@nibssplc/cams-sdk-react 1.0.0-rc.82 → 1.0.0-rc.84

package/dist/index.esm.js

@@ -8,7 +8,7 @@ import { toast } from 'sonner';
 import { jsx, Fragment, jsxs } from 'react/jsx-runtime';
 import z$1, { z } from 'zod';
 import { OTPInput, OTPInputContext, REGEXP_ONLY_DIGITS } from 'input-otp';
-import { RectangleEllipsis, XIcon, CheckCircle, Shield, KeyIcon, ShieldCheck, ShieldClose, Loader2 } from 'lucide-react';
+import { RectangleEllipsis, XIcon, CheckCircle, Shield, KeyIcon, ShieldCheck, ShieldClose, EyeOff, Eye, Loader2 } from 'lucide-react';
 import { appendErrors, FormProvider, Controller, useFormContext, useFormState, useForm } from 'react-hook-form';
 import { validateFieldsNatively, toNestErrors } from '@hookform/resolvers';
 import { clsx } from 'clsx';
@@ -420,11 +420,10 @@ function useCAMSMSALAuth(options) {
     var _d = useState(""), idToken = _d[0], setIdToken = _d[1];
     var _e = useState(""), accessToken = _e[0], setAccessToken = _e[1];
     var _f = useState(""), email = _f[0], setEmail = _f[1];
-    // const [mfaAuthenticator, setMfaAuthenticator] =
-    //   useState<CAMSMFAAuthenticator | null>(null);
     var _g = useState(false), requiresMFA = _g[0], setRequiresMFA = _g[1];
-    var isLoading = inProgress !== InteractionStatus.None;
-    var isAuthenticated = !!account && !!accessToken && !requiresMFA;
+    var _h = useState(false), isFetchingMFAConfig = _h[0], setIsFetchingMFAConfig = _h[1];
+    var isLoading = inProgress !== InteractionStatus.None || isFetchingMFAConfig;
+    var isAuthenticated = !!account && !!accessToken;
     var scopes = optScopes || ["openid", "profile", "email"];
     var isTokenValid = function (token) {
         try {
@@ -492,9 +491,11 @@ function useCAMSMSALAuth(options) {
                         APIAuthEndpoint: ValidateUserEndpoint,
                     };
                     authenticator = new CAMSMFAAuthenticator();
+                    setIsFetchingMFAConfig(true);
                     return [4 /*yield*/, authenticator.GetUserMFAConfig(mfaConfig)];
                 case 3:
                     userConfig = _b.sent();
+                    setIsFetchingMFAConfig(false);
                     console.log("CAMS MFA Authenticator initialized:", {
                         mfaConfig: mfaConfig,
                         userConfig: userConfig,
@@ -521,6 +522,7 @@ function useCAMSMSALAuth(options) {
                         camsError = new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "Login failed: " + userConfig.message);
                         toast.error("Login failed");
                         setError(camsError);
+                        setIsFetchingMFAConfig(false);
                     }
                     return [3 /*break*/, 5];
                 case 4:
@@ -545,6 +547,7 @@ function useCAMSMSALAuth(options) {
                     }
                     camsError = new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "Login failed: " + err_1.message || err_1);
                     setError(camsError);
+                    setIsFetchingMFAConfig(false);
                     return [3 /*break*/, 5];
                 case 5: return [2 /*return*/];
             }
@@ -1642,12 +1645,13 @@ var credentialsSchema = z.object({
 });
 var ADLoginModal = function (_a) {
     var open = _a.open, isLoading = _a.isLoading, setIsLoading = _a.setIsLoading, onOpenChange = _a.onOpenChange, onLogin = _a.onLogin;
-    var _b = useState("credentials"), step = _b[0], setStep = _b[1];
-    var _c = useState({
+    var _b = useState("Credentials"), step = _b[0], setStep = _b[1];
+    var _c = useState(false), showPassword = _c[0], setShowPassword = _c[1];
+    var _d = useState({
         username: "",
         password: "",
-    }), credentials = _c[0], setCredentials = _c[1];
-    var _d = useState(""), mfaCode = _d[0], setMfaCode = _d[1];
+    }), credentials = _d[0], setCredentials = _d[1];
+    var _e = useState(""), MFACode = _e[0], setMFACode = _e[1];
     var form = useForm({
         resolver: a$1(credentialsSchema),
         defaultValues: { username: "", password: "" },
@@ -1655,7 +1659,7 @@ var ADLoginModal = function (_a) {
     var handleCredentialsSubmit = function (values) { return __awaiter$1(void 0, void 0, void 0, function () {
         return __generator$1(this, function (_a) {
             setCredentials(values);
-            setStep("mfa");
+            setStep("MFA");
             return [2 /*return*/];
         });
     }); };
@@ -1677,9 +1681,9 @@ var ADLoginModal = function (_a) {
                 case 2:
                     _a.sent();
                     onOpenChange(false);
-                    setStep("credentials");
+                    setStep("Credentials");
                     form.reset();
-                    setMfaCode("");
+                    setMFACode("");
                     return [3 /*break*/, 5];
                 case 3:
                     error_1 = _a.sent();
