@calimero-network/mero-js 29.7.2 → 29.7.4

package/dist/index.cjs

@@ -39,6 +39,7 @@ __export(index_exports, {
   CalimeroError: () => CalimeroError,
   ClusterNotUpgraded: () => ClusterNotUpgraded,
   ConfirmCancelled: () => ConfirmCancelled,
+  ConfirmPromptBlocked: () => ConfirmPromptBlocked,
   ConfirmRequired: () => ConfirmRequired,
   ConsentStale: () => ConsentStale,
   DEFAULT_COLLATERAL_MIRROR: () => DEFAULT_COLLATERAL_MIRROR,
@@ -1511,6 +1512,13 @@ var ConfirmCancelled = class extends Error {
     this.name = "ConfirmCancelled";
   }
 };
+var ConfirmPromptBlocked = class extends Error {
+  constructor(cause) {
+    super("the passkey prompt was blocked by the browser or a password manager");
+    this.cause = cause;
+    this.name = "ConfirmPromptBlocked";
+  }
+};
 var ArgsTooLarge = class extends CalimeroError {
   constructor(message, details = {}) {
     super(413, "ARGS_TOO_LARGE", message, details);
@@ -1717,17 +1725,36 @@ function cancelled(message) {
   error.name = "NotAllowedError";
   return error;
 }
+async function ask(method, options) {
+  const container = navigator.credentials;
+  const page = container[method];
+  try {
+    return await page.call(container, options);
+  } catch (error) {
+    const own = globalThis.CredentialsContainer?.prototype?.[method];
+    if (!own || own === page || !stuck(error)) throw error;
+    return own.call(container, options);
+  }
+}
+function stuck(error) {
+  return /request is already pending/i.test(
+    error?.message?.toString() ?? ""
+  );
+}
 function browserPasskey() {
   return {
     async create(options) {
       const o = options;
-      const cred = await navigator.credentials.create({
+      const cred = await ask("create", {
         publicKey: {
           challenge: buf(fromB64url(o.challenge)),
           rp: o.rp,
           user: { ...o.user, id: buf(fromB64url(o.user.id)) },
           pubKeyCredParams: o.pubKeyCredParams,
-          excludeCredentials: (o.excludeCredentials ?? []).map((c) => ({ type: c.type, id: buf(fromB64url(c.id)) })),
+          excludeCredentials: (o.excludeCredentials ?? []).map((c) => ({
+            type: c.type,
+            id: buf(fromB64url(c.id))
+          })),
           authenticatorSelection: o.authenticatorSelection,
           attestation: "none",
           timeout: o.timeout
@@ -1740,13 +1767,16 @@ function browserPasskey() {
         clientDataJson: b64url(new Uint8Array(r.clientDataJSON))
       };
     },
-    async get(challenge, rpId, allowCredentials) {
-      const cred = await navigator.credentials.get({
+    async get(challenge, rpId, allowCredentials, options) {
+      const cred = await ask("get", {
         publicKey: {
           challenge: buf(challenge),
           rpId,
-          userVerification: "preferred",
-          allowCredentials: (allowCredentials ?? []).map((id) => ({ type: "public-key", id: buf(fromB64url(id)) }))
+          userVerification: options?.userVerification ?? "preferred",
+          allowCredentials: (allowCredentials ?? []).map((id) => ({
+            type: "public-key",
+            id: buf(fromB64url(id))
+          }))
         }
       });
       if (!cred) throw cancelled("passkey sign-in was cancelled");
@@ -1966,6 +1996,19 @@ function pageDeployment(href) {
     return null;
   }
 }
+function userVerificationOf(named) {
+  return named === "required" || named === "preferred" || named === "discouraged" ? named : "required";
+}
+function promptFailure(error) {
+  const e = error;
+  const name = e?.name;
+  const message = typeof e?.message === "string" ? e.message : "";
+  if (name === "InvalidStateError" || /not focused|already pending/i.test(message)) {
+    return new ConfirmPromptBlocked(error);
+  }
+  if (name === "NotAllowedError" || name === "AbortError") return new ConfirmCancelled(error);
+  return error;
+}
 function seg(value) {
   return encodeURIComponent(value);
 }
@@ -2743,11 +2786,11 @@ var CalimeroClient = class _CalimeroClient {
       const d = error.details;
       let assertion;
       try {
-        assertion = await passkey.get(fromB64url(d.challenge), d.rpId, d.allowCredentials);
+        assertion = await passkey.get(fromB64url(d.challenge), d.rpId, d.allowCredentials, {
+          userVerification: userVerificationOf(d.userVerification)
+        });
       } catch (declined) {
-        const name = declined?.name;
-        if (name === "NotAllowedError" || name === "AbortError") throw new ConfirmCancelled(declined);
-        throw declined;
+        throw promptFailure(declined);
       }
       return send({ ...body, confirm: { challengeId: d.challengeId, assertion } });
     }