@dloizides/auth-web 1.21.0 → 1.22.0

package/dist/index.js

@@ -354,6 +354,31 @@ var DEFAULT_REGISTER_LABELS = {
   }
 };
 
+// src/components/labels/verifyEmailLabels.ts
+var DEFAULT_VERIFY_EMAIL_LABELS = {
+  loadingTitle: "Verifying your email...",
+  loadingHint: "Please wait while we verify your address.",
+  successTitle: "Your email is verified",
+  successBody: "Thanks for confirming your email address.",
+  successContinue: "Continue",
+  successContinueHint: "Go to the app",
+  errorTitle: "We couldn't verify your email",
+  errorInvalid: "This verification link is invalid. Request a new one.",
+  errorExpired: "This verification link has expired. Request a new one.",
+  errorUsed: "This link has already been used.",
+  errorGeneric: "Verification failed. Please try again later.",
+  missingToken: "This verification link is missing a token.",
+  resendCta: "Send a new verification email",
+  resendCtaHint: "Show the resend verification email form",
+  resendEmailLabel: "Email",
+  resendEmailHint: "The address to send a new verification link to",
+  resendEmailPlaceholder: "you@example.com",
+  resendMissingEmail: "Enter your email address.",
+  resendSubmit: "Send link",
+  resendSubmitHint: "Sends a new verification email",
+  resendConfirmation: "If that address has an account, a new verification link is on its way."
+};
+
 // src/components/testIds.ts
 var AuthTestIds = {
   loginForm: "auth-login-form",
@@ -444,7 +469,17 @@ var AuthTestIds = {
   demoCredentialsPassword: "auth-demo-credentials-password",
   demoCredentialsUseButton: "auth-demo-credentials-use",
   // The collapsed disclosure trigger (`disclosure` variant only).
-  demoCredentialsToggle: "auth-demo-credentials-toggle"
+  demoCredentialsToggle: "auth-demo-credentials-toggle",
+  verifyEmailScreen: "auth-verify-email",
+  verifyEmailLoading: "auth-verify-email-loading",
+  verifyEmailSuccess: "auth-verify-email-success",
+  verifyEmailContinue: "auth-verify-email-continue",
+  verifyEmailError: "auth-verify-email-error",
+  verifyEmailResendCta: "auth-verify-email-resend-cta",
+  verifyEmailResendForm: "auth-verify-email-resend-form",
+  verifyEmailResendEmail: "auth-verify-email-resend-email",
+  verifyEmailResendSubmit: "auth-verify-email-resend-submit",
+  verifyEmailResendConfirmation: "auth-verify-email-resend-confirmation"
 };
 function withTestIdPrefix(baseId, prefix) {
   return prefix === void 0 || prefix === "" ? baseId : `${prefix}-${baseId}`;
@@ -1316,19 +1351,19 @@ function useResetMutation(client, callbacks) {
 }
 function runSubmit(args) {
   args.setErrorKey(null);
-  const failure = preflight({
+  const failure2 = preflight({
     newPassword: args.newPassword,
     confirm: args.confirmPassword,
     token: args.token
   });
-  if (failure === null) {
+  if (failure2 === null) {
     args.mutate({ token: args.token, newPassword: args.newPassword });
     return;
   }
-  if (failure === "tokenInvalid" /* TokenInvalid */) {
+  if (failure2 === "tokenInvalid" /* TokenInvalid */) {
     args.setHasInvalidToken(true);
   }
-  args.setErrorKey(failure);
+  args.setErrorKey(failure2);
 }
 function useFormState() {
   const [newPassword, setNewPassword] = react.useState("");
@@ -4325,15 +4360,15 @@ function typedFailureOf(error) {
   }
   return { status: hasStatus ? status : null, errorCode: hasCode ? errorCode : null };
 }
-function mapTypedFailure(failure) {
