@stokr/components-library 3.0.66 → 3.0.68

package/README.md

@@ -1,179 +1,179 @@
-# @stokr/components-library
-
-React UI library for STOKR apps: modals, forms, navigation, tables, auth context, styles.
-
-## Contents
-
-- [Quick start](#quick-start) — install, router, `AuthProvider`, styles
-- [Configuration reference](#runtime-config) — `config` keys & helpers
-- [AuthProvider & AuthContext](#authprovider-optional-props)
-- [Troubleshooting](#troubleshooting)
-- [Development](#development--publishing)
-
----
-
-## Quick start
-
-**Install**
-
-```bash
-npm install @stokr/components-library
-npm install react react-dom styled-components react-router-dom
-```
-
-Peers: React 18+/19+, styled-components 6.x, react-router-dom 6.x when you use routing-driven components (`HeaderHo`, `MainMenu`, …).
-
-**1. Router** — Navigation helpers need a React Router:
-
-```jsx
-import { BrowserRouter } from 'react-router-dom'
-import { RouterWrapper } from '@stokr/components-library'
-
-// Normal app
-root.render(
-  <BrowserRouter>
-    <App />
-  </BrowserRouter>,
-)
-
-// Outside a Router: RouterWrapper wraps children in BrowserRouter once.
-// Inside an existing Router: it renders children only (no nested BrowserRouter).
-root.render(
-  <RouterWrapper>
-    <App />
-  </RouterWrapper>,
-)
-```
-
-**2. Auth & runtime config (required when consuming via npm)** — Vite freezes `import.meta.env` inside pre-built deps, so push your `.env` at runtime via `config`:
-
-```jsx
-import { AuthProvider } from '@stokr/components-library'
-
-export default function App() {
-  return (
-    <AuthProvider
-      config={{
-        apiUrl: import.meta.env.VITE_API_URL,
-        baseUrlPublic: import.meta.env.VITE_BASE_URL_PUBLIC,
-        cookieDomain: import.meta.env.VITE_COOKIE_DOMAIN,
-        websiteDomain: import.meta.env.VITE_WEBSITE_DOMAIN,
-        photoApiUrl: import.meta.env.VITE_PHOTO_API_URL,
-        onboardingUrl: import.meta.env.VITE_ONBOARDING_URL,
-        dashboardUrl: import.meta.env.VITE_DASHBOARD_URL,
-        adminUrl: import.meta.env.VITE_ADMIN_URL,
-        registerUrl: import.meta.env.VITE_REGISTER_URL,
-        firebase: {
-          apiKey: import.meta.env.VITE_FIREBASE_API_KEY,
-          authDomain: import.meta.env.VITE_FIREBASE_AUTH_DOMAIN,
-          projectId: import.meta.env.VITE_FIREBASE_PROJECT_ID,
-          storageBucket: import.meta.env.VITE_FIREBASE_STORAGE_BUCKET,
-          messagingSenderId: import.meta.env.VITE_FIREBASE_MESSAGING_SENDER_ID,
-          appId: import.meta.env.VITE_FIREBASE_APP_ID,
-          measurementId: import.meta.env.VITE_FIREBASE_MEASUREMENT_ID,
-        },
-      }}>
-      {/* app */}
-    </AuthProvider>
-  )
-}
-```
-
-**3. Earlier config** (e.g. analytics before mount): `import { configure } from '@stokr/components-library'` with the same shape as `config`.
-
-**4. Icons / fonts** — Optional: `<IoniconsStyles />` at root, or rely on lazy injection when a component uses icons; for Layout / Open Sans: `import '@stokr/components-library/styles.css'`.
-
-**5. Imports** — `import { ConfirmModal, Button, … } from '@stokr/components-library'`.
-
-Full URL env example:
-
-```bash
-VITE_WEBSITE_DOMAIN=example.com
-VITE_ONBOARDING_URL=https://signup.example.com
-VITE_DASHBOARD_URL=https://dashboard.example.com
-VITE_ADMIN_URL=https://admin.example.com
-VITE_REGISTER_URL=https://example.com/signup
-```
-
----
-
-## Configuration reference {#runtime-config}
-
-| `config` key      | Typical `VITE_*`           | Role                                      |
