@marinoscar/platform-web 0.1.0-next.3 → 0.1.0-next.5

package/dist/identity/headless/api.js

@@ -0,0 +1,115 @@
+// =============================================================================
+// The identity slice's API client (issue #727, PP-6.6)
+// =============================================================================
+//
+// Every identity endpoint the packaged pages call, over the app's transport
+// (`PlatformApiClient` of `@marinoscar/platform-web/core`), so the auth
+// header, the token refresh and the app's error handling stay the app's.
+// Moved from the reference app's `services/api.ts` (users, allowlist, device
+// activation, personal access tokens) and `services/organizations.ts`; the
+// paths and query strings are byte-identical.
+//
+// NO ORG ID IS EVER SENT for `/org/members` and `/org/invites`: the API acts
+// on the organization the session's token is bound to.
+// =============================================================================
+// ---- Organizations -----------------------------------------------------------
+/**
+ * The org roles the platform ships, highest first (`BUILTIN_ORG_ROLES` of the
+ * contract).
+ *
+ * @deprecated The roles a caller may assign are the API's to say: read them
+ *   with `useRoles('org')` (`GET /api/roles?scope=org`), which also lists an
+ *   app's own roles. Kept for one release; no packaged page reads it.
+ * @stability stable
+ */
+export const ORG_ROLES = ['org_admin', 'contributor', 'viewer'];
+function query(params) {
+    const search = new URLSearchParams();
+    for (const [key, value] of Object.entries(params ?? {})) {
+        if (value !== undefined && value !== '')
+            search.set(key, String(value));
+    }
+    const text = search.toString();
+    return text ? `?${text}` : '';
+}
+/**
+ * The identity calls over `api` (the app's transport). Paths are relative to
+ * the API base, as every `PlatformApiClient` call.
+ *
+ * @param api - the app's transport (`usePlatformApi()`); keep its identity stable.
+ * @returns the client.
+ *
+ * @example
+ * ```ts
+ * const identity = createIdentityApi(usePlatformApi());
+ * const page = await identity.getUsers({ page: 1, pageSize: 10 });
+ * ```
+ *
+ * @stability experimental
+ */
+export function createIdentityApi(api) {
+    return Object.freeze({
+        getUsers(params) {
+            const searchParams = new URLSearchParams();
+            if (params?.page)
+                searchParams.set('page', String(params.page));
+            if (params?.pageSize)
+                searchParams.set('pageSize', String(params.pageSize));
+            if (params?.search)
+                searchParams.set('search', params.search);
+            if (params?.role)
+                searchParams.set('role', params.role);
+            if (params?.isActive !== undefined)
+                searchParams.set('isActive', String(params.isActive));
+            if (params?.sortBy)
+                searchParams.set('sortBy', params.sortBy);
+            if (params?.sortOrder)
+                searchParams.set('sortOrder', params.sortOrder);
+            return api.get(`/users?${searchParams}`);
+        },
+        getRoles: (scope) => api.get(`/roles${query({ scope })}`),
+        updateUser: (id, data) => api.patch(`/users/${id}`, data),
+        updateUserRoles: (id, roles) => api.put(`/users/${id}/roles`, { roleNames: roles }),
+        getAllowlist(params) {
+            const searchParams = new URLSearchParams();
+            if (params?.page)
+                searchParams.set('page', String(params.page));
+            if (params?.pageSize)
+                searchParams.set('pageSize', String(params.pageSize));
+            if (params?.search)
+                searchParams.set('search', params.search);
+            if (params?.status)
+                searchParams.set('status', params.status);
+            if (params?.sortBy)
+                searchParams.set('sortBy', params.sortBy);
+            if (params?.sortOrder)
+                searchParams.set('sortOrder', params.sortOrder);
+            return api.get(`/allowlist?${searchParams}`);
+        },
+        addToAllowlist: (email, notes) => api.post('/allowlist', { email, notes }),
+        async removeFromAllowlist(id) {
+            await api.delete(`/allowlist/${id}`);
+        },
+        getDeviceActivationInfo: (userCode) => api.get(`/auth/device/activate?code=${userCode}`),
+        authorizeDevice: (userCode, approve) => api.post('/auth/device/authorize', { userCode, approve }),
+        getPersonalAccessTokens: () => api.get('/pat'),
+        createPersonalAccessToken: (data) => api.post('/pat', data),
+        async revokePersonalAccessToken(id) {
+            await api.delete(`/pat/${id}`);
+        },
+        getOrgMembers: (params) => api.get(`/org/members${query(params)}`),
+        updateOrgMember: (userId, data) => api.patch(`/org/members/${encodeURIComponent(userId)}`, data),
+        async removeOrgMember(userId) {
+            await api.delete(`/org/members/${encodeURIComponent(userId)}`);
+        },
+        getOrgInvites: (params) => api.get(`/org/invites${query(params)}`),
+        createOrgInvite: (data) => api.post('/org/invites', data),
+        async revokeOrgInvite(id) {
+            await api.delete(`/org/invites/${encodeURIComponent(id)}`);
+        },
+        getOrganizations: (params) => api.get(`/admin/organizations${query(params)}`),
+        createOrganization: (data) => api.post('/admin/organizations', data),
+        renameOrganization: (id, name) => api.patch(`/admin/organizations/${encodeURIComponent(id)}`, { name }),
+    });
+}
+//# sourceMappingURL=api.js.map

