@burdenoff/microfe-auth 2026.527.1 → 2026.527.3

package/dist/auth/pages/SsoConfigPage.js

@@ -1,7 +1,6 @@
-import { useSsoOperations as e } from "../hooks/useSsoOperations.js";
-import { useAuthPermissions as t } from "../hooks/useAuthPermissions.js";
-import "../hooks/index.js";
-import { AlertIcon as n, SpinnerIcon as r } from "../components/AuthIcons.js";
+import { AlertIcon as e, SpinnerIcon as t } from "../components/AuthIcons.js";
+import { useSsoOperations as n } from "../hooks/useSsoOperations.js";
+import { useAuthPermissions as r } from "../hooks/useAuthPermissions.js";
 import { ConfirmActionDialog as i } from "../components/ConfirmActionDialog.js";
 import { nativeCopyText as a, nativeImpact as o, nativeNotify as s } from "../../utils/nativeBridge.js";
 import { useCallback as c, useEffect as l, useRef as ee, useState as u } from "react";
@@ -47,7 +46,7 @@ function g(e) {
 	}
 }
 function _({ bypassEnterprisePlanGate: a = !1 }) {
-	let _ = te(), [v] = d(), { canManageSsoConfig: y, isLoading: ie } = t(), ae = re("workspace.auth.enterprise-sso"), oe = a || ae?.value === !0, b = ee(null), x = v.get("tenant"), S = v.get("org"), C = v.get("workspace"), { ssoConfig: w, oidcConfig: T, isLoading: E, isSaving: D, isDeleting: O, saveSsoConfig: k, deleteSsoConfig: se } = e(x ?? "burdenoff.com"), { t: A } = ne(), j = c((e, t) => {
+	let _ = te(), [v] = d(), { canManageSsoConfig: y, isLoading: ie } = r(), ae = re("workspace.auth.enterprise-sso"), oe = a || ae?.value === !0, b = ee(null), x = v.get("tenant"), S = v.get("org"), C = v.get("workspace"), { ssoConfig: w, oidcConfig: T, isLoading: E, isSaving: D, isDeleting: O, saveSsoConfig: k, deleteSsoConfig: se } = n(x ?? "burdenoff.com"), { t: A } = ne(), j = c((e, t) => {
 		let n = A(e);
 		return n === e ? t : n;
 	}, [A]), [M, ce] = u("saml"), [N, P] = u(!1), [le, F] = u(!1), [I, L] = u(null), [R, z] = u(null), [B, V] = u(""), [H, U] = u(!1), [W, G] = u(!1), [K, q] = u({
@@ -74,7 +73,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 		className: "max-w-5xl mx-auto p-6",
 		children: /* @__PURE__ */ m("div", {
 			className: "text-center py-16",
-			children: [/* @__PURE__ */ p(r, { className: "w-8 h-8 mx-auto text-text-secondary animate-spin" }), /* @__PURE__ */ p("p", {
+			children: [/* @__PURE__ */ p(t, { className: "size-8 mx-auto text-text-secondary animate-spin" }), /* @__PURE__ */ p("p", {
 				className: "mt-4 text-text-secondary",
 				children: j("auth.sso.loadingPermissions", "Loading permissions...")