-| ----------------- | -------------------------- | ----------------------------------------- |
-| `apiUrl`          | `VITE_API_URL`             | Authenticated REST base                   |
-| `baseUrlPublic`   | `VITE_BASE_URL_PUBLIC`     | Public API base                           |
-| `cookieDomain`    | `VITE_COOKIE_DOMAIN`       | Auth cookie `domain` attribute            |
-| `websiteDomain`   | `VITE_WEBSITE_DOMAIN`      | Bare host → links / `getPlatformURL()`    |
-| `photoApiUrl`     | `VITE_PHOTO_API_URL`       | Avatars / media                           |
-| `onboardingUrl`   | `VITE_ONBOARDING_URL`      | Full signup/sign-in app URL               |
-| `dashboardUrl`    | `VITE_DASHBOARD_URL`       | Investor dashboard URL                    |
-| `adminUrl`        | `VITE_ADMIN_URL`           | Venture / admin dashboard URL             |
-| `registerUrl`     | `VITE_REGISTER_URL`        | Public registration entry                 |
-| `firebase`        | `VITE_FIREBASE_*`          | Firebase client config                    |
-
-**Helpers:** `getConfig('…')` for any key above; `getPlatformURL()` → `https://{websiteDomain}`; `getAnalyticsIngestUrl()`, `getBackofficeAppUrl(path)`; **`getFooterGroups()`** replaces static footer URL lists.
-
-**Auth-only HTTP:** `authenticationApi.post(segment, body)` for `auth/*`; default axios stays the main API client after login.
-
-Missing overrides may trigger a **one-time** warning listing unresolved `VITE_*` expectations.
-
----
-
-## AuthProvider & AuthContext {#authprovider-optional-props}
-
-`AuthProvider` is wrapped with **`withRouter`** — mount it inside a **`Router`** so redirects work.
-
-### Optional provider props
-
-- **`inactivityTimeMs`** — Idle timeout before auto-logout + session modal (default 5 min).
-- **`inactivityWarningBeforeMs`** — How long before that timeout to show the **“session about to expire”** warning modal (default 30 s). See [Inactivity auto-logout](#inactivity-auto-logout).
-- **`accessTokenExpiryMs`** — Cookie TTL when **`Auth.setAccessToken`** runs (default **`DEFAULT_TOKEN_EXPIRY_MS`** = 1 h); not extended by **`getUser`** alone.
-- **`hideInactivityModal`** — Suppress both built-in inactivity modals (warning + session expired).
-- **`onSessionExpiredLoginClick`** — Called when the user clicks **Log in** on the session-expired modal.
-- **`customValidateGetUser(user)`** — Hook after **`user/get`** succeeds (see `src/context/AuthContext.js`).
-
-### Inactivity auto-logout {#inactivity-auto-logout}
-
-When a user is logged in, `AuthProvider` resets an idle timer on mouse, keyboard, click, scroll, and touch events.
-
-1. **Warning modal** — Shown **`inactivityWarningBeforeMs`** before the idle deadline (default: 30 s before the 5 min timeout). The user can click **To continue, press here** to reset the idle timer, or close the modal (logout still happens at the deadline). Any activity also resets the timer and closes the warning.
-2. **Session expired modal** — Shown when the idle deadline is reached (existing behaviour). The warning modal closes automatically at the same moment.
-
-Neither modal is shown when the user is not logged in. Both are skipped when **`hideInactivityModal`** is set.
-
-**Storybook:** `Authentication / Auto-logout (inactivity)` → **With warning modal** (20 s idle, warning at 10 s).
-
-### AuthContext consumer {#authcontext-usecontext}
-
-`import { AuthContext } from '…'` then `useContext(AuthContext)`.
-
