@dloizides/auth-web 1.21.0 → 1.22.1

package/dist/index.mjs

@@ -353,6 +353,31 @@ var DEFAULT_REGISTER_LABELS = {
   }
 };
 
+// src/components/labels/verifyEmailLabels.ts
+var DEFAULT_VERIFY_EMAIL_LABELS = {
+  loadingTitle: "Verifying your email...",
+  loadingHint: "Please wait while we verify your address.",
+  successTitle: "Your email is verified",
+  successBody: "Thanks for confirming your email address.",
+  successContinue: "Continue",
+  successContinueHint: "Go to the app",
+  errorTitle: "We couldn't verify your email",
+  errorInvalid: "This verification link is invalid. Request a new one.",
+  errorExpired: "This verification link has expired. Request a new one.",
+  errorUsed: "This link has already been used.",
+  errorGeneric: "Verification failed. Please try again later.",
+  missingToken: "This verification link is missing a token.",
+  resendCta: "Send a new verification email",
+  resendCtaHint: "Show the resend verification email form",
+  resendEmailLabel: "Email",
+  resendEmailHint: "The address to send a new verification link to",
+  resendEmailPlaceholder: "you@example.com",
+  resendMissingEmail: "Enter your email address.",
+  resendSubmit: "Send link",
+  resendSubmitHint: "Sends a new verification email",
+  resendConfirmation: "If that address has an account, a new verification link is on its way."
+};
+
 // src/components/testIds.ts
 var AuthTestIds = {
   loginForm: "auth-login-form",
@@ -443,7 +468,17 @@ var AuthTestIds = {
   demoCredentialsPassword: "auth-demo-credentials-password",
   demoCredentialsUseButton: "auth-demo-credentials-use",
   // The collapsed disclosure trigger (`disclosure` variant only).
-  demoCredentialsToggle: "auth-demo-credentials-toggle"
+  demoCredentialsToggle: "auth-demo-credentials-toggle",
+  verifyEmailScreen: "auth-verify-email",
+  verifyEmailLoading: "auth-verify-email-loading",
+  verifyEmailSuccess: "auth-verify-email-success",
+  verifyEmailContinue: "auth-verify-email-continue",
+  verifyEmailError: "auth-verify-email-error",
+  verifyEmailResendCta: "auth-verify-email-resend-cta",
+  verifyEmailResendForm: "auth-verify-email-resend-form",
+  verifyEmailResendEmail: "auth-verify-email-resend-email",
+  verifyEmailResendSubmit: "auth-verify-email-resend-submit",
+  verifyEmailResendConfirmation: "auth-verify-email-resend-confirmation"
 };
 function withTestIdPrefix(baseId, prefix) {
   return prefix === void 0 || prefix === "" ? baseId : `${prefix}-${baseId}`;
@@ -540,6 +575,12 @@ function useAuthStyles(theme) {
         marginTop: spacing.xs,
         color: colors.danger
       },
+      errorBody: {
+        fontSize: typography.body,
+        marginTop: spacing.xs,
+        marginBottom: spacing.md,
+        color: colors.danger
+      },
       successText: {
         fontSize: typography.body,
         lineHeight: typography.body * 1.4,
@@ -1315,19 +1356,19 @@ function useResetMutation(client, callbacks) {
 }
 function runSubmit(args) {
   args.setErrorKey(null);
-  const failure = preflight({
+  const failure2 = preflight({
     newPassword: args.newPassword,
     confirm: args.confirmPassword,
     token: args.token
   });
-  if (failure === null) {
+  if (failure2 === null) {
     args.mutate({ token: args.token, newPassword: args.newPassword });
     return;
   }
-  if (failure === "tokenInvalid" /* TokenInvalid */) {
+  if (failure2 === "tokenInvalid" /* TokenInvalid */) {
     args.setHasInvalidToken(true);
   }
-  args.setErrorKey(failure);
+  args.setErrorKey(failure2);
 }
 function useFormState() {
