@backstage/plugin-auth 0.1.8-next.1 → 0.1.8-next.2

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @backstage/plugin-auth
 
+## 0.1.8-next.2
+
+### Patch Changes
+
+- 4f62755: Improved the OAuth consent dialog for MCP authorization by showing more client details, including the client metadata host for CIMD clients, the metadata URL, callback URL, and requested scopes.
+- Updated dependencies
+  - @backstage/ui@0.15.0-next.3
+
 ## 0.1.8-next.1
 
 ### Patch Changes

package/dist/components/ConsentPage/ConsentPage.esm.js

@@ -10,6 +10,13 @@ const ConsentPageLayout = ({ children }) => /* @__PURE__ */ jsxs(FullPage, { chi
   /* @__PURE__ */ jsx(VisuallyHidden, { children: /* @__PURE__ */ jsx("h1", { children: "Authorization" }) }),
   /* @__PURE__ */ jsx(Container, { py: "8", children })
 ] });
+function getUrlHostname(value) {
+  try {
+    return new URL(value).host;
+  } catch {
+    return void 0;
+  }
+}
 const ConsentPage = () => {
   const { sessionId } = useParams();
   const { state, handleAction } = useConsentSession({ sessionId });
@@ -72,6 +79,8 @@ const ConsentPage = () => {
   const session = state.session;
   const isSubmitting = state.status === "submitting";
   const appName = session.clientName ?? session.clientId;
+  const metadataHost = getUrlHostname(session.clientId);
+  const trustMessage = metadataHost ? "Make sure you trust this application and recognize the client metadata host and callback URL above. Only authorize applications you trust." : "Make sure you trust this application and recognize the callback URL above. Only authorize applications you trust.";
   return /* @__PURE__ */ jsx(ConsentPageLayout, { children: /* @__PURE__ */ jsxs(Card, { className: styles.card, children: [
     /* @__PURE__ */ jsx(CardBody, { children: /* @__PURE__ */ jsxs(Flex, { direction: "column", gap: "4", children: [
       /* @__PURE__ */ jsxs(Box, { className: styles.appHeader, children: [
@@ -96,11 +105,30 @@ const ConsentPage = () => {
             "By authorizing this application, you are granting it access to your ",
             appTitle,
             " account. The application will receive an access token that allows it to act on your behalf.",
-            /* @__PURE__ */ jsx("div", { className: styles.callbackUrl, children: session.redirectUri })
+            /* @__PURE__ */ jsxs("dl", { className: styles.clientDetails, children: [
+              metadataHost && /* @__PURE__ */ jsxs(Fragment, { children: [
+                /* @__PURE__ */ jsxs("div", { className: styles.clientDetail, children: [
+                  /* @__PURE__ */ jsx("dt", { children: "Client metadata host" }),
+                  /* @__PURE__ */ jsx("dd", { children: metadataHost })
+                ] }),
+                /* @__PURE__ */ jsxs("div", { className: styles.clientDetail, children: [
+                  /* @__PURE__ */ jsx("dt", { children: "Client metadata URL" }),
+                  /* @__PURE__ */ jsx("dd", { className: styles.monospaceValue, children: session.clientId })
+                ] })
+              ] }),
+              /* @__PURE__ */ jsxs("div", { className: styles.clientDetail, children: [
+                /* @__PURE__ */ jsx("dt", { children: "Callback URL" }),
+                /* @__PURE__ */ jsx("dd", { className: styles.monospaceValue, children: session.redirectUri })
+              ] }),
+              session.scope && /* @__PURE__ */ jsxs("div", { className: styles.clientDetail, children: [
+                /* @__PURE__ */ jsx("dt", { children: "Requested scopes" }),
+                /* @__PURE__ */ jsx("dd", { className: styles.monospaceValue, children: session.scope })
+              ] })
+            ] })
           ] })
         }
       ),
-      /* @__PURE__ */ jsx(Text, { variant: "body-small", color: "secondary", children: "Make sure you trust this application and recognize the callback URL above. Only authorize applications you trust." })
+      /* @__PURE__ */ jsx(Text, { variant: "body-small", color: "secondary", children: trustMessage })
     ] }) }),
     /* @__PURE__ */ jsx(CardFooter, { children: /* @__PURE__ */ jsxs(Flex, { justify: "between", gap: "4", children: [
       /* @__PURE__ */ jsx(

package/dist/components/ConsentPage/ConsentPage.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConsentPage.esm.js","sources":["../../../src/components/ConsentPage/ConsentPage.tsx"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { useParams } from 'react-router-dom';\n\nimport {\n  Alert,\n  Box,\n  Button,\n  Card,\n  CardBody,\n  CardFooter,\n  Container,\n  Flex,\n  FullPage,\n  Text,\n  VisuallyHidden,\n} from '@backstage/ui';\nimport {\n  RiAppsLine,\n  RiCheckboxCircleLine,\n  RiCloseCircleLine,\n} from '@remixicon/react';\nimport { useConsentSession } from './useConsentSession';\nimport { configApiRef, useApi } from '@backstage/frontend-plugin-api';\nimport styles from './ConsentPage.module.css';\n\nconst ConsentPageLayout = ({ children }: { children: React.ReactNode }) => (\n  <FullPage>\n    <VisuallyHidden>\n      <h1>Authorization</h1>\n    </VisuallyHidden>\n    <Container py=\"8\">{children}</Container>\n  </FullPage>\n);\n\nexport const ConsentPage = () => {\n  const { sessionId } = useParams<{ sessionId: string }>();\n  const { state, handleAction } = useConsentSession({ sessionId });\n  const configApi = useApi(configApiRef);\n  const appTitle = configApi.getOptionalString('app.title') ?? 'Backstage';\n\n  if (!sessionId) {\n    return (\n      <ConsentPageLayout>\n        <Alert\n          status=\"info\"\n          icon\n          title=\"Invalid Request\"\n          description=\"The consent request ID is missing or invalid.