@camstack/addon-auth 1.2.148 → 1.2.150

package/dist/oidc/auth-oidc.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-C2ZA1nlf.js");
+const require_dist = require("../dist-Cfzg2F5r.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_dist.__toESM(node_crypto);
 //#region ../../node_modules/jose/dist/webapi/lib/buffer_utils.js
@@ -886,6 +886,90 @@ function clientSecretPatchOf(value) {
 	return { clientSecret: value };
 }
 //#endregion
+//#region src/oidc/oidc-provider-record-kinds.ts
+var OIDC_PROVIDER_KIND = "oidc-provider";
+var usernameClaimSchema = require_dist._enum([
+	"preferred_username",
+	"email",
+	"sub"
+]);
+var OidcProviderBodySchema = require_dist.object({
+	displayName: require_dist.string().min(1),
+	icon: require_dist.string(),
+	issuerUrl: require_dist.string(),
+	clientId: require_dist.string(),
+	clientSecret: require_dist.string().meta({ secret: true }),
+	redirectUri: require_dist.string(),
+	scopes: require_dist.string(),
+	usernameClaim: usernameClaimSchema
+});
+var oidcProviderEntryKind = require_dist.defineEntryKind(OIDC_PROVIDER_KIND, {
+	title: "OIDC providers",
+	nameField: "displayName",
+	schema: OidcProviderBodySchema,
+	writeTrigger: "an operator adds, edits or removes an OpenID Connect identity provider",
+	adoptsFrom: require_dist.settingsArrayAdoptsFrom("auth-oidc", "providers")
+});
+//#endregion
+//#region src/oidc/oidc-provider-store.ts
+function rowToProvider(id, data) {
+	return {
+		...DEFAULT_OIDC_PROVIDER,
+		...data,
+		id
+	};
+}
+var OidcProviderStore = class OidcProviderStore {
+	kind;
+	constructor(kind) {
+		this.kind = kind;
+	}
+	static of(records) {
+		return new OidcProviderStore(records.kind(oidcProviderEntryKind));
+	}
+	async listResolved() {
+		const page = await this.kind.query({ limit: 1e3 });
+		const out = [];
+		for (const record of page.records) {
+			let data = record.data;
+			try {
+				const resolved = await this.kind.getResolved(record.id);
+				if (resolved !== null) data = resolved.data;
+			} catch (err) {
+				if (!(err instanceof require_dist.RecordSecretUnavailableError)) throw err;
+			}
+			const parsed = OidcProviderBodySchema.safeParse(data);
+			if (!parsed.success) continue;
+			out.push(rowToProvider(record.id, parsed.data));
+		}
+		return out;
+	}
+	async replaceAll(providers) {
+		const page = await this.kind.query({ limit: 1e3 });
+		const nextIds = new Set(providers.map((p) => p.id));
+		for (const row of page.records) if (!nextIds.has(row.id)) await this.kind.delete(row.id);
+		for (const row of providers) {
+			const { id, displayName, icon, issuerUrl, clientId, clientSecret, redirectUri, scopes, usernameClaim } = row;
+			const body = {
+				displayName,
+				icon,
+				issuerUrl,
+				clientId,
+				clientSecret,
+				redirectUri,
+				scopes,
+				usernameClaim
+			};
+			const parsed = oidcProviderEntryKind.schema.safeParse(body);
+			if (!parsed.success) throw new Error(`invalid OIDC provider '${id}': ${parsed.error.message}`);
+			await this.kind.put({
+				id,
+				data: parsed.data
+			});
+		}
+	}
+};
+//#endregion
 //#region src/oidc/auth-oidc.addon.ts
 /**
 * Generic OpenID Connect (OIDC) authentication provider.
