@oxy.so/services 6.0.0 → 6.1.0

package/lib/module/ui/components/signIn/OxyLinkCommonsPanel.js

@@ -0,0 +1,270 @@
+"use strict";
+
+/**
+ * Linking Commons to a passkey account (ADR 0029 D3), auth.oxy.so's
+ * `/link-commons`:
+ *
+ *   QR → Commons scans and signs with its key → both screens show the same
+ *   code → the person confirms here with the passkey → linked
+ *
+ * Afterwards the account is self-custodied: its root is the key Commons holds,
+ * its recovery email is deleted, and its phrase in Commons is how it gets back
+ * in. The passkey keeps signing in on the web. The page must be signed in as
+ * the account; the host renders sign-in first.
+ */
+
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { ActivityIndicator, StyleSheet, View } from 'react-native';
+import QRCode from 'react-native-qrcode-svg';
+import { Button } from '@oxy.so/bloom/button';
+import { useTheme } from '@oxy.so/bloom/theme';
+import { Text } from '@oxy.so/bloom/typography';
+import { deriveIdentityLinkCode } from '@oxy.so/core';
+import { useOxy } from "../../context/OxyContext.js";
+import { PASSKEY_UNSUPPORTED_MESSAGE } from "../../context/passkeyFlow.js";
+import { useI18n } from "../../hooks/useI18n.js";
+import { isPasskeySupported, runAuthenticationCeremony } from '../../../webauthn/passkeyClient';
+import { OxyAuthScreen, OxyAuthScreenHeader } from "./OxyAuthScreen.js";
+import { AccountFlowAction, AccountFlowErrorLine, AccountFlowNote, describeAccountFlowError } from "./accountFlowParts.js";
+
+/** How often the page asks whether Commons has signed. */
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+export const IDENTITY_LINK_POLL_MS = 2000;
+
+/** High-contrast, un-themed on purpose: scan reliability. */
+const QR_PLATE_BG = '#FFFFFF';
+const QR_FOREGROUND = '#000000';
+const QR_SIZE = 200;
+export const OxyLinkCommonsPanel = ({
+  onLinked
+}) => {
+  const theme = useTheme();
+  const {
+    t
+  } = useI18n();
+  const {
+    user,
+    oxyServices
+  } = useOxy();
+  const [step, setStep] = useState({
+    name: 'opening'
+  });
+  const [pending, setPending] = useState(false);
+  const [error, setError] = useState(null);
+  const alreadyLinked = Boolean(user?.publicKey);
+  const open = useCallback(() => {
+    setError(null);
+    setStep({
+      name: 'opening'
+    });
+    oxyServices.createIdentityLink().then(link => setStep({
+      name: 'qr',
+      link
+    })).catch(reason => {
+      setError(describeAccountFlowError(reason, t));
+      setStep({
+        name: 'expired'
+      });
+    });
+  }, [oxyServices, t]);
+
+  // One request per visit, opened once the page knows the account has no root.
+  const opened = useRef(false);
+  useEffect(() => {
+    if (alreadyLinked || opened.current) return;
+    opened.current = true;
+    open();
+  }, [alreadyLinked, open]);
+
+  // While the QR shows, ask whether Commons has signed; a request only lives a
+  // few minutes, and an expired one says so instead of waiting forever.
+  const link = step.name === 'qr' ? step.link : null;
+  useEffect(() => {
+    if (!link) return;
+    let stopped = false;
+    const poll = async () => {
+      if (stopped) return;
+      if (Date.now() >= link.expiresAt) {
+        setStep({
+          name: 'expired'
+        });
+        return;
+      }
+      try {
+        const state = await oxyServices.getIdentityLink(link.linkId);
+        if (stopped) return;
+        if (state.status === 'signed' && state.publicKey) {
+          setStep({
+            name: 'matching',
+            link,
+            code: deriveIdentityLinkCode(link.linkId, state.publicKey)
+          });
+          return;
+        }
+        if (state.status === 'cancelled') {
+          setStep({
+            name: 'expired'
+          });
+          return;
+        }
+      } catch {
+        // A missed poll is retried on the next tick.
+      }
+      if (!stopped) timer = setTimeout(() => void poll(), IDENTITY_LINK_POLL_MS);
+    };
+    let timer = setTimeout(() => void poll(), IDENTITY_LINK_POLL_MS);
+    return () => {
+      stopped = true;
+      clearTimeout(timer);
+    };
+  }, [link, oxyServices]);
+
+  // The ceremony opens the browser's passkey prompt, so it starts from the press.
