@dloizides/auth-web 1.14.0 → 1.17.0

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { StyleSheet, Platform, View, Text, TextInput, TouchableOpacity, ActivityIndicator, Pressable } from 'react-native';
+import { StyleSheet, Platform, View, Text, TextInput, TouchableOpacity, ActivityIndicator, Pressable, ScrollView } from 'react-native';
 import { createContext, useContext, useMemo, useState, useRef, useEffect, useCallback } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 import { useMutation } from '@tanstack/react-query';
@@ -307,6 +307,29 @@ var DEFAULT_RESET_PASSWORD_LABELS = {
   errorNetwork: "Something went wrong. Please try again."
 };
 
+// src/components/labels/accountSettingsLabels.ts
+var DEFAULT_ACCOUNT_SETTINGS_LABELS = {
+  heading: "Account settings",
+  changePasswordTitle: "Change password",
+  changePasswordDescription: "Update the password you use to sign in.",
+  currentPasswordLabel: "Current password",
+  currentPasswordPlaceholder: "Enter your current password",
+  newPasswordLabel: "New password",
+  newPasswordPlaceholder: "Enter a new password",
+  confirmPasswordLabel: "Confirm new password",
+  confirmPasswordPlaceholder: "Re-enter your new password",
+  submit: "Change password",
+  submitting: "Changing password...",
+  submitHint: "Submit the form to change your password",
+  success: "Your password has been changed.",
+  errorWeakNewPassword: "Your new password must be at least 8 characters and include an uppercase letter, a lowercase letter and a number.",
+  errorMismatch: "The new password and its confirmation do not match.",
+  errorCurrentRequired: "Enter your current password.",
+  errorInvalidCurrent: "Your current password is incorrect, or the new password does not meet the policy.",
+  errorUnauthorized: "Your session has expired. Sign in again to change your password.",
+  errorFailed: "Could not change your password. Try again later."
+};
+
 // src/components/testIds.ts
 var AuthTestIds = {
   loginForm: "auth-login-form",
@@ -380,8 +403,19 @@ var AuthTestIds = {
   preferredMethodSettingsError: "auth-preferred-method-settings-error",
   // Preferred-method login-screen hint
   preferredMethodHint: "auth-preferred-method-hint",
+  // Account-settings screen shell + in-app change-password form
+  accountSettings: "auth-account-settings",
+  accountSettingsChangePassword: "auth-account-settings-change-password",
+  changePasswordCurrentInput: "auth-change-password-current",
+  changePasswordNewInput: "auth-change-password-new",
+  changePasswordConfirmInput: "auth-change-password-confirm",
+  changePasswordSubmit: "auth-change-password-submit",
+  changePasswordError: "auth-change-password-error",
+  changePasswordSuccess: "auth-change-password-success",
   // Public-demo credentials panel
   demoCredentialsHint: "auth-demo-credentials-hint",
+  // Per-account heading, present only when >1 account is published (multi-account).
+  demoCredentialsAccountLabel: "auth-demo-credentials-account-label",
   demoCredentialsUsername: "auth-demo-credentials-username",
   demoCredentialsPassword: "auth-demo-credentials-password",
   demoCredentialsUseButton: "auth-demo-credentials-use",
@@ -3201,6 +3235,307 @@ function PreferredMethodSettingsCard({
     }
   );
 }
+
+// src/password/ChangePasswordErrorKey.ts
+var ChangePasswordErrorKey = /* @__PURE__ */ ((ChangePasswordErrorKey2) => {
+  ChangePasswordErrorKey2["WeakNewPassword"] = "weak_new_password";
+  ChangePasswordErrorKey2["Mismatch"] = "mismatch";
+  ChangePasswordErrorKey2["CurrentRequired"] = "current_required";
+  ChangePasswordErrorKey2["InvalidCurrent"] = "invalid_current";
+  ChangePasswordErrorKey2["Unauthorized"] = "unauthorized";
+  ChangePasswordErrorKey2["Failed"] = "failed";
+  return ChangePasswordErrorKey2;
+})(ChangePasswordErrorKey || {});
+function errorKeyForStatus(status) {
+  if (status === "invalidCurrent") {
+    return "invalid_current" /* InvalidCurrent */;
+  }
+  if (status === "unauthorized") {
+    return "unauthorized" /* Unauthorized */;
+  }
+  return "failed" /* Failed */;
+}
