@ovok/native 1.16.1-dev.2147 → 1.16.1-dev.2149

package/lib/commonjs/modules/auth/sign-in/utils/jwt-claims.js

@@ -0,0 +1,21 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.jwtClaims = void 0;
+/** The claims web sign-in reads from a provider's JWT. */
+
+const asClaims = value => typeof value === "object" && value !== null ? value : {};
+
+/** A JWT's claims, read without checking the signature; Ovok verifies the token itself. */
+const jwtClaims = jwt => {
+  try {
+    const payload = (jwt.split(".")[1] ?? "").replace(/-/g, "+").replace(/_/g, "/");
+    return asClaims(JSON.parse(atob(payload)));
+  } catch {
+    return {};
+  }
+};
+exports.jwtClaims = jwtClaims;
+//# sourceMappingURL=jwt-claims.js.map

package/lib/commonjs/modules/auth/sign-in/utils/jwt-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["asClaims","value","jwtClaims","jwt","payload","split","replace","JSON","parse","atob","exports"],"sourceRoot":"../../../../../../src","sources":["modules/auth/sign-in/utils/jwt-claims.ts"],"mappings":";;;;;;AAAA;;AAMA,MAAMA,QAAQ,GAAIC,KAAc,IAC9B,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI,GAAIA,KAAK,GAAiB,CAAC,CAAC;;AAEzE;AACA,MAAMC,SAAS,GAAIC,GAAW,IAAgB;EAC5C,IAAI;IACF,MAAMC,OAAO,GAAG,CAACD,GAAG,CAACE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAACA,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;IAE/E,OAAON,QAAQ,CAACO,IAAI,CAACC,KAAK,CAACC,IAAI,CAACL,OAAO,CAAC,CAAC,CAAC;EAC5C,CAAC,CAAC,MAAM;IACN,OAAO,CAAC,CAAC;EACX;AACF,CAAC;AAACM,OAAA,CAAAR,SAAA,GAAAA,SAAA","ignoreList":[]}

package/lib/commonjs/modules/auth/utils/sign-out-google.web.js

@@ -0,0 +1,10 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.signOutGoogleIfNeeded = void 0;
+/** The web keeps no Google account in the app, so there is nothing to clear. */
+const signOutGoogleIfNeeded = async () => undefined;
+exports.signOutGoogleIfNeeded = signOutGoogleIfNeeded;
+//# sourceMappingURL=sign-out-google.web.js.map

package/lib/commonjs/modules/auth/utils/sign-out-google.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["signOutGoogleIfNeeded","undefined","exports"],"sourceRoot":"../../../../../src","sources":["modules/auth/utils/sign-out-google.web.ts"],"mappings":";;;;;;AAAA;AACO,MAAMA,qBAAqB,GAAG,MAAAA,CAAA,KAA2BC,SAAS;AAACC,OAAA,CAAAF,qBAAA,GAAAA,qBAAA","ignoreList":[]}

package/lib/module/modules/auth/google-return-page/index.js

@@ -0,0 +1,21 @@
+"use strict";
+
+import { GOOGLE_ANSWER_KEY, GOOGLE_REQUEST_KEY } from "../sign-in/utils/google-redirect-sign-in.js";
+
+/**
+ * The page Google returns to when `GoogleLogin` signs in on the web.
+ *
+ * Serve it as a static file at the redirect URI, by default `/oauth/google.html`. It keeps Google's answer
+ * for this tab and sends the tab back to the sign-in screen, so the token never stays in the address.
+ */
+export const GOOGLE_RETURN_PAGE_HTML = `<!doctype html>
+<meta charset="utf-8">
+<title>Signing in</title>
+<script>
+  var request = JSON.parse(sessionStorage.getItem("${GOOGLE_REQUEST_KEY}") || "{}");
+  var target = new URL(request.returnTo || "/", location.origin);
+  sessionStorage.setItem("${GOOGLE_ANSWER_KEY}", location.hash.slice(1));
+  location.replace(target.origin === location.origin ? target.href : "/");
+</script>
+`;
+//# sourceMappingURL=index.js.map

package/lib/module/modules/auth/google-return-page/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["GOOGLE_ANSWER_KEY","GOOGLE_REQUEST_KEY","GOOGLE_RETURN_PAGE_HTML"],"sourceRoot":"../../../../../src","sources":["modules/auth/google-return-page/index.ts"],"mappings":";;AAAA,SACEA,iBAAiB,EACjBC,kBAAkB,QACb,6CAA0C;;AAEjD;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,uBAA+B,GAAG;AAC/C;AACA;AACA;AACA,qDAAqDD,kBAAkB;AACvE;AACA,4BAA4BD,iBAAiB;AAC7C;AACA;AACA,CAAC","ignoreList":[]}

package/lib/module/modules/auth/hooks/use-social-sign-in.web.js

@@ -0,0 +1,10 @@
+"use strict";
+
+import { useAuthAction } from "./use-auth-action.js";
+const NOT_ON_THE_WEB = "useSocialSignIn is not available on the web; render SignIn.SocialLogins.GoogleLogin or AppleLogin instead";
+
+/** Rejects: the web signs in through the `SignIn.SocialLogins` buttons, which leave and return to the page. */
+export const useSocialSignIn = _options => useAuthAction(async () => {
+  throw new Error(NOT_ON_THE_WEB);
+});
+//# sourceMappingURL=use-social-sign-in.web.js.map

package/lib/module/modules/auth/hooks/use-social-sign-in.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useAuthAction","NOT_ON_THE_WEB","useSocialSignIn","_options","Error"],"sourceRoot":"../../../../../src","sources":["modules/auth/hooks/use-social-sign-in.web.ts"],"mappings":";;AAGA,SAASA,aAAa,QAAQ,sBAAmB;AAEjD,MAAMC,cAAc,GAClB,2GAA2G;;AAE7G;AACA,OAAO,MAAMC,eAAe,GAAIC,QAA6B,IAC3DH,aAAa,CAAC,YAA8B;EAC1C,MAAM,IAAII,KAAK,CAACH,cAAc,CAAC;AACjC,CAAC,CAAC","ignoreList":[]}

package/lib/module/modules/auth/index.js

@@ -9,6 +9,7 @@
  */
 import "./default-translation.js";
 export * from "./sign-in/index.js";
+export * from "./google-return-page/index.js";
 export * from "./register/index.js";
 export * from "./profile/index.js";
 export * from "./delete-account-button/index.js";
@@ -18,7 +19,7 @@ export * from "./hooks/use-rate-limit-cooldown.js";
 export * from "./hooks/use-auth-action.js";
 export * from "./hooks/use-sign-in.js";
 export * from "./hooks/use-accept-invite-link.js";
-export * from "./hooks/use-social-sign-in.js";
+export * from "./hooks/use-social-sign-in";
 export * from "./hooks/use-sign-out.js";
 export * from "./hooks/use-delete-account.js";
 export * from "./utils/rate-limit.js";