package/dist/identity/headless/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/identity/headless/api.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,uDAAuD;AACvD,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,8CAA8C;AAC9C,EAAE;AACF,6EAA6E;AAC7E,uDAAuD;AACvD,gFAAgF;AAgShF,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAU,CAAC;AAmNzE,SAAS,KAAK,CAAC,MAA0B;IACvC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC/B,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACtD,OAAO,MAAM,CAAC,MAAM,CAAc;QAChC,QAAQ,CAAC,MAAM;YACb,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;YAC3C,IAAI,MAAM,EAAE,IAAI;gBAAE,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAChE,IAAI,MAAM,EAAE,QAAQ;gBAAE,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5E,IAAI,MAAM,EAAE,MAAM;gBAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9D,IAAI,MAAM,EAAE,IAAI;gBAAE,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1F,IAAI,MAAM,EAAE,MAAM;gBAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9D,IAAI,MAAM,EAAE,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACvE,OAAO,GAAG,CAAC,GAAG,CAAgB,UAAU,YAAY,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAmB,SAAS,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3E,UAAU,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAe,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC;QACvE,eAAe,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAe,UAAU,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACjG,YAAY,CAAC,MAAM;YACjB,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;YAC3C,IAAI,MAAM,EAAE,IAAI;gBAAE,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAChE,IAAI,MAAM,EAAE,QAAQ;gBAAE,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5E,IAAI,MAAM,EAAE,MAAM;gBAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9D,IAAI,MAAM,EAAE,MAAM;gBAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9D,IAAI,MAAM,EAAE,MAAM;gBAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9D,IAAI,MAAM,EAAE,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACvE,OAAO,GAAG,CAAC,GAAG,CAAoB,cAAc,YAAY,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAoB,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC7F,KAAK,CAAC,mBAAmB,CAAC,EAAE;YAC1B,MAAM,GAAG,CAAC,MAAM,CAAO,cAAc,EAAE,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,uBAAuB,EAAE,CAAC,QAAQ,EAAE,EAAE,CACpC,GAAG,CAAC,GAAG,CAAuB,8BAA8B,QAAQ,EAAE,CAAC;QACzE,eAAe,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CACrC,GAAG,CAAC,IAAI,CAA8B,wBAAwB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QACxF,uBAAuB,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAwB,MAAM,CAAC;QACrE,yBAAyB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAqB,MAAM,EAAE,IAAI,CAAC;QAC/E,KAAK,CAAC,yBAAyB,CAAC,EAAE;YAChC,MAAM,GAAG,CAAC,MAAM,CAAO,QAAQ,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAuB,eAAe,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACxF,eAAe,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAY,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;QAC3G,KAAK,CAAC,eAAe,CAAC,MAAM;YAC1B,MAAM,GAAG,CAAC,MAAM,CAAO,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAuB,eAAe,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACxF,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAY,cAAc,EAAE,IAAI,CAAC;QACpE,KAAK,CAAC,eAAe,CAAC,EAAE;YACtB,MAAM,GAAG,CAAC,MAAM,CAAO,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAA0B,uBAAuB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACtG,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAe,sBAAsB,EAAE,IAAI,CAAC;QAClF,kBAAkB,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAC/B,GAAG,CAAC,KAAK,CAAe,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KACtF,CAAC,CAAC;AACL,CAAC"}

