@orangecheck/auth-client 2.12.0 → 2.14.0

package/dist/index.d.mts

@@ -1,5 +1,11 @@
 import * as React from 'react';
 
+declare const DISPLAY_IDENTITY_KINDS: readonly ["did", "btc", "email", "nostr"];
+type DisplayIdentityKind = (typeof DISPLAY_IDENTITY_KINDS)[number];
+interface DisplayIdentity {
+    kind: DisplayIdentityKind;
+    value: string;
+}
 interface OcAccount {
     accountId: string;
     didOc: string;
@@ -10,6 +16,7 @@ interface OcAccount {
     homeFederation?: string | null;
     signingMethod?: 'fedimint_threshold' | 'fedimint_client' | 'bip322' | null;
     isOwner?: boolean;
+    displayIdentity: DisplayIdentity;
 }
 type OcSessionStatus = 'loading' | 'authenticated' | 'anonymous' | 'error';
 interface OcSessionState {
@@ -18,6 +25,7 @@ interface OcSessionState {
     error: Error | null;
     refresh: () => Promise<void>;
     signOut: () => Promise<void>;
+    setDisplayIdentity: (kind: DisplayIdentityKind) => Promise<void>;
     signInUrl: string;
 }
 interface OcAuthConfig {
@@ -119,6 +127,9 @@ interface OcLinkedIdentity {
     verification_method: 'email-otp' | 'bip322' | null;
     is_primary: boolean;
 }
+declare function fetchOcLinkedIdentities(opts?: {
+    authOrigin?: string;
+}): Promise<OcLinkedIdentity[]>;
 interface OcLinkedIdentitiesProps {
     authOrigin?: string;
     className?: string;
@@ -208,4 +219,4 @@ declare function handleSudoRequired(body: {
     returnTo?: string;
 }): boolean;
 
-export { DEFAULT_CONFIG, type OcAccount, OcAccountChip, type OcAccountChipProps, OcAccountPill, type OcAccountPillProps, OcAddressInput, type OcAddressInputProps, type OcAuthConfig, OcLinkedIdentities, type OcLinkedIdentitiesProps, type OcLinkedIdentity, OcSessionProvider, type OcSessionState, type OcSessionStatus, OcSignIn, OcSignInButton, type OcSignInButtonProps, type OcSignInProps, type RedirectToSudoArgs, type UseOcAddressSuggestionOptions, type UseOcAddressSuggestionReturn, type UseStepUpAuthReturn, type UseWebAuthnListReturn, type UseWebAuthnRegisterReturn, type WebAuthnAssertionStatus, type WebAuthnCredentialPublic, type WebAuthnListStatus, type WebAuthnRegisterResult, type WebAuthnRegisterStatus, type WebAuthnRemoveResult, type WebAuthnRenameResult, type WebAuthnStepUpResult, buildSignInUrl, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };
+export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, type DisplayIdentity, type DisplayIdentityKind, type OcAccount, OcAccountChip, type OcAccountChipProps, OcAccountPill, type OcAccountPillProps, OcAddressInput, type OcAddressInputProps, type OcAuthConfig, OcLinkedIdentities, type OcLinkedIdentitiesProps, type OcLinkedIdentity, OcSessionProvider, type OcSessionState, type OcSessionStatus, OcSignIn, OcSignInButton, type OcSignInButtonProps, type OcSignInProps, type RedirectToSudoArgs, type UseOcAddressSuggestionOptions, type UseOcAddressSuggestionReturn, type UseStepUpAuthReturn, type UseWebAuthnListReturn, type UseWebAuthnRegisterReturn, type WebAuthnAssertionStatus, type WebAuthnCredentialPublic, type WebAuthnListStatus, type WebAuthnRegisterResult, type WebAuthnRegisterStatus, type WebAuthnRemoveResult, type WebAuthnRenameResult, type WebAuthnStepUpResult, buildSignInUrl, fetchOcLinkedIdentities, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };

package/dist/index.d.ts

@@ -1,5 +1,11 @@
 import * as React from 'react';
 
