@pristy/pristy-libvue 1.19.2 → 1.20.0

package/dist/src/stores/user.d.ts

@@ -11,17 +11,18 @@ import { StoreDefinition, PiniaCustomStateProperties } from 'pinia';
  * - `isAdmin` {boolean} - Indicates whether the current user is an administrator.
  * - `isLoggedIn` {boolean} - Tracks whether the user is currently logged in.
  * - `person` {object|null} - Stores the person details of the logged-in user.
- * - `keycloak` {object|null} - Represents Keycloak authentication configuration.
  * - `homeFolder` {string|null} - Stores the user's home folder path.
  *
  * Getters:
  * - `displayName` {string} - Returns the display name of the logged-in user, or an empty string if no user is logged in.
  *
  * Actions:
- * - `logout` - Logs out the current user and stops the auto-renew for the OIDC connection.
- * - `validateSession` - Checks if the client is logged in and retrieves the Alfresco ticket using the Keycloak Bearer Token.
- * - `connectKeycloak` - Handles the redirection and connection to Keycloak for unauthenticated users.
- * - `keycloakReady` - Stores the Keycloak object and retrieves the Alfresco ticket using the Keycloak Bearer Token.
+ * - `logout` - Logs out the current user and delegates to the auth provider.
+ * - `validateSession` - Checks if the client is logged in and retrieves the Alfresco ticket using the OIDC Bearer Token.
+ * - `connectKeycloak` - Redirects to the IdP for unauthenticated users, otherwise loads the current Person.
+ * - `keycloakReady` - Subscribes to the auth provider and retrieves the Alfresco ticket using the OIDC Bearer Token.
+ * - `completeLogin` - Consumes the IdP redirect and opens the Alfresco session.
+ * - `accountConsoleUrl` - Returns the IdP account console URL for a given section, when available.
  * - `getAlfTicket` - Logs into Alfresco with the Bearer token and retrieves the Alfresco ticket.
  * - `getPerson` - Retrieves the person details for the currently authenticated user.
  * - `login` - Attempts to log in a user with a username and password.
@@ -34,7 +35,6 @@ export const useUserStore: StoreDefinition<"UserStore", {
     isAdmin: boolean;
     isLoggedIn: boolean;
     person: any;
-    keycloak: any;
     homeFolder: any;
     isPristyAdmin: any;
 }, {
@@ -43,7 +43,6 @@ export const useUserStore: StoreDefinition<"UserStore", {
         isAdmin: boolean;
         isLoggedIn: boolean;
         person: any;
-        keycloak: any;
         homeFolder: any;
         isPristyAdmin: any;
     } & PiniaCustomStateProperties<{
@@ -51,7 +50,6 @@ export const useUserStore: StoreDefinition<"UserStore", {
         isAdmin: boolean;
         isLoggedIn: boolean;
         person: any;
-        keycloak: any;
         homeFolder: any;
         isPristyAdmin: any;
     }>): any;
@@ -62,32 +60,61 @@ export const useUserStore: StoreDefinition<"UserStore", {
      */
     logout(): Promise<axios.AxiosResponse<any>>;
     /**
-     * Check if the client is logged and get alf_ticket using Keycloak Bearer Token
-     * @return {Promise<{id:string}>} Current alf_token
+     * Check whether the client is logged in and, when authentication is
+     * delegated to an OIDC provider via the AuthProvider façade, refresh the
+     * Alfresco ticket using its Bearer token.
+     * @return {Promise<{id:string}|undefined>} Current alf_token, or
+     *   undefined when the session cannot be validated
      */
     validateSession(): Promise<{
         id: string;
-    }>;
+    } | undefined>;
     /**
-     * Redirect to Keycloak if unauthent, else retrieve current Person
-     * form Alfresco.
+     * Ensure the user is authenticated. Redirects to the IdP when they are not,
+     * otherwise loads their Person from Alfresco.
+     * @param {string} [returnTo] in-app path to return to after login
      * @return {Promise<void>}
      */
-    connectKeycloak: () => Promise<void>;
+    connectKeycloak: (returnTo?: string) => Promise<void>;
+    /**
+     * Consume the IdP redirect and open the Alfresco session.
+     * @return {Promise<string>} the in-app path to navigate to
+     */
+    completeLogin: () => Promise<string>;
     /**
-     * Store Keycloak object and get alf_ticket using Keycloak Bearer Token.
-     * We will ask alf_ticket every ALF_TOKEN_TTL_MS (60s)
-     * @param {any} _keycloak Keycloak object yet authenticate
-     * @return {Promise<{id: string}>}
+     * @param {string} section "profile" or "password"
+     * @return {string|null} the IdP account console URL, when one is available
      */
-    keycloakReady(_keycloak: any): Promise<{
+    accountConsoleUrl(section: string): string | null;
+    /**
+     * Subscribe to the provider and open the Alfresco session. The Alfresco
+     * ticket is refreshed when the OIDC token is renewed, replacing the former
+     * unconditional 60 s poll.
+     *
+     * Does nothing beyond registering the two subscriptions when the provider
+     * has no session yet: `OidcAuthProvider.init()` resolves happily for an
+     * anonymous browser (unlike keycloak-js's `onLoad: "login-required"`), so
+     * requesting a ticket here would send `Authorization: Bearer null` and
+     * surface a misleading initialization error. A later login still
+     * refreshes the ticket via the `onTokenRenewed` subscription.
+     * @param {Object} provider the auth provider, already initialised
+     * @return {Promise<{id: string}|undefined>}
+     */
+    keycloakReady(provider: any): Promise<{
         id: string;
-    }>;
+    } | undefined>;
     /**
-     * Log to Alfresco with Bearer token and set alf_token
+     * Log to Alfresco with Bearer token and set alf_token.
+     *
+     * Retries exactly once on an HTTP 401, per the design spec ("single retry
+     * on 401 on `/tickets/-me-`"): this replaces the 60 s poller the migration
+     * deleted, since under an OIDC IdP (e.g. Entra) the token and the
+     * Alfresco ticket can have comparable lifetimes, so an idle tab may lose
+     * its ticket with nothing else scheduled to refresh it.
+     * @param {boolean} [isRetry] internal guard, never pass this explicitly
      * @return {Promise<{id:string} | undefined>} Current alf_token or undefined if not using OIDC
      */
-    getAlfTicket(): Promise<{
+    getAlfTicket(isRetry?: boolean): Promise<{
         id: string;
     } | undefined>;
     /**

