@pristy/pristy-libvue 2.16.4 → 2.17.2

package/dist/src/stores/user.d.ts

@@ -3,7 +3,7 @@ import { StoreDefinition, PiniaCustomStateProperties } from 'pinia';
  * `useUserStore` is a Pinia store for managing user authentication, session, and related user data.
  *
  * The store includes state variables for managing user session details, actions for logging in and out,
- * validating sessions, and interacting with authentication systems like Keycloak and Alfresco,
+ * validating sessions, and interacting with the OIDC `AuthProvider` façade and Alfresco,
  * as well as getters for computed properties like `displayName`.
  *
  * State:
@@ -11,18 +11,19 @@ import { StoreDefinition, PiniaCustomStateProperties } from 'pinia';
  * - `isAdmin` {boolean} - Indicates whether the current user is an administrator.
  * - `isLoggedIn` {boolean} - Tracks whether the user is currently logged in.
  * - `person` {object|null} - Stores the person details of the logged-in user.
- * - `keycloak` {object|null} - Represents Keycloak authentication configuration.
  * - `homeFolder` {string|null} - Stores the user's home folder path.
  *
  * Getters:
  * - `displayName` {string} - Returns the display name of the logged-in user, or an empty string if no user is logged in.
  *
  * Actions:
- * - `logout` - Logs out the current user and stops the auto-renew for the OIDC connection.
- * - `validateSession` - Checks if the client is logged in and retrieves the Alfresco ticket using the Keycloak Bearer Token.
- * - `connectKeycloak` - Handles the redirection and connection to Keycloak for unauthenticated users.
- * - `keycloakReady` - Stores the Keycloak object and retrieves the Alfresco ticket using the Keycloak Bearer Token.
- * - `getAlfTicket` - Logs into Alfresco with the Bearer token and retrieves the Alfresco ticket.
+ * - `logout` - Logs out the current user, clearing the local session and delegating to the auth provider.
+ * - `validateSession` - Checks if the client is logged in and retrieves the Alfresco ticket using the provider's Bearer token.
+ * - `connectKeycloak` - Redirects to the IdP via the auth provider for unauthenticated users, otherwise loads the current Person.
+ * - `completeLogin` - Consumes the IdP redirect via the auth provider and opens the Alfresco session.
+ * - `keycloakReady` - Subscribes to the auth provider's token-renewal and session-lost events, then retrieves the Alfresco ticket.
+ * - `getAlfTicket` - Logs into Alfresco with the Bearer token supplied by the auth provider and retrieves the Alfresco ticket.
+ * - `accountConsoleUrl` - Returns the IdP account console URL for a given section, via the auth provider.
  * - `getPerson` - Retrieves the person details for the currently authenticated user.
  * - `login` - Attempts to log in a user with a username and password.
  * - `apiLogin` - Handles Basic Authentication with Alfresco.
@@ -34,7 +35,6 @@ export const useUserStore: StoreDefinition<"UserStore", {
     isAdmin: boolean;
     isLoggedIn: boolean;
     person: any;
-    keycloak: any;
     homeFolder: any;
     isPristyAdmin: any;
 }, {
@@ -43,7 +43,6 @@ export const useUserStore: StoreDefinition<"UserStore", {
         isAdmin: boolean;
         isLoggedIn: boolean;
         person: any;
-        keycloak: any;
         homeFolder: any;
         isPristyAdmin: any;
     } & PiniaCustomStateProperties<{
@@ -51,7 +50,6 @@ export const useUserStore: StoreDefinition<"UserStore", {
         isAdmin: boolean;
         isLoggedIn: boolean;
         person: any;
-        keycloak: any;
         homeFolder: any;
         isPristyAdmin: any;
     }>): any;
@@ -62,32 +60,61 @@ export const useUserStore: StoreDefinition<"UserStore", {
      */
     logout(): Promise<axios.AxiosResponse<any>>;
     /**
-     * Check if the client is logged and get alf_ticket using Keycloak Bearer Token
-     * @return {Promise<{id:string}>} Current alf_token
+     * Check whether the client is logged in and, when authentication is
+     * delegated to an OIDC provider via the AuthProvider façade, refresh the
+     * Alfresco ticket using its Bearer token.
+     * @return {Promise<{id:string}|undefined>} Current alf_token, or
+     *   undefined when the session cannot be validated
      */
     validateSession(): Promise<{
         id: string;
-    }>;
+    } | undefined>;
     /**
-     * Redirect to Keycloak if unauthent, else retrieve current Person
-     * form Alfresco.
+     * Ensure the user is authenticated. Redirects to the IdP when they are not,
+     * otherwise loads their Person from Alfresco.
