@nibssplc/cams-sdk-react 1.0.0-rc.81 → 1.0.0-rc.83

package/dist/index.esm.js

@@ -8,7 +8,7 @@ import { toast } from 'sonner';
 import { jsx, Fragment, jsxs } from 'react/jsx-runtime';
 import z$1, { z } from 'zod';
 import { OTPInput, OTPInputContext, REGEXP_ONLY_DIGITS } from 'input-otp';
-import { RectangleEllipsis, XIcon, CheckCircle, Shield, KeyIcon, ShieldCheck, ShieldClose, Loader2 } from 'lucide-react';
+import { RectangleEllipsis, XIcon, CheckCircle, Shield, KeyIcon, ShieldCheck, ShieldClose, EyeOff, Eye, Loader2 } from 'lucide-react';
 import { appendErrors, FormProvider, Controller, useFormContext, useFormState, useForm } from 'react-hook-form';
 import { validateFieldsNatively, toNestErrors } from '@hookform/resolvers';
 import { clsx } from 'clsx';
@@ -420,11 +420,9 @@ function useCAMSMSALAuth(options) {
     var _d = useState(""), idToken = _d[0], setIdToken = _d[1];
     var _e = useState(""), accessToken = _e[0], setAccessToken = _e[1];
     var _f = useState(""), email = _f[0], setEmail = _f[1];
-    // const [mfaAuthenticator, setMfaAuthenticator] =
-    //   useState<CAMSMFAAuthenticator | null>(null);
     var _g = useState(false), requiresMFA = _g[0], setRequiresMFA = _g[1];
     var isLoading = inProgress !== InteractionStatus.None;
-    var isAuthenticated = !!account && !!accessToken && !requiresMFA;
+    var isAuthenticated = !!account && !!accessToken;
     var scopes = optScopes || ["openid", "profile", "email"];
     var isTokenValid = function (token) {
         try {
@@ -1642,12 +1640,13 @@ var credentialsSchema = z.object({
 });
 var ADLoginModal = function (_a) {
     var open = _a.open, isLoading = _a.isLoading, setIsLoading = _a.setIsLoading, onOpenChange = _a.onOpenChange, onLogin = _a.onLogin;
-    var _b = useState("credentials"), step = _b[0], setStep = _b[1];
-    var _c = useState({
+    var _b = useState("Credentials"), step = _b[0], setStep = _b[1];
+    var _c = useState(false), showPassword = _c[0], setShowPassword = _c[1];
+    var _d = useState({
         username: "",
         password: "",
-    }), credentials = _c[0], setCredentials = _c[1];
-    var _d = useState(""), mfaCode = _d[0], setMfaCode = _d[1];
+    }), credentials = _d[0], setCredentials = _d[1];
+    var _e = useState(""), MFACode = _e[0], setMFACode = _e[1];
     var form = useForm({
         resolver: a$1(credentialsSchema),
         defaultValues: { username: "", password: "" },
@@ -1655,7 +1654,7 @@ var ADLoginModal = function (_a) {
     var handleCredentialsSubmit = function (values) { return __awaiter$1(void 0, void 0, void 0, function () {
         return __generator$1(this, function (_a) {
             setCredentials(values);
-            setStep("mfa");
+            setStep("MFA");
             return [2 /*return*/];
         });
     }); };
@@ -1677,9 +1676,9 @@ var ADLoginModal = function (_a) {
                 case 2:
                     _a.sent();
                     onOpenChange(false);
-                    setStep("credentials");
+                    setStep("Credentials");
                     form.reset();
-                    setMfaCode("");
+                    setMFACode("");
                     return [3 /*break*/, 5];
                 case 3:
                     error_1 = _a.sent();
@@ -1694,17 +1693,18 @@ var ADLoginModal = function (_a) {
     }); };
     var handleClose = function () {
         onOpenChange(false);
-        setStep("credentials");
+        setStep("Credentials");
         form.reset();
-        setMfaCode("");
+        setMFACode("");
+        setShowPassword(false);
     };
-    return (jsx(Dialog, { open: open, onOpenChange: handleClose, children: jsxs(DialogContent, { className: "min-w-[50vw] max-w-[70vw]", children: [jsx(DialogHeader, { children: jsxs("div", { className: "flex items-center gap-4", children: [jsx(KeyIcon, { className: "w-8 h-8 text-[#506f4a]" }), jsx(DialogTitle, { className: "text-xl", children: "Sign in with AD Credentials" })] }) }), step === "credentials" ? (jsx(Form, __assign({}, form, { children: jsxs("form", { onSubmit: form.handleSubmit(handleCredentialsSubmit), className: "space-y-6", children: [jsx(FormField, { control: form.control, name: "username", render: function (_a) {
