@oxyhq/services 19.0.1 → 19.1.1

package/lib/commonjs/ui/context/OxyContext.js

@@ -8,6 +8,10 @@ var _react = require("react");
 var _reactNative = require("react-native");
 var _core = require("@oxyhq/core");
 var _accountDialogManager = require("../navigation/accountDialogManager.js");
+var _oauthNavigation = require("../components/oauthNavigation.js");
+var _isWebBrowser = require("../utils/isWebBrowser.js");
+var _runProviderColdBoot = require("../boot/runProviderColdBoot.js");
+var _deviceCredential = require("../utils/deviceCredential.js");
 var _authStore = require("../stores/authStore.js");
 var _shallow = require("zustand/react/shallow");
 var _useLanguageManagement = require("../hooks/useLanguageManagement.js");
@@ -20,99 +24,11 @@ var _reactQuery = require("@tanstack/react-query");
 var _queryClient = require("../hooks/queryClient.js");
 var _useAvatarPicker = require("../hooks/useAvatarPicker.js");
 var _accountStore = require("../stores/accountStore.js");
-var _isWebBrowser = require("../utils/isWebBrowser.js");
 var _index = require("../session/index.js");
+var _oxyContextHelpers = require("./oxyContextHelpers.js");
+var _useOxyAccountGraph = require("./useOxyAccountGraph.js");
 var _jsxRuntime = require("react/jsx-runtime");
 const OxyContext = /*#__PURE__*/(0, _react.createContext)(null);
-
-/**
- * Result of {@link OxyContextState.signInWithPassword}.
- *
- * `'ok'` — the password was accepted and the session committed (so
- * `isAuthenticated` / `user` are updated and the device credential persisted).
- * `securityAlert` is present when the server flagged this sign-in as anomalous
- * (new device / location) — the caller shows a "New sign-in detected"
- * acknowledgement before proceeding; the session is already committed.
- *
- * `'2fa_required'` — the account has two-factor auth enabled, so NO session was
- * created. Complete the challenge with the returned short-lived `loginToken`
- * via {@link OxyContextState.completeTwoFactorSignIn}.
- */
-
-/**
- * Fallback client-session validity window (ms) — 7 days — applied when a
- * committed session does not carry an explicit `expiresAt`. This is only a
- * local display hint for the multi-session store; the server remains the source
- * of truth for actual session expiry.
- */
-const DEFAULT_SESSION_VALIDITY_MS = 7 * 24 * 60 * 60 * 1000;
-
-/**
- * How long the cold boot WAITS for the post-boot SessionClient handoff
- * (`addCurrentAccount` + `start` + `syncFromClient`) before it resolves auth and
- * stops blocking. Once a boot step planted a token the user is already
- * authenticated — the handoff only populates the multi-account set and the
- * server-authoritative active account, and those also arrive via the socket
- * subscription. So on a slow backend we stop AWAITING the handoff here (it keeps
- * running in the background and projects when it lands) rather than delaying
- * auth resolution.
- */
-const SESSION_HANDOFF_DEADLINE = 6000;
-
-/** The internal commit input — a session plus the zero-cookie device credential
- * (`deviceId` + `deviceSecret`) that is not on the public `SessionLoginResponse`.
- * All extras optional so `SessionLoginResponse` is assignable. */
-
-function getHttpStatus(error) {
-  if (!error || typeof error !== 'object') {
-    return undefined;
-  }
-  if ('status' in error) {
-    const status = error.status;
-    if (typeof status === 'number') {
-      return status;
-    }
-  }
-  if ('response' in error) {
-    const response = error.response;
-    if (response && typeof response === 'object' && 'status' in response) {
-      const status = response.status;
-      if (typeof status === 'number') {
-        return status;
-      }
-    }
-  }
-  return undefined;
-}
-function isUnauthorizedStatus(error) {
-  return getHttpStatus(error) === 401;
-}
-let cachedUseFollowHook = null;
-const loadUseFollowHook = () => {
-  if (cachedUseFollowHook) {
-    return cachedUseFollowHook;
-  }
-  try {
-    // eslint-disable-next-line @typescript-eslint/no-var-requires
-    const {
-      useFollow
-    } = require('../hooks/useFollow');
-    cachedUseFollowHook = useFollow;
-    return cachedUseFollowHook;
-  } catch (error) {
-    if (__DEV__) {
-      _core.logger.warn('useFollow hook is not available. Please import useFollow from @oxyhq/services directly.', {
-        component: 'OxyContext',
-        method: 'loadUseFollowHook'
-      }, error);
-    }
-    const fallback = () => {
-      throw new Error('useFollow hook is only available in the UI bundle. Import it from @oxyhq/services.');
-    };
-    cachedUseFollowHook = fallback;
-    return cachedUseFollowHook;
-  }
-};
 const OxyProvider = ({
   children,
   oxyServices: providedOxyServices,
@@ -121,7 +37,7 @@ const OxyProvider = ({
   authRedirectUri,
   storageKeyPrefix = 'oxy_session',
   clientId: clientIdProp,
-  coldBoot = true,
+  hubSync = true,
   onAuthStateChange,
   onError
 }) => {
@@ -319,12 +235,9 @@ const OxyProvider = ({
   markAuthResolvedRef.current = markAuthResolved;
 