@@ -976,6 +1060,8 @@ function returnBaseOf(redirectUri, callbackPath) {
 var AuthOidcAddon = class extends require_dist.BaseAddon {
 	/** Per-provider runtime state, keyed by `provider.id`. */
 	instances = /* @__PURE__ */ new Map();
+	providerStore = null;
+	activeProviders = [];
 	/** Pending OAuth states across ALL providers. The pending entry
 	*  carries `providerId` so the /callback handler picks the right config. */
 	pendingStates = /* @__PURE__ */ new Map();
@@ -985,9 +1071,24 @@ var AuthOidcAddon = class extends require_dist.BaseAddon {
 		super({ ...DEFAULT_CONFIG });
 	}
 	async onConfigChanged() {
+		this.activeProviders = await this.loadPersistedProviders();
 		this.rebuildInstances();
 	}
 	async onInitialize() {
+		const records = this.ctx.records;
+		if (records === void 0) throw new Error("auth-oidc: ctx.records is required (hub-only addon)");
+		await records.declare({ "oidc-provider": oidcProviderEntryKind });
+		this.providerStore = OidcProviderStore.of(records);
+		this.activeProviders = await this.loadPersistedProviders();
+		if ((await this.providerStore.listResolved()).length === 0 && this.config.providers.length > 0) try {
+			await this.providerStore.replaceAll(this.config.providers);
+			this.activeProviders = await this.loadPersistedProviders();
+		} catch (err) {
+			const msg = err instanceof Error ? err.message : String(err);
+			if (!msg.startsWith("records/foreign-marker:") && !msg.startsWith("records/adoption-pending:")) throw err;
+			this.ctx.logger.warn("OIDC: deferred config→records migrate (secret markers need adopt remap)", { meta: { error: msg } });
+			this.activeProviders = [...this.config.providers];
+		}
 		this.rebuildInstances();
 		const authProvider = {
 			validateCredentials: async () => null,
@@ -1045,7 +1146,7 @@ var AuthOidcAddon = class extends require_dist.BaseAddon {
 			connectionFormSchema: async () => OIDC_CONNECTION_FORM_SCHEMA,
 			listConnections: async () => {
 				const secrets = this.ctx.secrets;
-				return this.config.providers.map((row) => {
+				return this.activeProviders.map((row) => {
 					const merged = {
 						...DEFAULT_PROVIDER,
 						...row
@@ -1071,15 +1172,15 @@ var AuthOidcAddon = class extends require_dist.BaseAddon {
 				});
 			},
 			createConnection: async (input) => {
-				const result = createOidcConnection(this.config, input);
+				const result = createOidcConnection(this.providersConfig(), input);
 				if (!result.ok) throw new Error(result.reason === "duplicate-id" ? `An OIDC connection with id "${input.id}" already exists` : `Invalid connection id "${input.id}" — use a lowercase slug`);
-				await this.updateGlobalSettings(result.config);
+				await this.persistProviders(result.config.providers);
 				this.rebuildInstances();
 				return { id: result.id };
 			},
 			updateConnection: async (input) => {
 				const secretPatch = clientSecretPatchOf(input.clientSecret);
-				const result = updateOidcConnection(this.config, input.id, {
+				const result = updateOidcConnection(this.providersConfig(), input.id, {
 					displayName: input.displayName,
 					...input.icon !== void 0 ? { icon: input.icon } : {},
 					...input.issuerUrl !== void 0 ? { issuerUrl: input.issuerUrl } : {},
@@ -1095,20 +1196,21 @@ var AuthOidcAddon = class extends require_dist.BaseAddon {
 						...p,
 						clientSecret: require_dist.SECRET_CLEAR
 					} : p);
-					await this.updateGlobalSettings({ providers: cleared });
-				} else await this.updateGlobalSettings(result.config);
+					await this.persistProviders(cleared);
+				} else await this.persistProviders(result.config.providers);
 				this.rebuildInstances();
 				return { ok: true };
 			},
