@keycloakify/angular 0.0.1-rc.0

package/src/login/pages/login-page-expired/login-page-expired.component.ts

@@ -0,0 +1,42 @@
+import {
+    ChangeDetectionStrategy,
+    Component,
+    forwardRef,
+    inject,
+    input
+} from "@angular/core";
+import {
+    CLASSES,
+    KC_CONTEXT,
+    USE_DEFAULT_CSS
+} from "@keycloakify/angular/lib/public-api";
+import { ClassKey } from "keycloakify/login/lib/kcClsx";
+import { KcContext } from "keycloakify/login/KcContext";
+import { ComponentReference } from "@keycloakify/angular/login/classes/component-reference.class";
+import { TemplateComponent } from "@keycloakify/angular/login/containers/template.component";
+import { MsgStrPipe } from "@keycloakify/angular/login/pipes/msg-str.pipe";
+
+@Component({
+    standalone: true,
+    imports: [TemplateComponent, MsgStrPipe],
+    selector: "kc-root",
+    templateUrl: "login-page-expired.component.html",
+    changeDetection: ChangeDetectionStrategy.OnPush,
+    providers: [
+        {
+            provide: ComponentReference,
+            useExisting: forwardRef(() => LoginPageExpiredComponent)
+        }
+    ]
+})
+export class LoginPageExpiredComponent extends ComponentReference {
+    kcContext =
+        inject<Extract<KcContext, { pageId: "login-page-expired.ftl" }>>(KC_CONTEXT);
+    override doUseDefaultCss = inject<boolean>(USE_DEFAULT_CSS);
+    override classes = inject<Partial<Record<ClassKey, string>>>(CLASSES);
+    displayRequiredFields = input(false);
+    documentTitle = input<string>();
+    bodyClassName = input<string>();
+    displayInfo: boolean = false;
+    displayMessage: boolean = false;
+}

package/src/login/pages/login-passkeys-conditional-authenticate/login-passkeys-conditional-authenticate.component.html