 			})]
@@ -110,11 +109,12 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 				children: [/* @__PURE__ */ m("div", {
 					className: "flex items-center gap-4",
 					children: [/* @__PURE__ */ p("button", {
+						type: "button",
 						onClick: () => _("/auth/security"),
 						"aria-label": j("auth.sso.backToSecurity", "Back to Security"),
 						className: "p-2 rounded-lg hover:bg-bg-sunken transition-colors",
 						children: /* @__PURE__ */ p("svg", {
-							className: "w-5 h-5 text-text-secondary",
+							className: "size-5 text-text-secondary",
 							fill: "none",
 							viewBox: "0 0 24 24",
 							stroke: "currentColor",
@@ -139,6 +139,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 						className: `px-3 py-1 rounded-full text-sm font-medium ${Q.enabled ? "bg-status-success-bg-subtle text-status-success-text" : "bg-bg-sunken text-text-secondary"}`,
 						children: Q.enabled ? j("auth.sso.enabled", "Enabled") : j("auth.sso.disabled", "Disabled")
 					}), /* @__PURE__ */ p("button", {
+						type: "button",
 						onClick: async () => {
 							L(null);
 							try {
@@ -202,12 +203,13 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 			}),
 			I && /* @__PURE__ */ m("div", {
 				className: "mb-6 flex items-start gap-3 p-4 rounded-xl bg-status-error-bg-subtle border border-status-error-border",
-				children: [/* @__PURE__ */ p(n, { className: "w-5 h-5 text-status-error-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ m("div", {
+				children: [/* @__PURE__ */ p(e, { className: "size-5 text-status-error-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ m("div", {
 					className: "flex-1",
 					children: [/* @__PURE__ */ p("p", {
 						className: "text-sm text-status-error-text",
 						children: I
 					}), /* @__PURE__ */ p("button", {
+						type: "button",
 						onClick: () => L(null),
 						className: "mt-2 text-sm text-status-error-text hover:underline",
 						children: j("auth.sso.dismiss", "Dismiss")
@@ -217,7 +219,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 			R && /* @__PURE__ */ m("div", {
 				className: "mb-6 flex items-start gap-3 p-4 rounded-xl bg-status-success-bg-subtle border border-status-success-border",
 				children: [/* @__PURE__ */ p("svg", {
-					className: "w-5 h-5 text-status-success-text flex-shrink-0 mt-0.5",
+					className: "size-5 text-status-success-text flex-shrink-0 mt-0.5",
 					fill: "currentColor",
 					viewBox: "0 0 20 20",
 					children: /* @__PURE__ */ p("path", {
@@ -231,6 +233,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 						className: "text-sm text-status-success-text",
 						children: R
 					}), /* @__PURE__ */ p("button", {
+						type: "button",
 						onClick: () => z(null),
 						className: "mt-2 text-sm text-status-success-text hover:underline",
 						children: j("auth.sso.dismiss", "Dismiss")
@@ -263,6 +266,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 							icon: "🧪"
 						}
 					].map((e) => /* @__PURE__ */ m("button", {
+						type: "button",
 						onClick: () => ce(e.id),
 						className: `pb-3 text-sm font-medium transition-colors relative ${M === e.id ? "text-text-link" : "text-text-secondary hover:text-text-primary"}`,
 						children: [/* @__PURE__ */ m("span", {
@@ -274,7 +278,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 			}),
 			E && /* @__PURE__ */ m("div", {
 				className: "flex items-center justify-center py-12",
-				children: [/* @__PURE__ */ p(r, { className: "w-8 h-8 text-text-link animate-spin" }), /* @__PURE__ */ p("span", {
+				children: [/* @__PURE__ */ p(t, { className: "size-8 text-text-link animate-spin" }), /* @__PURE__ */ p("span", {
 					className: "ml-3 text-text-secondary",
 					children: j("auth.sso.loadingConfig", "Loading configuration...")