   const [newPassword, setNewPassword] = useState("");
@@ -4324,15 +4365,15 @@ function typedFailureOf(error) {
   }
   return { status: hasStatus ? status : null, errorCode: hasCode ? errorCode : null };
 }
-function mapTypedFailure(failure) {
-  const byCode = failure.errorCode === null ? void 0 : BODY_ERROR_CODES[failure.errorCode];
+function mapTypedFailure(failure2) {
+  const byCode = failure2.errorCode === null ? void 0 : BODY_ERROR_CODES[failure2.errorCode];
   if (byCode !== void 0) {
     return byCode;
   }
-  if (failure.status === HTTP_TOO_MANY_REQUESTS) {
+  if (failure2.status === HTTP_TOO_MANY_REQUESTS) {
     return "rateLimited" /* RateLimited */;
   }
-  const isServerError = failure.status !== null && failure.status >= HTTP_SERVER_ERROR_MIN;
+  const isServerError = failure2.status !== null && failure2.status >= HTTP_SERVER_ERROR_MIN;
   return isServerError ? "failed" /* Failed */ : null;
 }
 function messageOf(error) {
@@ -4342,8 +4383,8 @@ function messageOf(error) {
   return typeof error === "string" ? error : "";
 }
 function mapRegisterErrorCode(error) {
-  const failure = typedFailureOf(error);
-  const typed = failure === null ? null : mapTypedFailure(failure);
+  const failure2 = typedFailureOf(error);
+  const typed = failure2 === null ? null : mapTypedFailure(failure2);
   if (typed !== null) {
     return typed;
   }
@@ -4637,7 +4678,361 @@ function createBffChangePasswordClient(options = {}) {
     }
   };
 }
+function useFocusOnMount(ref) {
+  useEffect(() => {
+    ref.current?.focus();
+  }, [ref]);
+}
+function useResendVerification({ client, verifyUrlTemplate }) {
+  const [email, setEmail] = useState("");
+  const [missingEmail, setMissingEmail] = useState(false);
+  const [submitting, setSubmitting] = useState(false);
+  const [confirmed, setConfirmed] = useState(false);
+  const submit = useCallback(async () => {
+    const trimmed = email.trim();
+    if (trimmed === "") {
+      setMissingEmail(true);
+      return;
+    }
+    setMissingEmail(false);
+    setSubmitting(true);
+    await client.resendVerification(trimmed, verifyUrlTemplate);
+    setSubmitting(false);
+    setConfirmed(true);
+  }, [client, email, verifyUrlTemplate]);
+  return { email, setEmail, missingEmail, submitting, confirmed, submit };
+}
+function ResendConfirmation({ style, testID, text }) {
+  const ref = useRef(null);
+  useFocusOnMount(ref);
+  return /* @__PURE__ */ jsx(View, { ref, accessible: true, accessibilityLiveRegion: "polite", focusable: true, testID, children: /* @__PURE__ */ jsx(Text, { style, children: text }) });
+}
+function VerifyEmailResendForm({
+  client,
+  labels,
+  styles: styles3,
+  theme,
+  verifyUrlTemplate,
+  testIdPrefix
+}) {
+  const resend = useResendVerification({ client, verifyUrlTemplate });
+  const id = (base) => withTestIdPrefix(base, testIdPrefix);
+  if (resend.confirmed) {
+    return /* @__PURE__ */ jsx(ResendConfirmation, { style: styles3.successText, testID: id(AuthTestIds.verifyEmailResendConfirmation), text: labels.resendConfirmation });
+  }
+  const submit = () => {
+    void resend.submit();
+  };
+  const buttonStyle = resend.submitting ? [styles3.primaryButton, styles3.primaryButtonDisabled] : styles3.primaryButton;
+  return /* @__PURE__ */ jsxs(View, { testID: id(AuthTestIds.verifyEmailResendForm), children: [
+    /* @__PURE__ */ jsxs(View, { style: styles3.fieldGroup, children: [
+      /* @__PURE__ */ jsx(Text, { style: styles3.label, children: labels.resendEmailLabel }),
+      /* @__PURE__ */ jsx(
+        TextInput,
+        {