   // Server-authoritative device session client. Built ONCE per `oxyServices`
-  // instance. `onUnauthenticated` (a device signout-all pushed over the
-  // bearer-authenticated socket, or bootstrapped as zero-account) clears the
-  // persisted store + local state so a reload does not try to restore a session
-  // the device no longer has. The realtime socket is bearer-only now: a
-  // signed-out tab cannot join any device room, so there is no signed-out sync
-  // wiring here.
+  // instance. Device-scoped sockets connect with deviceId+deviceSecret when no
+  // bearer is planted yet, so cross-origin apps sync via `session_state` after
+  // the one-shot join redirect.
   const sessionClientPairRef = (0, _react.useRef)(null);
   if (!sessionClientPairRef.current) {
     sessionClientPairRef.current = (0, _index.createSessionClient)(oxyServices, authStore, () => {
@@ -379,6 +292,10 @@ const OxyProvider = ({
   }, [oxyServices, sessionClient, sessionClientHost, authStore, updateSessions, setActiveSessionId, loginSuccess, clearSessionState, logger]);
   const syncFromClientRef = (0, _react.useRef)(syncFromClient);
   syncFromClientRef.current = syncFromClient;
+  const syncDeviceCredentialToHost = (0, _react.useCallback)(async () => {
+    const cred = await (0, _deviceCredential.loadPersistedDeviceCredential)(authStore);
+    sessionClientHost.setDeviceCredential(cred);
+  }, [authStore, sessionClientHost]);
   (0, _react.useEffect)(() => {
     return sessionClient.subscribe(() => {
       void syncFromClient();
@@ -409,6 +326,15 @@ const OxyProvider = ({
     setAuthState,
     logger
   });
+
+  // "That wasn't me": repudiating a flagged sign-in IS revoking the device
+  // session that just committed — the same server-authoritative
+  // `sessionClient.signOut(...)` path `logout` uses, which also clears the
+  // persisted device credential + local state when no sibling account remains.
+  // No dedicated "report suspicious" API endpoint exists (or is needed).
+  const revokeSuspiciousSignIn = (0, _react.useCallback)(async () => {
+    await logout();
+  }, [logout]);
   const clearAllAccountData = (0, _react.useCallback)(async () => {
     queryClient.clear();
     if (storage) {
@@ -436,7 +362,7 @@ const OxyProvider = ({
     clearSessionState,
     logger
   });
-  const useFollowHook = loadUseFollowHook();
+  const useFollowHook = (0, _oxyContextHelpers.loadUseFollowHook)();
 
   // Token-change side effects: an invalidated bearer (HttpService clears tokens
   // on an unrecoverable 401 and emits `null`) must locally sign out an
@@ -450,6 +376,9 @@ const OxyProvider = ({
       setHasAccessToken(Boolean(accessToken));
       if (accessToken) {
         setTokenReady(true);
+        if (sessionClient.getState()?.accounts.length) {
+          void syncFromClientRef.current();
+        }
         return;
       }
       if (userRef.current || isAuthenticatedRef.current) {
@@ -504,15 +433,13 @@ const OxyProvider = ({
       oxyServices.setTokens(input.accessToken);
     }
 