package/dist/identity/headless/auth-context.d.ts

@@ -0,0 +1,80 @@
+import type { ReactElement, ReactNode } from 'react';
+import type { AuthContextValue, AuthSessionClient } from './types.js';
+/**
+ * The auth context object. Read it with {@link useAuth}; a test or a custom
+ * shell may provide a value directly (`<AuthContext.Provider value={...}>`).
+ * `null` outside an {@link AuthProvider}.
+ *
+ * @stability stable
+ */
+export declare const AuthContext: import("react").Context<AuthContextValue | null>;
+/**
+ * What {@link AuthProvider} takes.
+ *
+ * @stability stable
+ */
+export interface AuthProviderProps {
+    /** The app's HTTP client (a `PlatformHttpClient`); keep its identity stable. */
+    client: AuthSessionClient;
+    /**
+     * Work to finish while the access token is still valid, before
+     * `POST /auth/logout` (the reference app drops this device's push
+     * subscription). Should not throw; an error is logged and sign-out continues.
+     */
+    onBeforeLogout?: () => Promise<unknown>;
+    /**
+     * The login route, where sign-out lands.
+     *
+     * @defaultValue `'/login'`
+     */
+    loginPath?: string;
+    /**
+     * The sign-in callback route: the boot-time session probe is skipped there
+     * (the callback page sets the token from the URL).
+     *
+     * @defaultValue `'/auth/callback'`
+     */
+    callbackPath?: string;
+    /** The routed tree. */
+    children: ReactNode;
+}
+/**
+ * Holds the session for everything below it: probes for an existing session
+ * on mount (one refresh from the HttpOnly cookie), reads the user, lists the
+ * sign-in providers, and clears the session when the client reports that the
+ * server refused to refresh it. Mount it once, inside the router.
+ *
+ * @param props - see {@link AuthProviderProps}.
+ * @returns the provider element.
+ *
+ * @example
+ * ```tsx
+ * <AuthProvider client={api} onBeforeLogout={removePushSubscription}>
+ *   <AppRoutes />
+ * </AuthProvider>
+ * ```
+ *
+ * @extensionPoint component
+ * @stability stable
+ */
+export declare function AuthProvider({ client, onBeforeLogout, loginPath, callbackPath, children, }: AuthProviderProps): ReactElement;
+/**
+ * The auth context.
+ *
+ * @returns the session, the providers and the actions.
+ * @throws Error outside an {@link AuthProvider}.
+ *
+ * @extensionPoint hook
+ * @stability stable
+ */
+export declare function useAuth(): AuthContextValue;
+/**
+ * The auth context, or `null` outside an {@link AuthProvider}. For chrome that
+ * must render (and fail closed) without one.
+ *
+ * @returns the context value, or `null`.
+ *
+ * @stability stable
+ */
+export declare function useOptionalAuth(): AuthContextValue | null;
+//# sourceMappingURL=auth-context.d.ts.map