+function useChangePassword({
+  client,
+  onChanged
+}) {
+  const [currentPassword, setCurrentValue] = useState("");
+  const [newPassword, setNewValue] = useState("");
+  const [confirmPassword, setConfirmValue] = useState("");
+  const [submitting, setSubmitting] = useState(false);
+  const [succeeded, setSucceeded] = useState(false);
+  const [errorKey, setErrorKey] = useState(null);
+  const clearStatus = useCallback(() => {
+    setErrorKey(null);
+    setSucceeded(false);
+  }, []);
+  const setCurrentPassword = useCallback((value) => {
+    setCurrentValue(value);
+    clearStatus();
+  }, [clearStatus]);
+  const setNewPassword = useCallback((value) => {
+    setNewValue(value);
+    clearStatus();
+  }, [clearStatus]);
+  const setConfirmPassword = useCallback((value) => {
+    setConfirmValue(value);
+    clearStatus();
+  }, [clearStatus]);
+  const reset = useCallback(() => {
+    setCurrentValue("");
+    setNewValue("");
+    setConfirmValue("");
+    setSubmitting(false);
+    setSucceeded(false);
+    setErrorKey(null);
+  }, []);
+  const submit = useCallback(() => {
+    if (currentPassword === "") {
+      setErrorKey("current_required" /* CurrentRequired */);
+      return;
+    }
+    if (newPassword !== confirmPassword) {
+      setErrorKey("mismatch" /* Mismatch */);
+      return;
+    }
+    if (!isPasswordValid(newPassword)) {
+      setErrorKey("weak_new_password" /* WeakNewPassword */);
+      return;
+    }
+    setErrorKey(null);
+    setSucceeded(false);
+    setSubmitting(true);
+    client.changePassword({ currentPassword, newPassword }).then((result) => {
+      if (result.status === "success") {
+        setCurrentValue("");
+        setNewValue("");
+        setConfirmValue("");
+        setSucceeded(true);
+        onChanged?.();
+        return;
+      }
+      setErrorKey(errorKeyForStatus(result.status));
+    }).catch(() => {
+      setErrorKey("failed" /* Failed */);
+    }).finally(() => {
+      setSubmitting(false);
+    });
+  }, [client, currentPassword, newPassword, confirmPassword, onChanged]);
+  return {
+    currentPassword,
+    newPassword,
+    confirmPassword,
+    setCurrentPassword,
+    setNewPassword,
+    setConfirmPassword,
+    submitting,
+    succeeded,
+    errorKey,
+    submit,
+    reset
+  };
+}
+function errorMessage2(errorKey, labels) {
+  switch (errorKey) {
+    case "weak_new_password" /* WeakNewPassword */:
+      return labels.errorWeakNewPassword;
+    case "mismatch" /* Mismatch */:
+      return labels.errorMismatch;
+    case "current_required" /* CurrentRequired */:
+      return labels.errorCurrentRequired;
+    case "invalid_current" /* InvalidCurrent */:
+      return labels.errorInvalidCurrent;
+    case "unauthorized" /* Unauthorized */:
+      return labels.errorUnauthorized;
+    case "failed" /* Failed */:
+      return labels.errorFailed;
+    default:
+      return null;
+  }
+}
+function ChangePasswordCard({
+  client,
+  theme: themeProp,
+  labels: labelsProp,
+  testIdPrefix,
+  onChanged
+}) {
+  const theme = useAuthTheme(themeProp);
+  const styles3 = useAuthStyles(theme);
+  const labels = useMemo(
+    () => ({ ...DEFAULT_ACCOUNT_SETTINGS_LABELS, ...labelsProp }),
+    [labelsProp]
+  );
+  const form = useChangePassword({ client, onChanged });
+  const message = errorMessage2(form.errorKey, labels);
+  return /* @__PURE__ */ jsxs(
+    View,
+    {
+      style: styles3.card,
+      testID: withTestIdPrefix(AuthTestIds.accountSettingsChangePassword, testIdPrefix),
+      children: [
+        /* @__PURE__ */ jsx(Text, { style: styles3.title, children: labels.changePasswordTitle }),
+        /* @__PURE__ */ jsx(Text, { style: styles3.subtitle, children: labels.changePasswordDescription }),
+        /* @__PURE__ */ jsxs(View, { style: styles3.fieldGroup, children: [
+          /* @__PURE__ */ jsx(Text, { style: styles3.label, children: labels.currentPasswordLabel }),
+          /* @__PURE__ */ jsx(
+            TextInput,
+            {
+              accessibilityLabel: labels.currentPasswordLabel,