-    // Persist the durable blob when the zero-cookie device credential
-    // (`deviceId` + `deviceSecret`) is present. The cold boot has usually
-    // persisted already; this is idempotent. Without the credential there is
-    // nothing durable to persist and the session lives only for this runtime.
-    if (input.deviceId && input.deviceSecret && input.userId) {
+    // Persist the durable blob when the zero-cookie device credential is present.
+    if (input.deviceId && input.deviceSecret) {
       try {
+        const prior = await authStore.load();
         const next = {
-          sessionId: input.sessionId,
-          userId: input.userId,
+          sessionId: input.sessionId || prior?.sessionId || '',
+          userId: input.userId || prior?.userId || '',
           deviceId: input.deviceId,
           deviceSecret: input.deviceSecret,
           ...(input.accessToken ? {
@@ -523,6 +450,10 @@ const OxyProvider = ({
           } : {})
         };
         await authStore.save(next);
+        sessionClientHost.setDeviceCredential({
+          deviceId: input.deviceId,
+          deviceSecret: input.deviceSecret
+        });
       } catch (persistError) {
         logger('Failed to persist auth state on commit', persistError);
       }
@@ -535,7 +466,7 @@ const OxyProvider = ({
       updateSessions([{
         sessionId: input.sessionId,
         deviceId: input.deviceId ?? '',
-        expiresAt: input.expiresAt || new Date(now.getTime() + DEFAULT_SESSION_VALIDITY_MS).toISOString(),
+        expiresAt: input.expiresAt || new Date(now.getTime() + _oxyContextHelpers.DEFAULT_SESSION_VALIDITY_MS).toISOString(),
         lastActive: now.toISOString(),
         userId: input.userId,
         isCurrent: true
@@ -584,7 +515,21 @@ const OxyProvider = ({
       onAuthStateChangeRef.current?.(fullUser);
     }
     markAuthResolvedRef.current();
-  }, [oxyServices, authStore, updateSessions, setActiveSessionId, sessionClient, syncFromClient, loginSuccess, logger]);
+    if (options.activate && options.hubSync && hubSync && (0, _isWebBrowser.isWebBrowser)()) {
+      try {
+        await (0, _core.syncHubAfterSignIn)(oxyServices, {
+          enabled: hubSync
+        });
+      } catch (hubError) {
+        if (__DEV__) {
+          _core.logger.debug('Hub sync after sign-in failed (non-fatal)', {
+            component: 'OxyContext',
+            method: 'commitSession'
+          }, hubError);
+        }
+      }
+    }
+  }, [oxyServices, authStore, updateSessions, setActiveSessionId, sessionClient, sessionClientHost, syncFromClient, loginSuccess, logger, hubSync]);
   const commitSessionRef = (0, _react.useRef)(commitSession);
   commitSessionRef.current = commitSession;
 
@@ -605,7 +550,8 @@ const OxyProvider = ({
       userId: session.user.id,
       user: session.user
     }, {
-      activate: true
+      activate: true,
+      hubSync: true
     });
   }, [commitSession]);
 
@@ -623,10 +569,15 @@ const OxyProvider = ({
       oxyServices,
       sessionClient,
       clientId,
+      authRedirectUri,
       locale: currentLanguage,
       commitSession: session => handleWebSessionRef.current(session),
       onSignedIn: () => setAccountDialogOpen(false),
       openUrl: url => {
+        if ((0, _isWebBrowser.isWebBrowser)()) {
+          (0, _oauthNavigation.redirectToAuthorize)(url);
+          return;
+        }
         void _reactNative.Linking.openURL(url);
       }
     });
@@ -649,7 +600,7 @@ const OxyProvider = ({
   }, []);
 
   // Expose the live open/close controls to the imperative manager so
-  // `showSignInModal()` (and any app-level imperative "sign in" handler) works.
+  // Imperative `openAccountDialog('signin')` (and app-level sign-in handlers) works.
   (0, _react.useEffect)(() => (0, _accountDialogManager.registerAccountDialogControls)({
     open: openAccountDialog,
     close: closeAccountDialog
@@ -663,9 +614,11 @@ const OxyProvider = ({
 