package/lib/module/modules/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["modules/auth/index.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,0BAAuB;AAE9B,cAAc,oBAAW;AACzB,cAAc,qBAAY;AAC1B,cAAc,oBAAW;AACzB,cAAc,kCAAyB;AACvC,cAAc,0BAAiB;AAC/B,cAAc,2BAAkB;AAChC,cAAc,oCAAiC;AAC/C,cAAc,4BAAyB;AACvC,cAAc,wBAAqB;AACnC,cAAc,mCAAgC;AAC9C,cAAc,+BAA4B;AAC1C,cAAc,yBAAsB;AACpC,cAAc,+BAA4B;AAC1C,cAAc,uBAAoB;AAClC,cAAc,0BAAuB;AACrC,cAAc,wBAAqB;AACnC,cAAc,oBAAW","ignoreList":[]}
+{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["modules/auth/index.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,0BAAuB;AAE9B,cAAc,oBAAW;AACzB,cAAc,+BAAsB;AACpC,cAAc,qBAAY;AAC1B,cAAc,oBAAW;AACzB,cAAc,kCAAyB;AACvC,cAAc,0BAAiB;AAC/B,cAAc,2BAAkB;AAChC,cAAc,oCAAiC;AAC/C,cAAc,4BAAyB;AACvC,cAAc,wBAAqB;AACnC,cAAc,mCAAgC;AAC9C,cAAc,4BAA4B;AAC1C,cAAc,yBAAsB;AACpC,cAAc,+BAA4B;AAC1C,cAAc,uBAAoB;AAClC,cAAc,0BAAuB;AACrC,cAAc,wBAAqB;AACnC,cAAc,oBAAW","ignoreList":[]}

package/lib/module/modules/auth/session/logout-session.js

@@ -1,6 +1,6 @@
 "use strict";
 
-import { signOutGoogleIfNeeded } from "../utils/sign-out-google.js";
+import { signOutGoogleIfNeeded } from "../utils/sign-out-google";
 const logoutRequests = new WeakMap();
 const logoutInProgress = new WeakSet();
 const isLogoutInProgress = client => logoutInProgress.has(client);

package/lib/module/modules/auth/session/logout-session.js.map

@@ -1 +1 @@
-{"version":3,"names":["signOutGoogleIfNeeded","logoutRequests","WeakMap","logoutInProgress","WeakSet","isLogoutInProgress","client","has","logoutSession","key","pending","get","add","request","auth","logout","finally","delete","set"],"sourceRoot":"../../../../../src","sources":["modules/auth/session/logout-session.ts"],"mappings":";;AAEA,SAASA,qBAAqB,QAAQ,6BAA0B;AAEhE,MAAMC,cAAc,GAAG,IAAIC,OAAO,CAAwB,CAAC;AAC3D,MAAMC,gBAAgB,GAAG,IAAIC,OAAO,CAAS,CAAC;AAE9C,MAAMC,kBAAkB,GAAIC,MAAc,IACxCH,gBAAgB,CAACI,GAAG,CAACD,MAAM,CAAC;;AAE9B;AACA,MAAME,aAAa,GAAIF,MAAY,IAAoB;EACrD,MAAMG,GAAG,GAAGH,MAAgB;EAC5B,MAAMI,OAAO,GAAGT,cAAc,CAACU,GAAG,CAACF,GAAG,CAAC;EAEvC,IAAIC,OAAO,EAAE;IACX,OAAOA,OAAO;EAChB;EAEAP,gBAAgB,CAACS,GAAG,CAACH,GAAG,CAAC;EAEzB,MAAMI,OAAO,GAAG,CAAC,YAAY;IAC3B,IAAI;MACF,MAAMP,MAAM,CAACQ,IAAI,CAACC,MAAM,CAAC,CAAC;IAC5B,CAAC,SAAS;MACR,MAAMf,qBAAqB,CAAC,CAAC;IAC/B;EACF,CAAC,EAAE,CAAC,CAACgB,OAAO,CAAC,MAAM;IACjBf,cAAc,CAACgB,MAAM,CAACR,GAAG,CAAC;IAC1BN,gBAAgB,CAACc,MAAM,CAACR,GAAG,CAAC;EAC9B,CAAC,CAAC;EAEFR,cAAc,CAACiB,GAAG,CAACT,GAAG,EAAEI,OAAO,CAAC;EAEhC,OAAOA,OAAO;AAChB,CAAC;AAED,SAASR,kBAAkB,EAAEG,aAAa","ignoreList":[]}
+{"version":3,"names":["signOutGoogleIfNeeded","logoutRequests","WeakMap","logoutInProgress","WeakSet","isLogoutInProgress","client","has","logoutSession","key","pending","get","add","request","auth","logout","finally","delete","set"],"sourceRoot":"../../../../../src","sources":["modules/auth/session/logout-session.ts"],"mappings":";;AAEA,SAASA,qBAAqB,QAAQ,0BAA0B;AAEhE,MAAMC,cAAc,GAAG,IAAIC,OAAO,CAAwB,CAAC;AAC3D,MAAMC,gBAAgB,GAAG,IAAIC,OAAO,CAAS,CAAC;AAE9C,MAAMC,kBAAkB,GAAIC,MAAc,IACxCH,gBAAgB,CAACI,GAAG,CAACD,MAAM,CAAC;;AAE9B;AACA,MAAME,aAAa,GAAIF,MAAY,IAAoB;EACrD,MAAMG,GAAG,GAAGH,MAAgB;EAC5B,MAAMI,OAAO,GAAGT,cAAc,CAACU,GAAG,CAACF,GAAG,CAAC;EAEvC,IAAIC,OAAO,EAAE;IACX,OAAOA,OAAO;EAChB;EAEAP,gBAAgB,CAACS,GAAG,CAACH,GAAG,CAAC;EAEzB,MAAMI,OAAO,GAAG,CAAC,YAAY;IAC3B,IAAI;MACF,MAAMP,MAAM,CAACQ,IAAI,CAACC,MAAM,CAAC,CAAC;IAC5B,CAAC,SAAS;MACR,MAAMf,qBAAqB,CAAC,CAAC;IAC/B;EACF,CAAC,EAAE,CAAC,CAACgB,OAAO,CAAC,MAAM;IACjBf,cAAc,CAACgB,MAAM,CAACR,GAAG,CAAC;IAC1BN,gBAAgB,CAACc,MAAM,CAACR,GAAG,CAAC;EAC9B,CAAC,CAAC;EAEFR,cAAc,CAACiB,GAAG,CAACT,GAAG,EAAEI,OAAO,CAAC;EAEhC,OAAOA,OAAO;AAChB,CAAC;AAED,SAASR,kBAAkB,EAAEG,aAAa","ignoreList":[]}

package/lib/module/modules/auth/sign-in/components/social-logins/apple-login-button.web.js

@@ -0,0 +1,67 @@
+"use strict";
+
+import { useOvok } from "@ovok/core/next/react";
+import * as React from "react";
+import { parseSignInError } from "../../../utils/sign-in-error.js";
+import { isAppleCancel, loadAppleScript, signInWithApple } from "../../utils/apple-web-sign-in.js";
+import { SocialLoginButton } from "./social-login-button.js";
+import { jsx as _jsx } from "react/jsx-runtime";
+const AppleServicesLoginButton = ({
+  appleServicesId,
+  appleRedirectUri,
+  internalId,
+  onSuccess,
+  onError,
+  testID,
+  style,
+  disabled,
+  children,
+  ...props
+}) => {
+  const client = useOvok();
+  const [isLoading, setIsLoading] = React.useState(false);
+  const handleAppleLogin = React.useCallback(async () => {
+    try {
+      setIsLoading(true);
+      const credentials = await signInWithApple({
+        servicesId: appleServicesId,
+        redirectUri: appleRedirectUri
+      });
+      const loginResponse = await client.auth.socialLogin("apple", {
+        ...credentials,
+        internalId
+      });
+      onSuccess?.(loginResponse);
+    } catch (cause) {
+      if (!isAppleCancel(cause)) {
+        onError?.(parseSignInError(cause).error);
+      }
+    } finally {
+      setIsLoading(false);
+    }
+  }, [appleRedirectUri, appleServicesId, client, internalId, onError, onSuccess]);
+
+  // Browsers only open the popup right after a tap, so Apple's script is loaded before one.
+  React.useEffect(() => {
+    loadAppleScript().catch(() => undefined);
+  }, []);
+  return /*#__PURE__*/_jsx(SocialLoginButton, {
+    ...props,
+    backgroundColor: "#000",
+    style: style,
+    disabled: disabled || isLoading,
+    onPress: handleAppleLogin,
+    testID: testID,
+    children: children
+  });
+};
+
+/** Sign in with Apple in a popup, for the Services ID registered for this site; renders nothing without one. */
+export const AppleLoginButton = ({
+  appleServicesId,
+  ...props
+}) => appleServicesId ? /*#__PURE__*/_jsx(AppleServicesLoginButton, {
+  ...props,
+  appleServicesId: appleServicesId
+}) : null;
+//# sourceMappingURL=apple-login-button.web.js.map