+              autoComplete: "current-password",
+              placeholder: labels.currentPasswordPlaceholder,
+              placeholderTextColor: theme.colors.textSecondary,
+              secureTextEntry: true,
+              style: styles3.input,
+              testID: withTestIdPrefix(AuthTestIds.changePasswordCurrentInput, testIdPrefix),
+              value: form.currentPassword,
+              onChangeText: form.setCurrentPassword
+            }
+          )
+        ] }),
+        /* @__PURE__ */ jsxs(View, { style: styles3.fieldGroup, children: [
+          /* @__PURE__ */ jsx(Text, { style: styles3.label, children: labels.newPasswordLabel }),
+          /* @__PURE__ */ jsx(
+            TextInput,
+            {
+              accessibilityLabel: labels.newPasswordLabel,
+              autoComplete: "new-password",
+              placeholder: labels.newPasswordPlaceholder,
+              placeholderTextColor: theme.colors.textSecondary,
+              secureTextEntry: true,
+              style: styles3.input,
+              testID: withTestIdPrefix(AuthTestIds.changePasswordNewInput, testIdPrefix),
+              value: form.newPassword,
+              onChangeText: form.setNewPassword
+            }
+          )
+        ] }),
+        /* @__PURE__ */ jsxs(View, { style: styles3.fieldGroup, children: [
+          /* @__PURE__ */ jsx(Text, { style: styles3.label, children: labels.confirmPasswordLabel }),
+          /* @__PURE__ */ jsx(
+            TextInput,
+            {
+              accessibilityLabel: labels.confirmPasswordLabel,
+              autoComplete: "new-password",
+              placeholder: labels.confirmPasswordPlaceholder,
+              placeholderTextColor: theme.colors.textSecondary,
+              secureTextEntry: true,
+              style: styles3.input,
+              testID: withTestIdPrefix(AuthTestIds.changePasswordConfirmInput, testIdPrefix),
+              value: form.confirmPassword,
+              onChangeText: form.setConfirmPassword
+            }
+          )
+        ] }),
+        message !== null ? /* @__PURE__ */ jsx(
+          Text,
+          {
+            style: styles3.errorText,
+            testID: withTestIdPrefix(AuthTestIds.changePasswordError, testIdPrefix),
+            children: message
+          }
+        ) : null,
+        form.succeeded ? /* @__PURE__ */ jsx(
+          Text,
+          {
+            style: styles3.successText,
+            testID: withTestIdPrefix(AuthTestIds.changePasswordSuccess, testIdPrefix),
+            children: labels.success
+          }
+        ) : null,
+        /* @__PURE__ */ jsx(
+          TouchableOpacity,
+          {
+            accessibilityHint: labels.submitHint,
+            accessibilityLabel: form.submitting ? labels.submitting : labels.submit,
+            accessibilityRole: "button",
+            disabled: form.submitting,
+            style: form.submitting ? [styles3.primaryButton, styles3.primaryButtonDisabled] : styles3.primaryButton,
+            testID: withTestIdPrefix(AuthTestIds.changePasswordSubmit, testIdPrefix),
+            onPress: form.submit,
+            children: form.submitting ? /* @__PURE__ */ jsx(ActivityIndicator, { color: theme.colors.onPrimary, size: "small" }) : /* @__PURE__ */ jsx(Text, { style: styles3.primaryButtonText, children: labels.submit })
+          }
+        )
+      ]
+    }
+  );
+}
+var GAP = 16;
+var layout = StyleSheet.create({
+  content: {
+    width: "100%",
+    alignItems: "center",
+    rowGap: GAP
+  }
+});
+function AccountSettingsScreen({
+  changePassword,
+  devicePin,
+  passkeys,
+  preferredMethod,
+  theme: themeProp,
+  labels: labelsProp,
+  testIdPrefix
+}) {
+  const theme = useAuthTheme(themeProp);
+  const styles3 = useAuthStyles(theme);
+  const labels = useMemo(
+    () => ({ ...DEFAULT_ACCOUNT_SETTINGS_LABELS, ...labelsProp }),
+    [labelsProp]
+  );
+  return /* @__PURE__ */ jsx(
+    ScrollView,
+    {
+      contentContainerStyle: styles3.screen,
+      testID: withTestIdPrefix(AuthTestIds.accountSettings, testIdPrefix),
