@stokr/components-library 3.0.77 → 3.1.0-alpha.1

package/dist/context/AuthContext.js

@@ -1,1016 +0,0 @@
-import { jsxs, jsx } from "react/jsx-runtime";
-import PropTypes from "prop-types";
-import axiosInstance from "../model/axios.js";
-import { configure } from "../config.js";
-import React__default, { Component } from "react";
-import fetchData from "../api/fetchData.js";
-import { reset, identify } from "../analytics/index.js";
-import { withRouter } from "../utils/withRouter.js";
-import { Text } from "../components/Text/Text.styles.js";
-import { Auth, DEFAULT_TOKEN_EXPIRY_MS } from "./Auth.js";
-import stdin_default from "../components/Button/Button.styles.js";
-import { hasLoggedInSession } from "../utils/user-identity.js";
-import { getConfig, getPlatformURL } from "../runtime-config.js";
-import avatarPlaceholder from "../static/images/avatar-placeholder.png.js";
-import { getFirebaseAuth, isValidFirebaseConfig } from "../firebase-config.js";
-import { isAlreadyOnOnboardingFlow } from "../utils/app-urls.js";
-import { signOut, getMultiFactorResolver, PhoneMultiFactorGenerator, TotpMultiFactorGenerator, multiFactor } from "firebase/auth";
-import { navigateToHref } from "../routing/navigate-app.js";
-import { SuccessModal as SuccessModalComponent } from "../components/Modal/SuccessModal/SuccessModal.js";
-const AuthContext = React__default.createContext();
-const FALLBACK_AUTH_CONTEXT_VALUE = { user: null, isFetchingUser: false };
-const INACTIVITY_TIME_MS = 5 * 60 * 1e3;
-const INACTIVITY_WARNING_BEFORE_MS = 30 * 1e3;
-const INACTIVITY_EVENTS = ["mousemove", "keydown", "click", "scroll", "touchstart"];
-class AuthProviderClass extends Component {
-  userRef = React__default.createRef(null);
-  inactivityTimerRef = null;
-  inactivityWarningTimerRef = null;
-  cookieExpiryTimerRef = null;
-  // Timestamp of the last inactivity timer reset; used to throttle the reset
-  // to at most once per second so frequent DOM events (mousemove fires 30-60×/s)
-  // don't continuously create and destroy setTimeout objects.
-  _lastActivityAt = 0;
-  state = {
-    user: void 0,
-    firebaseUser: void 0,
-    // Start as `true` when a session cookie already exists so the app
-    // shows a loader immediately instead of flashing the login form
-    // for a frame before componentDidMount fires getUser().
-    // When there is no cookie the value stays `false` so the login
-    // page appears instantly without any loader.
-    isFetchingUser: !!Auth.getAccessToken(),
-    avatar: avatarPlaceholder,
-    userMfaEnrollment: null,
-    waitingFor2fa: false,
-    firebaseError: null,
-    verifyEmailError: null,
-    isVerifyingEmail: false,
-    loggedOutDueToInactivity: false,
-    loggedOutDueToCookieExpiry: false,
-    /** When set, show session modal but keep session until user dismisses (avoids login + session modals at once). */
-    sessionExpiryPendingReason: null,
-    /** Shown ~30s before inactivity logout; user can extend the session from the modal. */
-    showInactivityWarningModal: false
-  };
-  componentDidMount() {
-    if (this.props.config) {
-      configure(this.props.config);
-      if (this.props.config.firebase == null && typeof console !== "undefined" && console.warn) {
-        console.warn(
-          "[@stokr/components-library] <AuthProvider> config has no `firebase` property. Auth (login, 2FA, session) may fail with auth/internal-error or auth/network-request-failed. Pass config.firebase with your Firebase project config (apiKey, authDomain, projectId, etc.)."