package/lib/module/modules/auth/sign-in/components/social-logins/apple-login-button.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useOvok","React","parseSignInError","isAppleCancel","loadAppleScript","signInWithApple","SocialLoginButton","jsx","_jsx","AppleServicesLoginButton","appleServicesId","appleRedirectUri","internalId","onSuccess","onError","testID","style","disabled","children","props","client","isLoading","setIsLoading","useState","handleAppleLogin","useCallback","credentials","servicesId","redirectUri","loginResponse","auth","socialLogin","cause","error","useEffect","catch","undefined","backgroundColor","onPress","AppleLoginButton"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/apple-login-button.web.tsx"],"mappings":";;AAAA,SAASA,OAAO,QAAQ,uBAAuB;AAC/C,OAAO,KAAKC,KAAK,MAAM,OAAO;AAE9B,SAASC,gBAAgB,QAAQ,iCAA8B;AAE/D,SACEC,aAAa,EACbC,eAAe,EACfC,eAAe,QACV,kCAA+B;AAEtC,SAASC,iBAAiB,QAAQ,0BAAuB;AAAC,SAAAC,GAAA,IAAAC,IAAA;AAM1D,MAAMC,wBAAwB,GAAGA,CAAC;EAChCC,eAAe;EACfC,gBAAgB;EAChBC,UAAU;EACVC,SAAS;EACTC,OAAO;EACPC,MAAM;EACNC,KAAK;EACLC,QAAQ;EACRC,QAAQ;EACR,GAAGC;AAC6C,CAAC,KAAK;EACtD,MAAMC,MAAM,GAAGpB,OAAO,CAAC,CAAC;EAExB,MAAM,CAACqB,SAAS,EAAEC,YAAY,CAAC,GAAGrB,KAAK,CAACsB,QAAQ,CAAC,KAAK,CAAC;EAEvD,MAAMC,gBAAgB,GAAGvB,KAAK,CAACwB,WAAW,CAAC,YAAY;IACrD,IAAI;MACFH,YAAY,CAAC,IAAI,CAAC;MAElB,MAAMI,WAAW,GAAG,MAAMrB,eAAe,CAAC;QACxCsB,UAAU,EAAEjB,eAAe;QAC3BkB,WAAW,EAAEjB;MACf,CAAC,CAAC;MAEF,MAAMkB,aAAa,GAAG,MAAMT,MAAM,CAACU,IAAI,CAACC,WAAW,CAAC,OAAO,EAAE;QAAE,GAAGL,WAAW;QAAEd;MAAW,CAAC,CAAC;MAE5FC,SAAS,GAAGgB,aAAa,CAAC;IAC5B,CAAC,CAAC,OAAOG,KAAK,EAAE;MACd,IAAI,CAAC7B,aAAa,CAAC6B,KAAK,CAAC,EAAE;QACzBlB,OAAO,GAAGZ,gBAAgB,CAAC8B,KAAK,CAAC,CAACC,KAAK,CAAC;MAC1C;IACF,CAAC,SAAS;MACRX,YAAY,CAAC,KAAK,CAAC;IACrB;EACF,CAAC,EAAE,CAACX,gBAAgB,EAAED,eAAe,EAAEU,MAAM,EAAER,UAAU,EAAEE,OAAO,EAAED,SAAS,CAAC,CAAC;;EAE/E;EACAZ,KAAK,CAACiC,SAAS,CAAC,MAAM;IACpB9B,eAAe,CAAC,CAAC,CAAC+B,KAAK,CAAC,MAAMC,SAAS,CAAC;EAC1C,CAAC,EAAE,EAAE,CAAC;EAEN,oBACE5B,IAAA,CAACF,iBAAiB;IAAA,GACZa,KAAK;IACTkB,eAAe,EAAC,MAAM;IACtBrB,KAAK,EAAEA,KAAM;IACbC,QAAQ,EAAEA,QAAQ,IAAII,SAAU;IAChCiB,OAAO,EAAEd,gBAAiB;IAC1BT,MAAM,EAAEA,MAAO;IAAAG,QAAA,EAEdA;EAAQ,CACQ,CAAC;AAExB,CAAC;;AAED;AACA,OAAO,MAAMqB,gBAAgB,GAAGA,CAAC;EAC/B7B,eAAe;EACf,GAAGS;AACqC,CAAC,KACzCT,eAAe,gBACbF,IAAA,CAACC,wBAAwB;EAAA,GAAKU,KAAK;EAAET,eAAe,EAAEA;AAAgB,CAAE,CAAC,GACvE,IAAI","ignoreList":[]}

package/lib/module/modules/auth/sign-in/components/social-logins/apple-login.js

@@ -1,6 +1,6 @@
 "use strict";
 
-import { AppleLoginButton } from "./apple-login-button.js";
+import { AppleLoginButton } from "./apple-login-button";
 import { AppleLoginIcon } from "./apple-login-icon.js";
 import { AppleLoginText } from "./apple-login-text.js";
 

package/lib/module/modules/auth/sign-in/components/social-logins/apple-login.js.map

@@ -1 +1 @@
-{"version":3,"names":["AppleLoginButton","AppleLoginIcon","AppleLoginText","AppleLogin","Object","assign","Icon","Text"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/apple-login.tsx"],"mappings":";;AAAA,SAASA,gBAAgB,QAAQ,yBAAsB;AACvD,SAASC,cAAc,QAAQ,uBAAoB;AACnD,SAASC,cAAc,QAAQ,uBAAoB;;AAEnD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,UAAU,GAAGC,MAAM,CAACC,MAAM,CAACL,gBAAgB,EAAE;EACxD;EACAM,IAAI,EAAEL,cAAc;EAEpB;EACAM,IAAI,EAAEL;AACR,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["AppleLoginButton","AppleLoginIcon","AppleLoginText","AppleLogin","Object","assign","Icon","Text"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/apple-login.tsx"],"mappings":";;AAAA,SAASA,gBAAgB,QAAQ,sBAAsB;AACvD,SAASC,cAAc,QAAQ,uBAAoB;AACnD,SAASC,cAAc,QAAQ,uBAAoB;;AAEnD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,UAAU,GAAGC,MAAM,CAACC,MAAM,CAACL,gBAAgB,EAAE;EACxD;EACAM,IAAI,EAAEL,cAAc;EAEpB;EACAM,IAAI,EAAEL;AACR,CAAC,CAAC","ignoreList":[]}

package/lib/module/modules/auth/sign-in/components/social-logins/google-login-button.web.js