+          accessibilityHint: labels.resendEmailHint,
+          accessibilityLabel: labels.resendEmailLabel,
+          autoCapitalize: "none",
+          autoComplete: "email",
+          autoCorrect: false,
+          autoFocus: true,
+          editable: !resend.submitting,
+          keyboardType: "email-address",
+          placeholder: labels.resendEmailPlaceholder,
+          placeholderTextColor: theme.colors.textSecondary,
+          style: styles3.input,
+          testID: id(AuthTestIds.verifyEmailResendEmail),
+          value: resend.email,
+          onChangeText: resend.setEmail
+        }
+      )
+    ] }),
+    resend.missingEmail ? /* @__PURE__ */ jsx(Text, { style: styles3.errorBody, children: labels.resendMissingEmail }) : null,
+    /* @__PURE__ */ jsx(
+      TouchableOpacity,
+      {
+        accessibilityHint: labels.resendSubmitHint,
+        accessibilityLabel: labels.resendSubmit,
+        accessibilityRole: "button",
+        disabled: resend.submitting,
+        style: buttonStyle,
+        testID: id(AuthTestIds.verifyEmailResendSubmit),
+        onPress: submit,
+        children: resend.submitting ? /* @__PURE__ */ jsx(ActivityIndicator, { color: theme.colors.onPrimary, size: "small" }) : /* @__PURE__ */ jsx(Text, { style: styles3.primaryButtonText, children: labels.resendSubmit })
+      }
+    )
+  ] });
+}
+
+// src/verify/VerifyEmailErrorCode.ts
+var VerifyEmailErrorCode = /* @__PURE__ */ ((VerifyEmailErrorCode2) => {
+  VerifyEmailErrorCode2["TokenInvalid"] = "TOKEN_INVALID";
+  VerifyEmailErrorCode2["TokenExpired"] = "TOKEN_EXPIRED";
+  VerifyEmailErrorCode2["TokenUsed"] = "TOKEN_USED";
+  VerifyEmailErrorCode2["KeycloakUpdateFailed"] = "KEYCLOAK_UPDATE_FAILED";
+  VerifyEmailErrorCode2["MissingToken"] = "MISSING_TOKEN";
+  VerifyEmailErrorCode2["Generic"] = "GENERIC";
+  return VerifyEmailErrorCode2;
+})(VerifyEmailErrorCode || {});
+
+// src/verify/VerifyEmailPhase.ts
+var VerifyEmailPhase = /* @__PURE__ */ ((VerifyEmailPhase2) => {
+  VerifyEmailPhase2["Loading"] = "loading";
+  VerifyEmailPhase2["Success"] = "success";
+  VerifyEmailPhase2["Failure"] = "failure";
+  return VerifyEmailPhase2;
+})(VerifyEmailPhase || {});
+
+// src/verify/useVerifyEmail.ts
+var LOADING = {
+  phase: "loading" /* Loading */,
+  errorCode: "GENERIC" /* Generic */
+};
+var SUCCESS = {
+  phase: "success" /* Success */,
+  errorCode: "GENERIC" /* Generic */
+};
+var REJECTED = { success: false, errorCode: "GENERIC" /* Generic */ };
+function failure(errorCode) {
+  return { phase: "failure" /* Failure */, errorCode };
+}
+function useVerifyEmail({ client, token, onVerified, onFailed }) {
+  const [state, setState] = useState(LOADING);
+  const latest = useRef({ client, onVerified, onFailed });
+  latest.current = { client, onVerified, onFailed };
+  useEffect(() => {
+    if (token === "") {
+      setState(failure("MISSING_TOKEN" /* MissingToken */));
+      latest.current.onFailed?.("MISSING_TOKEN" /* MissingToken */);
+      return void 0;
+    }
+    let active = true;
+    setState(LOADING);
+    const settle = (result) => {
+      if (!active) {
+        return;
+      }
+      if (result.success) {
+        setState(SUCCESS);
+        latest.current.onVerified?.();
+        return;
+      }
+      setState(failure(result.errorCode));
+      latest.current.onFailed?.(result.errorCode);
+    };
+    void latest.current.client.verifyEmail(token).catch(() => REJECTED).then(settle);
+    return () => {
+      active = false;
+    };
+  }, [token]);
+  return state;
+}
+
+// src/verify/verifyEmailErrorText.ts
