@burdenoff/fe-libs 2026.527.3 → 2026.527.4

package/dist/shared/providers/shell/authProvider/useAuthActions.js

@@ -0,0 +1,170 @@
+import { addProfile as e, getProfileTokens as t, getProfileUser as n, getProfileWorkspaceToken as r, getProfiles as i, loginProfile as a, logoutAllProfiles as o, removeProfile as s, resolveActiveProfileId as c, setActiveProfileId as l, setProfileTokens as u, setProfileUser as d, setProfileWorkspaceToken as f, switchProfile as p } from "../ProfileStorageManager.js";
+import { clearShellSsoCookies as m, setShellSsoCookies as h } from "../../../utils/authCookie.js";
+import { getAuthBridge as g } from "../AuthBridgeClient.js";
+import { getCrossOriginLogoutUrl as _ } from "./ssoRelay.js";
+import { getJwtExpiry as v } from "./jwt.js";
+import { useCallback as y } from "react";
+//#region src/shared/providers/shell/authProvider/useAuthActions.ts
+function b({ user: b, tokens: x, activeId: S, bridgeSyncInProgress: C, onRefreshToken: w, onTokenExpired: T, setActiveId: E, setUser: D, setTokens: O, setWorkspaceTokenLocal: k, setMfaRequiredState: A, setMfaChallengeIdState: j, setIsLoading: M, clearAccounts: N, refreshAccounts: P }) {
+	let F = y((e, t, n) => {
+		let r = v(t) ?? Date.now() + 3600 * 1e3, o = {
+			accessToken: t,
+			refreshToken: n,
+			expiresAt: r
+		}, s = a(e, o);
+		E(s), D(e), O(o), k(null), A(!1), j(null), P();
+		try {
+			h(s, window.location.origin);
+		} catch {}
+		C.current || g()?.notifyLogin({
+			user: e,
+			tokens: {
+				accessToken: t,
+				refreshToken: n,
+				expiresAt: r
+			},
+			activeAccountId: s,
+			activeProfileId: s,
+			profiles: i()
+		});
+	}, [
+		P,
+		C,
+		E,
+		D,
+		O,
+		k,
+		A,
+		j
+	]), I = y(() => {
+		S && s(S);
+		let e = c();
+		e ? (E(e), D(n(e)), O(t(e)), k(r(e))) : (E(null), D(null), O(null), k(null)), A(!1), j(null), P();
+		try {
+			m();
+		} catch {}
+		C.current || g()?.notifyLogout();
+		let i = _();
+		i && !C.current && window.location.replace(i);
+	}, [
+		S,
+		P,
+		C,
+		E,
+		D,
+		O,
+		k,
+		A,
+		j
+	]), L = y((t) => {
+		if (!b || !S) return;
+		let n = {
+			...b,
+			...t
+		};
+		D(n), d(S, n), e({
+			id: S,
+			email: n.email,
+			name: n.name ?? `${n.firstName ?? ""} ${n.lastName ?? ""}`.trim(),
+			avatar: n.avatar,
+			lastLogin: (/* @__PURE__ */ new Date()).toISOString()
+		}), P();
+	}, [
+		b,
+		S,
+		P,
+		D
+	]), R = y(async () => {
+		if (!(!x?.refreshToken || !w || !S)) {
+			M(!0);
+			try {
+				let e = await w(x.refreshToken), t = v(e.accessToken), n = e.expiresAt ?? t ?? Date.now() + 3600 * 1e3, r = {
+					accessToken: e.accessToken,
+					refreshToken: e.refreshToken ?? x.refreshToken,
+					expiresAt: n
+				};
+				O(r), u(S, r), C.current || g()?.notifyTokenRefresh({
+					accessToken: r.accessToken,
+					refreshToken: r.refreshToken,
+					expiresAt: r.expiresAt
+				});
+			} catch (e) {
+				console.error("Failed to refresh token:", e), I(), T?.();
+			} finally {
+				M(!1);
+			}
+		}
+	}, [
+		x,
+		w,
+		S,
+		I,
+		T,
+		C,
+		O,
+		M
+	]), z = y((e) => b?.permissions ? b.permissions.includes(e) || b.permissions.includes("*") : !1, [b]), B = y((e) => {
+		k(e), S && f(S, e);
+	}, [S, k]), V = y((e, t) => {
+		A(e), j(t ?? null);
+	}, [A, j]), H = y((e) => {
+		if (!p(e)) {
+			console.error(`Profile ${e} not found`);
+			return;
+		}
+		E(e), D(n(e)), O(t(e)), k(r(e)), A(!1), j(null), P(), C.current || g()?.notifyAccountSwitch(e);
+	}, [
+		P,
+		C,
+		E,
+		D,
+		O,
+		k,
+		A,
+		j
+	]), U = y((e, t, n) => {
+		a(e, {
+			accessToken: t,
+			refreshToken: n,
+			expiresAt: v(t) ?? Date.now() + 3600 * 1e3
+		}), S && l(S), P();
+	}, [S, P]), W = y((e) => {
+		if (e === S) {
+			console.error("Cannot remove active account — logout first");
+			return;
+		}
+		s(e), P();
+	}, [S, P]);
+	return {
+		login: F,
+		logout: I,
+		logoutAll: y(() => {
+			o(), E(null), D(null), O(null), k(null), A(!1), j(null), N();
+			try {
+				m();
+			} catch {}
+			C.current || g()?.notifyLogoutAll();
+			let e = _();
+			e && !C.current && window.location.replace(e);
+		}, [
+			C,
+			E,
+			D,
+			O,
+			k,
+			A,
+			j,
+			N
+		]),
+		updateUser: L,
+		refreshAccessToken: R,
+		hasPermission: z,
+		setWorkspaceToken: B,
+		setMfaState: V,
+		switchAccount: H,
+		addAccount: U,
+		removeAccount: W
+	};
+}
+//#endregion
+export { b as useAuthActions };