@@ -0,0 +1,68 @@
+"use strict";
+
+import { useOvok } from "@ovok/core/next/react";
+import * as React from "react";
+import { useAppTheme } from "../../../../theme/index.js";
+import { parseSignInError } from "../../../utils/sign-in-error.js";
+import { startGoogleSignIn, takeGoogleIdToken } from "../../utils/google-redirect-sign-in.js";
+import { SocialLoginButton } from "./social-login-button.js";
+
+/** Google's sign-in page in this tab; back on the sign-in screen, the ID token it sent signs the user in. */
+import { jsx as _jsx } from "react/jsx-runtime";
+export const GoogleLoginButton = ({
+  googleIosClientId: _googleIosClientId,
+  googleWebClientId,
+  googleRedirectUri,
+  internalId,
+  onSuccess,
+  onError,
+  testID,
+  style,
+  disabled,
+  children,
+  ...props
+}) => {
+  const theme = useAppTheme();
+  const client = useOvok();
+  const [isLoading, setIsLoading] = React.useState(false);
+  const signInWithIdToken = React.useCallback(async idToken => {
+    try {
+      setIsLoading(true);
+      const loginResponse = await client.auth.socialLogin("google", {
+        idToken,
+        internalId
+      });
+      onSuccess?.(loginResponse);
+    } catch (error) {
+      onError?.(parseSignInError(error).error);
+    } finally {
+      setIsLoading(false);
+    }
+  }, [client, internalId, onError, onSuccess]);
+  const handleGoogleSignIn = React.useCallback(() => {
+    try {
+      startGoogleSignIn({
+        clientId: googleWebClientId,
+        redirectUri: googleRedirectUri
+      });
+    } catch (error) {
+      onError?.(parseSignInError(error).error);
+    }
+  }, [googleRedirectUri, googleWebClientId, onError]);
+  React.useEffect(() => {
+    const idToken = takeGoogleIdToken();
+    if (idToken) {
+      void signInWithIdToken(idToken);
+    }
+  }, [signInWithIdToken]);
+  return /*#__PURE__*/_jsx(SocialLoginButton, {
+    ...props,
+    backgroundColor: theme.dark ? "#000" : "#fff",
+    style: style,
+    disabled: isLoading || disabled,
+    onPress: handleGoogleSignIn,
+    testID: testID,
+    children: children
+  });
+};
+//# sourceMappingURL=google-login-button.web.js.map

package/lib/module/modules/auth/sign-in/components/social-logins/google-login-button.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useOvok","React","useAppTheme","parseSignInError","startGoogleSignIn","takeGoogleIdToken","SocialLoginButton","jsx","_jsx","GoogleLoginButton","googleIosClientId","_googleIosClientId","googleWebClientId","googleRedirectUri","internalId","onSuccess","onError","testID","style","disabled","children","props","theme","client","isLoading","setIsLoading","useState","signInWithIdToken","useCallback","idToken","loginResponse","auth","socialLogin","error","handleGoogleSignIn","clientId","redirectUri","useEffect","backgroundColor","dark","onPress"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/google-login-button.web.tsx"],"mappings":";;AAAA,SAASA,OAAO,QAAQ,uBAAuB;AAC/C,OAAO,KAAKC,KAAK,MAAM,OAAO;AAE9B,SAASC,WAAW,QAAQ,4BAAmB;AAC/C,SAASC,gBAAgB,QAAQ,iCAA8B;AAE/D,SACEC,iBAAiB,EACjBC,iBAAiB,QACZ,wCAAqC;AAE5C,SAASC,iBAAiB,QAAQ,0BAAuB;;AAEzD;AAAA,SAAAC,GAAA,IAAAC,IAAA;AACA,OAAO,MAAMC,iBAAiB,GAAGA,CAAC;EAChCC,iBAAiB,EAAEC,kBAAkB;EACrCC,iBAAiB;EACjBC,iBAAiB;EACjBC,UAAU;EACVC,SAAS;EACTC,OAAO;EACPC,MAAM;EACNC,KAAK;EACLC,QAAQ;EACRC,QAAQ;EACR,GAAGC;AACsC,CAAC,KAAK;EAC/C,MAAMC,KAAK,GAAGpB,WAAW,CAAC,CAAC;EAC3B,MAAMqB,MAAM,GAAGvB,OAAO,CAAC,CAAC;EAExB,MAAM,CAACwB,SAAS,EAAEC,YAAY,CAAC,GAAGxB,KAAK,CAACyB,QAAQ,CAAC,KAAK,CAAC;EAEvD,MAAMC,iBAAiB,GAAG1B,KAAK,CAAC2B,WAAW,CACzC,MAAOC,OAAe,IAAK;IACzB,IAAI;MACFJ,YAAY,CAAC,IAAI,CAAC;MAElB,MAAMK,aAAa,GAAG,MAAMP,MAAM,CAACQ,IAAI,CAACC,WAAW,CAAC,QAAQ,EAAE;QAAEH,OAAO;QAAEf;MAAW,CAAC,CAAC;MAEtFC,SAAS,GAAGe,aAAa,CAAC;IAC5B,CAAC,CAAC,OAAOG,KAAK,EAAE;MACdjB,OAAO,GAAGb,gBAAgB,CAAC8B,KAAK,CAAC,CAACA,KAAK,CAAC;IAC1C,CAAC,SAAS;MACRR,YAAY,CAAC,KAAK,CAAC;IACrB;EACF,CAAC,EACD,CAACF,MAAM,EAAET,UAAU,EAAEE,OAAO,EAAED,SAAS,CACzC,CAAC;EAED,MAAMmB,kBAAkB,GAAGjC,KAAK,CAAC2B,WAAW,CAAC,MAAM;IACjD,IAAI;MACFxB,iBAAiB,CAAC;QAAE+B,QAAQ,EAAEvB,iBAAiB;QAAEwB,WAAW,EAAEvB;MAAkB,CAAC,CAAC;IACpF,CAAC,CAAC,OAAOoB,KAAK,EAAE;MACdjB,OAAO,GAAGb,gBAAgB,CAAC8B,KAAK,CAAC,CAACA,KAAK,CAAC;IAC1C;EACF,CAAC,EAAE,CAACpB,iBAAiB,EAAED,iBAAiB,EAAEI,OAAO,CAAC,CAAC;EAEnDf,KAAK,CAACoC,SAAS,CAAC,MAAM;IACpB,MAAMR,OAAO,GAAGxB,iBAAiB,CAAC,CAAC;IAEnC,IAAIwB,OAAO,EAAE;MACX,KAAKF,iBAAiB,CAACE,OAAO,CAAC;IACjC;EACF,CAAC,EAAE,CAACF,iBAAiB,CAAC,CAAC;EAEvB,oBACEnB,IAAA,CAACF,iBAAiB;IAAA,GACZe,KAAK;IACTiB,eAAe,EAAEhB,KAAK,CAACiB,IAAI,GAAG,MAAM,GAAG,MAAO;IAC9CrB,KAAK,EAAEA,KAAM;IACbC,QAAQ,EAAEK,SAAS,IAAIL,QAAS;IAChCqB,OAAO,EAAEN,kBAAmB;IAC5BjB,MAAM,EAAEA,MAAO;IAAAG,QAAA,EAEdA;EAAQ,CACQ,CAAC;AAExB,CAAC","ignoreList":[]}

package/lib/module/modules/auth/sign-in/components/social-logins/google-login.js

@@ -1,7 +1,7 @@
 "use strict";
 
 import { GoogleIcon } from "./google-icon.js";
-import { GoogleLoginButton } from "./google-login-button.js";
+import { GoogleLoginButton } from "./google-login-button";
 import { GoogleLoginText } from "./google-login-text.js";
 
