@leancodepl/kratos 7.7.0 → 7.8.1

package/index.cjs.js

@@ -829,7 +829,10 @@ var defaultComponents = {
     WebAuthnSettingsSectionWrapper: "div",
     LookupSecretSettingsSectionWrapper: "div",
     OidcSettingsSectionWrapper: "div",
-    TotpSettingsSectionWrapper: "div"
+    TotpSettingsSectionWrapper: "div",
+    IdentifierFirstLoginSectionWrapper: "div",
+    ProfileLoginSectionWrapper: "div",
+    ProfileRegistrationSectionWrapper: "div"
 };
 
 function _define_property$d(obj, key, value) {
@@ -2523,17 +2526,17 @@ function getNodeInputType(attr) {
         if (!groups && !attributes && !excludeAttributes) return true;
         var g = search(groups);
         if (!withoutDefaultGroup) {
-            g.push("default");
+            g.push(client.UiNodeGroupEnum.Default);
         }
         // filter the attributes
         var a = search(attributes);
         if (!withoutDefaultAttributes) {
             // always add hidden fields e.g. csrf
-            if (group.includes("default")) {
+            if (group.includes(client.UiNodeGroupEnum.Default)) {
                 a.push("hidden");
             }
             // automatically add the necessary fields for webauthn and totp
-            if (group.includes("webauthn") || group.includes("totp")) {
+            if (group.includes(client.UiNodeGroupEnum.Webauthn) || group.includes(client.UiNodeGroupEnum.Totp)) {
                 a.push("input", "script");
             }
         }
@@ -2626,7 +2629,7 @@ function Node(param) {
             case "submit":
                 {
                     var _node_meta_label;
-                    var isSocial = (attrs.name === "provider" || attrs.name === "link") && node.group === "oidc";
+                    var isSocial = (attrs.name === "provider" || attrs.name === "link") && node.group === client.UiNodeGroupEnum.Oidc;
                     var submit = {
                         type: attrs.type,
                         name: attrs.name
@@ -2840,7 +2843,7 @@ function useScriptNodes(param) {
         }
         var scriptNodes = filterNodesByGroups({
             nodes: nodes,
-            groups: "webauthn",
+            groups: client.UiNodeGroupEnum.Webauthn,
             attributes: "text/javascript",
             withoutDefaultGroup: true,
             withoutDefaultAttributes: true
@@ -3000,7 +3003,7 @@ function _object_without_properties_loose(source, excluded) {
                 includeCSRF: true,
                 filter: formFilterOverride !== null && formFilterOverride !== void 0 ? formFilterOverride : {
                     nodes: flow.ui.nodes,
-                    groups: "default",
+                    groups: client.UiNodeGroupEnum.Default,
                     attributes: "hidden"
                 }
             }),
@@ -3012,37 +3015,55 @@ function _object_without_properties_loose(source, excluded) {
 function hasOidc(nodes) {
     return nodes.some(function(param) {
         var group = param.group;
-        return group === "oidc";
+        return group === client.UiNodeGroupEnum.Oidc;
     });
 }
 function hasPassword(nodes) {
     return nodes.some(function(param) {
         var group = param.group;
-        return group === "password";
+        return group === client.UiNodeGroupEnum.Password;
     });
 }
-function hasWebauthn(nodes) {
+function hasDefault(nodes) {
     return nodes.some(function(param) {
         var group = param.group;
-        return group === "webauthn";
+        return group === client.UiNodeGroupEnum.Default;
+    });
+}
+function hasProfile(nodes) {
+    return nodes.some(function(param) {
+        var group = param.group;
+        return group === client.UiNodeGroupEnum.Profile;
+    });
+}
+function hasPasskey(nodes) {
+    return nodes.some(function(param) {
+        var group = param.group;
+        return group === client.UiNodeGroupEnum.Passkey;
+    });
+}
+function hasIdentifierFirst(nodes) {
+    return nodes.some(function(param) {
+        var group = param.group;
+        return group === client.UiNodeGroupEnum.IdentifierFirst;
     });
 }
 function hasLookupSecret(nodes) {
     return nodes.some(function(param) {
