@marinoscar/platform-web 0.0.0-stage → 0.1.0-next.10

package/dist/identity/headless/user-extensions.js

@@ -0,0 +1,61 @@
+// =============================================================================
+// Reading what the app's user extensions added (PP-14.25)
+// =============================================================================
+//
+// The API merges the app's `registerCurrentUserExtension` contributions into
+// `GET /api/auth/me` and its `registerUserListExtension` contributions into each
+// row of `GET /api/users`, under `extensions.<id>`. The browser only reads them:
+// it never decides anything from them (the API enforces every permission), and
+// what an extension returns is untrusted data to render, not markup.
+// =============================================================================
+import { useOptionalAuth } from './auth-context.js';
+/**
+ * One extension's contribution to a user payload, or `undefined` when the
+ * extension did not contribute (it is not registered, it returned nothing for
+ * this user, or the API skipped it).
+ *
+ * Works on the signed-in user (`useAuth().user`) and on a row of the user list
+ * (`UserListItem`) alike.
+ *
+ * @typeParam T - the contribution's shape. The API sends JSON the extension
+ *   chose; the caller states what it expects, and should still tolerate a
+ *   missing field.
+ * @param holder - a user payload that may carry `extensions`.
+ * @param id - the extension id.
+ * @returns the contribution, or `undefined`.
+ *
+ * @example
+ * ```tsx
+ * { id: 'plan', label: 'Plan', priority: 'secondary', value: (user) => userExtension<{ plan: string }>(user, 'billing')?.plan ?? '' }
+ * ```
+ *
+ * @stability experimental
+ */
+export function userExtension(holder, id) {
+    const extensions = holder?.extensions;
+    if (!extensions || !Object.prototype.hasOwnProperty.call(extensions, id))
+        return undefined;
+    const value = extensions[id];
+    return value !== null && typeof value === 'object' ? value : undefined;
+}
+/**
+ * The signed-in user's contribution from one current-user extension
+ * (`GET /api/auth/me` `extensions.<id>`), or `undefined` when there is none or
+ * nobody is signed in. Outside an `AuthProvider` it answers `undefined`.
+ *
+ * @typeParam T - the contribution's shape.
+ * @param id - the extension id.
+ * @returns the contribution, or `undefined`.
+ *
+ * @example
+ * ```tsx
+ * const billing = useCurrentUserExtension<{ plan: string }>('billing');
+ * ```
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export function useCurrentUserExtension(id) {
+    return userExtension(useOptionalAuth()?.user, id);
+}
+//# sourceMappingURL=user-extensions.js.map

package/dist/identity/headless/user-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-extensions.js","sourceRoot":"","sources":["../../../src/identity/headless/user-extensions.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0DAA0D;AAC1D,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,iFAAiF;AACjF,iFAAiF;AACjF,+EAA+E;AAC/E,qEAAqE;AACrE,gFAAgF;AAEhF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAyF,EACzF,EAAU;IAEV,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,CAAC;IACtC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3F,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CAA6C,EAAU;IAC5F,OAAO,aAAa,CAAI,eAAe,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/identity/index.d.ts

@@ -0,0 +1,4 @@
+export { useAuth, usePermissions, LocalIdentityProvider } from './headless/index.js';
+export type { IdentityDataTableProps, IdentityTableColumn, IdentityTableFilter, IdentityTableRowAction, } from './headless/index.js';
+export { IdentityTable } from './ui/table.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,YAAY,EACV,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/identity/index.js

@@ -0,0 +1,11 @@
+// The identity slice's entry point for SIBLING SLICES of this package (issue
+// #738): the boundary lint lets one slice import another only through the
+// other's `index.ts`, and only when packages/platform-slices.json lists the
+// dependency (notifications -> identity). Not a package subpath: apps import
+// `@marinoscar/platform-web/identity/headless` and `/identity/ui`. Narrow on
+// purpose: only what a sibling uses.
+export { useAuth, usePermissions, LocalIdentityProvider } from './headless/index.js';
+// The table seam: the app's DataTable from the identity adapters, else the
+// plain MUI fallback.
+export { IdentityTable } from './ui/table.js';
+//# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,qCAAqC;AAErC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAOrF,2EAA2E;AAC3E,sBAAsB;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/identity/internal/use-is-mounted.d.ts