 /**

package/lib/module/modules/auth/sign-in/components/social-logins/google-login.js.map

@@ -1 +1 @@
-{"version":3,"names":["GoogleIcon","GoogleLoginButton","GoogleLoginText","GoogleLogin","Object","assign","Icon","Text"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/google-login.tsx"],"mappings":";;AAAA,SAASA,UAAU,QAAQ,kBAAe;AAC1C,SAASC,iBAAiB,QAAQ,0BAAuB;AACzD,SAASC,eAAe,QAAQ,wBAAqB;;AAErD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,WAAW,GAAGC,MAAM,CAACC,MAAM,CAACJ,iBAAiB,EAAE;EAC1D;EACAK,IAAI,EAAEN,UAAU;EAEhB;EACAO,IAAI,EAAEL;AACR,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["GoogleIcon","GoogleLoginButton","GoogleLoginText","GoogleLogin","Object","assign","Icon","Text"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/google-login.tsx"],"mappings":";;AAAA,SAASA,UAAU,QAAQ,kBAAe;AAC1C,SAASC,iBAAiB,QAAQ,uBAAuB;AACzD,SAASC,eAAe,QAAQ,wBAAqB;;AAErD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,WAAW,GAAGC,MAAM,CAACC,MAAM,CAACJ,iBAAiB,EAAE;EAC1D;EACAK,IAAI,EAAEN,UAAU;EAEhB;EACAO,IAAI,EAAEL;AACR,CAAC,CAAC","ignoreList":[]}

package/lib/module/modules/auth/sign-in/index.js

@@ -9,5 +9,7 @@ export * from "./types/spacing-props.js";
 export * from "./types/signin-form-forgot-password-props.js";
 export * from "./types/login-with-separator-props.js";
 export * from "./types/social-logins-props.js";
+export * from "./types/google-login-props.js";
+export * from "./types/apple-login-props.js";
 export * from "./types/footer-props.js";
 //# sourceMappingURL=index.js.map

package/lib/module/modules/auth/sign-in/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["SignIn"],"sourceRoot":"../../../../../src","sources":["modules/auth/sign-in/index.tsx"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,yBAAsB;AAE7C,cAAc,0BAAuB;AACrC,cAAc,iCAA8B;AAC5C,cAAc,6BAA0B;AACxC,cAAc,gCAA6B;AAC3C,cAAc,0BAAuB;AACrC,cAAc,8CAA2C;AACzD,cAAc,uCAAoC;AAClD,cAAc,gCAA6B;AAC3C,cAAc,yBAAsB","ignoreList":[]}
+{"version":3,"names":["SignIn"],"sourceRoot":"../../../../../src","sources":["modules/auth/sign-in/index.tsx"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,yBAAsB;AAE7C,cAAc,0BAAuB;AACrC,cAAc,iCAA8B;AAC5C,cAAc,6BAA0B;AACxC,cAAc,gCAA6B;AAC3C,cAAc,0BAAuB;AACrC,cAAc,8CAA2C;AACzD,cAAc,uCAAoC;AAClD,cAAc,gCAA6B;AAC3C,cAAc,+BAA4B;AAC1C,cAAc,8BAA2B;AACzC,cAAc,yBAAsB","ignoreList":[]}

package/lib/module/modules/auth/sign-in/utils/apple-web-sign-in.js

@@ -0,0 +1,84 @@
+"use strict";
+
+import { jwtClaims } from "./jwt-claims.js";
+const APPLE_SCRIPT_URL = "https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js";
+const APPLE_CANCEL_ERRORS = new Set(["popup_closed_by_user", "user_cancelled_authorize"]);
+const APPLE_REAL_USER_STATUS_UNKNOWN = 1;
+
+/** The Apple credentials Ovok takes, without the `internalId` of the sign-in entry. */
+
+/** The Services ID Apple signs the user in for, and the return URL registered for it. */
+
+const browser = () => globalThis;
+let appleScript;
+
+/** Loads Sign in with Apple JS once; a failed load is tried again on the next call. */
+const loadAppleScript = () => {
+  appleScript ??= new Promise((resolve, reject) => {
+    const {
+      document
+    } = browser();
+    const script = document.createElement("script");
+    script.src = APPLE_SCRIPT_URL;
+    script.async = true;
+    script.onload = () => resolve();
+    script.onerror = () => {
+      appleScript = undefined;
+      reject(new Error("Sign in with Apple could not be loaded"));
+    };
+    document.head.append(script);
+  });
+  return appleScript;
+};
+const appleId = () => {
+  const {
+    AppleID
+  } = browser();
+  if (!AppleID) {
+    throw new Error("Sign in with Apple is not available");
+  }
+  return AppleID;
+};
+
+// Apple sends the name only the first time the user signs in.
+const appleFullName = name => name ? {
+  givenName: name.firstName ?? null,
+  familyName: name.lastName ?? null,
+  middleName: null,
+  namePrefix: null,
+  nameSuffix: null,
+  nickname: null
+} : null;
+const appleCredentials = ({
+  authorization,
+  user
+}) => ({
+  identityToken: authorization.id_token,
+  authorizationCode: authorization.code,
+  state: authorization.state ?? null,
+  user: jwtClaims(authorization.id_token).sub ?? "",
+  email: user?.email ?? "",
+  fullName: appleFullName(user?.name),
+  realUserStatus: APPLE_REAL_USER_STATUS_UNKNOWN
+});
+
+/** Opens Apple's sign-in popup; it must run from a user gesture such as a tap. */
+const signInWithApple = async ({
+  servicesId,
+  redirectUri
+}) => {
+  await loadAppleScript();
+  const apple = appleId();
+  apple.auth.init({
+    clientId: servicesId,
+    scope: "name email",
+    redirectURI: redirectUri ?? browser().location.origin,
+    usePopup: true
+  });
+  return appleCredentials(await apple.auth.signIn());
+};
+
+/** Whether the user closed Apple's popup or declined, which is not an error to report. */
+const isAppleCancel = cause => typeof cause === "object" && cause !== null && APPLE_CANCEL_ERRORS.has(cause.error ?? "");
+export { isAppleCancel, loadAppleScript, signInWithApple };
+//# sourceMappingURL=apple-web-sign-in.js.map

