@burdenoff/microfe-auth 2026.528.1 → 2026.528.3

package/dist/auth/pages/SsoConfigPage.js

@@ -4,8 +4,8 @@ import { useAuthPermissions as r } from "../hooks/useAuthPermissions.js";
 import { ConfirmActionDialog as i } from "../components/ConfirmActionDialog.js";
 import { nativeCopyText as a, nativeImpact as o, nativeNotify as s } from "../../utils/nativeBridge.js";
 import { useCallback as c, useEffect as l, useRef as ee, useState as u } from "react";
-import { useNavigate as te, useSearchParams as d } from "react-router-dom";
-import { useI18n as ne } from "@burdenoff/fe-libs/shared/providers/shell";
+import { useNavigate as te, useSearchParams as ne } from "react-router-dom";
+import { useI18n as d } from "@burdenoff/fe-libs/shared/providers/shell";
 import { Fragment as f, jsx as p, jsxs as m } from "react/jsx-runtime";
 import { useFeatureFlagDetails as re } from "@burdenoff/fe-libs/shared/feature-flags";
 //#region src/auth/pages/SsoConfigPage.tsx
@@ -46,7 +46,7 @@ function g(e) {
 	}
 }
 function _({ bypassEnterprisePlanGate: a = !1 }) {
-	let _ = te(), [v] = d(), { canManageSsoConfig: y, isLoading: ie } = r(), ae = re("workspace.auth.enterprise-sso"), oe = a || ae?.value === !0, b = ee(null), x = v.get("tenant"), S = v.get("org"), C = v.get("workspace"), { ssoConfig: w, oidcConfig: T, isLoading: E, isSaving: D, isDeleting: O, saveSsoConfig: k, deleteSsoConfig: se } = n(x ?? "burdenoff.com"), { t: A } = ne(), j = c((e, t) => {
+	let _ = te(), [v] = ne(), { canManageSsoConfig: ie, isLoading: ae } = r(), oe = re("workspace.auth.enterprise-sso"), se = a || oe?.value === !0, y = ee(null), b = v.get("tenant"), x = v.get("org"), S = v.get("workspace"), { ssoConfig: C, oidcConfig: w, isLoading: T, isSaving: E, isDeleting: D, saveSsoConfig: O, deleteSsoConfig: k } = n(b ?? "burdenoff.com"), { t: A } = d(), j = c((e, t) => {
 		let n = A(e);
 		return n === e ? t : n;
 	}, [A]), [M, ce] = u("saml"), [N, P] = u(!1), [le, F] = u(!1), [I, L] = u(null), [R, z] = u(null), [B, V] = u(""), [H, U] = u(!1), [W, G] = u(!1), [K, q] = u({
@@ -62,14 +62,14 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 		enabled: !1
 	});
 	return l(() => {
-		w && $({
-			entityId: w.entityId || "",
-			ssoUrl: w.ssoUrl || "",
-			sloUrl: w.sloUrl || "",
-			certificate: w.certificate || "",
-			enabled: w.enabled || !1
+		C && $({
+			entityId: C.entityId || "",
+			ssoUrl: C.ssoUrl || "",
+			sloUrl: C.sloUrl || "",
+			certificate: C.certificate || "",
+			enabled: C.enabled || !1
 		});
-	}, [w]), ie ? /* @__PURE__ */ p("div", {
+	}, [C]), ae ? /* @__PURE__ */ p("div", {
 		className: "max-w-5xl mx-auto p-6",
 		children: /* @__PURE__ */ m("div", {
 			className: "text-center py-16",
@@ -78,7 +78,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 				children: j("auth.sso.loadingPermissions", "Loading permissions...")