 			deleteConnection: async (input) => {
-				if (findOidcProvider(this.config, input.id) === null) throw new Error(`Unknown OIDC connection "${input.id}"`);
-				await this.updateGlobalSettings({ providers: this.config.providers.map((p) => p.id === input.id ? {
+				if (findOidcProvider(this.providersConfig(), input.id) === null) throw new Error(`Unknown OIDC connection "${input.id}"`);
+				const cleared = this.activeProviders.map((p) => p.id === input.id ? {
 					...p,
 					clientSecret: require_dist.SECRET_CLEAR
-				} : p) });
-				const result = deleteOidcConnection(this.config, input.id);
+				} : p);
+				await this.persistProviders(cleared);
+				const result = deleteOidcConnection(this.providersConfig(), input.id);
 				if (!result.ok) throw new Error(`Unknown OIDC connection "${input.id}"`);
-				await this.updateGlobalSettings(result.config);
+				await this.persistProviders(result.config.providers);
 				this.rebuildInstances();
 				return { ok: true };
 			}
@@ -1147,9 +1249,29 @@ var AuthOidcAddon = class extends require_dist.BaseAddon {
 			fields: []
 		}] });
 	}
+	providersConfig() {
+		return { providers: this.activeProviders };
+	}
+	async loadPersistedProviders() {
+		const store = this.providerStore;
+		if (store !== null) {
+			const fromRecords = await store.listResolved();
+			if (fromRecords.length > 0) return fromRecords;
+		}
+		return this.config.providers;
+	}
+	async persistProviders(providers) {
+		this.activeProviders = [...providers];
+		const store = this.providerStore;
+		if (store !== null) {
+			await store.replaceAll(providers);
+			return;
+		}
+		await this.updateGlobalSettings({ providers: [...providers] });
+	}
 	rebuildInstances() {
 		this.instances.clear();
-		const providers = this.config.providers ?? [];
+		const providers = this.activeProviders;
 		for (const raw of providers) {
 			const merged = {
 				...DEFAULT_PROVIDER,

package/dist/oidc/auth-oidc.addon.mjs

@@ -1,4 +1,4 @@
-import { C as arrayItemFieldPath, D as toSecretFieldView, E as isSecretMarker, S as SECRET_CLEAR, T as isSecretClear, _ as requestMountPrefix, b as errMsg, c as authProviderCapability, d as loginMethodCapability, f as normalizeOrigin, g as pickRequestOrigin, h as parseAppPageLang, i as addonRoutesCapability, l as buildAddonRouteProvider, m as parseAppFlowRequest, n as APP_REFUSED_PATH, o as advertisedHubOrigins, p as oidcConnectionsCapability, r as SSO_STATE_COOKIE, s as appFlowLocation, t as APP_FLOW_DEFAULT_REDIRECT, u as claimedRequestOrigins, v as resolveIconKey, w as globalSecretScope, x as BaseAddon } from "../dist-roKTj364.mjs";
+import { A as settingsArrayAdoptsFrom, C as SECRET_CLEAR, D as globalSecretScope, I as object, L as string, M as _enum, O as isSecretClear, S as RecordSecretUnavailableError, T as defineEntryKind, _ as requestMountPrefix, b as errMsg, c as authProviderCapability, d as loginMethodCapability, f as normalizeOrigin, g as pickRequestOrigin, h as parseAppPageLang, i as addonRoutesCapability, j as toSecretFieldView, k as isSecretMarker, l as buildAddonRouteProvider, m as parseAppFlowRequest, n as APP_REFUSED_PATH, o as advertisedHubOrigins, p as oidcConnectionsCapability, r as SSO_STATE_COOKIE, s as appFlowLocation, t as APP_FLOW_DEFAULT_REDIRECT, u as claimedRequestOrigins, v as resolveIconKey, w as arrayItemFieldPath, x as BaseAddon } from "../dist-BkvErNbe.mjs";
 import * as crypto$1 from "node:crypto";
 //#region ../../node_modules/jose/dist/webapi/lib/buffer_utils.js
 var encoder = new TextEncoder(), decoder = new TextDecoder(), strictDecoder = new TextDecoder("utf-8", { fatal: !0 });
@@ -881,6 +881,90 @@ function clientSecretPatchOf(value) {
 	return { clientSecret: value };
 }
 //#endregion
