@orangecheck/auth-client 2.24.1 → 2.25.0

package/dist/index.d.mts

@@ -254,5 +254,9 @@ declare function handleSudoRequired(body: {
 } | null | undefined, args?: Omit<RedirectToSudoArgs, 'returnTo'> & {
     returnTo?: string;
 }): boolean;
+declare const SUDO_ACCOUNT_MISMATCH_MESSAGE = "Switch this tab to that account first \u2014 the confirmation on file is for a different one.";
+declare function isSudoAccountMismatch(body: {
+    reason?: string;
+} | null | undefined): boolean;
 
-export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, type DisplayIdentity, type DisplayIdentityKind, type OcAccount, OcAccountChip, type OcAccountChipProps, OcAccountPill, type OcAccountPillProps, type OcAccountSummary, OcAddressInput, type OcAddressInputProps, type OcAuthConfig, OcLinkedIdentities, type OcLinkedIdentitiesProps, type OcLinkedIdentity, OcSessionProvider, type OcSessionState, type OcSessionStatus, OcSignIn, OcSignInButton, type OcSignInButtonProps, type OcSignInProps, type OcSignOutScope, type OcTabSession, type RedirectToSudoArgs, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, type UseOcAddressSuggestionOptions, type UseOcAddressSuggestionReturn, type UseStepUpAuthReturn, type UseWebAuthnListReturn, type UseWebAuthnRegisterReturn, type WebAuthnAssertionStatus, type WebAuthnCredentialPublic, type WebAuthnListStatus, type WebAuthnRegisterResult, type WebAuthnRegisterStatus, type WebAuthnRemoveResult, type WebAuthnRenameResult, type WebAuthnStepUpResult, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, familyReturnTarget, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, readTabSession, redirectToSudo, safeReturnTo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };
+export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, type DisplayIdentity, type DisplayIdentityKind, type OcAccount, OcAccountChip, type OcAccountChipProps, OcAccountPill, type OcAccountPillProps, type OcAccountSummary, OcAddressInput, type OcAddressInputProps, type OcAuthConfig, OcLinkedIdentities, type OcLinkedIdentitiesProps, type OcLinkedIdentity, OcSessionProvider, type OcSessionState, type OcSessionStatus, OcSignIn, OcSignInButton, type OcSignInButtonProps, type OcSignInProps, type OcSignOutScope, type OcTabSession, type RedirectToSudoArgs, SUDO_ACCOUNT_MISMATCH_MESSAGE, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, type UseOcAddressSuggestionOptions, type UseOcAddressSuggestionReturn, type UseStepUpAuthReturn, type UseWebAuthnListReturn, type UseWebAuthnRegisterReturn, type WebAuthnAssertionStatus, type WebAuthnCredentialPublic, type WebAuthnListStatus, type WebAuthnRegisterResult, type WebAuthnRegisterStatus, type WebAuthnRemoveResult, type WebAuthnRenameResult, type WebAuthnStepUpResult, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, familyReturnTarget, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, isSudoAccountMismatch, readTabSession, redirectToSudo, safeReturnTo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };

package/dist/index.d.ts

@@ -254,5 +254,9 @@ declare function handleSudoRequired(body: {
 } | null | undefined, args?: Omit<RedirectToSudoArgs, 'returnTo'> & {
     returnTo?: string;
 }): boolean;
+declare const SUDO_ACCOUNT_MISMATCH_MESSAGE = "Switch this tab to that account first \u2014 the confirmation on file is for a different one.";
+declare function isSudoAccountMismatch(body: {
+    reason?: string;
+} | null | undefined): boolean;
 
-export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, type DisplayIdentity, type DisplayIdentityKind, type OcAccount, OcAccountChip, type OcAccountChipProps, OcAccountPill, type OcAccountPillProps, type OcAccountSummary, OcAddressInput, type OcAddressInputProps, type OcAuthConfig, OcLinkedIdentities, type OcLinkedIdentitiesProps, type OcLinkedIdentity, OcSessionProvider, type OcSessionState, type OcSessionStatus, OcSignIn, OcSignInButton, type OcSignInButtonProps, type OcSignInProps, type OcSignOutScope, type OcTabSession, type RedirectToSudoArgs, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, type UseOcAddressSuggestionOptions, type UseOcAddressSuggestionReturn, type UseStepUpAuthReturn, type UseWebAuthnListReturn, type UseWebAuthnRegisterReturn, type WebAuthnAssertionStatus, type WebAuthnCredentialPublic, type WebAuthnListStatus, type WebAuthnRegisterResult, type WebAuthnRegisterStatus, type WebAuthnRemoveResult, type WebAuthnRenameResult, type WebAuthnStepUpResult, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, familyReturnTarget, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, readTabSession, redirectToSudo, safeReturnTo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };
+export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, type DisplayIdentity, type DisplayIdentityKind, type OcAccount, OcAccountChip, type OcAccountChipProps, OcAccountPill, type OcAccountPillProps, type OcAccountSummary, OcAddressInput, type OcAddressInputProps, type OcAuthConfig, OcLinkedIdentities, type OcLinkedIdentitiesProps, type OcLinkedIdentity, OcSessionProvider, type OcSessionState, type OcSessionStatus, OcSignIn, OcSignInButton, type OcSignInButtonProps, type OcSignInProps, type OcSignOutScope, type OcTabSession, type RedirectToSudoArgs, SUDO_ACCOUNT_MISMATCH_MESSAGE, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, type UseOcAddressSuggestionOptions, type UseOcAddressSuggestionReturn, type UseStepUpAuthReturn, type UseWebAuthnListReturn, type UseWebAuthnRegisterReturn, type WebAuthnAssertionStatus, type WebAuthnCredentialPublic, type WebAuthnListStatus, type WebAuthnRegisterResult, type WebAuthnRegisterStatus, type WebAuthnRemoveResult, type WebAuthnRenameResult, type WebAuthnStepUpResult, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, familyReturnTarget, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, isSudoAccountMismatch, readTabSession, redirectToSudo, safeReturnTo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };

package/dist/index.js

@@ -1154,6 +1154,32 @@ var OcAddressInput = React3__namespace.forwardRef(
     );
   }
 );
+
+// src/sudo.tsx
+function redirectToSudo(args = {}) {
+  if (typeof window === "undefined") {
+    throw new Error(
+      "[@orangecheck/auth-client] redirectToSudo() requires a browser environment"
+    );
+  }
+  const cfg = resolveConfig(args.config);
+  const url = new URL("/sudo", cfg.authOrigin);
+  const returnTo = args.returnTo ?? window.location.href;
+  if (returnTo) url.searchParams.set("return_to", returnTo);
+  if (args.purpose) url.searchParams.set("purpose", args.purpose);
+  window.location.assign(url.toString());
+}
+function handleSudoRequired(body, args = {}) {
+  if (body && body.reason === "sudo_required") {
+    redirectToSudo(args);
+    return true;
+  }
+  return false;
+}
+var SUDO_ACCOUNT_MISMATCH_MESSAGE = "Switch this tab to that account first \u2014 the confirmation on file is for a different one.";
+function isSudoAccountMismatch(body) {
+  return body?.reason === "sudo_account_mismatch";
+}
 var DEFAULT_AUTH_ORIGIN = "https://ochk.io";
 async function fetchOcLinkedIdentities(opts) {
   const authOrigin = opts?.authOrigin ?? DEFAULT_AUTH_ORIGIN;
@@ -1580,6 +1606,12 @@ function EmailLinkForm({
         setBusy(false);
         return;
       }
+      if (handleSudoRequired(j, { purpose: "link an email" })) return;
+      if (isSudoAccountMismatch(j)) {
+        setErr(SUDO_ACCOUNT_MISMATCH_MESSAGE);
+        setBusy(false);
+        return;
+      }
       if (!r.ok || !j.ok) throw new Error(j.reason ?? `http_${r.status}`);
       onDone();
     } catch (e) {
@@ -1722,6 +1754,12 @@ function BtcLinkForm({
         setBusy(false);
         return;
       }
+      if (handleSudoRequired(j, { purpose: "link a Bitcoin address" })) return;
+      if (isSudoAccountMismatch(j)) {
+        setErr(SUDO_ACCOUNT_MISMATCH_MESSAGE);
+        setBusy(false);
+        return;
+      }
       if (!r.ok || !j.ok) throw new Error(j.reason ?? `http_${r.status}`);
       onDone();
     } catch (e) {
@@ -3112,28 +3150,6 @@ function useStepUpAuth(opts) {
   return { status, error, stepUp, reset };
 }
 
-// src/sudo.tsx
-function redirectToSudo(args = {}) {
-  if (typeof window === "undefined") {
-    throw new Error(
-      "[@orangecheck/auth-client] redirectToSudo() requires a browser environment"
-    );
-  }
-  const cfg = resolveConfig(args.config);
-  const url = new URL("/sudo", cfg.authOrigin);
-  const returnTo = args.returnTo ?? window.location.href;
-  if (returnTo) url.searchParams.set("return_to", returnTo);
-  if (args.purpose) url.searchParams.set("purpose", args.purpose);
-  window.location.assign(url.toString());
-}
-function handleSudoRequired(body, args = {}) {
-  if (body && body.reason === "sudo_required") {
-    redirectToSudo(args);
-    return true;
-  }
-  return false;
-}
-
 exports.DEFAULT_CONFIG = DEFAULT_CONFIG;
 exports.DISPLAY_IDENTITY_KINDS = DISPLAY_IDENTITY_KINDS;
 exports.OcAccountChip = OcAccountChip;
@@ -3143,6 +3159,7 @@ exports.OcLinkedIdentities = OcLinkedIdentities;
 exports.OcSessionProvider = OcSessionProvider;
 exports.OcSignIn = OcSignIn;
 exports.OcSignInButton = OcSignInButton;
+exports.SUDO_ACCOUNT_MISMATCH_MESSAGE = SUDO_ACCOUNT_MISMATCH_MESSAGE;
 exports.TAB_ACCOUNT_HINT_KEY = TAB_ACCOUNT_HINT_KEY;
 exports.TAB_ADOPT_HASH = TAB_ADOPT_HASH;
 exports.TAB_SESSION_HEADER = TAB_SESSION_HEADER;
@@ -3157,6 +3174,7 @@ exports.fetchOcLinkedIdentities = fetchOcLinkedIdentities;
 exports.handleSudoRequired = handleSudoRequired;
 exports.installTabFetchInterceptor = installTabFetchInterceptor;
 exports.installTabLinkDecorator = installTabLinkDecorator;
+exports.isSudoAccountMismatch = isSudoAccountMismatch;
 exports.readTabSession = readTabSession;
 exports.redirectToSudo = redirectToSudo;
 exports.safeReturnTo = safeReturnTo;