-  const byCode = failure.errorCode === null ? void 0 : BODY_ERROR_CODES[failure.errorCode];
+function mapTypedFailure(failure2) {
+  const byCode = failure2.errorCode === null ? void 0 : BODY_ERROR_CODES[failure2.errorCode];
   if (byCode !== void 0) {
     return byCode;
   }
-  if (failure.status === HTTP_TOO_MANY_REQUESTS) {
+  if (failure2.status === HTTP_TOO_MANY_REQUESTS) {
     return "rateLimited" /* RateLimited */;
   }
-  const isServerError = failure.status !== null && failure.status >= HTTP_SERVER_ERROR_MIN;
+  const isServerError = failure2.status !== null && failure2.status >= HTTP_SERVER_ERROR_MIN;
   return isServerError ? "failed" /* Failed */ : null;
 }
 function messageOf(error) {
@@ -4343,8 +4378,8 @@ function messageOf(error) {
   return typeof error === "string" ? error : "";
 }
 function mapRegisterErrorCode(error) {
-  const failure = typedFailureOf(error);
-  const typed = failure === null ? null : mapTypedFailure(failure);
+  const failure2 = typedFailureOf(error);
+  const typed = failure2 === null ? null : mapTypedFailure(failure2);
   if (typed !== null) {
     return typed;
   }
@@ -4638,6 +4673,322 @@ function createBffChangePasswordClient(options = {}) {
     }
   };
 }
+function useResendVerification({ client, verifyUrlTemplate }) {
+  const [email, setEmail] = react.useState("");
+  const [missingEmail, setMissingEmail] = react.useState(false);
+  const [submitting, setSubmitting] = react.useState(false);
+  const [confirmed, setConfirmed] = react.useState(false);
+  const submit = react.useCallback(async () => {
+    const trimmed = email.trim();
+    if (trimmed === "") {
+      setMissingEmail(true);
+      return;
+    }
+    setMissingEmail(false);
+    setSubmitting(true);
+    await client.resendVerification(trimmed, verifyUrlTemplate);
+    setSubmitting(false);
+    setConfirmed(true);
+  }, [client, email, verifyUrlTemplate]);
+  return { email, setEmail, missingEmail, submitting, confirmed, submit };
+}
+function VerifyEmailResendForm({
+  client,
+  labels,
+  styles: styles3,
+  theme,
+  verifyUrlTemplate,
+  testIdPrefix
+}) {
+  const resend = useResendVerification({ client, verifyUrlTemplate });
+  const id = (base) => withTestIdPrefix(base, testIdPrefix);
+  if (resend.confirmed) {
+    return /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.successText, testID: id(AuthTestIds.verifyEmailResendConfirmation), children: labels.resendConfirmation });
+  }
+  const submit = () => {
+    void resend.submit();
+  };
+  const buttonStyle = resend.submitting ? [styles3.primaryButton, styles3.primaryButtonDisabled] : styles3.primaryButton;
+  return /* @__PURE__ */ jsxRuntime.jsxs(reactNative.View, { testID: id(AuthTestIds.verifyEmailResendForm), children: [
+    /* @__PURE__ */ jsxRuntime.jsxs(reactNative.View, { style: styles3.fieldGroup, children: [
+      /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.label, children: labels.resendEmailLabel }),
+      /* @__PURE__ */ jsxRuntime.jsx(
+        reactNative.TextInput,
+        {
+          accessibilityHint: labels.resendEmailHint,
+          accessibilityLabel: labels.resendEmailLabel,
+          autoCapitalize: "none",
+          autoComplete: "email",
+          autoCorrect: false,
+          autoFocus: true,
+          editable: !resend.submitting,
+          keyboardType: "email-address",