package/dist/identity/headless/auth-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.d.ts","sourceRoot":"","sources":["../../../src/identity/headless/auth-context.tsx"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAMrD,OAAO,KAAK,EACV,gBAAgB,EAEhB,iBAAiB,EAIlB,MAAM,YAAY,CAAC;AAUpB;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,kDAA+C,CAAC;AAGxE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uBAAuB;IACvB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,cAAc,EACd,SAAoB,EACpB,YAA+B,EAC/B,QAAQ,GACT,EAAE,iBAAiB,GAAG,YAAY,CAqKlC;AASD;;;;;;;;GAQG;AACH,wBAAgB,OAAO,IAAI,gBAAgB,CAM1C;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,IAAI,gBAAgB,GAAG,IAAI,CAEzD"}

package/dist/identity/headless/auth-context.js

@@ -0,0 +1,235 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// =============================================================================
+// The auth context (issue #727, PP-6.6)
+// =============================================================================
+//
+// Moved from the reference app's `contexts/AuthContext.tsx`. The session lives
+// in the app's HTTP client (`client` prop: the access-token holder and its
+// refresh); this provider asks it on boot whether a session exists, reads
+// `GET /auth/me`, and exposes the user, the providers and the actions. What is
+// app-specific is a prop: the work to do before signing out (the reference
+// app drops this device's push subscription) and the login and callback paths.
+//
+// The browser only carries the API's answers: `switchOrg` asks the API for a
+// token bound to another organization, and permissions follow the new
+// `/auth/me`. Nothing here decides access.
+// =============================================================================
+import { createContext, useCallback, useContext, useEffect, useRef, useState } from 'react';
+import { useLocation, useNavigate } from 'react-router-dom';
+import { getRegisteredAuthProvider } from './auth-provider-registry.js';
+import { rememberAuthProvider } from './last-provider.js';
+const NO_MEMBERSHIPS = [];
+/**
+ * The auth context object. Read it with {@link useAuth}; a test or a custom
+ * shell may provide a value directly (`<AuthContext.Provider value={...}>`).
+ * `null` outside an {@link AuthProvider}.
+ *
+ * @stability stable
+ */
+export const AuthContext = createContext(null);
+AuthContext.displayName = 'AuthContext';
+/**
+ * Holds the session for everything below it: probes for an existing session
+ * on mount (one refresh from the HttpOnly cookie), reads the user, lists the
+ * sign-in providers, and clears the session when the client reports that the
+ * server refused to refresh it. Mount it once, inside the router.
+ *
+ * @param props - see {@link AuthProviderProps}.
+ * @returns the provider element.
+ *
+ * @example
+ * ```tsx
+ * <AuthProvider client={api} onBeforeLogout={removePushSubscription}>
+ *   <AppRoutes />
+ * </AuthProvider>
+ * ```
+ *
+ * @extensionPoint component
+ * @stability stable
+ */
+export function AuthProvider({ client, onBeforeLogout, loginPath = '/login', callbackPath = '/auth/callback', children, }) {
+    const [user, setUser] = useState(null);
+    const [isLoading, setIsLoading] = useState(true);
+    const [providers, setProviders] = useState([]);
+    const [sessionExpired, setSessionExpired] = useState(false);
+    const navigate = useNavigate();
+    const location = useLocation();
+    const initRef = useRef(false);
+    // Fetch auth providers on mount
+    useEffect(() => {
+        const fetchProviders = async () => {
+            try {
+                const response = await client.get('/auth/providers', {
+                    skipAuth: true,
+                });
+                setProviders(response.providers);
+            }
+            catch (error) {
+                console.error('Failed to fetch auth providers:', error);
+            }
+        };
+        void fetchProviders();
+    }, [client]);
+    // When a refresh the client attempted while holding an access token is
+    // refused (401/403), the session is gone for good: clear it so `RequireAuth`
+    // sends the user to the login page (with `from`, so they come back) instead
+    // of every widget rendering its own "Unauthorized". The client only fires
+    // this for a page that HELD a token, so the boot-time probe on the login
+    // page or a public page never triggers it, and once the token is cleared
+    // here it cannot fire again until the next sign-in: no loop.
+    useEffect(() => {
+        return client.onSessionExpired(() => {
+            client.setAccessToken(null);
+            setUser(null);
+            setSessionExpired(true);
+        });
+    }, [client]);
+    const fetchUser = useCallback(async () => {
+        try {
+            const userData = await client.get('/auth/me');
+            setUser(userData);
+            setSessionExpired(false);
+        }
+        catch (error) {
+            if (isUnauthorized(error)) {
+                setUser(null);
+                client.setAccessToken(null);
+            }
+            throw error;
+        }
+    }, [client]);
+    // Check for an existing session on mount (runs only once)
+    useEffect(() => {
+        // Skip if already initialized or on the auth callback page