package/lib/module/modules/auth/sign-in/utils/apple-web-sign-in.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["jwtClaims","APPLE_SCRIPT_URL","APPLE_CANCEL_ERRORS","Set","APPLE_REAL_USER_STATUS_UNKNOWN","browser","globalThis","appleScript","loadAppleScript","Promise","resolve","reject","document","script","createElement","src","async","onload","onerror","undefined","Error","head","append","appleId","AppleID","appleFullName","name","givenName","firstName","familyName","lastName","middleName","namePrefix","nameSuffix","nickname","appleCredentials","authorization","user","identityToken","id_token","authorizationCode","code","state","sub","email","fullName","realUserStatus","signInWithApple","servicesId","redirectUri","apple","auth","init","clientId","scope","redirectURI","location","origin","usePopup","signIn","isAppleCancel","cause","has","error"],"sourceRoot":"../../../../../../src","sources":["modules/auth/sign-in/utils/apple-web-sign-in.ts"],"mappings":";;AAEA,SAASA,SAAS,QAAQ,iBAAc;AAExC,MAAMC,gBAAgB,GACpB,sFAAsF;AAExF,MAAMC,mBAAmB,GAAG,IAAIC,GAAG,CAAC,CAAC,sBAAsB,EAAE,0BAA0B,CAAC,CAAC;AACzF,MAAMC,8BAA8B,GAAG,CAAC;;AAExC;;AAGA;;AAsCA,MAAMC,OAAO,GAAGA,CAAA,KAAMC,UAAuC;AAE7D,IAAIC,WAAsC;;AAE1C;AACA,MAAMC,eAAe,GAAGA,CAAA,KAAqB;EAC3CD,WAAW,KAAK,IAAIE,OAAO,CAAO,CAACC,OAAO,EAAEC,MAAM,KAAK;IACrD,MAAM;MAAEC;IAAS,CAAC,GAAGP,OAAO,CAAC,CAAC;IAC9B,MAAMQ,MAAM,GAAGD,QAAQ,CAACE,aAAa,CAAC,QAAQ,CAAC;IAE/CD,MAAM,CAACE,GAAG,GAAGd,gBAAgB;IAC7BY,MAAM,CAACG,KAAK,GAAG,IAAI;IACnBH,MAAM,CAACI,MAAM,GAAG,MAAMP,OAAO,CAAC,CAAC;IAC/BG,MAAM,CAACK,OAAO,GAAG,MAAM;MACrBX,WAAW,GAAGY,SAAS;MACvBR,MAAM,CAAC,IAAIS,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC7D,CAAC;IACDR,QAAQ,CAACS,IAAI,CAACC,MAAM,CAACT,MAAM,CAAC;EAC9B,CAAC,CAAC;EAEF,OAAON,WAAW;AACpB,CAAC;AAED,MAAMgB,OAAO,GAAGA,CAAA,KAAe;EAC7B,MAAM;IAAEC;EAAQ,CAAC,GAAGnB,OAAO,CAAC,CAAC;EAE7B,IAAI,CAACmB,OAAO,EAAE;IACZ,MAAM,IAAIJ,KAAK,CAAC,qCAAqC,CAAC;EACxD;EAEA,OAAOI,OAAO;AAChB,CAAC;;AAED;AACA,MAAMC,aAAa,GAAIC,IAAuB,IAC5CA,IAAI,GACA;EACEC,SAAS,EAAED,IAAI,CAACE,SAAS,IAAI,IAAI;EACjCC,UAAU,EAAEH,IAAI,CAACI,QAAQ,IAAI,IAAI;EACjCC,UAAU,EAAE,IAAI;EAChBC,UAAU,EAAE,IAAI;EAChBC,UAAU,EAAE,IAAI;EAChBC,QAAQ,EAAE;AACZ,CAAC,GACD,IAAI;AAEV,MAAMC,gBAAgB,GAAGA,CAAC;EAAEC,aAAa;EAAEC;AAA0B,CAAC,MAA2B;EAC/FC,aAAa,EAAEF,aAAa,CAACG,QAAQ;EACrCC,iBAAiB,EAAEJ,aAAa,CAACK,IAAI;EACrCC,KAAK,EAAEN,aAAa,CAACM,KAAK,IAAI,IAAI;EAClCL,IAAI,EAAErC,SAAS,CAACoC,aAAa,CAACG,QAAQ,CAAC,CAACI,GAAG,IAAI,EAAE;EACjDC,KAAK,EAAEP,IAAI,EAAEO,KAAK,IAAI,EAAE;EACxBC,QAAQ,EAAEpB,aAAa,CAACY,IAAI,EAAEX,IAAI,CAAC;EACnCoB,cAAc,EAAE1C;AAClB,CAAC,CAAC;;AAEF;AACA,MAAM2C,eAAe,GAAG,MAAAA,CAAO;EAC7BC,UAAU;EACVC;AACe,CAAC,KAAmC;EACnD,MAAMzC,eAAe,CAAC,CAAC;EAEvB,MAAM0C,KAAK,GAAG3B,OAAO,CAAC,CAAC;EAEvB2B,KAAK,CAACC,IAAI,CAACC,IAAI,CAAC;IACdC,QAAQ,EAAEL,UAAU;IACpBM,KAAK,EAAE,YAAY;IACnBC,WAAW,EAAEN,WAAW,IAAI5C,OAAO,CAAC,CAAC,CAACmD,QAAQ,CAACC,MAAM;IACrDC,QAAQ,EAAE;EACZ,CAAC,CAAC;EAEF,OAAOvB,gBAAgB,CAAC,MAAMe,KAAK,CAACC,IAAI,CAACQ,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC;;AAED;AACA,MAAMC,aAAa,GAAIC,KAAc,IACnC,OAAOA,KAAK,KAAK,QAAQ,IACzBA,KAAK,KAAK,IAAI,IACd3D,mBAAmB,CAAC4D,GAAG,CAAED,KAAK,CAAwBE,KAAK,IAAI,EAAE,CAAC;AAEpE,SACEH,aAAa,EACbpD,eAAe,EACfuC,eAAe","ignoreList":[]}

package/lib/module/modules/auth/sign-in/utils/google-redirect-sign-in.js

@@ -0,0 +1,84 @@
+"use strict";
+
+import { jwtClaims } from "./jwt-claims.js";
+const GOOGLE_AUTHORIZE_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+const GOOGLE_RETURN_PATH = "/oauth/google.html";
+const GOOGLE_REQUEST_KEY = "ovok.google-sign-in";
+const GOOGLE_ANSWER_KEY = "ovok.google-sign-in.answer";
+
+/** What this tab asked Google for, kept until the answer comes back. */
+
+/** Where the tab goes for the ID token, and which address Google returns it to. */
+
+const browser = () => globalThis;
+const authorizeUrl = ({
+  clientId,
+  redirectUri
+}, {
+  state,
+  nonce
+}) => {
+  const query = new URLSearchParams({
+    client_id: clientId,
+    redirect_uri: redirectUri,
+    response_type: "id_token",
+    scope: "openid email profile",
+    prompt: "select_account",
+    state,
+    nonce
+  });
+  return `${GOOGLE_AUTHORIZE_URL}?${query.toString()}`;
+};
+
+/** Sends this tab to Google's sign-in page, remembering the request its answer must match. */
+const startGoogleSignIn = ({
+  clientId,
+  redirectUri
+}) => {
+  const {
+    sessionStorage,
+    location,
+    crypto
+  } = browser();
+  const request = {
+    state: crypto.randomUUID(),
+    nonce: crypto.randomUUID(),
+    returnTo: `${location.pathname}${location.search}`
+  };
+  sessionStorage.setItem(GOOGLE_REQUEST_KEY, JSON.stringify(request));
+  location.assign(authorizeUrl({
+    clientId,
+    redirectUri: redirectUri ?? `${location.origin}${GOOGLE_RETURN_PATH}`
+  }, request));
+};
+const parseRequest = stored => {
+  try {
+    return JSON.parse(stored ?? "null") ?? undefined;
+  } catch {
+    return undefined;
+  }
+};
+const answeredIdToken = (answer, request) => {
+  const idToken = answer.get("id_token");
+  if (!request || !idToken || answer.get("state") !== request.state) {
+    return undefined;
+  }
+  return jwtClaims(idToken).nonce === request.nonce ? idToken : undefined;
+};
+
+/** The ID token Google sent back for this tab's own request; the request and the answer are forgotten either way. */
+const takeGoogleIdToken = () => {
+  const {
+    sessionStorage
+  } = browser();
+  const answer = sessionStorage.getItem(GOOGLE_ANSWER_KEY);
+  if (answer === null) {
+    return undefined;
+  }
+  const request = parseRequest(sessionStorage.getItem(GOOGLE_REQUEST_KEY));
+  sessionStorage.removeItem(GOOGLE_ANSWER_KEY);
+  sessionStorage.removeItem(GOOGLE_REQUEST_KEY);
+  return answeredIdToken(new URLSearchParams(answer), request);
+};
+export { GOOGLE_ANSWER_KEY, GOOGLE_REQUEST_KEY, startGoogleSignIn, takeGoogleIdToken };
+//# sourceMappingURL=google-redirect-sign-in.js.map