+  const confirm = confirmed => {
+    if (pending) return;
+    setError(null);
+    setPending(true);
+    (async () => {
+      if (!isPasskeySupported()) throw new Error(PASSKEY_UNSUPPORTED_MESSAGE);
+      const options = await oxyServices.getIdentityLinkAssertionOptions(confirmed.linkId, confirmed.challenge);
+      const assertion = await runAuthenticationCeremony(options);
+      await oxyServices.completeIdentityLink(confirmed.linkId, assertion);
+      setStep({
+        name: 'done'
+      });
+      onLinked?.();
+    })().catch(reason => setError(describeAccountFlowError(reason, t))).finally(() => setPending(false));
+  };
+  const cancel = cancelled => {
+    void oxyServices.cancelIdentityLink(cancelled.linkId).catch(() => undefined);
+    setStep({
+      name: 'expired'
+    });
+  };
+  if (alreadyLinked) {
+    return /*#__PURE__*/_jsx(OxyAuthScreen, {
+      children: /*#__PURE__*/_jsx(OxyAuthScreenHeader, {
+        title: t('linkCommons.title'),
+        description: t('linkCommons.already')
+      })
+    });
+  }
+  switch (step.name) {
+    case 'done':
+      return /*#__PURE__*/_jsx(OxyAuthScreen, {
+        children: /*#__PURE__*/_jsx(OxyAuthScreenHeader, {
+          title: t('linkCommons.doneTitle'),
+          description: t('linkCommons.done')
+        })
+      });
+    case 'expired':
+      return /*#__PURE__*/_jsxs(OxyAuthScreen, {
+        children: [/*#__PURE__*/_jsx(OxyAuthScreenHeader, {
+          title: t('linkCommons.title'),
+          description: t('linkCommons.expired')
+        }), error ? /*#__PURE__*/_jsx(AccountFlowErrorLine, {
+          message: error
+        }) : null, /*#__PURE__*/_jsx(AccountFlowAction, {
+          label: t('linkCommons.renew'),
+          onPress: open,
+          pending: false,
+          testID: "link-commons-renew"
+        })]
+      });
+    case 'matching':
+      return /*#__PURE__*/_jsxs(OxyAuthScreen, {
+        children: [/*#__PURE__*/_jsx(OxyAuthScreenHeader, {
+          title: t('linkCommons.compareTitle'),
+          description: t('linkCommons.compare')
+        }), /*#__PURE__*/_jsx(Text, {
+          accessibilityLabel: step.code.split('').join(' '),
+          style: [styles.code, {
+            color: theme.colors.text
+          }],
+          testID: "link-commons-code",
+          children: `${step.code.slice(0, 3)} ${step.code.slice(3)}`
+        }), error ? /*#__PURE__*/_jsx(AccountFlowErrorLine, {
+          message: error
+        }) : null, /*#__PURE__*/_jsx(AccountFlowAction, {
+          label: t('linkCommons.confirm'),
+          onPress: () => confirm(step.link),
+          pending: pending,
+          testID: "link-commons-confirm"
+        }), /*#__PURE__*/_jsx(Button, {
+          appearance: "plain",
+          tone: "neutral",
+          size: "lg",
+          fullWidth: true,
+          disabled: pending,
+          onPress: () => cancel(step.link),
+          testID: "link-commons-cancel",
+          children: t('linkCommons.cancel')
+        })]
+      });
+    case 'qr':
+      return /*#__PURE__*/_jsxs(OxyAuthScreen, {
+        children: [/*#__PURE__*/_jsx(OxyAuthScreenHeader, {
+          title: t('linkCommons.title'),
+          description: t('linkCommons.subtitle')
+        }), /*#__PURE__*/_jsx(View, {
+          style: styles.plateRow,
+          children: /*#__PURE__*/_jsx(View, {
+            style: [styles.plate, {
+              borderColor: theme.colors.border
+            }],
+            testID: "link-commons-qr",
+            children: /*#__PURE__*/_jsx(QRCode, {
+              value: step.link.qrPayload,
+              size: QR_SIZE,
+              backgroundColor: QR_PLATE_BG,
+              color: QR_FOREGROUND
+            })
