@microsoft/rayfin-auth-provider-fabric 1.33.2 → 1.34.0-alpha.1160

package/dist/bridgeFabricCallback.js

@@ -1,3 +1,4 @@
+import { assertBrowser } from '@microsoft/rayfin-lib';
 /** @internal BroadcastChannel name for backward-compat cross-tab handoff messaging. */
 export const FABRIC_AUTH_CHANNEL = 'rayfin_fabric_auth';
 /**
@@ -16,6 +17,7 @@ export const FABRIC_AUTH_CHANNEL = 'rayfin_fabric_auth';
  * @returns Whether a bridge message was sent.
  */
 export function bridgeFabricCallback() {
+    assertBrowser('bridgeFabricCallback');
     // Query params first, then hash fragment. Only match verification_code/code
     // from query params when window.opener exists (popup context) to avoid
     // colliding with magic-link callbacks that use the same param names.

package/dist/embeddedFabricLogin.js

@@ -1,5 +1,6 @@
 import { generateCodeVerifier, generateCodeChallenge, generateState, } from '@microsoft/rayfin-auth';
-import { AuthError } from '@microsoft/rayfin-lib';
+import { createSessionFromTokenResponse } from '@microsoft/rayfin-auth/_internal';
+import { AuthError, assertBrowser } from '@microsoft/rayfin-lib';
 import { requestHandoff } from './PostMessageAuthTransport.js';
 import { markEmbeddedHandoffCompleted } from './fabricAuthHelpers.js';
 /**
@@ -22,6 +23,7 @@ import { markEmbeddedHandoffCompleted } from './fabricAuthHelpers.js';
  * @throws `AuthError` - On missing options, transport failure, or token exchange error.
  */
 export async function embeddedFabricLogin(auth, options) {
+    assertBrowser('embeddedFabricLogin');
     if (!options.returnOrigin) {
         throw new AuthError('returnOrigin is required for embedded Fabric authentication.', 'MISSING_RETURN_ORIGIN');
     }
@@ -70,7 +72,7 @@ export async function embeddedFabricLogin(auth, options) {
         codeType: 'fabric_handoff',
         redirectUri,
     });
-    auth.createSessionFromTokenResponse(tokenResponse);
+    await createSessionFromTokenResponse(auth, tokenResponse);
     markEmbeddedHandoffCompleted();
     console.debug('[FabricAuth:embedded] Session established');
 }

package/dist/ensureSignedInWithFabric.d.ts

@@ -26,9 +26,41 @@ import type { FabricAuthOptions } from './types.js';
  * Steps 1–3 do not open windows and are safe to call on page load.
  *
  * @param auth - The Auth instance.
- * @param options - Fabric authentication options (workspaceId, projectId, returnOrigin).
+ * @param options - Fabric authentication options (workspaceId, projectId, fabricPortalUrl, returnOrigin).
  * @returns A promise that resolves with the authenticated session.
  * @throws `AuthError` - If all steps fail or the broker tab is blocked.
+ *
+ * @example
+ * ```typescript
+ * import { Auth } from '@microsoft/rayfin-auth';
+ * import { ApiClient } from '@microsoft/rayfin-lib';
+ * import {
+ *   ensureSignedInWithFabric,
+ *   type FabricAuthOptions,
+ * } from '@microsoft/rayfin-auth-provider-fabric';
+ *
+ * const apiClient = new ApiClient({
+ *   baseUrl: import.meta.env.VITE_RAYFIN_API_URL,
+ *   publishableKey: import.meta.env.VITE_RAYFIN_PUBLISHABLE_KEY,
+ * });
+ * const auth = new Auth(apiClient);
+ * const fabricOptions: FabricAuthOptions = {
+ *   workspaceId: import.meta.env.VITE_FABRIC_WORKSPACE_ID,
+ *   projectId: import.meta.env.VITE_FABRIC_ITEM_ID,
+ *   fabricPortalUrl: import.meta.env.VITE_FABRIC_PORTAL_URL,
+ *   returnOrigin: window.location.origin,
+ * };
+ *
+ * // Wire to a button click so step 4 (window.open) is in a user-gesture context.
+ * signInButton.addEventListener('click', async () => {
+ *   try {
+ *     const session = await ensureSignedInWithFabric(auth, fabricOptions);
+ *     console.log('Signed in as', session.user?.email);
+ *   } catch (error) {
+ *     console.error('Fabric sign-in failed:', error.message);
+ *   }
+ * });
+ * ```
  */
 export declare function ensureSignedInWithFabric(auth: Auth, options: FabricAuthOptions): Promise<OpaqueSession>;
 //# sourceMappingURL=ensureSignedInWithFabric.d.ts.map