package/dist/shared/providers/shell/authProvider/useBridgeInitialization.js

@@ -0,0 +1,86 @@
+import { getProfileTokens as e, getProfileUser as t, getProfileWorkspaceToken as n, resolveActiveProfileId as r } from "../ProfileStorageManager.js";
+import { initAuthBridge as i, isAuthBridgeInitialized as a } from "../AuthBridgeClient.js";
+import { hasRecentSSORedirectAttempt as o, markSSORedirectAttempt as s, shouldSkipSSORedirect as c } from "../../../components/SSORedirectGuard.js";
+import { getCookieSsoRelayUrl as l } from "./ssoRelay.js";
+import { syncBridgeStateToProfileStorage as u } from "./bridgeStateSync.js";
+import { useEffect as d } from "react";
+//#region src/shared/providers/shell/authProvider/useBridgeInitialization.ts
+function f({ bridgeUrl: f, bridgeAllowedOrigins: p, bridgeDebug: m, onBridgeReady: h, bridgeSyncInProgress: g, setIsLoading: _, setActiveId: v, setUser: y, setTokens: b, setWorkspaceTokenLocal: x, clearAccounts: S, refreshAccounts: C }) {
+	d(() => {
+		if (!f) return;
+		try {
+			let e = new URL(f).pathname;
+			if (window.location.pathname === e) {
+				_(!1), h?.();
+				return;
+			}
+		} catch {
+			_(!1), h?.();
+			return;
+		}
+		if (a()) {
+			_(!1), h?.();
+			return;
+		}
+		let d = () => {
+			_(!1), h?.();
+		}, w = (i) => {
+			g.current = !0;
+			try {
+				if (f) {
+					let e = l(f);
+					if (e) {
+						window.location.replace(e);
+						return;
+					}
+				}
+				u(i);
+				let a = r();
+				if (a) v(a), y(t(a)), b(e(a)), x(n(a)), C();
+				else {
+					if (f && !i.user && !i.tokens) try {
+						let e = new URL(f).origin, t = window.location.origin, n = l(f);
+						if (n) {
+							window.location.replace(n);
+							return;
+						}
+						if (e !== t && !c()) {
+							let t = window.location.href;
+							if (o(e, t)) return;
+							s(e, t), window.location.replace(`${e}/auth/sso-relay?returnTo=${encodeURIComponent(t)}`);
+							return;
+						}
+					} catch {}
+					v(null), y(null), b(null), x(null), S();
+				}
+			} finally {
+				g.current = !1, d();
+			}
+		}, T = setTimeout(() => {
+			d();
+		}, 5e3);
+		return i({
+			bridgeUrl: f,
+			allowedOrigins: p,
+			onStateChanged: w,
+			debug: m ?? !1
+		}), () => {
+			clearTimeout(T);
+		};
+	}, [
+		f,
+		p,
+		m,
+		h,
+		C,
+		g,
+		_,
+		v,
+		y,
+		b,
+		x,
+		S
+	]);
+}
+//#endregion
+export { f as useBridgeInitialization };