+          placeholder: labels.resendEmailPlaceholder,
+          placeholderTextColor: theme.colors.textSecondary,
+          style: styles3.input,
+          testID: id(AuthTestIds.verifyEmailResendEmail),
+          value: resend.email,
+          onChangeText: resend.setEmail
+        }
+      )
+    ] }),
+    resend.missingEmail ? /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.errorText, children: labels.resendMissingEmail }) : null,
+    /* @__PURE__ */ jsxRuntime.jsx(
+      reactNative.TouchableOpacity,
+      {
+        accessibilityHint: labels.resendSubmitHint,
+        accessibilityLabel: labels.resendSubmit,
+        accessibilityRole: "button",
+        disabled: resend.submitting,
+        style: buttonStyle,
+        testID: id(AuthTestIds.verifyEmailResendSubmit),
+        onPress: submit,
+        children: resend.submitting ? /* @__PURE__ */ jsxRuntime.jsx(reactNative.ActivityIndicator, { color: theme.colors.onPrimary, size: "small" }) : /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.primaryButtonText, children: labels.resendSubmit })
+      }
+    )
+  ] });
+}
+
+// src/verify/VerifyEmailErrorCode.ts
+var VerifyEmailErrorCode = /* @__PURE__ */ ((VerifyEmailErrorCode2) => {
+  VerifyEmailErrorCode2["TokenInvalid"] = "TOKEN_INVALID";
+  VerifyEmailErrorCode2["TokenExpired"] = "TOKEN_EXPIRED";
+  VerifyEmailErrorCode2["TokenUsed"] = "TOKEN_USED";
+  VerifyEmailErrorCode2["KeycloakUpdateFailed"] = "KEYCLOAK_UPDATE_FAILED";
+  VerifyEmailErrorCode2["MissingToken"] = "MISSING_TOKEN";
+  VerifyEmailErrorCode2["Generic"] = "GENERIC";
+  return VerifyEmailErrorCode2;
+})(VerifyEmailErrorCode || {});
+
+// src/verify/VerifyEmailPhase.ts
+var VerifyEmailPhase = /* @__PURE__ */ ((VerifyEmailPhase2) => {
+  VerifyEmailPhase2["Loading"] = "loading";
+  VerifyEmailPhase2["Success"] = "success";
+  VerifyEmailPhase2["Failure"] = "failure";
+  return VerifyEmailPhase2;
+})(VerifyEmailPhase || {});
+
+// src/verify/useVerifyEmail.ts
+var LOADING = {
+  phase: "loading" /* Loading */,
+  errorCode: "GENERIC" /* Generic */
+};
+var SUCCESS = {
+  phase: "success" /* Success */,
+  errorCode: "GENERIC" /* Generic */
+};
+var REJECTED = { success: false, errorCode: "GENERIC" /* Generic */ };
+function failure(errorCode) {
+  return { phase: "failure" /* Failure */, errorCode };
+}
+function useVerifyEmail({ client, token, onVerified, onFailed }) {
+  const [state, setState] = react.useState(LOADING);
+  const latest = react.useRef({ client, onVerified, onFailed });
+  latest.current = { client, onVerified, onFailed };
+  react.useEffect(() => {
+    if (token === "") {
+      setState(failure("MISSING_TOKEN" /* MissingToken */));
+      latest.current.onFailed?.("MISSING_TOKEN" /* MissingToken */);
+      return void 0;
+    }
+    let active = true;
+    setState(LOADING);
+    const settle = (result) => {
+      if (!active) {
+        return;
+      }
+      if (result.success) {
+        setState(SUCCESS);
+        latest.current.onVerified?.();
+        return;
+      }
+      setState(failure(result.errorCode));
+      latest.current.onFailed?.(result.errorCode);
+    };
+    void latest.current.client.verifyEmail(token).catch(() => REJECTED).then(settle);
+    return () => {
+      active = false;
+    };
+  }, [token]);
+  return state;
+}
+
+// src/verify/verifyEmailErrorText.ts
+function verifyEmailErrorText(code, labels) {
