@mesob/auth-react 0.3.5 → 0.4.0

package/dist/pages/profile/layout.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/pages/profile/_components/profile-sidebar.tsx","../../../src/provider.tsx","../../../src/utils/cookie.ts","../../../src/pages/iam/shared/navigation.tsx","../../../src/pages/profile/layout.tsx"],"sourcesContent":["'use client';\n\nimport { Avatar, AvatarFallback, AvatarImage } from '@mesob/ui/components';\nimport { cn } from '@mesob/ui/lib/utils';\nimport { IconLock, IconUser } from '@tabler/icons-react';\nimport { useMemo } from 'react';\nimport { useSession } from '../../../provider';\nimport { AppLink } from '../../iam/shared/navigation';\n\nconst profileNavItems = [\n  {\n    title: 'Account',\n    href: '/profile/account',\n    icon: IconUser,\n    caption: 'Identity and contact',\n  },\n  {\n    title: 'Security',\n    href: '/profile/security',\n    icon: IconLock,\n    caption: 'Password and recovery',\n  },\n];\n\nexport function ProfileSidebar() {\n  const { user } = useSession();\n  const pathname = useMemo(() => {\n    if (typeof window === 'undefined') {\n      return '';\n    }\n    return window.location.pathname;\n  }, []);\n\n  const initials =\n    user?.fullName\n      ?.split(' ')\n      .map((part) => part[0])\n      .join('')\n      .toUpperCase()\n      .slice(0, 2) || 'U';\n\n  return (\n    <aside className=\"w-full border-b border-border/60 bg-gradient-to-b from-muted/30 via-background to-background lg:w-80 lg:border-b-0 lg:border-r\">\n      <div className=\"flex h-full flex-col gap-6 p-4 lg:p-5\">\n        <div className=\"rounded-[1.75rem] border border-border/60 bg-background/85 p-5 shadow-sm backdrop-blur\">\n          <div className=\"flex items-center gap-4\">\n            <Avatar className=\"h-12 w-12 ring-4 ring-primary/10\">\n              <AvatarImage src={user?.image || ''} alt={user?.fullName || ''} />\n              <AvatarFallback>{initials}</AvatarFallback>\n            </Avatar>\n            <div className=\"min-w-0\">\n              <div className=\"truncate text-sm font-medium text-muted-foreground\">\n                Profile workspace\n              </div>\n              <div className=\"truncate text-base font-semibold\">\n                {user?.fullName ?? 'Account'}\n              </div>\n            </div>\n          </div>\n        </div>\n\n        <nav className=\"grid gap-2\">\n          {profileNavItems.map((item) => {\n            const Icon = item.icon;\n            const isActive = pathname === item.href;\n\n            return (\n              <AppLink\n                key={item.href}\n                href={item.href}\n                className={cn(\n                  'group rounded-[1.5rem] border px-4 py-4 transition-all',\n                  isActive\n                    ? 'border-primary/30 bg-primary/[0.08] shadow-sm'\n                    : 'border-border/60 bg-background/70 hover:border-primary/20 hover:bg-muted/30',\n                )}\n              >\n                <div className=\"flex items-start gap-3\">\n                  <div\n                    className={cn(\n                      'rounded-2xl p-2 transition-colors',\n                      isActive\n                        ? 