+function verifyEmailErrorText(code, labels) {
+  if (code === "TOKEN_INVALID" /* TokenInvalid */) {
+    return labels.errorInvalid;
+  }
+  if (code === "TOKEN_EXPIRED" /* TokenExpired */) {
+    return labels.errorExpired;
+  }
+  if (code === "TOKEN_USED" /* TokenUsed */) {
+    return labels.errorUsed;
+  }
+  if (code === "MISSING_TOKEN" /* MissingToken */) {
+    return labels.missingToken;
+  }
+  return labels.errorGeneric;
+}
+function ResendCta({ label, hint, style, textStyle, testID, onPress }) {
+  const ref = useRef(null);
+  useFocusOnMount(ref);
+  return /* @__PURE__ */ jsx(
+    TouchableOpacity,
+    {
+      ref,
+      accessibilityHint: hint,
+      accessibilityLabel: label,
+      accessibilityRole: "button",
+      style,
+      testID,
+      onPress,
+      children: /* @__PURE__ */ jsx(Text, { style: textStyle, children: label })
+    }
+  );
+}
+function VerifyEmailScreen({
+  client,
+  token,
+  onContinue,
+  theme: themeProp,
+  labels: labelsProp,
+  verifyUrlTemplate,
+  onVerified,
+  onFailed,
+  testIdPrefix
+}) {
+  const theme = useAuthTheme(themeProp);
+  const styles3 = useAuthStyles(theme);
+  const labels = useMemo(
+    () => ({ ...DEFAULT_VERIFY_EMAIL_LABELS, ...labelsProp }),
+    [labelsProp]
+  );
+  const { phase, errorCode } = useVerifyEmail({ client, token, onVerified, onFailed });
+  const [resendOpen, setResendOpen] = useState(false);
+  const openResend = useCallback(() => setResendOpen(true), []);
+  const id = (base) => withTestIdPrefix(base, testIdPrefix);
+  return /* @__PURE__ */ jsx(View, { style: styles3.screen, testID: id(AuthTestIds.verifyEmailScreen), children: /* @__PURE__ */ jsxs(View, { style: styles3.card, children: [
+    phase === "loading" /* Loading */ ? /* @__PURE__ */ jsxs(View, { testID: id(AuthTestIds.verifyEmailLoading), children: [
+      /* @__PURE__ */ jsx(ActivityIndicator, { color: theme.colors.primary, size: "large" }),
+      /* @__PURE__ */ jsx(Text, { accessibilityRole: "header", style: styles3.title, children: labels.loadingTitle }),
+      /* @__PURE__ */ jsx(Text, { style: styles3.subtitle, children: labels.loadingHint })
+    ] }) : null,
+    phase === "success" /* Success */ ? /* @__PURE__ */ jsxs(View, { testID: id(AuthTestIds.verifyEmailSuccess), children: [
+      /* @__PURE__ */ jsx(Text, { accessibilityRole: "header", style: styles3.title, children: labels.successTitle }),
+      /* @__PURE__ */ jsx(Text, { style: styles3.subtitle, children: labels.successBody }),
+      /* @__PURE__ */ jsx(
+        TouchableOpacity,
+        {
+          accessibilityHint: labels.successContinueHint,
+          accessibilityLabel: labels.successContinue,
+          accessibilityRole: "button",
+          style: styles3.primaryButton,
+          testID: id(AuthTestIds.verifyEmailContinue),
+          onPress: onContinue,
+          children: /* @__PURE__ */ jsx(Text, { style: styles3.primaryButtonText, children: labels.successContinue })
+        }
+      )
+    ] }) : null,
+    phase === "failure" /* Failure */ ? /* @__PURE__ */ jsxs(View, { testID: id(AuthTestIds.verifyEmailError), children: [
+      /* @__PURE__ */ jsx(Text, { accessibilityRole: "header", style: styles3.title, children: labels.errorTitle }),
+      /* @__PURE__ */ jsx(Text, { style: styles3.errorBody, children: verifyEmailErrorText(errorCode, labels) }),
+      resendOpen ? /* @__PURE__ */ jsx(
+        VerifyEmailResendForm,
+        {
+          client,
+          labels,
+          styles: styles3,
+          testIdPrefix,
+          theme,
