@dloizides/auth-web 1.9.0 → 1.9.1

package/dist/index.d.mts

@@ -1694,30 +1694,6 @@ declare const enum PasskeyCeremonyStatus {
     Error = "error"
 }
 
-/**
- * Navigation helpers for the passkey (WebAuthn) BFF endpoints.
- *
- * Unlike the device-PIN client (which is plain `fetch`), the passkey login and
- * registration ceremonies are NOT fetches — they are full-page BROWSER
- * NAVIGATIONS. The BFF (`Bff.AspNetCore` 1.3.x) drives the WebAuthn ceremony
- * through Keycloak's hosted pages, then redirects the browser back:
- *  - login:        `/bff/passkey/login?returnUrl=<rel>` → on success the browser
- *    lands on `returnUrl` with the session cookie already set;
- *  - registration: `/bff/passkey/register?returnUrl=<rel>` → Keycloak re-auths
- *    the user (password) then runs the credential-creation ceremony, returning
- *    the browser to `returnUrl?passkey=registered`;
- *  - failure / cancel: the BFF redirects to `<login>?passkeyError=cancelled` or
- *    `<login>?passkeyError=failed`.
- *
- * react-query-FREE by construction: there is NO fetch here at all — every
- * function is a pure `window.location` read or `window.location.assign`. The
- * login route group has no QueryClient provider, so the passkey login button
- * (which lives there) MUST avoid any react-query primitive; navigation satisfies
- * that trivially.
- *
- * All reads are SSR-safe: when `window` is undefined (server render / native)
- * they return a benign default rather than throwing.
- */
 /** The recognised passkey error codes the BFF sends back via `?passkeyError=`. */
 type PasskeyErrorCode = 'cancelled' | 'failed';
 /**

package/dist/index.d.ts

@@ -1694,30 +1694,6 @@ declare const enum PasskeyCeremonyStatus {
     Error = "error"
 }
 
-/**
- * Navigation helpers for the passkey (WebAuthn) BFF endpoints.
- *
- * Unlike the device-PIN client (which is plain `fetch`), the passkey login and
- * registration ceremonies are NOT fetches — they are full-page BROWSER
- * NAVIGATIONS. The BFF (`Bff.AspNetCore` 1.3.x) drives the WebAuthn ceremony
- * through Keycloak's hosted pages, then redirects the browser back:
- *  - login:        `/bff/passkey/login?returnUrl=<rel>` → on success the browser
- *    lands on `returnUrl` with the session cookie already set;
- *  - registration: `/bff/passkey/register?returnUrl=<rel>` → Keycloak re-auths
- *    the user (password) then runs the credential-creation ceremony, returning
- *    the browser to `returnUrl?passkey=registered`;
- *  - failure / cancel: the BFF redirects to `<login>?passkeyError=cancelled` or
- *    `<login>?passkeyError=failed`.
- *
- * react-query-FREE by construction: there is NO fetch here at all — every
- * function is a pure `window.location` read or `window.location.assign`. The
- * login route group has no QueryClient provider, so the passkey login button
- * (which lives there) MUST avoid any react-query primitive; navigation satisfies
- * that trivially.
- *
- * All reads are SSR-safe: when `window` is undefined (server render / native)
- * they return a benign default rather than throwing.
- */
 /** The recognised passkey error codes the BFF sends back via `?passkeyError=`. */
 type PasskeyErrorCode = 'cancelled' | 'failed';
 /**

package/dist/index.js

@@ -2520,6 +2520,18 @@ var PasskeyCeremonyMode = /* @__PURE__ */ ((PasskeyCeremonyMode2) => {
   return PasskeyCeremonyMode2;
 })(PasskeyCeremonyMode || {});
 
+// src/passkey/browserLocation.ts
+function getBrowserLocation() {
+  if (typeof window === "undefined") {
+    return null;
+  }
+  const browserLocation = window.location;
+  if (browserLocation === void 0) {
+    return null;
+  }
+  return browserLocation;
+}
+
 // src/passkey/passkeyNavigation.ts
 var PASSKEY_LOGIN_ENDPOINT = "/bff/passkey/login";
 var PASSKEY_REGISTER_ENDPOINT = "/bff/passkey/register";
@@ -2533,22 +2545,25 @@ function buildNavigationUrl(endpoint, returnUrl) {
   return `${endpoint}?${RETURN_URL_PARAM}=${encodeURIComponent(returnUrl)}`;
 }
 function readSearchParams() {
-  if (typeof window === "undefined") {
+  const browserLocation = getBrowserLocation();
+  if (browserLocation === null) {
     return null;
   }
-  return new URLSearchParams(window.location.search);
+  return new URLSearchParams(browserLocation.search);
 }
 function startPasskeyLogin(returnUrl) {
-  if (typeof window === "undefined") {
+  const browserLocation = getBrowserLocation();
+  if (browserLocation === null) {
     return;
   }
-  window.location.assign(buildNavigationUrl(PASSKEY_LOGIN_ENDPOINT, returnUrl));
+  browserLocation.assign(buildNavigationUrl(PASSKEY_LOGIN_ENDPOINT, returnUrl));
 }
 function startPasskeyRegistration(returnUrl) {
-  if (typeof window === "undefined") {
+  const browserLocation = getBrowserLocation();
+  if (browserLocation === null) {
     return;
   }
-  window.location.assign(buildNavigationUrl(PASSKEY_REGISTER_ENDPOINT, returnUrl));
+  browserLocation.assign(buildNavigationUrl(PASSKEY_REGISTER_ENDPOINT, returnUrl));
 }
 function readPasskeyError() {
   const params = readSearchParams();
@@ -2725,8 +2740,9 @@ function usePasskeyCeremony(optionsArg) {
         onSuccess(user);
         return;
       }
-      if (mode === "login" /* Login */ && typeof window !== "undefined") {
-        window.location.assign(returnUrl);
+      const browserLocation = getBrowserLocation();
+      if (mode === "login" /* Login */ && browserLocation !== null) {
+        browserLocation.assign(returnUrl);
       }
     },
     [mode, onSuccess, returnUrl]
@@ -2848,10 +2864,11 @@ function PasskeyLoginButton({
 }
 var DEFAULT_RETURN_PATH = "/";
 function readCurrentPath() {
-  if (typeof window === "undefined") {
+  const browserLocation = getBrowserLocation();
+  if (browserLocation === null) {
     return DEFAULT_RETURN_PATH;
   }
-  return window.location.pathname;
+  return browserLocation.pathname;
 }
 function PasskeySettingsCard({
   returnUrl,