@infoteam/account-web 0.6.0 → 0.7.0

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 GSA Infoteam
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 GSA Infoteam
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,78 +1,78 @@
-# @infoteam/account-web
-
-인포팀 계정(IdP) 로그인을 웹 앱에 붙인다. 특정 프레임워크에 의존하지 않는다. React 앱이라면 [`@infoteam/account-react`](../react)를 쓴다.
-
-## 설치
-
-```bash
-pnpm add @infoteam/account-web zod
-```
-
-## 사용
-
-```ts
-import { createAccountClient } from '@infoteam/account-web';
-
-// 라우터보다 먼저 만든다. callback 으로 열린 페이지면 여기서 주소를 로그인 전 위치로 바꾼다
-const account = createAccountClient({ issuer: 'production', clientId, api: apiUrl });
-
-await account.ready(); // callback 이면 백엔드 로그인을 마치고, 아니면 세션을 복구한다
-account.store.subscribe((state) => render(state));
-
-// 로그인 버튼
-await account.login({ returnTo: location.pathname });
-
-// 라우터 guard
-await account.requireAuth({ returnTo: nextUrl });
-
-// API 요청. 401 이면 토큰을 갱신한 뒤 다시 보낸다
-await account.fetch(`${apiUrl}/me`);
-```
-
-- 상태는 zustand의 vanilla store(`account.store`)에 있으므로, 어느 프레임워크에서든 구독할 수 있다.
-- API 요청에는 `account.fetch`, `@infoteam/account-web/openapi-fetch`, `@infoteam/account-web/axios` 중 하나를 쓴다.
-- 옵션, guard, 에러 코드, 로그아웃은 React와 같다. [`account-react` README](../react/README.md#사용)를 참고한다.
-
-## 백엔드 형식이 다를 때
-
-`api`는 백엔드가 [세션 프로토콜](../../README.md#세션-프로토콜)을 구현했다고 가정한다. 형식이 다르면 `api` 대신 `session`에 백엔드 호출을 직접
-구현해서 넘긴다. 둘 중 하나만 줄 수 있다.
-
-```ts
-import { createAccountClient, type Session } from '@infoteam/account-web';
-
-const session: Session = {
-  async start(credential) {
-    if ('ticket' in credential) throw new Error('this backend does not reject logins');
-    const res = await fetch(`${apiUrl}/oauth/callback`, {
-      method: 'POST',
-      credentials: 'include',
-      headers: { 'content-type': 'application/json' },
-      body: JSON.stringify({
-        code: credential.code,
-        verifier: credential.codeVerifier,
-        redirectUri: credential.redirectUri,
-        nonce: credential.nonce,
-      }),
-    });
-    if (!res.ok) throw new Error(`login failed: ${res.status}`);
-    const { token } = await res.json();
-    return { tokens: { accessToken: token } };
-  },
-  async refresh() {
-    const res = await fetch(`${apiUrl}/token`, { method: 'POST', credentials: 'include' });
-    if (res.status === 401) return null; // 세션 없음
-    if (!res.ok) throw new Error(`refresh failed: ${res.status}`);
-    return { accessToken: (await res.json()).token };
-  },
-  async end() {
-    await fetch(`${apiUrl}/signout`, { method: 'POST', credentials: 'include' });
-  },
-};
-
-const account = createAccountClient({ issuer: 'production', clientId, session });
-```
-
-- `start`는 callback으로 받은 code, PKCE verifier, `redirectUri`, `nonce`를 받는다. 백엔드는 code를 교환할 때 이 `redirectUri`를 그대로 쓰고, id_token의 `nonce`를 확인해야 한다.
-- 로그인 전에 추가 입력을 받으려면 `start`가 `{ rejected: { error, ticket } }`를 돌려준다. 그러면 `retryLogin(body)`가 `start({ ticket }, body)`로 다시 부른다.
-- `refresh`는 세션이 없으면 `null`을 돌려준다. 다른 실패는 throw 한다.
+# @infoteam/account-web
+
+인포팀 계정(IdP) 로그인을 웹 앱에 붙인다. 특정 프레임워크에 의존하지 않는다. React 앱이라면 [`@infoteam/account-react`](../react)를 쓴다.
+
+## 설치
+
+```bash
+pnpm add @infoteam/account-web zod
+```
+
+## 사용
+
+```ts
+import { createAccountClient } from '@infoteam/account-web';
+
+// 라우터보다 먼저 만든다. callback 으로 열린 페이지면 여기서 주소를 로그인 전 위치로 바꾼다
+const account = createAccountClient({ issuer: 'production', clientId, api: apiUrl });
+
+await account.ready(); // callback 이면 백엔드 로그인을 마치고, 아니면 세션을 복구한다
+account.store.subscribe((state) => render(state));
+
+// 로그인 버튼
+await account.login({ returnTo: location.pathname });
+
+// 라우터 guard
+await account.requireAuth({ returnTo: nextUrl });
+
+// API 요청. 401 이면 토큰을 갱신한 뒤 다시 보낸다
+await account.fetch(`${apiUrl}/me`);
+```
+
+- 상태는 zustand의 vanilla store(`account.store`)에 있으므로, 어느 프레임워크에서든 구독할 수 있다.
+- API 요청에는 `account.fetch`, `@infoteam/account-web/openapi-fetch`, `@infoteam/account-web/axios` 중 하나를 쓴다.
+- 옵션, guard, 에러 코드, 로그아웃은 React와 같다. [`account-react` README](../react/README.md#사용)를 참고한다.
+
+## 백엔드 형식이 다를 때
+
+`api`는 백엔드가 [세션 프로토콜](../../README.md#세션-프로토콜)을 구현했다고 가정한다. 형식이 다르면 `api` 대신 `session`에 백엔드 호출을 직접
+구현해서 넘긴다. 둘 중 하나만 줄 수 있다.
+
+```ts
+import { createAccountClient, type Session } from '@infoteam/account-web';
+
+const session: Session = {
+  async start(credential) {
+    if ('ticket' in credential) throw new Error('this backend does not reject logins');
+    const res = await fetch(`${apiUrl}/oauth/callback`, {
+      method: 'POST',
+      credentials: 'include',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({
+        code: credential.code,
+        verifier: credential.codeVerifier,
+        redirectUri: credential.redirectUri,
+        nonce: credential.nonce,
+      }),
+    });
+    if (!res.ok) throw new Error(`login failed: ${res.status}`);
+    const { token } = await res.json();
+    return { tokens: { accessToken: token } };
+  },
+  async refresh() {
+    const res = await fetch(`${apiUrl}/token`, { method: 'POST', credentials: 'include' });
+    if (res.status === 401) return null; // 세션 없음
+    if (!res.ok) throw new Error(`refresh failed: ${res.status}`);
+    return { accessToken: (await res.json()).token };
+  },
+  async end() {
+    await fetch(`${apiUrl}/signout`, { method: 'POST', credentials: 'include' });
+  },
+};
+
+const account = createAccountClient({ issuer: 'production', clientId, session });
+```
+
+- `start`는 callback으로 받은 code, PKCE verifier, `redirectUri`, `nonce`를 받는다. 백엔드는 code를 교환할 때 이 `redirectUri`를 그대로 쓰고, id_token의 `nonce`를 확인해야 한다.
+- 로그인 전에 추가 입력을 받으려면 `start`가 `{ rejected: { error, ticket } }`를 돌려준다. 그러면 `retryLogin(body)`가 `start({ ticket }, body)`로 다시 부른다.
+- `refresh`는 세션이 없으면 `null`을 돌려준다. 다른 실패는 throw 한다.