+  if (code === "TOKEN_INVALID" /* TokenInvalid */) {
+    return labels.errorInvalid;
+  }
+  if (code === "TOKEN_EXPIRED" /* TokenExpired */) {
+    return labels.errorExpired;
+  }
+  if (code === "TOKEN_USED" /* TokenUsed */) {
+    return labels.errorUsed;
+  }
+  if (code === "MISSING_TOKEN" /* MissingToken */) {
+    return labels.missingToken;
+  }
+  return labels.errorGeneric;
+}
+function VerifyEmailScreen({
+  client,
+  token,
+  onContinue,
+  theme: themeProp,
+  labels: labelsProp,
+  verifyUrlTemplate,
+  onVerified,
+  onFailed,
+  testIdPrefix
+}) {
+  const theme = useAuthTheme(themeProp);
+  const styles3 = useAuthStyles(theme);
+  const labels = react.useMemo(
+    () => ({ ...DEFAULT_VERIFY_EMAIL_LABELS, ...labelsProp }),
+    [labelsProp]
+  );
+  const { phase, errorCode } = useVerifyEmail({ client, token, onVerified, onFailed });
+  const [resendOpen, setResendOpen] = react.useState(false);
+  const openResend = react.useCallback(() => setResendOpen(true), []);
+  const id = (base) => withTestIdPrefix(base, testIdPrefix);
+  return /* @__PURE__ */ jsxRuntime.jsx(reactNative.View, { style: styles3.screen, testID: id(AuthTestIds.verifyEmailScreen), children: /* @__PURE__ */ jsxRuntime.jsxs(reactNative.View, { style: styles3.card, children: [
+    phase === "loading" /* Loading */ ? /* @__PURE__ */ jsxRuntime.jsxs(reactNative.View, { testID: id(AuthTestIds.verifyEmailLoading), children: [
+      /* @__PURE__ */ jsxRuntime.jsx(reactNative.ActivityIndicator, { color: theme.colors.primary, size: "large" }),
+      /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { accessibilityRole: "header", style: styles3.title, children: labels.loadingTitle }),
+      /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.subtitle, children: labels.loadingHint })
+    ] }) : null,
+    phase === "success" /* Success */ ? /* @__PURE__ */ jsxRuntime.jsxs(reactNative.View, { testID: id(AuthTestIds.verifyEmailSuccess), children: [
+      /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { accessibilityRole: "header", style: styles3.title, children: labels.successTitle }),
+      /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.subtitle, children: labels.successBody }),
+      /* @__PURE__ */ jsxRuntime.jsx(
+        reactNative.TouchableOpacity,
+        {
+          accessibilityHint: labels.successContinueHint,
+          accessibilityLabel: labels.successContinue,
+          accessibilityRole: "button",
+          style: styles3.primaryButton,
+          testID: id(AuthTestIds.verifyEmailContinue),
+          onPress: onContinue,
+          children: /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.primaryButtonText, children: labels.successContinue })
+        }
+      )
+    ] }) : null,
+    phase === "failure" /* Failure */ ? /* @__PURE__ */ jsxRuntime.jsxs(reactNative.View, { testID: id(AuthTestIds.verifyEmailError), children: [
+      /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { accessibilityRole: "header", style: styles3.title, children: labels.errorTitle }),
+      /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.errorText, children: verifyEmailErrorText(errorCode, labels) }),
+      resendOpen ? /* @__PURE__ */ jsxRuntime.jsx(
+        VerifyEmailResendForm,
+        {
+          client,
+          labels,
+          styles: styles3,
+          testIdPrefix,
+          theme,
+          verifyUrlTemplate
