-kit": "^1.0.0-beta.65"
+        "@authup/core-http-kit": "^1.0.0-beta.66"
     },
     "devDependencies": {
-        "@authup/client-web-kit": "^1.0.0-beta.65",
-        "@authup/client-web-kit-theme": "^1.0.0-beta.65",
-        "@authup/client-web-theme": "^1.0.0-beta.65",
-        "@authup/core-kit": "^1.0.0-beta.65",
-        "@authup/i18n": "^1.0.0-beta.65",
-        "@authup/kit": "^1.0.0-beta.65",
+        "@authup/client-web-kit": "^1.0.0-beta.66",
+        "@authup/client-web-kit-theme": "^1.0.0-beta.66",
+        "@authup/client-web-theme": "^1.0.0-beta.66",
+        "@authup/core-kit": "^1.0.0-beta.66",
+        "@authup/i18n": "^1.0.0-beta.66",
+        "@authup/kit": "^1.0.0-beta.66",
         "@fontsource/asap": "^5.3.0",
         "@fontsource/nunito": "^5.3.0",
         "@iconify-json/fa6-brands": "^1.2.0",
         "@iconify-json/fa6-solid": "^1.2.0",
-        "@iconify/vue": "^5.0.0",
+        "@iconify/vue": "^5.0.2",
         "@ilingo/validup": "^1.2.0",
         "@ilingo/validup-vue": "^1.2.0",
         "@ilingo/vue": "^6.1.0",
         "@nuxt/icon": "^2.5.1",
         "@tailwindcss/vite": "^4.3.3",
         "@validup/vue": "^2.0.1",
-        "@vitejs/plugin-vue": "^6.0.8",
-        "@vue/test-utils": "^2.5.0",
+        "@vitejs/plugin-vue": "^6.0.9",
+        "@vue/test-utils": "^2.5.1",
         "@vuecs/button": "^1.4.1",
         "@vuecs/core": "^3.5.0",
         "@vuecs/countdown": "^2.1.0",
@@ -66,12 +66,12 @@
         "@vuecs/theme-tailwind": "^6.4.2",
         "@vuecs/timeago": "^2.2.0",
         "cross-env": "^10.1.0",
-        "happy-dom": "^20.14.0",
+        "happy-dom": "^20.14.5",
         "pinia": "^4.0.3",
         "tailwindcss": "^4.3.1",
-        "vite": "^8.2.2",
+        "vite": "^8.3.0",
         "vitest": "^4.0.14",
-        "vue": "^3.5.42",
+        "vue": "^3.5.43",
         "vue-router": "^5.3.1",
         "vue-tsc": "^3.3.11"
     },

package/src/contract.ts

@@ -29,11 +29,23 @@ import type { IClient } from '@authup/core-http-kit';
  * against an older contract would otherwise fail per request on
  * `/authorize` rather than at boot with an actionable message.
  */
-export const CONTRACT_VERSION = 3;
+export const CONTRACT_VERSION = 5;
 
 /*
  * History:
  *
+ * 5 - the `/device` payload carries `federatedLogin: { providerId }` and the
+ *     page has to complete it the way `/authorize` does (version 3), then
+ *     return to the code step (#3589). The provider buttons live in the kit,
+ *     so a package built on the new kit whose own page ignores the field
+ *     sends the person code, login, provider and back to the code in a loop,
+ *     with the provider's code spent each time.
+ *
+ * 4 - the host renders `/device` (the RFC 8628 device verification page,
+ *     plan 065) with a payload of `{ features, userCode? }`; a bundle built
+ *     against 3 answers an empty `<div id="app">` for every device
+ *     verification with no error anywhere, the version-2 precedent.
+ *
  * 3 - the `/authorize` payload carries `federatedLogin: { providerId }` and
  *     the page has to complete it with a payload-less, same-origin
  *     `POST /identity-providers/:id/login-complete`. The pending login rides