@mintplayer/ng-spark 22.29.0 → 22.31.0

package/fesm2022/mintplayer-ng-spark-auth-two-factor.mjs

@@ -0,0 +1,218 @@
+import * as i0 from "@angular/core";
+import { ChangeDetectionStrategy, Component, inject, signal } from "@angular/core";
+import * as i1 from "@angular/forms";
+import { FormBuilder, ReactiveFormsModule } from "@angular/forms";
+import { ActivatedRoute, Router, RouterLink } from "@angular/router";
+import { Color } from "@mintplayer/ng-bootstrap";
+import { BsAlertComponent } from "@mintplayer/ng-bootstrap/alert";
+import { BsCardComponent, BsCardHeaderComponent } from "@mintplayer/ng-bootstrap/card";
+import { BsFormComponent, BsFormControlDirective } from "@mintplayer/ng-bootstrap/form";
+import { BsSpinnerComponent } from "@mintplayer/ng-bootstrap/spinner";
+import { SPARK_AUTH_CONFIG, SPARK_AUTH_ROUTE_PATHS, sanitizeReturnUrl } from "@mintplayer/ng-spark/auth/models";
+import { SparkAuthService, SparkAuthTranslationService } from "@mintplayer/ng-spark/auth/core";
+import { TranslateKeyPipe } from "@mintplayer/ng-spark/auth/pipes";
+var SparkTwoFactorComponent = class SparkTwoFactorComponent {
+	fb = inject(FormBuilder);
+	authService = inject(SparkAuthService);
+	router = inject(Router);
+	route = inject(ActivatedRoute);
+	config = inject(SPARK_AUTH_CONFIG);
+	translation = inject(SparkAuthTranslationService);
+	routePaths = inject(SPARK_AUTH_ROUTE_PATHS);
+	colors = Color;
+	loading = signal(false, ...ngDevMode ? [{ debugName: "loading" }] : /* istanbul ignore next */ []);
+	errorMessage = signal("", ...ngDevMode ? [{ debugName: "errorMessage" }] : /* istanbul ignore next */ []);
+	useRecoveryCode = signal(false, ...ngDevMode ? [{ debugName: "useRecoveryCode" }] : /* istanbul ignore next */ []);
+	form = this.fb.group({
+		code: [""],
+		recoveryCode: [""]
+	});
+	toggleRecoveryCode() {
+		this.useRecoveryCode.update((v) => !v);
+		this.errorMessage.set("");
+	}
+	async onSubmit() {
+		const isRecovery = this.useRecoveryCode();
+		const code = isRecovery ? this.form.value.recoveryCode : this.form.value.code;
+		if (!code?.trim()) {
+			this.errorMessage.set(isRecovery ? this.translation.t("auth.enterRecoveryCodeError") : this.translation.t("auth.enterCodeError"));
+			return;
+		}
+		this.loading.set(true);
+		this.errorMessage.set("");
+		const twoFactorCode = isRecovery ? void 0 : code;
+		const twoFactorRecoveryCode = isRecovery ? code : void 0;
+		try {
+			await this.authService.loginTwoFactor(twoFactorCode ?? "", twoFactorRecoveryCode);
+			const returnUrl = sanitizeReturnUrl(this.route.snapshot.queryParamMap.get("returnUrl"), this.config.defaultRedirectUrl);
+			this.router.navigateByUrl(returnUrl);
+		} catch {
+			this.errorMessage.set(this.translation.t("auth.invalidCode"));
+		} finally {
+			this.loading.set(false);
+		}
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.0",
+		ngImport: i0,
+		type: SparkTwoFactorComponent,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Component
+	});
+	static ɵcmp = i0.ɵɵngDeclareComponent({
+		minVersion: "17.0.0",
+		version: "22.2.0",
+		type: SparkTwoFactorComponent,
+		isStandalone: true,
+		selector: "spark-two-factor",
+		ngImport: i0,