+        }
+      ) : /* @__PURE__ */ jsxRuntime.jsx(
+        reactNative.TouchableOpacity,
+        {
+          accessibilityHint: labels.resendCtaHint,
+          accessibilityLabel: labels.resendCta,
+          accessibilityRole: "button",
+          style: styles3.primaryButton,
+          testID: id(AuthTestIds.verifyEmailResendCta),
+          onPress: openResend,
+          children: /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.primaryButtonText, children: labels.resendCta })
+        }
+      )
+    ] }) : null
+  ] }) });
+}
+var VERIFY_EMAIL_ENDPOINT = "/bff/verify-email";
+var RESEND_VERIFICATION_ENDPOINT = "/bff/resend-verification";
+var CSRF_HEADER3 = "X-BFF-Csrf";
+var CSRF_HEADER_VALUE3 = "1";
+var JSON_CONTENT_TYPE3 = "application/json";
+var SERVER_ERROR_CODES2 = [
+  "TOKEN_INVALID" /* TokenInvalid */,
+  "TOKEN_EXPIRED" /* TokenExpired */,
+  "TOKEN_USED" /* TokenUsed */,
+  "KEYCLOAK_UPDATE_FAILED" /* KeycloakUpdateFailed */
+];
+var GENERIC_FAILURE = { success: false, errorCode: "GENERIC" /* Generic */ };
+async function lazyFetchHttpClient3(request) {
+  const fetchImpl = typeof fetch === "function" ? fetch.bind(globalThis) : void 0;
+  if (fetchImpl === void 0) {
+    throw new Error("createBffVerifyEmailClient: fetch is not available in this environment");
+  }
+  return authClient.createFetchHttpClient(fetchImpl)(request);
+}
+function isServerErrorCode(value) {
+  return typeof value === "string" && SERVER_ERROR_CODES2.includes(value);
+}
+function isRecord3(value) {
+  return typeof value === "object" && value !== null;
+}
+function decodeVerifyResponse(body) {
+  if (!isRecord3(body)) {
+    return GENERIC_FAILURE;
+  }
+  if (body.success === true) {
+    return { success: true };
+  }
+  return isServerErrorCode(body.errorCode) ? { success: false, errorCode: body.errorCode } : GENERIC_FAILURE;
+}
+function createBffVerifyEmailClient(options = {}) {
+  const http = options.http ?? lazyFetchHttpClient3;
+  const baseUrl = options.baseUrl ?? "";
+  const post = (path, body) => http({
+    url: `${baseUrl}${path}`,
+    method: "POST",
+    headers: { "Content-Type": JSON_CONTENT_TYPE3, [CSRF_HEADER3]: CSRF_HEADER_VALUE3 },
+    body: JSON.stringify(body),
+    credentials: "include"
+  });
+  return {
+    verifyEmail: async (token) => {
+      try {
+        const response = await post(VERIFY_EMAIL_ENDPOINT, { token });
+        return decodeVerifyResponse(response.data);
+      } catch {
+        return GENERIC_FAILURE;
+      }
+    },
+    resendVerification: async (email, verifyUrlTemplate) => {
+      const body = verifyUrlTemplate === void 0 ? { email } : { email, verifyUrlTemplate };
+      try {
+        const response = await post(RESEND_VERIFICATION_ENDPOINT, body);
+        return response.ok;
+      } catch {
+        return false;
+      }
+    }
+  };
+}
+
+// src/verify/verifyEmailUrl.ts
+var VERIFY_TOKEN_PLACEHOLDER = "{token}";
+var DEFAULT_VERIFY_PATH = "/verify-email";
+function readWindowOrigin() {
+  if (typeof window === "undefined" || typeof window.location !== "object") {
+    return null;
+  }
+  return typeof window.location.origin === "string" ? window.location.origin : null;
+}
+function nonEmpty(value) {
+  return value !== void 0 && value !== "" ? value : null;
+}
+function buildVerifyUrlTemplate(options = {}) {