+     * @param {string} [returnTo] in-app path to return to after login
      * @return {Promise<void>}
      */
-    connectKeycloak: () => Promise<void>;
+    connectKeycloak: (returnTo?: string) => Promise<void>;
+    /**
+     * Consume the IdP redirect and open the Alfresco session.
+     * @return {Promise<string>} the in-app path to navigate to
+     */
+    completeLogin: () => Promise<string>;
     /**
-     * Store Keycloak object and get alf_ticket using Keycloak Bearer Token.
-     * We will ask alf_ticket every ALF_TOKEN_TTL_MS (60s)
-     * @param {any} _keycloak Keycloak object yet authenticate
-     * @return {Promise<{id: string}>}
+     * @param {string} section "profile" or "password"
+     * @return {string|null} the IdP account console URL, when one is available
      */
-    keycloakReady(_keycloak: any): Promise<{
+    accountConsoleUrl(section: string): string | null;
+    /**
+     * Subscribe to the provider and open the Alfresco session. The Alfresco
+     * ticket is refreshed when the OIDC token is renewed, replacing the former
+     * unconditional 60 s poll.
+     *
+     * Does nothing beyond registering the two subscriptions when the provider
+     * has no session yet: `OidcAuthProvider.init()` resolves happily for an
+     * anonymous browser (unlike keycloak-js's `onLoad: "login-required"`), so
+     * requesting a ticket here would send `Authorization: Bearer null` and
+     * surface a misleading initialization error. A later login still
+     * refreshes the ticket via the `onTokenRenewed` subscription.
+     * @param {Object} provider the auth provider, already initialised
+     * @return {Promise<{id: string}|undefined>}
+     */
+    keycloakReady(provider: any): Promise<{
         id: string;
-    }>;
+    } | undefined>;
     /**
-     * Log to Alfresco with Bearer token and set alf_token
+     * Log to Alfresco with Bearer token and set alf_token.
+     *
+     * Retries exactly once on an HTTP 401, per the design spec ("single retry
+     * on 401 on `/tickets/-me-`"): this replaces the 60 s poller the migration
+     * deleted, since under an OIDC IdP (e.g. Entra) the token and the
+     * Alfresco ticket can have comparable lifetimes, so an idle tab may lose
+     * its ticket with nothing else scheduled to refresh it.
+     * @param {boolean} [isRetry] internal guard, never pass this explicitly
      * @return {Promise<{id:string} | undefined>} Current alf_token or undefined if not using OIDC
      */
-    getAlfTicket(): Promise<{
+    getAlfTicket(isRetry?: boolean): Promise<{
         id: string;
     } | undefined>;
     /**

package/dist/src/stores/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/stores/user.js"],"names":[],"mappings":";AAsCA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiBI;;;OAGG;cADS,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IAqC7C;;;OAGG;uBADS,OAAO,CAAC;QAAC,EAAE,EAAC,MAAM,CAAA;KAAC,CAAC;IA0BhC;;;;OAIG;2BADS,OAAO,CAAC,IAAI,CAAC;IA0BzB;;;;;OAKG;6BAFQ,GAAG,GACF,OAAO,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAC,CAAC;IASjC;;;OAGG;oBADS,OAAO,CAAC;QAAC,EAAE,EAAC,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC;IAwC5C;;;OAGG;iBADS,OAAO,CAAC,MAAM,CAAC;IAyC3B;;;OAGG;;IAoBH;;;;;OAKG;gBAHQ,MAAM,YACN,MAAM,GACL,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IASnC;;;;;OAKG;gBAHQ,MAAM,KACN,MAAM,GACL,OAAO,CAAC,GAAG,CAAC;IAcxB;;;OAGG;oBADS,OAAO,CAAC,IAAI,CAAC;IAUzB;;;;OAIG;2BAFQ,MAAM,GACL,OAAO,CAAC,MAAM,CAAC;GAwB5B"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/stores/user.js"],"names":[],"mappings":";AAiDA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH;;;;;;;;;;;;;;;;;;;;;;;;IAgBI;;;OAGG;cADS,