-- **Invalid Firebase guard:** value is **`{ user: null, isFetchingUser: false }`** only (no methods).
-- **State (grouped):** `user` / `firebaseUser`, `isFetchingUser`, `avatar`; MFA (`waitingFor2fa`, `userMfaEnrollment`, `firebaseError`); verify-email (`verifyEmailError`, `isVerifyingEmail`); session UX (`loggedOutDueToInactivity`, `loggedOutDueToCookieExpiry`, `sessionExpiryPendingReason`, `showInactivityWarningModal`).
-- **Actions (grouped):** `userRef`, `loginUser`, `logoutUser`, `getUser`, `setUser`, `updateUser`, `refreshIdToken`; `checkUserIsValid`, `checkTokenIsValid`; `uploadPhoto`, `deletePhoto`, `checkUserPhoto`; MFA enroll / verify / unenroll + `reset2faFlow`; subscription/onboarding helpers; password & email (`handleResetPassword`, `handleVerifyEmail`, `requestUpdateEmail`, …); wallets / PoA (`uploaProofOfAddress` keeps the source spelling); **`dismissSessionExpiryModal`**, **`extendSessionFromInactivityWarning`**, **`dismissInactivityWarningModal`**.
-
-Use **`AuthConsumer`** for the render-prop pattern.
-
----
-
-## Troubleshooting {#troubleshooting}
-
-**`useNavigate` / Router**
-
-Add `BrowserRouter` (or **`RouterWrapper`** from this package where the shell has no router). Install `react-router-dom`.
-
-**Invalid hook call / duplicated React**
-
-Dedupe peers in Vite: `resolve: { dedupe: ['react', 'react-dom', 'styled-components'] }`.
-
----
-
-## Development {#development--publishing}
-
-| Command              | Meaning                          |
-| -------------------- | -------------------------------- |
-| `npm run storybook`  | Local docs / stories             |
-| `npm run build:dist` | Library build + static copy      |
-| `npm run pub`        | Build then publish (`npm login`) |
-
-Release: changelog entry → `npm version` → `npm run pub`. Details: [CHANGELOG.md](CHANGELOG.md).
+# @stokr/components-library
+
+React UI library for STOKR apps: modals, forms, navigation, tables, auth context, styles.
+
+## Contents
+
+- [Quick start](#quick-start) — install, router, `AuthProvider`, styles
+- [Configuration reference](#runtime-config) — `config` keys & helpers
+- [AuthProvider & AuthContext](#authprovider-optional-props)
+- [Troubleshooting](#troubleshooting)
+- [Development](#development--publishing)
+
+---
+
+## Quick start
+
+**Install**
+
+```bash
+npm install @stokr/components-library
+npm install react react-dom styled-components react-router-dom
+```
+
+Peers: React 18+/19+, styled-components 6.x, react-router-dom 6.x when you use routing-driven components (`HeaderHo`, `MainMenu`, …).
+
+**1. Router** — Navigation helpers need a React Router:
+
+```jsx
+import { BrowserRouter } from 'react-router-dom'
+import { RouterWrapper } from '@stokr/components-library'
+
+// Normal app
+root.render(
+  <BrowserRouter>
+    <App />
+  </BrowserRouter>,
+)
+
+// Outside a Router: RouterWrapper wraps children in BrowserRouter once.
+// Inside an existing Router: it renders children only (no nested BrowserRouter).
+root.render(
+  <RouterWrapper>
+    <App />
+  </RouterWrapper>,
+)
+```
+
+**2. Auth & runtime config (required when consuming via npm)** — Vite freezes `import.meta.env` inside pre-built deps, so push your `.env` at runtime via `config`:
+
+```jsx
+import { AuthProvider } from '@stokr/components-library'
+
+export default function App() {
+  return (
+    <AuthProvider
+      config={{
+        apiUrl: import.meta.env.VITE_API_URL,
+        baseUrlPublic: import.meta.env.VITE_BASE_URL_PUBLIC,
+        cookieDomain: import.meta.env.VITE_COOKIE_DOMAIN,
