@orangecheck/auth-client 2.34.0 → 2.35.1

package/dist/index.js

@@ -348,12 +348,24 @@ function normalizeRosterEntry(raw) {
     lastSeenAt: raw.last_seen_at ?? raw.lastSeenAt ?? null
   };
 }
+var ME_TIMEOUT_MS = 1e4;
+function timeoutSignal(ms) {
+  if (typeof AbortSignal.timeout === "function") return AbortSignal.timeout(ms);
+  const controller = new AbortController();
+  setTimeout(() => controller.abort(), ms);
+  return controller.signal;
+}
+function isTimeout(err) {
+  const name = err?.name;
+  return name === "TimeoutError" || name === "AbortError";
+}
 async function fetchHostRoster(cfg) {
   try {
     const res = await fetch(`${cfg.authOrigin}${cfg.mePath}`, {
       method: "GET",
       credentials: "include",
-      headers: { Accept: "application/json", ...tabSessionHeader() }
+      headers: { Accept: "application/json", ...tabSessionHeader() },
+      signal: timeoutSignal(ME_TIMEOUT_MS)
     });
     if (!res.ok) return [];
     const body = await res.json();
@@ -429,7 +441,8 @@ function OcSessionProvider({
       let res = await fetch(cfg.mePath, {
         method: "GET",
         credentials: "include",
-        headers: { Accept: "application/json", ...tabSessionHeader() }
+        headers: { Accept: "application/json", ...tabSessionHeader() },
+        signal: timeoutSignal(ME_TIMEOUT_MS)
       });
       if (res.status === 401 && pin) {
         clearTabSession();
@@ -438,7 +451,8 @@ function OcSessionProvider({
         res = await fetch(cfg.mePath, {
           method: "GET",
           credentials: "include",
-          headers: { Accept: "application/json" }
+          headers: { Accept: "application/json" },
+          signal: timeoutSignal(ME_TIMEOUT_MS)
         });
       }
       if (res.status === 401) {
@@ -473,7 +487,9 @@ function OcSessionProvider({
       }
     } catch (err) {
       setStatus("error");
-      setError(err instanceof Error ? err : new Error(String(err)));
+      setError(
+        isTimeout(err) ? new Error(`me endpoint did not answer within ${ME_TIMEOUT_MS / 1e3}s`) : err instanceof Error ? err : new Error(String(err))
+      );
     }
   }, [cfg, pinThisTab]);
   React4__namespace.useEffect(() => {
@@ -2144,7 +2160,6 @@ var inputStyle = {
   fontFamily: SIGNIN_FONT,
   // 16px — never lower · suppresses iOS Safari focus auto-zoom.
   fontSize: 16,
-  outline: "none",
   boxSizing: "border-box"
 };
 function btnBase(disabled) {
@@ -2251,15 +2266,22 @@ var EMAIL_ERRORS = {
 var SUBMIT_ERRORS = {
   bad_request: "That signature couldn't be read. Copy it again, whole."