package/lib/module/modules/auth/sign-in/utils/google-redirect-sign-in.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["jwtClaims","GOOGLE_AUTHORIZE_URL","GOOGLE_RETURN_PATH","GOOGLE_REQUEST_KEY","GOOGLE_ANSWER_KEY","browser","globalThis","authorizeUrl","clientId","redirectUri","state","nonce","query","URLSearchParams","client_id","redirect_uri","response_type","scope","prompt","toString","startGoogleSignIn","sessionStorage","location","crypto","request","randomUUID","returnTo","pathname","search","setItem","JSON","stringify","assign","origin","parseRequest","stored","parse","undefined","answeredIdToken","answer","idToken","get","takeGoogleIdToken","getItem","removeItem"],"sourceRoot":"../../../../../../src","sources":["modules/auth/sign-in/utils/google-redirect-sign-in.ts"],"mappings":";;AAAA,SAASA,SAAS,QAAQ,iBAAc;AAExC,MAAMC,oBAAoB,GAAG,8CAA8C;AAC3E,MAAMC,kBAAkB,GAAG,oBAAoB;AAC/C,MAAMC,kBAAkB,GAAG,qBAAqB;AAChD,MAAMC,iBAAiB,GAAG,4BAA4B;;AAEtD;;AASA;;AAuBA,MAAMC,OAAO,GAAGA,CAAA,KAAMC,UAAuC;AAE7D,MAAMC,YAAY,GAAGA,CACnB;EAAEC,QAAQ;EAAEC;AAA6C,CAAC,EAC1D;EAAEC,KAAK;EAAEC;AAAqB,CAAC,KAC5B;EACH,MAAMC,KAAK,GAAG,IAAIC,eAAe,CAAC;IAChCC,SAAS,EAAEN,QAAQ;IACnBO,YAAY,EAAEN,WAAW;IACzBO,aAAa,EAAE,UAAU;IACzBC,KAAK,EAAE,sBAAsB;IAC7BC,MAAM,EAAE,gBAAgB;IACxBR,KAAK;IACLC;EACF,CAAC,CAAC;EAEF,OAAO,GAAGV,oBAAoB,IAAIW,KAAK,CAACO,QAAQ,CAAC,CAAC,EAAE;AACtD,CAAC;;AAED;AACA,MAAMC,iBAAiB,GAAGA,CAAC;EAAEZ,QAAQ;EAAEC;AAAmC,CAAC,KAAW;EACpF,MAAM;IAAEY,cAAc;IAAEC,QAAQ;IAAEC;EAAO,CAAC,GAAGlB,OAAO,CAAC,CAAC;EAEtD,MAAMmB,OAAsB,GAAG;IAC7Bd,KAAK,EAAEa,MAAM,CAACE,UAAU,CAAC,CAAC;IAC1Bd,KAAK,EAAEY,MAAM,CAACE,UAAU,CAAC,CAAC;IAC1BC,QAAQ,EAAE,GAAGJ,QAAQ,CAACK,QAAQ,GAAGL,QAAQ,CAACM,MAAM;EAClD,CAAC;EAEDP,cAAc,CAACQ,OAAO,CAAC1B,kBAAkB,EAAE2B,IAAI,CAACC,SAAS,CAACP,OAAO,CAAC,CAAC;EACnEF,QAAQ,CAACU,MAAM,CACbzB,YAAY,CACV;IAAEC,QAAQ;IAAEC,WAAW,EAAEA,WAAW,IAAI,GAAGa,QAAQ,CAACW,MAAM,GAAG/B,kBAAkB;EAAG,CAAC,EACnFsB,OACF,CACF,CAAC;AACH,CAAC;AAED,MAAMU,YAAY,GAAIC,MAAqB,IAAgC;EACzE,IAAI;IACF,OAAOL,IAAI,CAACM,KAAK,CAACD,MAAM,IAAI,MAAM,CAAC,IAAIE,SAAS;EAClD,CAAC,CAAC,MAAM;IACN,OAAOA,SAAS;EAClB;AACF,CAAC;AAED,MAAMC,eAAe,GAAGA,CAACC,MAAuB,EAAEf,OAAuB,KAAyB;EAChG,MAAMgB,OAAO,GAAGD,MAAM,CAACE,GAAG,CAAC,UAAU,CAAC;EAEtC,IAAI,CAACjB,OAAO,IAAI,CAACgB,OAAO,IAAID,MAAM,CAACE,GAAG,CAAC,OAAO,CAAC,KAAKjB,OAAO,CAACd,KAAK,EAAE;IACjE,OAAO2B,SAAS;EAClB;EAEA,OAAOrC,SAAS,CAACwC,OAAO,CAAC,CAAC7B,KAAK,KAAKa,OAAO,CAACb,KAAK,GAAG6B,OAAO,GAAGH,SAAS;AACzE,CAAC;;AAED;AACA,MAAMK,iBAAiB,GAAGA,CAAA,KAA0B;EAClD,MAAM;IAAErB;EAAe,CAAC,GAAGhB,OAAO,CAAC,CAAC;EACpC,MAAMkC,MAAM,GAAGlB,cAAc,CAACsB,OAAO,CAACvC,iBAAiB,CAAC;EAExD,IAAImC,MAAM,KAAK,IAAI,EAAE;IACnB,OAAOF,SAAS;EAClB;EAEA,MAAMb,OAAO,GAAGU,YAAY,CAACb,cAAc,CAACsB,OAAO,CAACxC,kBAAkB,CAAC,CAAC;EAExEkB,cAAc,CAACuB,UAAU,CAACxC,iBAAiB,CAAC;EAC5CiB,cAAc,CAACuB,UAAU,CAACzC,kBAAkB,CAAC;EAE7C,OAAOmC,eAAe,CAAC,IAAIzB,eAAe,CAAC0B,MAAM,CAAC,EAAEf,OAAO,CAAC;AAC9D,CAAC;AAED,SACEpB,iBAAiB,EACjBD,kBAAkB,EAClBiB,iBAAiB,EACjBsB,iBAAiB","ignoreList":[]}

package/lib/module/modules/auth/sign-in/utils/jwt-claims.js

@@ -0,0 +1,17 @@
+"use strict";
+
+/** The claims web sign-in reads from a provider's JWT. */
+
+const asClaims = value => typeof value === "object" && value !== null ? value : {};
+
+/** A JWT's claims, read without checking the signature; Ovok verifies the token itself. */
+const jwtClaims = jwt => {
+  try {
+    const payload = (jwt.split(".")[1] ?? "").replace(/-/g, "+").replace(/_/g, "/");
+    return asClaims(JSON.parse(atob(payload)));
+  } catch {
+    return {};
+  }
+};
+export { jwtClaims };
+//# sourceMappingURL=jwt-claims.js.map