+        websiteDomain: import.meta.env.VITE_WEBSITE_DOMAIN,
+        photoApiUrl: import.meta.env.VITE_PHOTO_API_URL,
+        onboardingUrl: import.meta.env.VITE_ONBOARDING_URL,
+        dashboardUrl: import.meta.env.VITE_DASHBOARD_URL,
+        adminUrl: import.meta.env.VITE_ADMIN_URL,
+        registerUrl: import.meta.env.VITE_REGISTER_URL,
+        firebase: {
+          apiKey: import.meta.env.VITE_FIREBASE_API_KEY,
+          authDomain: import.meta.env.VITE_FIREBASE_AUTH_DOMAIN,
+          projectId: import.meta.env.VITE_FIREBASE_PROJECT_ID,
+          storageBucket: import.meta.env.VITE_FIREBASE_STORAGE_BUCKET,
+          messagingSenderId: import.meta.env.VITE_FIREBASE_MESSAGING_SENDER_ID,
+          appId: import.meta.env.VITE_FIREBASE_APP_ID,
+          measurementId: import.meta.env.VITE_FIREBASE_MEASUREMENT_ID,
+        },
+      }}>
+      {/* app */}
+    </AuthProvider>
+  )
+}
+```
+
+**3. Earlier config** (e.g. analytics before mount): `import { configure } from '@stokr/components-library'` with the same shape as `config`.
+
+**4. Icons / fonts** — Optional: `<IoniconsStyles />` at root, or rely on lazy injection when a component uses icons; for Layout / Open Sans: `import '@stokr/components-library/styles.css'`.
+
+**5. Imports** — `import { ConfirmModal, Button, … } from '@stokr/components-library'`.
+
+Full URL env example:
+
+```bash
+VITE_WEBSITE_DOMAIN=example.com
+VITE_ONBOARDING_URL=https://signup.example.com
+VITE_DASHBOARD_URL=https://dashboard.example.com
+VITE_ADMIN_URL=https://admin.example.com
+VITE_REGISTER_URL=https://example.com/signup
+```
+
+---
+
+## Configuration reference {#runtime-config}
+
+| `config` key      | Typical `VITE_*`           | Role                                      |
+| ----------------- | -------------------------- | ----------------------------------------- |
+| `apiUrl`          | `VITE_API_URL`             | Authenticated REST base                   |
+| `baseUrlPublic`   | `VITE_BASE_URL_PUBLIC`     | Public API base                           |
+| `cookieDomain`    | `VITE_COOKIE_DOMAIN`       | Auth cookie `domain` attribute            |
+| `websiteDomain`   | `VITE_WEBSITE_DOMAIN`      | Bare host → links / `getPlatformURL()`    |
+| `photoApiUrl`     | `VITE_PHOTO_API_URL`       | Avatars / media                           |
+| `onboardingUrl`   | `VITE_ONBOARDING_URL`      | Full signup/sign-in app URL               |
+| `dashboardUrl`    | `VITE_DASHBOARD_URL`       | Investor dashboard URL                    |
+| `adminUrl`        | `VITE_ADMIN_URL`           | Venture / admin dashboard URL             |
+| `registerUrl`     | `VITE_REGISTER_URL`        | Public registration entry                 |
+| `firebase`        | `VITE_FIREBASE_*`          | Firebase client config                    |
+
+**Helpers:** `getConfig('…')` for any key above; `getPlatformURL()` → `https://{websiteDomain}`; `getAnalyticsIngestUrl()`, `getBackofficeAppUrl(path)`; **`getFooterGroups()`** replaces static footer URL lists.
+
+**Auth-only HTTP:** `authenticationApi.post(segment, body)` for `auth/*`; default axios stays the main API client after login.
+
+Missing overrides may trigger a **one-time** warning listing unresolved `VITE_*` expectations.
+
+---
+
+## AuthProvider & AuthContext {#authprovider-optional-props}
+
+`AuthProvider` is wrapped with **`withRouter`** — mount it inside a **`Router`** so redirects work.
+
+### Optional provider props
+
+- **`inactivityTimeMs`** — Idle timeout before auto-logout + session modal (default 5 min).
