@exegia/corpora-ui 0.9.0 → 0.10.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exegia/corpora-ui",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "shadcn-ready React UI library for the corpora manuscript-research apps.",
   "license": "MIT",
   "repository": {

package/src/components/blocks/auth/__tests__/linked-accounts-block.test.tsx

@@ -89,6 +89,24 @@ describe("LinkedAccountsBlock", () => {
     expect(onUnlink).not.toHaveBeenCalled();
   });
 
+  test("lifts the guard when another sign-in method exists off-list", async () => {
+    const user = userEvent.setup();
+    const onUnlink = mock(async () => {});
+    render(
+      <LinkedAccountsBlock
+        identities={[IDENTITIES[0]!]}
+        hasOtherSignInMethods
+        onUnlink={onUnlink}
+      />,
+    );
+
+    const button = screen.getByRole("button", { name: "Disconnect Google" });
+    expect(button.hasAttribute("disabled")).toBe(false);
+
+    await user.click(button);
+    expect(onUnlink).toHaveBeenCalledWith("id-1");
+  });
+
   test("surfaces a failing link as an error", async () => {
     const user = userEvent.setup();
     render(

package/src/components/blocks/auth/linked-accounts-block.tsx

@@ -36,6 +36,12 @@ export interface LinkedAccountsBlockProps {
   providers?: SocialProvider[];
   /** Shows the loading row instead of the list. */
   loading?: boolean;
+  /**
+   * The account can also sign in through a method that has no row in this
+   * list — an email/password credential, say. Lifts the last-method guard,
+   * which otherwise refuses to disconnect the final listed identity.
+   */
+  hasOtherSignInMethods?: boolean;
   /** Reject (or throw) to show the inline error. */
   onLink?: (provider: SocialProvider) => Promise<void> | void;
   onUnlink?: (id: string) => Promise<void> | void;
@@ -57,6 +63,7 @@ export function LinkedAccountsBlock({
   identities = [],
   providers = ["google", "apple", "github"],
   loading = false,
+  hasOtherSignInMethods = false,
   onLink,
   onUnlink,
   className,
@@ -70,8 +77,9 @@ export function LinkedAccountsBlock({
   const connectable = providers.filter((provider) => !connected.has(provider));
   const busy = linking !== null || unlinking !== null;
   // The backend rule, enforced here so we never fire a request that would
-  // remove the account's only way in.
-  const lastMethod = identities.length <= 1;
+  // remove the account's only way in. An off-list method (a password) keeps
+  // the account reachable, so it lifts the guard.
+  const lastMethod = !hasOtherSignInMethods && identities.length <= 1;
 
   async function connect(provider: SocialProvider) {
     if (busy) return;