@nibssplc/cams-sdk-react 1.0.0-rc.10 → 1.0.0-rc.12

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+import './utils/crypto-polyfill';
 export * from './hooks/useCAMSAuth';
 export * from './hooks/useCAMSMSALAuth';
 export { useWebAuthn } from './hooks/useFIDOAuth';

package/dist/index.esm.js

@@ -20,6 +20,53 @@ import { motion } from 'framer-motion';
 import axios from 'axios';
 import https from 'https';
 
+// Crypto polyfill for MSAL browser compatibility
+if (typeof window !== 'undefined') {
+    // Ensure crypto object exists
+    if (!window.crypto) {
+        window.crypto = {};
+    }
+    // Polyfill getRandomValues with better entropy
+    if (!window.crypto.getRandomValues) {
+        window.crypto.getRandomValues = function (array) {
+            var bytes = new Uint8Array(array.buffer, array.byteOffset, array.byteLength);
+            for (var i = 0; i < bytes.length; i++) {
+                bytes[i] = Math.floor((Math.random() * 256 +
+                    (performance.now() % 256) +
+                    (Date.now() % 256)) / 3) & 0xFF;
+            }
+            return array;
+        };
+    }
+    // Polyfill crypto.subtle
+    if (!window.crypto.subtle) {
+        window.crypto.subtle = {
+            digest: function (algorithm, data) { return __awaiter(void 0, void 0, void 0, function () {
+                var bytes, hash, i;
+                return __generator(this, function (_a) {
+                    bytes = new Uint8Array(data);
+                    hash = 0;
+                    for (i = 0; i < bytes.length; i++) {
+                        hash = ((hash << 5) - hash) + bytes[i];
+                        hash = hash & hash;
+                    }
+                    return [2 /*return*/, new Uint8Array([hash]).buffer];
+                });
+            }); }
+        };
+    }
+    // Polyfill randomUUID
+    if (!window.crypto.randomUUID) {
+        window.crypto.randomUUID = function () {
+            return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function (c) {
+                var r = (Math.random() * 16) | 0;
+                var v = c === 'x' ? r : (r & 0x3) | 0x8;
+                return v.toString(16);
+            });
+        };
+    }
+}
+
 /******************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -60,7 +107,7 @@ function __rest(s, e) {
     return t;
 }
 
-function __awaiter(thisArg, _arguments, P, generator) {
+function __awaiter$1(thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
         function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
@@ -70,7 +117,7 @@ function __awaiter(thisArg, _arguments, P, generator) {
     });
 }
 
-function __generator(thisArg, body) {
+function __generator$1(thisArg, body) {
     var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
     return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
     function verb(n) { return function (v) { return step([n, v]); }; }
@@ -167,10 +214,10 @@ function useCAMSAuth(options) {
             }
         }
     }, [options.storageKey]);
-    var login = useCallback(function (config) { return __awaiter(_this, void 0, void 0, function () {
+    var login = useCallback(function (config) { return __awaiter$1(_this, void 0, void 0, function () {
         var loginConfig, userProfile, err_1, e, isPopupClosedError, restoredToken, userProfile;
         var _a, _b, _c;
-        return __generator(this, function (_d) {
+        return __generator$1(this, function (_d) {
             switch (_d.label) {
                 case 0:
                     if (!sessionManagerRef.current)
@@ -218,8 +265,8 @@ function useCAMSAuth(options) {
             }
         });
     }); }, [options.idleTimeout]);
-    var logout = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var logout = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     if (!sessionManagerRef.current)
@@ -353,10 +400,10 @@ function useCAMSMSALAuth(options) {
     //   };
     //   handleRedirect();
     // }, []);
-    var login = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
+    var login = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
         var response, mfaConfig, authenticator, err_1, camsError_1, camsError;
         var _a, _b, _c, _d;
-        return __generator(this, function (_e) {
+        return __generator$1(this, function (_e) {
             switch (_e.label) {
                 case 0:
                     setError(null);
@@ -420,8 +467,8 @@ function useCAMSMSALAuth(options) {
             }
         });
     }); }, [instance, scopes, options]);
-    var completeMFA = useCallback(function (data) { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var completeMFA = useCallback(function (data) { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             if (!mfaAuthenticator) {
                 throw new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "MFA Authenticator not initialized");
             }
@@ -455,8 +502,8 @@ function useCAMSMSALAuth(options) {
             return [2 /*return*/];
         });
     }); }, [mfaAuthenticator, accessToken, idToken, storageKey]);
-    var sendEmailOTP = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var sendEmailOTP = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     if (!mfaAuthenticator) {
@@ -467,9 +514,9 @@ function useCAMSMSALAuth(options) {
             }
         });
     }); }, [mfaAuthenticator]);
-    var logout = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
+    var logout = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
         var err_2, camsError;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 2, , 3]);
@@ -553,10 +600,10 @@ function arrayBufferToBase64url(buffer) {
  * @returns A promise that resolves to a JSON-serializable representation of the PublicKeyCredential.