+- **`inactivityWarningBeforeMs`** — How long before that timeout to show the **“session about to expire”** warning modal (default 30 s). See [Inactivity auto-logout](#inactivity-auto-logout).
+- **`accessTokenExpiryMs`** — Cookie TTL when **`Auth.setAccessToken`** runs (default **`DEFAULT_TOKEN_EXPIRY_MS`** = 1 h); not extended by **`getUser`** alone.
+- **`hideInactivityModal`** — Suppress both built-in inactivity modals (warning + session expired).
+- **`onSessionExpiredLoginClick`** — Called when the user clicks **Log in** on the session-expired modal.
+- **`customValidateGetUser(user)`** — Hook after **`user/get`** succeeds (see `src/context/AuthContext.js`).
+
+### Inactivity auto-logout {#inactivity-auto-logout}
+
+When a user is logged in, `AuthProvider` resets an idle timer on mouse, keyboard, click, scroll, and touch events.
+
+1. **Warning modal** — Shown **`inactivityWarningBeforeMs`** before the idle deadline (default: 30 s before the 5 min timeout). The user can click **To continue, press here** to reset the idle timer, or close the modal (logout still happens at the deadline). Any activity also resets the timer and closes the warning.
+2. **Session expired modal** — Shown when the idle deadline is reached (existing behaviour). The warning modal closes automatically at the same moment.
+
+Neither modal is shown when the user is not logged in. Both are skipped when **`hideInactivityModal`** is set.
+
+**Storybook:** `Authentication / Auto-logout (inactivity)` → **With warning modal** (20 s idle, warning at 10 s).
+
+### AuthContext consumer {#authcontext-usecontext}
+
+`import { AuthContext } from '…'` then `useContext(AuthContext)`.
+
+- **Invalid Firebase guard:** value is **`{ user: null, isFetchingUser: false }`** only (no methods).
+- **State (grouped):** `user` / `firebaseUser`, `isFetchingUser`, `avatar`; MFA (`waitingFor2fa`, `userMfaEnrollment`, `firebaseError`); verify-email (`verifyEmailError`, `isVerifyingEmail`); session UX (`loggedOutDueToInactivity`, `loggedOutDueToCookieExpiry`, `sessionExpiryPendingReason`, `showInactivityWarningModal`).
+- **Actions (grouped):** `userRef`, `loginUser`, `logoutUser`, `getUser`, `setUser`, `updateUser`, `refreshIdToken`; `checkUserIsValid`, `checkTokenIsValid`; `uploadPhoto`, `deletePhoto`, `checkUserPhoto`; MFA enroll / verify / unenroll + `reset2faFlow`; subscription/onboarding helpers; password & email (`handleResetPassword`, `handleVerifyEmail`, `requestUpdateEmail`, …); wallets / PoA (`uploaProofOfAddress` keeps the source spelling); **`dismissSessionExpiryModal`**, **`extendSessionFromInactivityWarning`**, **`dismissInactivityWarningModal`**.
+
+Use **`AuthConsumer`** for the render-prop pattern.
+
+---
+
+## Troubleshooting {#troubleshooting}
+
+**`useNavigate` / Router**
+
+Add `BrowserRouter` (or **`RouterWrapper`** from this package where the shell has no router). Install `react-router-dom`.
+
+**Invalid hook call / duplicated React**
+
+Dedupe peers in Vite: `resolve: { dedupe: ['react', 'react-dom', 'styled-components'] }`.
+
+---
+
+## Development {#development--publishing}
+
+| Command              | Meaning                          |
+| -------------------- | -------------------------------- |
+| `npm run storybook`  | Local docs / stories             |
+| `npm run build:dist` | Library build + static copy      |
+| `npm run pub`        | Build then publish (`npm login`) |
+
+Release: changelog entry → `npm version` → `npm run pub`. Details: [CHANGELOG.md](CHANGELOG.md).