         var group = param.group;
-        return group === "lookup_secret";
+        return group === client.UiNodeGroupEnum.LookupSecret;
     });
 }
 function hasTotp(nodes) {
     return nodes.some(function(param) {
         var group = param.group;
-        return group === "totp";
+        return group === client.UiNodeGroupEnum.Totp;
     });
 }
 function hasCode(nodes) {
     return nodes.some(function(param) {
         var group = param.group;
-        return group === "code";
+        return group === client.UiNodeGroupEnum.Code;
     });
 }
 
@@ -3059,9 +3080,7 @@ function hasCode(nodes) {
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: {
                     nodes: nodes,
-                    groups: [
-                        "code"
-                    ],
+                    groups: client.UiNodeGroupEnum.Code,
                     // we don't want to map the default group twice
                     // the form already maps hidden fields under the default group
                     // we are only interested in hidden fields that are under the code group
@@ -3075,7 +3094,7 @@ function hasCode(nodes) {
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: {
                     nodes: nodes,
-                    groups: "code",
+                    groups: client.UiNodeGroupEnum.Code,
                     withoutDefaultAttributes: true,
                     excludeAttributes: [
                         "hidden",
@@ -3087,7 +3106,7 @@ function hasCode(nodes) {
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: {
                     nodes: nodes,
-                    groups: "code",
+                    groups: client.UiNodeGroupEnum.Code,
                     withoutDefaultAttributes: true,
                     attributes: [
                         "button",
@@ -3099,6 +3118,34 @@ function hasCode(nodes) {
     });
 }
 
+function IdentifierFirstLoginSection(param) {
+    var nodes = param.nodes, IdentifierFirstLoginSectionWrapper = param.IdentifierFirstLoginSectionWrapper;
+    return /*#__PURE__*/ jsxRuntime.jsxs(IdentifierFirstLoginSectionWrapper, {
+        children: [
+            /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
+                filter: {
+                    nodes: nodes,
+                    groups: [
+                        client.UiNodeGroupEnum.Default,
+                        client.UiNodeGroupEnum.IdentifierFirst
+                    ],
+                    excludeAttributes: [
+                        "submit",
+                        "hidden"
+                    ]
+                }
+            }),
+            /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
+                filter: {
+                    nodes: nodes,
+                    groups: client.UiNodeGroupEnum.IdentifierFirst,
+                    attributes: "submit"
+                }
+            })
+        ]
+    });
+}
+
 /**
  * LinkSection renders the fields for recovery and verification
  * Please see the Ory docs for more information:
@@ -3112,8 +3159,8 @@ function hasCode(nodes) {
                 filter: {
                     nodes: nodes,
                     groups: [
-                        "link",
-                        "code"
+                        client.UiNodeGroupEnum.Link,
+                        client.UiNodeGroupEnum.Code
                     ],
                     excludeAttributes: "submit"
                 }
@@ -3122,8 +3169,8 @@ function hasCode(nodes) {
                 filter: {
                     nodes: nodes,
                     groups: [
-                        "link",
-                        "code"
+                        client.UiNodeGroupEnum.Link,
+                        client.UiNodeGroupEnum.Code
                     ],
                     attributes: "submit"
                 }
@@ -3141,8 +3188,8 @@ function LoginSection(param) {
                 filter: {
                     nodes: nodes,
                     groups: [
-                        "default",
-                        "password"
+                        client.UiNodeGroupEnum.Default,
+                        client.UiNodeGroupEnum.Password
