@stackframe/js 2.8.12 → 2.8.16

package/dist/esm/lib/stack-app/apps/implementations/client-app-impl.js

@@ -13,16 +13,16 @@ import { deindent, mergeScopeStrings } from "@stackframe/stack-shared/dist/utils
 import { getRelativePart, isRelative } from "@stackframe/stack-shared/dist/utils/urls";
 import { generateUuid } from "@stackframe/stack-shared/dist/utils/uuids";
 import * as cookie from "cookie";
-import { constructRedirectUrl } from "../../../../utils/url";
-import { addNewOAuthProviderOrScope, callOAuthCallback, signInWithOAuth } from "../../../auth";
-import { createCookieHelper, createPlaceholderCookieHelper, deleteCookieClient, getCookieClient, setOrDeleteCookie, setOrDeleteCookieClient } from "../../../cookie";
-import { apiKeyCreationOptionsToCrud } from "../../api-keys";
-import { stackAppInternalsSymbol } from "../../common";
-import { contactChannelCreateOptionsToCrud, contactChannelUpdateOptionsToCrud } from "../../contact-channels";
-import { adminProjectCreateOptionsToCrud } from "../../projects";
-import { teamCreateOptionsToCrud, teamUpdateOptionsToCrud } from "../../teams";
-import { userUpdateOptionsToCrud } from "../../users";
-import { clientVersion, createCache, createCacheBySession, createEmptyTokenStore, getBaseUrl, getDefaultExtraRequestHeaders, getDefaultProjectId, getDefaultPublishableClientKey, getUrls } from "./common";
+import { constructRedirectUrl } from "../../../../utils/url.js";
+import { addNewOAuthProviderOrScope, callOAuthCallback, signInWithOAuth } from "../../../auth.js";
+import { createCookieHelper, createPlaceholderCookieHelper, deleteCookieClient, getCookieClient, setOrDeleteCookie, setOrDeleteCookieClient } from "../../../cookie.js";
+import { apiKeyCreationOptionsToCrud } from "../../api-keys/index.js";
+import { stackAppInternalsSymbol } from "../../common.js";
+import { contactChannelCreateOptionsToCrud, contactChannelUpdateOptionsToCrud } from "../../contact-channels/index.js";
+import { adminProjectCreateOptionsToCrud } from "../../projects/index.js";
+import { teamCreateOptionsToCrud, teamUpdateOptionsToCrud } from "../../teams/index.js";
+import { userUpdateOptionsToCrud } from "../../users/index.js";
+import { clientVersion, createCache, createCacheBySession, createEmptyTokenStore, getBaseUrl, getDefaultExtraRequestHeaders, getDefaultProjectId, getDefaultPublishableClientKey, getUrls } from "./common.js";
 var isReactServer = false;
 var process = globalThis.process ?? { env: {} };
 var allClientApps = /* @__PURE__ */ new Map();
@@ -950,6 +950,9 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
   async redirectToTeamInvitation(options) {
     return await this._redirectToHandler("teamInvitation", options);
   }
+  async redirectToMfa(options) {
+    return await this._redirectToHandler("mfa", options);
+  }
   async sendForgotPasswordEmail(email, options) {
     return await this._interface.sendForgotPasswordEmail(email, options?.callbackUrl ?? constructRedirectUrl(this.urls.passwordReset, "callbackUrl"));
   }
@@ -1049,19 +1052,14 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
     );
   }
   /**
-   * @deprecated
-   * TODO remove
+   * Handles MFA verification by redirecting to the OTP page
    */
   async _experimentalMfa(error, session) {
-    const otp = prompt("Please enter the six-digit TOTP code from your authenticator app.");
-    if (!otp) {
-      throw new KnownErrors.InvalidTotpCode();
+    if (typeof window !== "undefined") {
+      window.sessionStorage.setItem("stack_mfa_attempt_code", error.details?.attempt_code ?? throwErr("attempt code missing"));
     }
-    return await this._interface.totpMfa(
-      error.details?.attempt_code ?? throwErr("attempt code missing"),
-      otp,
-      session
-    );
+    await this.redirectToMfa();
+    throw new StackAssertionError("we should have redirected in redirectToMfa()");
   }
   /**
    * @deprecated
@@ -1245,6 +1243,39 @@ ${url}`);
     }
     return Result.error(new KnownErrors.CliAuthError("Timed out waiting for CLI authentication."));
   }
+  /*
+   * Completes the MFA sign-in process by verifying the provided OTP code
+   * @param totp The TOTP (Time-based One-Time Password) provided by the user
+   * @param code The Attempt code provided by the user
+   * @param options Additional options for the sign-in process
+   * @returns A Result indicating success or failure
+   */
+  async signInWithMfa(totp, code, options) {
+    this._ensurePersistentTokenStore();
+    let result;
+    try {
+      result = await this._catchMfaRequiredError(async () => {
+        return await this._interface.signInWithMfa(totp, code);
+      });
+    } catch (e) {
+      if (e instanceof KnownErrors.InvalidTotpCode) {
+        return Result.error(e);
+      }
+      throw e;
+    }
+    if (result.status === "ok") {
+      await this._signInToAccountWithTokens(result.data);
+      if (!options?.noRedirect) {
+        if (result.data.newUser) {
+          await this.redirectToAfterSignUp({ replace: true });
+        } else {
+          await this.redirectToAfterSignIn({ replace: true });
+        }
+      }
+      return Result.ok(void 0);
+    }
+    return Result.error(result.error);
+  }
   async signInWithPasskey() {
     this._ensurePersistentTokenStore();
     const session = await this._getSession();