 			})]
 		})
-	}) : y ? oe ? /* @__PURE__ */ m("div", {
+	}) : ie ? se ? /* @__PURE__ */ m("div", {
 		className: "max-w-5xl mx-auto p-6",
 		children: [
 			/* @__PURE__ */ p(i, {
@@ -88,11 +88,11 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 				description: j("auth.sso.deleteConfirmDesc", "Users will immediately lose the ability to sign in with this SSO setup until a new configuration is saved."),
 				confirmText: j("auth.sso.deleteConfirmButton", "Delete configuration"),
 				variant: "danger",
-				isPending: O,
+				isPending: D,
 				onConfirm: async () => {
 					L(null), z(null), o("medium");
 					try {
-						await se(), s("success"), z(j("auth.sso.deleteSuccess", "SSO configuration deleted successfully.")), F(!1), $({
+						await k(), s("success"), z(j("auth.sso.deleteSuccess", "SSO configuration deleted successfully.")), F(!1), $({
 							entityId: "",
 							ssoUrl: "",
 							sloUrl: "",
@@ -133,7 +133,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 						className: "text-text-secondary mt-1",
 						children: j("auth.sso.description", "Configure enterprise SSO with SAML 2.0 or OIDC")
 					})] })]
-				}), w && /* @__PURE__ */ m("div", {
+				}), C && /* @__PURE__ */ m("div", {
 					className: "flex items-center gap-3",
 					children: [/* @__PURE__ */ p("span", {
 						className: `px-3 py-1 rounded-full text-sm font-medium ${Q.enabled ? "bg-status-success-bg-subtle text-status-success-text" : "bg-bg-sunken text-text-secondary"}`,
@@ -143,7 +143,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 						onClick: async () => {
 							L(null);
 							try {
-								await k({
+								await O({
 									...Q,
 									enabled: !Q.enabled
 								}), z(Q.enabled ? j("auth.sso.ssoDisabled", "SSO disabled") : j("auth.sso.ssoEnabled", "SSO enabled"));
@@ -151,13 +151,13 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								L(e instanceof Error ? e.message : j("auth.sso.statusUpdateFailed", "Failed to update status"));
 							}
 						},
-						disabled: D,
+						disabled: E,
 						className: "px-4 py-2 rounded-lg border border-border-default text-text-primary hover:bg-bg-sunken transition-colors text-sm font-medium",
 						children: Q.enabled ? j("auth.sso.disable", "Disable") : j("auth.sso.enable", "Enable")
 					})]
 				})]
 			}),
-			a && (x ?? S ?? C) && /* @__PURE__ */ m("div", {
+			a && (b ?? x ?? S) && /* @__PURE__ */ m("div", {
 				className: "mb-6 p-4 rounded-xl bg-status-info-bg-subtle border border-status-info-border",
 				children: [/* @__PURE__ */ p("p", {
 					className: "text-sm font-medium text-status-info-text mb-1",
@@ -165,7 +165,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 				}), /* @__PURE__ */ m("div", {
 					className: "flex flex-wrap gap-4 text-xs text-status-info-text",
 					children: [
-						x && /* @__PURE__ */ m("span", { children: [
+						b && /* @__PURE__ */ m("span", { children: [
 							/* @__PURE__ */ p("span", {
 								className: "font-medium",
 								children: j("auth.sso.tenant", "Tenant:")
@@ -173,10 +173,10 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 							" ",
 							/* @__PURE__ */ p("code", {
 								className: "font-mono",
-								children: x
+								children: b
 							})
 						] }),
-						S && /* @__PURE__ */ m("span", { children: [
+						x && /* @__PURE__ */ m("span", { children: [
 							/* @__PURE__ */ p("span", {
 								className: "font-medium",
 								children: j("auth.sso.organization", "Organization:")
@@ -184,10 +184,10 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 							" ",
 							/* @__PURE__ */ p("code", {
 								className: "font-mono",
-								children: S
+								children: x
 							})
 						] }),
-						C && /* @__PURE__ */ m("span", { children: [
+						S && /* @__PURE__ */ m("span", { children: [
 							/* @__PURE__ */ p("span", {
 								className: "font-medium",
 								children: j("auth.sso.workspace", "Workspace:")
@@ -195,7 +195,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 							" ",
 							/* @__PURE__ */ p("code", {
 								className: "font-mono",
-								children: C
+								children: S
 							})
 						] })
 					]
@@ -276,14 +276,14 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 					}, e.id))
 				})
 			}),
-			E && /* @__PURE__ */ m("div", {
+			T && /* @__PURE__ */ m("div", {
 				className: "flex items-center justify-center py-12",
 				children: [/* @__PURE__ */ p(t, { className: "size-8 text-text-link animate-spin" }), /* @__PURE__ */ p("span", {
 					className: "ml-3 text-text-secondary",
 					children: j("auth.sso.loadingConfig", "Loading configuration...")