                     ],
                     excludeAttributes: [
                         "submit",
@@ -3153,9 +3200,7 @@ function LoginSection(param) {
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: {
                     nodes: nodes,
-                    groups: [
-                        "password"
-                    ],
+                    groups: client.UiNodeGroupEnum.Password,
                     attributes: "submit"
                 }
             })
@@ -3168,7 +3213,7 @@ function OidcSection(param) {
     if (!hasOidc(flow.ui.nodes)) return null;
     var hasOidcTraits = filterNodesByGroups({
         nodes: flow.ui.nodes,
-        groups: "oidc",
+        groups: client.UiNodeGroupEnum.Oidc,
         withoutDefaultGroup: true,
         excludeAttributes: "submit"
     }).length > 0;
@@ -3177,7 +3222,7 @@ function OidcSection(param) {
             hasOidcTraits && /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: {
                     nodes: flow.ui.nodes,
-                    groups: "oidc",
+                    groups: client.UiNodeGroupEnum.Oidc,
                     withoutDefaultGroup: true,
                     excludeAttributes: "submit"
                 }
@@ -3185,7 +3230,7 @@ function OidcSection(param) {
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: {
                     nodes: flow.ui.nodes,
-                    groups: "oidc",
+                    groups: client.UiNodeGroupEnum.Oidc,
                     attributes: "submit"
                 }
             })
@@ -3247,19 +3292,27 @@ function _object_spread_props$6(target, source) {
 }
 function PasswordlessSection(param) {
     var flow = param.flow, PasswordlessSectionWrapper = param.PasswordlessSectionWrapper;
-    if (!hasWebauthn(flow.ui.nodes)) return null;
+    if (!hasPasskey(flow.ui.nodes)) return null;
     var filter = {
         nodes: flow.ui.nodes,
-        groups: [
-            "webauthn"
-        ],
+        groups: client.UiNodeGroupEnum.Passkey,
         withoutDefaultAttributes: true
     };
     return /*#__PURE__*/ jsxRuntime.jsxs(PasswordlessSectionWrapper, {
         children: [
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: _object_spread_props$6(_object_spread$7({}, filter), {
-                    // we will also map default fields here but not oidc and password fields
+                    groups: [
+                        "identifier_first",
+                        "passkey"
+                    ],
+                    attributes: [
+                        "hidden"
+                    ]
+                })
+            }),
+            /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
+                filter: _object_spread_props$6(_object_spread$7({}, filter), {
                     excludeAttributes: [
                         "hidden",
                         "button",
@@ -3272,6 +3325,9 @@ function PasswordlessSection(param) {
                     attributes: [
                         "button",
                         "submit"
+                    ],
+                    excludeAttributes: [
+                        "hidden"
                     ]
                 })
             })
@@ -3279,6 +3335,52 @@ function PasswordlessSection(param) {
     });
 }
 
+function ProfileLoginSection(param) {
+    var nodes = param.nodes, ProfileLoginSectionWrapper = param.ProfileLoginSectionWrapper;
+    return /*#__PURE__*/ jsxRuntime.jsxs(ProfileLoginSectionWrapper, {
+        children: [
+            /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
+                filter: {
+                    nodes: nodes,
+                    groups: client.UiNodeGroupEnum.Profile,
+                    excludeAttributes: "submit,hidden"
+                }
+            }),
+            /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
+                filter: {
+                    nodes: nodes,
+                    groups: client.UiNodeGroupEnum.Profile,
+                    excludeAttributes: "hidden",
+                    attributes: "submit"
+                }
+            })
+        ]
+    });
+}
+