+//#region src/oidc/oidc-provider-record-kinds.ts
+var OIDC_PROVIDER_KIND = "oidc-provider";
+var usernameClaimSchema = _enum([
+	"preferred_username",
+	"email",
+	"sub"
+]);
+var OidcProviderBodySchema = object({
+	displayName: string().min(1),
+	icon: string(),
+	issuerUrl: string(),
+	clientId: string(),
+	clientSecret: string().meta({ secret: true }),
+	redirectUri: string(),
+	scopes: string(),
+	usernameClaim: usernameClaimSchema
+});
+var oidcProviderEntryKind = defineEntryKind(OIDC_PROVIDER_KIND, {
+	title: "OIDC providers",
+	nameField: "displayName",
+	schema: OidcProviderBodySchema,
+	writeTrigger: "an operator adds, edits or removes an OpenID Connect identity provider",
+	adoptsFrom: settingsArrayAdoptsFrom("auth-oidc", "providers")
+});
+//#endregion
+//#region src/oidc/oidc-provider-store.ts
+function rowToProvider(id, data) {
+	return {
+		...DEFAULT_OIDC_PROVIDER,
+		...data,
+		id
+	};
+}
+var OidcProviderStore = class OidcProviderStore {
+	kind;
+	constructor(kind) {
+		this.kind = kind;
+	}
+	static of(records) {
+		return new OidcProviderStore(records.kind(oidcProviderEntryKind));
+	}
+	async listResolved() {
+		const page = await this.kind.query({ limit: 1e3 });
+		const out = [];
+		for (const record of page.records) {
+			let data = record.data;
+			try {
+				const resolved = await this.kind.getResolved(record.id);
+				if (resolved !== null) data = resolved.data;
+			} catch (err) {
+				if (!(err instanceof RecordSecretUnavailableError)) throw err;
+			}
+			const parsed = OidcProviderBodySchema.safeParse(data);
+			if (!parsed.success) continue;
+			out.push(rowToProvider(record.id, parsed.data));
+		}
+		return out;
+	}
+	async replaceAll(providers) {
+		const page = await this.kind.query({ limit: 1e3 });
+		const nextIds = new Set(providers.map((p) => p.id));
+		for (const row of page.records) if (!nextIds.has(row.id)) await this.kind.delete(row.id);
+		for (const row of providers) {
+			const { id, displayName, icon, issuerUrl, clientId, clientSecret, redirectUri, scopes, usernameClaim } = row;
+			const body = {
+				displayName,
+				icon,
+				issuerUrl,
+				clientId,
+				clientSecret,
+				redirectUri,
+				scopes,
+				usernameClaim
+			};
+			const parsed = oidcProviderEntryKind.schema.safeParse(body);
+			if (!parsed.success) throw new Error(`invalid OIDC provider '${id}': ${parsed.error.message}`);
+			await this.kind.put({
+				id,
+				data: parsed.data
+			});
+		}
+	}
+};
+//#endregion
 //#region src/oidc/auth-oidc.addon.ts
 /**
 * Generic OpenID Connect (OIDC) authentication provider.
@@ -971,6 +1055,8 @@ function returnBaseOf(redirectUri, callbackPath) {
 var AuthOidcAddon = class extends BaseAddon {
 	/** Per-provider runtime state, keyed by `provider.id`. */
 	instances = /* @__PURE__ */ new Map();
+	providerStore = null;
+	activeProviders = [];
 	/** Pending OAuth states across ALL providers. The pending entry
 	*  carries `providerId` so the /callback handler picks the right config. */
 	pendingStates = /* @__PURE__ */ new Map();
@@ -980,9 +1066,24 @@ var AuthOidcAddon = class extends BaseAddon {
 		super({ ...DEFAULT_CONFIG });
 	}
 	async onConfigChanged() {
+		this.activeProviders = await this.loadPersistedProviders();
 		this.rebuildInstances();
 	}
 	async onInitialize() {
+		const records = this.ctx.records;
+		if (records === void 0) throw new Error("auth-oidc: ctx.records is required (hub-only addon)");
+		await records.declare({ "oidc-provider": oidcProviderEntryKind });
+		this.providerStore = OidcProviderStore.of(records);
+		this.activeProviders = await this.loadPersistedProviders();
+		if ((await this.providerStore.listResolved()).length === 0 && this.config.providers.length > 0) try {