+		template: "<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.twoFactorTitle' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (errorMessage()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-3\">{{ errorMessage() }}</bs-alert>\n      }\n\n      <bs-form>\n        <form [formGroup]=\"form\" (ngSubmit)=\"onSubmit()\">\n          @if (!useRecoveryCode()) {\n            <div class=\"mb-3\">\n              <label for=\"code\" class=\"form-label\">{{ 'auth.code' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"code\"\n                formControlName=\"code\"\n                autocomplete=\"one-time-code\"\n                maxlength=\"6\"\n                [placeholder]=\"'auth.enterCode' | t\"\n              />\n            </div>\n          } @else {\n            <div class=\"mb-3\">\n              <label for=\"recoveryCode\" class=\"form-label\">{{ 'auth.recoveryCode' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"recoveryCode\"\n                formControlName=\"recoveryCode\"\n                autocomplete=\"off\"\n                [placeholder]=\"'auth.enterRecoveryCode' | t\"\n              />\n            </div>\n          }\n\n          <button\n            type=\"submit\"\n            class=\"btn btn-primary w-100\"\n            [disabled]=\"loading()\"\n          >\n            @if (loading()) {\n              <bs-spinner class=\"me-1\" />\n            }\n            {{ 'auth.verify' | t }}\n          </button>\n        </form>\n      </bs-form>\n\n      <div class=\"mt-3 text-center\">\n        <button class=\"btn btn-link\" (click)=\"toggleRecoveryCode()\">\n          @if (useRecoveryCode()) {\n            {{ 'auth.useAuthCode' | t }}\n          } @else {\n            {{ 'auth.useRecoveryCode' | t }}\n          }\n        </button>\n      </div>\n      <div class=\"mt-2 text-center\">\n        <a [routerLink]=\"routePaths.login\">{{ 'auth.backToLogin' | t }}</a>\n      </div>\n    </div>\n  </bs-card>\n</div>\n",
+		dependencies: [
+			{
+				kind: "ngmodule",
+				type: ReactiveFormsModule
+			},
+			{
+				kind: "directive",
+				type: i1.ɵNgNoValidate,
+				selector: "form:not([ngNoForm]):not([ngNativeValidate])"
+			},
+			{
+				kind: "directive",
+				type: i1.DefaultValueAccessor,
+				selector: "input:not([type=checkbox]):not([ngNoCva])[formControlName],textarea:not([ngNoCva])[formControlName],input:not([type=checkbox]):not([ngNoCva])[formControl],textarea:not([ngNoCva])[formControl],input:not([type=checkbox]):not([ngNoCva])[ngModel],textarea:not([ngNoCva])[ngModel],[ngDefaultControl]"
+			},
+			{
+				kind: "directive",
+				type: i1.NgControlStatus,
+				selector: "[formControlName],[ngModel],[formControl]"
+			},
+			{
+				kind: "directive",
+				type: i1.NgControlStatusGroup,
+				selector: "[formGroupName],[formArrayName],[ngModelGroup],[formGroup],[formArray],form:not([ngNoForm]),[ngForm]"
+			},
+			{
+				kind: "directive",
+				type: i1.MaxLengthValidator,
+				selector: "[maxlength][formControlName],[maxlength][formControl],[maxlength][ngModel]",
+				inputs: ["maxlength"]
+			},
+			{
+				kind: "directive",
+				type: i1.FormGroupDirective,
+				selector: "[formGroup]",
+				inputs: ["formGroup"],
+				outputs: ["ngSubmit"],
+				exportAs: ["ngForm"]
+			},