@@ -0,0 +1,9 @@
+/**
+ * A stable getter for "is this component still mounted?", to guard `setState`
+ * in the tail of an async operation. A ref rather than state, and a getter
+ * rather than the ref, so callers can list it in a `useCallback` dependency
+ * array without invalidating on every render. Copied from the reference app's
+ * `hooks/useIsMounted.ts` (a slice-private helper, not exported).
+ */
+export declare function useIsMounted(): () => boolean;
+//# sourceMappingURL=use-is-mounted.d.ts.map

package/dist/identity/internal/use-is-mounted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-is-mounted.d.ts","sourceRoot":"","sources":["../../../src/identity/internal/use-is-mounted.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,MAAM,OAAO,CAW5C"}

package/dist/identity/internal/use-is-mounted.js

@@ -0,0 +1,19 @@
+import { useCallback, useEffect, useRef } from 'react';
+/**
+ * A stable getter for "is this component still mounted?", to guard `setState`
+ * in the tail of an async operation. A ref rather than state, and a getter
+ * rather than the ref, so callers can list it in a `useCallback` dependency
+ * array without invalidating on every render. Copied from the reference app's
+ * `hooks/useIsMounted.ts` (a slice-private helper, not exported).
+ */
+export function useIsMounted() {
+    const mounted = useRef(true);
+    useEffect(() => {
+        mounted.current = true;
+        return () => {
+            mounted.current = false;
+        };
+    }, []);
+    return useCallback(() => mounted.current, []);
+}
+//# sourceMappingURL=use-is-mounted.js.map

package/dist/identity/internal/use-is-mounted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-is-mounted.js","sourceRoot":"","sources":["../../../src/identity/internal/use-is-mounted.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAE7B,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,OAAO,GAAG,EAAE;YACV,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QAC1B,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/dist/identity/ui/ActivateDevicePage.d.ts

@@ -0,0 +1,34 @@
+import type { ReactElement } from 'react';
+import type { PageSlotsBase } from '../../core/index.js';
+/**
+ * The slots of {@link ActivateDevicePage}: the packaged-page slot contract.
+ * `Header` replaces the heading block of the card (its `title` and `description`
+ * change with the step); `BeforeContent` and `Sections` (top) sit between the
+ * heading and the step's content, `Sections` (bottom) and `AfterContent` after it.
+ * All of it is inside the card.
+ *
+ * @extensionPoint slot
+ * @stability experimental
+ */
+export type ActivateDevicePageSlots = PageSlotsBase;
+/**
+ * Props of {@link ActivateDevicePage}.
+ *
+ * @stability experimental
+ */
+export interface ActivateDevicePageProps {
+    /** Add to the page without a fork. */
+    slots?: ActivateDevicePageSlots;
+}
+/**
+ * The `/activate` route: enter (or arrive with) a device's user code, review
+ * what the device asked for, approve or deny.
+ *
+ * @param props - see {@link ActivateDevicePageProps}.
+ * @returns the page.
+ *
+ * @extensionPoint component
+ * @stability stable
+ */
+export declare function ActivateDevicePage({ slots }?: ActivateDevicePageProps): ReactElement;
+//# sourceMappingURL=ActivateDevicePage.d.ts.map

package/dist/identity/ui/ActivateDevicePage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivateDevicePage.d.ts","sourceRoot":"","sources":["../../../src/identity/ui/ActivateDevicePage.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAU1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAYzD;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,sCAAsC;IACtC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,KAAK,EAAE,GAAE,uBAA4B,GAAG,YAAY,CAyJxF"}

