@orangecheck/auth-client 2.12.0 → 2.14.0

package/dist/index.mjs

@@ -5,6 +5,7 @@ import { startRegistration, startAuthentication } from '@simplewebauthn/browser'
 // src/provider.tsx
 
 // src/types.ts
+var DISPLAY_IDENTITY_KINDS = ["did", "btc", "email", "nostr"];
 var DEFAULT_CONFIG = {
   authOrigin: "https://ochk.io",
   signInPath: "/signin",
@@ -22,6 +23,13 @@ function buildSignInUrl(cfg, returnTo) {
   return u.toString();
 }
 var SessionContext = React3.createContext(null);
+function normalizeDisplayIdentity(raw, didOc) {
+  const di = raw.display_identity ?? raw.displayIdentity;
+  if (di && typeof di === "object" && typeof di.value === "string" && di.value.length > 0 && typeof di.kind === "string" && DISPLAY_IDENTITY_KINDS.includes(di.kind)) {
+    return { kind: di.kind, value: di.value };
+  }
+  return { kind: "did", value: didOc };
+}
 function normalizeAccount(raw) {
   if (!raw) return null;
   const didOc = raw.did_oc ?? raw.didOc;
@@ -36,7 +44,8 @@ function normalizeAccount(raw) {
     nostrNpub: raw.nostr_npub ?? raw.nostrNpub ?? null,
     homeFederation: raw.home_federation_slug ?? raw.homeFederation ?? null,
     signingMethod: raw.signing_method ?? raw.signingMethod ?? null,
-    isOwner: Boolean(raw.is_owner ?? raw.isOwner ?? false)
+    isOwner: Boolean(raw.is_owner ?? raw.isOwner ?? false),
+    displayIdentity: normalizeDisplayIdentity(raw, didOc)
   };
 }
 function OcSessionProvider({
@@ -97,6 +106,28 @@ function OcSessionProvider({
     setAccount(null);
     setStatus("anonymous");
   }, [cfg.authOrigin, cfg.logoutPath]);
+  const setDisplayIdentity = React3.useCallback(
+    async (kind) => {
+      if (typeof window === "undefined") return;
+      const res = await fetch(`${cfg.authOrigin}/api/auth/account`, {
+        method: "PATCH",
+        credentials: "include",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ display_identity: kind })
+      });
+      if (!res.ok) {
+        let reason = `http_${res.status}`;
+        try {
+          const body = await res.json();
+          if (body.reason) reason = body.reason;
+        } catch {
+        }
+        throw new Error(`[@orangecheck/auth-client] setDisplayIdentity failed: ${reason}`);
+      }
+      await refresh();
+    },
+    [cfg.authOrigin, refresh]
+  );
   const value = React3.useMemo(() => {
     const returnTo = defaultReturnTo ?? (typeof window !== "undefined" ? window.location.href : void 0);
     return {
@@ -105,9 +136,10 @@ function OcSessionProvider({
       error,
       refresh,
       signOut,
+      setDisplayIdentity,
       signInUrl: buildSignInUrl(cfg, returnTo)
     };
-  }, [status, account, error, refresh, signOut, cfg, defaultReturnTo]);
+  }, [status, account, error, refresh, signOut, setDisplayIdentity, cfg, defaultReturnTo]);
   return /* @__PURE__ */ jsx(SessionContext.Provider, { value, children });
 }
 function useOcSession() {
@@ -755,6 +787,16 @@ var OcAddressInput = React3.forwardRef(
   }
 );
 var DEFAULT_AUTH_ORIGIN = "https://ochk.io";
+async function fetchOcLinkedIdentities(opts) {
+  const authOrigin = opts?.authOrigin ?? DEFAULT_AUTH_ORIGIN;
+  const r = await fetch(`${authOrigin}/api/auth/identities`, {
+    credentials: "include"
+  });
+  if (r.status === 401) return [];
+  if (!r.ok) throw new Error(`identities fetch failed: http_${r.status}`);
+  const body = await r.json();
+  return body.linked ?? [];
+}
 function OcLinkedIdentities({
   authOrigin = DEFAULT_AUTH_ORIGIN,
   className,
@@ -1635,6 +1677,13 @@ function OcSignIn({
   const [path, setPath] = React3.useState(initialPath);
   const [signedIn, setSignedIn] = React3.useState(null);
   const [linkAlso, setLinkAlso] = React3.useState(false);
+  const [oauthError, setOauthError] = React3.useState(false);