+    return (jsx(Dialog, { open: open, onOpenChange: handleClose, children: jsxs(DialogContent, { className: "min-w-[50vw] max-w-[70vw]", children: [jsx(DialogHeader, { children: jsxs("div", { className: "flex items-center gap-4", children: [jsx(KeyIcon, { className: "w-8 h-8 text-[#506f4a]" }), jsx(DialogTitle, { className: "text-xl", children: "Sign in with AD Credentials" })] }) }), step === "Credentials" ? (jsx(Form, __assign({}, form, { children: jsxs("form", { onSubmit: form.handleSubmit(handleCredentialsSubmit), className: "space-y-6", children: [jsx(FormField, { control: form.control, name: "username", render: function (_a) {
                                     var field = _a.field;
                                     return (jsxs(FormItem, { children: [jsx(FormLabel, { children: "Username" }), jsx(FormControl, { children: jsx(Input, __assign({ className: "h-12", placeholder: "Enter your username" }, field)) }), jsx(FormMessage, {})] }));
                                 } }), jsx(FormField, { control: form.control, name: "password", render: function (_a) {
                                     var field = _a.field;
-                                    return (jsxs(FormItem, { children: [jsx(FormLabel, { children: "Password" }), jsx(FormControl, { children: jsx(Input, __assign({ className: "h-12", type: "password", placeholder: "Enter your password" }, field)) }), jsx(FormMessage, {})] }));
-                                } }), jsx(Button, { type: "submit", className: "py-3 w-full bg-[#506f4a] hover:bg-[#506f4a]/90", children: "Continue" })] }) }))) : (jsxs("div", { className: "space-y-4", children: [jsx(GenericOTPVerifier, { value: mfaCode, setValue: setMfaCode, setLoading: setIsLoading, isDisabled: isLoading, onChangeOTP: handleMFASubmit, fieldName: "AuthenticatorCode" }), isLoading && (jsxs("div", { className: "flex items-center justify-center gap-2 text-sm text-muted-foreground", children: [jsx(Loader2, { className: "w-4 h-4 animate-spin" }), jsx("span", { children: "Verifying..." })] }))] }))] }) }));
+                                    return (jsxs(FormItem, { children: [jsx(FormLabel, { children: "Password" }), jsx(FormControl, { children: jsxs("div", { className: "relative", children: [jsx(Input, __assign({ className: "h-12 pr-10", type: "password", placeholder: "Enter your password" }, field)), jsx("button", { type: "button", onClick: function () { return setShowPassword(!showPassword); }, className: "absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground", children: showPassword ? (jsx(EyeOff, { className: "w-5 h-5" })) : (jsx(Eye, { className: "w-5 h-5" })) })] }) }), jsx(FormMessage, {})] }));
+                                } }), jsx(Button, { type: "submit", className: "py-3 w-full bg-[#506f4a] hover:bg-[#506f4a]/90", children: "Continue" })] }) }))) : (jsxs("div", { className: "space-y-4", children: [jsx(GenericOTPVerifier, { value: MFACode, setValue: setMFACode, setLoading: setIsLoading, isDisabled: isLoading, onChangeOTP: handleMFASubmit, fieldName: "AuthenticatorCode" }), isLoading && (jsxs("div", { className: "flex items-center justify-center gap-2 text-sm text-muted-foreground", children: [jsx(Loader2, { className: "w-4 h-4 animate-spin" }), jsx("span", { children: "Verifying..." })] }))] }))] }) }));
 };
 
 var DefaultLoginPage = function (_a) {
@@ -1729,6 +1729,12 @@ var DefaultLoginPage = function (_a) {
             console.log(data);
             if (state && data && data.isValid) {
                 context.isAuthenticated = true;
+                localStorage.setItem(context.storageKey, JSON.stringify({
+                    isAuthenticated: false,
+                    requiresMFA: false,
+                    accessToken: "Credentials",
+                    idToken: "Credentials",
+                }));
                 context.requiresMFA = false;
                 context.setUserProfile({
                     state: "AUTH_SUCCESS",
@@ -1744,7 +1750,7 @@ var DefaultLoginPage = function (_a) {
                 });
             }
             else {
-                toast.error("\u274C AD Login failed. ".concat((data === null || data === void 0 ? void 0 : data.message) || 'Unknown error'));
+                toast.error("\u274C AD Login failed. ".concat((data === null || data === void 0 ? void 0 : data.message) || "Unknown error"));