\"\n        />\n      </ConsentPageLayout>\n    );\n  }\n\n  if (state.status === 'loading') {\n    return (\n      <ConsentPageLayout>\n        <Alert loading title=\"Loading authorization request...\" />\n      </ConsentPageLayout>\n    );\n  }\n\n  if (state.status === 'error') {\n    return (\n      <ConsentPageLayout>\n        <Alert\n          status=\"danger\"\n          icon\n          title=\"Authorization Error\"\n          description={state.error}\n        />\n      </ConsentPageLayout>\n    );\n  }\n\n  if (state.status === 'completed') {\n    return (\n      <ConsentPageLayout>\n        <Card className={styles.card}>\n          <CardBody>\n            <Flex\n              direction=\"column\"\n              align=\"center\"\n              gap=\"2\"\n              style={{ textAlign: 'center' }}\n            >\n              {state.action === 'approve' ? (\n                <RiCheckboxCircleLine\n                  size={64}\n                  className={styles.completedIconSuccess}\n                />\n              ) : (\n                <RiCloseCircleLine\n                  size={64}\n                  className={styles.completedIconDanger}\n                />\n              )}\n              <Text as=\"h2\" variant=\"title-small\">\n                {state.action === 'approve'\n                  ? 'Authorization Approved'\n                  : 'Authorization Denied'}\n              </Text>\n              <Text variant=\"body-medium\" color=\"secondary\">\n                {state.action === 'approve'\n                  ? `You have successfully authorized the application to access your ${appTitle} account.`\n                  : `You have denied the application access to your ${appTitle} account.`}\n              </Text>\n              <Text variant=\"body-small\" color=\"secondary\">\n                Redirecting to the application...\n              </Text>\n            </Flex>\n          </CardBody>\n        </Card>\n      </ConsentPageLayout>\n    );\n  }\n\n  const session = state.session;\n  const isSubmitting = state.status === 'submitting';\n  const appName = session.clientName ?? session.clientId;\n\n  return (\n    <ConsentPageLayout>\n      <Card className={styles.card}>\n        <CardBody>\n          <Flex direction=\"column\" gap=\"4\">\n            <Box className={styles.appHeader}>\n              <RiAppsLine size={40} className={styles.appIcon} />\n              <Flex direction=\"column\" gap=\"0.5\">\n                <Text as=\"span\" variant=\"title-small\" weight=\"bold\">\n                  {appName}\n                </Text>\n                <Text variant=\"body-small\" color=\"secondary\">\n                  wants to access your {appTitle} account\n                </Text>\n              </Flex>\n            </Box>\n\n            <hr className={styles.divider} />\n\n            <Alert\n              status=\"warning\"\n              icon\n              title=\"Security Notice\"\n              description={\n                <>\n                  By authorizing this application, you are granting it access to\n                  your {appTitle} account. The application will receive an\n                  access token that allows it to act on your behalf.\n                  <div className={styles.callbackUrl}>\n                    {session.redirectUri}\n                  </div>\n                </>\n              }\n            />\n\n            <Text variant=\"body-small\" color=\"secondary\">\n              Make sure you trust this application and recognize the callback\n              URL above. Only authorize applications you trust.\n            </Text>\n          </Flex>\n        </CardBody>\n\n        <CardFooter>\n          <Flex justify=\"between\" gap=\"4\">\n            <Button\n              variant=\"secondary\"\n              isDisabled={isSubmitting}\n              onPress={() => handleAction('reject')}\n              iconStart={<RiCloseCircleLine />}\n            >\n              Cancel\n            </Button>\n            <Button\n              variant=\"primary\"\n              isDisabled={isSubmitting}\n              onPress={() => handleAction('approve')}\n              iconStart={<RiCheckboxCircleLine />}\n            >\n              {isSubmitting ? 'Authorizing...' : 'Authorize'}\n            </Button>\n          </Flex>\n        </CardFooter>\n      </Card>\n    </ConsentPageLayout>\n  );\n};\n"],"names":[],"mappings":";;;;;;;;AAuCA,MAAM,oBAAoB,CAAC,EAAE,QAAA,EAAS,0BACnC,QAAA,EAAA,EACC,QAAA,EAAA;AAAA,kBAAA,GAAA,CAAC,cAAA,EAAA,EACC,QAAA,kBAAA,GAAA,CAAC,IAAA,EAAA,EAAG,QAAA,EAAA,eAAA,EAAa,CAAA,EACnB,CAAA;AAAA,kBACA,GAAA,CAAC,SAAA,EAAA,EAAU,EAAA,EAAG,GAAA,EAAK,QAAA,EAAS;AAAA,CAAA,EAC9B,CAAA;AAGK,MAAM,cAAc,MAAM;AAC/B,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,SAAA,EAAiC;AACvD,EAAA,MAAM,EAAE,KAAA,EAAO,YAAA,KAAiB,iBAAA,CAAkB,EAAE,WAAW,CAAA;AAC/D,EAAA,MAAM,SAAA,GAAY,OAAO,YAAY,CAAA;AACrC,EAAA,MAAM,QAAA,GAAW,SAAA,CAAU,iBAAA,CAAkB,WAAW,CAAA,IAAK,WAAA;AAE7D,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,2BACG,iBAAA,EAAA,EACC,QAAA,kBAAA,GAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,MAAA,EAAO,MAAA;AAAA,QACP,IAAA,EAAI,IAAA;AAAA,QACJ,KAAA,EAAM,iBAAA;AAAA,QACN,WAAA,EAAY;AAAA;AAAA,KACd,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,CAAM,WAAW,SAAA,EAAW;AAC9B,IAAA,uBACE,GAAA,CAAC,qBACC,QAAA,kBAAA,GAAA,CAAC,KAAA,EAAA,EAAM,SAAO,IAAA,EAAC,KAAA,EAAM,oCAAmC,CAAA,EAC1D,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