 };
-var NETWORK_ERROR = "We couldn't reach the server. Check your connection and try again.";
+function networkError(authOrigin) {
+  let host = authOrigin;
+  try {
+    host = new URL(authOrigin).host;
+  } catch {
+  }
+  return `We couldn't reach the orangecheck sign-in service at ${host}. Check your connection, then try again.`;
+}
 function humanSigninError(reason, path, step = "challenge") {
   if (!/^[a-z0-9_]+$/.test(reason)) return reason;
   if (path === "wallet" && step === "submit" && SUBMIT_ERRORS[reason]) return SUBMIT_ERRORS[reason];
   if (path === "email" && EMAIL_ERRORS[reason]) return EMAIL_ERRORS[reason];
   return SIGNIN_ERRORS[reason] ?? (path === "email" ? "That didn't work. Try again, or send a new code." : "That didn't work. Try again.");
 }
-function failureMessage(err, path, step) {
-  if (err instanceof TypeError || err instanceof SyntaxError) return NETWORK_ERROR;
+function failureMessage(err, path, step, authOrigin) {
+  if (err instanceof TypeError || err instanceof SyntaxError) return networkError(authOrigin);
   return humanSigninError(err instanceof Error ? err.message : "failed", path, step);
 }
 var BECH32_ADDRESS = /^(bc1|tb1|bcrt1)[qpzry9x8gf2tvdw0s3jn54khce6mua7l]{8,87}$/i;
@@ -2318,6 +2340,19 @@ function OcSignIn({
   const [path, setPath] = React4__namespace.useState(
     initialPath ?? (providersFirst ? "email" : "wallet")
   );
+  const tabsId = React4__namespace.useId();
+  const tabOrder = providersFirst ? ["email", "wallet"] : ["wallet", "email"];
+  const tabRefs = React4__namespace.useRef({});
+  const onTabKey = (e) => {
+    const i = tabOrder.indexOf(path);
+    const last = tabOrder.length - 1;
+    const to = e.key === "ArrowRight" ? (i + 1) % tabOrder.length : e.key === "ArrowLeft" ? (i + last) % tabOrder.length : e.key === "Home" ? 0 : e.key === "End" ? last : -1;
+    if (to < 0) return;
+    e.preventDefault();
+    const next = tabOrder[to];
+    setPath(next);
+    tabRefs.current[next]?.focus();
+  };
   const [signedIn, setSignedIn] = React4__namespace.useState(null);
   const [linkAlso, setLinkAlso] = React4__namespace.useState(false);
   const [oauthError, setOauthError] = React4__namespace.useState(false);
@@ -2481,7 +2516,7 @@ function OcSignIn({
       "div",
       {
         role: "tablist",
-        "aria-label": "signin method",
+        "aria-label": "Sign-in method",
         "data-oc-signin-tabs": "",
         style: {
           display: "flex",
@@ -2489,64 +2524,55 @@ function OcSignIn({
           marginBottom: 16,
           borderBottom: "1px solid var(--border, #27272a)"
         },
-        children: providersFirst ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-          /* @__PURE__ */ jsxRuntime.jsx(
-            SigninTab,
-            {
-              active: path === "email",
-              onClick: () => setPath("email"),
-              children: "Email"
-            }
-          ),
-          /* @__PURE__ */ jsxRuntime.jsx(
-            SigninTab,
-            {
-              active: path === "wallet",
-              onClick: () => setPath("wallet"),
-              children: "Bitcoin wallet"
-            }
-          )
-        ] }) : /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-          /* @__PURE__ */ jsxRuntime.jsx(
-            SigninTab,
+        children: tabOrder.map((p) => /* @__PURE__ */ jsxRuntime.jsx(
+          SigninTab,
+          {
+            id: `${tabsId}-${p}`,
+            controls: `${tabsId}-panel`,
+            active: path === p,
+            onClick: () => setPath(p),
+            onKeyDown: onTabKey,
+            ref: (el) => {
+              tabRefs.current[p] = el;
+            },
+            children: p === "email" ? "Email" : "Bitcoin wallet"
+          },
+          p
+        ))
+      }
+    ),
+    /* @__PURE__ */ jsxRuntime.jsxs(
+      "div",
+      {
+        "data-oc-signin-panel": "",
+        ...bothEnabled ? {
+          id: `${tabsId}-panel`,
+          role: "tabpanel",
+          "aria-labelledby": `${tabsId}-${path}`