'bg-primary text-primary-foreground'\n                        : 'bg-muted text-muted-foreground group-hover:bg-primary/10 group-hover:text-foreground',\n                    )}\n                  >\n                    <Icon className=\"size-4\" />\n                  </div>\n                  <div className=\"min-w-0\">\n                    <div className=\"font-medium\">{item.title}</div>\n                    <div className=\"text-sm text-muted-foreground\">\n                      {item.caption}\n                    </div>\n                  </div>\n                </div>\n              </AppLink>\n            );\n          })}\n        </nav>\n      </div>\n    </aside>\n  );\n}\n","'use client';\n\nimport { QueryClient, QueryClientProvider } from '@tanstack/react-query';\nimport { deepmerge } from 'deepmerge-ts';\nimport createFetchClient from 'openapi-fetch';\nimport createClient from 'openapi-react-query';\nimport type { ReactNode } from 'react';\nimport { createContext, useContext, useMemo, useState } from 'react';\nimport type { paths } from './data/openapi';\nimport { createTranslator } from './lib/translations';\nimport {\n  type AuthClientConfig,\n  type AuthResponse,\n  defaultAuthClientConfig,\n  type Session,\n  type User,\n} from './types';\nimport { getSessionCookieName } from './utils/cookie';\nimport { createCustomFetch } from './utils/custom-fetch';\n\n// biome-ignore lint/suspicious/noExplicitAny: OpenAPI hooks type\ntype OpenApiHooks = any;\n\n// --- Utility: Check if running on server ---\nfunction isServer(): boolean {\n  return typeof document === 'undefined';\n}\n\n/**\n * @deprecated Cookie is httpOnly and cannot be read client-side.\n * Use `useSession().isAuthenticated` instead.\n * This function always returns false on client.\n */\nexport function hasAuthCookie(_cookieName: string): boolean {\n  // Cookie is httpOnly, can't check client-side\n  // Always return false - use useSession() for auth status\n  return false;\n}\n\n// --- Types ---\nexport type AuthStatus = 'loading' | 'authenticated' | 'unauthenticated';\n\ntype AuthState = {\n  user: User | null;\n  session: Session | null;\n  status: AuthStatus;\n  error: Error | null;\n};\n\ntype SessionContextValue = AuthState & {\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  refresh: () => Promise<void>;\n  signOut: () => Promise<void>;\n};\n\ntype ApiContextValue = {\n  hooks: OpenApiHooks;\n  setAuth: (auth: AuthResponse) => void;\n  clearAuth: () => void;\n  refresh: () => Promise<void>;\n};\n\ntype ConfigContextValue = {\n  config: AuthClientConfig;\n  cookieName: string;\n  t: (key: string, params?: Record<string, string | number>) => string;\n};\n\nconst SessionContext = createContext<SessionContextValue | null>(null);\nconst ApiContext = createContext<ApiContextValue | null>(null);\nconst ConfigContext = createContext<ConfigContextValue | null>(null);\n\nconst queryClient = new QueryClient({\n  defaultOptions: {\n    queries: {\n      refetchOnWindowFocus: false,\n    },\n  },\n});\n\n// --- Hooks ---\n\n/**\n * Get session state including user, session, and auth status.\n * - `status`: 'loading' | 'authenticated' | 'unauthenticated'\n * - `isLoading`: true while fetching session\n * - `isAuthenticated`: true if user and session exist\n */\nexport function useSession(): SessionContextValue {\n  const context = useContext(SessionContext);\n  if (!context) {\n    throw new Error('useSession must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useApi(): ApiContextValue {\n  const context = useContext(ApiContext);\n  if (!context) {\n    throw new Error('useApi must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useConfig(): ConfigContextValue {\n  const context = useContext(ConfigContext);\n  if (!context) {\n    throw new Error('useConfig must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\n/**\n * @deprecated Cookie is httpOnly, can't be checked client-side.\n * Use `useSession().isAuthenticated` instead.