+          })
+        }), /*#__PURE__*/_jsx(AccountFlowNote, {
+          children: t('linkCommons.scan')
+        }), /*#__PURE__*/_jsx(AccountFlowNote, {
+          children: t('linkCommons.waiting')
+        }), /*#__PURE__*/_jsx(Button, {
+          appearance: "plain",
+          tone: "neutral",
+          size: "lg",
+          fullWidth: true,
+          onPress: () => cancel(step.link),
+          testID: "link-commons-cancel",
+          children: t('linkCommons.cancel')
+        })]
+      });
+    default:
+      return /*#__PURE__*/_jsxs(OxyAuthScreen, {
+        children: [/*#__PURE__*/_jsx(OxyAuthScreenHeader, {
+          title: t('linkCommons.title'),
+          description: t('linkCommons.subtitle')
+        }), /*#__PURE__*/_jsx(View, {
+          style: styles.plateRow,
+          children: /*#__PURE__*/_jsx(ActivityIndicator, {
+            size: "large",
+            color: theme.colors.primary
+          })
+        })]
+      });
+  }
+};
+const styles = StyleSheet.create({
+  plateRow: {
+    alignItems: 'center'
+  },
+  plate: {
+    padding: 12,
+    borderRadius: 16,
+    borderWidth: StyleSheet.hairlineWidth,
+    backgroundColor: QR_PLATE_BG
+  },
+  code: {
+    fontSize: 40,
+    lineHeight: 48,
+    fontWeight: '700',
+    letterSpacing: 4,
+    textAlign: 'center'
+  }
+});
+//# sourceMappingURL=OxyLinkCommonsPanel.js.map

package/lib/module/ui/components/signIn/OxyLinkCommonsPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useCallback","useEffect","useRef","useState","ActivityIndicator","StyleSheet","View","QRCode","Button","useTheme","Text","deriveIdentityLinkCode","useOxy","PASSKEY_UNSUPPORTED_MESSAGE","useI18n","isPasskeySupported","runAuthenticationCeremony","OxyAuthScreen","OxyAuthScreenHeader","AccountFlowAction","AccountFlowErrorLine","AccountFlowNote","describeAccountFlowError","jsx","_jsx","jsxs","_jsxs","IDENTITY_LINK_POLL_MS","QR_PLATE_BG","QR_FOREGROUND","QR_SIZE","OxyLinkCommonsPanel","onLinked","theme","t","user","oxyServices","step","setStep","name","pending","setPending","error","setError","alreadyLinked","Boolean","publicKey","open","createIdentityLink","then","link","catch","reason","opened","current","stopped","poll","Date","now","expiresAt","state","getIdentityLink","linkId","status","code","timer","setTimeout","clearTimeout","confirm","confirmed","Error","options","getIdentityLinkAssertionOptions","challenge","assertion","completeIdentityLink","finally","cancel","cancelled","cancelIdentityLink","undefined","children","title","description","message","label","onPress","testID","accessibilityLabel","split","join","style","styles","color","colors","text","slice","appearance","tone","size","fullWidth","disabled","plateRow","plate","borderColor","border","value","qrPayload","backgroundColor","primary","create","alignItems","padding","borderRadius","borderWidth","hairlineWidth","fontSize","lineHeight","fontWeight","letterSpacing","textAlign"],"sourceRoot":"../../../../../src","sources":["ui/components/signIn/OxyLinkCommonsPanel.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,WAAW,EAAEC,SAAS,EAAEC,MAAM,EAAEC,QAAQ,QAAQ,OAAO;AAChE,SAASC,iBAAiB,EAAEC,UAAU,EAAEC,IAAI,QAAQ,cAAc;AAClE,OAAOC,MAAM,MAAM,yBAAyB;AAC5C,SAASC,MAAM,QAAQ,sBAAsB;AAC7C,SAASC,QAAQ,QAAQ,qBAAqB;AAC9C,SAASC,IAAI,QAAQ,0BAA0B;AAC/C,SAASC,sBAAsB,QAAQ,cAAc;AAErD,SAASC,MAAM,QAAQ,6BAA0B;AACjD,SAASC,2BAA2B,QAAQ,8BAA2B;AACvE,SAASC,OAAO,QAAQ,wBAAqB;AAC7C,SAASC,kBAAkB,EAAEC,yBAAyB,QAAQ,iCAAiC;AAC/F,SAASC,aAAa,EAAEC,mBAAmB,QAAQ,oBAAiB;AACpE,SAASC,iBAAiB,EAAEC,oBAAoB,EAAEC,eAAe,EAAEC,wBAAwB,QAAQ,uBAAoB;;AAEvH;AAAA,SAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AACA,OAAO,MAAMC,qBAAqB,GAAG,IAAI;;AAEzC;AACA,MAAMC,WAAW,GAAG,SAAS;AAC7B,MAAMC,aAAa,GAAG,SAAS;AAC/B,MAAMC,OAAO,GAAG,GAAG;AAcnB,OAAO,MAAMC,mBAAuD,GAAGA,CAAC;EAAEC;AAAS,CAAC,KAAK;EACvF,MAAMC,KAAK,GAAGxB,QAAQ,CAAC,CAAC;EACxB,MAAM;IAAEyB;EAAE,CAAC,GAAGpB,OAAO,CAAC,CAAC;EACvB,MAAM;IAAEqB,IAAI;IAAEC;EAAY,CAAC,GAAGxB,MAAM,CAAC,CAAC;EACtC,MAAM,CAACyB,IAAI,EAAEC,OAAO,CAAC,GAAGnC,QAAQ,CAAO;IAAEoC,IAAI,EAAE;EAAU,CAAC,CAAC;EAC3D,MAAM,CAACC,OAAO,EAAEC,UAAU,CAAC,GAAGtC,QAAQ,CAAC,KAAK,CAAC;EAC7C,MAAM,CAACuC,KAAK,EAAEC,QAAQ,CAAC,GAAGxC,QAAQ,CAAgB,IAAI,CAAC;EACvD,MAAMyC,aAAa,GAAGC,OAAO,CAACV,IAAI,EAAEW,SAAS,CAAC;EAE9C,MAAMC,IAAI,GAAG/C,WAAW,CAAC,MAAM;IAC7B2C,QAAQ,CAAC,IAAI,CAAC;IACdL,OAAO,CAAC;MAAEC,IAAI,EAAE;IAAU,CAAC,CAAC;IAC5BH,WAAW,CACRY,kBAAkB,CAAC,CAAC,CACpBC,IAAI,CAAEC,IAAI,IAAKZ,OAAO,CAAC;MAAEC,IAAI,EAAE,IAAI;MAAEW;IAAK,CAAC,CAAC,CAAC,CAC7CC,KAAK,CAAEC,MAAe,IAAK;MAC1BT,QAAQ,CAACrB,wBAAwB,CAAC8B,MAAM,EAAElB,CAAC,CAAC,CAAC;MAC7CI,OAAO,CAAC;QAAEC,IAAI,EAAE;MAAU,CAAC,CAAC;IAC9B,CAAC,CAAC;EACN,CAAC,EAAE,CAACH,WAAW,EAAEF,CAAC,CAAC,CAAC;;EAEpB;EACA,MAAMmB,MAAM,GAAGnD,MAAM,CAAC,KAAK,CAAC;EAC5BD,SAAS,CAAC,MAAM;IACd,IAAI2C,aAAa,IAAIS,MAAM,CAACC,OAAO,EAAE;IACrCD,MAAM,CAACC,OAAO,GAAG,IAAI;IACrBP,IAAI,CAAC,CAAC;EACR,CAAC,EAAE,CAACH,aAAa,EAAEG,IAAI,CAAC,CAAC;;EAEzB;EACA;EACA,MAAMG,IAAI,GAAGb,IAAI,CAACE,IAAI,KAAK,IAAI,GAAGF,IAAI,CAACa,IAAI,GAAG,IAAI;EAClDjD,SAAS,CAAC,MAAM;IACd,IAAI,CAACiD,IAAI,EAAE;IACX,IAAIK,OAAO,GAAG,KAAK;IACnB,MAAMC,IAAI,GAAG,MAAAA,CAAA,KAAY;MACvB,IAAID,OAAO,EAAE;MACb,IAAIE,IAAI,CAACC,GAAG,CAAC,CAAC,IAAIR,IAAI,CAACS,SAAS,EAAE;QAChCrB,OAAO,CAAC;UAAEC,IAAI,EAAE;QAAU,CAAC,CAAC;QAC5B;MACF;MACA,IAAI;QACF,MAAMqB,KAAK,GAAG,MAAMxB,WAAW,CAACyB,eAAe,CAACX,IAAI,CAACY,MAAM,CAAC;QAC5D,IAAIP,OAAO,EAAE;QACb,IAAIK,KAAK,CAACG,MAAM,KAAK,QAAQ,IAAIH,KAAK,CAACd,SAAS,EAAE;UAChDR,OAAO,CAAC;YAAEC,IAAI,EAAE,UAAU;YAAEW,IAAI;YAAEc,IAAI,EAAErD,sBAAsB,CAACuC,IAAI,CAACY,MAAM,EAAEF,KAAK,CAACd,SAAS;UAAE,CAAC,CAAC;UAC/F;QACF;QACA,IAAIc,KAAK,CAACG,MAAM,KAAK,WAAW,EAAE;UAChCzB,OAAO,CAAC;YAAEC,IAAI,EAAE;UAAU,CAAC,CAAC;UAC5B;QACF;MACF,CAAC,CAAC,MAAM;QACN;MAAA;MAEF,IAAI,CAACgB,OAAO,EAAEU,KAAK,GAAGC,UAAU,CAAC,MAAM,KAAKV,IAAI,CAAC,CAAC,EAAE7B,qBAAqB,CAAC;IAC5E,CAAC;IACD,IAAIsC,KAAK,GAAGC,UAAU,CAAC,MAAM,KAAKV,IAAI,CAAC,CAAC,EAAE7B,qBAAqB,CAAC;IAChE,OAAO,MAAM;MACX4B,OAAO,GAAG,IAAI;MACdY,YAAY,CAACF,KAAK,CAAC;IACrB,CAAC;EACH,CAAC,EAAE,CAACf,IAAI,EAAEd,WAAW,CAAC,CAAC;;EAEvB;EACA,MAAMgC,OAAO,GAAIC,SAAqC,IAAK;IACzD,IAAI7B,OAAO,EAAE;IACbG,QAAQ,CAAC,IAAI,CAAC;IACdF,UAAU,CAAC,IAAI,CAAC;IAChB,CAAC,YAAY;MACX,IAAI,CAAC1B,kBAAkB,CAAC,CAAC,EAAE,MAAM,IAAIuD,KAAK,CAACzD,2BAA2B,CAAC;MACvE,MAAM0D,OAAO,GAAG,MAAMnC,WAAW,CAACoC,+BAA+B,CAACH,SAAS,CAACP,MAAM,EAAEO,SAAS,CAACI,SAAS,CAAC;MACxG,MAAMC,SAAS,GAAG,MAAM1D,yBAAyB,CAACuD,OAAO,CAAC;MAC1D,MAAMnC,WAAW,CAACuC,oBAAoB,CAACN,SAAS,CAACP,MAAM,EAAEY,SAAS,CAAC;MACnEpC,OAAO,CAAC;QAAEC,IAAI,EAAE;MAAO,CAAC,CAAC;MACzBP,QAAQ,GAAG,CAAC;IACd,CAAC,EAAE,CAAC,CACDmB,KAAK,CAAEC,MAAe,IAAKT,QAAQ,CAACrB,wBAAwB,CAAC8B,MAAM,EAAElB,CAAC,CAAC,CAAC,CAAC,CACzE0C,OAAO,CAAC,MAAMnC,UAAU,CAAC,KAAK,CAAC,CAAC;EACrC,CAAC;EAED,MAAMoC,MAAM,GAAIC,SAAqC,IAAK;IACxD,KAAK1C,WAAW,CAAC2C,kBAAkB,CAACD,SAAS,CAAChB,MAAM,CAAC,CAACX,KAAK,CAAC,MAAM6B,SAAS,CAAC;IAC5E1C,OAAO,CAAC;MAAEC,IAAI,EAAE;IAAU,CAAC,CAAC;EAC9B,CAAC;EAED,IAAIK,aAAa,EAAE;IACjB,oBACEpB,IAAA,CAACP,aAAa;MAAAgE,QAAA,eACZzD,IAAA,CAACN,mBAAmB;QAACgE,KAAK,EAAEhD,CAAC,CAAC,mBAAmB,CAAE;QAACiD,WAAW,EAAEjD,CAAC,CAAC,qBAAqB;MAAE,CAAE;IAAC,CAChF,CAAC;EAEpB;EAEA,QAAQG,IAAI,CAACE,IAAI;IACf,KAAK,MAAM;MACT,oBACEf,IAAA,CAACP,aAAa;QAAAgE,QAAA,eACZzD,IAAA,CAACN,mBAAmB;UAACgE,KAAK,EAAEhD,CAAC,CAAC,uBAAuB,CAAE;UAACiD,WAAW,EAAEjD,CAAC,CAAC,kBAAkB;QAAE,CAAE;MAAC,CACjF,CAAC;IAEpB,KAAK,SAAS;MACZ,oBACER,KAAA,CAACT,aAAa;QAAAgE,QAAA,gBACZzD,IAAA,CAACN,mBAAmB;UAACgE,KAAK,EAAEhD,CAAC,CAAC,mBAAmB,CAAE;UAACiD,WAAW,EAAEjD,CAAC,CAAC,qBAAqB;QAAE,CAAE,CAAC,EAC