  */
 function register(options) {
-    return __awaiter(this, void 0, void 0, function () {
+    return __awaiter$1(this, void 0, void 0, function () {
         var createOptions, credential, publicKeyCredential, attestationResponse, transports, err_1;
         var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-        return __generator(this, function (_k) {
+        return __generator$1(this, function (_k) {
             switch (_k.label) {
                 case 0:
                     _k.trys.push([0, 2, , 3]);
@@ -614,10 +661,10 @@ function register(options) {
  * @returns A promise that resolves to a JSON-serializable representation of the PublicKeyCredential.
  */
 function authenticate(options) {
-    return __awaiter(this, void 0, void 0, function () {
+    return __awaiter$1(this, void 0, void 0, function () {
         var getOptions, credential, publicKeyCredential, assertionResponse;
         var _a;
-        return __generator(this, function (_b) {
+        return __generator$1(this, function (_b) {
             switch (_b.label) {
                 case 0:
                     getOptions = __assign(__assign({}, options), { challenge: base64urlToArrayBuffer(options.challenge), allowCredentials: (_a = options.allowCredentials) === null || _a === void 0 ? void 0 : _a.map(function (cred) { return (__assign(__assign({}, cred), { id: base64urlToArrayBuffer(cred.id) })); }) });
@@ -1185,8 +1232,8 @@ function CAMSMSALProviderInner(_a) {
         }
     }, [userProfile, profileStorageKey]);
     // Enhanced logout that also clears profile
-    var enhancedLogout = function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var enhancedLogout = function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0: return [4 /*yield*/, auth.logout()];
                 case 1:
@@ -1282,8 +1329,8 @@ function CAMSProviderCore(props) {
             }
         }
     }, [userProfile, profileStorageKey]);
-    var enhancedLogout = function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var enhancedLogout = function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0: return [4 /*yield*/, auth.logout()];
                 case 1:
@@ -1781,9 +1828,9 @@ var useOTPHandler = function (_a) {
     var _b = useState(false), loading = _b[0], setLoading = _b[1];
     var _c = useState(0), attemptCount = _c[0], setAttemptCount = _c[1];
     var _d = useState(false), isMaxAttemptsReached = _d[0], setIsMaxAttemptsReached = _d[1];
-    var handleSubmitOTP = useMemo(function () { return function (authenticationValue) { return __awaiter(void 0, void 0, void 0, function () {
+    var handleSubmitOTP = useMemo(function () { return function (authenticationValue) { return __awaiter$1(void 0, void 0, void 0, function () {
         var currentAttempt, response, error_1, currentAttempt;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     if (isMaxAttemptsReached) {
@@ -1873,9 +1920,9 @@ var useCredentialsHandler = function (onAuthComplete) {
     var _b = useState(0), attemptCount = _b[0], setAttemptCount = _b[1];
     var _c = useState(false), isMaxAttemptsReached = _c[0], setIsMaxAttemptsReached = _c[1];
     var handleSubmitCredentials = useMemo(function () {
-        return function (CredAuthEndpoint, credentials, appCode) { return __awaiter(void 0, void 0, void 0, function () {
+        return function (CredAuthEndpoint, credentials, appCode) { return __awaiter$1(void 0, void 0, void 0, function () {
             var currentAttempt, response, error_2, currentAttempt;
-            return __generator(this, function (_a) {
+            return __generator$1(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         _a.trys.push([0, 2, 3, 4]);
@@ -1947,15 +1994,15 @@ var MFAOptions = function (_a) {
     var context = useCAMSContext();
     var _f = context.authMode === "MSAL" && "sendEmailOTP" in context
         ? context
-        : { sendEmailOTP: null, completeMFA: null, logout: function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+        : { sendEmailOTP: null, completeMFA: null, logout: function () { return __awaiter$1(void 0, void 0, void 0, function () { return __generator$1(this, function (_a) {
                 return [2 /*return*/];
             }); }); } }, sendEmailOTP = _f.sendEmailOTP, completeMFA = _f.completeMFA, logout = _f.logout;
     var accessToken = context.authMode === "MSAL" ? context.accessToken : "";
     var idToken = context.authMode === "MSAL" ? context.idToken : "";
     var authenticate = useWebAuthn().authenticate;
-    var handleFIDOLogin = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var handleFIDOLogin = function () { return __awaiter$1(void 0, void 0, void 0, function () {
         var options, assertionResponse, error_1;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 4, , 5]);
@@ -2035,9 +2082,9 @@ var MFAOptions = function (_a) {
     }
     var content = jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, {});
     if (!authType) {