@@ -0,0 +1,203 @@
+@let authenticators = kcContext.authenticators;
+@let realm = kcContext.realm;
+@let url = kcContext.url;
+@let shouldDisplayAuthenticators = kcContext.shouldDisplayAuthenticators;
+@let login = kcContext.login;
+@let messagesPerField = kcContext.messagesPerField;
+@let usernameHidden = kcContext.usernameHidden;
+@let registrationDisabled = kcContext.registrationDisabled;
+<kc-login-template [displayInfo]="displayInfo">
+  <ng-container headerNode>
+    {{ 'passkey-login-title' | msgStr }}
+  </ng-container>
+  <ng-container infoNode>
+    @if (realm.registrationAllowed && !registrationDisabled) {
+      <div id="kc-registration">
+        <span>
+          {{ 'noAccount' | msgStr }}
+          <a
+            tabIndex="6"
+            [href]="url.registrationUrl"
+          >
+            {{ 'doRegister' | msgStr }}
+          </a>
+        </span>
+      </div>
+    }
+  </ng-container>
+
+  <ng-container content>
+    <form
+      id="webauth"
+      [action]="url.loginAction"
+      method="post"
+    >
+      <input
+        type="hidden"
+        id="clientDataJSON"
+        name="clientDataJSON"
+      />
+      <input
+        type="hidden"
+        id="authenticatorData"
+        name="authenticatorData"
+      />
+      <input
+        type="hidden"
+        id="signature"
+        name="signature"
+      />
+      <input
+        type="hidden"
+        id="credentialId"
+        name="credentialId"
+      />
+      <input
+        type="hidden"
+        id="userHandle"
+        name="userHandle"
+      />
+      <input
+        type="hidden"
+        id="error"
+        name="error"
+      />
+    </form>
+    <div
+      [kcClass]="'kcFormGroupClass'"
+      no-bottom-margin="true"
+      style="margin-bottom: 0"
+    >
+      @if (authenticators !== undefined && authenticators.authenticators.length !== 0) {
+        <form
+          id="authn_select"
+          [kcClass]="'kcFormClass'"
+        >
+          @for (authenticator of authenticators.authenticators; track authenticator; let i = $index) {
+            <input
+              type="hidden"
+              name="authn_use_chk"
+              readOnly
+              [value]="authenticator.credentialId"
+            />
+          }
+        </form>
+
+        @if (shouldDisplayAuthenticators) {
+          @if (authenticators.authenticators.length > 1) {
+            <p [kcClass]="'kcSelectAuthListItemTitle'">
+              {{ 'passkey-available-authenticators' | msgStr }}
+            </p>
+          }
+
+          <div [kcClass]="'kcFormClass'">
+            @for (authenticator of authenticators.authenticators; track authenticator; let i = $index) {
+              <div
+                id="'kc-webauthn-authenticator-item-' + i"
+                [kcClass]="'kcSelectAuthListItemClass'"
+              >
+                <i
+                  [ngClass]="selectAuthListItemIconClass(authenticator.transports.iconClass)"
+                  [kcClass]="'kcCommonLogoIdP'"
+                  aria-hidden="true"
+                ></i>
+                <div [kcClass]="'kcSelectAuthListItemBodyClass'">
+                  <div
+                    [id]="'kc-webauthn-authenticator-label-' + i"
+                    [kcClass]="'kcSelectAuthListItemHeadingClass'"
+                  >
+                    {{ authenticator.label | advancedMsgStr }}
+                  </div>
+                  @if (
+                    authenticator.transports !== undefined &&
+                    authenticator.transports.displayNameProperties !== undefined &&
+                    authenticator.transports.displayNameProperties.length !== 0
+                  ) {
+                    <div
+                      [id]="'kc-webauthn-authenticator-transport-' + i"
+                      [kcClass]="'kcSelectAuthListItemDescriptionClass'"
+                    >
+                      @for (
+                        nameProperty of authenticator.transports.displayNameProperties;
+                        track nameProperty;
+                        let i = $index
+                      ) {
+                        <span> {{ nameProperty | advancedMsgStr }} </span>
+                        @if (i !== authenticator.transports.displayNameProperties.length - 1) {
+                          <span>, </span>
+                        }
+                      }
+                    </div>
+                    <div [kcClass]="'kcSelectAuthListItemDescriptionClass'">
+                      <span [id]="'kc-webauthn-authenticator-createdlabel-' + i">
+                        {{ 'passkey-createdAt-label' | msgStr }}
+                      </span>
+                      <span [id]="'kc-webauthn-authenticator-created-' + i">
+                        {{ authenticator.createdAt }}
+                      </span>
+                    </div>
+                    <div [kcClass]="'kcSelectAuthListItemFillClass'"></div>
+                  }
+                </div>
+              </div>
+            }
+          </div>
+        }
+      }
+      <div id="kc-form-wrapper">
+        @if (realm.password) {
+          <form
+            id="kc-form-passkey"
+            [action]="url.loginAction"
+            method="post"
+            style="display: none"
+          >
+            @if (!usernameHidden) {
+              <div [kcClass]="'kcFormGroupClass'">
+                <label
+                  for="username"
+                  [kcClass]="'kcLabelClass'"
+                >
+                  {{ 'passkey-autofill-select' | msgStr }}
+                </label>
+                <input
+                  tabIndex="1"
+                  id="username"
+                  [attr.aria-invalid]="messagesPerField.existsError('username')"
+                  [kcClass]="'kcInputClass'"
+                  name="username"
+                  [value]="login.username ?? ''"
+                  type="text"
+                  autoFocus
+                  autoComplete="off"
+                />
+                @if (messagesPerField.existsError('username')) {
+                  <span
+                    id="input-error-username"
+                    [kcClass]="'kcInputErrorMessageClass'"
+                    aria-live="polite"
+                  >
+                    {{ messagesPerField.get('username') }}
+                  </span>
+                }
+              </div>
+            }
+          </form>
+          <div
+            id="kc-form-passkey-button"
+            [kcClass]="'kcFormButtonsClass'"
+            style="display: none"
+          >
+            <input
+              id="authButtonId"
+              type="button"
+              autoFocus
+              value="{{ 'passkey-doAuthenticate' | msgStr }}"
+              [kcClass]="['kcButtonClass', 'kcButtonPrimaryClass', 'kcButtonBlockClass', 'kcButtonLargeClass']"
+            />
+          </div>
+        }
+      </div>
+    </div>
+  </ng-container>
+</kc-login-template>