   // Keyless password sign-in: username/email + password.
   const signInWithPassword = (0, _react.useCallback)(async (identifier, password, opts) => {
+    const persisted = await authStore.load();
     const result = await oxyServices.passwordSignIn(identifier, password, {
       deviceName: opts?.deviceName,
-      deviceFingerprint: opts?.deviceFingerprint
+      deviceFingerprint: opts?.deviceFingerprint,
+      deviceId: persisted?.deviceId
     });
     if ('twoFactorRequired' in result) {
       return {
@@ -683,7 +636,8 @@ const OxyProvider = ({
       userId: result.user.id,
       user: result.user
     }, {
-      activate: true
+      activate: true,
+      hubSync: true
     });
     return {
       status: 'ok',
@@ -693,11 +647,13 @@ const OxyProvider = ({
     };
   }, [oxyServices, commitSession]);
   const completeTwoFactorSignIn = (0, _react.useCallback)(async params => {
+    const persisted = await authStore.load();
     const result = await oxyServices.completeTwoFactorSignIn({
       loginToken: params.loginToken,
       token: params.token,
       backupCode: params.backupCode,
-      deviceName: params.deviceName
+      deviceName: params.deviceName,
+      deviceId: persisted?.deviceId
     });
     await commitSession({
       sessionId: result.sessionId,
@@ -708,7 +664,8 @@ const OxyProvider = ({
       userId: result.user.id,
       user: result.user
     }, {
-      activate: true
+      activate: true,
+      hubSync: true
     });
     return {
       securityAlert: result.securityAlert
@@ -716,84 +673,24 @@ const OxyProvider = ({
   }, [oxyServices, commitSession]);
 
   // ── Cold boot ────────────────────────────────────────────────────────────
-  // The single device-first session restore. Runs ONCE after storage init.
-  // `runSessionColdBoot` resolves the device's session (bootstrap-return →
-  // stored-tokens → shared-key (native) → bootstrap-hop (web)) WITHOUT ever
-  // redirecting to a login page; an unresolved boot ends signed-out and the app
-  // renders its "Sign in with Oxy" affordance. On a winning boot the token is
-  // already planted + persisted, so `onSession` only hands off to the
-  // SessionClient (membership + active account + realtime socket) and marks
-  // auth resolved. `onSignedOut` marks auth resolved with no session.
+  // Device-first session restore via `runProviderColdBoot` (see boot/runProviderColdBoot.ts).
   const runColdBoot = (0, _react.useCallback)(async () => {
-    setTokenReady(false);
-    try {
-      await (0, _core.runSessionColdBoot)({
-        oxy: oxyServices,
-        store: authStore,
-        platform: {
-          isWeb: (0, _isWebBrowser.isWebBrowser)(),
-          isNative: !(0, _isWebBrowser.isWebBrowser)()
-        },
-        onSession: async session => {
-          // Bound how long auth resolution waits for the handoff — the token is
-          // already planted, so on a slow backend we proceed and let the handoff
-          // land asynchronously (the socket subscription re-projects when it does).
-          const handoff = commitSessionRef.current({
-            sessionId: session.sessionId,
-            accessToken: session.accessToken,
-            userId: session.userId
-          }, {
-            activate: false
-          });
-          let handoffDeadlineId;
-          await Promise.race([handoff, new Promise(resolve => {
-            handoffDeadlineId = setTimeout(resolve, SESSION_HANDOFF_DEADLINE);