+        // (the callback page sets the token directly from URL params)
+        if (initRef.current || location.pathname === callbackPath) {
+            setIsLoading(false);
+            return;
+        }
+        initRef.current = true;
+        const initAuth = async () => {
+            try {
+                // Try to refresh the token (uses the httpOnly cookie)
+                const refreshed = await client.refreshToken();
+                if (refreshed) {
+                    await fetchUser();
+                }
+            }
+            catch (error) {
+                console.error('Auth initialization failed:', error);
+            }
+            finally {
+                setIsLoading(false);
+            }
+        };
+        void initAuth();
+        // `fetchUser` and `client` are stable for a stable client; the probe runs once.
+    }, [location.pathname]);
+    const login = useCallback((provider, options) => {
+        // Store the return URL for the redirect after login (including query params)
+        const fromLocation = location.state?.from;
+        if (fromLocation) {
+            sessionStorage.setItem('auth_return_url', `${fromLocation.pathname}${fromLocation.search || ''}`);
+        }
+        else if (location.pathname !== callbackPath || sessionStorage.getItem('auth_return_url') === null) {
+            sessionStorage.setItem('auth_return_url', '/');
+        }
+        // else: retrying from the sign-in error screen (the callback route),
+        // which carries no `from` state. Keep the return URL stored by the
+        // original attempt instead of resetting it to '/'.
+        // Remember which provider started this sign-in, so the callback page's
+        // retry buttons restart the same one (the API's redirect names none).
+        rememberAuthProvider(provider);
+        // A provider that owns its flow (`mode: 'custom'`): the registered look
+        // starts it; there is no redirect route to navigate to.
+        if (providers.find((candidate) => candidate.name === provider)?.mode === 'custom') {
+            const start = getRegisteredAuthProvider(provider)?.start;
+            if (start) {
+                void Promise.resolve(start()).catch((error) => console.error('Sign-in start failed:', error));
+            }
+            else {
+                console.error(`The sign-in provider "${provider}" is custom but no start() is registered for it.`);
+            }
+            return;
+        }
+        // Redirect to the OAuth provider
+        const query = options?.selectAccount ? '?select_account=1' : '';
+        window.location.href = `/api/auth/${provider}${query}`;
+    }, [location.state, location.pathname, callbackPath, providers]);
+    const logout = useCallback(async () => {
+        try {
+            // Finish what needs the access token (the reference app drops this
+            // device's push subscription) while it is still valid.
+            if (onBeforeLogout)
+                await onBeforeLogout();
+            await client.post('/auth/logout');
+        }
+        catch (error) {
+            console.error('Logout error:', error);
+        }
+        finally {
+            setUser(null);
+            setSessionExpired(false);
+            client.setAccessToken(null);
+            navigate(loginPath);
+        }
+    }, [client, navigate, onBeforeLogout, loginPath]);
+    const refreshUser = useCallback(async () => {
+        await fetchUser();
+    }, [fetchUser]);
+    const setAccessToken = useCallback((token) => client.setAccessToken(token), [client]);
+    const switchOrg = useCallback(async (orgId) => {
+        // The API decides whether the caller may act in `orgId`; the browser
+        // only carries the answer (a new token bound to it) and re-reads `me`.
+        const tokens = await client.post('/auth/switch-org', { orgId });
+        client.setAccessToken(tokens.accessToken);
+        await fetchUser();
+    }, [client, fetchUser]);
+    const value = {
+        user,
+        isLoading,
+        isAuthenticated: !!user,
+        providers,
+        sessionExpired,
+        login,
+        logout,
+        refreshUser,
+        setAccessToken,
+        activeOrg: user?.activeOrg ?? null,
+        memberships: user?.memberships ?? NO_MEMBERSHIPS,
+        switchOrg,
+    };
+    return _jsx(AuthContext.Provider, { value: value, children: children });
+}
+/** A 401 from the API, from any client whose errors carry a numeric `status`. */
+function isUnauthorized(error) {
+    return (error !== null && typeof error === 'object' && error.status === 401);
+}
+/**
+ * The auth context.
+ *
+ * @returns the session, the providers and the actions.
+ * @throws Error outside an {@link AuthProvider}.
+ *
+ * @extensionPoint hook
+ * @stability stable
+ */
+export function useAuth() {
+    const context = useContext(AuthContext);
+    if (!context) {
+        throw new Error('useAuth must be used within an AuthProvider');
+    }
+    return context;
+}
+/**
+ * The auth context, or `null` outside an {@link AuthProvider}. For chrome that
+ * must render (and fail closed) without one.
+ *
+ * @returns the context value, or `null`.
+ *
+ * @stability stable
+ */
+export function useOptionalAuth() {
+    return useContext(AuthContext);
+}
+//# sourceMappingURL=auth-context.js.map