package/src/login/pages/login-passkeys-conditional-authenticate/login-passkeys-conditional-authenticate.component.ts

@@ -0,0 +1,101 @@
+import { ChangeDetectionStrategy, Component, forwardRef, inject } from "@angular/core";
+import {
+    CLASSES,
+    KC_CONTEXT,
+    USE_DEFAULT_CSS
+} from "@keycloakify/angular/lib/public-api";
+import { Script } from "@keycloakify/angular/lib/models";
+import { ClassKey } from "keycloakify/login/lib/kcClsx";
+import { KcContext } from "keycloakify/login/KcContext";
+import { getKcClsx } from "keycloakify/login/lib/kcClsx";
+import { ComponentReference } from "@keycloakify/angular/login/classes/component-reference.class";
+import { TemplateComponent } from "@keycloakify/angular/login/containers/template.component";
+import { KcClassDirective } from "@keycloakify/angular/login/directives/kc-class.directive";
+import { AdvancedMsgStrPipe } from "@keycloakify/angular/login/pipes/advanced-msg-str.pipe";
+import { MsgStrPipe } from "@keycloakify/angular/login/pipes/msg-str.pipe";
+import { LoginResourceInjectorService } from "@keycloakify/angular/login/services";
+
+@Component({
+    standalone: true,
+    imports: [TemplateComponent, MsgStrPipe, KcClassDirective, AdvancedMsgStrPipe],
+    selector: "kc-root",
+    templateUrl: "login-passkeys-conditional-authenticate.component.html",
+    changeDetection: ChangeDetectionStrategy.OnPush,
+    providers: [
+        MsgStrPipe,
+        {
+            provide: ComponentReference,
+            useExisting: forwardRef(() => LoginPasskeysConditionalAuthenticateComponent)
+        }
+    ]
+})
+export class LoginPasskeysConditionalAuthenticateComponent extends ComponentReference {
+    kcContext =
+        inject<
+            Extract<KcContext, { pageId: "login-passkeys-conditional-authenticate.ftl" }>
+        >(KC_CONTEXT);
+    loginResourceInjectorService = inject(LoginResourceInjectorService);
+    msgStr = inject(MsgStrPipe);
+    override doUseDefaultCss = inject<boolean>(USE_DEFAULT_CSS);
+    override classes = inject<Partial<Record<ClassKey, string>>>(CLASSES);
+    displayInfo: boolean = true;
+
+    authButtonId = "authenticateWebAuthnButton";
+
+    constructor() {
+        super();
+        const {
+            url,
+            challenge,
+            rpId,
+            userVerification,
+            isUserIdentified,
+
+            createTimeout
+        } = this.kcContext;
+        const scripts: Script[] = [
+            {
+                type: "module",
+                id: "LoginRecoveryAuthnCodeConfig",
+                textContent: `
+                    import { authenticateByWebAuthn } from "${url.resourcesPath}/js/webauthnAuthenticate.js";
+                    import { initAuthenticate } from "${url.resourcesPath}/js/passkeysConditionalAuth.js";
+
+                    const authButton = document.getElementById("${this.authButtonId}");
+                    const input = {
+                        isUserIdentified : ${isUserIdentified},
+                        challenge : ${JSON.stringify(challenge)},
+                        userVerification : ${JSON.stringify(userVerification)},
+                        rpId : ${JSON.stringify(rpId)},
+                        createTimeout : ${createTimeout}
+                    };
+                    authButton.addEventListener("click", () => {
+                        authenticateByWebAuthn({
+                            ...input,
+                            errmsg : ${JSON.stringify(this.msgStr.transform("webauthn-unsupported-browser-text"))}
+                        });
+                    });
+
+                    initAuthenticate({
+                        ...input,
+                        errmsg : ${JSON.stringify(this.msgStr.transform("passkey-unsupported-browser-text"))}
+                    });
+          `
+            }
+        ];
+        this.loginResourceInjectorService.insertAdditionalScripts(scripts);
+    }
+
+    selectAuthListItemIconClass(iconClass: string) {
+        const kcClsx = getKcClsx({
+            doUseDefaultCss: this.doUseDefaultCss ?? true,
+            classes: this.classes
+        }).kcClsx;
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const className = kcClsx(iconClass as any);
+        if (className === iconClass) {
+            return kcClsx("kcWebAuthnDefaultIcon");
+        }
+        return className;
+    }
+}