+			{
+				kind: "directive",
+				type: i1.FormControlName,
+				selector: "[formControlName]",
+				inputs: [
+					"formControlName",
+					"disabled",
+					"ngModel"
+				],
+				outputs: ["ngModelChange"]
+			},
+			{
+				kind: "directive",
+				type: RouterLink,
+				selector: "[routerLink]",
+				inputs: [
+					"target",
+					"queryParams",
+					"fragment",
+					"queryParamsHandling",
+					"state",
+					"info",
+					"relativeTo",
+					"preserveFragment",
+					"skipLocationChange",
+					"replaceUrl",
+					"browserUrl",
+					"routerLink"
+				]
+			},
+			{
+				kind: "component",
+				type: BsAlertComponent,
+				selector: "bs-alert",
+				inputs: [
+					"type",
+					"announce",
+					"isVisible"
+				],
+				outputs: ["isVisibleChange", "afterOpenedOrClosed"]
+			},
+			{
+				kind: "component",
+				type: BsCardComponent,
+				selector: "bs-card",
+				inputs: ["color", "outline"]
+			},
+			{
+				kind: "component",
+				type: BsCardHeaderComponent,
+				selector: "bs-card-header",
+				inputs: ["color", "navStyle"]
+			},
+			{
+				kind: "component",
+				type: BsFormComponent,
+				selector: "bs-form",
+				inputs: ["action", "method"],
+				outputs: ["submitted"]
+			},
+			{
+				kind: "directive",
+				type: BsFormControlDirective,
+				selector: "bs-form input:not(.no-form-control), bs-form textarea:not(.no-form-control)"
+			},
+			{
+				kind: "component",
+				type: BsSpinnerComponent,
+				selector: "bs-spinner",
+				inputs: ["type", "color"]
+			},
+			{
+				kind: "pipe",
+				type: TranslateKeyPipe,
+				name: "t"
+			}
+		],
+		changeDetection: i0.ChangeDetectionStrategy.OnPush
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.0",
+	ngImport: i0,
+	type: SparkTwoFactorComponent,
+	decorators: [{
+		type: Component,
+		args: [{
+			selector: "spark-two-factor",
+			standalone: true,
+			changeDetection: ChangeDetectionStrategy.OnPush,
+			imports: [
+				ReactiveFormsModule,
+				RouterLink,
+				BsAlertComponent,
+				BsCardComponent,
+				BsCardHeaderComponent,
+				BsFormComponent,
+				BsFormControlDirective,
+				BsSpinnerComponent,
+				TranslateKeyPipe
+			],
+			template: "<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.twoFactorTitle' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (errorMessage()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-3\">{{ errorMessage() }}</bs-alert>\n      }\n\n      <bs-form>\n        <form [formGroup]=\"form\" (ngSubmit)=\"onSubmit()\">\n          @if (!useRecoveryCode()) {\n            <div class=\"mb-3\">\n              <label for=\"code\" class=\"form-label\">{{ 'auth.code' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"code\"\n                formControlName=\"code\"\n                autocomplete=\"one-time-code\"\n                maxlength=\"6\"\n                [placeholder]=\"'auth.enterCode' | t\"\n              />\n            </div>\n          } @else {\n            <div class=\"mb-3\">\n              <label for=\"recoveryCode\" class=\"form-label\">{{ 'auth.recoveryCode' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"recoveryCode\"\n                formControlName=\"recoveryCode\"\n                autocomplete=\"off\"\n                [placeholder]=\"'auth.enterRecoveryCode' | t\"\n              />\n            </div>\n          }\n\n          <button\n            type=\"submit\"\n            class=\"btn btn-primary w-100\"\n            [disabled]=\"loading()\"\n          >\n            @if (loading()) {\n              <bs-spinner class=\"me-1\" />\n            }\n            {{ 'auth.verify' | t }}\n          </button>\n        </form>\n      </bs-form>\n\n      <div class=\"mt-3 text-center\">\n        <button class=\"btn btn-link\" (click)=\"toggleRecoveryCode()\">\n          @if (useRecoveryCode()) {\n            {{ 'auth.useAuthCode' | t }}\n          } @else {\n            {{ 'auth.useRecoveryCode' | t }}\n          }\n        </button>\n      </div>\n      <div class=\"mt-2 text-center\">\n        <a [routerLink]=\"routePaths.login\">{{ 'auth.backToLogin' | t }}</a>\n      </div>\n    </div>\n  </bs-card>\n</div>\n"
+		}]
+	}]
+});
+export { SparkTwoFactorComponent };
+
+//# sourceMappingURL=mintplayer-ng-spark-auth-two-factor.mjs.map

package/fesm2022/mintplayer-ng-spark-auth-two-factor.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mintplayer-ng-spark-auth-two-factor.mjs","names":[],"sources":["../../auth/two-factor/src/spark-two-factor.component.ts","../../auth/two-factor/src/spark-two-factor.component.html"],"sourcesContent":["import { ChangeDetectionStrategy, Component, inject, signal } from '@angular/core';\nimport { ReactiveFormsModule, FormBuilder, Validators } from '@angular/forms';\nimport { RouterLink, ActivatedRoute, Router } from '@angular/router';\nimport { Color } from '@mintplayer/ng-bootstrap';\nimport { BsAlertComponent } from '@mintplayer/ng-bootstrap/alert';\nimport { BsCardComponent, BsCardHeaderComponent } from '@mintplayer/ng-bootstrap/card';\nimport { BsFormComponent, BsFormControlDirective } from '@mintplayer/ng-bootstrap/form';\nimport { BsSpinnerComponent } from '@mintplayer/ng-bootstrap/spinner';\nimport { SPARK_AUTH_CONFIG, SPARK_AUTH_ROUTE_PATHS, sanitizeReturnUrl } from '@mintplayer/ng-spark/auth/models';\nimport { SparkAuthService, SparkAuthTranslationService } from '@mintplayer/ng-spark/auth/core';\nimport { TranslateKeyPipe } from '@mintplayer/ng-spark/auth/pipes';\n\n@Component({\n  selector: 'spark-two-factor',\n  standalone: true,\n  changeDetection: ChangeDetectionStrategy.OnPush,\n  imports: [ReactiveFormsModule, RouterLink, BsAlertComponent, BsCardComponent, BsCardHeaderComponent, BsFormComponent, BsFormControlDirective, BsSpinnerComponent, TranslateKeyPipe],\n  templateUrl: './spark-two-factor.component.html',\n})\nexport class SparkTwoFactorComponent {\n  private readonly fb = inject(FormBuilder);\n  private readonly authService = inject(SparkAuthService);\n  private readonly router = inject(Router);\n  private readonly route = inject(ActivatedRoute);\n  private readonly config = inject(SPARK_AUTH_CONFIG);\n  private readonly translation = inject(SparkAuthTranslationService);\n  readonly routePaths = inject(SPARK_AUTH_ROUTE_PATHS);\n\n  colors = Color;\n  readonly loading = signal(false);\n  readonly errorMessage = signal('');\n  readonly useRecoveryCode = signal(false);\n\n  readonly form = this.fb.group({\n    code: [''],\n    recoveryCode: [''],\n  });\n\n  toggleRecoveryCode(): void {\n    this.useRecoveryCode.update(v => !v);\n    this.errorMessage.set('');\n  }\n\n  async onSubmit(): Promise<void> {\n    const isRecovery = this.useRecoveryCode();\n    const code = isRecovery ? this.form.value.recoveryCode : this.form.value.code;\n\n    if (!code?.trim()) {\n      this.errorMessage.set(isRecovery\n        ? this.translation.t('auth.enterRecoveryCodeError')\n        : this.translation.t('auth.enterCodeError'));\n      return;\n    }\n\n    this.loading.set(true);\n    this.errorMessage.set('');\n\n    const twoFactorCode = isRecovery ? undefined : code;\n    const twoFactorRecoveryCode = isRecovery ? code : undefined;\n\n    try {\n      await this.authService.loginTwoFactor(twoFactorCode ?? '', twoFactorRecoveryCode);\n      // R2-H9: same sanitization as login. The 2FA component receives returnUrl\n      // forwarded from the login step but must still validate — query params\n      // travel through router state and a deep-link to /two-factor?returnUrl=…\n      // is a viable attacker vector.\n      const returnUrl = sanitizeReturnUrl(\n        this.route.snapshot.queryParamMap.get('returnUrl'),\n        this.config.defaultRedirectUrl);\n      this.router.navigateByUrl(returnUrl);\n    } catch {\n      this.errorMessage.set(this.translation.t('auth.invalidCode'));\n    } finally {\n      this.loading.set(false);\n    }\n  }\n}\n\nexport default SparkTwoFactorComponent;\n","<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.twoFactorTitle' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (errorMessage()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-3\">{{ errorMessage() }}</bs-alert>\n      }\n\n      <bs-form>\n        <form [formGroup]=\"form\" (ngSubmit)=\"onSubmit()\">\n          @if (!useRecoveryCode()) {\n            <div class=\"mb-3\">\n              <label for=\"code\" class=\"form-label\">{{ 'auth.code' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"code\"\n                formControlName=\"code\"\n                autocomplete=\"one-time-code\"\n                maxlength=\"6\"\n                [placeholder]=\"'auth.enterCode' | t\"\n              />\n            </div>\n          } @else {\n            <div class=\"mb-3\">\n              <label for=\"recoveryCode\" class=\"form-label\">{{ 'auth.recoveryCode' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"recoveryCode\"\n                formControlName=\"recoveryCode\"\n                autocomplete=\"off\"\n                [placeholder]=\"'auth.enterRecoveryCode' | t\"\n              />\n            </div>\n          }\n\n          <button\n            type=\"submit\"\n            class=\"btn btn-primary w-100\"\n            [disabled]=\"loading()\"\n          >\n            @if (loading()) {\n              <bs-spinner class=\"me-1\" />\n            }\n            {{ 'auth.verify' | t }}\n          </button>\n        </form>\n      </bs-form>\n\n      <div class=\"mt-3 text-center\">\n        <button class=\"btn btn-link\" (click)=\"toggleRecoveryCode()\">\n          @if (useRecoveryCode()) {\n            {{ 'auth.useAuthCode' | t }}\n          } @else {\n            {{ 'auth.useRecoveryCode' | t }}\n          }\n        </button>\n      </div>\n      <div class=\"mt-2 text-center\">\n        <a [routerLink]=\"routePaths.login\">{{ 'auth.backToLogin' | t }}</a>\n      </div>\n    </div>\n  </bs-card>\n</div>\n"],"mappings":";;;;;;;;;;;;;AAmBA,IAAa,0BAAb,MAAa,wBAAuB;CACjB,KAAK,OAAO,WAAW;CACvB,cAAc,OAAO,gBAAgB;CACrC,SAAS,OAAO,MAAM;CACtB,QAAQ,OAAO,cAAc;CAC7B,SAAS,OAAO,iBAAiB;CACjC,cAAc,OAAO,2BAA2B;CACxD,aAAa,OAAO,sBAAsB;CAEnD,SAAS;CACA,UAAU,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,UAAA,CAAA,+BAAA,CAAA,CAAA;CACvB,eAAe,OAAO,IAAG,GAAA,YAAA,CAAA,EAAA,WAAA,eAAA,CAAA,+BAAA,CAAA,CAAA;CACzB,kBAAkB,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,kBAAA,CAAA,+BAAA,CAAA,CAAA;CAE/B,OAAO,KAAK,GAAG,MAAM;EAC5B,MAAM,CAAC,EAAE;EACT,cAAc,CAAC,EAAE;CAClB,CAAA;CAED,qBAAkB;EAChB,KAAK,gBAAgB,QAAO,MAAK,CAAC,CAAC;EACnC,KAAK,aAAa,IAAI,EAAE;CAC1B;CAEA,MAAM,WAAQ;EACZ,MAAM,aAAa,KAAK,gBAAe;EACvC,MAAM,OAAO,aAAa,KAAK,KAAK,MAAM,eAAe,KAAK,KAAK,MAAM;EAEzE,IAAI,CAAC,MAAM,KAAI,GAAI;GACjB,KAAK,aAAa,IAAI,aAClB,KAAK,YAAY,EAAE,6BAA6B,IAChD,KAAK,YAAY,EAAE,qBAAqB,CAAC;GAC7C;EACF;EAEA,KAAK,QAAQ,IAAI,IAAI;EACrB,KAAK,aAAa,IAAI,EAAE;EAExB,MAAM,gBAAgB,aAAa,SAAY;EAC/C,MAAM,wBAAwB,aAAa,OAAO;EAElD,IAAI;GACF,MAAM,KAAK,YAAY,eAAe,iBAAiB,IAAI,qBAAqB;GAKhF,MAAM,YAAY,kBAChB,KAAK,MAAM,SAAS,cAAc,IAAI,WAAW,GACjD,KAAK,OAAO,kBAAkB;GAChC,KAAK,OAAO,cAAc,SAAS;EACrC,QAAQ;GACN,KAAK,aAAa,IAAI,KAAK,YAAY,EAAE,kBAAkB,CAAC;EAC9D,UAAU;GACR,KAAK,QAAQ,IAAI,KAAK;EACxB;CACF;CAxDW,OAAA,OAAA,GAAA,mBAAA;EAAA,YAAA;EAAA,SAAA;EAAA,UAAA;EAAA,MAAA;EAAuB,MAAA,CAAA;EAAA,QAAA,GAAA,gBAAA;CAAA,CAAA;CAAvB,OAAA,OAAA,GAAA,qBAAA;EAAA,YAAA;EAAA,SAAA;EAAA,MAAA;EAAuB,cAAA;EAAA,UAAA;EAAA,UAAA;EAAA,UCnBpC;EAiEA,cAAA;GAAA;IAAA,MAAA;IAAA,MDjDY;GAAmB;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;IAAA,QAAA,CAAA,WAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;IAAA,QAAA,CAAA,WAAA;IAAA,SAAA,CAAA,UAAA;IAAA,UAAA,CAAA,QAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;IAAA;IAAA,SAAA,CAAA,eAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAU,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;IAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAgB,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;IAAA;IAAA,SAAA,CAAA,mBAAA,qBAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAe,UAAA;IAAA,QAAA,CAAA,SAAA,SAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAqB,UAAA;IAAA,QAAA,CAAA,SAAA,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAe,UAAA;IAAA,QAAA,CAAA,UAAA,QAAA;IAAA,SAAA,CAAA,WAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAsB,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAkB,UAAA;IAAA,QAAA,CAAA,QAAA,OAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAgB,MAAA;GAAA;EAAA;EAAA,iBAAA,GAAA,wBAAA;CAAA,CAAA;;AAGvK,GAAA,yBAAA;CAAA,YAAA;CAAA,SAAA;CAAA,UAAA;CAAA,MAAA;CAAuB,YAAA,CAAA;EAPnC,MAAA;EACW,MAAA,CAAA;GAAA,UAAA;GAAkB,YAChB;GAAI,iBACC,wBAAwB;GAAM,SACtC;IAAC;IAAqB;IAAY;IAAkB;IAAiB;IAAuB;IAAiB;IAAwB;IAAoB;GAAgB;GAAC,UAAA;EAAA,CAAA"}

package/fesm2022/mintplayer-ng-spark-auth.mjs

@@ -0,0 +1,48 @@
+import { SPARK_AUTH_CONFIG, SPARK_AUTH_CONFIG as SPARK_AUTH_CONFIG$1, defaultSparkAuthConfig, defaultSparkAuthConfig as defaultSparkAuthConfig$1, passkeysSupported, sparkPasskeyError } from "@mintplayer/ng-spark/auth/models";