package/dist/shared/providers/shell/authProvider/useRemoteSLO.js

@@ -0,0 +1,32 @@
+import { resolveGatewayUrls as e } from "../../../config/gatewayUrls.js";
+import { isSharedSsoCookieDomain as t } from "../../../utils/authCookie.js";
+import { checkRemoteSLO as n, checkSLO as r } from "../../../components/SSORedirectGuard.js";
+import { useEffect as i } from "react";
+//#region src/shared/providers/shell/authProvider/useRemoteSLO.ts
+function a({ tokens: a, bridgeUrl: o, logout: s, setActiveId: c, setUser: l, setTokens: u, setWorkspaceTokenLocal: d, clearAccounts: f }) {
+	i(() => {
+		if (!a?.accessToken || !o) return;
+		let i = async () => {
+			if (document.visibilityState === "visible") try {
+				if (r()) {
+					c(null), l(null), u(null), d(null), f();
+					return;
+				}
+				if (t()) return;
+				await n(`${e().globalBaseUrl}/global/graphql`, a.accessToken) && s();
+			} catch {}
+		};
+		return document.addEventListener("visibilitychange", i), () => document.removeEventListener("visibilitychange", i);
+	}, [
+		a?.accessToken,
+		o,
+		s,
+		c,
+		l,
+		u,
+		d,
+		f
+	]);
+}
+//#endregion
+export { a as useRemoteSLO };

package/dist/shared/providers/shell/authProvider/useStorageSync.js

@@ -0,0 +1,35 @@
+import { PROFILE_STORAGE_CHANGE_EVENT as e, getProfileTokens as t, getProfileUser as n, getProfileWorkspaceToken as r, resolveActiveProfileId as i } from "../ProfileStorageManager.js";
+import { useCallback as a, useEffect as o } from "react";
+//#region src/shared/providers/shell/authProvider/useStorageSync.ts
+function s({ user: s, tokens: c, workspaceToken: l, activeId: u, setUser: d, setTokens: f, setWorkspaceTokenLocal: p, setActiveId: m, clearAccounts: h, refreshAccounts: g }) {
+	let _ = a(() => {
+		let e = i();
+		if (!e) {
+			(s || c) && (d(null), f(null), p(null), m(null), h());
+			return;
+		}
+		let a = t(e), o = r(e), _ = n(e);
+		e !== u && m(e), a?.accessToken !== c?.accessToken && f(a), o !== l && p(o), _ && _.id !== s?.id && d(_), g();
+	}, [
+		c,
+		s,
+		l,
+		u,
+		g,
+		d,
+		f,
+		p,
+		m,
+		h
+	]);
+	o(() => {
+		let t = () => _();
+		window.addEventListener(e, t), window.addEventListener("storage", t);
+		let n = setInterval(t, 1e4);
+		return () => {
+			window.removeEventListener(e, t), window.removeEventListener("storage", t), clearInterval(n);
+		};
+	}, [_]);
+}
+//#endregion
+export { s as useStorageSync };

package/dist/shared/providers/shell/authProvider/useTokenExpiryTimer.js

@@ -0,0 +1,37 @@
+import { useEffect as e } from "react";
+//#region src/shared/providers/shell/authProvider/useTokenExpiryTimer.ts
+function t({ tokens: t, onRefreshToken: n, onTokenExpired: r, onSessionExpiringSoon: i, refreshAccessToken: a }) {
+	e(() => {
+		if (!t?.expiresAt) return;
+		let e = t.expiresAt - Date.now();
+		if (e <= 0) {
+			n && t?.refreshToken ? a() : r?.();
+			return;
+		}
+		let o = [];
+		if (n && t?.refreshToken) {
+			let t = Math.max(0, e - 300 * 1e3);
+			o.push(setTimeout(() => {
+				a();
+			}, t));
+		}
+		if (i) {
+			let t = Math.max(0, e - 300 * 1e3);
+			o.push(setTimeout(() => {
+				i();
+			}, t));
+		}
+		return (!n || !t?.refreshToken) && o.push(setTimeout(() => {
+			r?.();
+		}, e)), () => o.forEach(clearTimeout);
+	}, [
+		t?.expiresAt,
+		t?.refreshToken,
+		a,
+		n,
+		r,
+		i
+	]);
+}
+//#endregion
+export { t as useTokenExpiryTimer };