 				})]
 			}),
-			!E && M === "saml" && /* @__PURE__ */ m("div", {
+			!T && M === "saml" && /* @__PURE__ */ m("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ m("div", {
@@ -328,7 +328,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 											children: j("auth.sso.uploadFile", "Upload Metadata File")
 										}),
 										/* @__PURE__ */ p("input", {
-											ref: b,
+											ref: y,
 											type: "file",
 											accept: ".xml,application/xml,text/xml",
 											onChange: async (e) => {
@@ -347,7 +347,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 													} catch {
 														L(j("auth.sso.readError", "Failed to read metadata file"));
 													} finally {
-														U(!1), b.current && (b.current.value = "");
+														U(!1), y.current && (y.current.value = "");
 													}
 												}
 											},
@@ -484,7 +484,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 						onSubmit: async (e) => {
 							e.preventDefault(), L(null), z(null);
 							try {
-								await k(Q), z(j("auth.sso.saveSuccess", "SSO configuration saved successfully!")), P(!1);
+								await O(Q), z(j("auth.sso.saveSuccess", "SSO configuration saved successfully!")), P(!1);
 							} catch (e) {
 								L(e instanceof Error ? e.message : j("auth.sso.saveFailed", "Failed to save configuration"));
 							}
@@ -496,7 +496,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								children: [/* @__PURE__ */ p("h3", {
 									className: "text-lg font-medium text-text-primary",
 									children: j("auth.sso.idpSettings", "Identity Provider (IdP) Settings")
-								}), !N && w && /* @__PURE__ */ p("button", {
+								}), !N && C && /* @__PURE__ */ p("button", {
 									type: "button",
 									onClick: () => P(!0),
 									className: "px-4 py-2 rounded-lg border border-status-info-border text-text-link hover:bg-status-info-bg-subtle text-sm font-medium transition-colors",
@@ -529,7 +529,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 												...Q,
 												entityId: e.target.value
 											}),
-											disabled: !N && !!w,
+											disabled: !N && !!C,
 											placeholder: j("auth.sso.idpEntityIdPlaceholder", "https://your-idp.example.com/saml/metadata"),
 											required: !0,
 											"aria-required": "true",
@@ -565,7 +565,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 												...Q,
 												ssoUrl: e.target.value
 											}),
-											disabled: !N && !!w,
+											disabled: !N && !!C,
 											placeholder: j("auth.sso.ssoUrlPlaceholder", "https://your-idp.example.com/saml/sso"),
 											required: !0,
 											"aria-required": "true",
@@ -578,32 +578,6 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 											children: j("auth.sso.ssoUrlHelper", "The URL where users are redirected to authenticate")
 										})
 									] }),
-									/* @__PURE__ */ m("div", { children: [
-										/* @__PURE__ */ p("label", {
-											htmlFor: "sso-slo-url",
-											className: "block text-sm font-medium text-text-primary mb-2",
-											children: j("auth.sso.sloUrl", "Single Logout (SLO) URL")
-										}),
-										/* @__PURE__ */ p("input", {
-											id: "sso-slo-url",
-											type: "url",
-											"aria-label": j("auth.sso.sloUrl", "Single Logout (SLO) URL"),
-											value: Q.sloUrl,
-											onChange: (e) => $({
-												...Q,
-												sloUrl: e.target.value
-											}),
-											disabled: !N && !!w,
-											placeholder: j("auth.sso.sloUrlPlaceholder", "https://your-idp.example.com/saml/slo"),
-											"aria-describedby": "sso-slo-url-hint",
-											className: "block w-full px-4 py-3 border border-border-default rounded-xl bg-bg-surface text-text-primary placeholder-text-tertiary focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg disabled:opacity-60 disabled:cursor-not-allowed transition-all"
-										}),
-										/* @__PURE__ */ p("p", {
-											id: "sso-slo-url-hint",
-											className: "mt-1 text-xs text-text-secondary",