\n */\nexport function useHasAuthCookie(): boolean {\n  const { status } = useSession();\n  return status === 'authenticated' || status === 'loading';\n}\n\n// --- Provider ---\n\ntype MesobAuthProviderProps = {\n  config: AuthClientConfig;\n  children: ReactNode;\n};\n\nexport function MesobAuthProvider({\n  config,\n  children,\n}: MesobAuthProviderProps) {\n  const mergedConfig = useMemo(\n    () =>\n      deepmerge(\n        { ...defaultAuthClientConfig } as Partial<AuthClientConfig>,\n        config,\n      ) as AuthClientConfig,\n    [config],\n  );\n\n  const api = useMemo(\n    () =>\n      createFetchClient<paths>({\n        baseUrl: mergedConfig.baseURL,\n        fetch: createCustomFetch(mergedConfig),\n      }),\n    [mergedConfig],\n  );\n\n  const hooks = useMemo(() => createClient(api), [api]);\n  const cookieName = useMemo(\n    () => getSessionCookieName(mergedConfig),\n    [mergedConfig],\n  );\n\n  return (\n    <QueryClientProvider client={queryClient}>\n      <AuthStateProvider\n        config={mergedConfig}\n        hooks={hooks}\n        cookieName={cookieName}\n      >\n        {children}\n      </AuthStateProvider>\n    </QueryClientProvider>\n  );\n}\n\ntype AuthStateProviderProps = {\n  config: AuthClientConfig;\n  hooks: OpenApiHooks;\n  cookieName: string;\n  children: ReactNode;\n};\n\nfunction AuthStateProvider({\n  config,\n  hooks,\n  cookieName,\n  children,\n}: AuthStateProviderProps) {\n  // Manual override for sign-out / sign-in\n  const [override, setOverride] = useState<AuthState | null>(null);\n\n  // Always fetch session - cookie is httpOnly, can't check client-side\n  // Server will read the cookie and return user/session if valid\n  const {\n    data: sessionData,\n    isLoading,\n    isFetched,\n    error: sessionError,\n    refetch,\n  } = hooks.useQuery(\n    'get',\n    '/session',\n    {},\n    {\n      enabled: !(override || isServer()),\n      refetchOnMount: false,\n      refetchOnWindowFocus: false,\n      refetchOnReconnect: false,\n      retry: false,\n      gcTime: 0,\n      staleTime: 0,\n    },\n  );\n\n  // Derive state directly - no useEffect\n  const user = override?.user ?? sessionData?.user ?? null;\n  const session = override?.session ?? sessionData?.session ?? null;\n  const error = override?.error ?? (sessionError as Error | null);\n\n  // Check error status code\n  const errorStatus = (() => {\n    if (!sessionError) {\n      return null;\n    }\n    const err = sessionError as { status?: number };\n    return err.status ?? null;\n  })();\n\n  // Check if error is a network/connection error\n  const isNetworkError = (() => {\n    if (!sessionError) {\n      return false;\n    }\n    const error = sessionError as Error & { cause?: unknown; data?: unknown };\n    const errorMessage =\n      error.message || String(error) || JSON.stringify(error);\n    // Network errors: TypeError, DOMException, or fetch failures\n    if (\n      error instanceof TypeError ||\n      error instanceof DOMException ||\n      error.name === 'TypeError' ||\n      errorMessage.includes('Failed to fetch') ||\n      errorMessage.includes('ERR_CONNECTION_REFUSED') ||\n      errorMessage.includes('NetworkError') ||\n      errorMessage.includes('Network request failed') ||\n      errorMessage.includes('fetch failed')\n    ) {\n      return true;\n    }\n    // Check error cause\n    if (error.cause) {\n      const causeStr = String(error.cause);\n      if (\n        causeStr.includes('Failed to fetch') ||\n        causeStr.includes('ERR_CONNECTION_REFUSED') ||\n        causeStr.includes('NetworkError')\n      ) {\n        