package/dist/identity/headless/auth-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.js","sourceRoot":"","sources":["../../../src/identity/headless/auth-context.tsx"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,wCAAwC;AACxC,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,sEAAsE;AACtE,2CAA2C;AAC3C,gFAAgF;AAEhF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE5F,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAiB1D,MAAM,cAAc,GAA2B,EAAE,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAA0B,IAAI,CAAC,CAAC;AACxE,WAAW,CAAC,WAAW,GAAG,aAAa,CAAC;AAiCxC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,MAAM,EACN,cAAc,EACd,SAAS,GAAG,QAAQ,EACpB,YAAY,GAAG,gBAAgB,EAC/B,QAAQ,GACU;IAClB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAkB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAqB,EAAE,CAAC,CAAC;IACnE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE9B,gCAAgC;IAChC,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAoC,iBAAiB,EAAE;oBACtF,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;gBACH,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC;QACF,KAAK,cAAc,EAAE,CAAC;IACxB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,uEAAuE;IACvE,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,6DAA6D;IAC7D,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE;YAClC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAW,UAAU,CAAC,CAAC;YACxD,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClB,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,0DAA0D;IAC1D,SAAS,CAAC,GAAG,EAAE;QACb,2DAA2D;QAC3D,8DAA8D;QAC9D,IAAI,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1D,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QAEvB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,sDAAsD;gBACtD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC9C,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,SAAS,EAAE,CAAC;gBACpB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC;QACF,KAAK,QAAQ,EAAE,CAAC;QAChB,gFAAgF;IAClF,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAExB,MAAM,KAAK,GAAG,WAAW,CACvB,CAAC,QAAgB,EAAE,OAAsB,EAAE,EAAE;QAC3C,6EAA6E;QAC7E,MAAM,YAAY,GAAI,QAAQ,CAAC,KAAiE,EAAE,IAAI,CAAC;QACvG,IAAI,YAAY,EAAE,CAAC;YACjB,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,YAAY,CAAC,QAAQ,GAAG,YAAY,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACpG,CAAC;aAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,IAAI,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC;YACpG,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,qEAAqE;QACrE,mEAAmE;QACnE,mDAAmD;QAEnD,uEAAuE;QACvE,sEAAsE;QACtE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAE/B,wEAAwE;QACxE,wDAAwD;QACxD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClF,MAAM,KAAK,GAAG,yBAAyB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC,CAAC;YACzG,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,yBAAyB,QAAQ,kDAAkD,CAAC,CAAC;YACrG,CAAC;YACD,OAAO;QACT,CAAC;QAED,iCAAiC;QACjC,MAAM,KAAK,GAAG,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,aAAa,QAAQ,GAAG,KAAK,EAAE,CAAC;IACzD,CAAC,EACD,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,CAC7D,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC;YACH,mEAAmE;YACnE,uDAAuD;YACvD,IAAI,cAAc;gBAAE,MAAM,cAAc,EAAE,CAAC;YAC3C,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IAElD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB,MAAM,cAAc,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAErG,MAAM,SAAS,GAAG,WAAW,CAC3B,KAAK,EAAE,KAAa,EAAE,EAAE;QACtB,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAoB,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC,EACD,CAAC,MAAM,EAAE,SAAS,CAAC,CACpB,CAAC;IAEF,MAAM,KAAK,GAAqB;QAC9B,IAAI;QACJ,SAAS;QACT,eAAe,EAAE,CAAC,CAAC,IAAI;QACvB,SAAS;QACT,cAAc;QACd,KAAK;QACL,MAAM;QACN,WAAW;QACX,cAAc;QACd,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;QAClC,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,cAAc;QAChD,SAAS;KACV,CAAC;IAEF,OAAO,KAAC,WAAW,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAwB,CAAC;AAC/E,CAAC;AAED,iFAAiF;AACjF,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAA8B,CAAC,MAAM,KAAK,GAAG,CAC9F,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO;IACrB,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC"}

