@jskit-ai/auth-web 0.1.105 → 0.1.107

package/package.descriptor.mjs

@@ -1,7 +1,7 @@
 export default Object.freeze({
   "packageVersion": 1,
   "packageId": "@jskit-ai/auth-web",
-  "version": "0.1.105",
+  "version": "0.1.107",
   "kind": "runtime",
   "description": "Auth web module: Fastify auth routes plus web login/sign-out scaffolds.",
   "dependsOn": [
@@ -260,10 +260,10 @@ export default Object.freeze({
     "dependencies": {
       "runtime": {
         "@mdi/js": "^7.4.47",
-        "@jskit-ai/auth-core": "0.1.103",
-        "@jskit-ai/http-runtime": "0.1.103",
-        "@jskit-ai/kernel": "0.1.105",
-        "@jskit-ai/shell-web": "0.1.104"
+        "@jskit-ai/auth-core": "0.1.105",
+        "@jskit-ai/http-runtime": "0.1.105",
+        "@jskit-ai/kernel": "0.1.107",
+        "@jskit-ai/shell-web": "0.1.106"
       },
       "dev": {}
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/auth-web",
-  "version": "0.1.105",
+  "version": "0.1.107",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -19,11 +19,11 @@
     "./client/runtime/useSignOut": "./src/client/runtime/useSignOut.js"
   },
   "dependencies": {
-    "@jskit-ai/auth-core": "0.1.103",
+    "@jskit-ai/auth-core": "0.1.105",
     "@mdi/js": "^7.4.47",
-    "@jskit-ai/kernel": "0.1.105",
-    "@jskit-ai/shell-web": "0.1.104",
-    "@jskit-ai/http-runtime": "0.1.103"
+    "@jskit-ai/kernel": "0.1.107",
+    "@jskit-ai/shell-web": "0.1.106",
+    "@jskit-ai/http-runtime": "0.1.105"
   },
   "peerDependencies": {
     "@tanstack/vue-query": "^5.90.5",

package/src/client/composables/loginView/useLoginViewActions.js

@@ -160,6 +160,13 @@ export function useLoginViewActions({
       email: normalizedEmail,
       password: String(state.password.value || "")
     };
+    const invitationToken = String(state.invitationToken?.value || "").trim();
+    if (invitationToken) {
+      registerPayload.invitation = {
+        token: invitationToken,
+        source: "workspace-invite"
+      };
+    }
     ensureCommandSectionValid(authRegisterCommand, "body", registerPayload, "Unable to register.");
 
     const registerResult = await request(AUTH_PATHS.REGISTER, {

package/src/client/composables/loginView/useLoginViewState.js

@@ -25,9 +25,24 @@ import {
   clearRememberedAccountHint
 } from "./rememberedAccountStorage.js";
 
+function readWindowSearchParam(name = "") {
+  if (typeof window !== "object" || !window.location) {
+    return "";
+  }
+  return String(new URLSearchParams(window.location.search || "").get(name) || "").trim();
+}
+
+function resolveInitialMode() {
+  const mode = readWindowSearchParam("mode").toLowerCase();
+  if ([LOGIN_MODE, REGISTER_MODE, FORGOT_MODE, OTP_MODE].includes(mode)) {
+    return mode;
+  }
+  return LOGIN_MODE;
+}
+
 export function useLoginViewState({ placementContext } = {}) {
-  const mode = ref(LOGIN_MODE);
-  const email = ref("");
+  const mode = ref(resolveInitialMode());
+  const email = ref(normalizeEmailAddress(readWindowSearchParam("email")));
   const password = ref("");
   const confirmPassword = ref("");
   const otpCode = ref("");
@@ -51,6 +66,7 @@ export function useLoginViewState({ placementContext } = {}) {
   const infoMessage = ref("");
   const pendingEmailConfirmationMessage = ref("");
   const pendingEmailConfirmationAddress = ref("");
+  const invitationToken = ref(readWindowSearchParam("invitationToken") || readWindowSearchParam("inviteToken"));
 
   const isLogin = computed(() => mode.value === LOGIN_MODE);
   const isRegister = computed(() => mode.value === REGISTER_MODE);
@@ -273,6 +289,7 @@ export function useLoginViewState({ placementContext } = {}) {
     infoMessage,
     pendingEmailConfirmationMessage,
     pendingEmailConfirmationAddress,
+    invitationToken,
     isLogin,
     isRegister,
     isForgot,

package/test/loginViewActions.test.js

@@ -36,6 +36,7 @@ function createMinimalLoginViewState(requestedReturnTo = "/") {
     otpRequestPending: { value: false },
     registerConfirmationResendPending: { value: false },
     pendingEmailConfirmationAddress: { value: "" },
+    invitationToken: { value: "" },
     rememberAccountOnDevice: { value: true },
     oauthProviders: { value: [] },
     oauthDefaultProvider: { value: "google" },
@@ -178,3 +179,67 @@ test("useLoginViewActions keeps retry message for generic post-login unauthentic
 
   assert.equal(state.errorMessage.value, "Login succeeded but the session is not active yet. Please retry.");
 });
+
+test("useLoginViewActions includes invitation context when registering from an invite link", async () => {
+  clearAuthCsrfTokenCache();
+  const state = createMinimalLoginViewState("/invite/invite-token");
+  state.isRegister.value = true;
+  state.invitationToken.value = "invite-token";
+  const originalFetch = globalThis.fetch;
+  const registerBodies = [];
+  let sessionReads = 0;
+
+  globalThis.fetch = async (url, options = {}) => {
+    const normalizedUrl = String(url || "");
+    const method = String(options.method || "GET").toUpperCase();
+
+    if (normalizedUrl === "/api/session" && method === "GET") {
+      sessionReads += 1;
+      return createJsonResponse(
+        sessionReads === 1
+          ? { authenticated: false, csrfToken: "csrf-a" }
+          : { authenticated: true, csrfToken: "csrf-b" }
+      );
+    }
+
+    if (normalizedUrl === "/api/register" && method === "POST") {
+      registerBodies.push(JSON.parse(String(options.body || "{}")));
+      return createJsonResponse({ ok: true, username: "Ada", requiresEmailConfirmation: false });
+    }
+
+    throw new Error(`Unexpected fetch call: ${method} ${normalizedUrl}`);
+  };
+
+  try {
+    const actions = useLoginViewActions({
+      state,
+      validation: {
+        canSubmit: { value: true }
+      },
+      queryClient: {
+        async fetchQuery({ queryFn }) {
+          return queryFn();
+        }
+      },
+      errorRuntime: {
+        report() {}
+      }
+    });
+
+    await actions.submitAuth();
+  } finally {
+    globalThis.fetch = originalFetch;
+    clearAuthCsrfTokenCache();
+  }
+
+  assert.deepEqual(registerBodies, [
+    {
+      email: "ada@example.com",
+      password: "password-123",
+      invitation: {
+        token: "invite-token",
+        source: "workspace-invite"
+      }
+    }
+  ]);
+});