package/dist/identity/ui/ActivateDevicePage.js

@@ -0,0 +1,118 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// The device-activation route (RFC 8628), moved from the reference app's
+// `pages/ActivateDevicePage.tsx` (issue #727).
+import { useState, useEffect } from 'react';
+import { useSearchParams } from 'react-router-dom';
+import { Box, Card, CardContent, Typography, useTheme, } from '@mui/material';
+import { isPlatformApiError } from '../../core/index.js';
+import { useIdentityApi } from '../headless/index.js';
+import { DeviceCodeInput } from './device/DeviceCodeInput.js';
+import { DeviceInfoCard } from './device/DeviceInfoCard.js';
+import { ActivationSuccess } from './device/ActivationSuccess.js';
+/**
+ * The `/activate` route: enter (or arrive with) a device's user code, review
+ * what the device asked for, approve or deny.
+ *
+ * @param props - see {@link ActivateDevicePageProps}.
+ * @returns the page.
+ *
+ * @extensionPoint component
+ * @stability stable
+ */
+export function ActivateDevicePage({ slots } = {}) {
+    const Header = slots?.Header;
+    const BeforeContent = slots?.BeforeContent;
+    const Sections = slots?.Sections;
+    const AfterContent = slots?.AfterContent;
+    const { getDeviceActivationInfo, authorizeDevice } = useIdentityApi();
+    const [searchParams] = useSearchParams();
+    const theme = useTheme();
+    const [state, setState] = useState({ step: 'input' });
+    const [error, setError] = useState(null);
+    // Pre-fill code from URL query parameter
+    const codeFromUrl = searchParams.get('code') || '';
+    // Auto-verify if code is provided in URL
+    useEffect(() => {
+        if (codeFromUrl && state.step === 'input') {
+            handleVerifyCode(codeFromUrl);
+        }
+    }, []);
+    const handleVerifyCode = async (code) => {
+        setError(null);
+        try {
+            const deviceInfo = await getDeviceActivationInfo(code);
+            setState({ step: 'review', deviceInfo });
+        }
+        catch (err) {
+            if (isPlatformApiError(err)) {
+                if (err.status === 404 || err.status === 400) {
+                    setError('Invalid code. Please check and try again.');
+                }
+                else if (err.status === 410) {
+                    setError('This code has expired. Please request a new one.');
+                }
+                else {
+                    setError(err.message || 'Failed to verify code. Please try again.');
+                }
+            }
+            else {
+                setError('Network error. Please check your connection and try again.');
+            }
+        }
+    };
+    const handleApprove = async () => {
+        if (state.step !== 'review')
+            return;
+        setError(null);
+        try {
+            const response = await authorizeDevice(state.deviceInfo.userCode, true);
+            setState({
+                step: 'complete',
+                success: response.success,
+                message: response.message || 'Device authorized successfully!',
+            });
+        }
+        catch (err) {
+            if (isPlatformApiError(err)) {
+                setError(err.message || 'Failed to authorize device. Please try again.');
+            }
+            else {
+                setError('Network error. Please check your connection and try again.');
+            }
+        }
+    };
+    const handleDeny = async () => {
+        if (state.step !== 'review')
+            return;
+        setError(null);
+        try {
+            const response = await authorizeDevice(state.deviceInfo.userCode, false);
+            setState({
+                step: 'complete',
+                success: false,
+                message: response.message || 'Device access denied.',
+            });
+        }
+        catch (err) {
+            if (isPlatformApiError(err)) {
+                setError(err.message || 'Failed to process request. Please try again.');
+            }
+            else {
+                setError('Network error. Please check your connection and try again.');
+            }
+        }
+    };
+    return (_jsx(Box, { sx: {
+            minHeight: '100vh',
+            display: 'flex',
+            alignItems: 'center',
+            justifyContent: 'center',
+            backgroundColor: theme.palette.background.default,
+            p: 2,
+        }, children: _jsx(Card, { sx: {
+                maxWidth: 500,
+                width: '100%',
+                boxShadow: theme.shadows[10],
+            }, children: _jsxs(CardContent, { sx: { p: { xs: 3, sm: 4 } }, children: [Header ? (_jsx(Header, { title: state.step === 'complete' ? 'Authorization Complete' : 'Authorize Device', ...(state.step !== 'complete' ? { description: 'Link a device to your account' } : {}), actions: null })) : (_jsxs(Box, { sx: { textAlign: 'center', mb: 4 }, children: [_jsx(Typography, { variant: "h4", component: "h1", sx: { fontWeight: 'bold' }, children: state.step === 'complete' ? 'Authorization Complete' : 'Authorize Device' }), state.step !== 'complete' && (_jsx(Typography, { color: "text.secondary", sx: { mt: 1 }, children: "Link a device to your account" }))] })), BeforeContent && _jsx(BeforeContent, {}), Sections && _jsx(Sections, { position: "top" }), state.step === 'input' && (_jsx(DeviceCodeInput, { initialCode: codeFromUrl, onVerify: handleVerifyCode, error: error })), state.step === 'review' && (_jsx(DeviceInfoCard, { deviceInfo: state.deviceInfo, onApprove: handleApprove, onDeny: handleDeny, error: error })), state.step === 'complete' && (_jsx(ActivationSuccess, { success: state.success, message: state.message })), Sections && _jsx(Sections, { position: "bottom" }), AfterContent && _jsx(AfterContent, {})] }) }) }));
+}
+//# sourceMappingURL=ActivateDevicePage.js.map

package/dist/identity/ui/ActivateDevicePage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivateDevicePage.js","sourceRoot":"","sources":["../../../src/identity/ui/ActivateDevicePage.tsx"],"names":[],"mappings":";AAAA,yEAAyE;AACzE,+CAA+C;AAE/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,GAAG,EACH,IAAI,EACJ,WAAW,EACX,UAAU,EACV,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AA8BlE;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAE,KAAK,KAA8B,EAAE;IACxE,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,CAAC;IAC7B,MAAM,aAAa,GAAG,KAAK,EAAE,aAAa,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,CAAC;IACjC,MAAM,YAAY,GAAG,KAAK,EAAE,YAAY,CAAC;IACzC,MAAM,EAAE,uBAAuB,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IACtE,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAY,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,yCAAyC;IACzC,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAEnD,yCAAyC;IACzC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1C,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QAC9C,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;YACvD,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC7C,QAAQ,CAAC,2CAA2C,CAAC,CAAC;gBACxD,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,QAAQ,CAAC,kDAAkD,CAAC,CAAC;gBAC/D,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,GAAG,CAAC,OAAO,IAAI,0CAA0C,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,4DAA4D,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAEpC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACxE,QAAQ,CAAC;gBACP,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,iCAAiC;aAC/D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,GAAG,CAAC,OAAO,IAAI,+CAA+C,CAAC,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,4DAA4D,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAEpC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzE,QAAQ,CAAC;gBACP,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,uBAAuB;aACrD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,GAAG,CAAC,OAAO,IAAI,8CAA8C,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,4DAA4D,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,KAAC,GAAG,IACF,EAAE,EAAE;YACF,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;YACjD,CAAC,EAAE,CAAC;SACL,YAED,KAAC,IAAI,IACH,EAAE,EAAE;gBACF,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;aAC7B,YAED,MAAC,WAAW,IAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,aAErC,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,MAAM,IACL,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,kBAAkB,KAC5E,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACvF,OAAO,EAAE,IAAI,GACb,CACH,CAAC,CAAC,CAAC,CACF,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,aACrC,KAAC,UAAU,IAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,YAC/D,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,kBAAkB,GAC/D,EACZ,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAC5B,KAAC,UAAU,IAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,8CAEnC,CACd,IACG,CACP,EACA,aAAa,IAAI,KAAC,aAAa,KAAG,EAClC,QAAQ,IAAI,KAAC,QAAQ,IAAC,QAAQ,EAAC,KAAK,GAAG,EAGvC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CACzB,KAAC,eAAe,IACd,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,KAAK,GACZ,CACH,EAEA,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAC1B,KAAC,cAAc,IACb,UAAU,EAAE,KAAK,CAAC,UAAU,EAC5B,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,KAAK,GACZ,CACH,EAEA,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAC5B,KAAC,iBAAiB,IAChB,OAAO,EAAE,KAAK,CAAC,OAAO,EACtB,OAAO,EAAE,KAAK,CAAC,OAAO,GACtB,CACH,EAEA,QAAQ,IAAI,KAAC,QAAQ,IAAC,QAAQ,EAAC,QAAQ,GAAG,EAC1C,YAAY,IAAI,KAAC,YAAY,KAAG,IACrB,GACT,GACH,CACP,CAAC;AACJ,CAAC"}

package/dist/identity/ui/AuthCallbackPage.d.ts

@@ -0,0 +1,45 @@
+import type { ReactElement } from 'react';
+import type { PageSlotsBase } from '../../core/index.js';
+/**
+ * The slots of {@link AuthCallbackPage}: the packaged-page slot contract, on the
+ * screen shown while the sign-in completes. Top to bottom: `BeforeContent`,
+ * `Sections` (top), the spinner, `Header` (else "Completing authentication..."),
+ * `Sections` (bottom), `AfterContent`.
+ *
+ * @extensionPoint slot
+ * @stability experimental
+ */
+export type AuthCallbackPageSlots = PageSlotsBase;
+/**
+ * What {@link AuthCallbackPage} takes.
+ *
+ * @stability stable
+ */
+export interface AuthCallbackPageProps {
+    /**
+     * Add to the waiting screen without a fork (the sign-in error screen has its
+     * own copy and buttons and is not slotted). `Header` replaces the line "Completing
+     * authentication..." (its `title`); the other slots sit around the spinner.
+     */
+    slots?: AuthCallbackPageSlots;
+    /**
+     * The provider the error screen's retry buttons restart. When omitted it is
+     * read, in order, from the route (a `:provider` segment, for an app that
+     * mounts `/auth/callback/:provider`), then from the provider the current
+     * sign-in started with (remembered by `login`), then `'google'`.
+     *
+     * @defaultValue the route's `provider`, the remembered provider, then `'google'`
+     */
+    provider?: string;
+}
+/**
+ * The `/auth/callback` route.
+ *
+ * @param props - see {@link AuthCallbackPageProps}.
+ * @returns the page.
+ *
+ * @extensionPoint component
+ * @stability stable
+ */
+export declare function AuthCallbackPage({ provider: providerProp, slots }?: AuthCallbackPageProps): ReactElement;
+//# sourceMappingURL=AuthCallbackPage.d.ts.map

package/dist/identity/ui/AuthCallbackPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthCallbackPage.d.ts","sourceRoot":"","sources":["../../../src/identity/ui/AuthCallbackPage.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAG1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAKzD;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAElD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,GAAE,qBAA0B,GAAG,YAAY,CA+E5G"}