 				})]
@@ -348,13 +352,14 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 												}
 											},
 											className: "hidden",
-											id: "metadata-file"
+											id: "metadata-file",
+											"aria-label": j("auth.sso.uploadFile", "Upload Metadata File")
 										}),
 										/* @__PURE__ */ m("label", {
 											htmlFor: "metadata-file",
 											className: "flex items-center justify-center gap-2 w-full px-4 py-3 border-2 border-dashed border-border-default rounded-xl cursor-pointer hover:border-action-primary-bg transition-colors",
-											children: [H ? /* @__PURE__ */ p(r, { className: "w-5 h-5 animate-spin text-text-link" }) : /* @__PURE__ */ p("svg", {
-												className: "w-5 h-5 text-text-tertiary",
+											children: [H ? /* @__PURE__ */ p(t, { className: "size-5 animate-spin text-text-link" }) : /* @__PURE__ */ p("svg", {
+												className: "size-5 text-text-tertiary",
 												fill: "none",
 												viewBox: "0 0 24 24",
 												stroke: "currentColor",
@@ -412,8 +417,8 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 											},
 											disabled: H || !B,
 											className: "px-4 py-2.5 rounded-xl bg-action-primary-bg text-white font-medium hover:bg-action-primary-bg-hover disabled:opacity-50 disabled:cursor-not-allowed transition-colors flex items-center gap-2",
-											children: [H ? /* @__PURE__ */ p(r, { className: "w-4 h-4 animate-spin" }) : /* @__PURE__ */ p("svg", {
-												className: "w-4 h-4",
+											children: [H ? /* @__PURE__ */ p(t, { className: "size-4 animate-spin" }) : /* @__PURE__ */ p("svg", {
+												className: "size-4",
 												fill: "none",
 												viewBox: "0 0 24 24",
 												stroke: "currentColor",
@@ -452,6 +457,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-sunken text-sm text-text-primary font-mono",
 										children: [window.location.origin, "/auth/saml/metadata"]
 									}), /* @__PURE__ */ p("button", {
+										type: "button",
 										onClick: () => void h(`${window.location.origin}/auth/saml/metadata`),
 										className: "px-3 py-2 rounded-lg border border-border-default text-text-secondary hover:bg-bg-sunken",
 										children: j("auth.sso.copy", "Copy")
@@ -465,6 +471,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-sunken text-sm text-text-primary font-mono",
 										children: [window.location.origin, "/auth/sso/callback"]
 									}), /* @__PURE__ */ p("button", {
+										type: "button",
 										onClick: () => void h(`${window.location.origin}/auth/sso/callback`),
 										className: "px-3 py-2 rounded-lg border border-border-default text-text-secondary hover:bg-bg-sunken",
 										children: j("auth.sso.copy", "Copy")
@@ -516,6 +523,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										/* @__PURE__ */ p("input", {
 											id: "sso-entity-id",
 											type: "url",
+											"aria-label": j("auth.sso.idpEntityId", "IdP Entity ID"),
 											value: Q.entityId,
 											onChange: (e) => $({
 												...Q,
@@ -551,6 +559,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										/* @__PURE__ */ p("input", {
 											id: "sso-sso-url",
 											type: "url",
+											"aria-label": j("auth.sso.ssoUrl", "SSO URL"),
 											value: Q.ssoUrl,
 											onChange: (e) => $({
 												...Q,
@@ -578,6 +587,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										/* @__PURE__ */ p("input", {
 											id: "sso-slo-url",
 											type: "url",
+											"aria-label": j("auth.sso.sloUrl", "Single Logout (SLO) URL"),
 											value: Q.sloUrl,
 											onChange: (e) => $({
 												...Q,
@@ -610,6 +620,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										}),
 										/* @__PURE__ */ p("textarea", {
 											id: "sso-certificate",
+											"aria-label": j("auth.sso.certificate", "X.509 Certificate"),
 											value: Q.certificate,
 											onChange: (e) => $({
 												...Q,
@@ -637,7 +648,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 									type: "submit",
 									disabled: D,
 									className: "auth-primary-button flex items-center gap-2 px-6 py-3 font-medium",
-									children: D ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(r, { className: "w-4 h-4 animate-spin" }), j("auth.sso.saving", "Saving...")] }) : j("auth.sso.saveConfig", "Save Configuration")
+									children: D ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(t, { className: "size-4 animate-spin" }), j("auth.sso.saving", "Saving...")] }) : j("auth.sso.saveConfig", "Save Configuration")
 								}), N && /* @__PURE__ */ p("button", {
 									type: "button",
 									onClick: () => {
@@ -667,10 +678,11 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								children: j("auth.sso.dangerZoneDesc", "Deleting the SSO configuration will prevent users from signing in with their enterprise credentials. This action cannot be undone.")