+function ProfileRegistrationSection(param) {
+    var nodes = param.nodes, ProfileRegistrationSectionWrapper = param.ProfileRegistrationSectionWrapper;
+    return /*#__PURE__*/ jsxRuntime.jsxs(ProfileRegistrationSectionWrapper, {
+        children: [
+            /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
+                filter: {
+                    nodes: nodes,
+                    groups: client.UiNodeGroupEnum.Profile,
+                    excludeAttributes: "submit,hidden"
+                }
+            }),
+            /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
+                filter: {
+                    nodes: nodes,
+                    groups: client.UiNodeGroupEnum.Profile,
+                    excludeAttributes: "hidden",
+                    attributes: "submit"
+                }
+            })
+        ]
+    });
+}
+
 function _define_property$6(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
@@ -3336,19 +3438,18 @@ function RegistrationSection(param) {
     if (!hasPassword(nodes)) return null;
     var filter = {
         nodes: nodes,
-        groups: [
-            "password"
-        ]
+        groups: client.UiNodeGroupEnum.Password
     };
     return /*#__PURE__*/ jsxRuntime.jsxs(RegistrationSectionWrapper, {
         children: [
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: _object_spread_props$5(_object_spread$6({}, filter), {
-                    excludeAttributes: "submit"
+                    excludeAttributes: "submit,hidden"
                 })
             }),
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: _object_spread_props$5(_object_spread$6({}, filter), {
+                    excludeAttributes: "hidden",
                     attributes: "submit"
                 })
             })
@@ -3409,7 +3510,7 @@ function _object_spread$5(target) {
  * @returns JSX.Element
  */ function UserAuthCard(param) {
     var flow = param.flow, flowType = param.flowType, onSubmit = param.onSubmit, className = param.className;
-    var _useKratosContext = useKratosContext(), _useKratosContext_components = _useKratosContext.components, PasswordlessSectionWrapper = _useKratosContext_components.PasswordlessSectionWrapper, OidcSectionWrapper = _useKratosContext_components.OidcSectionWrapper, AuthCodeSectionWrapper = _useKratosContext_components.AuthCodeSectionWrapper, LoginSectionWrapper = _useKratosContext_components.LoginSectionWrapper, RegistrationSectionWrapper = _useKratosContext_components.RegistrationSectionWrapper, UiMessages = _useKratosContext_components.UiMessages, LinkSectionWrapper = _useKratosContext_components.LinkSectionWrapper, excludeScripts = _useKratosContext.excludeScripts;
+    var _useKratosContext = useKratosContext(), _useKratosContext_components = _useKratosContext.components, PasswordlessSectionWrapper = _useKratosContext_components.PasswordlessSectionWrapper, OidcSectionWrapper = _useKratosContext_components.OidcSectionWrapper, AuthCodeSectionWrapper = _useKratosContext_components.AuthCodeSectionWrapper, LoginSectionWrapper = _useKratosContext_components.LoginSectionWrapper, RegistrationSectionWrapper = _useKratosContext_components.RegistrationSectionWrapper, UiMessages = _useKratosContext_components.UiMessages, LinkSectionWrapper = _useKratosContext_components.LinkSectionWrapper, IdentifierFirstLoginSectionWrapper = _useKratosContext_components.IdentifierFirstLoginSectionWrapper, ProfileLoginSectionWrapper = _useKratosContext_components.ProfileLoginSectionWrapper, ProfileRegistrationSectionWrapper = _useKratosContext_components.ProfileRegistrationSectionWrapper, excludeScripts = _useKratosContext.excludeScripts;
     useScriptNodes({
         nodes: flow.ui.nodes,
         excludeScripts: excludeScripts
@@ -3417,17 +3518,19 @@ function _object_spread$5(target) {
     var $flow = undefined;
     var $oidc = undefined;
     var $code = undefined;
-    var $passwordless = undefined;
+    var $passkey = undefined;
+    var $twoStep = undefined;
+    var $profile = undefined;
     // the current flow is a two factor flow if the user is logged in and has any of the second factor methods enabled.