package/lib/module/modules/auth/sign-in/utils/jwt-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["asClaims","value","jwtClaims","jwt","payload","split","replace","JSON","parse","atob"],"sourceRoot":"../../../../../../src","sources":["modules/auth/sign-in/utils/jwt-claims.ts"],"mappings":";;AAAA;;AAMA,MAAMA,QAAQ,GAAIC,KAAc,IAC9B,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI,GAAIA,KAAK,GAAiB,CAAC,CAAC;;AAEzE;AACA,MAAMC,SAAS,GAAIC,GAAW,IAAgB;EAC5C,IAAI;IACF,MAAMC,OAAO,GAAG,CAACD,GAAG,CAACE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAACA,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;IAE/E,OAAON,QAAQ,CAACO,IAAI,CAACC,KAAK,CAACC,IAAI,CAACL,OAAO,CAAC,CAAC,CAAC;EAC5C,CAAC,CAAC,MAAM;IACN,OAAO,CAAC,CAAC;EACX;AACF,CAAC;AAED,SAASF,SAAS","ignoreList":[]}

package/lib/module/modules/auth/utils/sign-out-google.web.js

@@ -0,0 +1,5 @@
+"use strict";
+
+/** The web keeps no Google account in the app, so there is nothing to clear. */
+export const signOutGoogleIfNeeded = async () => undefined;
+//# sourceMappingURL=sign-out-google.web.js.map

package/lib/module/modules/auth/utils/sign-out-google.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["signOutGoogleIfNeeded","undefined"],"sourceRoot":"../../../../../src","sources":["modules/auth/utils/sign-out-google.web.ts"],"mappings":";;AAAA;AACA,OAAO,MAAMA,qBAAqB,GAAG,MAAAA,CAAA,KAA2BC,SAAS","ignoreList":[]}

package/lib/typescript/commonjs/src/modules/auth/google-return-page/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The page Google returns to when `GoogleLogin` signs in on the web.
+ *
+ * Serve it as a static file at the redirect URI, by default `/oauth/google.html`. It keeps Google's answer
+ * for this tab and sends the tab back to the sign-in screen, so the token never stays in the address.
+ */
+export declare const GOOGLE_RETURN_PAGE_HTML: string;
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/commonjs/src/modules/auth/google-return-page/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/modules/auth/google-return-page/index.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,MASrC,CAAC"}

package/lib/typescript/commonjs/src/modules/auth/hooks/use-social-sign-in.web.d.ts

@@ -0,0 +1,7 @@
+import type { SocialSignInOptions } from "./use-social-sign-in";
+import type { Session } from "@ovok/core/next";
+/** Rejects: the web signs in through the `SignIn.SocialLogins` buttons, which leave and return to the page. */
+export declare const useSocialSignIn: (_options: SocialSignInOptions) => Omit<import("./use-auth-action").AuthActionState<Session>, "run"> & {
+    run: () => Promise<Session>;
+};
+//# sourceMappingURL=use-social-sign-in.web.d.ts.map

package/lib/typescript/commonjs/src/modules/auth/hooks/use-social-sign-in.web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-social-sign-in.web.d.ts","sourceRoot":"","sources":["../../../../../../../src/modules/auth/hooks/use-social-sign-in.web.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAO/C,+GAA+G;AAC/G,eAAO,MAAM,eAAe,GAAI,UAAU,mBAAmB;;CAGzD,CAAC"}

package/lib/typescript/commonjs/src/modules/auth/index.d.ts

@@ -7,6 +7,7 @@
  */
 import "./default-translation";
 export * from "./sign-in";
+export * from "./google-return-page";
 export * from "./register";
 export * from "./profile";
 export * from "./delete-account-button";

package/lib/typescript/commonjs/src/modules/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/auth/index.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,uBAAuB,CAAC;AAE/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/auth/index.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,uBAAuB,CAAC;AAE/B,cAAc,WAAW,CAAC;AAC1B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,WAAW,CAAC"}

package/lib/typescript/commonjs/src/modules/auth/register/components/register.d.ts

@@ -28,13 +28,13 @@ export declare const Register: {
     /** Container for the social sign-up buttons. */
     SocialLogins: {
         ({ children, style, testID, }: React.PropsWithChildren<import("../..").SocialLoginsProps>): import("react").JSX.Element;
-        GoogleLogin: (({ googleIosClientId, googleWebClientId, internalId, onSuccess, onError, testID, style, disabled, children, ...props }: React.PropsWithChildren<import("../../sign-in/types/google-login-props").GoogleLoginProps>) => import("react").JSX.Element) & {
+        GoogleLogin: (({ googleIosClientId, googleWebClientId, internalId, onSuccess, onError, testID, style, disabled, children, ...props }: React.PropsWithChildren<import("../..").GoogleLoginProps>) => import("react").JSX.Element) & {
             Icon: import("react").FC<import("../../sign-in/types/google-icon-props").GoogleIconProps>;
             Text: <TVariant extends import("react-native-paper").MD3TypescaleKey>({ children, style, testID, ...props }: Omit<import("react-native-paper").TextProps<TVariant>, "children"> & {
                 children?: React.ReactNode;
             }) => import("react").JSX.Element;
         };
-        AppleLogin: (({ testID, internalId, onSuccess, onError, style, disabled, children, ...props }: React.PropsWithChildren<import("../../sign-in/types/apple-login-props").AppleLoginProps>) => import("react").JSX.Element | null) & {
+        AppleLogin: (({ testID, internalId, onSuccess, onError, style, disabled, children, ...props }: React.PropsWithChildren<import("../..").AppleLoginProps>) => import("react").JSX.Element | null) & {
             Icon: ({ size, color, style, ...props }: import("iconsax-react-nativejs").IconProps) => import("react").JSX.Element;
             Text: <TVariant extends import("react-native-paper").MD3TypescaleKey>({ children, style, testID, ...props }: Omit<import("react-native-paper").TextProps<TVariant>, "children"> & {
                 children?: React.ReactNode;

package/lib/typescript/commonjs/src/modules/auth/sign-in/components/sign-in.d.ts

@@ -33,13 +33,13 @@ export declare const SignIn: {
     /** Container for the social sign-in buttons. */
     SocialLogins: {
         ({ children, style, testID, }: React.PropsWithChildren<import("..").SocialLoginsProps>): import("react").JSX.Element;
-        GoogleLogin: (({ googleIosClientId, googleWebClientId, internalId, onSuccess, onError, testID, style, disabled, children, ...props }: React.PropsWithChildren<import("../types/google-login-props").GoogleLoginProps>) => import("react").JSX.Element) & {
+        GoogleLogin: (({ googleIosClientId, googleWebClientId, internalId, onSuccess, onError, testID, style, disabled, children, ...props }: React.PropsWithChildren<import("..").GoogleLoginProps>) => import("react").JSX.Element) & {
             Icon: import("react").FC<import("../types/google-icon-props").GoogleIconProps>;
             Text: <TVariant extends import("react-native-paper").MD3TypescaleKey>({ children, style, testID, ...props }: Omit<import("react-native-paper").TextProps<TVariant>, "children"> & {
                 children?: React.ReactNode;
             }) => import("react").JSX.Element;
         };
-        AppleLogin: (({ testID, internalId, onSuccess, onError, style, disabled, children, ...props }: React.PropsWithChildren<import("../types/apple-login-props").AppleLoginProps>) => import("react").JSX.Element | null) & {
+        AppleLogin: (({ testID, internalId, onSuccess, onError, style, disabled, children, ...props }: React.PropsWithChildren<import("..").AppleLoginProps>) => import("react").JSX.Element | null) & {
             Icon: ({ size, color, style, ...props }: import("iconsax-react-nativejs").IconProps) => import("react").JSX.Element;
             Text: <TVariant extends import("react-native-paper").MD3TypescaleKey>({ children, style, testID, ...props }: Omit<import("react-native-paper").TextProps<TVariant>, "children"> & {
                 children?: React.ReactNode;