package/dist/identity/ui/AuthCallbackPage.js

@@ -0,0 +1,75 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// The sign-in callback route (issue #652), moved from the reference app's
+// `pages/AuthCallbackPage.tsx` (issue #727): takes the access token from the
+// URL, reads the user, and returns to where the sign-in started; or shows the
+// sign-in error screen for a known failure code (never the raw `?error=`).
+import { useEffect, useState } from 'react';
+import { useNavigate, useParams, useSearchParams } from 'react-router-dom';
+import { Box, CircularProgress, Typography } from '@mui/material';
+import { lastAuthProvider, useAuth, validAuthProviderId } from '../headless/index.js';
+import { SignInErrorView } from './SignInErrorView.js';
+import { DEFAULT_SIGN_IN_ERROR_CODE, resolveSignInErrorCode } from './sign-in-error-content.js';
+/**
+ * The `/auth/callback` route.
+ *
+ * @param props - see {@link AuthCallbackPageProps}.
+ * @returns the page.
+ *
+ * @extensionPoint component
+ * @stability stable
+ */
+export function AuthCallbackPage({ provider: providerProp, slots } = {}) {
+    const Header = slots?.Header;
+    const BeforeContent = slots?.BeforeContent;
+    const Sections = slots?.Sections;
+    const AfterContent = slots?.AfterContent;
+    const [searchParams] = useSearchParams();
+    const routeProvider = useParams().provider;
+    const provider = providerProp ?? validAuthProviderId(routeProvider) ?? lastAuthProvider() ?? 'google';
+    const navigate = useNavigate();
+    const { refreshUser, login, setAccessToken } = useAuth();
+    // Only ever a known code: the `?error=` value is never rendered (#652).
+    const [errorCode, setErrorCode] = useState(null);
+    useEffect(() => {
+        const handleCallback = async () => {
+            const token = searchParams.get('token');
+            const errorParam = searchParams.get('error');
+            if (errorParam) {
+                setErrorCode(resolveSignInErrorCode(errorParam));
+                return;
+            }
+            if (!token) {
+                setErrorCode(DEFAULT_SIGN_IN_ERROR_CODE);
+                return;
+            }
+            try {
+                // Store the access token
+                setAccessToken(token);
+                // Fetch user data
+                await refreshUser();
+                // Get the return URL and clear it
+                const returnUrl = sessionStorage.getItem('auth_return_url') || '/';
+                sessionStorage.removeItem('auth_return_url');
+                navigate(returnUrl, { replace: true });
+            }
+            catch {
+                setErrorCode(DEFAULT_SIGN_IN_ERROR_CODE);
+                setAccessToken(null);
+            }
+        };
+        void handleCallback();
+        // `setAccessToken` is stable for a stable client; the effect keys on what it always did.
+    }, [searchParams, navigate, refreshUser]);
+    if (errorCode) {
+        return (_jsx(SignInErrorView, { code: errorCode, onSignInWithDifferentAccount: () => login(provider, { selectAccount: true }), onTryAgain: () => login(provider) }));
+    }
+    return (_jsxs(Box, { sx: {
+            display: 'flex',
+            flexDirection: 'column',
+            alignItems: 'center',
+            justifyContent: 'center',
+            height: '100vh',
+            gap: 2,
+        }, children: [BeforeContent && _jsx(BeforeContent, {}), Sections && _jsx(Sections, { position: "top" }), _jsx(CircularProgress, {}), Header ? _jsx(Header, { title: "Completing authentication...", actions: null }) : _jsx(Typography, { children: "Completing authentication..." }), Sections && _jsx(Sections, { position: "bottom" }), AfterContent && _jsx(AfterContent, {})] }));
+}
+//# sourceMappingURL=AuthCallbackPage.js.map

package/dist/identity/ui/AuthCallbackPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthCallbackPage.js","sourceRoot":"","sources":["../../../src/identity/ui/AuthCallbackPage.tsx"],"names":[],"mappings":";AAAA,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAE3E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAwB,MAAM,4BAA4B,CAAC;AAoCtH;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,KAA4B,EAAE;IAC5F,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,CAAC;IAC7B,MAAM,aAAa,GAAG,KAAK,EAAE,aAAa,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,CAAC;IACjC,MAAM,YAAY,GAAG,KAAK,EAAE,YAAY,CAAC;IACzC,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,SAAS,EAAE,CAAC,QAAQ,CAAC;IAC3C,MAAM,QAAQ,GAAG,YAAY,IAAI,mBAAmB,CAAC,aAAa,CAAC,IAAI,gBAAgB,EAAE,IAAI,QAAQ,CAAC;IACtG,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IACzD,wEAAwE;IACxE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAyB,IAAI,CAAC,CAAC;IAEzE,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE7C,IAAI,UAAU,EAAE,CAAC;gBACf,YAAY,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,YAAY,CAAC,0BAA0B,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,yBAAyB;gBACzB,cAAc,CAAC,KAAK,CAAC,CAAC;gBAEtB,kBAAkB;gBAClB,MAAM,WAAW,EAAE,CAAC;gBAEpB,kCAAkC;gBAClC,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC;gBACnE,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAE7C,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,CAAC,0BAA0B,CAAC,CAAC;gBACzC,cAAc,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,cAAc,EAAE,CAAC;QACtB,yFAAyF;IAC3F,CAAC,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAE1C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CACL,KAAC,eAAe,IACd,IAAI,EAAE,SAAS,EACf,4BAA4B,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAC5E,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GACjC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,CACL,MAAC,GAAG,IACF,EAAE,EAAE;YACF,OAAO,EAAE,MAAM;YACf,aAAa,EAAE,QAAQ;YACvB,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;YACxB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,CAAC;SACP,aAEA,aAAa,IAAI,KAAC,aAAa,KAAG,EAClC,QAAQ,IAAI,KAAC,QAAQ,IAAC,QAAQ,EAAC,KAAK,GAAG,EACxC,KAAC,gBAAgB,KAAG,EACnB,MAAM,CAAC,CAAC,CAAC,KAAC,MAAM,IAAC,KAAK,EAAC,8BAA8B,EAAC,OAAO,EAAE,IAAI,GAAI,CAAC,CAAC,CAAC,KAAC,UAAU,+CAA0C,EAC/H,QAAQ,IAAI,KAAC,QAAQ,IAAC,QAAQ,EAAC,QAAQ,GAAG,EAC1C,YAAY,IAAI,KAAC,YAAY,KAAG,IAC7B,CACP,CAAC;AACJ,CAAC"}