-    var isTwoFactor = flowType === "login" && isLoggedIn(flow) && (hasTotp(flow.ui.nodes) || hasWebauthn(flow.ui.nodes) || hasLookupSecret(flow.ui.nodes));
+    var isTwoFactor = flowType === "login" && isLoggedIn(flow) && (hasTotp(flow.ui.nodes) || hasPasskey(flow.ui.nodes) || hasLookupSecret(flow.ui.nodes));
     // This array contains all the 2fa flows mapped to their own respective forms.
     var twoFactorFlows = isTwoFactor && [
-        hasWebauthn(flow.ui.nodes) && /*#__PURE__*/ jsxRuntime.jsx(UserAuthForm, {
+        hasPasskey(flow.ui.nodes) && /*#__PURE__*/ jsxRuntime.jsx(UserAuthForm, {
             flow: flow,
             children: /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: {
                     nodes: flow.ui.nodes,
-                    groups: "webauthn",
+                    groups: client.UiNodeGroupEnum.Passkey,
                     withoutDefaultGroup: true
                 }
             })
@@ -3437,7 +3540,17 @@ function _object_spread$5(target) {
             children: /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: {
                     nodes: flow.ui.nodes,
-                    groups: "password",
+                    groups: client.UiNodeGroupEnum.Password,
+                    withoutDefaultGroup: true
+                }
+            })
+        }),
+        hasProfile(flow.ui.nodes) && /*#__PURE__*/ jsxRuntime.jsx(UserAuthForm, {
+            flow: flow,
+            children: /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
+                filter: {
+                    nodes: flow.ui.nodes,
+                    groups: client.UiNodeGroupEnum.Profile,
                     withoutDefaultGroup: true
                 }
             })
@@ -3450,7 +3563,7 @@ function _object_spread$5(target) {
                 /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                     filter: {
                         nodes: flow.ui.nodes,
-                        groups: "totp",
+                        groups: client.UiNodeGroupEnum.Totp,
                         withoutDefaultGroup: true,
                         excludeAttributes: "submit"
                     }
@@ -3458,7 +3571,7 @@ function _object_spread$5(target) {
                 /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                     filter: {
                         nodes: flow.ui.nodes,
-                        groups: "totp",
+                        groups: client.UiNodeGroupEnum.Totp,
                         withoutDefaultGroup: true,
                         attributes: "submit"
                     }
@@ -3472,7 +3585,7 @@ function _object_spread$5(target) {
             children: /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: {
                     nodes: flow.ui.nodes,
-                    groups: "lookup_secret",
+                    groups: client.UiNodeGroupEnum.LookupSecret,
                     withoutDefaultGroup: true
                 }
             })
@@ -3481,28 +3594,40 @@ function _object_spread$5(target) {
     ;
     switch(flowType){
         case "login":
-            $passwordless = hasWebauthn(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(PasswordlessSection, {
-                flow: flow,
-                PasswordlessSectionWrapper: PasswordlessSectionWrapper
-            }) : undefined;
             $oidc = hasOidc(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(OidcSection, {
                 flow: flow,
                 OidcSectionWrapper: OidcSectionWrapper
             }) : undefined;
-            $code = hasCode(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(AuthCodeSection, {
-                AuthCodeSectionWrapper: AuthCodeSectionWrapper,
+            $passkey = hasPasskey(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(PasswordlessSection, {
+                flow: flow,
+                PasswordlessSectionWrapper: PasswordlessSectionWrapper
+            }) : undefined;
+            $twoStep = hasIdentifierFirst(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(IdentifierFirstLoginSection, {