,CAAM,WAAW,OAAA,EAAS;AAC5B,IAAA,2BACG,iBAAA,EAAA,EACC,QAAA,kBAAA,GAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,MAAA,EAAO,QAAA;AAAA,QACP,IAAA,EAAI,IAAA;AAAA,QACJ,KAAA,EAAM,qBAAA;AAAA,QACN,aAAa,KAAA,CAAM;AAAA;AAAA,KACrB,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,CAAM,WAAW,WAAA,EAAa;AAChC,IAAA,uBACE,GAAA,CAAC,qBACC,QAAA,kBAAA,GAAA,CAAC,IAAA,EAAA,EAAK,WAAW,MAAA,CAAO,IAAA,EACtB,8BAAC,QAAA,EAAA,EACC,QAAA,kBAAA,IAAA;AAAA,MAAC,IAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAU,QAAA;AAAA,QACV,KAAA,EAAM,QAAA;AAAA,QACN,GAAA,EAAI,GAAA;AAAA,QACJ,KAAA,EAAO,EAAE,SAAA,EAAW,QAAA,EAAS;AAAA,QAE5B,QAAA,EAAA;AAAA,UAAA,KAAA,CAAM,WAAW,SAAA,mBAChB,GAAA;AAAA,YAAC,oBAAA;AAAA,YAAA;AAAA,cACC,IAAA,EAAM,EAAA;AAAA,cACN,WAAW,MAAA,CAAO;AAAA;AAAA,WACpB,mBAEA,GAAA;AAAA,YAAC,iBAAA;AAAA,YAAA;AAAA,cACC,IAAA,EAAM,EAAA;AAAA,cACN,WAAW,MAAA,CAAO;AAAA;AAAA,WACpB;AAAA,0BAEF,GAAA,CAAC,IAAA,EAAA,EAAK,EAAA,EAAG,IAAA,EAAK,OAAA,EAAQ,eACnB,QAAA,EAAA,KAAA,CAAM,MAAA,KAAW,SAAA,GACd,wBAAA,GACA,sBAAA,EACN,CAAA;AAAA,0BACA,GAAA,CAAC,IAAA,EAAA,EAAK,OAAA,EAAQ,aAAA,EAAc,OAAM,WAAA,EAC/B,QAAA,EAAA,KAAA,CAAM,MAAA,KAAW,SAAA,GACd,CAAA,gEAAA,EAAmE,QAAQ,CAAA,SAAA,CAAA,GAC3E,CAAA,+CAAA,EAAkD,QAAQ,CAAA,SAAA,CAAA,EAChE,CAAA;AAAA,8BACC,IAAA,EAAA,EAAK,OAAA,EAAQ,YAAA,EAAa,KAAA,EAAM,aAAY,QAAA,EAAA,mCAAA,EAE7C;AAAA;AAAA;AAAA,KACF,EACF,GACF,CAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,MAAM,UAAU,KAAA,CAAM,OAAA;AACtB,EAAA,MAAM,YAAA,GAAe,MAAM,MAAA,KAAW,YAAA;AACtC,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,UAAA,IAAc,OAAA,CAAQ,QAAA;AAE9C,EAAA,2BACG,iBAAA,EAAA,EACC,QAAA,kBAAA,IAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAW,OAAO,IAAA,EACtB,QAAA,EAAA;AAAA,oBAAA,GAAA,CAAC,YACC,QAAA,kBAAA,IAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAU,QAAA,EAAS,KAAI,GAAA,EAC3B,QAAA,EAAA;AAAA,sBAAA,IAAA,CAAC,GAAA,EAAA,EAAI,SAAA,EAAW,MAAA,CAAO,SAAA,EACrB,QAAA,EAAA;AAAA,wBAAA,GAAA,CAAC,UAAA,EAAA,EAAW,IAAA,EAAM,EAAA,EAAI,SAAA,EAAW,OAAO,OAAA,EAAS,CAAA;AAAA,wBACjD,IAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAU,QAAA,EAAS,KAAI,KAAA,EAC3B,QAAA,EAAA;AAAA,0BAAA,GAAA,CAAC,QAAK,EAAA,EAAG,MAAA,EAAO,SAAQ,aAAA,EAAc,MAAA,EAAO,QAC1C,QAAA,EAAA,OAAA,EACH,CAAA;AAAA,0BACA,IAAA,CAAC,IAAA,EAAA,EAAK,OAAA,EAAQ,YAAA,EAAa,OAAM,WAAA,EAAY,QAAA,EAAA;AAAA,YAAA,uBAAA;AAAA,YACrB,QAAA;AAAA,YAAS;AAAA,WAAA,EACjC;AAAA,SAAA,EACF;AAAA,OAAA,EACF,CAAA;AAAA,sBAEA,GAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAW,MAAA,CAAO,OAAA,EAAS,CAAA;AAAA,sBAE/B,GAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,MAAA,EAAO,SAAA;AAAA,UACP,IAAA,EAAI,IAAA;AAAA,UACJ,KAAA,EAAM,iBAAA;AAAA,UACN,6BACE,IAAA,CAAA,QAAA,EAAA,EAAE,QAAA,EAAA;AAAA,YAAA,sEAAA;AAAA,YAEM,QAAA;AAAA,YAAS,8FAAA;AAAA,gCAEd,KAAA,EAAA,EAAI,SAAA,EAAW,MAAA,CAAO,WAAA,EACpB,kBAAQ,WAAA,EACX;AAAA,WAAA,EACF;AAAA;AAAA,OAEJ;AAAA,0BAEC,IAAA,EAAA,EAAK,OAAA,EAAQ,YAAA,EAAa,KAAA,EAAM,aAAY,QAAA,EAAA,mHAAA,EAG7C;AAAA,KAAA,EACF,CAAA,EACF,CAAA;AAAA,wBAEC,UAAA,EAAA,EACC,QAAA,kBAAA,IAAA,CAAC,QAAK,OAAA,EAAQ,SAAA,EAAU,KAAI,GAAA,EAC1B,QAAA,EAAA;AAAA,sBAAA,GAAA;AAAA,QAAC,MAAA;AAAA,QAAA;AAAA,UACC,OAAA,EAAQ,WAAA;AAAA,UACR,UAAA,EAAY,YAAA;AAAA,UACZ,OAAA,EAAS,MAAM,YAAA,CAAa,QAAQ,CAAA;AAAA,UACpC,SAAA,sBAAY,iBAAA,EAAA,EAAkB,CAAA;AAAA,UAC/B,QAAA,EAAA;AAAA;AAAA,OAED;AAAA,sBACA,GAAA;AAAA,QAAC,MAAA;AAAA,QAAA;AAAA,UACC,OAAA,EAAQ,SAAA;AAAA,UACR,UAAA,EAAY,YAAA;AAAA,UACZ,OAAA,EAAS,MAAM,YAAA,CAAa,SAAS,CAAA;AAAA,UACrC,SAAA,sBAAY,oBAAA,EAAA,EAAqB,CAAA;AAAA,UAEhC,yBAAe,gBAAA,GAAmB;AAAA;AAAA;AACrC,KAAA,EACF,CAAA,EACF;AAAA,GAAA,EACF,CAAA,EACF,CAAA;AAEJ;;;;"}
+{"version":3,"file":"ConsentPage.esm.js","sources":["../../../src/components/ConsentPage/ConsentPage.tsx"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { useParams } from 'react-router-dom';\n\nimport {\n  Alert,\n  Box,\n  Button,\n  Card,\n  CardBody,\n  CardFooter,\n  Container,\n  Flex,\n  FullPage,\n  Text,\n  VisuallyHidden,\n} from '@backstage/ui';\nimport {\n  RiAppsLine,\n  RiCheckboxCircleLine,\n  RiCloseCircleLine,\n} from '@remixicon/react';\nimport { useConsentSession } from './useConsentSession';\nimport { configApiRef, useApi } from '@backstage/frontend-plugin-api';\nimport styles from './ConsentPage.module.css';\n\nconst ConsentPageLayout = ({ children }: { children: React.ReactNode }) => (\n  <FullPage>\n    <VisuallyHidden>\n      <h1>Authorization</h1>\n    </VisuallyHidden>\n    <Container py=\"8\">{children}</Container>\n  </FullPage>\n);\n\nfunction getUrlHostname(value: string): string | undefined {\n  try {\n    return new URL(value).host;\n  } catch {\n    return undefined;\n  }\n}\n\nexport const ConsentPage = () => {\n  const { sessionId } = useParams<{ sessionId: string }>();\n  const { state, handleAction } = useConsentSession({ sessionId });\n  const configApi = useApi(configApiRef);\n  const appTitle = configApi.getOptionalString('app.title') ?? 'Backstage';\n\n  if (!sessionId) {\n    return (\n      <ConsentPageLayout>\n        <Alert\n          status=\"info\"\n          icon\n          title=\"Invalid Request\"\n          description=\"The consent request ID is missing or invalid.\"\n        />\n      </ConsentPageLayout>\n    );\n  }\n\n  if (state.status === 'loading') {\n    return (\n      <ConsentPageLayout>\n        <Alert loading title=\"Loading authorization request...