-          })]).finally(() => {
-            if (handoffDeadlineId !== undefined) {
-              clearTimeout(handoffDeadlineId);
-            }
-          });
-          markAuthResolvedRef.current();
-        },
-        onSignedOut: () => {
-          // The realtime socket is bearer-only: a signed-out tab cannot join any
-          // device room, so there is no signed-out socket to start here.
-          markAuthResolvedRef.current();
-        },
-        onStepError: (id, error) => {
-          if (__DEV__) {
-            _core.logger.debug(`Cold-boot step "${id}" errored (non-fatal, falling through)`, {
-              component: 'OxyContext',
-              method: 'runColdBoot'
-            }, error);
-          }
-        }
-      });
-    } catch (error) {
-      if (__DEV__) {
-        _core.logger.error('Cold boot error', error instanceof Error ? error : new Error(String(error)), {
-          component: 'OxyContext',
-          method: 'runColdBoot'
-        });
-      }
-    } finally {
-      // Backstop: resolve on every exit path so the gate can never hang.
-      markAuthResolvedRef.current();
-    }
-  }, [oxyServices, authStore]);
+    await (0, _runProviderColdBoot.runProviderColdBoot)({
+      oxyServices,
+      authStore,
+      clientId: clientIdProp,
+      authRedirectUri,
+      sessionClient,
+      syncDeviceCredentialToHost,
+      commitSession: (input, options) => commitSessionRef.current(input, options),
+      markAuthResolved: () => markAuthResolvedRef.current(),
+      setTokenReady
+    });
+  }, [oxyServices, authStore, clientIdProp, authRedirectUri, syncDeviceCredentialToHost, sessionClient]);
   (0, _react.useEffect)(() => {
     if (initialized) {
       return;
     }
-    // IdP mode (`coldBoot={false}`): this provider is NOT the ecosystem session
-    // authority, so it never runs the device-first restore. Resolve auth
-    // immediately as signed out so there is no boot spinner; a deliberate sign-in
-    // still commits a normal session.
-    if (!coldBoot) {
-      setInitialized(true);
-      markAuthResolved();
-      return;
-    }
     if (!storage) {
       return;
     }
@@ -803,7 +700,32 @@ const OxyProvider = ({
         logger('Cold boot failed', error);
       }
     });
-  }, [coldBoot, runColdBoot, storage, initialized, logger, markAuthResolved]);
+  }, [runColdBoot, storage, initialized, logger]);
+
+  // Reconcile device state when the tab returns to foreground (background tabs may
+  // miss socket pushes or have stale bearer tokens).
+  (0, _react.useEffect)(() => {
+    if (!(0, _isWebBrowser.isWebBrowser)()) return;
+    const onVisibility = () => {
+      if (document.visibilityState !== 'visible') return;
+      const reconcile = async () => {
+        if (!oxyServices.getAccessToken() && sessionClientHost.getDeviceCredential()) {
+          await (0, _core.refreshPersistedSession)({
+            oxy: oxyServices,
+            store: authStore
+          });
+        }
+        if (!oxyServices.getAccessToken() && !sessionClientHost.getDeviceCredential()) {
+          return;
+        }
+        await sessionClient.bootstrap();
+        await syncFromClient();
+      };
+      void reconcile().catch(() => undefined);
+    };
+    document.addEventListener('visibilitychange', onVisibility);
+    return () => document.removeEventListener('visibilitychange', onVisibility);
+  }, [oxyServices, sessionClient, sessionClientHost, authStore, syncFromClient]);
 