package/dist/identity/headless/auth-provider-registry.d.ts

@@ -0,0 +1,67 @@
+import type { ComponentType } from 'react';
+/**
+ * How the login page's button looks for one sign-in provider.
+ *
+ * @stability experimental
+ */
+export interface AuthProviderDescriptor {
+    /** The provider id, as `GET /api/auth/providers` names it (matched case-insensitively). */
+    id: string;
+    /** The button text, e.g. `Continue with Google`. */
+    label: string;
+    /** The button's start icon. */
+    Icon?: ComponentType;
+    /** The button background. Default the theme's primary blue (`#1976d2`). */
+    color?: string;
+    /** The button text colour. Default `#ffffff`. */
+    textColor?: string;
+    /** A CSS border for the button (Google's `1px solid #dadce0`). Default none. */
+    border?: string;
+    /**
+     * Starts the sign-in of a provider the API lists with `mode: 'custom'` (a
+     * popup, a native SDK, a form): called by `useAuth().login(id)` after the
+     * return URL was stored, instead of the redirect to `/api/auth/<id>`. The
+     * flow must end by handing the access token to the callback route
+     * (`/auth/callback?token=...`) or by calling `setAccessToken` and
+     * `refreshUser`. Ignored for a redirect provider.
+     */
+    start?: () => void | Promise<void>;
+}
+/**
+ * Register the look of a sign-in provider's button. Call it once, at app
+ * start-up, before the login page renders. A provider the API does not offer
+ * never renders, whatever is registered.
+ *
+ * @param descriptor - the provider id, label and optional icon and colours.
+ * @returns a function that removes the registration (tests).
+ * @throws Error when an app registered the same id already.
+ *
+ * @example
+ * ```ts
+ * registerAuthProvider({ id: 'oidc', label: 'Continue with SSO', Icon: KeyIcon });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare function registerAuthProvider(descriptor: AuthProviderDescriptor): () => void;
+/**
+ * The look an app registered for `id` (case-insensitive), or `undefined`; the
+ * login button then falls back to the package's built-in look for `google`,
+ * `microsoft` and `github`, and to a generic `Continue with <id>` button.
+ *
+ * @param id - the provider id.
+ * @returns the registered descriptor, if any.
+ *
+ * @stability experimental
+ */
+export declare function getRegisteredAuthProvider(id: string): AuthProviderDescriptor | undefined;
+/**
+ * Every provider look an app registered, in registration order.
+ *
+ * @returns the registered descriptors.
+ *
+ * @stability experimental
+ */
+export declare function listRegisteredAuthProviders(): readonly AuthProviderDescriptor[];
+//# sourceMappingURL=auth-provider-registry.d.ts.map