\" />\n      </ConsentPageLayout>\n    );\n  }\n\n  if (state.status === 'error') {\n    return (\n      <ConsentPageLayout>\n        <Alert\n          status=\"danger\"\n          icon\n          title=\"Authorization Error\"\n          description={state.error}\n        />\n      </ConsentPageLayout>\n    );\n  }\n\n  if (state.status === 'completed') {\n    return (\n      <ConsentPageLayout>\n        <Card className={styles.card}>\n          <CardBody>\n            <Flex\n              direction=\"column\"\n              align=\"center\"\n              gap=\"2\"\n              style={{ textAlign: 'center' }}\n            >\n              {state.action === 'approve' ? (\n                <RiCheckboxCircleLine\n                  size={64}\n                  className={styles.completedIconSuccess}\n                />\n              ) : (\n                <RiCloseCircleLine\n                  size={64}\n                  className={styles.completedIconDanger}\n                />\n              )}\n              <Text as=\"h2\" variant=\"title-small\">\n                {state.action === 'approve'\n                  ? 'Authorization Approved'\n                  : 'Authorization Denied'}\n              </Text>\n              <Text variant=\"body-medium\" color=\"secondary\">\n                {state.action === 'approve'\n                  ? `You have successfully authorized the application to access your ${appTitle} account.`\n                  : `You have denied the application access to your ${appTitle} account.`}\n              </Text>\n              <Text variant=\"body-small\" color=\"secondary\">\n                Redirecting to the application...\n              </Text>\n            </Flex>\n          </CardBody>\n        </Card>\n      </ConsentPageLayout>\n    );\n  }\n\n  const session = state.session;\n  const isSubmitting = state.status === 'submitting';\n  const appName = session.clientName ?? session.clientId;\n  const metadataHost = getUrlHostname(session.clientId);\n  const trustMessage = metadataHost\n    ? 'Make sure you trust this application and recognize the client metadata host and callback URL above. Only authorize applications you trust.'\n    : 'Make sure you trust this application and recognize the callback URL above. Only authorize applications you trust.';\n\n  return (\n    <ConsentPageLayout>\n      <Card className={styles.card}>\n        <CardBody>\n          <Flex direction=\"column\" gap=\"4\">\n            <Box className={styles.appHeader}>\n              <RiAppsLine size={40} className={styles.appIcon} />\n              <Flex direction=\"column\" gap=\"0.5\">\n                <Text as=\"span\" variant=\"title-small\" weight=\"bold\">\n                  {appName}\n                </Text>\n                <Text variant=\"body-small\" color=\"secondary\">\n                  wants to access your {appTitle} account\n                </Text>\n              </Flex>\n            </Box>\n\n            <hr className={styles.divider} />\n\n            <Alert\n              status=\"warning\"\n              icon\n              title=\"Security Notice\"\n              description={\n                <>\n                  By authorizing this application, you are granting it access to\n                  your {appTitle} account. The application will receive an\n                  access token that allows it to act on your behalf.\n                  <dl className={styles.clientDetails}>\n                    {metadataHost && (\n                      <>\n                        <div className={styles.clientDetail}>\n                          <dt>Client metadata host</dt>\n                          <dd>{metadataHost}</dd>\n                        </div>\n                        <div className={styles.clientDetail}>\n                          <dt>Client metadata URL</dt>\n                          <dd className={styles.monospaceValue}>\n                            {session.clientId}\n                          </dd>\n                        </div>\n                      </>\n                    )}\n                    <div className={styles.clientDetail}>\n                      <dt>Callback URL</dt>\n                      <dd className={styles.monospaceValue}>\n                        {session.redirectUri}\n                      </dd>\n                    </div>\n                    {session.scope && (\n                      <div className={styles.clientDetail}>\n                        <dt>Requested scopes</dt>\n                        <dd className={styles.monospaceValue}>\n                          {session.scope}\n                        </dd>\n                      </div>\n                    )}\n                  </dl>\n                </>\n              }\n            />\n\n            <Text variant=\"body-small\" color=\"secondary\">\n              {trustMessage}\n            </Text>\n          </Flex>\n        </CardBody>\n\n        <CardFooter>\n          <Flex justify=\"between\" gap=\"4\">\n            <Button\n              variant=\"secondary\"\n              isDisabled={isSubmitting}\n              onPress={() => handleAction('reject')}\n              iconStart={<RiCloseCircleLine />}\n            >\n              Cancel\n            </Button>\n            <Button\n              variant=\"primary\"\n              isDisabled={isSubmitting}\n              onPress={() => handleAction('approve')}\n              iconStart={<RiCheckboxCircleLine />}\n            >\n              {isSubmitting ? 