-											children: j("auth.sso.sloUrlHelper", "Optional: URL for single logout across all applications")
-										})
-									] }),
 									/* @__PURE__ */ m("div", { children: [
 										/* @__PURE__ */ m("label", {
 											htmlFor: "sso-certificate",
@@ -626,7 +600,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 												...Q,
 												certificate: e.target.value
 											}),
-											disabled: !N && !!w,
+											disabled: !N && !!C,
 											placeholder: j("auth.sso.certificatePlaceholder", "-----BEGIN CERTIFICATE-----\nMIIDpDCCAoygAwIBAgIGAX...\n-----END CERTIFICATE-----"),
 											required: !0,
 											"aria-required": "true",
@@ -642,22 +616,22 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 									] })
 								]
 							}),
-							(N || !w) && /* @__PURE__ */ m("div", {
+							(N || !C) && /* @__PURE__ */ m("div", {
 								className: "mt-6 flex items-center gap-3",
 								children: [/* @__PURE__ */ p("button", {
 									type: "submit",
-									disabled: D,
+									disabled: E,
 									className: "auth-primary-button flex items-center gap-2 px-6 py-3 font-medium",
-									children: D ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(t, { className: "size-4 animate-spin" }), j("auth.sso.saving", "Saving...")] }) : j("auth.sso.saveConfig", "Save Configuration")
+									children: E ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(t, { className: "size-4 animate-spin" }), j("auth.sso.saving", "Saving...")] }) : j("auth.sso.saveConfig", "Save Configuration")
 								}), N && /* @__PURE__ */ p("button", {
 									type: "button",
 									onClick: () => {
-										P(!1), w && $({
-											entityId: w.entityId || "",
-											ssoUrl: w.ssoUrl || "",
-											sloUrl: w.sloUrl || "",
-											certificate: w.certificate || "",
-											enabled: w.enabled || !1
+										P(!1), C && $({
+											entityId: C.entityId || "",
+											ssoUrl: C.ssoUrl || "",
+											sloUrl: C.sloUrl || "",
+											certificate: C.certificate || "",
+											enabled: C.enabled || !1
 										});
 									},
 									className: "px-6 py-3 rounded-xl border border-border-default text-text-primary font-medium hover:bg-bg-sunken transition-colors",
@@ -666,7 +640,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 							})
 						]
 					}),
-					w && /* @__PURE__ */ m("div", {
+					C && /* @__PURE__ */ m("div", {
 						className: "p-6 rounded-xl border border-status-error-border bg-status-error-bg-subtle",
 						children: [
 							/* @__PURE__ */ p("h3", {
@@ -680,15 +654,15 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 							/* @__PURE__ */ p("button", {
 								type: "button",
 								onClick: () => F(!0),
-								disabled: O,
+								disabled: D,
 								className: "px-4 py-2 rounded-lg bg-status-error-bg text-white font-medium hover:bg-status-error-bg-hover disabled:opacity-50 transition-colors flex items-center gap-2",
-								children: O ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(t, { className: "size-4 animate-spin" }), j("auth.sso.deleting", "Deleting...")] }) : j("auth.sso.deleteConfig", "Delete SSO Configuration")
+								children: D ? /* @__PURE__ */ m(f, { children: [/* @__PURE__ */ p(t, { className: "size-4 animate-spin" }), j("auth.sso.deleting", "Deleting...")] }) : j("auth.sso.deleteConfig", "Delete SSO Configuration")
 							})
 						]
 					})
 				]
 			}),
-			!E && M === "oidc" && /* @__PURE__ */ m("div", {
+			!T && M === "oidc" && /* @__PURE__ */ m("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ m("div", {
@@ -716,21 +690,21 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								className: "flex items-center gap-2",
 								children: [/* @__PURE__ */ p("code", {
 									className: "flex-1 px-3 py-2 rounded-lg bg-bg-sunken text-sm text-text-primary font-mono break-all",
-									children: T?.issuer ? `${T.issuer}/.well-known/openid-configuration` : "Discovery endpoint unavailable until OIDC is configured"
+									children: w?.issuer ? `${w.issuer}/.well-known/openid-configuration` : "Discovery endpoint unavailable until OIDC is configured"
