@schemavaults/auth-react-provider 0.10.41 → 0.11.0

package/dist/hooks/index.d.ts

@@ -26,3 +26,7 @@ export { useDefaultAccessTokenAudiences } from "./use-default-access-token-audie
 export { useAutoReacquireDefaultAccessTokens } from "./use-auto-reacquire-default-access-tokens";
 export { useOnLogout } from "./use-on-logout";
 export type * from "./use-on-logout";
+export { useMfaStatusSwr } from "./use-mfa-status-swr";
+export type * from "./use-mfa-status-swr";
+export { useMfa } from "./use-mfa";
+export type * from "./use-mfa";

package/dist/hooks/index.js

@@ -14,4 +14,6 @@ export { useIsAuthServer } from "./use-is-auth-server";
 export { useDefaultAccessTokenAudiences } from "./use-default-access-token-audiences";
 export { useAutoReacquireDefaultAccessTokens } from "./use-auto-reacquire-default-access-tokens";
 export { useOnLogout } from "./use-on-logout";
+export { useMfaStatusSwr } from "./use-mfa-status-swr";
+export { useMfa } from "./use-mfa";
 //# sourceMappingURL=index.js.map

package/dist/hooks/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGrC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,wCAAwC,EAAE,MAAM,2CAA2C,CAAC;AAGrG,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAG/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAGrF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAEtF,OAAO,EAAE,mCAAmC,EAAE,MAAM,4CAA4C,CAAC;AAEjG,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGrC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,wCAAwC,EAAE,MAAM,2CAA2C,CAAC;AAGrG,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAG/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAGrF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAEtF,OAAO,EAAE,mCAAmC,EAAE,MAAM,4CAA4C,CAAC;AAEjG,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC"}

package/dist/hooks/use-mfa-status-swr.d.ts

@@ -0,0 +1,12 @@
+import type { MfaStatusResponse } from "@schemavaults/auth-common";
+import { type KeyedMutator } from "swr";
+export interface UseMfaStatusSwrResult {
+    data: MfaStatusResponse | null;
+    isLoading: boolean;
+    refresh: KeyedMutator<MfaStatusResponse | null>;
+}
+/**
+ * Loads the current user's MFA enrollment status from
+ * /api/user/mfa/status. Returns null when the user is unauthenticated.
+ */
+export declare function useMfaStatusSwr(): UseMfaStatusSwrResult;

package/dist/hooks/use-mfa-status-swr.js

@@ -0,0 +1,32 @@
+"use client";
+import useSWR from "swr";
+import useAuth from "./use-auth";
+import useCurrentUser from "./use-current-user";
+const REFRESH_INTERVAL_MS = 60_000;
+const DEDUPING_INTERVAL_MS = 15_000;
+/**
+ * Loads the current user's MFA enrollment status from
+ * /api/user/mfa/status. Returns null when the user is unauthenticated.
+ */
+export function useMfaStatusSwr() {
+    const auth = useAuth();
+    const inMemoryUser = useCurrentUser();
+    const clientRef = auth.ready ? auth.client : null;
+    const enabled = !!(auth.ready && clientRef?.current && inMemoryUser);
+    const { data, isLoading, mutate } = useSWR(enabled ? "/api/user/mfa/status" : null, async () => {
+        const authClient = clientRef?.current ?? null;
+        if (!authClient)
+            return null;
+        return await authClient.getMfaStatus();
+    }, {
+        refreshInterval: REFRESH_INTERVAL_MS,
+        dedupingInterval: DEDUPING_INTERVAL_MS,
+        revalidateOnFocus: true,
+    });
+    return {
+        data: data ?? null,
+        isLoading,
+        refresh: mutate,
+    };
+}
+//# sourceMappingURL=use-mfa-status-swr.js.map

package/dist/hooks/use-mfa-status-swr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-mfa-status-swr.js","sourceRoot":"","sources":["../../src/hooks/use-mfa-status-swr.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAIb,OAAO,MAA6B,MAAM,KAAK,CAAC;AAChD,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,cAAc,MAAM,0BAA0B,CAAC;AAEtD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAQpC;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,OAAO,IAAI,YAAY,CAAC,CAAC;IAErE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CACxC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EACvC,KAAK,IAAuC,EAAE;QAC5C,MAAM,UAAU,GACd,SAAS,EAAE,OAAO,IAAI,IAAI,CAAC;QAC7B,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,OAAO,MAAM,UAAU,CAAC,YAAY,EAAE,CAAC;IACzC,CAAC,EACD;QACE,eAAe,EAAE,mBAAmB;QACpC,gBAAgB,EAAE,oBAAoB;QACtC,iBAAiB,EAAE,IAAI;KACxB,CACF,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,IAAI,IAAI,IAAI;QAClB,SAAS;QACT,OAAO,EAAE,MAAM;KAChB,CAAC;AACJ,CAAC"}