+                IdentifierFirstLoginSectionWrapper: IdentifierFirstLoginSectionWrapper,
                 nodes: flow.ui.nodes
             }) : undefined;
+            $profile = hasProfile(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(ProfileLoginSection, {
+                nodes: flow.ui.nodes,
+                ProfileLoginSectionWrapper: ProfileLoginSectionWrapper
+            }) : undefined;
             $flow = hasPassword(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(LoginSection, {
                 LoginSectionWrapper: LoginSectionWrapper,
                 nodes: flow.ui.nodes
             }) : undefined;
+            $code = hasCode(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(AuthCodeSection, {
+                AuthCodeSectionWrapper: AuthCodeSectionWrapper,
+                nodes: flow.ui.nodes
+            }) : undefined;
             break;
         case "registration":
-            $passwordless = hasWebauthn(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(PasswordlessSection, {
+            $passkey = hasPasskey(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(PasswordlessSection, {
                 flow: flow,
                 PasswordlessSectionWrapper: PasswordlessSectionWrapper
             }) : undefined;
+            $profile = hasProfile(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(ProfileRegistrationSection, {
+                nodes: flow.ui.nodes,
+                ProfileRegistrationSectionWrapper: ProfileRegistrationSectionWrapper
+            }) : undefined;
             $oidc = hasOidc(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(OidcSection, {
                 flow: flow,
                 OidcSectionWrapper: OidcSectionWrapper
@@ -3511,7 +3636,7 @@ function _object_spread$5(target) {
                 AuthCodeSectionWrapper: AuthCodeSectionWrapper,
                 nodes: flow.ui.nodes
             }) : undefined;
-            $flow = hasPassword(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(RegistrationSection, {
+            $flow = hasDefault(flow.ui.nodes) || hasPassword(flow.ui.nodes) ? /*#__PURE__*/ jsxRuntime.jsx(RegistrationSection, {
                 nodes: flow.ui.nodes,
                 RegistrationSectionWrapper: RegistrationSectionWrapper
             }) : undefined;
@@ -3525,9 +3650,8 @@ function _object_spread$5(target) {
             });
             break;
     }
-    // passwordless can be shown if the user is not logged in (e.g. exclude 2FA screen) or if the flow is a registration flow.
-    // we want the login section to handle passwordless as well when we have a 2FA screen.
-    var canShowPasswordless = !!$passwordless && (!isLoggedIn(flow) || flowType === "registration");
+    var canShowPasskey = !!$passkey && (!isLoggedIn(flow) || flowType === "registration");
+    var canShowProfile = !!$profile && hasProfile(flow.ui.nodes);
     return /*#__PURE__*/ jsxRuntime.jsxs("div", {
         className: className,
         children: [
@@ -3538,6 +3662,16 @@ function _object_spread$5(target) {
                 flow: flow,
                 children: $oidc
             }),
+            $twoStep && /*#__PURE__*/ jsxRuntime.jsx(UserAuthForm, {
+                flow: flow,
+                children: $twoStep
+            }),
+            canShowPasskey && /*#__PURE__*/ jsxRuntime.jsx(UserAuthForm, {
+                submitOnEnter: true,
+                flow: flow,
+                onSubmit: onSubmit,
+                children: $passkey
+            }),
             $code && /*#__PURE__*/ jsxRuntime.jsx(UserAuthForm, {
                 flow: flow,
                 children: $code
@@ -3548,16 +3682,26 @@ function _object_spread$5(target) {
                 onSubmit: onSubmit,
                 children: $flow
             }),
-            twoFactorFlows,
-            canShowPasswordless && /*#__PURE__*/ jsxRuntime.jsx(UserAuthForm, {
-                submitOnEnter: true,