5FQ,KAAK,gBAAGlB,IAAA,CAACJ,oBAAoB;UAACgE,OAAO,EAAE1C;QAAM,CAAE,CAAC,GAAG,IAAI,eACxDlB,IAAA,CAACL,iBAAiB;UAACkE,KAAK,EAAEnD,CAAC,CAAC,mBAAmB,CAAE;UAACoD,OAAO,EAAEvC,IAAK;UAACP,OAAO,EAAE,KAAM;UAAC+C,MAAM,EAAC;QAAoB,CAAE,CAAC;MAAA,CAClG,CAAC;IAEpB,KAAK,UAAU;MACb,oBACE7D,KAAA,CAACT,aAAa;QAAAgE,QAAA,gBACZzD,IAAA,CAACN,mBAAmB;UAACgE,KAAK,EAAEhD,CAAC,CAAC,0BAA0B,CAAE;UAACiD,WAAW,EAAEjD,CAAC,CAAC,qBAAqB;QAAE,CAAE,CAAC,eACpGV,IAAA,CAACd,IAAI;UACH8E,kBAAkB,EAAEnD,IAAI,CAAC2B,IAAI,CAACyB,KAAK,CAAC,EAAE,CAAC,CAACC,IAAI,CAAC,GAAG,CAAE;UAClDC,KAAK,EAAE,CAACC,MAAM,CAAC5B,IAAI,EAAE;YAAE6B,KAAK,EAAE5D,KAAK,CAAC6D,MAAM,CAACC;UAAK,CAAC,CAAE;UACnDR,MAAM,EAAC,mBAAmB;UAAAN,QAAA,EAEzB,GAAG5C,IAAI,CAAC2B,IAAI,CAACgC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI3D,IAAI,CAAC2B,IAAI,CAACgC,KAAK,CAAC,CAAC,CAAC;QAAE,CAC7C,CAAC,EACNtD,KAAK,gBAAGlB,IAAA,CAACJ,oBAAoB;UAACgE,OAAO,EAAE1C;QAAM,CAAE,CAAC,GAAG,IAAI,eACxDlB,IAAA,CAACL,iBAAiB;UAACkE,KAAK,EAAEnD,CAAC,CAAC,qBAAqB,CAAE;UAACoD,OAAO,EAAEA,CAAA,KAAMlB,OAAO,CAAC/B,IAAI,CAACa,IAAI,CAAE;UAACV,OAAO,EAAEA,OAAQ;UAAC+C,MAAM,EAAC;QAAsB,CAAE,CAAC,eACzI/D,IAAA,CAAChB,MAAM;UAACyF,UAAU,EAAC,OAAO;UAACC,IAAI,EAAC,SAAS;UAACC,IAAI,EAAC,IAAI;UAACC,SAAS;UAACC,QAAQ,EAAE7D,OAAQ;UAAC8C,OAAO,EAAEA,CAAA,KAAMT,MAAM,CAACxC,IAAI,CAACa,IAAI,CAAE;UAACqC,MAAM,EAAC,qBAAqB;UAAAN,QAAA,EAC5I/C,CAAC,CAAC,oBAAoB;QAAC,CAClB,CAAC;MAAA,CACI,CAAC;IAEpB,KAAK,IAAI;MACP,oBACER,KAAA,CAACT,aAAa;QAAAgE,QAAA,gBACZzD,IAAA,CAACN,mBAAmB;UAACgE,KAAK,EAAEhD,CAAC,CAAC,mBAAmB,CAAE;UAACiD,WAAW,EAAEjD,CAAC,CAAC,sBAAsB;QAAE,CAAE,CAAC,eAC9FV,IAAA,CAAClB,IAAI;UAACqF,KAAK,EAAEC,MAAM,CAACU,QAAS;UAAArB,QAAA,eAC3BzD,IAAA,CAAClB,IAAI;YAACqF,KAAK,EAAE,CAACC,MAAM,CAACW,KAAK,EAAE;cAAEC,WAAW,EAAEvE,KAAK,CAAC6D,MAAM,CAACW;YAAO,CAAC,CAAE;YAAClB,MAAM,EAAC,iBAAiB;YAAAN,QAAA,eACzFzD,IAAA,CAACjB,MAAM;cAACmG,KAAK,EAAErE,IAAI,CAACa,IAAI,CAACyD,SAAU;cAACR,IAAI,EAAErE,OAAQ;cAAC8E,eAAe,EAAEhF,WAAY;cAACiE,KAAK,EAAEhE;YAAc,CAAE;UAAC,CACrG;QAAC,CACH,CAAC,eACPL,IAAA,CAACH,eAAe;UAAA4D,QAAA,EAAE/C,CAAC,CAAC,kBAAkB;QAAC,CAAkB,CAAC,eAC1DV,IAAA,CAACH,eAAe;UAAA4D,QAAA,EAAE/C,CAAC,CAAC,qBAAqB;QAAC,CAAkB,CAAC,eAC7DV,IAAA,CAAChB,MAAM;UAACyF,UAAU,EAAC,OAAO;UAACC,IAAI,EAAC,SAAS;UAACC,IAAI,EAAC,IAAI;UAACC,SAAS;UAACd,OAAO,EAAEA,CAAA,KAAMT,MAAM,CAACxC,IAAI,CAACa,IAAI,CAAE;UAACqC,MAAM,EAAC,qBAAqB;UAAAN,QAAA,EACzH/C,CAAC,CAAC,oBAAoB;QAAC,CAClB,CAAC;MAAA,CACI,CAAC;IAEpB;MACE,oBACER,KAAA,CAACT,aAAa;QAAAgE,QAAA,gBACZzD,IAAA,CAACN,mBAAmB;UAACgE,KAAK,EAAEhD,CAAC,CAAC,mBAAmB,CAAE;UAACiD,WAAW,EAAEjD,CAAC,CAAC,sBAAsB;QAAE,CAAE,CAAC,eAC9FV,IAAA,CAAClB,IAAI;UAACqF,KAAK,EAAEC,MAAM,CAACU,QAAS;UAAArB,QAAA,eAC3BzD,IAAA,CAACpB,iBAAiB;YAAC+F,IAAI,EAAC,OAAO;YAACN,KAAK,EAAE5D,KAAK,CAAC6D,MAAM,CAACe;UAAQ,CAAE;QAAC,CAC3D,CAAC;MAAA,CACM,CAAC;EAEtB;AACF,CAAC;AAED,MAAMjB,MAAM,GAAGvF,UAAU,CAACyG,MAAM,CAAC;EAC/BR,QAAQ,EAAE;IACRS,UAAU,EAAE;EACd,CAAC;EACDR,KAAK,EAAE;IACLS,OAAO,EAAE,EAAE;IACXC,YAAY,EAAE,EAAE;IAChBC,WAAW,EAAE7G,UAAU,CAAC8G,aAAa;IACrCP,eAAe,EAAEhF;EACnB,CAAC;EACDoC,IAAI,EAAE;IACJoD,QAAQ,EAAE,EAAE;IACZC,UAAU,EAAE,EAAE;IACdC,UAAU,EAAE,KAAK;IACjBC,aAAa,EAAE,CAAC;IAChBC,SAAS,EAAE;EACb;AACF,CAAC,CAAC","ignoreList":[]}

package/lib/module/ui/components/signIn/OxyRecoverAccountPanel.js

@@ -0,0 +1,165 @@
+"use strict";
+
+/**
+ * Recovering a passkey account (ADR 0029 D3), auth.oxy.so's `/recover`:
+ *
+ *   username or email → the code sent to the recovery email → new passkey → signed in
+ *
+ * The first step answers the same whether or not the account exists, so it
+ * never says who has one. An account that uses Commons has no recovery email:
+ * it recovers in Commons with its phrase, and the first step says so. The new
+ * passkey joins the ones the account has; lost ones are removed afterwards in
+ * the account's security settings.