+          verifyUrlTemplate
+        }
+      ) : /* @__PURE__ */ jsx(
+        ResendCta,
+        {
+          hint: labels.resendCtaHint,
+          label: labels.resendCta,
+          style: styles3.primaryButton,
+          testID: id(AuthTestIds.verifyEmailResendCta),
+          textStyle: styles3.primaryButtonText,
+          onPress: openResend
+        }
+      )
+    ] }) : null
+  ] }) });
+}
+var VERIFY_EMAIL_ENDPOINT = "/bff/verify-email";
+var RESEND_VERIFICATION_ENDPOINT = "/bff/resend-verification";
+var CSRF_HEADER3 = "X-BFF-Csrf";
+var CSRF_HEADER_VALUE3 = "1";
+var JSON_CONTENT_TYPE3 = "application/json";
+var SERVER_ERROR_CODES2 = [
+  "TOKEN_INVALID" /* TokenInvalid */,
+  "TOKEN_EXPIRED" /* TokenExpired */,
+  "TOKEN_USED" /* TokenUsed */,
+  "KEYCLOAK_UPDATE_FAILED" /* KeycloakUpdateFailed */
+];
+var GENERIC_FAILURE = { success: false, errorCode: "GENERIC" /* Generic */ };
+var INVALID_TOKEN = { success: false, errorCode: "TOKEN_INVALID" /* TokenInvalid */ };
+var HTTP_BAD_REQUEST3 = 400;
+var TOKEN_FIELD = "token";
+async function lazyFetchHttpClient3(request) {
+  const fetchImpl = typeof fetch === "function" ? fetch.bind(globalThis) : void 0;
+  if (fetchImpl === void 0) {
+    throw new Error("createBffVerifyEmailClient: fetch is not available in this environment");
+  }
+  return createFetchHttpClient(fetchImpl)(request);
+}
+function isServerErrorCode(value) {
+  return typeof value === "string" && SERVER_ERROR_CODES2.includes(value);
+}
+function isRecord3(value) {
+  return typeof value === "object" && value !== null;
+}
+function isTokenValidationRejection(status, body) {
+  if (status !== HTTP_BAD_REQUEST3 || !isRecord3(body.errors)) {
+    return false;
+  }
+  return Object.keys(body.errors).some((field2) => field2.toLowerCase() === TOKEN_FIELD);
+}
+function decodeVerifyResponse(status, body) {
+  if (!isRecord3(body)) {
+    return GENERIC_FAILURE;
+  }
+  if (body.success === true) {
+    return { success: true };
+  }
+  if (isServerErrorCode(body.errorCode)) {
+    return { success: false, errorCode: body.errorCode };
+  }
+  return isTokenValidationRejection(status, body) ? INVALID_TOKEN : GENERIC_FAILURE;
+}
+function createBffVerifyEmailClient(options = {}) {
+  const http = options.http ?? lazyFetchHttpClient3;
+  const baseUrl = options.baseUrl ?? "";
+  const post = (path, body) => http({
+    url: `${baseUrl}${path}`,
+    method: "POST",
+    headers: { "Content-Type": JSON_CONTENT_TYPE3, [CSRF_HEADER3]: CSRF_HEADER_VALUE3 },
+    body: JSON.stringify(body),
+    credentials: "include"
+  });
+  return {
+    verifyEmail: async (token) => {
+      try {
+        const response = await post(VERIFY_EMAIL_ENDPOINT, { token });
+        return decodeVerifyResponse(response.status, response.data);
+      } catch {
+        return GENERIC_FAILURE;
+      }
+    },
+    resendVerification: async (email, verifyUrlTemplate) => {
+      const body = verifyUrlTemplate === void 0 ? { email } : { email, verifyUrlTemplate };
+      try {
+        const response = await post(RESEND_VERIFICATION_ENDPOINT, body);
+        return response.ok;
+      } catch {
+        return false;
+      }
+    }
+  };
+}
+
+// src/verify/verifyEmailUrl.ts
+var VERIFY_TOKEN_PLACEHOLDER = "{token}";
+var DEFAULT_VERIFY_PATH = "/verify-email";
+function readWindowOrigin() {
+  if (typeof window === "undefined" || typeof window.location !== "object") {
+    return null;
+  }
+  return typeof window.location.origin === "string" ? window.location.origin : null;
+}
+function nonEmpty(value) {