+			await this.providerStore.replaceAll(this.config.providers);
+			this.activeProviders = await this.loadPersistedProviders();
+		} catch (err) {
+			const msg = err instanceof Error ? err.message : String(err);
+			if (!msg.startsWith("records/foreign-marker:") && !msg.startsWith("records/adoption-pending:")) throw err;
+			this.ctx.logger.warn("OIDC: deferred config→records migrate (secret markers need adopt remap)", { meta: { error: msg } });
+			this.activeProviders = [...this.config.providers];
+		}
 		this.rebuildInstances();
 		const authProvider = {
 			validateCredentials: async () => null,
@@ -1040,7 +1141,7 @@ var AuthOidcAddon = class extends BaseAddon {
 			connectionFormSchema: async () => OIDC_CONNECTION_FORM_SCHEMA,
 			listConnections: async () => {
 				const secrets = this.ctx.secrets;
-				return this.config.providers.map((row) => {
+				return this.activeProviders.map((row) => {
 					const merged = {
 						...DEFAULT_PROVIDER,
 						...row
@@ -1066,15 +1167,15 @@ var AuthOidcAddon = class extends BaseAddon {
 				});
 			},
 			createConnection: async (input) => {
-				const result = createOidcConnection(this.config, input);
+				const result = createOidcConnection(this.providersConfig(), input);
 				if (!result.ok) throw new Error(result.reason === "duplicate-id" ? `An OIDC connection with id "${input.id}" already exists` : `Invalid connection id "${input.id}" — use a lowercase slug`);
-				await this.updateGlobalSettings(result.config);
+				await this.persistProviders(result.config.providers);
 				this.rebuildInstances();
 				return { id: result.id };
 			},
 			updateConnection: async (input) => {
 				const secretPatch = clientSecretPatchOf(input.clientSecret);
-				const result = updateOidcConnection(this.config, input.id, {
+				const result = updateOidcConnection(this.providersConfig(), input.id, {
 					displayName: input.displayName,
 					...input.icon !== void 0 ? { icon: input.icon } : {},
 					...input.issuerUrl !== void 0 ? { issuerUrl: input.issuerUrl } : {},
@@ -1090,20 +1191,21 @@ var AuthOidcAddon = class extends BaseAddon {
 						...p,
 						clientSecret: SECRET_CLEAR
 					} : p);
-					await this.updateGlobalSettings({ providers: cleared });
-				} else await this.updateGlobalSettings(result.config);
+					await this.persistProviders(cleared);
+				} else await this.persistProviders(result.config.providers);
 				this.rebuildInstances();
 				return { ok: true };
 			},
 			deleteConnection: async (input) => {
-				if (findOidcProvider(this.config, input.id) === null) throw new Error(`Unknown OIDC connection "${input.id}"`);
-				await this.updateGlobalSettings({ providers: this.config.providers.map((p) => p.id === input.id ? {
+				if (findOidcProvider(this.providersConfig(), input.id) === null) throw new Error(`Unknown OIDC connection "${input.id}"`);
+				const cleared = this.activeProviders.map((p) => p.id === input.id ? {
 					...p,
 					clientSecret: SECRET_CLEAR
-				} : p) });
-				const result = deleteOidcConnection(this.config, input.id);
+				} : p);
+				await this.persistProviders(cleared);
+				const result = deleteOidcConnection(this.providersConfig(), input.id);
 				if (!result.ok) throw new Error(`Unknown OIDC connection "${input.id}"`);
-				await this.updateGlobalSettings(result.config);
+				await this.persistProviders(result.config.providers);
 				this.rebuildInstances();
 				return { ok: true };
 			}
@@ -1142,9 +1244,29 @@ var AuthOidcAddon = class extends BaseAddon {
 			fields: []
 		}] });
 	}
+	providersConfig() {
+		return { providers: this.activeProviders };
+	}
+	async loadPersistedProviders() {
+		const store = this.providerStore;
+		if (store !== null) {