package/dist/axios.d.ts

@@ -1,4 +1,4 @@
-import { t as AccountClient } from "./create-account-client-MB6AawN9.js";
+import { t as AccountClient } from "./create-account-client-B8wwVkQt.js";
 import { AxiosInstance } from "axios";
 //#region src/adapters/axios.d.ts
 /** 401이면 refresh 한 뒤 한 번 다시 시도한다. 돌려주는 함수를 부르면 interceptor를 제거한다. */

package/dist/{create-account-client-MB6AawN9.d.ts → create-account-client-B8wwVkQt.d.ts}

@@ -62,11 +62,11 @@ declare const AccountClientOptionsSchema: z.ZodMiniObject<{
   redirectUri: z.ZodMiniOptional<z.ZodMiniString<string>>;
   scopes: z.ZodMiniOptional<z.ZodMiniArray<z.ZodMiniEnum<{
     email: "email";
-    profile: "profile";
     name: "name";
+    profile: "profile";
     picture: "picture";
-    phone_number: "phone_number";
     student_id: "student_id";
+    phone_number: "phone_number";
   }>>>;
   silentLogin: z.ZodMiniOptional<z.ZodMiniBoolean<boolean>>;
   fetch: z.ZodMiniOptional<z.ZodMiniCustom<typeof fetch, typeof fetch>>;

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { a as createAccountClient, c as LoginCredential, d as SessionRejection, f as SessionTokens, i as RequireAuthOptions, l as Session, m as AccountStatus, n as LoginOptions, o as AccountClientOptions, p as AccountState, r as LogoutOptions, s as AccountClientOptionsSchema, t as AccountClient, u as SessionPaths } from "./create-account-client-MB6AawN9.js";
+import { a as createAccountClient, c as LoginCredential, d as SessionRejection, f as SessionTokens, i as RequireAuthOptions, l as Session, m as AccountStatus, n as LoginOptions, o as AccountClientOptions, p as AccountState, r as LogoutOptions, s as AccountClientOptionsSchema, t as AccountClient, u as SessionPaths } from "./create-account-client-B8wwVkQt.js";
 import { AccountError, AccountErrorCode, ClientScope, Environment, IssuerInput, Prompt } from "@infoteam/account-core";
 export { type AccountClient, type AccountClientOptions, AccountClientOptionsSchema, AccountError, type AccountErrorCode, type AccountState, type AccountStatus, type ClientScope, type Environment, type IssuerInput, type LoginCredential, type LoginOptions, type LogoutOptions, type Prompt, type RequireAuthOptions, type Session, type SessionPaths, type SessionRejection, type SessionTokens, createAccountClient };

package/dist/openapi-fetch.d.ts

@@ -1,4 +1,4 @@
-import { t as AccountClient } from "./create-account-client-MB6AawN9.js";
+import { t as AccountClient } from "./create-account-client-B8wwVkQt.js";
 import { Middleware } from "openapi-fetch";
 //#region src/adapters/openapi-fetch.d.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@infoteam/account-web",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Browser client for the Infoteam account IdP: sign-in redirect, callback handling and service sessions",
   "license": "MIT",
   "type": "module",
@@ -23,7 +23,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@infoteam/account-core": "^0.6.0",
+    "@infoteam/account-core": "^0.7.0",
     "es-toolkit": "^1.52.0",
     "zustand": "^5.0.15"
   },