+      children: /* @__PURE__ */ jsxs(View, { style: layout.content, children: [
+        /* @__PURE__ */ jsx(Text, { style: styles3.title, children: labels.heading }),
+        /* @__PURE__ */ jsx(
+          ChangePasswordCard,
+          {
+            client: changePassword.client,
+            labels: labelsProp,
+            testIdPrefix,
+            theme,
+            onChanged: changePassword.onChanged
+          }
+        ),
+        devicePin !== void 0 ? /* @__PURE__ */ jsx(
+          DevicePinSettingsCard,
+          {
+            client: devicePin.client,
+            enrollLabels: devicePin.enrollLabels,
+            initialHasPin: devicePin.initialHasPin,
+            labels: devicePin.labels,
+            testIdPrefix,
+            theme,
+            onChanged: devicePin.onChanged
+          }
+        ) : null,
+        passkeys !== void 0 ? /* @__PURE__ */ jsx(
+          PasskeySettingsCard,
+          {
+            labels: passkeys.labels,
+            returnUrl: passkeys.returnUrl,
+            testIdPrefix,
+            theme
+          }
+        ) : null,
+        preferredMethod !== void 0 ? /* @__PURE__ */ jsx(
+          PreferredMethodSettingsCard,
+          {
+            availableMethods: preferredMethod.availableMethods,
+            client: preferredMethod.client,
+            labels: preferredMethod.labels,
+            testIdPrefix,
+            theme,
+            onChanged: preferredMethod.onChanged
+          }
+        ) : null
+      ] })
+    }
+  );
+}
 function hintFor(method, labels) {
   if (method === "password") {
     return labels.password;
@@ -3237,9 +3572,21 @@ function DemoCredentialsBody({
   styles: styles3,
   authStyles,
   testIdPrefix,
+  accountLabel,
+  testIdIndex,
   onUse
 }) {
+  const testId = (base) => withTestIdPrefix(testIdIndex === void 0 ? base : `${base}-${testIdIndex}`, testIdPrefix);
+  const hasLabel = typeof accountLabel === "string" && accountLabel.length > 0;
   return /* @__PURE__ */ jsxs(View, { children: [
+    hasLabel ? /* @__PURE__ */ jsx(
+      Text,
+      {
+        style: styles3.accountLabel,
+        testID: testId(AuthTestIds.demoCredentialsAccountLabel),
+        children: accountLabel
+      }
+    ) : null,
     /* @__PURE__ */ jsxs(View, { style: styles3.row, children: [
       /* @__PURE__ */ jsx(Text, { style: styles3.rowLabel, children: labels.usernameLabel }),
       /* @__PURE__ */ jsx(
@@ -3247,7 +3594,7 @@ function DemoCredentialsBody({
         {
           selectable: true,
           style: styles3.rowValue,
-          testID: withTestIdPrefix(AuthTestIds.demoCredentialsUsername, testIdPrefix),
+          testID: testId(AuthTestIds.demoCredentialsUsername),
           children: credentials.username
         }
       )
@@ -3259,7 +3606,7 @@ function DemoCredentialsBody({
         {
           selectable: true,
           style: styles3.rowValue,
-          testID: withTestIdPrefix(AuthTestIds.demoCredentialsPassword, testIdPrefix),
+          testID: testId(AuthTestIds.demoCredentialsPassword),
           children: credentials.password
         }
       )
@@ -3271,7 +3618,7 @@ function DemoCredentialsBody({
         accessibilityLabel: labels.useCredentials,
         accessibilityRole: "button",
         style: [authStyles.secondaryButton, styles3.useButton],
-        testID: withTestIdPrefix(AuthTestIds.demoCredentialsUseButton, testIdPrefix),
+        testID: testId(AuthTestIds.demoCredentialsUseButton),
         onPress: onUse,
         children: /* @__PURE__ */ jsx(Text, { style: authStyles.secondaryButtonText, children: labels.useCredentials })
       }
@@ -3324,6 +3671,15 @@ function useDemoCredentialsStyles(theme) {
         marginBottom: spacing.sm,
         color: colors.textSecondary
       },
+      accountLabel: {
+        fontSize: typography.caption,
+        fontWeight: "700",
+        color: colors.text,
+        // Separates one account block from the previous one; the first block sits
+        // under the panel description / disclosure divider, which already spaces it.