             }
             return [2 /*return*/];
         });
@@ -1776,7 +1782,12 @@ var DefaultLoginPage = function (_a) {
                     return __generator$1(this, function (_c) {
                         // Implement your AD login logic here
                         console.log("AD Login:", { username: username, MFACode: MFACode });
-                        handleSubmitCredentials(CredentialsAuthEndpoint, { username: username, password: password, MFACode: MFACode, appCode: context.appCode });
+                        handleSubmitCredentials(CredentialsAuthEndpoint, {
+                            username: username,
+                            password: password,
+                            MFACode: MFACode,
+                            appCode: context.appCode,
+                        });
                         return [2 /*return*/];
                     });
                 }); } })] }));
@@ -1795,15 +1806,14 @@ var MFAEndpointsSchema = z$1.object({
     AuthChallengeVerify: z$1.url("MFA AuthChallengeVerify must be a valid URL"),
 });
 var MFAGate = function (_a) {
-    var _b, _c, _d;
-    var children = _a.children, _e = _a.fallback, fallback = _e === void 0 ? (jsx("div", { className: "h-screen flex items-center justify-center", children: jsx(LoadingSpinner, {}) })) : _e, 
+    var children = _a.children, _b = _a.fallback, fallback = _b === void 0 ? (jsx("div", { className: "h-screen flex items-center justify-center", children: jsx(LoadingSpinner, {}) })) : _b, 
     // loginComponent: LoginComponent = DefaultLoginPage,
-    _f = _a.usePassKey, 
+    _c = _a.usePassKey, 
     // loginComponent: LoginComponent = DefaultLoginPage,
-    usePassKey = _f === void 0 ? false : _f, _g = _a.useADLogin, useADLogin = _g === void 0 ? false : _g, CredentialsAuthEndpoint = _a.CredentialsAuthEndpoint, PassKeysRegisterProps = _a.PassKeysRegisterProps, MFAEndpoints = _a.MFAEndpoints, requiresMFA = _a.requiresMFA, onAuthSuccess = _a.onAuthSuccess, onAuthError = _a.onAuthError;
+    usePassKey = _c === void 0 ? false : _c, _d = _a.useADLogin, useADLogin = _d === void 0 ? false : _d, CredentialsAuthEndpoint = _a.CredentialsAuthEndpoint, PassKeysRegisterProps = _a.PassKeysRegisterProps, MFAEndpoints = _a.MFAEndpoints, requiresMFA = _a.requiresMFA, onAuthSuccess = _a.onAuthSuccess, onAuthError = _a.onAuthError;
     var context = useCAMSContext();
-    var _h = useState("Loading"), authState = _h[0], setAuthState = _h[1];
-    var validatedMFAEndpoints = useMemo(function () {
+    var _e = useState("Loading"), authState = _e[0], setAuthState = _e[1];
+    var ValidatedMFAEndpoints = useMemo(function () {
         var parsed = MFAEndpointsSchema.safeParse(MFAEndpoints);
         if (!parsed.success) {
             Logger.error("Invalid MFAEndpoint", parsed.error);
@@ -1811,6 +1821,9 @@ var MFAGate = function (_a) {
         }
         return parsed.data;
     }, [MFAEndpoints]);
+    // Extract the specific values we need from context for dependencies
+    var contextRequiresMFA = "requiresMFA" in context ? context.requiresMFA : false;
+    var contextAccessToken = "accessToken" in context ? context.accessToken : "";
     var handleComplete = useCallback(function (success) {
         var _a;
         if (success && context.authMode === "MSAL") {
@@ -1846,61 +1859,64 @@ var MFAGate = function (_a) {
             }
         });
     }); }, [context, onAuthError]);
-    Logger.debug("User context:", {
-        user: context.user,
-        profile: (_b = context.user) === null || _b === void 0 ? void 0 : _b.profile,
-        email: (_d = (_c = context.user) === null || _c === void 0 ? void 0 : _c.profile) === null || _d === void 0 ? void 0 : _d.email,
-    });
     useEffect(function () {
+        console.log("Auth evaluation triggered:", {
+            isLoading: context.isLoading,
+            isAuthenticated: context.isAuthenticated,
+            contextRequiresMFA: contextRequiresMFA,
+            contextAccessToken: !!contextAccessToken,
+            requiresMFA: requiresMFA,
+        });
         if (context.isLoading) {
             setAuthState("Loading");
             return;
         }
-        if (!context.isAuthenticated) {
+        // Check if user has accessToken (MSAL authenticated)