+            isTwoFactor && /*#__PURE__*/ jsxRuntime.jsxs(jsxRuntime.Fragment, {
+                children: [
+                    /*#__PURE__*/ jsxRuntime.jsx(NodeMessages, {
+                        nodes: filterNodesByGroups({
+                            nodes: flow.ui.nodes,
+                            groups: [
+                                client.UiNodeGroupEnum.Password,
+                                client.UiNodeGroupEnum.Webauthn,
+                                client.UiNodeGroupEnum.Passkey,
+                                client.UiNodeGroupEnum.Totp,
+                                client.UiNodeGroupEnum.LookupSecret
+                            ]
+                        })
+                    }),
+                    twoFactorFlows
+                ]
+            }),
+            canShowProfile && /*#__PURE__*/ jsxRuntime.jsx(UserAuthForm, {
                 flow: flow,
-                formFilterOverride: {
-                    nodes: flow.ui.nodes,
-                    attributes: "hidden"
-                },
-                onSubmit: onSubmit,
-                children: $passwordless
+                children: $profile
             })
         ]
     });
@@ -3640,7 +3784,7 @@ function LookupSecretSettingsSection(param) {
     var flow = param.flow, LookupSecretSettingsSectionWrapper = param.LookupSecretSettingsSectionWrapper;
     var filter = {
         nodes: flow.ui.nodes,
-        groups: "lookup_secret",
+        groups: client.UiNodeGroupEnum.LookupSecret,
         withoutDefaultGroup: true
     };
     if (!hasLookupSecret(flow.ui.nodes)) return null;
@@ -3667,7 +3811,7 @@ function OidcSettingsSection(param) {
         children: /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
             filter: {
                 nodes: flow.ui.nodes,
-                groups: "oidc",
+                groups: client.UiNodeGroupEnum.Oidc,
                 withoutDefaultGroup: true
             }
         })
@@ -3726,15 +3870,15 @@ function _object_spread_props$3(target, source) {
     }
     return target;
 }
-function PasswordSettingsSection(param) {
-    var flow = param.flow, PasswordSettingsSectionWrapper = param.PasswordSettingsSectionWrapper;
-    if (!hasPassword(flow.ui.nodes)) return null;
+function PasskeySettingsSection(param) {
+    var flow = param.flow, PasskeySettingsSectionWrapper = param.PasskeySettingsSectionWrapper;
+    if (!hasPasskey(flow.ui.nodes)) return null;
     var filter = {
         nodes: flow.ui.nodes,
-        groups: "password",
+        groups: client.UiNodeGroupEnum.Passkey,
         withoutDefaultGroup: true
     };
-    return /*#__PURE__*/ jsxRuntime.jsxs(PasswordSettingsSectionWrapper, {
+    return /*#__PURE__*/ jsxRuntime.jsxs(PasskeySettingsSectionWrapper, {
         children: [
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: _object_spread_props$3(_object_spread$3({}, filter), {
@@ -3802,13 +3946,15 @@ function _object_spread_props$2(target, source) {
     }
     return target;
 }
-function ProfileSettingsSection(param) {
-    var flow = param.flow, ProfileSettingsSectionWrapper = param.ProfileSettingsSectionWrapper;
+function PasswordSettingsSection(param) {
+    var flow = param.flow, PasswordSettingsSectionWrapper = param.PasswordSettingsSectionWrapper;
+    if (!hasPassword(flow.ui.nodes)) return null;
     var filter = {
         nodes: flow.ui.nodes,
-        groups: "profile"
+        groups: client.UiNodeGroupEnum.Password,
+        withoutDefaultGroup: true
     };
-    return /*#__PURE__*/ jsxRuntime.jsxs(ProfileSettingsSectionWrapper, {
+    return /*#__PURE__*/ jsxRuntime.jsxs(PasswordSettingsSectionWrapper, {
         children: [
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: _object_spread_props$2(_object_spread$2({}, filter), {
@@ -3876,15 +4022,13 @@ function _object_spread_props$1(target, source) {
     }
     return target;
 }
-function TotpSettingsSection(param) {
-    var flow = param.flow, TotpSettingsSectionWrapper = param.TotpSettingsSectionWrapper;