+ */
+
+import { useState } from 'react';
+import { useTheme } from '@oxy.so/bloom/theme';
+import { DeviceManager } from '@oxy.so/core';
+import { useOxy } from "../../context/OxyContext.js";
+import { runPasskeyRegisterSignIn } from "../../context/passkeyFlow.js";
+import { useI18n } from "../../hooks/useI18n.js";
+import { isPasskeySupported, runRegistrationCeremony } from '../../../webauthn/passkeyClient';
+import { SubtleLink } from "../authChooser/primitives.js";
+import { OxyAuthScreen, OxyAuthScreenHeader, OxyAuthTerms } from "./OxyAuthScreen.js";
+import { AccountFlowAction, AccountFlowErrorLine, AccountFlowField, AccountFlowNote, EmailCodeStep, describeAccountFlowError, isTicketExpired } from "./accountFlowParts.js";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+export const OxyRecoverAccountPanel = ({
+  onRecovered,
+  onSignIn
+}) => {
+  const theme = useTheme();
+  const {
+    t
+  } = useI18n();
+  const {
+    oxyServices,
+    handleWebSession
+  } = useOxy();
+  const [step, setStep] = useState({
+    name: 'entry'
+  });
+  const [identifier, setIdentifier] = useState('');
+  const [pending, setPending] = useState(false);
+  const [error, setError] = useState(null);
+  const run = work => {
+    if (pending) return;
+    setError(null);
+    setPending(true);
+    work().catch(reason => {
+      if (isTicketExpired(reason)) setStep({
+        name: 'entry'
+      });
+      setError(describeAccountFlowError(reason, t));
+    }).finally(() => setPending(false));
+  };
+  const sendCode = async () => {
+    const {
+      verificationId
+    } = await oxyServices.startEmailVerification({
+      purpose: 'recovery',
+      identifier: identifier.trim()
+    });
+    setStep({
+      name: 'code',
+      verificationId
+    });
+  };
+  const submitIdentifier = () => {
+    if (!identifier.trim()) {
+      setError(t('recover.identifier.required'));
+      return;
+    }
+    run(sendCode);
+  };
+
+  // The ceremony opens the browser's passkey prompt, so it starts from the press.
+  const addPasskey = recoveryTicket => run(() => runPasskeyRegisterSignIn({
+    isSupported: isPasskeySupported,
+    getRegisterOptions: () => oxyServices.webauthnRegisterOptions({
+      recoveryTicket
+    }),
+    runCeremony: runRegistrationCeremony,
+    registerVerify: response => oxyServices.webauthnRegisterVerify(response, {
+      recoveryTicket,
+      deviceFingerprint: JSON.stringify(DeviceManager.getDeviceFingerprint())
+    }),
+    commit: async session => {
+      await handleWebSession(session);
+      onRecovered();
+    }
+  }));
+  switch (step.name) {
+    case 'code':
+      return /*#__PURE__*/_jsx(EmailCodeStep, {
+        description: t('emailCode.sentIfAccount'),
+        verificationId: step.verificationId,
+        onConfirmed: ({
+          ticket,
+          username
+        }) => {
+          setError(null);
+          setStep({
+            name: 'passkey',
+            recoveryTicket: ticket,
+            username
+          });
+        },
+        onResend: sendCode,
+        back: {
+          label: t('signin.actions.back'),
+          onPress: () => setStep({
+            name: 'entry'
+          })
+        }
+      });
+    case 'passkey':
+      return /*#__PURE__*/_jsxs(OxyAuthScreen, {
+        children: [/*#__PURE__*/_jsx(OxyAuthScreenHeader, {
+          title: t('recover.passkey.title'),
+          description: t('recover.passkey.subtitle', {
+            username: step.username ?? ''
+          })
+        }), error ? /*#__PURE__*/_jsx(AccountFlowErrorLine, {
+          message: error
