@orangecheck/auth-client 2.24.1 → 2.25.0

package/dist/index.mjs

@@ -1132,6 +1132,32 @@ var OcAddressInput = React3.forwardRef(
     );
   }
 );
+
+// src/sudo.tsx
+function redirectToSudo(args = {}) {
+  if (typeof window === "undefined") {
+    throw new Error(
+      "[@orangecheck/auth-client] redirectToSudo() requires a browser environment"
+    );
+  }
+  const cfg = resolveConfig(args.config);
+  const url = new URL("/sudo", cfg.authOrigin);
+  const returnTo = args.returnTo ?? window.location.href;
+  if (returnTo) url.searchParams.set("return_to", returnTo);
+  if (args.purpose) url.searchParams.set("purpose", args.purpose);
+  window.location.assign(url.toString());
+}
+function handleSudoRequired(body, args = {}) {
+  if (body && body.reason === "sudo_required") {
+    redirectToSudo(args);
+    return true;
+  }
+  return false;
+}
+var SUDO_ACCOUNT_MISMATCH_MESSAGE = "Switch this tab to that account first \u2014 the confirmation on file is for a different one.";
+function isSudoAccountMismatch(body) {
+  return body?.reason === "sudo_account_mismatch";
+}
 var DEFAULT_AUTH_ORIGIN = "https://ochk.io";
 async function fetchOcLinkedIdentities(opts) {
   const authOrigin = opts?.authOrigin ?? DEFAULT_AUTH_ORIGIN;
@@ -1558,6 +1584,12 @@ function EmailLinkForm({
         setBusy(false);
         return;
       }
+      if (handleSudoRequired(j, { purpose: "link an email" })) return;
+      if (isSudoAccountMismatch(j)) {
+        setErr(SUDO_ACCOUNT_MISMATCH_MESSAGE);
+        setBusy(false);
+        return;
+      }
       if (!r.ok || !j.ok) throw new Error(j.reason ?? `http_${r.status}`);
       onDone();
     } catch (e) {
@@ -1700,6 +1732,12 @@ function BtcLinkForm({
         setBusy(false);
         return;
       }
+      if (handleSudoRequired(j, { purpose: "link a Bitcoin address" })) return;
+      if (isSudoAccountMismatch(j)) {
+        setErr(SUDO_ACCOUNT_MISMATCH_MESSAGE);
+        setBusy(false);
+        return;
+      }
       if (!r.ok || !j.ok) throw new Error(j.reason ?? `http_${r.status}`);
       onDone();
     } catch (e) {
@@ -3090,28 +3128,6 @@ function useStepUpAuth(opts) {
   return { status, error, stepUp, reset };
 }
 
-// src/sudo.tsx
-function redirectToSudo(args = {}) {
-  if (typeof window === "undefined") {
-    throw new Error(
-      "[@orangecheck/auth-client] redirectToSudo() requires a browser environment"
-    );
-  }
-  const cfg = resolveConfig(args.config);
-  const url = new URL("/sudo", cfg.authOrigin);
-  const returnTo = args.returnTo ?? window.location.href;
-  if (returnTo) url.searchParams.set("return_to", returnTo);
-  if (args.purpose) url.searchParams.set("purpose", args.purpose);
-  window.location.assign(url.toString());
-}
-function handleSudoRequired(body, args = {}) {
-  if (body && body.reason === "sudo_required") {
-    redirectToSudo(args);
-    return true;
-  }
-  return false;
-}
-
-export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, familyReturnTarget, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, readTabSession, redirectToSudo, safeReturnTo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };
+export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, SUDO_ACCOUNT_MISMATCH_MESSAGE, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, familyReturnTarget, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, isSudoAccountMismatch, readTabSession, redirectToSudo, safeReturnTo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map