 							}),
 							/* @__PURE__ */ p("button", {
+								type: "button",
 								onClick: () => F(!0),
 								disabled: O,
 								className: "px-4 py-2 rounded-lg bg-status-error-bg text-white font-medium hover:bg-status-error-bg-hover disabled:opacity-50 transition-colors flex items-center gap-2",
-								children: O ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(r, { className: "w-4 h-4 animate-spin" }), j("auth.sso.deleting", "Deleting...")] }) : j("auth.sso.deleteConfig", "Delete SSO Configuration")
+								children: O ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(t, { className: "size-4 animate-spin" }), j("auth.sso.deleting", "Deleting...")] }) : j("auth.sso.deleteConfig", "Delete SSO Configuration")
 							})
 						]
 					})
@@ -706,6 +718,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 									className: "flex-1 px-3 py-2 rounded-lg bg-bg-sunken text-sm text-text-primary font-mono break-all",
 									children: T?.issuer ? `${T.issuer}/.well-known/openid-configuration` : "Discovery endpoint unavailable until OIDC is configured"
 								}), /* @__PURE__ */ p("button", {
+									type: "button",
 									onClick: () => {
 										let e = T?.issuer ? `${T.issuer}/.well-known/openid-configuration` : "";
 										e && h(e);
@@ -791,7 +804,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								}
 							].map((e) => /* @__PURE__ */ m("div", {
 								className: "flex items-center gap-2",
-								children: [/* @__PURE__ */ p("span", { className: `w-2 h-2 rounded-full ${e.status ? "bg-status-success-text" : "bg-bg-sunken"}` }), /* @__PURE__ */ p("span", {
+								children: [/* @__PURE__ */ p("span", { className: `size-2 rounded-full ${e.status ? "bg-status-success-text" : "bg-bg-sunken"}` }), /* @__PURE__ */ p("span", {
 									className: "text-sm text-text-primary",
 									children: e.name
 								})]
@@ -824,10 +837,12 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								className: "text-sm text-status-success-text mt-1",
 								children: j("auth.sso.clientCreatedDesc", "Save these credentials securely. The client secret will not be shown again.")
 							})] }), /* @__PURE__ */ p("button", {
+								type: "button",
 								onClick: () => Z(null),
+								"aria-label": j("auth.sso.dismissClientCredentials", "Dismiss"),
 								className: "text-status-success-text hover:text-status-success-text",
 								children: /* @__PURE__ */ p("svg", {
-									className: "w-5 h-5",
+									className: "size-5",
 									fill: "none",
 									viewBox: "0 0 24 24",
 									stroke: "currentColor",
@@ -851,6 +866,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-surface text-sm font-mono border border-status-success-border",
 										children: X.client_id
 									}), /* @__PURE__ */ p("button", {
+										type: "button",
 										onClick: () => void h(X.client_id),
 										className: "px-3 py-2 rounded-lg bg-status-success-bg text-white text-sm hover:bg-status-success-bg",
 										children: j("auth.sso.copy", "Copy")
@@ -865,6 +881,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-surface text-sm font-mono border border-status-success-border",
 										children: X.client_secret
 									}), /* @__PURE__ */ p("button", {
+										type: "button",
 										onClick: () => void h(X.client_secret || ""),
 										className: "px-3 py-2 rounded-lg bg-status-success-bg text-white text-sm hover:bg-status-success-bg",
 										children: j("auth.sso.copy", "Copy")
@@ -888,10 +905,11 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								className: "text-lg font-medium text-text-primary",
 								children: j("auth.sso.registerClient", "Register New Client")
 							}), !W && /* @__PURE__ */ m("button", {
+								type: "button",
 								onClick: () => G(!0),
 								className: "px-4 py-2 rounded-lg bg-action-primary-bg text-white font-medium hover:bg-action-primary-bg-hover transition-colors flex items-center gap-2",
 								children: [/* @__PURE__ */ p("svg", {
-									className: "w-4 h-4",
+									className: "size-4",
 									fill: "none",
 									viewBox: "0 0 24 24",
 									stroke: "currentColor",
@@ -921,6 +939,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								}), /* @__PURE__ */ p("input", {
 									id: "oidc-client-name",
 									type: "text",
+									"aria-label": j("auth.sso.oidcClientName", "Client Name"),
 									value: K.client_name,
 									onChange: (e) => q({
 										...K,
@@ -947,6 +966,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 									/* @__PURE__ */ p("input", {
 										id: "oidc-redirect-uris",