+declare const DISPLAY_IDENTITY_KINDS: readonly ["did", "btc", "email", "nostr"];
+type DisplayIdentityKind = (typeof DISPLAY_IDENTITY_KINDS)[number];
+interface DisplayIdentity {
+    kind: DisplayIdentityKind;
+    value: string;
+}
 interface OcAccount {
     accountId: string;
     didOc: string;
@@ -10,6 +16,7 @@ interface OcAccount {
     homeFederation?: string | null;
     signingMethod?: 'fedimint_threshold' | 'fedimint_client' | 'bip322' | null;
     isOwner?: boolean;
+    displayIdentity: DisplayIdentity;
 }
 type OcSessionStatus = 'loading' | 'authenticated' | 'anonymous' | 'error';
 interface OcSessionState {
@@ -18,6 +25,7 @@ interface OcSessionState {
     error: Error | null;
     refresh: () => Promise<void>;
     signOut: () => Promise<void>;
+    setDisplayIdentity: (kind: DisplayIdentityKind) => Promise<void>;
     signInUrl: string;
 }
 interface OcAuthConfig {
@@ -119,6 +127,9 @@ interface OcLinkedIdentity {
     verification_method: 'email-otp' | 'bip322' | null;
     is_primary: boolean;
 }
+declare function fetchOcLinkedIdentities(opts?: {
+    authOrigin?: string;
+}): Promise<OcLinkedIdentity[]>;
 interface OcLinkedIdentitiesProps {
     authOrigin?: string;
     className?: string;
@@ -208,4 +219,4 @@ declare function handleSudoRequired(body: {
     returnTo?: string;
 }): boolean;
 
-export { DEFAULT_CONFIG, type OcAccount, OcAccountChip, type OcAccountChipProps, OcAccountPill, type OcAccountPillProps, OcAddressInput, type OcAddressInputProps, type OcAuthConfig, OcLinkedIdentities, type OcLinkedIdentitiesProps, type OcLinkedIdentity, OcSessionProvider, type OcSessionState, type OcSessionStatus, OcSignIn, OcSignInButton, type OcSignInButtonProps, type OcSignInProps, type RedirectToSudoArgs, type UseOcAddressSuggestionOptions, type UseOcAddressSuggestionReturn, type UseStepUpAuthReturn, type UseWebAuthnListReturn, type UseWebAuthnRegisterReturn, type WebAuthnAssertionStatus, type WebAuthnCredentialPublic, type WebAuthnListStatus, type WebAuthnRegisterResult, type WebAuthnRegisterStatus, type WebAuthnRemoveResult, type WebAuthnRenameResult, type WebAuthnStepUpResult, buildSignInUrl, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };
+export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, type DisplayIdentity, type DisplayIdentityKind, type OcAccount, OcAccountChip, type OcAccountChipProps, OcAccountPill, type OcAccountPillProps, OcAddressInput, type OcAddressInputProps, type OcAuthConfig, OcLinkedIdentities, type OcLinkedIdentitiesProps, type OcLinkedIdentity, OcSessionProvider, type OcSessionState, type OcSessionStatus, OcSignIn, OcSignInButton, type OcSignInButtonProps, type OcSignInProps, type RedirectToSudoArgs, type UseOcAddressSuggestionOptions, type UseOcAddressSuggestionReturn, type UseStepUpAuthReturn, type UseWebAuthnListReturn, type UseWebAuthnRegisterReturn, type WebAuthnAssertionStatus, type WebAuthnCredentialPublic, type WebAuthnListStatus, type WebAuthnRegisterResult, type WebAuthnRegisterStatus, type WebAuthnRemoveResult, type WebAuthnRenameResult, type WebAuthnStepUpResult, buildSignInUrl, fetchOcLinkedIdentities, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };

package/dist/index.js

@@ -27,6 +27,7 @@ var React3__namespace = /*#__PURE__*/_interopNamespace(React3);
 // src/provider.tsx
 