package/dist/components/2FA/login-with-otp-flow.js

@@ -1,20 +1,29 @@
 import { jsxs, jsx } from "react/jsx-runtime";
-import { useContext, useState, useEffect } from "react";
-import { AuthContext } from "../../context/AuthContext.js";
+import PropTypes from "prop-types";
+import stdin_default$2 from "./EnterCode.js";
+import stdin_default$3 from "./ResetCode.js";
 import { Layout } from "../Layout/Layout.js";
+import { useNavigate } from "react-router-dom";
 import stdin_default$1 from "../LoginModal/LoginModal.js";
-import stdin_default$4 from "../ForgotPasswordModal/ForgotPasswordModal.js";
-import stdin_default$2 from "./EnterCode.js";
+import { AuthContext } from "../../context/AuthContext.js";
 import background from "../../static/images/background3.png.js";
-import stdin_default$3 from "./ResetCode.js";
+import { hasLoggedInSession } from "../../utils/user-identity.js";
 import { authenticationApi } from "../../api/authenticationApi.js";
-import { useNavigate } from "react-router-dom";
 import { getConfig, getPlatformURL } from "../../runtime-config.js";
+import { useContext, useRef, useState, useEffect } from "react";
+import stdin_default$4 from "../ForgotPasswordModal/ForgotPasswordModal.js";
 import { isAccountLockedError, showAccountLockedModal } from "../../utils/show-account-locked-modal.js";
 import { navigateToHref } from "../../routing/navigate-app.js";
-const LoginWithOTP = ({ withBackground, useRelativePathForMenu = false }) => {
+const closedModalsState = {
+  login: false,
+  enter2fa: false,
+  forgot: false,
+  resetCode: false
+};
+const LoginWithOTP = ({ withBackground, useRelativePathForMenu = false, onLoginSuccess }) => {
   const navigate = useNavigate();
-  const { loginUser, waitingFor2fa, firebaseError, loginUserWithTotp, reset2faFlow, logoutUser } = useContext(AuthContext);
+  const { user, loginUser, getUser, waitingFor2fa, firebaseError, loginUserWithTotp, reset2faFlow, logoutUser } = useContext(AuthContext);
+  const loginSuccessHandledRef = useRef(false);
   const [isModalOpen, setIsModalOpen] = useState({
     login: true,
     enter2fa: false,
@@ -31,17 +40,32 @@ const LoginWithOTP = ({ withBackground, useRelativePathForMenu = false }) => {
     message: void 0
   });
   const switchOpenModal = (prevModalId, nextModalId) => {
-    setIsModalOpen({
-      ...isModalOpen,
+    setIsModalOpen((prev) => ({
+      ...prev,
       [prevModalId]: false,
       [nextModalId]: true
-    });
+    }));
   };
   useEffect(() => {
     if (waitingFor2fa) {
-      switchOpenModal("login", "enter2fa");
+      setIsModalOpen((prev) => ({
+        ...prev,
+        login: false,
+        enter2fa: true
+      }));
     }
   }, [waitingFor2fa]);
+  useEffect(() => {
+    if (!hasLoggedInSession(user) || waitingFor2fa) {
+      loginSuccessHandledRef.current = false;
+      return;
+    }
+    setIsModalOpen(closedModalsState);
+    if (onLoginSuccess && !loginSuccessHandledRef.current) {
+      loginSuccessHandledRef.current = true;
+      onLoginSuccess(user);
+    }
+  }, [user, waitingFor2fa, onLoginSuccess]);
   const handleSetPopupSuccess = (popup, message) => {
     setPopupSuccess({ popup, message });
   };
@@ -90,6 +114,8 @@ const LoginWithOTP = ({ withBackground, useRelativePathForMenu = false }) => {
               return;
             }
             await loginUser(email, password);
+            await getUser();
+            clearPopupError();
           } catch (error) {
             const errorMessage = error?.message;
             if (error?.code === "auth/multi-factor-auth-required") {
@@ -145,6 +171,9 @@ const LoginWithOTP = ({ withBackground, useRelativePathForMenu = false }) => {
           setIsActionLoading("enter2fa");
           try {
             await loginUserWithTotp(otpInput, firebaseError);
+            await getUser();
+            clearPopupError();
+            setIsModalOpen(closedModalsState);
           } catch (error) {
             if (error?.code === "auth/invalid-verification-code") {
               handleSetPopupError("enter2fa", "The verification code is not correct. Try again?");
@@ -220,6 +249,12 @@ const LoginWithOTP = ({ withBackground, useRelativePathForMenu = false }) => {
     )
   ] });
 };
+LoginWithOTP.propTypes = {
+  withBackground: PropTypes.bool,
+  useRelativePathForMenu: PropTypes.bool,
+  /** Called once when login (and optional 2FA) completes and the user session is ready. */
+  onLoginSuccess: PropTypes.func
+};
 var stdin_default = LoginWithOTP;
 export {
   LoginWithOTP,