package/dist/hooks/use-mfa.d.ts

@@ -0,0 +1,23 @@
+import type { MfaStatusResponse, MfaEnrollResponse, MfaVerifyEnrollmentResponse, AuthenticateResult } from "@schemavaults/auth-common";
+export interface UseMfaResult {
+    status: MfaStatusResponse | null;
+    isLoading: boolean;
+    refresh: () => Promise<MfaStatusResponse | null | undefined>;
+    enrollTotp: () => Promise<MfaEnrollResponse>;
+    confirmTotpEnrollment: (factor_id: string, code: string) => Promise<MfaVerifyEnrollmentResponse>;
+    removeFactor: (factor_id: string, code: string) => Promise<void>;
+    regenerateRecoveryCodes: (code: string) => Promise<MfaVerifyEnrollmentResponse>;
+    submitChallenge: (challenge_id: string, client_app_id: string, proof: {
+        type: "totp";
+        code: string;
+    } | {
+        type: "recovery_code";
+        recovery_code: string;
+    }) => Promise<AuthenticateResult>;
+}
+/**
+ * Read + mutate the current user's MFA enrollment. Mutators automatically
+ * trigger an SWR revalidation so the surrounding UI reflects the new
+ * status without a manual refresh.
+ */
+export declare function useMfa(): UseMfaResult;

package/dist/hooks/use-mfa.js

@@ -0,0 +1,60 @@
+"use client";
+import { useCallback } from "react";
+import useAuth from "./use-auth";
+import { useMfaStatusSwr } from "./use-mfa-status-swr";
+function requireClient(auth) {
+    if (!auth.ready) {
+        throw new Error("Auth client is not ready yet.");
+    }
+    const client = auth.client.current;
+    if (!client) {
+        throw new Error("Auth client is not available.");
+    }
+    return client;
+}
+/**
+ * Read + mutate the current user's MFA enrollment. Mutators automatically
+ * trigger an SWR revalidation so the surrounding UI reflects the new
+ * status without a manual refresh.
+ */
+export function useMfa() {
+    const auth = useAuth();
+    const { data, isLoading, refresh } = useMfaStatusSwr();
+    const enrollTotp = useCallback(async () => {
+        const client = requireClient(auth);
+        const result = await client.enrollTotp();
+        return result;
+    }, [auth]);
+    const confirmTotpEnrollment = useCallback(async (factor_id, code) => {
+        const client = requireClient(auth);
+        const result = await client.confirmTotpEnrollment(factor_id, code);
+        await refresh();
+        return result;
+    }, [auth, refresh]);
+    const removeFactor = useCallback(async (factor_id, code) => {
+        const client = requireClient(auth);
+        await client.removeFactor(factor_id, code);
+        await refresh();
+    }, [auth, refresh]);
+    const regenerateRecoveryCodes = useCallback(async (code) => {
+        const client = requireClient(auth);
+        const result = await client.regenerateRecoveryCodes(code);
+        await refresh();
+        return result;
+    }, [auth, refresh]);
+    const submitChallenge = useCallback(async (challenge_id, client_app_id, proof) => {
+        const client = requireClient(auth);
+        return await client.verifyMfaChallenge(challenge_id, client_app_id, proof);
+    }, [auth]);
+    return {
+        status: data,
+        isLoading,
+        refresh,
+        enrollTotp,
+        confirmTotpEnrollment,
+        removeFactor,
+        regenerateRecoveryCodes,
+        submitChallenge,
+    };
+}
+//# sourceMappingURL=use-mfa.js.map

package/dist/hooks/use-mfa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-mfa.js","sourceRoot":"","sources":["../../src/hooks/use-mfa.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAQpC,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAwBvD,SAAS,aAAa,CACpB,IAAgC;IAEhC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAEvD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,MAAM,qBAAqB,GAAG,WAAW,CACvC,KAAK,EAAE,SAAiB,EAAE,IAAY,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,IAAI,EAAE,OAAO,CAAC,CAChB,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,SAAiB,EAAE,IAAY,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC,EACD,CAAC,IAAI,EAAE,OAAO,CAAC,CAChB,CAAC;IAEF,MAAM,uBAAuB,GAAG,WAAW,CACzC,KAAK,EAAE,IAAY,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,IAAI,EAAE,OAAO,CAAC,CAChB,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,KAAK,EACH,YAAoB,EACpB,aAAqB,EACrB,KAEoD,EACpD,EAAE;QACF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC,EACD,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,SAAS;QACT,OAAO;QACP,UAAU;QACV,qBAAqB;QACrB,YAAY;QACZ,uBAAuB;QACvB,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@schemavaults/auth-react-provider",
   "description": "React hooks and components to make using the @schemavaults/auth-client-sdk a breeze",
-  "version": "0.10.41",
+  "version": "0.11.0",
   "license": "UNLICENSED",
   "private": false,
   "repository": {
@@ -15,9 +15,9 @@
   "types": "dist/index.d.ts",
   "dependencies": {
     "zod": "3.25.8",
-    "@schemavaults/auth-client-sdk": "0.9.47",
+    "@schemavaults/auth-client-sdk": "0.10.0",
     "@schemavaults/app-definitions": "0.6.23",
-    "@schemavaults/auth-common": "0.10.15",
+    "@schemavaults/auth-common": "0.12.0",
     "cookies-next": "6.1.1",
     "uuid": "11.0.3",
     "swr": "2.3.4"