@@ -1694,17 +1698,18 @@ var ADLoginModal = function (_a) {
     }); };
     var handleClose = function () {
         onOpenChange(false);
-        setStep("credentials");
+        setStep("Credentials");
         form.reset();
-        setMfaCode("");
+        setMFACode("");
+        setShowPassword(false);
     };
-    return (jsx(Dialog, { open: open, onOpenChange: handleClose, children: jsxs(DialogContent, { className: "min-w-[50vw] max-w-[70vw]", children: [jsx(DialogHeader, { children: jsxs("div", { className: "flex items-center gap-4", children: [jsx(KeyIcon, { className: "w-8 h-8 text-[#506f4a]" }), jsx(DialogTitle, { className: "text-xl", children: "Sign in with AD Credentials" })] }) }), step === "credentials" ? (jsx(Form, __assign({}, form, { children: jsxs("form", { onSubmit: form.handleSubmit(handleCredentialsSubmit), className: "space-y-6", children: [jsx(FormField, { control: form.control, name: "username", render: function (_a) {
+    return (jsx(Dialog, { open: open, onOpenChange: handleClose, children: jsxs(DialogContent, { className: "min-w-[50vw] max-w-[70vw]", children: [jsx(DialogHeader, { children: jsxs("div", { className: "flex items-center gap-4", children: [jsx(KeyIcon, { className: "w-8 h-8 text-[#506f4a]" }), jsx(DialogTitle, { className: "text-xl", children: "Sign in with AD Credentials" })] }) }), step === "Credentials" ? (jsx(Form, __assign({}, form, { children: jsxs("form", { onSubmit: form.handleSubmit(handleCredentialsSubmit), className: "space-y-6", children: [jsx(FormField, { control: form.control, name: "username", render: function (_a) {
                                     var field = _a.field;
                                     return (jsxs(FormItem, { children: [jsx(FormLabel, { children: "Username" }), jsx(FormControl, { children: jsx(Input, __assign({ className: "h-12", placeholder: "Enter your username" }, field)) }), jsx(FormMessage, {})] }));
                                 } }), jsx(FormField, { control: form.control, name: "password", render: function (_a) {
                                     var field = _a.field;
-                                    return (jsxs(FormItem, { children: [jsx(FormLabel, { children: "Password" }), jsx(FormControl, { children: jsx(Input, __assign({ className: "h-12", type: "password", placeholder: "Enter your password" }, field)) }), jsx(FormMessage, {})] }));
-                                } }), jsx(Button, { type: "submit", className: "py-3 w-full bg-[#506f4a] hover:bg-[#506f4a]/90", children: "Continue" })] }) }))) : (jsxs("div", { className: "space-y-4", children: [jsx(GenericOTPVerifier, { value: mfaCode, setValue: setMfaCode, setLoading: setIsLoading, isDisabled: isLoading, onChangeOTP: handleMFASubmit, fieldName: "AuthenticatorCode" }), isLoading && (jsxs("div", { className: "flex items-center justify-center gap-2 text-sm text-muted-foreground", children: [jsx(Loader2, { className: "w-4 h-4 animate-spin" }), jsx("span", { children: "Verifying..." })] }))] }))] }) }));
+                                    return (jsxs(FormItem, { children: [jsx(FormLabel, { children: "Password" }), jsx(FormControl, { children: jsxs("div", { className: "relative", children: [jsx(Input, __assign({ className: "h-12 pr-10", type: "password", placeholder: "Enter your password" }, field)), jsx("button", { type: "button", onClick: function () { return setShowPassword(!showPassword); }, className: "absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground", children: showPassword ? (jsx(EyeOff, { className: "w-5 h-5" })) : (jsx(Eye, { className: "w-5 h-5" })) })] }) }), jsx(FormMessage, {})] }));
+                                } }), jsx(Button, { type: "submit", className: "py-3 w-full bg-[#506f4a] hover:bg-[#506f4a]/90", children: "Continue" })] }) }))) : (jsxs("div", { className: "space-y-4", children: [jsx(GenericOTPVerifier, { value: MFACode, setValue: setMFACode, setLoading: setIsLoading, isDisabled: isLoading, onChangeOTP: handleMFASubmit, fieldName: "AuthenticatorCode" }), isLoading && (jsxs("div", { className: "flex items-center justify-center gap-2 text-sm text-muted-foreground", children: [jsx(Loader2, { className: "w-4 h-4 animate-spin" }), jsx("span", { children: "Verifying..." })] }))] }))] }) }));
 };
 
 var DefaultLoginPage = function (_a) {
@@ -1729,6 +1734,12 @@ var DefaultLoginPage = function (_a) {
             console.log(data);
             if (state && data && data.isValid) {
                 context.isAuthenticated = true;
+                localStorage.setItem(context.storageKey, JSON.stringify({
+                    isAuthenticated: false,
+                    requiresMFA: false,
+                    accessToken: "Credentials",
+                    idToken: "Credentials",
+                }));
                 context.requiresMFA = false;
                 context.setUserProfile({
                     state: "AUTH_SUCCESS",
@@ -1744,7 +1755,7 @@ var DefaultLoginPage = function (_a) {