-        content = (jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-600 text-center mb-6", children: "Choose your preferred authentication method:" }), jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3", children: [jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", onClick: function () { return __awaiter(void 0, void 0, void 0, function () {
+        content = (jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-600 text-center mb-6", children: "Choose your preferred authentication method:" }), jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3", children: [jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", onClick: function () { return __awaiter$1(void 0, void 0, void 0, function () {
                                 var success;
-                                return __generator(this, function (_a) {
+                                return __generator$1(this, function (_a) {
                                     switch (_a.label) {
                                         case 0:
                                             // resetAttempts();
@@ -2108,16 +2155,16 @@ var ADLoginModal = function (_a) {
         resolver: a$1(credentialsSchema),
         defaultValues: { username: "", password: "" },
     });
-    var handleCredentialsSubmit = function (values) { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var handleCredentialsSubmit = function (values) { return __awaiter$1(void 0, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             setCredentials(values);
             setStep("mfa");
             return [2 /*return*/];
         });
     }); };
-    var handleMFASubmit = function (code) { return __awaiter(void 0, void 0, void 0, function () {
+    var handleMFASubmit = function (code) { return __awaiter$1(void 0, void 0, void 0, function () {
         var error_1;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     setIsLoading(true);
@@ -2178,8 +2225,8 @@ var DefaultLoginPage = function (_a) {
     var login = context.login, isLoading = context.isLoading, authMode = context.authMode;
     var _b = useState(false), showADModal = _b[0], setShowADModal = _b[1];
     var register = useWebAuthn().register;
-    var _c = useCredentialsHandler(function (state, data) { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var _c = useCredentialsHandler(function (state, data) { return __awaiter$1(void 0, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             console.log(data);
             if (state && data) {
                 context.isAuthenticated = true;
@@ -2193,6 +2240,10 @@ var DefaultLoginPage = function (_a) {
         });
     }); }), handleSubmitCredentials = _c.handleSubmitCredentials, isCredAuthLoading = _c.loading, setIsCredAuthLoading = _c.setLoading;
     var handleMSALLogin = function () {
+        if (typeof window !== "undefined" && !window.crypto) {
+            toast.error("Crypto API not available. Please use a modern browser.");
+            return;
+        }
         if (authMode === "MSAL") {
             login();
         }
@@ -2201,9 +2252,9 @@ var DefaultLoginPage = function (_a) {
             console.warn("Regular CAMS login requires configuration");
         }
     };
-    var handleRegister = function (data) { return __awaiter(void 0, void 0, void 0, function () {
+    var handleRegister = function (data) { return __awaiter$1(void 0, void 0, void 0, function () {
         var options, attestationResponse, error_1;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 4, , 5]);
@@ -2235,15 +2286,15 @@ var DefaultLoginPage = function (_a) {
             }
         });
     }); };
-    return (jsxRuntimeExports.jsxs("main", { className: "min-h-screen bg-gray-50", children: [jsxRuntimeExports.jsx(motion.div, { initial: { opacity: 0 }, animate: { opacity: 1 }, exit: { opacity: 0 }, transition: { duration: 0.5 }, children: jsxRuntimeExports.jsx("div", { className: "flex h-screen items-center justify-center", children: jsxRuntimeExports.jsxs(motion.div, { variants: cardVariants, initial: "hidden", animate: "visible", exit: "exit", className: "w-full max-w-md p-6 space-y-4 bg-gray-50 rounded-2xl shadow-2xl --dark:bg-gray-800", children: [jsxRuntimeExports.jsxs(CardHeader, { className: "text-center space-y-3", children: [jsxRuntimeExports.jsx("div", { className: "w-full flex items-center justify-center", children: jsxRuntimeExports.jsx("img", { src: NIBSSLogo, alt: "NIBSS Logo", width: 265, height: 265 }) }), jsxRuntimeExports.jsx(CardTitle, { className: "text-3xl font-bold --text-gray-900 --dark:text-white", children: "NIBSS CAMS" }), jsxRuntimeExports.jsx(CardTitle, { className: "text-gray-500 dark:text-gray-400 font-bold text-lg", children: "Centralized Authentication" })] }), jsxRuntimeExports.jsxs(CardAction, { className: "w-full flex flex-col items-center justify-center text-center text-gray-500 dark:text-gray-400 mb-6", children: [jsxRuntimeExports.jsx("img", { src: AuthLogo, alt: "Auth Logo", width: 365, height: 365 }), "Kindly use the below identity providers to authenticate"] }), jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsxs(Button