+import { inject, makeEnvironmentProviders } from "@angular/core";
+import { withInterceptors, withXsrfConfiguration } from "@angular/common/http";
+import { SPARK_AUTH_STATE } from "@mintplayer/ng-spark";
+import { provideSparkClientMethods } from "@mintplayer/ng-spark/client-operations";
+import { sparkAuthInterceptor } from "@mintplayer/ng-spark/auth/interceptors";
+import { SparkAuthService } from "@mintplayer/ng-spark/auth/core";
+const sparkAuthClientMethods = { "webauthn.create": {
+	supported: passkeysSupported,
+	unsupportedReason: "auth.passkeyUnsupported",
+	async invoke(args) {
+		try {
+			const options = PublicKeyCredential.parseCreationOptionsFromJSON(args);
+			const credential = await navigator.credentials.create({ publicKey: options });
+			if (!credential) throw new DOMException("No credential was produced.", "NotAllowedError");
+			return JSON.parse(JSON.stringify(credential));
+		} catch (error) {
+			const code = sparkPasskeyError(error);
+			if (code === "cancelled" || code === "no_credential") throw error;
+			return { error: code };
+		}
+	}
+} };
+function provideSparkAuth(config) {
+	return makeEnvironmentProviders([
+		{
+			provide: SPARK_AUTH_CONFIG$1,
+			useValue: {
+				...defaultSparkAuthConfig$1,
+				...config
+			}
+		},
+		{
+			provide: SPARK_AUTH_STATE,
+			useFactory: () => inject(SparkAuthService).user
+		},
+		provideSparkClientMethods(sparkAuthClientMethods)
+	]);
+}
+function withSparkAuth() {
+	return [withInterceptors([sparkAuthInterceptor]), withXsrfConfiguration({
+		cookieName: "XSRF-TOKEN",
+		headerName: "X-XSRF-TOKEN"
+	})];
+}
+export { SPARK_AUTH_CONFIG, defaultSparkAuthConfig, provideSparkAuth, sparkAuthClientMethods, withSparkAuth };
+
+//# sourceMappingURL=mintplayer-ng-spark-auth.mjs.map

package/fesm2022/mintplayer-ng-spark-auth.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mintplayer-ng-spark-auth.mjs","names":[],"sources":["../../auth/src/lib/webauthn-client-methods.ts","../../auth/src/lib/provide-spark-auth.ts"],"sourcesContent":["import type { SparkClientMethodMap } from '@mintplayer/ng-spark/client-operations';\nimport { passkeysSupported, sparkPasskeyError } from '@mintplayer/ng-spark/auth/models';\n\n/**\n * The browser steps the Authorization library's server actions invoke (`IRetryAccessor.Invoke`),\n * registered by {@link provideSparkAuth}.\n *\n * `webauthn.create` is the enrollment ceremony of the passkeys page's `AddPasskey` action: the\n * server hands it the creation options and receives the credential back in the same action, which\n * attests it against the ceremony cookie its first pass set. The server keeps the challenge; nothing\n * here chooses or carries one.\n *\n * - The user dismissing the prompt (`cancelled`, `no_credential`) rejects, which answers the server\n *   with `Cancel`: not an error, so no banner.\n * - Any other failure (an authenticator already holding a credential for this account, a security\n *   error) resolves as `{ error }`, so the server can say it did not work.\n * - An unsupported browser never runs it (`supported`), and the action shows disabled with\n *   `auth.passkeyUnsupported` as the reason.