'Authorizing...' : 'Authorize'}\n            </Button>\n          </Flex>\n        </CardFooter>\n      </Card>\n    </ConsentPageLayout>\n  );\n};\n"],"names":[],"mappings":";;;;;;;;AAuCA,MAAM,oBAAoB,CAAC,EAAE,QAAA,EAAS,0BACnC,QAAA,EAAA,EACC,QAAA,EAAA;AAAA,kBAAA,GAAA,CAAC,cAAA,EAAA,EACC,QAAA,kBAAA,GAAA,CAAC,IAAA,EAAA,EAAG,QAAA,EAAA,eAAA,EAAa,CAAA,EACnB,CAAA;AAAA,kBACA,GAAA,CAAC,SAAA,EAAA,EAAU,EAAA,EAAG,GAAA,EAAK,QAAA,EAAS;AAAA,CAAA,EAC9B,CAAA;AAGF,SAAS,eAAe,KAAA,EAAmC;AACzD,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,KAAK,CAAA,CAAE,IAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAEO,MAAM,cAAc,MAAM;AAC/B,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,SAAA,EAAiC;AACvD,EAAA,MAAM,EAAE,KAAA,EAAO,YAAA,KAAiB,iBAAA,CAAkB,EAAE,WAAW,CAAA;AAC/D,EAAA,MAAM,SAAA,GAAY,OAAO,YAAY,CAAA;AACrC,EAAA,MAAM,QAAA,GAAW,SAAA,CAAU,iBAAA,CAAkB,WAAW,CAAA,IAAK,WAAA;AAE7D,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,2BACG,iBAAA,EAAA,EACC,QAAA,kBAAA,GAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,MAAA,EAAO,MAAA;AAAA,QACP,IAAA,EAAI,IAAA;AAAA,QACJ,KAAA,EAAM,iBAAA;AAAA,QACN,WAAA,EAAY;AAAA;AAAA,KACd,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,CAAM,WAAW,SAAA,EAAW;AAC9B,IAAA,uBACE,GAAA,CAAC,qBACC,QAAA,kBAAA,GAAA,CAAC,KAAA,EAAA,EAAM,SAAO,IAAA,EAAC,KAAA,EAAM,oCAAmC,CAAA,EAC1D,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,CAAM,WAAW,OAAA,EAAS;AAC5B,IAAA,2BACG,iBAAA,EAAA,EACC,QAAA,kBAAA,GAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,MAAA,EAAO,QAAA;AAAA,QACP,IAAA,EAAI,IAAA;AAAA,QACJ,KAAA,EAAM,qBAAA;AAAA,QACN,aAAa,KAAA,CAAM;AAAA;AAAA,KACrB,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,CAAM,WAAW,WAAA,EAAa;AAChC,IAAA,uBACE,GAAA,CAAC,qBACC,QAAA,kBAAA,GAAA,CAAC,IAAA,EAAA,EAAK,WAAW,MAAA,CAAO,IAAA,EACtB,8BAAC,QAAA,EAAA,EACC,QAAA,kBAAA,IAAA;AAAA,MAAC,IAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAU,QAAA;AAAA,QACV,KAAA,EAAM,QAAA;AAAA,QACN,GAAA,EAAI,GAAA;AAAA,QACJ,KAAA,EAAO,EAAE,SAAA,EAAW,QAAA,EAAS;AAAA,QAE5B,QAAA,EAAA;AAAA,UAAA,KAAA,CAAM,WAAW,SAAA,mBAChB,GAAA;AAAA,YAAC,oBAAA;AAAA,YAAA;AAAA,cACC,IAAA,EAAM,EAAA;AAAA,cACN,WAAW,MAAA,CAAO;AAAA;AAAA,WACpB,mBAEA,GAAA;AAAA,YAAC,iBAAA;AAAA,YAAA;AAAA,cACC,IAAA,EAAM,EAAA;AAAA,cACN,WAAW,MAAA,CAAO;AAAA;AAAA,WACpB;AAAA,0BAEF,GAAA,CAAC,IAAA,EAAA,EAAK,EAAA,EAAG,IAAA,EAAK,OAAA,EAAQ,eACnB,QAAA,EAAA,KAAA,CAAM,MAAA,KAAW,SAAA,GACd,wBAAA,GACA,sBAAA,EACN,CAAA;AAAA,0BACA,GAAA,CAAC,IAAA,EAAA,EAAK,OAAA,EAAQ,aAAA,EAAc,OAAM,WAAA,EAC/B,QAAA,EAAA,KAAA,CAAM,MAAA,KAAW,SAAA,GACd,CAAA,gEAAA,EAAmE,QAAQ,CAAA,SAAA,CAAA,GAC3E,CAAA,+CAAA,EAAkD,QAAQ,CAAA,SAAA,CAAA,EAChE,CAAA;AAAA,8BACC,IAAA,EAAA,EAAK,OAAA,EAAQ,YAAA,EAAa,KAAA,EAAM,aAAY,QAAA,EAAA,mCAAA,EAE7C;AAAA;AAAA;AAAA,KACF,EACF,GACF,CAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,MAAM,UAAU,KAAA,CAAM,OAAA;AACtB,EAAA,MAAM,YAAA,GAAe,MAAM,MAAA,KAAW,YAAA;AACtC,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,UAAA,IAAc,OAAA,CAAQ,QAAA;AAC9C,EAAA,MAAM,YAAA,GAAe,cAAA,CAAe,OAAA,CAAQ,QAAQ,CAAA;AACpD,EAAA,MAAM,YAAA,GAAe,eACjB,4IAAA,GACA,mHAAA;AAEJ,EAAA,2BACG,iBAAA,EAAA,EACC,QAAA,kBAAA,IAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAW,OAAO,IAAA,EACtB,QAAA,EAAA;AAAA,oBAAA,GAAA,CAAC,YACC,QAAA,kBAAA,IAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAU,QAAA,EAAS,KAAI,GAAA,EAC3B,QAAA,EAAA;AAAA,sBAAA,IAAA,CAAC,GAAA,EAAA,EAAI,SAAA,EAAW,MAAA,CAAO,SAAA,EACrB,QAAA,EAAA;AAAA,wBAAA,GAAA,CAAC,UAAA,EAAA,EAAW,IAAA,EAAM,EAAA,EAAI,SAAA,EAAW,OAAO,OAAA,EAAS,CAAA;AAAA,wBACjD,IAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAU,QAAA,EAAS,KAAI,KAAA,EAC3B,QAAA,EAAA;AAAA,0BAAA,GAAA,CAAC,QAAK,EAAA,EAAG,MAAA,EAAO,SAAQ,aAAA,EAAc,MAAA,EAAO,QAC1C,QAAA,EAAA,OAAA,EACH,CAAA;AAAA,0BACA,IAAA,CAAC,IAAA,EAAA,EAAK,OAAA,EAAQ,YAAA,EAAa,OAAM,WAAA,EAAY,QAAA,EAAA;AAAA,YAAA,uBAAA;AAAA,YACrB,QAAA;AAAA,YAAS;AAAA,WAAA,EACjC;AAAA,SAAA,EACF;AAAA,OAAA,EACF,CAAA;AAAA,sBAEA,GAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAW,MAAA,CAAO,OAAA,EAAS,CAAA;AAAA,sBAE/B,GAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,MAAA,EAAO,SAAA;AAAA,UACP,IAAA,EAAI,IAAA;AAAA,UACJ,KAAA,EAAM,iBAAA;AAAA,UACN,6BACE,IAAA,CAAA,QAAA,EAAA,EAAE,QAAA,EAAA;AAAA,YAAA,sEAAA;AAAA,YAEM,QAAA;AAAA,YAAS,8FAAA;AAAA,4BAEf,IAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAW,MAAA,CAAO,aAAA,EACnB,QAAA,EAAA;AAAA,cAAA,YAAA,oBACC,IAAA,CAAA,QAAA,EAAA,EACE,QAAA,EAAA;AAAA,gCAAA,IAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,MAAA,CAAO,YAAA,EACrB,QAAA,EAAA;AAAA,kCAAA,GAAA,CAAC,QAAG,QAAA,EAAA,sBAAA,EAAoB,CAAA;AAAA,kCACxB,GAAA,CAAC,QAAI,QAAA,EAAA,YAAA,EAAa;AAAA,iBAAA,EACpB,CAAA;AAAA,gCACA,IAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,MAAA,CAAO,YAAA,EACrB,QAAA,EAAA;AAAA,kCAAA,GAAA,CAAC,QAAG,QAAA,EAAA,qBAAA,EAAmB,CAAA;AAAA,sCACtB,IAAA,EAAA,EAAG,SAAA,EAAW,MAAA,CAAO,cAAA,EACnB,kBAAQ,QAAA,EACX;AAAA,iBAAA,EACF;AAAA,eAAA,EACF,CAAA;AAAA,8BAEF,IAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,MAAA,CAAO,YAAA,EACrB,QAAA,EAAA;AAAA,gCAAA,GAAA,CAAC,QAAG,QAAA,EAAA,cAAA,EAAY,CAAA;AAAA,oCACf,IAAA,EAAA,EAAG,SAAA,EAAW,MAAA,CAAO,cAAA,EACnB,kBAAQ,WAAA,EACX;AAAA,eAAA,EACF,CAAA;AAAA,cACC,QAAQ,KAAA,oBACP,IAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,OAAO,YAAA,EACrB,QAAA,EAAA;AAAA,gCAAA,GAAA,CAAC,QAAG,QAAA,EAAA,kBAAA,EAAgB,CAAA;AAAA,oCACnB,IAAA,EAAA,EAAG,SAAA,EAAW,MAAA,CAAO,cAAA,EACnB,kBAAQ,KAAA,EACX;AAAA,eAAA,EACF;AAAA,aAAA,EAEJ;AAAA,WAAA,EACF;AAAA;AAAA,OAEJ;AAAA,0BAEC,IAAA,EAAA,EAAK,OAAA,EAAQ,YAAA,EAAa,KAAA,EAAM,aAC9B,QAAA,EAAA,YAAA,EACH;AAAA,KAAA,EACF,CAAA,EACF,CAAA;AAAA,wBAEC,UAAA,EAAA,EACC,QAAA,kBAAA,IAAA,CAAC,QAAK,OAAA,EAAQ,SAAA,EAAU,KAAI,GAAA,EAC1B,QAAA,EAAA;AAAA,sBAAA,GAAA;AAAA,QAAC,MAAA;AAAA,QAAA;AAAA,UACC,OAAA,EAAQ,WAAA;AAAA,UACR,UAAA,EAAY,YAAA;AAAA,UACZ,OAAA,EAAS,MAAM,YAAA,CAAa,QAAQ,CAAA;AAAA,UACpC,SAAA,sBAAY,iBAAA,EAAA,EAAkB,CAAA;AAAA,UAC/B,QAAA,EAAA;AAAA;AAAA,OAED;AAAA,sBACA,GAAA;AAAA,QAAC,MAAA;AAAA,QAAA;AAAA,UACC,OAAA,EAAQ,SAAA;AAAA,UACR,UAAA,EAAY,YAAA;AAAA,UACZ,OAAA,EAAS,MAAM,YAAA,CAAa,SAAS,CAAA;AAAA,UACrC,SAAA,sBAAY,oBAAA,EAAA,EAAqB,CAAA;AAAA,UAEhC,yBAAe,gBAAA,GAAmB;AAAA;AAAA;AACrC,KAAA,EACF,CAAA,EACF;AAAA,GAAA,EACF,CAAA,EACF,CAAA;AAEJ;;;;"}