+        }) : null, /*#__PURE__*/_jsx(AccountFlowAction, {
+          label: t('recover.passkey.action'),
+          onPress: () => addPasskey(step.recoveryTicket),
+          pending: pending,
+          testID: "recover-create-passkey"
+        }), /*#__PURE__*/_jsx(OxyAuthTerms, {})]
+      });
+    default:
+      return /*#__PURE__*/_jsxs(OxyAuthScreen, {
+        children: [/*#__PURE__*/_jsx(OxyAuthScreenHeader, {
+          title: t('recover.title'),
+          description: t('recover.subtitle')
+        }), /*#__PURE__*/_jsx(AccountFlowField, {
+          label: t('recover.identifier.label'),
+          value: identifier,
+          onChange: value => {
+            setIdentifier(value);
+            if (error) setError(null);
+          },
+          onSubmit: submitIdentifier,
+          error: error,
+          disabled: pending,
+          placeholder: t('recover.identifier.placeholder'),
+          autoComplete: "username",
+          testID: "recover-identifier"
+        }), /*#__PURE__*/_jsx(AccountFlowNote, {
+          children: t('recover.commonsNote')
+        }), /*#__PURE__*/_jsx(AccountFlowAction, {
+          label: t('signin.actions.continue'),
+          onPress: submitIdentifier,
+          pending: pending,
+          testID: "recover-continue"
+        }), /*#__PURE__*/_jsx(SubtleLink, {
+          label: t('recover.backToSignIn'),
+          theme: theme,
+          onPress: onSignIn,
+          testID: "back-to-sign-in"
+        }), /*#__PURE__*/_jsx(OxyAuthTerms, {})]
+      });
+  }
+};
+//# sourceMappingURL=OxyRecoverAccountPanel.js.map

package/lib/module/ui/components/signIn/OxyRecoverAccountPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useState","useTheme","DeviceManager","useOxy","runPasskeyRegisterSignIn","useI18n","isPasskeySupported","runRegistrationCeremony","SubtleLink","OxyAuthScreen","OxyAuthScreenHeader","OxyAuthTerms","AccountFlowAction","AccountFlowErrorLine","AccountFlowField","AccountFlowNote","EmailCodeStep","describeAccountFlowError","isTicketExpired","jsx","_jsx","jsxs","_jsxs","OxyRecoverAccountPanel","onRecovered","onSignIn","theme","t","oxyServices","handleWebSession","step","setStep","name","identifier","setIdentifier","pending","setPending","error","setError","run","work","catch","reason","finally","sendCode","verificationId","startEmailVerification","purpose","trim","submitIdentifier","addPasskey","recoveryTicket","isSupported","getRegisterOptions","webauthnRegisterOptions","runCeremony","registerVerify","response","webauthnRegisterVerify","deviceFingerprint","JSON","stringify","getDeviceFingerprint","commit","session","description","onConfirmed","ticket","username","onResend","back","label","onPress","children","title","message","testID","value","onChange","onSubmit","disabled","placeholder","autoComplete"],"sourceRoot":"../../../../../src","sources":["ui/components/signIn/OxyRecoverAccountPanel.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,QAAQ,QAAQ,OAAO;AAChC,SAASC,QAAQ,QAAQ,qBAAqB;AAC9C,SAASC,aAAa,QAAQ,cAAc;AAC5C,SAASC,MAAM,QAAQ,6BAA0B;AACjD,SAASC,wBAAwB,QAAQ,8BAA2B;AACpE,SAASC,OAAO,QAAQ,wBAAqB;AAC7C,SAASC,kBAAkB,EAAEC,uBAAuB,QAAQ,iCAAiC;AAC7F,SAASC,UAAU,QAAQ,8BAA2B;AACtD,SAASC,aAAa,EAAEC,mBAAmB,EAAEC,YAAY,QAAQ,oBAAiB;AAClF,SACEC,iBAAiB,EACjBC,oBAAoB,EACpBC,gBAAgB,EAChBC,eAAe,EACfC,aAAa,EACbC,wBAAwB,EACxBC,eAAe,QACV,uBAAoB;AAAC,SAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AAc5B,OAAO,MAAMC,sBAA6D,GAAGA,CAAC;EAAEC,WAAW;EAAEC;AAAS,CAAC,KAAK;EAC1G,MAAMC,KAAK,GAAGzB,QAAQ,CAAC,CAAC;EACxB,MAAM;IAAE0B;EAAE,CAAC,GAAGtB,OAAO,CAAC,CAAC;EACvB,MAAM;IAAEuB,WAAW;IAAEC;EAAiB,CAAC,GAAG1B,MAAM,CAAC,CAAC