package/src/login/pages/login-password/login-password.component.html

@@ -0,0 +1,90 @@
+@let url = kcContext.url;
+@let messagesPerField = kcContext.messagesPerField;
+@let realm = kcContext.realm;
+<kc-login-template
+  [displayInfo]="displayInfo"
+  [bodyClassName]="bodyClassName()"
+  [displayMessage]="displayMessage"
+  [displayRequiredFields]="displayRequiredFields()"
+  [documentTitle]="documentTitle()"
+>
+  <ng-container headerNode>
+    {{ 'doLogIn' | msgStr }}
+  </ng-container>
+  <ng-container content>
+    <div id="kc-form">
+      <div id="kc-form-wrapper">
+        <form
+          id="kc-form-login"
+          (onSubmit)="isLoginButtonDisabled.set(true)"
+          [action]="url?.loginAction"
+          method="post"
+        >
+          <div
+            [kcClass]="'kcFormGroupClass'"
+            class="no-bottom-margin"
+          >
+            <hr />
+            <label
+              for="password"
+              [kcClass]="'kcLabelClass'"
+            >
+              {{ 'password' | msgStr }}
+            </label>
+            <kc-password-wrapper passwordInputId="password">
+              <input
+                type="password"
+                id="password"
+                name="password"
+                [kcClass]="'kcInputClass'"
+                [required]="true"
+                [autofocus]="true"
+                [tabindex]="1"
+                aria-describedby="input-error-password"
+              />
+            </kc-password-wrapper>
+
+            @if (messagesPerField.existsError('password')) {
+              <span
+                id="input-error-password"
+                [kcClass]="'kcInputErrorMessageClass'"
+                aria-live="polite"
+                [innerHTML]="messagesPerField.getFirstError('password') | kcSanitize: 'html'"
+              >
+              </span>
+            }
+          </div>
+          <div [kcClass]="['kcFormGroupClass', 'kcFormSettingClass']">
+            <div id="kc-form-options"></div>
+            <div [kcClass]="'kcFormOptionsWrapperClass'">
+              @if (realm.resetPasswordAllowed) {
+                <span>
+                  <a
+                    tabindex="5"
+                    href="{{ url.loginResetCredentialsUrl }}"
+                  >
+                    {{ 'doForgotPassword' | msgStr }}
+                  </a>
+                </span>
+              }
+            </div>
+          </div>
+          <div
+            id="kc-form-buttons"
+            [kcClass]="'kcFormGroupClass'"
+          >
+            <input
+              type="submit"
+              id="kc-login"
+              name="login"
+              [value]="'doLogIn' | msgStr"
+              [disabled]="isLoginButtonDisabled()"
+              [kcClass]="['kcButtonClass', 'kcButtonPrimaryClass', 'kcButtonBlockClass', 'kcButtonLargeClass']"
+              [tabindex]="4"
+            />
+          </div>
+        </form>
+      </div>
+    </div>
+  </ng-container>
+</kc-login-template>