+    return (jsxRuntimeExports.jsxs("main", { className: "min-h-screen bg-gray-50", children: [jsxRuntimeExports.jsx(motion.div, { initial: { opacity: 0 }, animate: { opacity: 1 }, exit: { opacity: 0 }, transition: { duration: 0.5 }, children: jsxRuntimeExports.jsx("div", { className: "flex h-screen items-center justify-center", children: jsxRuntimeExports.jsxs(motion.div, { variants: cardVariants, initial: "hidden", animate: "visible", exit: "exit", className: "w-full max-w-md p-6 space-y-4 bg-gray-50 rounded-2xl shadow-2xl --dark:bg-gray-800", children: [jsxRuntimeExports.jsxs(CardHeader, { className: "text-center space-y-3", children: [jsxRuntimeExports.jsx("div", { className: "w-full flex items-center justify-center", children: jsxRuntimeExports.jsx("img", { src: NIBSSLogo, alt: "NIBSS Logo", width: 265, height: 265 }) }), jsxRuntimeExports.jsx(CardTitle, { className: "text-3xl font-bold --text-gray-900 --dark:text-white", children: "NIBSS CAMS" }), jsxRuntimeExports.jsx(CardTitle, { className: "text-gray-500 dark:text-gray-400 font-bold text-lg", children: "Centralized Authentication" })] }), jsxRuntimeExports.jsxs(CardAction, { className: "w-full flex flex-col items-center justify-center text-center text-gray-500 dark:text-gray-400 mb-8", children: [jsxRuntimeExports.jsx("img", { src: AuthLogo, alt: "Auth Logo", width: 365, height: 365 }), "Use Below Identity Providers To Authenticate"] }), jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsxs(Button
                                     // variant="outline"
                                     , { 
                                         // variant="outline"
                                         className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: handleMSALLogin, disabled: isLoading, children: [jsxRuntimeExports.jsx("img", { src: MicrosoftLogo, alt: "Microsoft Logo", width: 35, height: 35 }), jsxRuntimeExports.jsx("span", { className: "ml-2", children: isLoading ? "Logging in..." : "Sign in with Microsoft" })] }), useADLogin && (jsxRuntimeExports.jsxs(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: function () { return setShowADModal(true); }, disabled: isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 64 }), jsxRuntimeExports.jsx("span", { children: isLoading
                                                     ? "Logging in..."
-                                                    : "Sign in with ActiveDirectory" })] })), usePassKey && (jsxRuntimeExports.jsxs(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: function () { return handleRegister(PassKeysRegisterProps); }, disabled: isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 64 }), jsxRuntimeExports.jsx("span", { children: "Create a Passkey" })] }))] }), jsxRuntimeExports.jsxs(CardFooter, { className: "flex items-center justify-center mt-6 space-x-2 text-gray-400 text-sm", children: [jsxRuntimeExports.jsx(ShieldCheck, { className: "w-4 h-4 text-[#506f4a] pulse-glow" }), jsxRuntimeExports.jsx("span", { children: "Powered By NIBSS" })] })] }) }) }, "landing"), jsxRuntimeExports.jsx(ADLoginModal, { open: showADModal, onOpenChange: setShowADModal, isLoading: isCredAuthLoading, setIsLoading: setIsCredAuthLoading, onLogin: function (_a) { return __awaiter(void 0, [_a], void 0, function (_b) {
+                                                    : "Sign in with ActiveDirectory" })] })), usePassKey && (jsxRuntimeExports.jsxs(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: function () { return handleRegister(PassKeysRegisterProps); }, disabled: isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 64 }), jsxRuntimeExports.jsx("span", { children: "Create a Passkey" })] }))] }), jsxRuntimeExports.jsxs(CardFooter, { className: "flex items-center justify-center mt-6 space-x-2 text-gray-400 text-sm", children: [jsxRuntimeExports.jsx(ShieldCheck, { className: "w-4 h-4 text-[#506f4a] pulse-glow" }), jsxRuntimeExports.jsx("span", { children: "Powered By NIBSS" })] })] }) }) }, "landing"), jsxRuntimeExports.jsx(ADLoginModal, { open: showADModal, onOpenChange: setShowADModal, isLoading: isCredAuthLoading, setIsLoading: setIsCredAuthLoading, onLogin: function (_a) { return __awaiter$1(void 0, [_a], void 0, function (_b) {
                     var username = _b.username, password = _b.password, MFACode = _b.MFACode;
-                    return __generator(this, function (_c) {
+                    return __generator$1(this, function (_c) {
                         // Implement your AD login logic here
                         console.log("AD Login:", { username: username, password: password, MFACode: MFACode });
                         // Example: await adLoginService(username, password, mfaCode);
@@ -2284,8 +2335,8 @@ var MFAGate = function (_a) {
         if (!success)
             Logger.error("MFA authentication failed");
     }, []);
-    var handleAuthFailed = useCallback(function () { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var handleAuthFailed = useCallback(function () { return __awaiter$1(void 0, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0: return [4 /*yield*/, context.logout()];
                 case 1: