@schemavaults/auth-react-provider 0.12.2 → 0.13.0

package/dist/hooks/index.d.ts

@@ -28,8 +28,12 @@ export { useOnLogout } from "./use-on-logout";
 export type * from "./use-on-logout";
 export { useMfaStatusSwr } from "./use-mfa-status-swr";
 export type * from "./use-mfa-status-swr";
+export { useMfaFactorStatusSwr, MFA_STATUS_SWR_KEY_PREFIX, } from "./use-mfa-factor-status-swr";
+export type * from "./use-mfa-factor-status-swr";
 export { useMfa } from "./use-mfa";
 export type * from "./use-mfa";
+export { useWebauthnCredentialsSwr, WEBAUTHN_CREDENTIALS_SWR_KEY, } from "./use-webauthn-credentials-swr";
+export type * from "./use-webauthn-credentials-swr";
 export { useMyOrganizations, clearMyOrganizationsCache, } from "./use-my-organizations";
 export type * from "./use-my-organizations";
 export { useRedirectUrlConfiguration } from "./use-redirect-url-configuration";

package/dist/hooks/index.js

@@ -15,7 +15,9 @@ export { useDefaultAccessTokenAudiences } from "./use-default-access-token-audie
 export { useAutoReacquireDefaultAccessTokens } from "./use-auto-reacquire-default-access-tokens";
 export { useOnLogout } from "./use-on-logout";
 export { useMfaStatusSwr } from "./use-mfa-status-swr";
+export { useMfaFactorStatusSwr, MFA_STATUS_SWR_KEY_PREFIX, } from "./use-mfa-factor-status-swr";
 export { useMfa } from "./use-mfa";
+export { useWebauthnCredentialsSwr, WEBAUTHN_CREDENTIALS_SWR_KEY, } from "./use-webauthn-credentials-swr";
 export { useMyOrganizations, clearMyOrganizationsCache, } from "./use-my-organizations";
 export { useRedirectUrlConfiguration } from "./use-redirect-url-configuration";
 //# sourceMappingURL=index.js.map

package/dist/hooks/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGrC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,wCAAwC,EAAE,MAAM,2CAA2C,CAAC;AAGrG,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAG/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAGrF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAEtF,OAAO,EAAE,mCAAmC,EAAE,MAAM,4CAA4C,CAAC;AAEjG,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAGnC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGrC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,wCAAwC,EAAE,MAAM,2CAA2C,CAAC;AAGrG,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAG/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAGrF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAEtF,OAAO,EAAE,mCAAmC,EAAE,MAAM,4CAA4C,CAAC;AAEjG,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EACL,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAGnC,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/hooks/use-mfa-factor-status-swr.d.ts

@@ -0,0 +1,14 @@
+import type { MfaFactorType, MfaFactorStatusResponse } from "@schemavaults/auth-common";
+import { type KeyedMutator } from "swr";
+export declare const MFA_STATUS_SWR_KEY_PREFIX = "/api/user/mfa/status";
+export interface UseMfaFactorStatusSwrResult {
+    data: MfaFactorStatusResponse | null;
+    isLoading: boolean;
+    refresh: KeyedMutator<MfaFactorStatusResponse | null>;
+}
+/**
+ * Loads the current user's MFA enrollment status for a single factor type
+ * from /api/user/mfa/status/[factor_type]. Returns null when the user is
+ * unauthenticated.
+ */
+export declare function useMfaFactorStatusSwr(factor_type: MfaFactorType): UseMfaFactorStatusSwrResult;

package/dist/hooks/use-mfa-factor-status-swr.js

@@ -0,0 +1,36 @@
+"use client";
+import useSWR from "swr";
+import useAuth from "./use-auth";
+import useCurrentUser from "./use-current-user";
+const REFRESH_INTERVAL_MS = 60_000;
+const DEDUPING_INTERVAL_MS = 15_000;
+// Shared with useMfaStatusSwr so a single global mutate() over this prefix
+// revalidates both the aggregate status and every per-factor-type status.
+export const MFA_STATUS_SWR_KEY_PREFIX = "/api/user/mfa/status";
+/**
+ * Loads the current user's MFA enrollment status for a single factor type
+ * from /api/user/mfa/status/[factor_type]. Returns null when the user is
+ * unauthenticated.
+ */
+export function useMfaFactorStatusSwr(factor_type) {
+    const auth = useAuth();
+    const inMemoryUser = useCurrentUser();
+    const clientRef = auth.ready ? auth.client : null;
+    const enabled = !!(auth.ready && clientRef?.current && inMemoryUser);
+    const { data, isLoading, mutate } = useSWR(enabled ? `${MFA_STATUS_SWR_KEY_PREFIX}/${factor_type}` : null, async () => {
+        const authClient = clientRef?.current ?? null;
+        if (!authClient)
+            return null;
+        return await authClient.getMfaStatusForFactorType(factor_type);
+    }, {
+        refreshInterval: REFRESH_INTERVAL_MS,
+        dedupingInterval: DEDUPING_INTERVAL_MS,
+        revalidateOnFocus: true,
+    });
+    return {
+        data: data ?? null,
+        isLoading,
+        refresh: mutate,
+    };
+}
+//# sourceMappingURL=use-mfa-factor-status-swr.js.map

package/dist/hooks/use-mfa-factor-status-swr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-mfa-factor-status-swr.js","sourceRoot":"","sources":["../../src/hooks/use-mfa-factor-status-swr.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAOb,OAAO,MAA6B,MAAM,KAAK,CAAC;AAChD,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,cAAc,MAAM,0BAA0B,CAAC;AAEtD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAQhE;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAA0B;IAE1B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,OAAO,IAAI,YAAY,CAAC,CAAC;IAErE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CACxC,OAAO,CAAC,CAAC,CAAC,GAAG,yBAAyB,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAC9D,KAAK,IAA6C,EAAE;QAClD,MAAM,UAAU,GACd,SAAS,EAAE,OAAO,IAAI,IAAI,CAAC;QAC7B,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,OAAO,MAAM,UAAU,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC;IACjE,CAAC,EACD;QACE,eAAe,EAAE,mBAAmB;QACpC,gBAAgB,EAAE,oBAAoB;QACtC,iBAAiB,EAAE,IAAI;KACxB,CACF,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,IAAI,IAAI,IAAI;QAClB,SAAS;QACT,OAAO,EAAE,MAAM;KAChB,CAAC;AACJ,CAAC"}

package/dist/hooks/use-mfa.d.ts

@@ -1,4 +1,4 @@
-import type { MfaStatusResponse, MfaEnrollResponse, MfaVerifyEnrollmentResponse, AuthenticateResult } from "@schemavaults/auth-common";
+import type { MfaStatusResponse, MfaEnrollResponse, MfaVerifyEnrollmentResponse, AuthenticateResult, MfaProof, WebauthnEnrollOptionsResponse, WebauthnAuthenticationOptionsResponse, WebauthnRegistrationResponse } from "@schemavaults/auth-common";
 export interface UseMfaResult {
     status: MfaStatusResponse | null;
     isLoading: boolean;
@@ -6,14 +6,13 @@ export interface UseMfaResult {
     enrollTotp: () => Promise<MfaEnrollResponse>;
     confirmTotpEnrollment: (factor_id: string, code: string) => Promise<MfaVerifyEnrollmentResponse>;
     removeFactor: (factor_id: string, code: string) => Promise<void>;
-    regenerateRecoveryCodes: (code: string) => Promise<MfaVerifyEnrollmentResponse>;
-    submitChallenge: (challenge_id: string, client_app_id: string, proof: {
-        type: "totp";
-        code: string;
-    } | {
-        type: "recovery_code";
-        recovery_code: string;
-    }) => Promise<AuthenticateResult>;
+    regenerateRecoveryCodes: (factor_id: string, code: string) => Promise<MfaVerifyEnrollmentResponse>;
+    submitChallenge: (challenge_id: string, client_app_id: string, proof: MfaProof) => Promise<AuthenticateResult>;
+    beginWebauthnEnrollment: () => Promise<WebauthnEnrollOptionsResponse>;
+    confirmWebauthnEnrollment: (factor_id: string, attestation: WebauthnRegistrationResponse, label?: string) => Promise<MfaVerifyEnrollmentResponse>;
+    removeWebauthnFactor: (factor_id: string, proof: MfaProof) => Promise<void>;
+    getWebauthnStepUpOptions: () => Promise<WebauthnAuthenticationOptionsResponse>;
+    getWebauthnAuthenticationOptions: (challenge_id: string, client_app_id: string) => Promise<WebauthnAuthenticationOptionsResponse>;
 }
 /**
  * Read + mutate the current user's MFA enrollment. Mutators automatically

package/dist/hooks/use-mfa.js

@@ -1,7 +1,9 @@
 "use client";
 import { useCallback } from "react";
+import { useSWRConfig } from "swr";
 import useAuth from "./use-auth";
 import { useMfaStatusSwr } from "./use-mfa-status-swr";
+import { MFA_STATUS_SWR_KEY_PREFIX } from "./use-mfa-factor-status-swr";
 function requireClient(auth) {
     if (!auth.ready) {
         throw new Error("Auth client is not ready yet.");
@@ -20,6 +22,12 @@ function requireClient(auth) {
 export function useMfa() {
     const auth = useAuth();
     const { data, isLoading, refresh } = useMfaStatusSwr();
+    const { mutate: globalMutate } = useSWRConfig();
+    // Revalidate the aggregate status AND every per-factor-type status
+    // (e.g. /api/user/mfa/status/totp) so all MFA hooks reflect a mutation.
+    const refreshAllMfaStatus = useCallback(async () => {
+        await globalMutate((key) => typeof key === "string" && key.startsWith(MFA_STATUS_SWR_KEY_PREFIX));
+    }, [globalMutate]);
     const enrollTotp = useCallback(async () => {
         const client = requireClient(auth);
         const result = await client.enrollTotp();
@@ -28,24 +36,47 @@ export function useMfa() {
     const confirmTotpEnrollment = useCallback(async (factor_id, code) => {
         const client = requireClient(auth);
         const result = await client.confirmTotpEnrollment(factor_id, code);
-        await refresh();
+        await refreshAllMfaStatus();
         return result;
-    }, [auth, refresh]);
+    }, [auth, refreshAllMfaStatus]);
     const removeFactor = useCallback(async (factor_id, code) => {
         const client = requireClient(auth);
         await client.removeFactor(factor_id, code);
-        await refresh();
-    }, [auth, refresh]);
-    const regenerateRecoveryCodes = useCallback(async (code) => {
+        await refreshAllMfaStatus();
+    }, [auth, refreshAllMfaStatus]);
+    const regenerateRecoveryCodes = useCallback(async (factor_id, code) => {
         const client = requireClient(auth);
-        const result = await client.regenerateRecoveryCodes(code);
-        await refresh();
+        const result = await client.regenerateRecoveryCodes(factor_id, code);
+        await refreshAllMfaStatus();
         return result;
-    }, [auth, refresh]);
+    }, [auth, refreshAllMfaStatus]);
     const submitChallenge = useCallback(async (challenge_id, client_app_id, proof) => {
         const client = requireClient(auth);
         return await client.verifyMfaChallenge(challenge_id, client_app_id, proof);
     }, [auth]);
+    const beginWebauthnEnrollment = useCallback(async () => {
+        const client = requireClient(auth);
+        return await client.beginWebauthnEnrollment();
+    }, [auth]);
+    const confirmWebauthnEnrollment = useCallback(async (factor_id, attestation, label) => {
+        const client = requireClient(auth);
+        const result = await client.confirmWebauthnEnrollment(factor_id, attestation, label);
+        await refreshAllMfaStatus();
+        return result;
+    }, [auth, refreshAllMfaStatus]);
+    const removeWebauthnFactor = useCallback(async (factor_id, proof) => {
+        const client = requireClient(auth);
+        await client.removeWebauthnFactor(factor_id, proof);
+        await refreshAllMfaStatus();
+    }, [auth, refreshAllMfaStatus]);
+    const getWebauthnStepUpOptions = useCallback(async () => {
+        const client = requireClient(auth);
+        return await client.getWebauthnStepUpOptions();
+    }, [auth]);
+    const getWebauthnAuthenticationOptions = useCallback(async (challenge_id, client_app_id) => {
+        const client = requireClient(auth);
+        return await client.getWebauthnAuthenticationOptions(challenge_id, client_app_id);
+    }, [auth]);
     return {
         status: data,
         isLoading,
@@ -55,6 +86,11 @@ export function useMfa() {
         removeFactor,
         regenerateRecoveryCodes,
         submitChallenge,
+        beginWebauthnEnrollment,
+        confirmWebauthnEnrollment,
+        removeWebauthnFactor,
+        getWebauthnStepUpOptions,
+        getWebauthnAuthenticationOptions,
     };
 }
 //# sourceMappingURL=use-mfa.js.map

package/dist/hooks/use-mfa.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-mfa.js","sourceRoot":"","sources":["../../src/hooks/use-mfa.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAQpC,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAwBvD,SAAS,aAAa,CACpB,IAAgC;IAEhC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAEvD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,MAAM,qBAAqB,GAAG,WAAW,CACvC,KAAK,EAAE,SAAiB,EAAE,IAAY,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,IAAI,EAAE,OAAO,CAAC,CAChB,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,SAAiB,EAAE,IAAY,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC,EACD,CAAC,IAAI,EAAE,OAAO,CAAC,CAChB,CAAC;IAEF,MAAM,uBAAuB,GAAG,WAAW,CACzC,KAAK,EAAE,IAAY,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,IAAI,EAAE,OAAO,CAAC,CAChB,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,KAAK,EACH,YAAoB,EACpB,aAAqB,EACrB,KAEoD,EACpD,EAAE;QACF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC,EACD,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,SAAS;QACT,OAAO;QACP,UAAU;QACV,qBAAqB;QACrB,YAAY;QACZ,uBAAuB;QACvB,eAAe;KAChB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"use-mfa.js","sourceRoot":"","sources":["../../src/hooks/use-mfa.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAYpC,OAAO,EAAE,YAAY,EAAE,MAAM,KAAK,CAAC;AACnC,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAmCxE,SAAS,aAAa,CACpB,IAAgC;IAEhC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IACvD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC;IAEhD,mEAAmE;IACnE,wEAAwE;IACxE,MAAM,mBAAmB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACjD,MAAM,YAAY,CAChB,CAAC,GAAG,EAAE,EAAE,CACN,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,CACvE,CAAC;IACJ,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,MAAM,qBAAqB,GAAG,WAAW,CACvC,KAAK,EAAE,SAAiB,EAAE,IAAY,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,mBAAmB,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAC5B,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,SAAiB,EAAE,IAAY,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC,EACD,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAC5B,CAAC;IAEF,MAAM,uBAAuB,GAAG,WAAW,CACzC,KAAK,EAAE,SAAiB,EAAE,IAAY,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrE,MAAM,mBAAmB,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAC5B,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,KAAK,EAAE,YAAoB,EAAE,aAAqB,EAAE,KAAe,EAAE,EAAE;QACrE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC,EACD,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,MAAM,uBAAuB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,MAAM,MAAM,CAAC,uBAAuB,EAAE,CAAC;IAChD,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,MAAM,yBAAyB,GAAG,WAAW,CAC3C,KAAK,EACH,SAAiB,EACjB,WAAyC,EACzC,KAAc,EACd,EAAE;QACF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,yBAAyB,CACnD,SAAS,EACT,WAAW,EACX,KAAK,CACN,CAAC;QACF,MAAM,mBAAmB,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAC5B,CAAC;IAEF,MAAM,oBAAoB,GAAG,WAAW,CACtC,KAAK,EAAE,SAAiB,EAAE,KAAe,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC,EACD,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAC5B,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,MAAM,MAAM,CAAC,wBAAwB,EAAE,CAAC;IACjD,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,MAAM,gCAAgC,GAAG,WAAW,CAClD,KAAK,EAAE,YAAoB,EAAE,aAAqB,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,MAAM,MAAM,CAAC,gCAAgC,CAClD,YAAY,EACZ,aAAa,CACd,CAAC;IACJ,CAAC,EACD,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,SAAS;QACT,OAAO;QACP,UAAU;QACV,qBAAqB;QACrB,YAAY;QACZ,uBAAuB;QACvB,eAAe;QACf,uBAAuB;QACvB,yBAAyB;QACzB,oBAAoB;QACpB,wBAAwB;QACxB,gCAAgC;KACjC,CAAC;AACJ,CAAC"}

package/dist/hooks/use-webauthn-credentials-swr.d.ts

@@ -0,0 +1,13 @@
+import type { WebauthnCredentialSummary } from "@schemavaults/auth-common";
+import { type KeyedMutator } from "swr";
+export declare const WEBAUTHN_CREDENTIALS_SWR_KEY = "/api/user/mfa/status/webauthn/credentials";
+export interface UseWebauthnCredentialsSwrResult {
+    data: WebauthnCredentialSummary[] | null;
+    isLoading: boolean;
+    refresh: KeyedMutator<WebauthnCredentialSummary[] | null>;
+}
+/**
+ * Loads the current user's enrolled passkeys from /api/user/mfa/webauthn.
+ * Returns null when the user is unauthenticated.
+ */
+export declare function useWebauthnCredentialsSwr(): UseWebauthnCredentialsSwrResult;

package/dist/hooks/use-webauthn-credentials-swr.js

@@ -0,0 +1,35 @@
+"use client";
+import useSWR from "swr";
+import useAuth from "./use-auth";
+import useCurrentUser from "./use-current-user";
+import { MFA_STATUS_SWR_KEY_PREFIX } from "./use-mfa-factor-status-swr";
+const DEDUPING_INTERVAL_MS = 15_000;
+// Share the MFA status key prefix so the existing refreshAllMfaStatus()
+// invalidation in useMfa() also revalidates the passkey list after an
+// enroll/remove mutation.
+export const WEBAUTHN_CREDENTIALS_SWR_KEY = `${MFA_STATUS_SWR_KEY_PREFIX}/webauthn/credentials`;
+/**
+ * Loads the current user's enrolled passkeys from /api/user/mfa/webauthn.
+ * Returns null when the user is unauthenticated.
+ */
+export function useWebauthnCredentialsSwr() {
+    const auth = useAuth();
+    const inMemoryUser = useCurrentUser();
+    const clientRef = auth.ready ? auth.client : null;
+    const enabled = !!(auth.ready && clientRef?.current && inMemoryUser);
+    const { data, isLoading, mutate } = useSWR(enabled ? WEBAUTHN_CREDENTIALS_SWR_KEY : null, async () => {
+        const authClient = clientRef?.current ?? null;
+        if (!authClient)
+            return null;
+        return await authClient.listWebauthnCredentials();
+    }, {
+        dedupingInterval: DEDUPING_INTERVAL_MS,
+        revalidateOnFocus: true,
+    });
+    return {
+        data: data ?? null,
+        isLoading,
+        refresh: mutate,
+    };
+}
+//# sourceMappingURL=use-webauthn-credentials-swr.js.map

package/dist/hooks/use-webauthn-credentials-swr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-webauthn-credentials-swr.js","sourceRoot":"","sources":["../../src/hooks/use-webauthn-credentials-swr.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAIb,OAAO,MAA6B,MAAM,KAAK,CAAC;AAChD,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,cAAc,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,wEAAwE;AACxE,sEAAsE;AACtE,0BAA0B;AAC1B,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,yBAAyB,uBAAuB,CAAC;AAQhG;;;GAGG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,OAAO,IAAI,YAAY,CAAC,CAAC;IAErE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAGxC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,EAC7C,KAAK,IAAiD,EAAE;QACtD,MAAM,UAAU,GACd,SAAS,EAAE,OAAO,IAAI,IAAI,CAAC;QAC7B,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,OAAO,MAAM,UAAU,CAAC,uBAAuB,EAAE,CAAC;IACpD,CAAC,EACD;QACE,gBAAgB,EAAE,oBAAoB;QACtC,iBAAiB,EAAE,IAAI;KACxB,CACF,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,IAAI,IAAI,IAAI;QAClB,SAAS;QACT,OAAO,EAAE,MAAM;KAChB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@schemavaults/auth-react-provider",
   "description": "React hooks and components to make using the @schemavaults/auth-client-sdk a breeze",
-  "version": "0.12.2",
+  "version": "0.13.0",
   "license": "UNLICENSED",
   "private": false,
   "repository": {
@@ -15,9 +15,9 @@
   "types": "dist/index.d.ts",
   "dependencies": {
     "zod": "3.25.8",
-    "@schemavaults/auth-client-sdk": "0.10.18",
+    "@schemavaults/auth-client-sdk": "0.11.0",
     "@schemavaults/app-definitions": "0.7.1",
-    "@schemavaults/auth-common": "0.12.10",
+    "@schemavaults/auth-common": "0.13.0",
     "cookies-next": "6.1.1",
     "uuid": "11.0.3",
     "swr": "2.3.4"