package/dist/components/ConsentPage/ConsentPage.module.css.esm.js

@@ -1,7 +1,7 @@
 import styleInject from '../../node_modules_dist/style-inject/dist/style-inject.es.esm.js';
 
-var css_248z = ".ConsentPage_card__800025e78d {\n  max-width: 600px;\n  margin: var(--bui-space-8) auto 0;\n}\n\n.ConsentPage_appHeader__800025e78d {\n  display: flex;\n  align-items: center;\n  gap: var(--bui-space-4);\n}\n\n.ConsentPage_appIcon__800025e78d {\n  color: var(--bui-fg-secondary);\n}\n\n.ConsentPage_divider__800025e78d {\n  border: none;\n  border-top: 1px solid var(--bui-border-1);\n  margin: 0;\n}\n\n.ConsentPage_callbackUrl__800025e78d {\n  font-family: var(--bui-font-monospace);\n  background: var(--bui-bg-neutral-2);\n  padding: var(--bui-space-2);\n  border-radius: var(--bui-radius-2);\n  word-break: break-all;\n  font-size: var(--bui-font-size-3);\n  margin-top: var(--bui-space-2);\n}\n\n.ConsentPage_completedIcon__800025e78d {\n  margin-bottom: var(--bui-space-4);\n}\n\n.ConsentPage_completedIconSuccess__800025e78d {\n  color: var(--bui-fg-success);\n}\n\n.ConsentPage_completedIconDanger__800025e78d {\n  color: var(--bui-fg-danger);\n}\n";
-var styles = {"card":"ConsentPage_card__800025e78d","appHeader":"ConsentPage_appHeader__800025e78d","appIcon":"ConsentPage_appIcon__800025e78d","divider":"ConsentPage_divider__800025e78d","callbackUrl":"ConsentPage_callbackUrl__800025e78d","completedIconSuccess":"ConsentPage_completedIconSuccess__800025e78d ConsentPage_completedIcon__800025e78d","completedIconDanger":"ConsentPage_completedIconDanger__800025e78d ConsentPage_completedIcon__800025e78d"};
+var css_248z = ".ConsentPage_card__8d89149ce9 {\n  max-width: 600px;\n  margin: var(--bui-space-8) auto 0;\n}\n\n.ConsentPage_appHeader__8d89149ce9 {\n  display: flex;\n  align-items: center;\n  gap: var(--bui-space-4);\n}\n\n.ConsentPage_appIcon__8d89149ce9 {\n  color: var(--bui-fg-secondary);\n}\n\n.ConsentPage_divider__8d89149ce9 {\n  border: none;\n  border-top: 1px solid var(--bui-border-1);\n  margin: 0;\n}\n\n.ConsentPage_clientDetails__8d89149ce9 {\n  display: flex;\n  flex-direction: column;\n  gap: var(--bui-space-2);\n  margin: var(--bui-space-3) 0 0;\n}\n\n.ConsentPage_clientDetail__8d89149ce9 {\n  display: flex;\n  flex-direction: column;\n  gap: var(--bui-space-1);\n}\n\n.ConsentPage_clientDetail__8d89149ce9 dt {\n  font-size: var(--bui-font-size-2);\n  font-weight: 600;\n}\n\n.ConsentPage_clientDetail__8d89149ce9 dd {\n  margin: 0;\n  background: var(--bui-bg-neutral-2);\n  padding: var(--bui-space-2);\n  border-radius: var(--bui-radius-2);\n  word-break: break-all;\n  font-size: var(--bui-font-size-3);\n}\n\n.ConsentPage_monospaceValue__8d89149ce9 {\n  font-family: var(--bui-font-monospace);\n}\n\n.ConsentPage_completedIcon__8d89149ce9 {\n  margin-bottom: var(--bui-space-4);\n}\n\n.ConsentPage_completedIconSuccess__8d89149ce9 {\n  color: var(--bui-fg-success);\n}\n\n.ConsentPage_completedIconDanger__8d89149ce9 {\n  color: var(--bui-fg-danger);\n}\n";
+var styles = {"card":"ConsentPage_card__8d89149ce9","appHeader":"ConsentPage_appHeader__8d89149ce9","appIcon":"ConsentPage_appIcon__8d89149ce9","divider":"ConsentPage_divider__8d89149ce9","clientDetails":"ConsentPage_clientDetails__8d89149ce9","clientDetail":"ConsentPage_clientDetail__8d89149ce9","monospaceValue":"ConsentPage_monospaceValue__8d89149ce9","completedIconSuccess":"ConsentPage_completedIconSuccess__8d89149ce9 ConsentPage_completedIcon__8d89149ce9","completedIconDanger":"ConsentPage_completedIconDanger__8d89149ce9 ConsentPage_completedIcon__8d89149ce9"};
 styleInject(css_248z);
 
 export { styles as default };

package/dist/components/ConsentPage/useConsentSession.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"useConsentSession.esm.js","sources":["../../../src/components/ConsentPage/useConsentSession.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  useApi,\n  alertApiRef,\n  fetchApiRef,\n  discoveryApiRef,\n} from '@backstage/frontend-plugin-api';\nimport { useCallback } from 'react';\nimport useAsync from 'react-use/esm/useAsync';\nimport useAsyncFn from 'react-use/esm/useAsyncFn';\nimport { toError } from '@backstage/errors';\n\ninterface Session {\n  id: string;\n  clientName?: string;\n  clientId: string;\n  redirectUri: string;\n  scopes?: string[];\n  responseType?: string;\n  state?: string;\n  nonce?: string;\n  codeChallenge?: string;\n  codeChallengeMethod?: string;\n  expiresAt?: string;\n}\n\ntype ConsentState =\n  | { status: 'loading' }\n  | { status: 'error'; error: string }\n  | { status: 'loaded'; session: Session }\n  | { status: 'submitting'; session: Session; action: 'approve' | 'reject' }\n  | { status: 'completed'; action: 'approve' | 'reject' };\n\nexport const useConsentSession = (opts: { sessionId?: string }) => {\n  const alertApi = useApi(alertApiRef);\n  const fetchApi = useApi(fetchApiRef);\n  const discoveryApi = useApi(discoveryApiRef);\n  const { sessionId } = opts;\n\n  const sessionState = useAsync(async () => {\n    if (!sessionId) {\n      throw new Error('Session ID is missing');\n    }\n\n    const baseUrl = await discoveryApi.getBaseUrl('auth');\n    const response = await fetchApi.fetch(\n      `${baseUrl}/v1/sessions/${sessionId}`,\n    );\n\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n\n    return (await response.json()) as Session;\n  }, [sessionId]);\n\n  const [actionState, handleActionInternal] = useAsyncFn(\n    async (action: 'approve' | 'reject', session: Session) => {\n      const baseUrl = await