package/dist/components/2FA/main-flow.js

@@ -30,7 +30,7 @@ const Main2FAFlow = ({
   recentLoginSubtitle = "To continue please log in again and set up your two factor authentication",
   recentLoginCTA = "Log in again"
 }) => {
-  const { user, checkMfaEnrollment, userMfaEnrollment, generateTotpSecret } = useContext(AuthContext);
+  const { user, checkMfaEnrollment, userMfaEnrollment, generateTotpSecret, logoutUser } = useContext(AuthContext);
   const [isFlowopen, setIsFlowOpen] = useState({
     enable2fa: open2faflow || false,
     disable2fa: allowDisable2FA && (openDisable2faflow || false),
@@ -40,6 +40,7 @@ const Main2FAFlow = ({
   const [successMessage, setsuccessMessage] = useState();
   const [isLoginRequired, setisLoginRequired] = useState(false);
   const [totpData, settotpData] = useState();
+  const [awaitingReauthFor2fa, setAwaitingReauthFor2fa] = useState(false);
   const enable2faCompletedRef = useRef(false);
   const disable2faCompletedRef = useRef(false);
   const onRequiresRecentLoginErrorHandler = () => {
@@ -66,11 +67,23 @@ const Main2FAFlow = ({
   useEffect(() => {
     if (userMfaEnrollment?.length > 0) {
       setis2FAEnabled(true);
-    } else if (user) {
+    } else if (user && !awaitingReauthFor2fa) {
       checkMfaEnrollment();
       generateTotp();
     }
-  }, [user, userMfaEnrollment]);
+  }, [user, userMfaEnrollment, awaitingReauthFor2fa]);
+  useEffect(() => {
+    if (!user || !awaitingReauthFor2fa) return;
+    setAwaitingReauthFor2fa(false);
+    setisLoginRequired(false);
+    setIsFlowOpen((prev) => ({
+      ...prev,
+      requiresRecentLogin: false,
+      enable2fa: true
+    }));
+    checkMfaEnrollment();
+    generateTotp();
+  }, [user, awaitingReauthFor2fa]);
   useEffect(() => {
     let timeoutId;
     if (successMessage) {
@@ -113,6 +126,17 @@ const Main2FAFlow = ({
     checkMfaEnrollment();
     setsuccessMessage("Your log in 2FA authentication is removed");
   };
+  const handleLoginAgain = async () => {
+    setIsFlowOpen((prev) => ({
+      ...prev,
+      requiresRecentLogin: false,
+      enable2fa: false,
+      disable2fa: false
+    }));
+    await logoutUser();
+    setAwaitingReauthFor2fa(true);
+    onLoginAgainClick?.();
+  };
   const flowActions = {
     openEnable2FA: () => switchOpenFlow("disable2fa", "enable2fa"),
     openDisable2FA: () => {
@@ -225,7 +249,7 @@ const Main2FAFlow = ({
         continueButtonId: "2fa-requires-recent-login-btn",
         continueButtonDataCy: "2fa-requires-recent-login-submit",
         onClick: () => {
-          onLoginAgainClick?.();
+          void handleLoginAgain();
         },
         titleText: recentLoginTitle,
         subTitleLeft: recentLoginSubtitle,

package/dist/components/StepsProgress/StepsProgress.js

@@ -6,7 +6,7 @@ import { walletTypes } from "../../constants/globalVariables.js";
 const StepsProgressSignup = (props) => {
   let navigate = useNavigate();
   const { user = {} } = props;
-  const { country, kyc_status, self_declaration, taxId, wallets = [] } = user;
+  const { country, kyc_status, self_declaration, wallets = [] } = user;
   const KYCNotDone = !kyc_status || kyc_status === "Reaply" || kyc_status === "Cancelled" || kyc_status === "Draft";
   const hasLiquidWallet = wallets?.filter((wallet) => wallet.type === walletTypes.LIQUID).length > 0;
   const isActiveStep = (path) => typeof window !== "undefined" ? window.location.pathname.includes(path) : false;

package/dist/context/AuthContext.js

@@ -275,8 +275,9 @@ class AuthProviderClass extends Component {
           this.setState({ waitingFor2fa: true, firebaseError: error });
           throw error;
         case "auth/requires-recent-login":
-          this.logoutUser();
-          break;
+          await this.logoutUser();
+          error.message = "Your session has expired. Please log in again to continue.";
+          throw error;
         case "auth/invalid-login-credentials":
         case "auth/invalid-credential":
           if (email) {

package/dist/index.js

@@ -138,6 +138,8 @@ import { navigateToHref, pathnameIfSameOrigin } from "./routing/navigate-app.js"
 import { RouterWrapper } from "./routing/RouterWrapper.js";
 import { isAlreadyOnOnboardingFlow } from "./utils/app-urls.js";
 import { authenticationApi } from "./api/authenticationApi.js";
+import { Auth, DEFAULT_TOKEN_EXPIRY_MS } from "./context/Auth.js";
+import { AuthConsumer, AuthContext, AuthProvider } from "./context/AuthContext.js";
 import { colors } from "./styles/colors.js";
 import { default as default2 } from "./styles/fonts.js";
 import { GlobalStyle } from "./styles/global.js";
@@ -153,8 +155,6 @@ import { LoanActivityTypes, ProfessionalInvestorStatuses, ProjectStates, Project
 import { default as default9 } from "./components/SvgIcons/AdminBadgeSvg.js";
 import { Arrow } from "./components/icons/Arrow.js";
 import { ArrowSimple } from "./components/icons/ArrowSimple.js";
-import { Auth, DEFAULT_TOKEN_EXPIRY_MS } from "./context/Auth.js";
-import { AuthConsumer, AuthContext, AuthProvider } from "./context/AuthContext.js";
 import { BackButtonIcon, StyledBackButton, StyledBackButtonExternal, StyledWindowBackButton } from "./components/BackButton/BackButton.styles.js";
 import { Breakdown } from "./components/breakdown/Breakdown.js";
 import { default as default10 } from "./components/SvgIcons/CameraSvg.js";