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IA+B7C;;;;;;OAMG;uBAFS,OAAO,CAAC;QAAC,EAAE,EAAC,MAAM,CAAA;KAAC,GAAC,SAAS,CAAC;IAsB1C;;;;;OAKG;iCAFQ,MAAM,KACL,OAAO,CAAC,IAAI,CAAC;IAmBzB;;;OAGG;yBADS,OAAO,CAAC,MAAM,CAAC;IAU3B;;;OAGG;+BAFQ,MAAM,GACL,MAAM,GAAC,IAAI;IAMvB;;;;;;;;;;;;;OAaG;kCADS,OAAO,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAC,GAAC,SAAS,CAAC;IAkB3C;;;;;;;;;;OAUG;2BAFQ,OAAO,GACN,OAAO,CAAC;QAAC,EAAE,EAAC,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC;IAqC5C;;;OAGG;iBADS,OAAO,CAAC,MAAM,CAAC;IAyC3B;;;OAGG;;IAoBH;;;;;OAKG;gBAHQ,MAAM,YACN,MAAM,GACL,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IASnC;;;;;OAKG;gBAHQ,MAAM,KACN,MAAM,GACL,OAAO,CAAC,GAAG,CAAC;IAcxB;;;OAGG;oBADS,OAAO,CAAC,IAAI,CAAC;IAUzB;;;;OAIG;2BAFQ,MAAM,GACL,OAAO,CAAC,MAAM,CAAC;GAwB5B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pristy/pristy-libvue",
-  "version": "2.16.4",
+  "version": "2.17.2",
   "description": "Core library used by all Pristy applications",
   "homepage": "https://pristy.fr/en/",
   "author": "JECI SARL",
@@ -41,10 +41,10 @@
   "peerDependencies": {
     "@codemirror/autocomplete": "^6.20.3",
     "@codemirror/collab": "^6.1.1",
-    "@codemirror/commands": "^6.10.4",
-    "@codemirror/lang-html": "^6.4.11",
+    "@codemirror/commands": "^6.11.0",
+    "@codemirror/lang-html": "^6.4.12",
     "@codemirror/lang-json": "^6.0.2",
-    "@codemirror/lang-markdown": "^6.5.0",
+    "@codemirror/lang-markdown": "^6.5.2",
     "@codemirror/lang-xml": "^6.1.0",
     "@codemirror/lang-yaml": "^6.1.3",
     "@codemirror/language": "^6.12.4",
@@ -54,15 +54,12 @@
     "@codemirror/search": "^6.7.1",
     "@codemirror/state": "^6.7.1",
     "@codemirror/theme-one-dark": "^6.1.3",
-    "@codemirror/view": "^6.43.6",
+    "@codemirror/view": "^6.43.9",
     "codemirror": "6.0.2",
-    "vue": "^3.5.22",
-    "vue-i18n": "^11.4.6",
+    "vue": "^3.5.41",
+    "vue-i18n": "^11.4.8",
     "vue-router": "^4.6.4"
   },
-  "resolutions": {
-    "@codemirror/state": "6.5.2"
-  },
   "overrides": {
     "minimatch": "^10.2.6"
   },
@@ -74,20 +71,21 @@
     "@tato30/vue-pdf": "^1.11.5",
     "@vueuse/core": "^12.8.2",
     "async-retry": "^1.3.3",
-    "axios": "^1.18.1",
-    "dompurify": "^3.4.11",
+    "axios": "^1.19.0",
+    "dompurify": "^3.4.14",
     "email-validator": "^2.0.4",
-    "highlight.js": "^11.11.1",
+    "highlight.js": "^11.12.0",
     "jszip": "^3.10.1",
     "keycloak-js": "^26.2.4",
     "marked": "^16.4.2",
     "marked-highlight": "^2.2.4",
+    "oidc-client-ts": "^3.5.0",
     "p-limit": "^6.2.0",
     "pdf-lib": "^1.17.1",
     "pinia": "^2.3.1",
     "primevue": "^4.5.5",
     "quick-lru": "^7.3.0",
-    "sanitize-html": "^2.17.5",
+    "sanitize-html": "^2.17.7",
     "type-check": "^0.4.0",
     "vue-draggable-next": "^2.3.0"
   },
@@ -95,20 +93,19 @@
     "@codemirror/collab": "^6.1.1",
     "@eslint/js": "^10.0.1",
     "@vitejs/plugin-legacy": "^7.2.1",
-    "@vitejs/plugin-vue": "^6.0.7",
+    "@vitejs/plugin-vue": "^6.0.8",
     "@vitest/coverage-v8": "^3.2.7",
-    "eslint": "^10.8.0",
-    "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-n": "^17.24.0",
+    "@vue/test-utils": "^2.4.11",
+    "eslint": "^10.8.1",
     "eslint-plugin-prettier": "^5.5.6",
-    "eslint-plugin-promise": "^7.3.0",
     "eslint-plugin-vue": "^10.10.0",
-    "globals": "^17.8.0",
+    "globals": "^17.11.0",
     "jsdom": "^27.4.0",
-    "prettier": "^3.9.4",
+    "prettier": "^3.9.6",
     "rollup-plugin-visualizer": "^6.0.11",
-    "sass": "^1.101.0",
-    "svgo": "^4.0.1",
+    "sass": "^1.102.0",
+    "svgo": "^4.0.2",
+    "typescript": "^6.0.3",
     "vite": "^7.3.6",
     "vite-plugin-dts": "^4.5.4",
     "vitest": "^3.2.4"