;EAClD,MAAM,CAAC2B,IAAI,EAAEC,OAAO,CAAC,GAAG/B,QAAQ,CAAO;IAAEgC,IAAI,EAAE;EAAQ,CAAC,CAAC;EACzD,MAAM,CAACC,UAAU,EAAEC,aAAa,CAAC,GAAGlC,QAAQ,CAAC,EAAE,CAAC;EAChD,MAAM,CAACmC,OAAO,EAAEC,UAAU,CAAC,GAAGpC,QAAQ,CAAC,KAAK,CAAC;EAC7C,MAAM,CAACqC,KAAK,EAAEC,QAAQ,CAAC,GAAGtC,QAAQ,CAAgB,IAAI,CAAC;EAEvD,MAAMuC,GAAG,GAAIC,IAAyB,IAAK;IACzC,IAAIL,OAAO,EAAE;IACbG,QAAQ,CAAC,IAAI,CAAC;IACdF,UAAU,CAAC,IAAI,CAAC;IAChBI,IAAI,CAAC,CAAC,CACHC,KAAK,CAAEC,MAAe,IAAK;MAC1B,IAAIxB,eAAe,CAACwB,MAAM,CAAC,EAAEX,OAAO,CAAC;QAAEC,IAAI,EAAE;MAAQ,CAAC,CAAC;MACvDM,QAAQ,CAACrB,wBAAwB,CAACyB,MAAM,EAAEf,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CACDgB,OAAO,CAAC,MAAMP,UAAU,CAAC,KAAK,CAAC,CAAC;EACrC,CAAC;EAED,MAAMQ,QAAQ,GAAG,MAAAA,CAAA,KAAY;IAC3B,MAAM;MAAEC;IAAe,CAAC,GAAG,MAAMjB,WAAW,CAACkB,sBAAsB,CAAC;MAAEC,OAAO,EAAE,UAAU;MAAEd,UAAU,EAAEA,UAAU,CAACe,IAAI,CAAC;IAAE,CAAC,CAAC;IAC3HjB,OAAO,CAAC;MAAEC,IAAI,EAAE,MAAM;MAAEa;IAAe,CAAC,CAAC;EAC3C,CAAC;EAED,MAAMI,gBAAgB,GAAGA,CAAA,KAAM;IAC7B,IAAI,CAAChB,UAAU,CAACe,IAAI,CAAC,CAAC,EAAE;MACtBV,QAAQ,CAACX,CAAC,CAAC,6BAA6B,CAAC,CAAC;MAC1C;IACF;IACAY,GAAG,CAACK,QAAQ,CAAC;EACf,CAAC;;EAED;EACA,MAAMM,UAAU,GAAIC,cAAsB,IACxCZ,GAAG,CAAC,MACFnC,wBAAwB,CAAC;IACvBgD,WAAW,EAAE9C,kBAAkB;IAC/B+C,kBAAkB,EAAEA,CAAA,KAAMzB,WAAW,CAAC0B,uBAAuB,CAAC;MAAEH;IAAe,CAAC,CAAC;IACjFI,WAAW,EAAEhD,uBAAuB;IACpCiD,cAAc,EAAGC,QAAQ,IACvB7B,WAAW,CAAC8B,sBAAsB,CAACD,QAAQ,EAAE;MAC3CN,cAAc;MACdQ,iBAAiB,EAAEC,IAAI,CAACC,SAAS,CAAC3D,aAAa,CAAC4D,oBAAoB,CAAC,CAAC;IACxE,CAAC,CAAC;IACJC,MAAM,EAAE,MAAOC,OAAO,IAAK;MACzB,MAAMnC,gBAAgB,CAACmC,OAAO,CAAC;MAC/BxC,WAAW,CAAC,CAAC;IACf;EACF,CAAC,CACH,CAAC;EAEH,QAAQM,IAAI,CAACE,IAAI;IACf,KAAK,MAAM;MACT,oBACEZ,IAAA,CAACJ,aAAa;QACZiD,WAAW,EAAEtC,CAAC,CAAC,yBAAyB,CAAE;QAC1CkB,cAAc,EAAEf,IAAI,CAACe,cAAe;QACpCqB,WAAW,EAAEA,CAAC;UAAEC,MAAM;UAAEC;QAAS,CAAC,KAAK;UACrC9B,QAAQ,CAAC,IAAI,CAAC;UACdP,OAAO,CAAC;YAAEC,IAAI,EAAE,SAAS;YAAEmB,cAAc,EAAEgB,MAAM;YAAEC;UAAS,CAAC,CAAC;QAChE,CAAE;QACFC,QAAQ,EAAEzB,QAAS;QACnB0B,IAAI,EAAE;UAAEC,KAAK,EAAE5C,CAAC,CAAC,qBAAqB,CAAC;UAAE6C,OAAO,EAAEA,CAAA,KAAMzC,OAAO,CAAC;YAAEC,IAAI,EAAE;UAAQ,CAAC;QAAE;MAAE,CACtF,CAAC;IAEN,KAAK,SAAS;MACZ,oBACEV,KAAA,CAACb,aAAa;QAAAgE,QAAA,gBACZrD,IAAA,CAACV,mBAAmB;UAClBgE,KAAK,EAAE/C,CAAC,CAAC,uBAAuB,CAAE;UAClCsC,WAAW,EAAEtC,CAAC,CAAC,0BAA0B,EAAE;YAAEyC,QAAQ,EAAEtC,IAAI,CAACsC,QAAQ,IAAI;UAAG,CAAC;QAAE,CAC/E,CAAC,EACD/B,KAAK,gBAAGjB,IAAA,CAACP,oBAAoB;UAAC8D,OAAO,EAAEtC;QAAM,CAAE,CAAC,GAAG,IAAI,eACxDjB,IAAA,CAACR,iBAAiB;UAChB2D,KAAK,EAAE5C,CAAC,CAAC,wBAAwB,CAAE;UACnC6C,OAAO,EAAEA,CAAA,KAAMtB,UAAU,CAACpB,IAAI,CAACqB,cAAc,CAAE;UAC/ChB,OAAO,EAAEA,OAAQ;UACjByC,MAAM,EAAC;QAAwB,CAChC,CAAC,eACFxD,IAAA,CAACT,YAAY,IAAE,CAAC;MAAA,CACH,CAAC;IAEpB;MACE,oBACEW,KAAA,CAACb,aAAa;QAAAgE,QAAA,gBACZrD,IAAA,CAACV,mBAAmB;UAACgE,KAAK,EAAE/C,CAAC,CAAC,eAAe,CAAE;UAACsC,WAAW,EAAEtC,CAAC,CAAC,kBAAkB;QAAE,CAAE,CAAC,eACtFP,IAAA,CAACN,gBAAgB;UACfyD,KAAK,EAAE5C,CAAC,CAAC,0BAA0B,CAAE;UACrCkD,KAAK,EAAE5C,UAAW;UAClB6C,QAAQ,EAAGD,KAAK,IAAK;YACnB3C,aAAa,CAAC2C,KAAK,CAAC;YACpB,IAAIxC,KAAK,EAAEC,QAAQ,CAAC,IAAI,CAAC;UAC3B,CAAE;UACFyC,QAAQ,EAAE9B,gBAAiB;UAC3BZ,KAAK,EAAEA,KAAM;UACb2C,QAAQ,EAAE7C,OAAQ;UAClB8C,WAAW,EAAEtD,CAAC,CAAC,gCAAgC,CAAE;UACjDuD,YAAY,EAAC,UAAU;UACvBN,MAAM,EAAC;QAAoB,CAC5B,CAAC,eACFxD,IAAA,CAACL,eAAe;UAAA0D,QAAA,EAAE9C,CAAC,CAAC,qBAAqB;QAAC,CAAkB,CAAC,eAC7DP,IAAA,CAACR,iBAAiB;UAAC2D,KAAK,EAAE5C,CAAC,CAAC,yBAAyB,CAAE;UAAC6C,OAAO,EAAEvB,gBAAiB;UAACd,OAAO,EAAEA,OAAQ;UAACyC,MAAM,EAAC;QAAkB,CAAE,CAAC,eACjIxD,IAAA,CAACZ,UAAU;UAAC+D,KAAK,EAAE5C,CAAC,CAAC,sBAAsB,CAAE;UAACD,KAAK,EAAEA,KAAM;UAAC8C,OAAO,EAAE/C,QAAS;UAACmD,MAAM,EAAC;QAAiB,CAAE,CAAC,eAC1GxD,IAAA,CAACT,YAAY,IAAE,CAAC;MAAA,CACH,CAAC;EAEtB;AACF,CAAC","ignoreList":[]}