package/dist/src/stores/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/stores/user.js"],"names":[],"mappings":";AAsCA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiBI;;;OAGG;cADS,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IAqC7C;;;OAGG;uBADS,OAAO,CAAC;QAAC,EAAE,EAAC,MAAM,CAAA;KAAC,CAAC;IA0BhC;;;;OAIG;2BADS,OAAO,CAAC,IAAI,CAAC;IA0BzB;;;;;OAKG;6BAFQ,GAAG,GACF,OAAO,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAC,CAAC;IASjC;;;OAGG;oBADS,OAAO,CAAC;QAAC,EAAE,EAAC,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC;IAwC5C;;;OAGG;iBADS,OAAO,CAAC,MAAM,CAAC;IAyC3B;;;OAGG;;IAoBH;;;;;OAKG;gBAHQ,MAAM,YACN,MAAM,GACL,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IASnC;;;;;OAKG;gBAHQ,MAAM,KACN,MAAM,GACL,OAAO,CAAC,GAAG,CAAC;IAcxB;;;OAGG;oBADS,OAAO,CAAC,IAAI,CAAC;IAUzB;;;;OAIG;2BAFQ,MAAM,GACL,OAAO,CAAC,MAAM,CAAC;GAwB5B"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/stores/user.js"],"names":[],"mappings":";AAiDA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH;;;;;;;;;;;;;;;;;;;;;;;;IAgBI;;;OAGG;cADS,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IA+B7C;;;;;;OAMG;uBAFS,OAAO,CAAC;QAAC,EAAE,EAAC,MAAM,CAAA;KAAC,GAAC,SAAS,CAAC;IAsB1C;;;;;OAKG;iCAFQ,MAAM,KACL,OAAO,CAAC,IAAI,CAAC;IAmBzB;;;OAGG;yBADS,OAAO,CAAC,MAAM,CAAC;IAU3B;;;OAGG;+BAFQ,MAAM,GACL,MAAM,GAAC,IAAI;IAMvB;;;;;;;;;;;;;OAaG;kCADS,OAAO,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAC,GAAC,SAAS,CAAC;IAkB3C;;;;;;;;;;OAUG;2BAFQ,OAAO,GACN,OAAO,CAAC;QAAC,EAAE,EAAC,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC;IAqC5C;;;OAGG;iBADS,OAAO,CAAC,MAAM,CAAC;IAyC3B;;;OAGG;;IAoBH;;;;;OAKG;gBAHQ,MAAM,YACN,MAAM,GACL,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IASnC;;;;;OAKG;gBAHQ,MAAM,KACN,MAAM,GACL,OAAO,CAAC,GAAG,CAAC;IAcxB;;;OAGG;oBADS,OAAO,CAAC,IAAI,CAAC;IAUzB;;;;OAIG;2BAFQ,MAAM,GACL,OAAO,CAAC,MAAM,CAAC;GAwB5B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pristy/pristy-libvue",
-  "version": "1.19.2",
+  "version": "1.20.0",
   "description": "Core library used by all Pristy applications",
   "homepage": "https://pristy.fr/en/",
   "author": "JECI SARL",
@@ -64,7 +64,7 @@
     "@codemirror/state": "6.5.2"
   },
   "overrides": {
-    "minimatch@>=10.0.0 <10.2.3": "10.2.4"
+    "minimatch": "^10.2.6"
   },
   "dependencies": {
     "@alfresco/js-api": "^9.5.0",
@@ -79,6 +79,7 @@
     "keycloak-js": "^26.2.4",
     "marked": "^16.4.2",
     "marked-highlight": "^2.2.4",
+    "oidc-client-ts": "^3.5.0",
     "p-limit": "^6.2.0",
     "pdf-lib": "^1.17.1",
     "pinia": "^2.3.1",
@@ -90,23 +91,24 @@
   },
   "devDependencies": {
     "@codemirror/collab": "^6.1.1",
-    "@eslint/js": "^9.37.0",
+    "@eslint/js": "^10.0.1",
     "@vitejs/plugin-legacy": "^7.2.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "@vitest/coverage-v8": "^3.2.6",
-    "eslint": "^9.39.4",
+    "@vue/test-utils": "^2.4.11",
+    "eslint": "^10.8.0",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-n": "^17.24.0",
     "eslint-plugin-prettier": "^5.5.6",
     "eslint-plugin-promise": "^7.3.0",
-    "eslint-plugin-vue": "^9.33.0",
+    "eslint-plugin-vue": "^10.10.0",
+    "globals": "^17.8.0",
     "jsdom": "^27.4.0",
     "prettier": "^3.8.4",
     "rollup-plugin-visualizer": "^6.0.11",
     "sass": "^1.101.0",
     "svgo": "^4.0.1",
-    "vite": "^7.3.5",
+    "vite": "^7.3.6",
     "vite-plugin-dts": "^4.5.4",
     "vitest": "^3.2.4"
   },