+        } : {},
+        children: [
+          showWallet && /* @__PURE__ */ jsxRuntime.jsx(
+            WalletFlow,
             {
-              active: path === "wallet",
-              onClick: () => setPath("wallet"),
-              children: "Bitcoin wallet"
+              authOrigin,
+              audience,
+              add: addMode,
+              credentials,
+              onSuccess: (a, t) => void handleSuccess(a, t, "wallet")
             }
           ),
-          /* @__PURE__ */ jsxRuntime.jsx(
-            SigninTab,
+          showEmail && /* @__PURE__ */ jsxRuntime.jsx(
+            EmailFlow,
             {
-              active: path === "email",
-              onClick: () => setPath("email"),
-              children: "Email"
+              authOrigin,
+              add: addMode,
+              credentials,
+              onSuccess: (a, t) => void handleSuccess(a, t, "email")
             }
           )
-        ] })
+        ]
       }
     ),
-    /* @__PURE__ */ jsxRuntime.jsxs("div", { "data-oc-signin-panel": "", role: "tabpanel", children: [
-      showWallet && /* @__PURE__ */ jsxRuntime.jsx(
-        WalletFlow,
-        {
-          authOrigin,
-          audience,
-          add: addMode,
-          credentials,
-          onSuccess: (a, t) => void handleSuccess(a, t, "wallet")
-        }
-      ),
-      showEmail && /* @__PURE__ */ jsxRuntime.jsx(
-        EmailFlow,
-        {
-          authOrigin,
-          add: addMode,
-          credentials,
-          onSuccess: (a, t) => void handleSuccess(a, t, "email")
-        }
-      )
-    ] }),
     !providersFirst && /* @__PURE__ */ jsxRuntime.jsx(
       ProviderSignIn,
       {
@@ -2578,18 +2604,19 @@ function OcSignIn({
     ] })
   ] });
 }
-function SigninTab({
-  active,
-  onClick,
-  children
-}) {
+var SigninTab = React4__namespace.forwardRef(function SigninTab2({ id, controls, active, onClick, onKeyDown, children }, ref) {
   return /* @__PURE__ */ jsxRuntime.jsx(
     "button",
     {
+      ref,
       type: "button",
       role: "tab",
+      id,
       "aria-selected": active,
+      "aria-controls": controls,
+      tabIndex: active ? 0 : -1,
       onClick,
+      onKeyDown,
       "data-oc-signin-tab": active ? "active" : "inactive",
       style: {
         minHeight: 44,
@@ -2608,7 +2635,7 @@ function SigninTab({
       children
     }
   );
-}
+});
 function ProviderIcon({ id }) {
   const common = {
     width: 14,
@@ -2847,7 +2874,7 @@ function WalletFlow({
       step = "submit";
       await submitSignature(challenge.message, challenge.nonce, signature, "bip322");
     } catch (err) {
-      setError(failureMessage(err, "wallet", step));
+      setError(failureMessage(err, "wallet", step, authOrigin));
       setSubmitting(false);
     }
   }
@@ -2864,7 +2891,7 @@ function WalletFlow({
     try {
       await submitSignature(manual.message, manual.nonce, sig, void 0);
     } catch (err) {
-      setError(failureMessage(err, "wallet", "submit"));
+      setError(failureMessage(err, "wallet", "submit", authOrigin));
       setSubmitting(false);
     }
   }
@@ -3016,7 +3043,7 @@ function EmailFlow({ authOrigin, add, credentials, onSuccess }) {
       setToken(json.token);
       return null;
     } catch {
-      return NETWORK_ERROR;
+      return networkError(authOrigin);
     }
   }
   async function start(e) {
@@ -3077,7 +3104,7 @@ function EmailFlow({ authOrigin, add, credentials, onSuccess }) {
       }
       onSuccess(json.account, json.token);
     } catch (err) {
-      setCodeError(failureMessage(err, "email", "submit"));
+      setCodeError(failureMessage(err, "email", "submit", authOrigin));
     } finally {
       setSubmitting(false);
     }
@@ -3260,8 +3287,7 @@ var inputStyle2 = {
   // 16px — never below it. A sub-16px font-size makes iOS Safari
   // auto-zoom the viewport on focus; the family rule is >=16px on
   // every form field. Desktop reads fine at 16 too.
-  fontSize: 16,
-  outline: "none"
+  fontSize: 16
 };
 var linkAlsoStyle = {
   display: "flex",