+			const fromRecords = await store.listResolved();
+			if (fromRecords.length > 0) return fromRecords;
+		}
+		return this.config.providers;
+	}
+	async persistProviders(providers) {
+		this.activeProviders = [...providers];
+		const store = this.providerStore;
+		if (store !== null) {
+			await store.replaceAll(providers);
+			return;
+		}
+		await this.updateGlobalSettings({ providers: [...providers] });
+	}
 	rebuildInstances() {
 		this.instances.clear();
-		const providers = this.config.providers ?? [];
+		const providers = this.activeProviders;
 		for (const raw of providers) {
 			const merged = {
 				...DEFAULT_PROVIDER,

package/dist/webauthn/_stub.js

@@ -1,6 +1,6 @@
 import { n as e, r as t, t as n } from "./_virtual_mf___mfe_internal__addon_auth_webauthn_widgets__loadShare__react__loadShare__.js-BIIa6vDX.mjs";
 import { n as r, t as i } from "./_virtual_mf___mfe_internal__addon_auth_webauthn_widgets__loadShare___mf_0_tanstack_mf_1_react_mf_2_query__loadShare__.js-CQ-aEQ9b.mjs";
-import { n as a, t as o } from "./_virtual_mf___mfe_internal__addon_auth_webauthn_widgets__loadShare___mf_0_camstack_mf_1_ui_mf_2_library__loadShare__.js-Jb_VAQPj.mjs";
+import { n as a, t as o } from "./_virtual_mf___mfe_internal__addon_auth_webauthn_widgets__loadShare___mf_0_camstack_mf_1_ui_mf_2_library__loadShare__.js-DCLE6WWy.mjs";
 import { n as s, r as c, t as l } from "./_virtual_mf___mfe_internal__addon_auth_webauthn_widgets__loadShare__react_mf_1_jsx_mf_2_runtime__loadShare__.js-BL2etuqg.mjs";
 //#region ../../node_modules/lucide-react/dist/esm/shared/src/utils/mergeClasses.js
 var u = (...e) => e.filter((e, t, n) => !!e && e.trim() !== "" && n.indexOf(e) === t).join(" ").trim(), d = (e) => e.replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase(), f = (e) => e.replace(/^([A-Z])|[\s-_]+(\w)/g, (e, t, n) => n ? n.toUpperCase() : t.toLowerCase()), p = (e) => {
@@ -395,17 +395,31 @@ async function L(e) {
 function R() {
 	return T();
 }
-async function z(e) {
-	let t = await L({ optionsJSON: e });
+function z(e) {
+	return {
+		...e,
+		challenge: e.challenge
+	};
+}
+function B(e) {
+	return {
+		...e,
+		challenge: e.challenge
+	};
+}
+async function V(e) {
+	if (typeof e.challenge != "string") throw Error("passkey authentication options missing challenge");
+	let t = await L({ optionsJSON: z(e) });
 	return Object.fromEntries(Object.entries(t));
 }
-async function B(e) {
-	let t = await N({ optionsJSON: e });
+async function H(e) {
+	if (typeof e.challenge != "string") throw Error("passkey registration options missing challenge");
+	let t = await N({ optionsJSON: B(e) });
 	return Object.fromEntries(Object.entries(t));
 }
 //#endregion
 //#region src/i18n/index.ts
-var { useT: V } = a("auth-webauthn", {
+var { useT: U } = a("auth-webauthn", {
 	en: {
 		directLogin: {
 			requiresCallback: "Passkey direct-login widget requires an onComplete callback.",
@@ -483,8 +497,8 @@ var { useT: V } = a("auth-webauthn", {
 });
 //#endregion
 //#region src/webauthn/widgets/PasskeyEnrollment.tsx
-function H(e) {
-	let n = o(), { t: a, lang: u } = V(), d = r({
+function W(e) {
+	let n = o(), { t: a, lang: u } = U(), d = r({
 		queryKey: ["auth", "listOwnPasskeys"],
 		queryFn: () => n.listOwnPasskeys()
 	}), f = d.data ?? [], [p, m] = t(""), [h, g] = t(!1), [_, C] = t(null), w = r({
@@ -500,7 +514,7 @@ function H(e) {
 	}), D = async () => {
 		C(null), g(!0);
 		try {
-			let e = await B((await n.beginOwnPasskeyRegistration()).optionsJSON);
+			let e = await H((await n.beginOwnPasskeyRegistration()).optionsJSON);
 			await n.finishOwnPasskeyRegistration({
 				response: e,
 				label: p.trim() || a("enrollment.unnamedDevice")