-        );
-      }
-    } else if (typeof console !== "undefined" && console.warn) {
-      console.warn(
-        "[@stokr/components-library] <AuthProvider> rendered without a `config` prop. API URLs, Firebase, and cookie domain will use values baked at library build time. Pass a config prop to use your app’s environment variables at runtime. See: https://github.com/stokr-io/components-library#runtime-config"
-      );
-    }
-    const isActivatingUser = window.location.href.includes("verifyEmail");
-    if (isActivatingUser) {
-      this.handleVerifyEmail();
-    } else if (getFirebaseAuth()) {
-      this.getUser().catch((err) => {
-        if (typeof console !== "undefined" && console.debug) {
-          console.debug("[AuthProvider] getUser() on mount failed:", err?.message || err);
-        }
-      });
-    } else if (typeof console !== "undefined" && console.debug) {
-      console.debug(
-        "[@stokr/components-library] getUser() not run on mount: Firebase not initialized. Pass config.firebase to AuthProvider."
-      );
-    }
-    INACTIVITY_EVENTS.forEach((event) => window.addEventListener(event, this.resetInactivityTimer));
-  }
-  componentDidUpdate(prevProps, prevState) {
-    const hadSession = hasLoggedInSession(prevState.user);
-    const hasSession = hasLoggedInSession(this.state.user);
-    if (!hadSession && hasSession) {
-      this.resetInactivityTimer();
-      this.scheduleCookieExpiryLogout();
-    } else if (hadSession && !hasSession) {
-      this.clearInactivityTimer();
-      this.clearCookieExpiryTimer();
-    }
-    const sessionJustEnded = hadSession && !hasSession;
-    const sessionExpiryJustPending = !prevState.sessionExpiryPendingReason && this.state.sessionExpiryPendingReason;
-    if (this.state.showInactivityWarningModal && (sessionJustEnded || sessionExpiryJustPending)) {
-      this.setState({ showInactivityWarningModal: false });
-    }
-  }
-  componentWillUnmount() {
-    INACTIVITY_EVENTS.forEach((event) => window.removeEventListener(event, this.resetInactivityTimer));
-    this.clearInactivityTimer();
-    this.clearCookieExpiryTimer();
-    if (this.avatarObjectUrl) URL.revokeObjectURL(this.avatarObjectUrl);
-  }
-  checkTokenIsValid = (redirect = false) => {
-    const accessToken = Auth.getAccessToken();
-    if (!accessToken) {
-      this.logoutUser(redirect, { dueToCookieExpiry: true });
-    }
-    return !!accessToken;
-  };
-  clearInactivityWarningTimer = () => {
-    if (this.inactivityWarningTimerRef) {
-      clearTimeout(this.inactivityWarningTimerRef);
-      this.inactivityWarningTimerRef = null;
-    }
-  };
-  clearInactivityTimer = () => {
-    this.clearInactivityWarningTimer();
-    if (this.inactivityTimerRef) {
-      clearTimeout(this.inactivityTimerRef);
-      this.inactivityTimerRef = null;
-    }
-  };
-  clearCookieExpiryTimer = () => {
-    if (this.cookieExpiryTimerRef != null) {
-      clearTimeout(this.cookieExpiryTimerRef);
-      this.cookieExpiryTimerRef = null;
-    }
-  };
-  scheduleCookieExpiryLogout = () => {
-    if (this.cookieExpiryTimerRef != null) {
-      clearTimeout(this.cookieExpiryTimerRef);
-      this.cookieExpiryTimerRef = null;
-    }
-    const { user } = this.state;
-    if (!hasLoggedInSession(user)) return;
-    const expiresAt = Auth.getAccessTokenExpiresAt();
-    if (!expiresAt) return;
-    const delay = expiresAt - Date.now();
-    if (delay <= 0) {
-      Auth.logout();
-      this.setState({ sessionExpiryPendingReason: "cookie" });
-      return;
-    }
-    this.cookieExpiryTimerRef = setTimeout(() => {
-      this.cookieExpiryTimerRef = null;
-      Auth.logout();
-      this.setState({ sessionExpiryPendingReason: "cookie" });
-    }, delay);
-  };
-  getInactivityTimeMs = () => {
-    const { inactivityTimeMs } = this.props;
-    return typeof inactivityTimeMs === "number" && inactivityTimeMs > 0 ? inactivityTimeMs : INACTIVITY_TIME_MS;
-  };
-  getInactivityWarningBeforeMs = () => {
-    const { inactivityWarningBeforeMs } = this.props;
-    return typeof inactivityWarningBeforeMs === "number" && inactivityWarningBeforeMs > 0 ? inactivityWarningBeforeMs : INACTIVITY_WARNING_BEFORE_MS;
-  };
-  /** Cookie lifetime for `STOKR_ACCESS_TOKEN` — not the same as inactivity timeout. */
-  getAccessTokenExpiryMs = () => {
-    const n = Number(this.props.accessTokenExpiryMs);
-    return Number.isFinite(n) && n > 0 ? n : DEFAULT_TOKEN_EXPIRY_MS;
-  };
-  /**
-   * Diagnostic: after `Auth.setAccessToken`, the cookie must be readable on this origin
-   * or refresh/login will not persist (often misconfigured `cookieDomain`).