package/dist/ensureSignedInWithFabric.js

@@ -1,4 +1,4 @@
-import { AuthError } from '@microsoft/rayfin-lib';
+import { AuthError, assertBrowser } from '@microsoft/rayfin-lib';
 import { embeddedFabricLogin } from './embeddedFabricLogin.js';
 import { hasEmbeddedHandoffCompleted, isEmbeddedMode, tryResumeSession, } from './fabricAuthHelpers.js';
 import { initiateFabricLogin } from './initiateFabricLogin.js';
@@ -28,11 +28,44 @@ import { initiateFabricLogin } from './initiateFabricLogin.js';
  * Steps 1–3 do not open windows and are safe to call on page load.
  *
  * @param auth - The Auth instance.
- * @param options - Fabric authentication options (workspaceId, projectId, returnOrigin).
+ * @param options - Fabric authentication options (workspaceId, projectId, fabricPortalUrl, returnOrigin).
  * @returns A promise that resolves with the authenticated session.
  * @throws `AuthError` - If all steps fail or the broker tab is blocked.
+ *
+ * @example
+ * ```typescript
+ * import { Auth } from '@microsoft/rayfin-auth';
+ * import { ApiClient } from '@microsoft/rayfin-lib';
+ * import {
+ *   ensureSignedInWithFabric,
+ *   type FabricAuthOptions,
+ * } from '@microsoft/rayfin-auth-provider-fabric';
+ *
+ * const apiClient = new ApiClient({
+ *   baseUrl: import.meta.env.VITE_RAYFIN_API_URL,
+ *   publishableKey: import.meta.env.VITE_RAYFIN_PUBLISHABLE_KEY,
+ * });
+ * const auth = new Auth(apiClient);
+ * const fabricOptions: FabricAuthOptions = {
+ *   workspaceId: import.meta.env.VITE_FABRIC_WORKSPACE_ID,
+ *   projectId: import.meta.env.VITE_FABRIC_ITEM_ID,
+ *   fabricPortalUrl: import.meta.env.VITE_FABRIC_PORTAL_URL,
+ *   returnOrigin: window.location.origin,
+ * };
+ *
+ * // Wire to a button click so step 4 (window.open) is in a user-gesture context.
+ * signInButton.addEventListener('click', async () => {
+ *   try {
+ *     const session = await ensureSignedInWithFabric(auth, fabricOptions);
+ *     console.log('Signed in as', session.user?.email);
+ *   } catch (error) {
+ *     console.error('Fabric sign-in failed:', error.message);
+ *   }
+ * });
+ * ```
  */
 export async function ensureSignedInWithFabric(auth, options) {
+    assertBrowser('ensureSignedInWithFabric');
     // Steps 1-2: existing session or refresh.
     // In embedded mode we MUST skip this on the first call per page load —
     // the session in iframe localStorage may belong to a previously

package/dist/initiateFabricLogin.js

@@ -1,5 +1,6 @@
 import { generateCodeVerifier, generateCodeChallenge, generateState, } from '@microsoft/rayfin-auth';
-import { AuthError } from '@microsoft/rayfin-lib';
+import { createSessionFromTokenResponse } from '@microsoft/rayfin-auth/_internal';
+import { AuthError, assertBrowser } from '@microsoft/rayfin-lib';
 import { FABRIC_AUTH_CHANNEL } from './bridgeFabricCallback.js';
 import { buildBrokerUrl } from './brokerUrl.js';
 /**
@@ -17,6 +18,7 @@ import { buildBrokerUrl } from './brokerUrl.js';
  * @throws `AuthError` - On missing options, blocked popup, or auth failure.
  */
 export async function initiateFabricLogin(auth, options) {
+    assertBrowser('initiateFabricLogin');
     // Validate required params
     if (!options.workspaceId) {
         throw new AuthError('workspaceId is required.', 'MISSING_WORKSPACE_ID');
@@ -83,9 +85,9 @@ export async function initiateFabricLogin(auth, options) {
                     codeType: 'fabric_handoff',
                     redirectUri,
                 })
-                    .then((tokenResponse) => {
+                    .then(async (tokenResponse) => {
                     console.debug('[FabricAuth] Token exchange succeeded, creating session');
-                    auth.createSessionFromTokenResponse(tokenResponse);
+                    await createSessionFromTokenResponse(auth, tokenResponse);
                     resolve();
                 })
                     .catch((err) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/rayfin-auth-provider-fabric",
-  "version": "1.33.2",
+  "version": "1.34.0-alpha.1160",
   "description": "Fabric brokered authentication provider for Rayfin SDK",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -13,9 +13,9 @@
   ],
   "type": "module",
   "dependencies": {
-    "@microsoft/rayfin-auth": "1.33.2",
-    "@microsoft/fabric-embedded-host": "1.33.2",
-    "@microsoft/rayfin-lib": "1.33.2"
+    "@microsoft/rayfin-auth": "1.34.0-alpha.1160",
+    "@microsoft/fabric-embedded-host": "1.34.0-alpha.1160",
+    "@microsoft/rayfin-lib": "1.34.0-alpha.1160"
   },
   "devDependencies": {
     "typescript": "^5.8.3",