 // src/types.ts
+var DISPLAY_IDENTITY_KINDS = ["did", "btc", "email", "nostr"];
 var DEFAULT_CONFIG = {
   authOrigin: "https://ochk.io",
   signInPath: "/signin",
@@ -44,6 +45,13 @@ function buildSignInUrl(cfg, returnTo) {
   return u.toString();
 }
 var SessionContext = React3__namespace.createContext(null);
+function normalizeDisplayIdentity(raw, didOc) {
+  const di = raw.display_identity ?? raw.displayIdentity;
+  if (di && typeof di === "object" && typeof di.value === "string" && di.value.length > 0 && typeof di.kind === "string" && DISPLAY_IDENTITY_KINDS.includes(di.kind)) {
+    return { kind: di.kind, value: di.value };
+  }
+  return { kind: "did", value: didOc };
+}
 function normalizeAccount(raw) {
   if (!raw) return null;
   const didOc = raw.did_oc ?? raw.didOc;
@@ -58,7 +66,8 @@ function normalizeAccount(raw) {
     nostrNpub: raw.nostr_npub ?? raw.nostrNpub ?? null,
     homeFederation: raw.home_federation_slug ?? raw.homeFederation ?? null,
     signingMethod: raw.signing_method ?? raw.signingMethod ?? null,
-    isOwner: Boolean(raw.is_owner ?? raw.isOwner ?? false)
+    isOwner: Boolean(raw.is_owner ?? raw.isOwner ?? false),
+    displayIdentity: normalizeDisplayIdentity(raw, didOc)
   };
 }
 function OcSessionProvider({
@@ -119,6 +128,28 @@ function OcSessionProvider({
     setAccount(null);
     setStatus("anonymous");
   }, [cfg.authOrigin, cfg.logoutPath]);
+  const setDisplayIdentity = React3__namespace.useCallback(
+    async (kind) => {
+      if (typeof window === "undefined") return;
+      const res = await fetch(`${cfg.authOrigin}/api/auth/account`, {
+        method: "PATCH",
+        credentials: "include",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ display_identity: kind })
+      });
+      if (!res.ok) {
+        let reason = `http_${res.status}`;
+        try {
+          const body = await res.json();
+          if (body.reason) reason = body.reason;
+        } catch {
+        }
+        throw new Error(`[@orangecheck/auth-client] setDisplayIdentity failed: ${reason}`);
+      }
+      await refresh();
+    },
+    [cfg.authOrigin, refresh]
+  );
   const value = React3__namespace.useMemo(() => {
     const returnTo = defaultReturnTo ?? (typeof window !== "undefined" ? window.location.href : void 0);
     return {
@@ -127,9 +158,10 @@ function OcSessionProvider({
       error,
       refresh,
       signOut,
+      setDisplayIdentity,
       signInUrl: buildSignInUrl(cfg, returnTo)
     };
-  }, [status, account, error, refresh, signOut, cfg, defaultReturnTo]);
+  }, [status, account, error, refresh, signOut, setDisplayIdentity, cfg, defaultReturnTo]);
   return /* @__PURE__ */ jsxRuntime.jsx(SessionContext.Provider, { value, children });
 }
 function useOcSession() {
@@ -777,6 +809,16 @@ var OcAddressInput = React3__namespace.forwardRef(
   }
 );
 var DEFAULT_AUTH_ORIGIN = "https://ochk.io";
+async function fetchOcLinkedIdentities(opts) {
+  const authOrigin = opts?.authOrigin ?? DEFAULT_AUTH_ORIGIN;
+  const r = await fetch(`${authOrigin}/api/auth/identities`, {
+    credentials: "include"
+  });
+  if (r.status === 401) return [];
+  if (!r.ok) throw new Error(`identities fetch failed: http_${r.status}`);
+  const body = await r.json();
+  return body.linked ?? [];
+}
 function OcLinkedIdentities({
   authOrigin = DEFAULT_AUTH_ORIGIN,
   className,
@@ -1657,6 +1699,13 @@ function OcSignIn({
   const [path, setPath] = React3__namespace.useState(initialPath);
   const [signedIn, setSignedIn] = React3__namespace.useState(null);
   const [linkAlso, setLinkAlso] = React3__namespace.useState(false);
+  const [oauthError, setOauthError] = React3__namespace.useState(false);
+  React3__namespace.useEffect(() => {
+    if (typeof window === "undefined") return;
+    if (new URLSearchParams(window.location.search).has("oauth_error")) {
+      setOauthError(true);
+    }
+  }, []);
   const navigate = React3__namespace.useCallback(
     async (account) => {