-    if (!hasTotp(flow.ui.nodes)) return null;
+function ProfileSettingsSection(param) {
+    var flow = param.flow, ProfileSettingsSectionWrapper = param.ProfileSettingsSectionWrapper;
     var filter = {
         nodes: flow.ui.nodes,
-        groups: "totp",
-        withoutDefaultGroup: true
+        groups: client.UiNodeGroupEnum.Profile
     };
-    return /*#__PURE__*/ jsxRuntime.jsxs(TotpSettingsSectionWrapper, {
+    return /*#__PURE__*/ jsxRuntime.jsxs(ProfileSettingsSectionWrapper, {
         children: [
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: _object_spread_props$1(_object_spread$1({}, filter), {
@@ -3952,15 +4096,15 @@ function _object_spread_props(target, source) {
     }
     return target;
 }
-function WebAuthnSettingsSection(param) {
-    var flow = param.flow, WebAuthnSettingsSectionWrapper = param.WebAuthnSettingsSectionWrapper;
-    if (!hasWebauthn(flow.ui.nodes)) return null;
+function TotpSettingsSection(param) {
+    var flow = param.flow, TotpSettingsSectionWrapper = param.TotpSettingsSectionWrapper;
+    if (!hasTotp(flow.ui.nodes)) return null;
     var filter = {
         nodes: flow.ui.nodes,
-        groups: "webauthn",
+        groups: client.UiNodeGroupEnum.Totp,
         withoutDefaultGroup: true
     };
-    return /*#__PURE__*/ jsxRuntime.jsxs(WebAuthnSettingsSectionWrapper, {
+    return /*#__PURE__*/ jsxRuntime.jsxs(TotpSettingsSectionWrapper, {
         children: [
             /*#__PURE__*/ jsxRuntime.jsx(FilterFlowNodes, {
                 filter: _object_spread_props(_object_spread({}, filter), {
@@ -3984,32 +4128,32 @@ function UserSettingsCard(param) {
         excludeScripts: excludeScripts
     });
     var $flow = function() {
-        if (flowType === "profile") {
+        if (flowType === client.UiNodeGroupEnum.Profile) {
             return /*#__PURE__*/ jsxRuntime.jsx(ProfileSettingsSection, {
                 flow: flow,
                 ProfileSettingsSectionWrapper: ProfileSettingsSectionWrapper
             });
-        } else if (flowType === "password" && hasPassword(flow.ui.nodes)) {
+        } else if (flowType === client.UiNodeGroupEnum.Password && hasPassword(flow.ui.nodes)) {
             return /*#__PURE__*/ jsxRuntime.jsx(PasswordSettingsSection, {
                 flow: flow,
                 PasswordSettingsSectionWrapper: PasswordSettingsSectionWrapper
             });
-        } else if (flowType === "webauthn" && hasWebauthn(flow.ui.nodes)) {
-            return /*#__PURE__*/ jsxRuntime.jsx(WebAuthnSettingsSection, {
+        } else if (flowType === client.UiNodeGroupEnum.Passkey && hasPasskey(flow.ui.nodes)) {
+            return /*#__PURE__*/ jsxRuntime.jsx(PasskeySettingsSection, {
                 flow: flow,
-                WebAuthnSettingsSectionWrapper: WebAuthnSettingsSectionWrapper
+                PasskeySettingsSectionWrapper: WebAuthnSettingsSectionWrapper
             });
-        } else if (flowType === "lookupSecret" && hasLookupSecret(flow.ui.nodes)) {
+        } else if (flowType === client.UiNodeGroupEnum.LookupSecret && hasLookupSecret(flow.ui.nodes)) {
             return /*#__PURE__*/ jsxRuntime.jsx(LookupSecretSettingsSection, {
                 flow: flow,
                 LookupSecretSettingsSectionWrapper: LookupSecretSettingsSectionWrapper
             });
-        } else if (flowType === "oidc" && hasOidc(flow.ui.nodes)) {
+        } else if (flowType === client.UiNodeGroupEnum.Oidc && hasOidc(flow.ui.nodes)) {
             return /*#__PURE__*/ jsxRuntime.jsx(OidcSettingsSection, {
                 flow: flow,
                 OidcSettingsSectionWrapper: OidcSettingsSectionWrapper
             });
-        } else if (flowType === "totp" && hasTotp(flow.ui.nodes)) {
+        } else if (flowType === client.UiNodeGroupEnum.Totp && hasTotp(flow.ui.nodes)) {
             return /*#__PURE__*/ jsxRuntime.jsx(TotpSettingsSection, {
                 flow: flow,
                 TotpSettingsSectionWrapper: TotpSettingsSectionWrapper