@@ -515,7 +529,7 @@ function H(e) {
 			let t;
 			if ("password" in e.proof) t = (await n.reauthenticate({ password: e.proof.password })).reauthToken;
 			else {
-				let { optionsJSON: e } = await n.reauthBeginPasskey(), r = await z(e);
+				let { optionsJSON: e } = await n.reauthBeginPasskey(), r = await V(e);
 				t = (await n.reauthenticate({ passkeyResponse: r })).reauthToken;
 			}
 			return n.removeOwnPasskey({
@@ -667,7 +681,7 @@ function H(e) {
 }
 //#endregion
 //#region src/webauthn/widgets/PasskeyLogin.tsx
-function U(e) {
+function G(e) {
 	if (!e) return null;
 	let t = e.challengeToken, n = e.onComplete, r = e.onError;
 	return typeof t != "string" || typeof n != "function" ? null : {
@@ -676,8 +690,8 @@ function U(e) {
 		onError: typeof r == "function" ? r : void 0
 	};
 }
-function W(e) {
-	let n = o(), { t: r } = V(), i = U(e.config), [a, l] = t(!1), [u, d] = t(null);
+function K(e) {
+	let n = o(), { t: r } = U(), i = G(e.config), [a, l] = t(!1), [u, d] = t(null);
 	return i ? R() ? /* @__PURE__ */ c("div", {
 		className: "space-y-2",
 		children: [/* @__PURE__ */ c("button", {
@@ -686,7 +700,7 @@ function W(e) {
 			onClick: async () => {
 				d(null), l(!0);
 				try {
-					let e = await z((await n.loginBeginPasskey(i.challengeToken)).optionsJSON), t = await n.loginVerifyPasskey(i.challengeToken, e);
+					let e = await V((await n.loginBeginPasskey(i.challengeToken)).optionsJSON), t = await n.loginVerifyPasskey(i.challengeToken, e);
 					i.onComplete(t.token);
 				} catch (e) {
 					let t = e instanceof Error ? e.message : r("login.verificationFailed");
@@ -712,7 +726,7 @@ function W(e) {
 }
 //#endregion
 //#region src/webauthn/widgets/PasskeyDirectLogin.tsx
-function G(e) {
+function q(e) {
 	if (!e) return null;
 	let t = e.onComplete, n = e.onSecondFactor, r = e.onError, i = e.locale;
 	return typeof t == "function" ? {
@@ -722,8 +736,8 @@ function G(e) {
 		locale: typeof i == "string" ? i : void 0
 	} : null;
 }
-function K(e) {
-	let n = o(), r = G(e.config), [i, a] = t(!1), [l, u] = t(null), { t: d } = V(r?.locale);
+function J(e) {
+	let n = o(), r = q(e.config), [i, a] = t(!1), [l, u] = t(null), { t: d } = U(r?.locale);
 	return r ? R() ? /* @__PURE__ */ c("div", {
 		className: "space-y-2",
 		children: [/* @__PURE__ */ c("button", {
@@ -732,7 +746,7 @@ function K(e) {
 			onClick: async () => {
 				u(null), a(!0);
 				try {
-					let e = await z((await n.passkeyLoginBegin()).optionsJSON), t = await n.passkeyLoginFinish(e), i = t.secondFactors ?? (t.requiresTotp === !0 ? ["totp"] : []);
+					let e = await V((await n.passkeyLoginBegin()).optionsJSON), t = await n.passkeyLoginFinish(e), i = t.secondFactors ?? (t.requiresTotp === !0 ? ["totp"] : []);
 					if (i.length > 0) {
 						if (r.onSecondFactor) r.onSecondFactor({
 							challengeToken: t.token,
@@ -769,10 +783,10 @@ function K(e) {
 }
 //#endregion
 //#region src/webauthn/widgets/index.tsx
-var q = {
-	"passkey-enrollment": H,
-	"passkey-login": W,
-	"passkey-direct-login": K
+var Y = {
+	"passkey-enrollment": W,
+	"passkey-login": K,
+	"passkey-direct-login": J
 };
 //#endregion
-export { q as default };
+export { Y as default };

package/dist/webauthn/{_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-DDuFEkrD.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-BwTb_2Js.mjs}

@@ -3,7 +3,7 @@ import "./dist-CYZr2fwk.mjs";
 var e = {
 	"@camstack/sdk": {
 		name: "@camstack/sdk",
-		version: "1.2.132",
+		version: "1.2.134",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.374",
+		version: "1.2.384",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.292",
+		version: "1.2.301",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",