                 });
             }
             else {
-                toast.error("\u274C AD Login failed. ".concat((data === null || data === void 0 ? void 0 : data.message) || 'Unknown error'));
+                toast.error("\u274C AD Login failed. ".concat((data === null || data === void 0 ? void 0 : data.message) || "Unknown error"));
             }
             return [2 /*return*/];
         });
@@ -1776,7 +1787,12 @@ var DefaultLoginPage = function (_a) {
                     return __generator$1(this, function (_c) {
                         // Implement your AD login logic here
                         console.log("AD Login:", { username: username, MFACode: MFACode });
-                        handleSubmitCredentials(CredentialsAuthEndpoint, { username: username, password: password, MFACode: MFACode, appCode: context.appCode });
+                        handleSubmitCredentials(CredentialsAuthEndpoint, {
+                            username: username,
+                            password: password,
+                            MFACode: MFACode,
+                            appCode: context.appCode,
+                        });
                         return [2 /*return*/];
                     });
                 }); } })] }));
@@ -1802,7 +1818,7 @@ var MFAGate = function (_a) {
     usePassKey = _c === void 0 ? false : _c, _d = _a.useADLogin, useADLogin = _d === void 0 ? false : _d, CredentialsAuthEndpoint = _a.CredentialsAuthEndpoint, PassKeysRegisterProps = _a.PassKeysRegisterProps, MFAEndpoints = _a.MFAEndpoints, requiresMFA = _a.requiresMFA, onAuthSuccess = _a.onAuthSuccess, onAuthError = _a.onAuthError;
     var context = useCAMSContext();
     var _e = useState("Loading"), authState = _e[0], setAuthState = _e[1];
-    var validatedMFAEndpoints = useMemo(function () {
+    var ValidatedMFAEndpoints = useMemo(function () {
         var parsed = MFAEndpointsSchema.safeParse(MFAEndpoints);
         if (!parsed.success) {
             Logger.error("Invalid MFAEndpoint", parsed.error);
@@ -1860,20 +1876,19 @@ var MFAGate = function (_a) {
             setAuthState("Loading");
             return;
         }
-        if (!context.isAuthenticated) {
+        // Check if user has accessToken (MSAL authenticated)
+        if (!contextAccessToken) {
             setAuthState("Unauthenticated");
             return;
         }
-        // If authenticated, determine if MFA is required
+        // User has accessToken, determine if MFA is required
         var shouldRequireMFA = requiresMFA !== null && requiresMFA !== void 0 ? requiresMFA : contextRequiresMFA;
         console.log("MFA decision:", {
             shouldRequireMFA: shouldRequireMFA,
             hasAccessToken: !!contextAccessToken,
-            finalState: shouldRequireMFA && contextAccessToken
-                ? "MFA_Required"
-                : "Authenticated",
+            finalState: shouldRequireMFA ? "MFA_Required" : "Authenticated",
         });
-        if (shouldRequireMFA && contextAccessToken) {
+        if (shouldRequireMFA) {
             setAuthState("MFA_Required");
         }
         else {
@@ -1885,6 +1900,7 @@ var MFAGate = function (_a) {
         contextRequiresMFA, // Now this will trigger re-evaluation when requiresMFA changes
         contextAccessToken, // And this when accessToken changes
         requiresMFA,
+        context.authMode,
     ]);
     // Debug useEffect
     useEffect(function () {
@@ -1905,7 +1921,7 @@ var MFAGate = function (_a) {
     ]);
     if (useADLogin && !CredentialsAuthEndpoint)
         return jsx(ErrorFallback, { message: "Invalid AD Login Configuration." });
-    if (!validatedMFAEndpoints)
+    if (!ValidatedMFAEndpoints)
         return jsx(ErrorFallback, { message: "Invalid MFA Configuration." });
     if (context.authMode !== "MSAL")
         return jsx(Fragment, { children: children });
@@ -1913,12 +1929,12 @@ var MFAGate = function (_a) {
         case "Loading":
             return fallback;
         case "MFA_Required":
-            return (jsx(MFAOptions, { MFAEndpoints: validatedMFAEndpoints, usePassKey: usePassKey, onComplete: handleComplete, onAuthFailed: handleAuthFailed }));
+            return (jsx(MFAOptions, { MFAEndpoints: ValidatedMFAEndpoints, usePassKey: usePassKey, onComplete: handleComplete, onAuthFailed: handleAuthFailed }));
         case "Authenticated":
             return jsx(Fragment, { children: children });
         case "Unauthenticated":
         default:
-            return (jsx(DefaultLoginPage, { usePassKey: usePassKey, useADLogin: useADLogin, MFAEndpoints: MFAEndpoints, PassKeysRegisterProps: PassKeysRegisterProps, CredentialsAuthEndpoint: CredentialsAuthEndpoint }));
+            return (jsx(DefaultLoginPage, { usePassKey: usePassKey, useADLogin: useADLogin, MFAEndpoints: ValidatedMFAEndpoints, PassKeysRegisterProps: PassKeysRegisterProps, CredentialsAuthEndpoint: CredentialsAuthEndpoint }));
     }
 };