package/dist/identity/headless/auth-provider-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider-registry.d.ts","sourceRoot":"","sources":["../../../src/identity/headless/auth-provider-registry.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAE3C;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,2FAA2F;IAC3F,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,sBAAsB,GAAG,MAAM,IAAI,CAUnF;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAExF;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,IAAI,SAAS,sBAAsB,EAAE,CAE/E"}

package/dist/identity/headless/auth-provider-registry.js

@@ -0,0 +1,60 @@
+// The web sign-in provider registry (issue #727, PP-6.6): how a sign-in button
+// looks for each provider id the API offers (`GET /api/auth/providers`). The
+// API side registers the strategy (`registerAuthProvider` of
+// `@marinoscar/platform-api/identity`); this one registers the button. The
+// package ships the look of `google`, `microsoft` and `github`; an app
+// registers any other provider, or overrides a built-in one, once at start-up.
+const registered = new Map();
+/**
+ * Register the look of a sign-in provider's button. Call it once, at app
+ * start-up, before the login page renders. A provider the API does not offer
+ * never renders, whatever is registered.
+ *
+ * @param descriptor - the provider id, label and optional icon and colours.
+ * @returns a function that removes the registration (tests).
+ * @throws Error when an app registered the same id already.
+ *
+ * @example
+ * ```ts
+ * registerAuthProvider({ id: 'oidc', label: 'Continue with SSO', Icon: KeyIcon });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export function registerAuthProvider(descriptor) {
+    const id = descriptor.id.toLowerCase();
+    if (registered.has(id)) {
+        throw new Error(`registerAuthProvider: the sign-in provider "${id}" is already registered.`);
+    }
+    const entry = Object.freeze({ ...descriptor, id });
+    registered.set(id, entry);
+    return () => {
+        if (registered.get(id) === entry)
+            registered.delete(id);
+    };
+}
+/**
+ * The look an app registered for `id` (case-insensitive), or `undefined`; the
+ * login button then falls back to the package's built-in look for `google`,
+ * `microsoft` and `github`, and to a generic `Continue with <id>` button.
+ *
+ * @param id - the provider id.
+ * @returns the registered descriptor, if any.
+ *
+ * @stability experimental
+ */
+export function getRegisteredAuthProvider(id) {
+    return registered.get(id.toLowerCase());
+}
+/**
+ * Every provider look an app registered, in registration order.
+ *
+ * @returns the registered descriptors.
+ *
+ * @stability experimental
+ */
+export function listRegisteredAuthProviders() {
+    return [...registered.values()];
+}
+//# sourceMappingURL=auth-provider-registry.js.map

package/dist/identity/headless/auth-provider-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider-registry.js","sourceRoot":"","sources":["../../../src/identity/headless/auth-provider-registry.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,6EAA6E;AAC7E,6DAA6D;AAC7D,2EAA2E;AAC3E,uEAAuE;AACvE,+EAA+E;AAiC/E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkC,CAAC;AAE7D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkC;IACrE,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,EAAE,0BAA0B,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,GAAG,EAAE;QACV,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK;YAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,EAAU;IAClD,OAAO,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AAClC,CAAC"}