package/dist/manifest.json

@@ -1,25 +1,25 @@
-{
-  "short_name": "Vite React App",
-  "name": "Vite React App",
-  "icons": [
-    {
-      "src": "favicon.ico",
-      "sizes": "64x64 32x32 24x24 16x16",
-      "type": "image/x-icon"
-    },
-    {
-      "src": "logo192.png",
-      "type": "image/png",
-      "sizes": "192x192"
-    },
-    {
-      "src": "logo512.png",
-      "type": "image/png",
-      "sizes": "512x512"
-    }
-  ],
-  "start_url": ".",
-  "display": "standalone",
-  "theme_color": "#000000",
-  "background_color": "#ffffff"
-}
+{
+  "short_name": "Vite React App",
+  "name": "Vite React App",
+  "icons": [
+    {
+      "src": "favicon.ico",
+      "sizes": "64x64 32x32 24x24 16x16",
+      "type": "image/x-icon"
+    },
+    {
+      "src": "logo192.png",
+      "type": "image/png",
+      "sizes": "192x192"
+    },
+    {
+      "src": "logo512.png",
+      "type": "image/png",
+      "sizes": "512x512"
+    }
+  ],
+  "start_url": ".",
+  "display": "standalone",
+  "theme_color": "#000000",
+  "background_color": "#ffffff"
+}

package/dist/robots.txt

@@ -1,3 +1,3 @@
-# https://www.robotstxt.org/robotstxt.html
-User-agent: *
-Disallow:
+# https://www.robotstxt.org/robotstxt.html
+User-agent: *
+Disallow:

package/dist/runtime-config.js

@@ -1,4 +1,4 @@
-const __vite_import_meta_env__ = { "BASE_URL": "/", "DEV": false, "MODE": "production", "PROD": true, "SSR": false, "VITE_ADMIN_URL": "https://admin.stokr.info", "VITE_API_URL": "https://platform-api.stokr.info/api/v1", "VITE_BASE_URL_PUBLIC": "https://platform-api-no-auth.stokr.info/api/v1", "VITE_COOKIE_DOMAIN": "localhost", "VITE_DASHBOARD_URL": "https://dashboard.stokr.info", "VITE_FIREBASE_API_KEY": "AIzaSyBBp_3Romnfv--YpUuV0mJgDymvSp3oq0c", "VITE_FIREBASE_APP_ID": "1:568229412804:web:2391857e3e2a0b02346e91", "VITE_FIREBASE_AUTH_DOMAIN": "stokr-development-env.firebaseapp.com", "VITE_FIREBASE_MEASUREMENT_ID": "G-CP53SZVSMN", "VITE_FIREBASE_MESSAGING_SENDER_ID": "568229412804", "VITE_FIREBASE_PROJECT_ID": "stokr-development-env", "VITE_FIREBASE_STORAGE_BUCKET": "stokr-development-env.appspot.com", "VITE_MIXPANEL_TOKEN": "a7bb1e881f9b2600762fded84d8ce0ea", "VITE_ONBOARDING_URL": "https://signup.stokr.info", "VITE_PHOTO_API_URL": "https://platform-api.stokr.info/api/v1", "VITE_REGISTER_URL": "https://stokr.info/signup", "VITE_WEBSITE_DOMAIN": "stokr.info" };
+const __vite_import_meta_env__ = { "BASE_URL": "/", "DEV": false, "MODE": "production", "PROD": true, "SSR": false };
 const _overrides = {};
 const ENV_KEY_BY_CONFIG = {
   apiUrl: "VITE_API_URL",