return true;\n      }\n    }\n    return false;\n  })();\n\n  // Compute status\n  // biome-ignore lint: Status determination requires multiple checks\n  const status: AuthStatus = (() => {\n    if (override) {\n      return override.status;\n    }\n    if (isServer()) {\n      return 'loading';\n    }\n    if (user && session) {\n      return 'authenticated';\n    }\n    // Check for network errors or auth errors first - allow auth page to show\n    if (isNetworkError || errorStatus === 401) {\n      return 'unauthenticated';\n    }\n    // If we have an error but it's not a network error, still check loading state\n    if (sessionError && !isNetworkError && errorStatus !== 401) {\n      if (errorStatus && errorStatus >= 500) {\n        return 'authenticated';\n      }\n      // Other errors mean unauthenticated\n      if (isFetched) {\n        return 'unauthenticated';\n      }\n    }\n    if (isLoading || !isFetched) {\n      return 'loading';\n    }\n    if (isFetched && !user && !session) {\n      return 'unauthenticated';\n    }\n    return 'unauthenticated';\n  })();\n\n  const signOutMutation = hooks.useMutation('post', '/sign-out');\n  const t = createTranslator(config.messages || {});\n\n  const setAuth = (auth: AuthResponse) => {\n    setOverride({\n      user: auth.user,\n      session: auth.session,\n      status: 'authenticated',\n      error: null,\n    });\n  };\n\n  const clearAuth = () => {\n    setOverride({\n      user: null,\n      session: null,\n      status: 'unauthenticated',\n      error: null,\n    });\n  };\n\n  const refresh = async () => {\n    setOverride(null);\n    await refetch();\n  };\n\n  const signOut = async () => {\n    try {\n      await signOutMutation.mutateAsync({});\n    } finally {\n      clearAuth();\n    }\n  };\n\n  return (\n    <ConfigContext.Provider value={{ config, cookieName, t }}>\n      <ApiContext.Provider value={{ hooks, setAuth, clearAuth, refresh }}>\n        <SessionContext.Provider\n          value={{\n            user,\n            session,\n            status,\n            error,\n            isLoading: status === 'loading',\n            isAuthenticated: status === 'authenticated',\n            refresh,\n            signOut,\n          }}\n        >\n          {children}\n        </SessionContext.Provider>\n      </ApiContext.Provider>\n    </ConfigContext.Provider>\n  );\n}\n","import type { AuthClientConfig } from '../types';\n\nconst isProduction =\n  typeof process !== 'undefined' && process.env.NODE_ENV === 'production';\n\nexport const getSessionCookieName = (config: AuthClientConfig): string => {\n  const prefix = config.cookiePrefix || '';\n  const baseName = 'session_token';\n  if (prefix) {\n    return `${prefix}_${baseName}`;\n  }\n  return isProduction ? '__Host-session_token' : baseName;\n};\n","'use client';\n\nimport { useMesob } from '@mesob/ui/providers';\nimport type { ReactNode } from 'react';\nimport { useConfig } from '../../../provider';\n\ntype AppLinkProps = React.ComponentProps<'a'> & {\n  href: string;\n  children: ReactNode;\n};\n\nexport function AppLink({ href, children, ...props }: AppLinkProps) {\n  const mesob = useMesob();\n  const Link = mesob?.linkComponent ?? mesob?.navigation?.Link;\n  const locale = mesob?.locale;\n\n  if (Link) {\n    return (\n      <Link href={href} {...(locale ? ({ locale } as object) : {})} {...props}>\n        {children}\n      </Link>\n    );\n  }\n\n  return (\n    <a href={href} {...props}>\n      {children}\n    </a>\n  );\n}\n\nexport function useNavigate() {\n  const { config } = useConfig();\n\n  return (href: string) => {\n    if (config.navigation?.onNavigate) {\n      config.navigation.onNavigate(href);\n      return;\n    }\n\n    if (typeof window !