+        marginTop: spacing.sm,
+        marginBottom: spacing.xs / HALF
+      },
       row: {
         flexDirection: "row",
         alignItems: "center",
@@ -3399,8 +3755,39 @@ function resolveDemoCredentials(credentials) {
   }
   return { username, password };
 }
+
+// src/demo/resolveDemoAccounts.ts
+function resolveAccount(account) {
+  if (account === void 0 || account === null) {
+    return null;
+  }
+  const pair = resolveDemoCredentials(account);
+  if (pair === null) {
+    return null;
+  }
+  const label = typeof account.label === "string" ? account.label : "";
+  return { label, username: pair.username, password: pair.password };
+}
+function resolveAccountList(accounts) {
+  if (!Array.isArray(accounts)) {
+    return [];
+  }
+  return accounts.map(resolveAccount).filter((account) => account !== null);
+}
+function resolveDemoAccounts(credentials) {
+  if (credentials === void 0 || credentials === null) {
+    return [];
+  }
+  const fromList = resolveAccountList(credentials.publishedAccounts);
+  if (fromList.length > 0) {
+    return fromList;
+  }
+  const single = resolveDemoCredentials(credentials);
+  return single === null ? [] : [{ label: "", username: single.username, password: single.password }];
+}
 function DemoCredentialsHint({
   credentials,
+  accounts,
   variant = "disclosure" /* Disclosure */,
   theme: themeProp,
   labels: labelsProp,
@@ -3415,29 +3802,35 @@ function DemoCredentialsHint({
     () => ({ ...DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, ...labelsProp }),
     [labelsProp]
   );
-  const resolved = useMemo(() => resolveDemoCredentials(credentials), [credentials]);
-  const handleUse = useCallback(() => {
-    if (resolved !== null && onUse !== void 0) {
-      onUse(resolved);
-    }
-  }, [resolved, onUse]);
+  const resolvedAccounts = useMemo(
+    () => accounts !== void 0 && accounts.length > 0 ? resolveAccountList(accounts) : resolveDemoAccounts(credentials),
+    [accounts, credentials]
+  );
+  const makeUse = useCallback(
+    (account) => onUse === void 0 ? void 0 : () => onUse({ username: account.username, password: account.password }),
+    [onUse]
+  );
   const handleToggle = useCallback(() => {
     setExpanded((current) => !current);
   }, []);
-  if (resolved === null) {
+  if (resolvedAccounts.length === 0) {
     return null;
   }
-  const body = /* @__PURE__ */ jsx(
+  const isSingle = resolvedAccounts.length === 1;
+  const body = resolvedAccounts.map((account, index) => /* @__PURE__ */ jsx(
     DemoCredentialsBody,
     {
+      accountLabel: isSingle ? void 0 : account.label,
       authStyles,
-      credentials: resolved,
+      credentials: { username: account.username, password: account.password },
       labels,
       styles: styles3,
+      testIdIndex: isSingle ? void 0 : index,
       testIdPrefix,
-      onUse: onUse === void 0 ? void 0 : handleUse
-    }
-  );
+      onUse: makeUse(account)
+    },
+    `${account.username}-${String(index)}`
+  ));
   if (variant === "panel" /* Panel */) {
     return /* @__PURE__ */ jsxs(
       View,
@@ -3593,7 +3986,11 @@ function useDemoCredentials({
   credentials,
   prefillOnMount = false
 } = {}) {
-  const resolved = useMemo(() => resolveDemoCredentials(credentials), [credentials]);
+  const accounts = useMemo(() => resolveDemoAccounts(credentials), [credentials]);
+  const resolved = useMemo(() => {
+    const first = accounts[0];
+    return first === void 0 ? null : { username: first.username, password: first.password };
+  }, [accounts]);
   const [filled, setFilled] = useState(
     prefillOnMount ? resolved : null
   );
@@ -3625,11 +4022,12 @@ function useDemoCredentials({
         prefillIntent
       },
       // `credentials` is passed through unresolved on purpose: the hint applies
-      // `resolveDemoCredentials` itself, so it fails closed even when it is used
-      // standalone, without this hook.
-      hintProps: { credentials, onUse: handleUse }
+      // `resolveDemoAccounts` itself, so it fails closed even when it is used
+      // standalone, without this hook. `accounts` is the already-resolved list the
+      // hint prefers — one labelled row per entry.