 										type: "text",
+										"aria-label": j("auth.sso.oidcRedirectUris", "Redirect URIs"),
 										value: K.redirect_uris,
 										onChange: (e) => q({
 											...K,
@@ -976,6 +996,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										className: "flex items-center gap-2 cursor-pointer",
 										children: [/* @__PURE__ */ p("input", {
 											type: "checkbox",
+											"aria-label": e,
 											checked: K.grant_types.includes(e),
 											onChange: (t) => {
 												t.target.checked ? q({
@@ -986,7 +1007,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 													grant_types: K.grant_types.filter((t) => t !== e)
 												});
 											},
-											className: "w-4 h-4 rounded border-border-default text-text-link focus:ring-action-primary-bg"
+											className: "size-4 rounded border-border-default text-text-link focus:ring-action-primary-bg"
 										}), /* @__PURE__ */ p("span", {
 											className: "text-sm text-text-primary",
 											children: e.replace(/_/g, " ")
@@ -1023,6 +1044,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								/* @__PURE__ */ m("div", {
 									className: "flex items-center gap-3 pt-2",
 									children: [/* @__PURE__ */ p("button", {
+										type: "button",
 										onClick: async () => {
 											if (!K.client_name || !K.redirect_uris) {
 												L(j("auth.sso.clientRequired", "Client name and redirect URI are required"));
@@ -1061,8 +1083,9 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 										},
 										disabled: J,
 										className: "auth-primary-button flex items-center gap-2 px-6 py-3 font-medium",
-										children: J ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(r, { className: "w-4 h-4 animate-spin" }), j("auth.sso.registering", "Registering...")] }) : j("auth.sso.registerClientButton", "Register Client")
+										children: J ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(t, { className: "size-4 animate-spin" }), j("auth.sso.registering", "Registering...")] }) : j("auth.sso.registerClientButton", "Register Client")
 									}), /* @__PURE__ */ p("button", {
+										type: "button",
 										onClick: () => {
 											G(!1), q({
 												client_name: "",
@@ -1079,7 +1102,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 						}) : /* @__PURE__ */ m("div", {
 							className: "text-center py-8 text-text-secondary",
 							children: [/* @__PURE__ */ p("svg", {
-								className: "w-12 h-12 mx-auto mb-3 text-text-muted",
+								className: "size-12 mx-auto mb-3 text-text-muted",
 								fill: "none",
 								viewBox: "0 0 24 24",
 								stroke: "currentColor",
@@ -1170,7 +1193,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								href: `${window.location.origin}/auth/sso/login`,
 								className: "inline-flex items-center gap-2 px-6 py-3 rounded-xl bg-status-success-bg text-white font-medium shadow-sm hover:opacity-90 transition-all duration-200",
 								children: [/* @__PURE__ */ p("svg", {
-									className: "w-5 h-5",
+									className: "size-5",
 									fill: "none",
 									viewBox: "0 0 24 24",
 									stroke: "currentColor",
@@ -1206,8 +1229,8 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 			className: "text-center py-16 border-2 border-dashed border-border-subtle rounded-xl",
 			children: [
 				/* @__PURE__ */ p("div", {
-					className: "w-16 h-16 mx-auto mb-4 rounded-full bg-status-warning-bg-subtle flex items-center justify-center",
-					children: /* @__PURE__ */ p(n, { className: "w-8 h-8 text-status-warning-text" })
+					className: "size-16 mx-auto mb-4 rounded-full bg-status-warning-bg-subtle flex items-center justify-center",
+					children: /* @__PURE__ */ p(e, { className: "size-8 text-status-warning-text" })
 				}),
 				/* @__PURE__ */ p("h2", {
 					className: "text-xl font-semibold text-text-primary mb-2",
@@ -1229,8 +1252,8 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 			className: "text-center py-16 border-2 border-dashed border-border-subtle rounded-xl",
 			children: [
 				/* @__PURE__ */ p("div", {
-					className: "w-16 h-16 mx-auto mb-4 rounded-full bg-status-error-bg-subtle flex items-center justify-center",
-					children: /* @__PURE__ */ p(n, { className: "w-8 h-8 text-status-error-text" })
+					className: "size-16 mx-auto mb-4 rounded-full bg-status-error-bg-subtle flex items-center justify-center",
+					children: /* @__PURE__ */ p(e, { className: "size-8 text-status-error-text" })
 				}),
 				/* @__PURE__ */ p("h2", {
 					className: "text-xl font-semibold text-text-primary mb-2",