discoveryApi.getBaseUrl('auth');\n      const response = await fetchApi.fetch(\n        `${baseUrl}/v1/sessions/${session.id}/${action}`,\n        {\n          method: 'POST',\n          headers: {\n            'Content-Type': 'application/json',\n          },\n        },\n      );\n\n      if (!response.ok) {\n        throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n      }\n\n      const result = await response.json();\n\n      if (result.redirectUrl) {\n        window.location.href = result.redirectUrl;\n      }\n\n      return { action, redirectUrl: result.redirectUrl };\n    },\n    [discoveryApi, fetchApi],\n  );\n\n  const getConsentState = (): ConsentState => {\n    if (actionState.value) {\n      return { status: 'completed', action: actionState.value.action };\n    }\n    if (actionState.loading && sessionState.value) {\n      return {\n        status: 'submitting',\n        session: sessionState.value,\n        action: 'approve', // This will be set properly when called\n      };\n    }\n    if (sessionState.error) {\n      return {\n        status: 'error',\n        error: toError(sessionState.error).message,\n      };\n    }\n    if (sessionState.value) {\n      return { status: 'loaded', session: sessionState.value };\n    }\n    return { status: 'loading' };\n  };\n\n  const state = getConsentState();\n  return {\n    state,\n    handleAction: useCallback(\n      async (action: 'approve' | 'reject') => {\n        if (state.status !== 'loaded') return;\n\n        try {\n          await handleActionInternal(action, state.session);\n        } catch (err) {\n          alertApi.post({\n            message: toError(err).message,\n            severity: 'error',\n          });\n        }\n      },\n      [state, handleActionInternal, alertApi],\n    ),\n  };\n};\n"],"names":[],"mappings":";;;;;;AAgDO,MAAM,iBAAA,GAAoB,CAAC,IAAA,KAAiC;AACjE,EAAA,MAAM,QAAA,GAAW,OAAO,WAAW,CAAA;AACnC,EAAA,MAAM,QAAA,GAAW,OAAO,WAAW,CAAA;AACnC,EAAA,MAAM,YAAA,GAAe,OAAO,eAAe,CAAA;AAC3C,EAAA,MAAM,EAAE,WAAU,GAAI,IAAA;AAEtB,EAAA,MAAM,YAAA,GAAe,SAAS,YAAY;AACxC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,MAAM,IAAI,MAAM,uBAAuB,CAAA;AAAA,IACzC;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,CAAW,MAAM,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,MAAM,QAAA,CAAS,KAAA;AAAA,MAC9B,CAAA,EAAG,OAAO,CAAA,aAAA,EAAgB,SAAS,CAAA;AAAA,KACrC;AAEA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,IACnE;AAEA,IAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,EAC9B,CAAA,EAAG,CAAC,SAAS,CAAC,CAAA;AAEd,EAAA,MAAM,CAAC,WAAA,EAAa,oBAAoB,CAAA,GAAI,UAAA;AAAA,IAC1C,OAAO,QAA8B,OAAA,KAAqB;AACxD,MAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,CAAW,MAAM,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,QAAA,CAAS,KAAA;AAAA,QAC9B,GAAG,OAAO,CAAA,aAAA,EAAgB,OAAA,CAAQ,EAAE,IAAI,MAAM,CAAA,CAAA;AAAA,QAC9C;AAAA,UACE,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS;AAAA,YACP,cAAA,EAAgB;AAAA;AAClB;AACF,OACF;AAEA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,MACnE;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,IAAA,EAAK;AAEnC,MAAA,IAAI,OAAO,WAAA,EAAa;AACtB,QAAA,MAAA,CAAO,QAAA,CAAS,OAAO,MAAA,CAAO,WAAA;AAAA,MAChC;AAEA,MAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,CAAO,WAAA,EAAY;AAAA,IACnD,CAAA;AAAA,IACA,CAAC,cAAc,QAAQ;AAAA,GACzB;AAEA,EAAA,MAAM,kBAAkB,MAAoB;AAC1C,IAAA,IAAI,YAAY,KAAA,EAAO;AACrB,MAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,EAAQ,WAAA,CAAY,MAAM,MAAA,EAAO;AAAA,IACjE;AACA,IAAA,IAAI,WAAA,CAAY,OAAA,IAAW,YAAA,CAAa,KAAA,EAAO;AAC7C,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,YAAA;AAAA,QACR,SAAS,YAAA,CAAa,KAAA;AAAA,QACtB,MAAA,EAAQ;AAAA;AAAA,OACV;AAAA,IACF;AACA,IAAA,IAAI,aAAa,KAAA,EAAO;AACtB,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,KAAA,EAAO,OAAA,CAAQ,YAAA,CAAa,KAAK,CAAA,CAAE;AAAA,OACrC;AAAA,IACF;AACA,IAAA,IAAI,aAAa,KAAA,EAAO;AACtB,MAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,OAAA,EAAS,aAAa,KAAA,EAAM;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,QAAQ,SAAA,EAAU;AAAA,EAC7B,CAAA;AAEA,EAAA,MAAM,QAAQ,eAAA,EAAgB;AAC9B,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,YAAA,EAAc,WAAA;AAAA,MACZ,OAAO,MAAA,KAAiC;AACtC,QAAA,IAAI,KAAA,CAAM,WAAW,QAAA,EAAU;AAE/B,QAAA,IAAI;AACF,UAAA,MAAM,oBAAA,CAAqB,MAAA,EAAQ,KAAA,CAAM,OAAO,CAAA;AAAA,QAClD,SAAS,GAAA,EAAK;AACZ,UAAA,QAAA,CAAS,IAAA,CAAK;AAAA,YACZ,OAAA,EAAS,OAAA,CAAQ,GAAG,CAAA,CAAE,OAAA;AAAA,YACtB,QAAA,EAAU;AAAA,WACX,CAAA;AAAA,QACH;AAAA,MACF,CAAA;AAAA,MACA,CAAC,KAAA,EAAO,oBAAA,EAAsB,QAAQ;AAAA;AACxC,GACF;AACF;;;;"}
+{"version":3,"file":"useConsentSession.esm.js","sources":["../../../src/components/ConsentPage/useConsentSession.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  useApi,\n  alertApiRef,\n  fetchApiRef,\n  discoveryApiRef,\n} from '@backstage/frontend-plugin-api';\nimport { useCallback } from 'react';\nimport useAsync from 'react-use/esm/useAsync';\nimport useAsyncFn from 'react-use/esm/useAsyncFn';\nimport { toError } from '@backstage/errors';\n\ninterface Session {\n  id: string;\n  clientName?: string;\n  clientId: string;\n  redirectUri: string;\n  scope?: string;\n}\n\ntype ConsentState =\n  | { status: 'loading' }\n  | { status: 'error'; error: string }\n  | { status: 'loaded'; session: Session }\n  | { status: 'submitting'; session: Session; action: 'approve' | 'reject' }\n  | { status: 'completed'; action: 'approve' | 'reject' };\n\nexport const useConsentSession = (opts: { sessionId?: string }) => {\n  const alertApi = useApi(alertApiRef);\n  const fetchApi = useApi(fetchApiRef);\n  const discoveryApi = useApi(discoveryApiRef);\n  const { sessionId } = opts;\n\n  const sessionState = useAsync(async () => {\n    if (!sessionId) {\n      throw new Error('Session ID is missing');\n    }\n\n    const baseUrl = await discoveryApi.getBaseUrl('auth');\n    const response = await fetchApi.fetch(\n      `${baseUrl}/v1/sessions/${sessionId}`,\n    );\n\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n\n    return (await response.json()) as Session;\n  }, [sessionId]);\n\n  const [actionState, handleActionInternal] = useAsyncFn(\n    async (action: 'approve' | 'reject', session: Session) => {\n      const baseUrl = await discoveryApi.getBaseUrl('auth');\n      const response = await fetchApi.fetch(\n        `${baseUrl}/v1/sessions/${session.id}/${action}`,\n        {\n          method: 'POST',\n          headers: {\n            'Content-Type': 'application/json',\n          },\n        },\n      );\n\n      if (!response.ok) {\n        throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n      }\n\n      const result = await response.json();\n\n      if (result.redirectUrl) {\n        window.location.href = result.redirectUrl;\n      }\n\n      return { action, redirectUrl: result.redirectUrl };\n    },\n    [discoveryApi, fetchApi],\n  );\n\n  const getConsentState = (): ConsentState => {\n    if (actionState.value) {\n      return { status: 'completed', action: actionState.value.action };\n    }\n    if (actionState.loading && sessionState.value) {\n      return {\n        status: 'submitting',\n        session: sessionState.value,\n        action: 'approve', // This will be set properly when called\n      };\n    }\n    if (sessionState.error) {\n      return {\n        status: 'error',\n        error: toError(sessionState.error).message,\n      };\n    }\n    if (sessionState.value) {\n      return { status: 'loaded', session: sessionState.value };\n    }\n    return { status: 'loading' };\n  };\n\n  const state = getConsentState();\n  return {\n    state,\n    handleAction: useCallback(\n      async (action: 'approve' | 'reject') => {\n        if (state.status !== 'loaded') return;\n\n        try {\n          await handleActionInternal(action, state.session);\n        } catch (err) {\n          alertApi.post({\n            message: toError(err).message,\n            severity: 'error',\n          });\n        }\n      },\n      [state, handleActionInternal, alertApi],\n    ),\n  };\n};\n"],"names":[],"mappings":";;;;;;AA0CO,MAAM,iBAAA,GAAoB,CAAC,IAAA,KAAiC;AACjE,EAAA,MAAM,QAAA,GAAW,OAAO,WAAW,CAAA;AACnC,EAAA,MAAM,QAAA,GAAW,OAAO,WAAW,CAAA;AACnC,EAAA,MAAM,YAAA,GAAe,OAAO,eAAe,CAAA;AAC3C,EAAA,MAAM,EAAE,WAAU,GAAI,IAAA;AAEtB,EAAA,MAAM,YAAA,GAAe,SAAS,YAAY;AACxC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,MAAM,IAAI,MAAM,uBAAuB,CAAA;AAAA,IACzC;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,CAAW,MAAM,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,MAAM,QAAA,CAAS,KAAA;AAAA,MAC9B,CAAA,EAAG,OAAO,CAAA,aAAA,EAAgB,SAAS,CAAA;AAAA,KACrC;AAEA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,IACnE;AAEA,IAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,EAC9B,CAAA,EAAG,CAAC,SAAS,CAAC,CAAA;AAEd,EAAA,MAAM,CAAC,WAAA,EAAa,oBAAoB,CAAA,GAAI,UAAA;AAAA,IAC1C,OAAO,QAA8B,OAAA,KAAqB;AACxD,MAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,CAAW,MAAM,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,QAAA,CAAS,KAAA;AAAA,QAC9B,GAAG,OAAO,CAAA,aAAA,EAAgB,OAAA,CAAQ,EAAE,IAAI,MAAM,CAAA,CAAA;AAAA,QAC9C;AAAA,UACE,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS;AAAA,YACP,cAAA,EAAgB;AAAA;AAClB;AACF,OACF;AAEA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,MACnE;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,IAAA,EAAK;AAEnC,MAAA,IAAI,OAAO,WAAA,EAAa;AACtB,QAAA,MAAA,CAAO,QAAA,CAAS,OAAO,MAAA,CAAO,WAAA;AAAA,MAChC;AAEA,MAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,CAAO,WAAA,EAAY;AAAA,IACnD,CAAA;AAAA,IACA,CAAC,cAAc,QAAQ;AAAA,GACzB;AAEA,EAAA,MAAM,kBAAkB,MAAoB;AAC1C,IAAA,IAAI,YAAY,KAAA,EAAO;AACrB,MAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,EAAQ,WAAA,CAAY,MAAM,MAAA,EAAO;AAAA,IACjE;AACA,IAAA,IAAI,WAAA,CAAY,OAAA,IAAW,YAAA,CAAa,KAAA,EAAO;AAC7C,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,YAAA;AAAA,QACR,SAAS,YAAA,CAAa,KAAA;AAAA,QACtB,MAAA,EAAQ;AAAA;AAAA,OACV;AAAA,IACF;AACA,IAAA,IAAI,aAAa,KAAA,EAAO;AACtB,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,KAAA,EAAO,OAAA,CAAQ,YAAA,CAAa,KAAK,CAAA,CAAE;AAAA,OACrC;AAAA,IACF;AACA,IAAA,IAAI,aAAa,KAAA,EAAO;AACtB,MAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,OAAA,EAAS,aAAa,KAAA,EAAM;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,QAAQ,SAAA,EAAU;AAAA,EAC7B,CAAA;AAEA,EAAA,MAAM,QAAQ,eAAA,EAAgB;AAC9B,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,YAAA,EAAc,WAAA;AAAA,MACZ,OAAO,MAAA,KAAiC;AACtC,QAAA,IAAI,KAAA,CAAM,WAAW,QAAA,EAAU;AAE/B,QAAA,IAAI;AACF,UAAA,MAAM,oBAAA,CAAqB,MAAA,EAAQ,KAAA,CAAM,OAAO,CAAA;AAAA,QAClD,SAAS,GAAA,EAAK;AACZ,UAAA,QAAA,CAAS,IAAA,CAAK;AAAA,YACZ,OAAA,EAAS,OAAA,CAAQ,GAAG,CAAA,CAAE,OAAA;AAAA,YACtB,QAAA,EAAU;AAAA,WACX,CAAA;AAAA,QACH;AAAA,MACF,CAAA;AAAA,MACA,CAAC,KAAA,EAAO,oBAAA,EAAsB,QAAQ;AAAA;AACxC,GACF;AACF;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-auth",
-  "version": "0.1.8-next.1",
+  "version": "0.1.8-next.2",
   "backstage": {
     "role": "frontend-plugin",
     "pluginId": "auth",
@@ -58,7 +58,7 @@
     "@backstage/errors": "1.3.1-next.0",
     "@backstage/frontend-plugin-api": "0.17.0-next.1",
     "@backstage/theme": "0.7.3",
-    "@backstage/ui": "0.15.0-next.1",
+    "@backstage/ui": "0.15.0-next.3",
     "@remixicon/react": ">=4.6.0 <4.9.0",
     "react-use": "^17.2.4"
   },