-   */
-  logAccessTokenCookieAfterWrite = (phase) => {
-    if (typeof console === "undefined" || !console.log) return;
-    const readable = Boolean(Auth.getAccessToken());
-    if (readable) {
-      console.log(
-        `[@stokr/components-library] ${phase}: STOKR_ACCESS_TOKEN cookie readable — next getUser() can authorize API calls.`,
-        {
-          host: typeof window !== "undefined" ? window.location.hostname : void 0
-        }
-      );
-    } else {
-      console.log(
-        `[@stokr/components-library] ${phase}: cookie NOT readable after write — session will not survive reloads. Fix cookieDomain (empty string = host-only for localhost).`,
-        {
-          cookieDomain: getConfig("cookieDomain") ?? "",
-          origin: typeof window !== "undefined" ? window.location.origin : void 0
-        }
-      );
-    }
-  };
-  resetInactivityTimer = (force = false) => {
-    if (this.state.sessionExpiryPendingReason) return;
-    const { user } = this.state;
-    if (!hasLoggedInSession(user)) {
-      this.clearInactivityTimer();
-      if (this.state.showInactivityWarningModal) {
-        this.setState({ showInactivityWarningModal: false });
-      }
-      return;
-    }
-    const now = Date.now();
-    if (!force && now - this._lastActivityAt < 1e3) return;
-    this._lastActivityAt = now;
-    this.clearInactivityTimer();
-    if (this.state.showInactivityWarningModal) {
-      this.setState({ showInactivityWarningModal: false });
-    }
-    const delay = this.getInactivityTimeMs();
-    const warningDelay = Math.max(0, delay - this.getInactivityWarningBeforeMs());
-    this.inactivityWarningTimerRef = setTimeout(() => {
-      this.inactivityWarningTimerRef = null;
-      if (!hasLoggedInSession(this.state.user) || this.state.sessionExpiryPendingReason) return;
-      this.setState({ showInactivityWarningModal: true });
-    }, warningDelay);
-    this.inactivityTimerRef = setTimeout(this.handleInactivityTimeout, delay);
-  };
-  /** Fires when the inactivity deadline is reached — always closes the warning modal first. */
-  handleInactivityTimeout = () => {
-    this.inactivityTimerRef = null;
-    this.clearInactivityWarningTimer();
-    if (!hasLoggedInSession(this.state.user)) {
-      this.setState({ showInactivityWarningModal: false });
-      return;
-    }
-    Auth.logout();
-    this.setState({
-      sessionExpiryPendingReason: "inactivity",
-      showInactivityWarningModal: false
-    });
-  };
-  /** User chose to stay signed in from the pre-logout warning modal. */
-  extendSessionFromInactivityWarning = () => {
-    this.setState({ showInactivityWarningModal: false }, () => {
-      this.resetInactivityTimer(true);
-    });
-  };
-  /** Close the pre-logout warning without extending the session (logout still scheduled). */
-  dismissInactivityWarningModal = () => {
-    this.setState({ showInactivityWarningModal: false });
-  };
-  loginUser = async (email, password, customToken) => {
-    try {
-      let user;
-      if (customToken) {
-        user = await Auth.signInWithToken(customToken);
-      } else {
-        user = await Auth.login(email, password);
-      }
-      const token = await user.getIdToken();
-      Auth.setAccessToken(token, { expiresInMs: this.getAccessTokenExpiryMs() });
-      this.logAccessTokenCookieAfterWrite("loginUser");
-      this.setState({
-        firebaseUser: user
-      });
-      await this.getUser(token, user);
-      return user;
-    } catch (error) {
-      console.log("🚀 ~ file: AuthContext.js:56 ~ error:", error);
-      const httpStatus = error?.response?.status;
-      if (httpStatus != null) {
-        const auth = getFirebaseAuth();
-        if (auth) signOut(auth).catch(() => {
-        });
-        Auth.logout();
-        this.setState({ firebaseUser: null });
-        if (httpStatus === 401 || httpStatus === 403) {