package/src/login/pages/login-password/login-password.component.ts

@@ -0,0 +1,53 @@
+import {
+    ChangeDetectionStrategy,
+    Component,
+    forwardRef,
+    inject,
+    input,
+    signal
+} from "@angular/core";
+import {
+    CLASSES,
+    KC_CONTEXT,
+    USE_DEFAULT_CSS
+} from "@keycloakify/angular/lib/public-api";
+import { ClassKey } from "keycloakify/login/lib/kcClsx";
+import { KcContext } from "keycloakify/login/KcContext";
+import { ComponentReference } from "@keycloakify/angular/login/classes/component-reference.class";
+import { PasswordWrapperComponent } from "@keycloakify/angular/login/components/password-wrapper/password-wrapper.component";
+import { TemplateComponent } from "@keycloakify/angular/login/containers/template.component";
+import { KcClassDirective } from "@keycloakify/angular/login/directives/kc-class.directive";
+import { KcSanitizePipe } from "@keycloakify/angular/login/pipes/kc-sanitize.pipe";
+import { MsgStrPipe } from "@keycloakify/angular/login/pipes/msg-str.pipe";
+
+@Component({
+    standalone: true,
+    imports: [
+        TemplateComponent,
+        MsgStrPipe,
+        KcClassDirective,
+        PasswordWrapperComponent,
+        KcSanitizePipe
+    ],
+    selector: "kc-root",
+    templateUrl: "login-password.component.html",
+    changeDetection: ChangeDetectionStrategy.OnPush,
+    providers: [
+        {
+            provide: ComponentReference,
+            useExisting: forwardRef(() => LoginPasswordComponent)
+        }
+    ]
+})
+export class LoginPasswordComponent extends ComponentReference {
+    kcContext = inject<Extract<KcContext, { pageId: "login-password.ftl" }>>(KC_CONTEXT);
+    override doUseDefaultCss = inject<boolean>(USE_DEFAULT_CSS);
+    override classes = inject<Partial<Record<ClassKey, string>>>(CLASSES);
+    displayRequiredFields = input(false);
+    documentTitle = input<string>();
+    bodyClassName = input<string>();
+    displayInfo = false;
+    displayMessage = this.kcContext.messagesPerField.existsError("password");
+
+    isLoginButtonDisabled = signal(false);
+}

package/src/login/pages/login-recovery-authn-code-config/login-recovery-authn-code-config.component.html