== 'undefined') {\n      window.location.href = href;\n    }\n  };\n}\n","'use client';\n\nimport type { ReactNode } from 'react';\nimport { ProfileSidebar } from './_components/profile-sidebar';\n\nexport default function ProfileLayout({ children }: { children: ReactNode }) {\n  return (\n    <div className=\"flex flex-1 flex-col overflow-hidden lg:flex-row\">\n      <ProfileSidebar />\n      <div className=\"flex min-w-0 flex-1 flex-col overflow-hidden bg-[linear-gradient(180deg,hsl(var(--muted)/0.18),transparent_18rem)]\">\n        {children}\n      </div>\n    </div>\n  );\n}\n"],"mappings":";;;AAEA,SAAS,QAAQ,gBAAgB,mBAAmB;AACpD,SAAS,UAAU;AACnB,SAAS,UAAU,gBAAgB;AACnC,SAAS,WAAAA,gBAAe;;;ACHxB,SAAS,aAAa,2BAA2B;AACjD,SAAS,iBAAiB;AAC1B,OAAO,uBAAuB;AAC9B,OAAO,kBAAkB;AAEzB,SAAS,eAAe,YAAY,SAAS,gBAAgB;;;ACL7D,IAAM,eACJ,OAAO,YAAY,eAAe,QAAQ,IAAI,aAAa;;;AD4JvD;AA1FN,IAAM,iBAAiB,cAA0C,IAAI;AACrE,IAAM,aAAa,cAAsC,IAAI;AAC7D,IAAM,gBAAgB,cAAyC,IAAI;AAEnE,IAAM,cAAc,IAAI,YAAY;AAAA,EAClC,gBAAgB;AAAA,IACd,SAAS;AAAA,MACP,sBAAsB;AAAA,IACxB;AAAA,EACF;AACF,CAAC;AAUM,SAAS,aAAkC;AAChD,QAAM,UAAU,WAAW,cAAc;AACzC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,SAAO;AACT;;;AE7FA,SAAS,gBAAgB;AAgBnB,gBAAAC,YAAA;AAPC,SAAS,QAAQ,EAAE,MAAM,UAAU,GAAG,MAAM,GAAiB;AAClE,QAAM,QAAQ,SAAS;AACvB,QAAM,OAAO,OAAO,iBAAiB,OAAO,YAAY;AACxD,QAAM,SAAS,OAAO;AAEtB,MAAI,MAAM;AACR,WACE,gBAAAA,KAAC,QAAK,MAAa,GAAI,SAAU,EAAE,OAAO,IAAe,CAAC,GAAK,GAAG,OAC/D,UACH;AAAA,EAEJ;AAEA,SACE,gBAAAA,KAAC,OAAE,MAAa,GAAG,OAChB,UACH;AAEJ;;;AHiBY,SACE,OAAAC,MADF;AArCZ,IAAM,kBAAkB;AAAA,EACtB;AAAA,IACE,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AACF;AAEO,SAAS,iBAAiB;AAC/B,QAAM,EAAE,KAAK,IAAI,WAAW;AAC5B,QAAM,WAAWC,SAAQ,MAAM;AAC7B,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO;AAAA,IACT;AACA,WAAO,OAAO,SAAS;AAAA,EACzB,GAAG,CAAC,CAAC;AAEL,QAAM,WACJ,MAAM,UACF,MAAM,GAAG,EACV,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC,EACrB,KAAK,EAAE,EACP,YAAY,EACZ,MAAM,GAAG,CAAC,KAAK;AAEpB,SACE,gBAAAD,KAAC,WAAM,WAAU,kIACf,+BAAC,SAAI,WAAU,yCACb;AAAA,oBAAAA,KAAC,SAAI,WAAU,0FACb,+BAAC,SAAI,WAAU,2BACb;AAAA,2BAAC,UAAO,WAAU,oCAChB;AAAA,wBAAAA,KAAC,eAAY,KAAK,MAAM,SAAS,IAAI,KAAK,MAAM,YAAY,IAAI;AAAA,QAChE,gBAAAA,KAAC,kBAAgB,oBAAS;AAAA,SAC5B;AAAA,MACA,qBAAC,SAAI,WAAU,WACb;AAAA,wBAAAA,KAAC,SAAI,WAAU,sDAAqD,+BAEpE;AAAA,QACA,gBAAAA,KAAC,SAAI,WAAU,oCACZ,gBAAM,YAAY,WACrB;AAAA,SACF;AAAA,OACF,GACF;AAAA,IAEA,gBAAAA,KAAC,SAAI,WAAU,cACZ,0BAAgB,IAAI,CAAC,SAAS;AAC7B,YAAM,OAAO,KAAK;AAClB,YAAM,WAAW,aAAa,KAAK;AAEnC,aACE,gBAAAA;AAAA,QAAC;AAAA;AAAA,UAEC,MAAM,KAAK;AAAA,UACX,WAAW;AAAA,YACT;AAAA,YACA,WACI,kDACA;AAAA,UACN;AAAA,UAEA,+BAAC,SAAI,WAAU,0BACb;AAAA,4BAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,WAAW;AAAA,kBACT;AAAA,kBACA,WACI,uCACA;AAAA,gBACN;AAAA,gBAEA,0BAAAA,KAAC,QAAK,WAAU,UAAS;AAAA;AAAA,YAC3B;AAAA,YACA,qBAAC,SAAI,WAAU,WACb;AAAA,8BAAAA,KAAC,SAAI,WAAU,eAAe,eAAK,OAAM;AAAA,cACzC,gBAAAA,KAAC,SAAI,WAAU,iCACZ,eAAK,SACR;AAAA,eACF;AAAA,aACF;AAAA;AAAA,QA1BK,KAAK;AAAA,MA2BZ;AAAA,IAEJ,CAAC,GACH;AAAA,KACF,GACF;AAEJ;;;AI/FI,SACE,OAAAE,MADF,QAAAC,aAAA;AAFW,SAAR,cAA+B,EAAE,SAAS,GAA4B;AAC3E,SACE,gBAAAA,MAAC,SAAI,WAAU,oDACb;AAAA,oBAAAD,KAAC,kBAAe;AAAA,IAChB,gBAAAA,KAAC,SAAI,WAAU,sHACZ,UACH;AAAA,KACF;AAEJ;","names":["useMemo","jsx","jsx","useMemo","jsx","jsxs"]}

package/dist/pages/profile/security.d.ts

@@ -0,0 +1,5 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+
+declare function ProfileSecurityPage(): react_jsx_runtime.JSX.Element;
+
+export { ProfileSecurityPage as default };