-          error.message = "Your account was authenticated but the server rejected the session. Please verify that the API and Firebase environments match, or contact support.";
-        }
-        throw error;
-      }
-      switch (error.code) {
-        case "auth/internal-error":
-          error.message = "Authentication service error. Ensure AuthProvider receives config.firebase and your domain is authorized in Firebase Console.";
-          throw error;
-        case "auth/multi-factor-auth-required":
-          this.setState({ waitingFor2fa: true, firebaseError: error });
-          throw error;
-        case "auth/requires-recent-login":
-          await this.logoutUser();
-          error.message = "Your session has expired. Please log in again to continue.";
-          throw error;
-        case "auth/invalid-login-credentials":
-        case "auth/invalid-credential":
-          if (email) {
-            Auth.reportFailedLoginAttempt(email).catch(() => {
-            });
-          }
-          error.message = "The credentials are not correct. Try again?";
-          throw error;
-        case "auth/user-disabled":
-          error.message = "Your account has been locked due to too many failed login attempts. Please contact support at support.stokr.io to reactivate.";
-          throw error;
-        case "auth/too-many-requests":
-          error.message = "Too many sign-in attempts. Please wait a few minutes before trying again.";
-          throw error;
-        case "auth/invalid-custom-token":
-        case "auth/argument-error":
-          error.message = "This sign-in link is invalid, expired, or was already used. Please sign in again or request a new link.";
-          throw error;
-        case "auth/network-request-failed":
-          error.message = "Unable to reach the authentication server. Check your connection and try again.";
-          throw error;
-        default:
-          console.log({ error });
-          throw error;
-      }
-    }
-  };
-  createUser = async (email, password) => {
-    try {
-      await Auth.createUser(email, password);
-    } catch (error) {
-      console.log("🚀 ~ file: AuthContext.js:56 ~ error:", error);
-      throw error;
-    }
-  };
-  loginUserWithTotp = async (verificationCode, error) => {
-    const auth = getFirebaseAuth();
-    if (!auth) {
-      throw new Error("Firebase is not configured.");
-    }
-    const mfaResolver = getMultiFactorResolver(auth, error);
-    const selectedIndex = 0;
-    switch (mfaResolver.hints[selectedIndex].factorId) {
-      case TotpMultiFactorGenerator.FACTOR_ID: {
-        const otpFromAuthenticator = verificationCode;
-        const multiFactorAssertion = TotpMultiFactorGenerator.assertionForSignIn(
-          mfaResolver.hints[selectedIndex].uid,
-          otpFromAuthenticator
-        );
-        try {
-          const userCredential = await mfaResolver.resolveSignIn(multiFactorAssertion);
-          const user = userCredential.user;
-          const token = await user.getIdToken();
-          Auth.setAccessToken(token, { expiresInMs: this.getAccessTokenExpiryMs() });
-          this.logAccessTokenCookieAfterWrite("loginUserWithTotp");
-          this.setState({ firebaseUser: user, waitingFor2fa: false });
-          await this.getUser(token, user);
-        } catch (_error) {
-          console.log({ _error });
-          throw _error;
-        }
-        break;
-      }
-      case PhoneMultiFactorGenerator.FACTOR_ID:
-        break;
-    }
-  };
-  generateTotpSecret = async (user = getFirebaseAuth()?.currentUser, appName = "STOKR") => {
-    try {
-      const multiFactorSession = await multiFactor(user).getSession();
-      const totpSecret = await TotpMultiFactorGenerator.generateSecret(multiFactorSession);
-      const totpUri = totpSecret.generateQrCodeUrl(user.email, appName);
-      return { totpUri, totpSecret };