\n */\nexport const sparkAuthClientMethods: SparkClientMethodMap = {\n  'webauthn.create': {\n    supported: passkeysSupported,\n    unsupportedReason: 'auth.passkeyUnsupported',\n    async invoke(args: unknown): Promise<unknown> {\n      try {\n        const options = PublicKeyCredential.parseCreationOptionsFromJSON(args as PublicKeyCredentialCreationOptionsJSON);\n        const credential = await navigator.credentials.create({ publicKey: options });\n        if (!credential) throw new DOMException('No credential was produced.', 'NotAllowedError');\n        // The credential's own toJSON is WebAuthn's JSON encoding, which the server's attestation reads.\n        return JSON.parse(JSON.stringify(credential));\n      } catch (error) {\n        const code = sparkPasskeyError(error);\n        if (code === 'cancelled' || code === 'no_credential') throw error;\n        return { error: code };\n      }\n    },\n  },\n};\n","import { EnvironmentProviders, inject, makeEnvironmentProviders } from '@angular/core';\nimport { HttpFeature, HttpFeatureKind, withInterceptors, withXsrfConfiguration } from '@angular/common/http';\nimport { SPARK_AUTH_STATE } from '@mintplayer/ng-spark';\nimport { provideSparkClientMethods } from '@mintplayer/ng-spark/client-operations';\nimport {\n  defaultSparkAuthConfig,\n  SPARK_AUTH_CONFIG,\n  SparkAuthConfig,\n} from '@mintplayer/ng-spark/auth/models';\nimport { sparkAuthInterceptor } from '@mintplayer/ng-spark/auth/interceptors';\nimport { SparkAuthService } from '@mintplayer/ng-spark/auth/core';\nimport { sparkAuthClientMethods } from './webauthn-client-methods';\n\nexport function provideSparkAuth(\n  config?: Partial<SparkAuthConfig>,\n): EnvironmentProviders {\n  return makeEnvironmentProviders([\n    {\n      provide: SPARK_AUTH_CONFIG,\n      useValue: { ...defaultSparkAuthConfig, ...config },\n    },\n    // Bridges sign-in/out into ng-spark (which must not depend on this package): auth-sensitive\n    // consumers there — the program-units menu — track this signal and re-fetch on change.\n    {\n      provide: SPARK_AUTH_STATE,\n      useFactory: () => inject(SparkAuthService).user,\n    },\n    // The browser steps the library's server actions invoke: `webauthn.create` for AddPasskey.\n    provideSparkClientMethods(sparkAuthClientMethods),\n  ]);\n}\n\nexport function withSparkAuth(): HttpFeature<HttpFeatureKind>[] {\n  return [\n    withInterceptors([sparkAuthInterceptor]),\n    withXsrfConfiguration({ cookieName: 'XSRF-TOKEN', headerName: 'X-XSRF-TOKEN' }),\n  ];\n}\n"],"mappings":";;;;;;;AAmBA,MAAa,yBAA+C,EAC1D,mBAAmB;CACjB,WAAW;CACX,mBAAmB;CACnB,MAAM,OAAO,MAAa;EACxB,IAAI;GACF,MAAM,UAAU,oBAAoB,6BAA6B,IAA8C;GAC/G,MAAM,aAAa,MAAM,UAAU,YAAY,OAAO,EAAE,WAAW,QAAO,CAAE;GAC5E,IAAI,CAAC,YAAY,MAAM,IAAI,aAAa,+BAA+B,iBAAiB;GAExF,OAAO,KAAK,MAAM,KAAK,UAAU,UAAU,CAAC;EAC9C,SAAS,OAAO;GACd,MAAM,OAAO,kBAAkB,KAAK;GACpC,IAAI,SAAS,eAAe,SAAS,iBAAiB,MAAM;GAC5D,OAAO,EAAE,OAAO,KAAI;EACtB;CACF;AACD,EACF;ACxBD,SAAgB,iBACd,QAAiC;CAEjC,OAAO,yBAAyB;EAC9B;GACE,SAAS;GACT,UAAU;IAAE,GAAG;IAAwB,GAAG;GAAM;EACjD;EAGD;GACE,SAAS;GACT,kBAAkB,OAAO,gBAAgB,CAAC,CAAC;EAC5C;EAED,0BAA0B,sBAAsB;CACjD,CAAA;AACH;AAEA,SAAgB,gBAAa;CAC3B,OAAO,CACL,iBAAiB,CAAC,oBAAoB,CAAC,GACvC,sBAAsB;EAAE,YAAY;EAAc,YAAY;CAAc,CAAE,CAC/E;AACH"}