package/dist/identity/ui/LoginPage.d.ts

@@ -0,0 +1,74 @@
+import type { ComponentType, ReactElement } from 'react';
+import type { PageSlotsBase } from '../../core/index.js';
+import type { AuthProviderInfo, LoginOptions } from '../headless/index.js';
+import type { OAuthButtonProps } from './OAuthButton.js';
+/**
+ * What the two provider slots of {@link LoginPageSlots} receive, so an app's
+ * own control (an SSO domain field, a magic-link form, a popup button) can start
+ * a sign-in and know what the API offers.
+ *
+ * @stability experimental
+ */
+export interface LoginProvidersSlotProps {
+    /** The sign-in providers the API offers. */
+    providers: AuthProviderInfo[];
+    /** Start a sign-in with a provider (`useAuth().login`). */
+    login: (provider: string, options?: LoginOptions) => void;
+}
+/**
+ * The replaceable parts of {@link LoginPage}: the packaged-page slot contract
+ * plus the login layout's own slots. Each slot defaults to the package's own
+ * rendering (nothing, for the provider slots and the contract's content slots).
+ *
+ * Inside the card, top to bottom: `Logo`, the heading (`Header`, else `Title`,
+ * else "Welcome" and "Sign in to continue"), the session-expired notice,
+ * `BeforeContent`, `Sections` (top), `BeforeProviders`, the "Sign in with"
+ * divider and the provider buttons, `AfterProviders`, `Sections` (bottom),
+ * `AfterContent`, then `Footer`.
+ *
+ * @stability experimental
+ */
+export interface LoginPageSlots extends PageSlotsBase {
+    /** Rendered above the title (nothing by default). */
+    Logo?: ComponentType;
+    /**
+     * The heading block (default: "Welcome" and "Sign in to continue"). Kept from
+     * before the slot contract; `Header` does the same and wins when both are set.
+     */
+    Title?: ComponentType;
+    /** The block under the providers (default: the terms caption). */
+    Footer?: ComponentType;
+    /** One provider's button (default: {@link OAuthButton}). */
+    ProviderButton?: ComponentType<OAuthButtonProps>;
+    /** Rendered above the "Sign in with" divider and the provider buttons (nothing by default). */
+    BeforeProviders?: ComponentType<LoginProvidersSlotProps>;
+    /** Rendered under the provider buttons, above the footer (nothing by default). */
+    AfterProviders?: ComponentType<LoginProvidersSlotProps>;
+}
+/**
+ * What {@link LoginPage} takes.
+ *
+ * @stability experimental
+ */
+export interface LoginPageProps {
+    /** Replace parts of the page. */
+    slots?: LoginPageSlots;
+}
+/**
+ * The login route: a centered card with one button per sign-in provider the
+ * API offers, the session-expired notice, and a redirect back to `state.from`
+ * once signed in.
+ *
+ * @param props - see {@link LoginPageProps}.
+ * @returns the page.
+ *
+ * @example
+ * ```tsx
+ * <LoginPage slots={{ Logo: AppLogo, Footer: AppLegalLinks }} />
+ * ```
+ *
+ * @extensionPoint slot
+ * @stability experimental
+ */
+export declare function LoginPage({ slots }?: LoginPageProps): ReactElement;
+//# sourceMappingURL=LoginPage.d.ts.map

package/dist/identity/ui/LoginPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginPage.d.ts","sourceRoot":"","sources":["../../../src/identity/ui/LoginPage.tsx"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAGzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAMzD;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,4CAA4C;IAC5C,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,2DAA2D;IAC3D,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,KAAK,IAAI,CAAC;CAC3D;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,qDAAqD;IACrD,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,kEAAkE;IAClE,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACjD,+FAA+F;IAC/F,eAAe,CAAC,EAAE,aAAa,CAAC,uBAAuB,CAAC,CAAC;IACzD,kFAAkF;IAClF,cAAc,CAAC,EAAE,aAAa,CAAC,uBAAuB,CAAC,CAAC;CACzD;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AA+BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,EAAE,KAAU,EAAE,GAAE,cAAmB,GAAG,YAAY,CAuG3E"}