+      hintProps: { credentials, accounts, onUse: handleUse }
     }),
-    [filled, prefillNonce, prefillIntent, credentials, handleUse]
+    [filled, prefillNonce, prefillIntent, credentials, accounts, handleUse]
   );
 }
 async function lazyFetchHttpClient(request) {
@@ -3717,7 +4115,57 @@ async function performBffLogout(options) {
   }
   runGuarded(onRedirect, onError);
 }
+var CHANGE_PASSWORD_ENDPOINT = "/bff/account/change-password";
+var CSRF_HEADER2 = "X-BFF-Csrf";
+var CSRF_HEADER_VALUE2 = "1";
+var JSON_CONTENT_TYPE2 = "application/json";
+var HTTP_NO_CONTENT = 204;
+var HTTP_OK = 200;
+var HTTP_BAD_REQUEST2 = 400;
+var HTTP_UNAUTHORIZED = 401;
+async function lazyFetchHttpClient2(request) {
+  const fetchImpl = typeof fetch === "function" ? fetch.bind(globalThis) : void 0;
+  if (fetchImpl === void 0) {
+    throw new Error("createBffChangePasswordClient: fetch is not available in this environment");
+  }
+  return createFetchHttpClient(fetchImpl)(request);
+}
+function resultFromStatus(status) {
+  if (status === HTTP_NO_CONTENT || status === HTTP_OK) {
+    return { status: "success" };
+  }
+  if (status === HTTP_BAD_REQUEST2) {
+    return { status: "invalidCurrent" };
+  }
+  if (status === HTTP_UNAUTHORIZED) {
+    return { status: "unauthorized" };
+  }
+  return { status: "error" };
+}
+function createBffChangePasswordClient(options = {}) {
+  const http = options.http ?? lazyFetchHttpClient2;
+  const baseUrl = options.baseUrl ?? "";
+  const url = `${baseUrl}${CHANGE_PASSWORD_ENDPOINT}`;
+  return {
+    changePassword: async (request) => {
+      try {
+        const response = await http({
+          url,
+          method: "POST",
+          headers: { "Content-Type": JSON_CONTENT_TYPE2, [CSRF_HEADER2]: CSRF_HEADER_VALUE2 },
+          body: JSON.stringify({
+            currentPassword: request.currentPassword,
+            newPassword: request.newPassword
+          })
+        });
+        return resultFromStatus(response.status);
+      } catch {
+        return { status: "error" };
+      }
+    }
+  };
+}
 
-export { AuthScreen, AuthTestIds, AuthThemeProvider, BffAuthStatus, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, DemoCredentialsHintVariant, DevicePinEnrollErrorKey, DevicePinEnrollForm, DevicePinErrorKey, DevicePinInput, DevicePinLengthPicker, DevicePinOffer, DevicePinSettingsCard, DevicePinUnlockScreen, ForgotPasswordFields, ForgotPasswordForm, LoginForm, OtpForm, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, PasskeyLoginButton, PasskeySettingsCard, PasswordPolicyError, PinForm, PreferredMethodHint, PreferredMethodSettingsCard, PrefillIntent, ResetPasswordError, ResetPasswordForm, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createPreferencesClient, defaultAuthTheme, isAllowedPinDigits, isPasswordValid, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, resolveAccessibleRoutes, resolveDemoCredentials, resolvePostLoginRoute, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useResetPasswordForm, validatePasswordPolicy, withTestIdPrefix };
+export { AccountSettingsScreen, AuthScreen, AuthTestIds, AuthThemeProvider, BffAuthStatus, CHANGE_PASSWORD_ENDPOINT, ChangePasswordCard, ChangePasswordErrorKey, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, DemoCredentialsHintVariant, DevicePinEnrollErrorKey, DevicePinEnrollForm, DevicePinErrorKey, DevicePinInput, DevicePinLengthPicker, DevicePinOffer, DevicePinSettingsCard, DevicePinUnlockScreen, ForgotPasswordFields, ForgotPasswordForm, LoginForm, OtpForm, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, PasskeyLoginButton, PasskeySettingsCard, PasswordPolicyError, PinForm, PreferredMethodHint, PreferredMethodSettingsCard, PrefillIntent, ResetPasswordError, ResetPasswordForm, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createBffChangePasswordClient, createPreferencesClient, defaultAuthTheme, isAllowedPinDigits, isPasswordValid, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, resolveAccessibleRoutes, resolveAccountList, resolveDemoAccounts, resolveDemoCredentials, resolvePostLoginRoute, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useResetPasswordForm, validatePasswordPolicy, withTestIdPrefix };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map