+        if (!contextAccessToken) {
             setAuthState("Unauthenticated");
             return;
         }
-        // Small delay to ensure all context updates are processed
-        var timer = setTimeout(function () {
-            var shouldRequireMFA = requiresMFA !== null && requiresMFA !== void 0 ? requiresMFA : ("requiresMFA" in context ? context.requiresMFA : false);
-            var accessToken = "accessToken" in context ? context.accessToken : "";
-            console.log("Auth State Debug:", {
-                isAuthenticated: context.isAuthenticated,
-                shouldRequireMFA: shouldRequireMFA,
-                accessToken: !!accessToken,
-                requiresMFA: requiresMFA,
-                contextRequiresMFA: "requiresMFA" in context ? context.requiresMFA : "N/A"
-            });
-            if (shouldRequireMFA && accessToken) {
-                setAuthState("MFA_Required");
-            }
-            else {
-                setAuthState("Authenticated");
-            }
-        }, 50);
-        return function () { return clearTimeout(timer); };
+        // User has accessToken, determine if MFA is required
+        var shouldRequireMFA = requiresMFA !== null && requiresMFA !== void 0 ? requiresMFA : contextRequiresMFA;
+        console.log("MFA decision:", {
+            shouldRequireMFA: shouldRequireMFA,
+            hasAccessToken: !!contextAccessToken,
+            finalState: shouldRequireMFA ? "MFA_Required" : "Authenticated",
+        });
+        if (shouldRequireMFA) {
+            setAuthState("MFA_Required");
+        }
+        else {
+            setAuthState("Authenticated");
+        }
     }, [
-        context.accessToken,
         context.isLoading,
         context.isAuthenticated,
-        context.requiresMFA,
+        contextRequiresMFA, // Now this will trigger re-evaluation when requiresMFA changes
+        contextAccessToken, // And this when accessToken changes
         requiresMFA,
-        context,
+        context.authMode,
     ]);
-    // Add this debug useEffect to see what's happening
+    // Debug useEffect
     useEffect(function () {
         console.log("Current authState:", authState);
         console.log("Context state:", {
             isLoading: context.isLoading,
             isAuthenticated: context.isAuthenticated,
             authMode: context.authMode,
-            requiresMFA: "requiresMFA" in context ? context.requiresMFA : "N/A",
-            hasAccessToken: "accessToken" in context ? !!context.accessToken : false
+            requiresMFA: contextRequiresMFA,
+            hasAccessToken: !!contextAccessToken,
         });
-    }, [authState, context]);
+    }, [
+        authState,
+        context.isLoading,
+        context.isAuthenticated,
+        contextRequiresMFA,
+        contextAccessToken,
+    ]);
     if (useADLogin && !CredentialsAuthEndpoint)
         return jsx(ErrorFallback, { message: "Invalid AD Login Configuration." });
-    if (!validatedMFAEndpoints)
+    if (!ValidatedMFAEndpoints)
         return jsx(ErrorFallback, { message: "Invalid MFA Configuration." });
     if (context.authMode !== "MSAL")
         return jsx(Fragment, { children: children });
@@ -1908,12 +1924,12 @@ var MFAGate = function (_a) {
         case "Loading":
             return fallback;
         case "MFA_Required":
-            return (jsx(MFAOptions, { MFAEndpoints: validatedMFAEndpoints, usePassKey: usePassKey, onComplete: handleComplete, onAuthFailed: handleAuthFailed }));
+            return (jsx(MFAOptions, { MFAEndpoints: ValidatedMFAEndpoints, usePassKey: usePassKey, onComplete: handleComplete, onAuthFailed: handleAuthFailed }));
         case "Authenticated":
             return jsx(Fragment, { children: children });
         case "Unauthenticated":
         default:
-            return (jsx(DefaultLoginPage, { usePassKey: usePassKey, useADLogin: useADLogin, MFAEndpoints: MFAEndpoints, PassKeysRegisterProps: PassKeysRegisterProps, CredentialsAuthEndpoint: CredentialsAuthEndpoint }));
+            return (jsx(DefaultLoginPage, { usePassKey: usePassKey, useADLogin: useADLogin, MFAEndpoints: ValidatedMFAEndpoints, PassKeysRegisterProps: PassKeysRegisterProps, CredentialsAuthEndpoint: CredentialsAuthEndpoint }));
     }
 };