@micha.bigler/ui-core-micha 1.4.31 → 1.4.32

package/dist/components/MfaLoginComponent.js

@@ -1,5 +1,4 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// src/auth/components/MfaLoginComponent.jsx
 import React, { useState } from 'react';
 import { Box, Typography, TextField, Button, Stack, Alert, Divider, Dialog, DialogTitle, DialogContent, DialogActions, } from '@mui/material';
 import { useTranslation } from 'react-i18next';
@@ -44,11 +43,22 @@ export function MfaLoginComponent({ availableTypes, identifier, onSuccess, onCan
         setInfoKey(null);
         setSubmitting(true);
         try {
-            const { user } = await loginWithPasskey();
+            // Use standard passkey login (starts a fresh session flow).
+            // This allows users to bypass the password MFA step if they have a valid passkey.
+            const user = await loginWithPasskey();
             onSuccess({ user, method: 'webauthn' });
         }
         catch (err) {
-            setErrorKey(err.code || 'Auth.PASSKEY_FAILED');
+            // Detailed error handling
+            if (err.code === 'Auth.PASSKEY_CANCELLED') {
+                // User cancelled - show specific key or just ignore
+                setErrorKey('Auth.PASSKEY_CANCELLED');
+            }
+            else {
+                // eslint-disable-next-line no-console
+                console.error(err);
+                setErrorKey('Auth.PASSKEY_FAILED');
+            }
         }
         finally {
             setSubmitting(false);

package/dist/utils/authService.js

@@ -27,7 +27,7 @@ export async function registerPasskey(name = 'Passkey') {
 }
 export async function loginWithPasskey() {
     ensureWebAuthnSupport();
-    // 1. Get Challenge
+    // 1. Get Challenge (für passwordless Login)
     const requestOptions = await getPasskeyLoginOptions();
     // 2. Browser Sign
     let assertion;
@@ -36,7 +36,11 @@ export async function loginWithPasskey() {
         assertion = await navigator.credentials.get({ publicKey: pubKey });
     }
     catch (err) {
-        throw normaliseApiError(new Error('Auth.PASSKEY_CANCELLED'), 'Auth.PASSKEY_CANCELLED');
+        if (err.name === 'NotAllowedError') {
+            throw normaliseApiError(new Error('Auth.PASSKEY_CANCELLED'), 'Auth.PASSKEY_CANCELLED');
+        }
+        // Wenn der Browser sagt "No credentials found", werfen wir das weiter
+        throw err;
     }
     // 3. Complete
     const credentialJson = serializeCredential(assertion);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@micha.bigler/ui-core-micha",
-  "version": "1.4.31",
+  "version": "1.4.32",
   "main": "dist/index.js",
   "module": "dist/index.js",
   "private": false,

package/src/components/MfaLoginComponent.jsx

@@ -1,4 +1,3 @@
-// src/auth/components/MfaLoginComponent.jsx
 import React, { useState } from 'react';
 import {
   Box,
@@ -14,10 +13,10 @@ import {
   DialogActions,
 } from '@mui/material';
 import { useTranslation } from 'react-i18next';
-import { authenticateWithMFA, fetchCurrentUser, requestMfaSupportHelp  } from '../auth/authApi';
-import { loginWithPasskey  } from '../utils/authService';
+import { authenticateWithMFA, fetchCurrentUser, requestMfaSupportHelp } from '../auth/authApi';
+import { loginWithPasskey } from '../utils/authService';
 
- export function MfaLoginComponent({ availableTypes, identifier, onSuccess, onCancel }) {
+export function MfaLoginComponent({ availableTypes, identifier, onSuccess, onCancel }) {
   const { t } = useTranslation();
   const [code, setCode] = useState('');
   const [submitting, setSubmitting] = useState(false);
@@ -62,10 +61,20 @@ import { loginWithPasskey  } from '../utils/authService';
     setInfoKey(null);
     setSubmitting(true);
     try {
-      const { user } = await loginWithPasskey();
+      // Use standard passkey login (starts a fresh session flow).
+      // This allows users to bypass the password MFA step if they have a valid passkey.
+      const user = await loginWithPasskey();
       onSuccess({ user, method: 'webauthn' });
     } catch (err) {
-      setErrorKey(err.code || 'Auth.PASSKEY_FAILED');
+      // Detailed error handling
+      if (err.code === 'Auth.PASSKEY_CANCELLED') {
+          // User cancelled - show specific key or just ignore
+          setErrorKey('Auth.PASSKEY_CANCELLED');
+      } else {
+          // eslint-disable-next-line no-console
+          console.error(err);
+          setErrorKey('Auth.PASSKEY_FAILED');
+      }
     } finally {
       setSubmitting(false);
     }
@@ -236,4 +245,3 @@ import { loginWithPasskey  } from '../utils/authService';
   
 };
 
-

package/src/utils/authService.js

@@ -36,7 +36,7 @@ export async function registerPasskey(name = 'Passkey') {
 export async function loginWithPasskey() {
     ensureWebAuthnSupport();
     
-    // 1. Get Challenge
+    // 1. Get Challenge (für passwordless Login)
     const requestOptions = await getPasskeyLoginOptions();
     
     // 2. Browser Sign
@@ -45,7 +45,11 @@ export async function loginWithPasskey() {
         const pubKey = window.PublicKeyCredential.parseRequestOptionsFromJSON(requestOptions);
         assertion = await navigator.credentials.get({ publicKey: pubKey });
     } catch (err) {
-         throw normaliseApiError(new Error('Auth.PASSKEY_CANCELLED'), 'Auth.PASSKEY_CANCELLED');
+         if (err.name === 'NotAllowedError') {
+            throw normaliseApiError(new Error('Auth.PASSKEY_CANCELLED'), 'Auth.PASSKEY_CANCELLED');
+         }
+         // Wenn der Browser sagt "No credentials found", werfen wir das weiter
+         throw err;
     }
 
     // 3. Complete
@@ -55,7 +59,6 @@ export async function loginWithPasskey() {
     // 4. Reload User
     return fetchCurrentUser();
 }
-
 export function startSocialLogin(provider) {
   if (typeof window === 'undefined') {
     throw normaliseApiError(