@remit/web-client 0.0.297 → 0.0.298

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remit/web-client",
-  "version": "0.0.297",
+  "version": "0.0.298",
   "type": "module",
   "description": "Remit web client, published as composable primitives — the app shell, auth shells, and runtime config. A distributor imports what it composes and bundles it.",
   "exports": {

package/src/hooks/useIntelligenceData.ts

@@ -138,8 +138,8 @@ function joinDomains(domains: readonly string[]): string {
 /**
  * The clauses naming what does not line up on a message whose signature checks
  * out. Empty when everything the backend compared agreed — including when it
- * compared nothing, which is every message the provider's filter did not
- * already call spam.
+ * compared nothing, which is every message outside Junk that the provider's
+ * filter did not already call spam.
  *
  * Each clause leads with the concern and names `auth.fromDomain` — the
  * domain `classifyDisplayNameCorrespondence` actually compared the display

package/src/routes/settings/-accounts.test.ts

@@ -34,6 +34,13 @@ describe("mapOauthError", () => {
 		);
 	});
 
+	test("scope_not_granted sends the person back through the consent", () => {
+		assert.match(
+			mapOauthError("scope_not_granted"),
+			/did not grant access to every service you picked/,
+		);
+	});
+
 	test("consent_required returns admin consent message", () => {
 		const result = mapOauthError("consent_required");
 		assert.ok(
@@ -99,6 +106,7 @@ const REAUTH_ACCOUNT = {
 	displayName: "Matthijs",
 	authType: "oauthMicrosoft",
 	connectionState: "reauth_required",
+	syncedServices: ["Mail", "Calendar"],
 };
 
 // The router reads `self` at construction; the shared jsdom globals stop at
@@ -195,6 +203,16 @@ describe("the Reconnect button and the redirect it starts", () => {
 		Reflect.deleteProperty(document, "visibilityState");
 	});
 
+	test("asks Microsoft again for every service the account syncs", async () => {
+		const dom = await mountAccounts();
+		await startReconnect(dom);
+
+		assert.deepEqual(http?.to("/oauth/microsoft/start")[0]?.body, {
+			email: REAUTH_ACCOUNT.email,
+			services: ["Mail", "Calendar"],
+		});
+	});
+
 	test("goes busy and stays busy while the redirect is in flight", async () => {
 		const dom = await mountAccounts();
 		await startReconnect(dom);

package/src/routes/settings/accounts.tsx

@@ -64,6 +64,10 @@ export function mapOauthError(code: string): string {
 		return "You cancelled the sign-in.";
 	}
 
+	if (lower === "scope_not_granted") {
+		return "Microsoft did not grant access to every service you picked. Sign in again and accept each permission Microsoft asks for.";
+	}
+
 	if (
 		lower === "consent_required" ||
 		lower.includes("admin_consent") ||
@@ -440,7 +444,10 @@ function AccountsSettings() {
 										onClick: () => {
 											setReconnectingAccountId(account.accountId);
 											reconnectMutation.mutate({
-												body: { email: account.email },
+												body: {
+													email: account.email,
+													services: account.syncedServices,
+												},
 											});
 										},
 									}

package/src/test-support/fixtures.ts

@@ -41,6 +41,7 @@ export const makeAccount = (
 	email: "alice@example.com",
 	authType: "password",
 	syncedServices: ["Mail"],
+	grantedScopes: [],
 	imapHost: "imap.example.com",
 	imapPort: 993,
 	imapTls: true,