-    } catch (error) {
-      console.log("🚀 ~ file: AuthContext.js:51 ~ error:", error);
-      throw error;
-    }
-  };
-  unenrollUser2FA = async () => {
-    const { userMfaEnrollment } = this.state;
-    if (!userMfaEnrollment || userMfaEnrollment.length === 0) {
-      console.log("User is not enrolled in 2FA");
-      return;
-    }
-    const firebaseUser = this.state.firebaseUser || getFirebaseAuth()?.currentUser;
-    if (!firebaseUser) throw new Error("Firebase user not available for MFA unenroll.");
-    try {
-      for (let i = 0; i < userMfaEnrollment.length; i++) {
-        await multiFactor(firebaseUser).unenroll(userMfaEnrollment[i].uid);
-      }
-    } catch (error) {
-      console.log({ error });
-      throw error;
-    }
-  };
-  checkMfaEnrollment = (user = getFirebaseAuth()?.currentUser) => {
-    const checkMfaEnrollment = multiFactor(user).enrolledFactors;
-    this.setState({
-      userMfaEnrollment: checkMfaEnrollment
-    });
-    return checkMfaEnrollment;
-  };
-  enrollUserToTotp = async (user, totpSecret, verificationCode, displayName) => {
-    const multiFactorAssertion = TotpMultiFactorGenerator.assertionForEnrollment(totpSecret, verificationCode);
-    await multiFactor(user).enroll(multiFactorAssertion, displayName);
-  };
-  logoutUser = async (redirect = false, options = {}) => {
-    console.log("🚀 ~ file: AuthContext.js:303 ~ logoutUser ~ redirect:", redirect);
-    this.clearCookieExpiryTimer();
-    this.clearInactivityTimer();
-    try {
-      const auth = getFirebaseAuth();
-      if (auth) signOut(auth).catch(() => {
-      });
-      Auth.logout();
-    } catch (_e) {
-    }
-    delete axiosInstance.defaults.headers.common.Authorization;
-    reset();
-    this.userRef.current = null;
-    if (this.avatarObjectUrl) {
-      URL.revokeObjectURL(this.avatarObjectUrl);
-      this.avatarObjectUrl = void 0;
-    }
-    this.setState({
-      user: null,
-      firebaseUser: null,
-      firebaseError: null,
-      verifyEmailError: null,
-      userMfaEnrollment: null,
-      waitingFor2fa: false,
-      isVerifyingEmail: false,
-      avatar: avatarPlaceholder,
-      isFetchingUser: false,
-      sessionExpiryPendingReason: null,
-      showInactivityWarningModal: false,
-      loggedOutDueToInactivity: options.dueToInactivity === true,
-      loggedOutDueToCookieExpiry: options.dueToCookieExpiry === true
-    });
-    if (redirect) {
-      const home = getPlatformURL();
-      navigateToHref(this.props.navigate, home);
-    }
-  };
-  clearLoggedOutDueToInactivity = () => {
-    this.setState({ loggedOutDueToInactivity: false });
-  };
-  clearLoggedOutDueToCookieExpiry = () => {
-    this.setState({ loggedOutDueToCookieExpiry: false });
-  };
-  /** Dismiss session modal: if expiry was deferred, perform logout; otherwise clear post-logout flags only. */
-  dismissSessionExpiryModal = () => {
-    if (this.state.sessionExpiryPendingReason) {
-      this.logoutUser(false, {});
-      return;
-    }
-    this.clearLoggedOutDueToInactivity();
-    this.clearLoggedOutDueToCookieExpiry();
-  };
-  /** Call when user cancels the 2FA step (e.g. goes back to login to try another account). */
-  reset2faFlow = () => {
-    this.setState({ waitingFor2fa: false, firebaseError: null });
-  };
-  patchUserObject = (user, firebaseUser) => {
-    if (!user) return;
-    if (!firebaseUser) {
-      return { ...user, active: !!user.emailVerified };
-    }
-    const merged = Object.assign(Object.create(Object.getPrototypeOf(firebaseUser)), firebaseUser, user);
-    merged.active = merged.emailVerified;
-    return merged;
-  };
-  // Fetch the authenticated user's avatar from service-media as a Blob and expose it as an
-  // object URL. Falls back to the placeholder on 404/error. The endpoint requires the Bearer
-  // token, so it can't be used directly as an <img src> — hence the blob round-trip.