       if (resolveReturnTo) {
@@ -1742,6 +1791,22 @@ function OcSignIn({
   const bothEnabled = walletEnabled && emailEnabled;
   const activeMethod = !emailEnabled ? "wallet" : !walletEnabled ? "email" : path;
   return /* @__PURE__ */ jsxRuntime.jsxs("div", { className, "data-oc-signin": "", children: [
+    oauthError && /* @__PURE__ */ jsxRuntime.jsx(
+      "div",
+      {
+        "data-oc-signin-oauth-error": "",
+        style: {
+          marginBottom: 14,
+          padding: "0.6rem 0.75rem",
+          border: "1px solid var(--destructive, #ef4444)",
+          borderRadius: 6,
+          color: "var(--destructive, #ef4444)",
+          fontFamily: "ui-monospace, SFMono-Regular, monospace",
+          fontSize: 11
+        },
+        children: "That sign-in didn't complete. Please try again."
+      }
+    ),
     bothEnabled && /* @__PURE__ */ jsxRuntime.jsxs(
       "div",
       {
@@ -1784,6 +1849,7 @@ function OcSignIn({
         }
       )
     ] }),
+    /* @__PURE__ */ jsxRuntime.jsx(ProviderSignIn, { authOrigin, returnTo: safeReturn }),
     linkPrompt && /* @__PURE__ */ jsxRuntime.jsxs("label", { "data-oc-signin-linkalso": "", style: linkAlsoStyle, children: [
       /* @__PURE__ */ jsxRuntime.jsx(
         "input",
@@ -1834,6 +1900,63 @@ function SigninTab({
     }
   );
 }
+var OAUTH_PROVIDERS = [
+  { id: "google", label: "Continue with Google" }
+];
+function ProviderSignIn({
+  authOrigin,
+  returnTo
+}) {
+  const line = { flex: 1, height: 1, background: "var(--border, #27272a)" };
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { "data-oc-signin-providers": "", style: { marginTop: 20 }, children: [
+    /* @__PURE__ */ jsxRuntime.jsxs(
+      "div",
+      {
+        style: {
+          display: "flex",
+          alignItems: "center",
+          gap: 10,
+          margin: "4px 0 12px",
+          color: "var(--muted-foreground, #a1a1aa)",
+          fontFamily: "ui-monospace, SFMono-Regular, monospace",
+          fontSize: 10,
+          letterSpacing: "0.16em",
+          textTransform: "uppercase"
+        },
+        children: [
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: line }),
+          "or",
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: line })
+        ]
+      }
+    ),
+    OAUTH_PROVIDERS.map((p) => /* @__PURE__ */ jsxRuntime.jsx(
+      "a",
+      {
+        href: `${authOrigin}/api/auth/${p.id}/start?return_to=${encodeURIComponent(
+          returnTo
+        )}`,
+        "data-oc-signin-provider": p.id,
+        style: {
+          display: "block",
+          boxSizing: "border-box",
+          width: "100%",
+          padding: "0.6rem 0.875rem",
+          textAlign: "center",
+          border: "1px solid var(--border, #27272a)",
+          borderRadius: 6,
+          background: "transparent",
+          color: "var(--muted-foreground, #a1a1aa)",
+          fontFamily: "ui-monospace, SFMono-Regular, monospace",
+          fontSize: 12,
+          textDecoration: "none"
+        },
+        children: p.label
+      },
+      p.id
+    ))
+  ] });
+}
 function WalletFlow({ authOrigin, audience, onSuccess }) {
   const [address, setAddress] = React3__namespace.useState("");
   const [error, setError] = React3__namespace.useState(null);
@@ -2477,6 +2600,7 @@ function handleSudoRequired(body, args = {}) {
 }
 
 exports.DEFAULT_CONFIG = DEFAULT_CONFIG;
+exports.DISPLAY_IDENTITY_KINDS = DISPLAY_IDENTITY_KINDS;
 exports.OcAccountChip = OcAccountChip;
 exports.OcAccountPill = OcAccountPill;
 exports.OcAddressInput = OcAddressInput;
@@ -2485,6 +2609,7 @@ exports.OcSessionProvider = OcSessionProvider;
 exports.OcSignIn = OcSignIn;
 exports.OcSignInButton = OcSignInButton;
 exports.buildSignInUrl = buildSignInUrl;
+exports.fetchOcLinkedIdentities = fetchOcLinkedIdentities;
 exports.handleSudoRequired = handleSudoRequired;
 exports.redirectToSudo = redirectToSudo;
 exports.useOcAddressSuggestion = useOcAddressSuggestion;