@@ -0,0 +1,155 @@
+@let recoveryAuthnCodesConfigBean = kcContext.recoveryAuthnCodesConfigBean;
+@let isAppInitiatedAction = kcContext.isAppInitiatedAction;
+<kc-login-template
+  [displayInfo]="displayInfo"
+  [bodyClassName]="bodyClassName()"
+  [displayMessage]="displayMessage"
+  [displayRequiredFields]="displayRequiredFields()"
+  [documentTitle]="documentTitle()"
+>
+  <ng-container headerNode>
+    {{ 'recovery-code-config-header' | msgStr }}
+  </ng-container>
+
+  <ng-container content>
+    <div
+      [kcClass]="'kcRecoveryCodesWarning'"
+      class="pf-c-alert pf-m-warning pf-m-inline"
+      aria-label="Warning alert"
+    >
+      <div class="pf-c-alert__icon">
+        <i
+          class="pficon-warning-triangle-o"
+          aria-hidden="true"
+        ></i>
+      </div>
+      <h4 class="pf-c-alert__title">
+        <span class="pf-screen-reader">Warning alert:</span>
+        {{ 'recovery-code-config-warning-title' | msgStr }}
+      </h4>
+      <div class="pf-c-alert__description">
+        <p>{{ 'recovery-code-config-warning-message' | msgStr }}</p>
+      </div>
+    </div>
+
+    <ol
+      [id]="olRecoveryCodesListId"
+      [kcClass]="'kcRecoveryCodesList'"
+    >
+      @for (code of recoveryAuthnCodesConfigBean.generatedRecoveryAuthnCodesList; track code; let i = $index) {
+        <li>
+          <span>{{ i + 1 }}:</span> {{ code.slice(0, 4) }}-{{ code.slice(4, 8) }}-{{ code.slice(8) }}
+        </li>
+      }
+    </ol>
+
+    <!-- actions -->
+    <div [kcClass]="'kcRecoveryCodesActions'">
+      <button
+        id="printRecoveryCodes"
+        class="pf-c-button pf-m-link"
+        type="button"
+      >
+        <i
+          class="pficon-print"
+          aria-hidden="true"
+        ></i>
+        {{ 'recovery-codes-print' | msgStr }}
+      </button>
+      <button
+        id="downloadRecoveryCodes"
+        class="pf-c-button pf-m-link"
+        type="button"
+      >
+        <i
+          class="pficon-save"
+          aria-hidden="true"
+        ></i>
+        {{ 'recovery-codes-download' | msgStr }}
+      </button>
+      <button
+        id="copyRecoveryCodes"
+        class="pf-c-button pf-m-link"
+        type="button"
+      >
+        <i
+          class="pficon-blueprint"
+          aria-hidden="true"
+        ></i>
+        {{ 'recovery-codes-copy' | msgStr }}
+      </button>
+    </div>
+
+    <!-- confirmation checkbox -->
+
+    <div
+      [kcClass]="'kcFormOptionsClass'"
+      class="checkbox"
+    >
+      <label for="kcRecoveryCodesConfirmationCheck">
+        <input
+          [kcClass]="'kcCheckInputClass'"
+          type="checkbox"
+          id="kcRecoveryCodesConfirmationCheck"
+          name="kcRecoveryCodesConfirmationCheck"
+          [checked]="toggleRecoveryCodesConfirmation()"
+          (change)="toggleRecoveryCodesConfirmation.set($any($event.target).checked)"
+        />
+        {{ 'recovery-codes-confirmation-message' | msgStr }}
+      </label>
+    </div>
+
+    <form
+      [action]="kcContext.url.loginAction"
+      [kcClass]="'kcFormGroupClass'"
+      id="kc-recovery-codes-settings-form"
+      method="post"
+    >
+      <input
+        type="hidden"
+        name="generatedRecoveryAuthnCodes"
+        [value]="recoveryAuthnCodesConfigBean.generatedRecoveryAuthnCodesAsString"
+      />
+      <input
+        type="hidden"
+        name="generatedAt"
+        [value]="recoveryAuthnCodesConfigBean.generatedAt"
+      />
+      <input
+        type="hidden"
+        id="userLabel"
+        name="userLabel"
+        [value]="'recovery-codes-label-default' | msgStr"
+      />
+
+      <kc-logout-other-sessions></kc-logout-other-sessions>
+
+      @if (isAppInitiatedAction) {
+        <input
+          type="submit"
+          [kcClass]="['kcButtonClass', 'kcButtonPrimaryClass', 'kcButtonLargeClass']"
+          id="saveRecoveryAuthnCodesBtn"
+          [value]="'recovery-codes-action-complete' | msgStr"
+          [disabled]="!toggleRecoveryCodesConfirmation()"
+        />
+        <button
+          type="submit"
+          [kcClass]="['kcButtonClass', 'kcButtonDefaultClass', 'kcButtonLargeClass']"
+          id="cancelRecoveryAuthnCodesBtn"
+          name="cancel-aia"
+          value="true"
+        >
+          {{ 'recovery-codes-action-cancel' | msgStr }}
+        </button>
+      } @else {
+        <input
+          type="submit"
+          [kcClass]="['kcButtonClass', 'kcButtonPrimaryClass', 'kcButtonBlockClass', 'kcButtonLargeClass']"
+          id="saveRecoveryAuthnCodesBtn"
+          [value]="'recovery-codes-action-complete' | msgStr"
+          [disabled]="!toggleRecoveryCodesConfirmation()"
+        />
+      }
+    </form>
+  </ng-container>
+</kc-login-template>