+  return value !== void 0 && value !== "" ? value : null;
+}
+function buildVerifyUrlTemplate(options = {}) {
+  const origin = nonEmpty(options.origin) ?? readWindowOrigin() ?? options.fallbackOrigin ?? "";
+  const path = options.path ?? DEFAULT_VERIFY_PATH;
+  return `${origin}${path}?token=${VERIFY_TOKEN_PLACEHOLDER}`;
+}
+function readVerifyToken(raw) {
+  if (typeof raw === "string") {
+    return raw;
+  }
+  const first = raw?.[0];
+  return typeof first === "string" ? first : "";
+}
 
-export { AccountSettingsScreen, AuthScreen, AuthTestIds, AuthThemeProvider, BffAuthStatus, CHANGE_PASSWORD_ENDPOINT, ChangePasswordCard, ChangePasswordErrorKey, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_REGISTER_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, DemoCredentialsHintVariant, DevicePinEnrollErrorKey, DevicePinEnrollForm, DevicePinErrorKey, DevicePinInput, DevicePinLengthPicker, DevicePinOffer, DevicePinSettingsCard, DevicePinUnlockScreen, ForgotPasswordFields, ForgotPasswordForm, LoginForm, OtpForm, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, PasskeyLoginButton, PasskeySettingsCard, PasswordPolicyError, PinForm, PreferredMethodHint, PreferredMethodSettingsCard, PrefillIntent, RegisterErrorCode, RegisterForm, RegisterTestIds, ResetPasswordError, ResetPasswordForm, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createBffChangePasswordClient, createPreferencesClient, defaultAuthTheme, deriveUsernameFromEmail, isAllowedPinDigits, isPasswordValid, isRegisterPasswordStrong, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, resolveAccessibleRoutes, resolveAccountList, resolveDemoAccounts, resolveDemoCredentials, resolvePostLoginRoute, splitFullName, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useRegisterForm, useResetPasswordForm, validatePasswordPolicy, withTestIdPrefix };
+export { AccountSettingsScreen, AuthScreen, AuthTestIds, AuthThemeProvider, BffAuthStatus, CHANGE_PASSWORD_ENDPOINT, ChangePasswordCard, ChangePasswordErrorKey, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_REGISTER_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEFAULT_VERIFY_EMAIL_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, DemoCredentialsHintVariant, DevicePinEnrollErrorKey, DevicePinEnrollForm, DevicePinErrorKey, DevicePinInput, DevicePinLengthPicker, DevicePinOffer, DevicePinSettingsCard, DevicePinUnlockScreen, ForgotPasswordFields, ForgotPasswordForm, LoginForm, OtpForm, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, PasskeyLoginButton, PasskeySettingsCard, PasswordPolicyError, PinForm, PreferredMethodHint, PreferredMethodSettingsCard, PrefillIntent, RESEND_VERIFICATION_ENDPOINT, RegisterErrorCode, RegisterForm, RegisterTestIds, ResetPasswordError, ResetPasswordForm, VERIFY_EMAIL_ENDPOINT, VERIFY_TOKEN_PLACEHOLDER, VerifyEmailErrorCode, VerifyEmailPhase, VerifyEmailScreen, buildVerifyUrlTemplate, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createBffChangePasswordClient, createBffVerifyEmailClient, createPreferencesClient, defaultAuthTheme, deriveUsernameFromEmail, isAllowedPinDigits, isPasswordValid, isRegisterPasswordStrong, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, readVerifyToken, resolveAccessibleRoutes, resolveAccountList, resolveDemoAccounts, resolveDemoCredentials, resolvePostLoginRoute, splitFullName, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useRegisterForm, useResendVerification, useResetPasswordForm, useVerifyEmail, validatePasswordPolicy, verifyEmailErrorText, withTestIdPrefix };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map