+  React3.useEffect(() => {
+    if (typeof window === "undefined") return;
+    if (new URLSearchParams(window.location.search).has("oauth_error")) {
+      setOauthError(true);
+    }
+  }, []);
   const navigate = React3.useCallback(
     async (account) => {
       if (resolveReturnTo) {
@@ -1720,6 +1769,22 @@ function OcSignIn({
   const bothEnabled = walletEnabled && emailEnabled;
   const activeMethod = !emailEnabled ? "wallet" : !walletEnabled ? "email" : path;
   return /* @__PURE__ */ jsxs("div", { className, "data-oc-signin": "", children: [
+    oauthError && /* @__PURE__ */ jsx(
+      "div",
+      {
+        "data-oc-signin-oauth-error": "",
+        style: {
+          marginBottom: 14,
+          padding: "0.6rem 0.75rem",
+          border: "1px solid var(--destructive, #ef4444)",
+          borderRadius: 6,
+          color: "var(--destructive, #ef4444)",
+          fontFamily: "ui-monospace, SFMono-Regular, monospace",
+          fontSize: 11
+        },
+        children: "That sign-in didn't complete. Please try again."
+      }
+    ),
     bothEnabled && /* @__PURE__ */ jsxs(
       "div",
       {
@@ -1762,6 +1827,7 @@ function OcSignIn({
         }
       )
     ] }),
+    /* @__PURE__ */ jsx(ProviderSignIn, { authOrigin, returnTo: safeReturn }),
     linkPrompt && /* @__PURE__ */ jsxs("label", { "data-oc-signin-linkalso": "", style: linkAlsoStyle, children: [
       /* @__PURE__ */ jsx(
         "input",
@@ -1812,6 +1878,63 @@ function SigninTab({
     }
   );
 }
+var OAUTH_PROVIDERS = [
+  { id: "google", label: "Continue with Google" }
+];
+function ProviderSignIn({
+  authOrigin,
+  returnTo
+}) {
+  const line = { flex: 1, height: 1, background: "var(--border, #27272a)" };
+  return /* @__PURE__ */ jsxs("div", { "data-oc-signin-providers": "", style: { marginTop: 20 }, children: [
+    /* @__PURE__ */ jsxs(
+      "div",
+      {
+        style: {
+          display: "flex",
+          alignItems: "center",
+          gap: 10,
+          margin: "4px 0 12px",
+          color: "var(--muted-foreground, #a1a1aa)",
+          fontFamily: "ui-monospace, SFMono-Regular, monospace",
+          fontSize: 10,
+          letterSpacing: "0.16em",
+          textTransform: "uppercase"
+        },
+        children: [
+          /* @__PURE__ */ jsx("span", { style: line }),
+          "or",
+          /* @__PURE__ */ jsx("span", { style: line })
+        ]
+      }
+    ),
+    OAUTH_PROVIDERS.map((p) => /* @__PURE__ */ jsx(
+      "a",
+      {
+        href: `${authOrigin}/api/auth/${p.id}/start?return_to=${encodeURIComponent(
+          returnTo
+        )}`,
+        "data-oc-signin-provider": p.id,
+        style: {
+          display: "block",
+          boxSizing: "border-box",
+          width: "100%",
+          padding: "0.6rem 0.875rem",
+          textAlign: "center",
+          border: "1px solid var(--border, #27272a)",
+          borderRadius: 6,
+          background: "transparent",
+          color: "var(--muted-foreground, #a1a1aa)",
+          fontFamily: "ui-monospace, SFMono-Regular, monospace",
+          fontSize: 12,
+          textDecoration: "none"
+        },
+        children: p.label
+      },
+      p.id
+    ))
+  ] });
+}
 function WalletFlow({ authOrigin, audience, onSuccess }) {
   const [address, setAddress] = React3.useState("");
   const [error, setError] = React3.useState(null);
@@ -2454,6 +2577,6 @@ function handleSudoRequired(body, args = {}) {
   return false;
 }
 
-export { DEFAULT_CONFIG, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, buildSignInUrl, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };
+export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, buildSignInUrl, fetchOcLinkedIdentities, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map