   // Exposed `refreshSessions`: re-bootstrap the server-authoritative device
   // state and reproject — the manual counterpart to the realtime socket.
@@ -842,78 +764,23 @@ const OxyProvider = ({
     queryClient,
     showBottomSheet: showBottomSheetForContext
   });
-
-  // ── Account graph ──────────────────────────────────────────────────────────
-  const [accounts, setAccounts] = (0, _react.useState)([]);
-  const refreshAccounts = (0, _react.useCallback)(async () => {
-    if (!isAuthenticated || !tokenReady || !oxyServices.getAccessToken()) {
-      setAccounts([]);
-      return;
-    }
-    try {
-      const list = await oxyServices.listAccounts();
-      setAccounts(list);
-    } catch (err) {
-      if (isUnauthorizedStatus(err)) {
-        setAccounts([]);
-        await clearSessionStateRef.current();
-        return;
-      }
-      if (__DEV__) {
-        _core.logger.debug('Failed to load accounts', {
-          component: 'OxyContext'
-        }, err);
-      }
-    }
-  }, [isAuthenticated, oxyServices, tokenReady]);
-  (0, _react.useEffect)(() => {
-    if (isAuthenticated && initialized && tokenReady) {
-      refreshAccounts();
-      // Reload the dialog's own account graph too, so a session restored OUTSIDE
-      // the dialog (cold boot / password sign-in) surfaces its graph accounts.
-      void accountDialogControllerRef.current?.refresh();
-    }
-  }, [isAuthenticated, initialized, tokenReady, refreshAccounts]);
-  const runPostAccountSwitchSideEffects = (0, _react.useCallback)(async () => {
-    await refreshAccounts();
-    queryClient.invalidateQueries();
-  }, [refreshAccounts, queryClient]);
-
-  // Switch the active session INTO an account from the unified graph. In the
-  // real-session model this is identical to switching device sign-ins.
-  const switchToAccount = (0, _react.useCallback)(async accountId => {
-    const deviceState = sessionClient.getState();
-    if (deviceState?.accounts.some(account => account.accountId === accountId)) {
-      await sessionClient.switchAccount(accountId);
-      await syncFromClient();
-      await runPostAccountSwitchSideEffects();
-      return;
-    }
-    const result = await oxyServices.switchToAccount(accountId);
-    if (!result?.user || !result?.sessionId) {
-      throw new Error('Account switch did not return a valid session');
-    }
-    // `oxyServices.switchToAccount` already planted the access token; commit
-    // the minted session through the shared funnel (persist + register +
-    // hydrate) as a deliberate activation.
-    await commitSession({
-      sessionId: result.sessionId,
-      accessToken: result.accessToken,
-      deviceSecret: result.deviceSecret,
-      deviceId: result.deviceId,
-      expiresAt: result.expiresAt,
-      userId: result.user.id,
-      user: result.user
-    }, {
-      activate: true
-    });
-    await runPostAccountSwitchSideEffects();
-  }, [oxyServices, sessionClient, syncFromClient, commitSession, runPostAccountSwitchSideEffects]);
-  const createAccountFn = (0, _react.useCallback)(async data => {
-    const account = await oxyServices.createAccount(data);
-    await refreshAccounts();
-    return account;
-  }, [oxyServices, refreshAccounts]);
+  const {
+    accounts,
+    refreshAccounts,
+    switchToAccount,
+    createAccount: createAccountFn
+  } = (0, _useOxyAccountGraph.useOxyAccountGraph)({
+    isAuthenticated,
+    tokenReady,
+    initialized,
+    oxyServices,
+    sessionClient,
+    syncFromClient,
+    commitSession,
+    queryClient,
+    accountDialogControllerRef,
+    clearSessionStateRef
+  });
   const canUsePrivateApi = authResolved && isAuthenticated && tokenReady && hasAccessToken;
   const isPrivateApiPending = !authResolved || isAuthenticated && (!tokenReady || !hasAccessToken);
   const contextValue = (0, _react.useMemo)(() => ({
@@ -938,6 +805,7 @@ const OxyProvider = ({
     signIn,
     signInWithPassword,
     completeTwoFactorSignIn,
+    revokeSuspiciousSignIn,
     handleWebSession,
     logout,
     logoutAll,
@@ -964,7 +832,7 @@ const OxyProvider = ({
     switchToAccount,
     refreshAccounts,
     createAccount: createAccountFn
-  }), [user, sessions, activeSessionId, isAuthenticated, isLoading, tokenReady, hasAccessToken, canUsePrivateApi, isPrivateApiPending, authResolved, storage, error, currentLanguage, currentLanguageMetadata, currentLanguageName, currentNativeLanguageName, hasIdentity, getPublicKey, signIn, signInWithPassword, completeTwoFactorSignIn, handleWebSession, logout, logoutAll, switchSessionForContext, refreshSessionsForContext, setLanguage, getDeviceSessions, logoutAllDeviceSessions, updateDeviceName, clearSessionState, clearAllAccountData, storageKeyPrefix, clientId, oxyServices, useFollowHook, showBottomSheetForContext, openAvatarPicker, accountDialogController, accountDialogOpen, openAccountDialog, closeAccountDialog, accounts, switchToAccount, refreshAccounts, createAccountFn]);
+  }), [user, sessions, activeSessionId, isAuthenticated, isLoading, tokenReady, hasAccessToken, canUsePrivateApi, isPrivateApiPending, authResolved, storage, error, currentLanguage, currentLanguageMetadata, currentLanguageName, currentNativeLanguageName, hasIdentity, getPublicKey, signIn, signInWithPassword, completeTwoFactorSignIn, revokeSuspiciousSignIn, handleWebSession, logout, logoutAll, switchSessionForContext, refreshSessionsForContext, setLanguage, getDeviceSessions, logoutAllDeviceSessions, updateDeviceName, clearSessionState, clearAllAccountData, storageKeyPrefix, clientId, oxyServices, useFollowHook, showBottomSheetForContext, openAvatarPicker, accountDialogController, accountDialogOpen, openAccountDialog, closeAccountDialog, accounts, switchToAccount, refreshAccounts, createAccountFn]);
   return /*#__PURE__*/(0, _jsxRuntime.jsx)(OxyContext.Provider, {
     value: contextValue,
     children: children
@@ -1004,6 +872,7 @@ const LOADING_STATE = {
   signIn: () => rejectMissingProvider(),
   signInWithPassword: () => rejectMissingProvider(),
   completeTwoFactorSignIn: () => rejectMissingProvider(),
+  revokeSuspiciousSignIn: () => rejectMissingProvider(),
   handleWebSession: () => rejectMissingProvider(),
   logout: () => rejectMissingProvider(),
   logoutAll: () => rejectMissingProvider(),