package/dist/identity/ui/LoginPage.js

@@ -0,0 +1,69 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+// The login page (issue #727), moved from the reference app's
+// `pages/LoginPage.tsx`. "Packages own behaviour, apps own appearance": the
+// page owns the flow (redirect when signed in, the session-expired notice,
+// one button per provider the API offers); the app restyles it through the
+// theme and replaces parts through `slots`.
+import { useEffect } from 'react';
+import { useLocation, useNavigate } from 'react-router-dom';
+import { Alert, Box, Card, CardContent, CircularProgress, Divider, Stack, Typography, useTheme } from '@mui/material';
+import { useAuth, useIdentityWebAdapters } from '../headless/index.js';
+import { OAuthButton } from './OAuthButton.js';
+function DefaultTitle() {
+    return (_jsxs(_Fragment, { children: [_jsx(Typography, { variant: "h4", component: "h1", sx: { fontWeight: 'bold' }, children: "Welcome" }), _jsx(Typography, { color: "text.secondary", sx: { mt: 1 }, children: "Sign in to continue" })] }));
+}
+function DefaultFooter() {
+    return (_jsx(Typography, { variant: "caption", color: "text.secondary", children: "By signing in, you agree to our Terms of Service and Privacy Policy" }));
+}
+function DefaultFullScreenSpinner() {
+    return (_jsx(Box, { sx: { display: 'flex', justifyContent: 'center', alignItems: 'center', height: '100vh', width: '100vw' }, children: _jsx(CircularProgress, { size: 40 }) }));
+}
+/**
+ * The login route: a centered card with one button per sign-in provider the
+ * API offers, the session-expired notice, and a redirect back to `state.from`
+ * once signed in.
+ *
+ * @param props - see {@link LoginPageProps}.
+ * @returns the page.
+ *
+ * @example
+ * ```tsx
+ * <LoginPage slots={{ Logo: AppLogo, Footer: AppLegalLinks }} />
+ * ```
+ *
+ * @extensionPoint slot
+ * @stability experimental
+ */
+export function LoginPage({ slots = {} } = {}) {
+    const { isAuthenticated, isLoading, providers, login, sessionExpired } = useAuth();
+    const { Spinner } = useIdentityWebAdapters();
+    const navigate = useNavigate();
+    const location = useLocation();
+    const theme = useTheme();
+    const { Logo, Title = DefaultTitle, Footer = DefaultFooter, ProviderButton = OAuthButton, BeforeProviders, AfterProviders, Header, BeforeContent, Sections, AfterContent, } = slots;
+    // The return URL from location state (set by RequireAuth)
+    const state = location.state;
+    const returnUrl = state?.from ? `${state.from.pathname}${state.from.search || ''}` : '/';
+    // Redirect if already authenticated
+    useEffect(() => {
+        if (isAuthenticated && !isLoading) {
+            navigate(returnUrl, { replace: true });
+        }
+    }, [isAuthenticated, isLoading, navigate, returnUrl]);
+    if (isLoading) {
+        return Spinner ? _jsx(Spinner, { fullScreen: true }) : _jsx(DefaultFullScreenSpinner, {});
+    }
+    return (_jsx(Box, { sx: {
+            minHeight: '100vh',
+            display: 'flex',
+            alignItems: 'center',
+            justifyContent: 'center',
+            backgroundColor: theme.palette.background.default,
+            p: 2,
+        }, children: _jsx(Card, { sx: {
+                maxWidth: 400,
+                width: '100%',
+                boxShadow: theme.shadows[10],
+            }, children: _jsxs(CardContent, { sx: { p: 4 }, children: [_jsxs(Box, { sx: { textAlign: 'center', mb: 4 }, children: [Logo && _jsx(Logo, {}), Header ? _jsx(Header, { title: "Welcome", description: "Sign in to continue", actions: null }) : _jsx(Title, {})] }), sessionExpired && (_jsx(Alert, { severity: "info", sx: { mb: 3 }, "data-testid": "session-expired-notice", children: "Your session expired. Please sign in again." })), BeforeContent && _jsx(BeforeContent, {}), Sections && _jsx(Sections, { position: "top" }), BeforeProviders && _jsx(BeforeProviders, { providers: providers, login: login }), _jsx(Divider, { sx: { mb: 3 }, children: _jsx(Typography, { variant: "body2", color: "text.secondary", children: "Sign in with" }) }), _jsx(Stack, { spacing: 2, children: providers.length > 0 ? (providers.map((provider) => (_jsx(ProviderButton, { provider: provider.name, onClick: () => login(provider.name) }, provider.name)))) : (_jsx(Typography, { color: "text.secondary", sx: { textAlign: 'center' }, children: "No authentication providers configured" })) }), AfterProviders && _jsx(AfterProviders, { providers: providers, login: login }), Sections && _jsx(Sections, { position: "bottom" }), AfterContent && _jsx(AfterContent, {}), _jsx(Box, { sx: { mt: 4, textAlign: 'center' }, children: _jsx(Footer, {}) })] }) }) }));
+}
+//# sourceMappingURL=LoginPage.js.map