 								}), /* @__PURE__ */ p("button", {
 									type: "button",
 									onClick: () => {
-										let e = T?.issuer ? `${T.issuer}/.well-known/openid-configuration` : "";
+										let e = w?.issuer ? `${w.issuer}/.well-known/openid-configuration` : "";
 										e && h(e);
 									},
-									disabled: !T?.issuer,
+									disabled: !w?.issuer,
 									className: "px-3 py-2 rounded-lg border border-border-default text-text-secondary hover:bg-bg-sunken flex-shrink-0",
 									children: j("auth.sso.copy", "Copy")
 								})]
 							})
 						]
 					}),
-					T && /* @__PURE__ */ m("div", {
+					w && /* @__PURE__ */ m("div", {
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [/* @__PURE__ */ p("h3", {
 							className: "text-lg font-medium text-text-primary mb-4",
@@ -740,23 +714,23 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 							children: [
 								{
 									label: j("auth.sso.issuer", "Issuer"),
-									value: T.issuer
+									value: w.issuer
 								},
 								{
 									label: j("auth.sso.authorizationEndpoint", "Authorization Endpoint"),
-									value: T.authorizationEndpoint
+									value: w.authorizationEndpoint
 								},
 								{
 									label: j("auth.sso.tokenEndpoint", "Token Endpoint"),
-									value: T.tokenEndpoint
+									value: w.tokenEndpoint
 								},
 								{
 									label: j("auth.sso.userinfoEndpoint", "UserInfo Endpoint"),
-									value: T.userinfoEndpoint
+									value: w.userinfoEndpoint
 								},
 								{
 									label: j("auth.sso.jwksUri", "JWKS URI"),
-									value: T.jwksUri
+									value: w.jwksUri
 								}
 							].map((e) => /* @__PURE__ */ m("div", {
 								className: "flex items-start gap-4",
@@ -813,7 +787,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 					})
 				]
 			}),
-			!E && M === "clients" && /* @__PURE__ */ m("div", {
+			!T && M === "clients" && /* @__PURE__ */ m("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ m("div", {
@@ -1052,7 +1026,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 											}
 											Y(!0), L(null);
 											try {
-												let e = T?.registrationEndpoint;
+												let e = w?.registrationEndpoint;
 												if (!e) throw Error(j("auth.sso.oidcNotConfigured", "OIDC dynamic client registration is not configured for this environment."));
 												let t = await fetch(e, {
 													method: "POST",
@@ -1165,7 +1139,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 					})
 				]
 			}),
-			!E && M === "test" && /* @__PURE__ */ m("div", {
+			!T && M === "test" && /* @__PURE__ */ m("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ m("div", {
@@ -1189,7 +1163,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								className: "text-sm text-text-secondary mb-4",
 								children: j("auth.sso.spInitiatedTestDesc", "Click the button below to initiate an SSO login flow. You will be redirected to your IdP to authenticate.")
 							}),
-							w && w.enabled ? /* @__PURE__ */ m("a", {
+							C && C.enabled ? /* @__PURE__ */ m("a", {
 								href: `${window.location.origin}/auth/sso/login`,
 								className: "inline-flex items-center gap-2 px-6 py-3 rounded-xl bg-status-success-bg text-white font-medium shadow-sm hover:opacity-90 transition-all duration-200",
 								children: [/* @__PURE__ */ p("svg", {
@@ -1206,7 +1180,7 @@ function _({ bypassEnterprisePlanGate: a = !1 }) {
 								}), j("auth.sso.testSsoLoginButton", "Test SSO Login")]
 							}) : /* @__PURE__ */ p("div", {
 								className: "p-4 rounded-xl bg-bg-sunken/50 text-text-secondary text-sm",
-								children: w ? j("auth.sso.disabledTest", "SSO is disabled. Enable it to test the login flow.") : j("auth.sso.notConfigured", "SSO is not configured. Please configure your IdP settings first.")
+								children: C ? j("auth.sso.disabledTest", "SSO is disabled. Enable it to test the login flow.") : j("auth.sso.notConfigured", "SSO is not configured. Please configure your IdP settings first.")
 							})
 						]
 					}),