+  const origin = nonEmpty(options.origin) ?? readWindowOrigin() ?? options.fallbackOrigin ?? "";
+  const path = options.path ?? DEFAULT_VERIFY_PATH;
+  return `${origin}${path}?token=${VERIFY_TOKEN_PLACEHOLDER}`;
+}
+function readVerifyToken(raw) {
+  if (typeof raw === "string") {
+    return raw;
+  }
+  const first = raw?.[0];
+  return typeof first === "string" ? first : "";
+}
 
 Object.defineProperty(exports, "BffAuthClient", {
   enumerable: true,
@@ -4672,6 +5023,7 @@ exports.DEFAULT_PREFERRED_METHOD_HINT_LABELS = DEFAULT_PREFERRED_METHOD_HINT_LAB
 exports.DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS = DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS;
 exports.DEFAULT_REGISTER_LABELS = DEFAULT_REGISTER_LABELS;
 exports.DEFAULT_RESET_PASSWORD_LABELS = DEFAULT_RESET_PASSWORD_LABELS;
+exports.DEFAULT_VERIFY_EMAIL_LABELS = DEFAULT_VERIFY_EMAIL_LABELS;
 exports.DEVICE_PIN_ALLOWED_DIGITS = DEVICE_PIN_ALLOWED_DIGITS;
 exports.DEVICE_PIN_DEFAULT_DIGITS = DEVICE_PIN_DEFAULT_DIGITS;
 exports.DemoCredentialsHint = DemoCredentialsHint;
@@ -4700,16 +5052,24 @@ exports.PinForm = PinForm;
 exports.PreferredMethodHint = PreferredMethodHint;
 exports.PreferredMethodSettingsCard = PreferredMethodSettingsCard;
 exports.PrefillIntent = PrefillIntent;
+exports.RESEND_VERIFICATION_ENDPOINT = RESEND_VERIFICATION_ENDPOINT;
 exports.RegisterErrorCode = RegisterErrorCode;
 exports.RegisterForm = RegisterForm;
 exports.RegisterTestIds = RegisterTestIds;
 exports.ResetPasswordError = ResetPasswordError;
 exports.ResetPasswordForm = ResetPasswordForm;
+exports.VERIFY_EMAIL_ENDPOINT = VERIFY_EMAIL_ENDPOINT;
+exports.VERIFY_TOKEN_PLACEHOLDER = VERIFY_TOKEN_PLACEHOLDER;
+exports.VerifyEmailErrorCode = VerifyEmailErrorCode;
+exports.VerifyEmailPhase = VerifyEmailPhase;
+exports.VerifyEmailScreen = VerifyEmailScreen;
+exports.buildVerifyUrlTemplate = buildVerifyUrlTemplate;
 exports.cachePreferredMethod = cachePreferredMethod;
 exports.clearCachedPreferredMethod = clearCachedPreferredMethod;
 exports.collectUserRoles = collectUserRoles;
 exports.createBffAuthClient = createBffAuthClient;
 exports.createBffChangePasswordClient = createBffChangePasswordClient;
+exports.createBffVerifyEmailClient = createBffVerifyEmailClient;
 exports.createPreferencesClient = createPreferencesClient;
 exports.defaultAuthTheme = defaultAuthTheme;
 exports.deriveUsernameFromEmail = deriveUsernameFromEmail;
@@ -4721,6 +5081,7 @@ exports.performBffLogout = performBffLogout;
 exports.readCachedPreferredMethod = readCachedPreferredMethod;
 exports.readPasskeyError = readPasskeyError;
 exports.readPasskeyRegistered = readPasskeyRegistered;
+exports.readVerifyToken = readVerifyToken;
 exports.resolveAccessibleRoutes = resolveAccessibleRoutes;
 exports.resolveAccountList = resolveAccountList;
 exports.resolveDemoAccounts = resolveDemoAccounts;
@@ -4746,8 +5107,11 @@ exports.usePasskeyCeremony = usePasskeyCeremony;
 exports.usePinLogin = usePinLogin;
 exports.usePreferredMethodSetting = usePreferredMethodSetting;
 exports.useRegisterForm = useRegisterForm;
+exports.useResendVerification = useResendVerification;
 exports.useResetPasswordForm = useResetPasswordForm;
+exports.useVerifyEmail = useVerifyEmail;
 exports.validatePasswordPolicy = validatePasswordPolicy;
+exports.verifyEmailErrorText = verifyEmailErrorText;
 exports.withTestIdPrefix = withTestIdPrefix;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map