package/dist/identity/ui/LoginPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginPage.js","sourceRoot":"","sources":["../../../src/identity/ui/LoginPage.tsx"],"names":[],"mappings":";AAAA,8DAA8D;AAC9D,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,4CAA4C;AAE5C,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEtH,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AA8D/C,SAAS,YAAY;IACnB,OAAO,CACL,8BACE,KAAC,UAAU,IAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,wBAErD,EACb,KAAC,UAAU,IAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,oCAEnC,IACZ,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,CACL,KAAC,UAAU,IAAC,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,gBAAgB,oFAEvC,CACd,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,CACL,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAC3G,KAAC,gBAAgB,IAAC,IAAI,EAAE,EAAE,GAAI,GAC1B,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,SAAS,CAAC,EAAE,KAAK,GAAG,EAAE,KAAqB,EAAE;IAC3D,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IACnF,MAAM,EAAE,OAAO,EAAE,GAAG,sBAAsB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,EACJ,IAAI,EACJ,KAAK,GAAG,YAAY,EACpB,MAAM,GAAG,aAAa,EACtB,cAAc,GAAG,WAAW,EAC5B,eAAe,EACf,cAAc,EACd,MAAM,EACN,aAAa,EACb,QAAQ,EACR,YAAY,GACb,GAAG,KAAK,CAAC;IAEV,0DAA0D;IAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAA6B,CAAC;IACrD,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAEzF,oCAAoC;IACpC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,CAAC,CAAC,KAAC,OAAO,IAAC,UAAU,SAAG,CAAC,CAAC,CAAC,KAAC,wBAAwB,KAAG,CAAC;IACzE,CAAC;IAED,OAAO,CACL,KAAC,GAAG,IACF,EAAE,EAAE;YACF,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;YACjD,CAAC,EAAE,CAAC;SACL,YAED,KAAC,IAAI,IACH,EAAE,EAAE;gBACF,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;aAC7B,YAED,MAAC,WAAW,IAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,aAEvB,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,aACpC,IAAI,IAAI,KAAC,IAAI,KAAG,EAChB,MAAM,CAAC,CAAC,CAAC,KAAC,MAAM,IAAC,KAAK,EAAC,SAAS,EAAC,WAAW,EAAC,qBAAqB,EAAC,OAAO,EAAE,IAAI,GAAI,CAAC,CAAC,CAAC,KAAC,KAAK,KAAG,IAC7F,EAGL,cAAc,IAAI,CACjB,KAAC,KAAK,IAAC,QAAQ,EAAC,MAAM,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,iBAAc,wBAAwB,4DAElE,CACT,EAEA,aAAa,IAAI,KAAC,aAAa,KAAG,EAClC,QAAQ,IAAI,KAAC,QAAQ,IAAC,QAAQ,EAAC,KAAK,GAAG,EAEvC,eAAe,IAAI,KAAC,eAAe,IAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,GAAI,EAE3E,KAAC,OAAO,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YACpB,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,6BAErC,GACL,EAGV,KAAC,KAAK,IAAC,OAAO,EAAE,CAAC,YACd,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CACtB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC1B,KAAC,cAAc,IAAqB,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAA3E,QAAQ,CAAC,IAAI,CAAkE,CACrG,CAAC,CACH,CAAC,CAAC,CAAC,CACF,KAAC,UAAU,IAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,uDAEjD,CACd,GACK,EAEP,cAAc,IAAI,KAAC,cAAc,IAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,GAAI,EAExE,QAAQ,IAAI,KAAC,QAAQ,IAAC,QAAQ,EAAC,QAAQ,GAAG,EAC1C,YAAY,IAAI,KAAC,YAAY,KAAG,EAGjC,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,YACrC,KAAC,MAAM,KAAG,GACN,IACM,GACT,GACH,CACP,CAAC;AACJ,CAAC"}

package/dist/identity/ui/OAuthButton.d.ts

@@ -0,0 +1,31 @@
+import type { ReactElement } from 'react';
+import type { AuthProviderDescriptor } from '../headless/index.js';
+/**
+ * What {@link OAuthButton} takes.
+ *
+ * @stability stable
+ */
+export interface OAuthButtonProps {
+    /** The provider id the API offers, e.g. `google`. */
+    provider: string;
+    /** Starts the sign-in (the login page calls `useAuth().login(provider)`). */
+    onClick: () => void;
+}
+/**
+ * The package's own looks, used when an app registered none for the id.
+ *
+ * @stability experimental
+ */
+export declare const BUILT_IN_AUTH_PROVIDERS: Readonly<Record<string, AuthProviderDescriptor>>;
+/**
+ * One full-width sign-in button for `provider`: the look an app registered
+ * with `registerAuthProvider`, else the package's built-in look for `google`,
+ * `microsoft` and `github`, else a generic `Continue with <provider>` button.
+ *
+ * @param props - see {@link OAuthButtonProps}.
+ * @returns the button.
+ *
+ * @stability stable
+ */
+export declare function OAuthButton({ provider, onClick }: OAuthButtonProps): ReactElement;
+//# sourceMappingURL=OAuthButton.d.ts.map

package/dist/identity/ui/OAuthButton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthButton.d.ts","sourceRoot":"","sources":["../../../src/identity/ui/OAuthButton.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,OAAO,CAAC;AAGzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAuBnF,CAAC;AAEH;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,gBAAgB,GAAG,YAAY,CAmCjF"}