-  loadAvatar = async () => {
-    try {
-      const blob = await Auth.getAvatar();
-      this.setAvatarObjectUrl(blob ? URL.createObjectURL(blob) : avatarPlaceholder);
-    } catch (error) {
-      console.log("error loading avatar: ", error);
-      this.setAvatarObjectUrl(avatarPlaceholder);
-    }
-  };
-  setAvatarObjectUrl = (nextAvatar) => {
-    if (this.avatarObjectUrl && this.avatarObjectUrl !== nextAvatar) {
-      URL.revokeObjectURL(this.avatarObjectUrl);
-    }
-    this.avatarObjectUrl = nextAvatar?.startsWith("blob:") ? nextAvatar : void 0;
-    this.setState({ avatar: nextAvatar });
-  };
-  // Kept for backward compatibility; refetches the current user's avatar.
-  checkUserPhoto = () => this.loadAvatar();
-  getUser = async (accessToken = Auth.getAccessToken(), firebaseUserOverride) => {
-    if (!accessToken) {
-      this.setState({
-        isFetchingUser: false,
-        user: null,
-        firebaseUser: null
-      });
-      if (typeof console !== "undefined" && console.debug) {
-        console.debug(
-          "[@stokr/components-library] getUser: skipped — no STOKR_ACCESS_TOKEN (normal when logged out). If login just ran, check loginUser cookie log and cookieDomain."
-        );
-      }
-      return;
-    }
-    this.setState({
-      isFetchingUser: true
-    });
-    axiosInstance.defaults.headers.common.Authorization = `Bearer ${accessToken}`;
-    const { customValidateGetUser } = this.props;
-    try {
-      const existingFirebaseUser = firebaseUserOverride || this.state.firebaseUser || getFirebaseAuth()?.currentUser;
-      const [result, tokenRes] = await Promise.all([
-        Auth.getUser(),
-        !existingFirebaseUser ? fetchData("auth/get-custom-token").catch((e) => {
-          const status = e?.response?.status;
-          if (status === 401 || status === 403) {
-            if (typeof console !== "undefined" && console.warn) {
-              console.warn(
-                "[@stokr/components-library] auth/get-custom-token rejected (" + status + ") — Firebase session unavailable. STOKR session will be preserved if user/get succeeds."
-              );
-            }
-            if (typeof console !== "undefined" && console.log) {
-              console.log(
-                "[@stokr/components-library] getUser: auth/get-custom-token failed — trying user/get without Firebase custom token.",
-                {
-                  status
-                }
-              );
-            }
-            return null;
-          }
-          throw e;
-        }) : Promise.resolve(null)
-      ]);
-      let firebaseUser = existingFirebaseUser;
-      if (!firebaseUser) {
-        const customToken = tokenRes?.customToken ?? tokenRes?.custom_token ?? tokenRes?.token ?? tokenRes;
-        try {
-          firebaseUser = await Auth.signInWithToken(customToken);
-        } catch (firebaseErr) {
-          const fbCode = firebaseErr?.code;
-          if (fbCode === "auth/internal-error" || fbCode === "auth/network-request-failed" || fbCode === "auth/invalid-custom-token") {
-            if (typeof console !== "undefined" && console.warn) {
-              console.warn(
-                "[@stokr/components-library] Firebase signIn failed (" + fbCode + ") — session preserved. Add this domain to Firebase Console → Authentication → Authorized domains."
-              );
-            }
-            if (typeof console !== "undefined" && console.log) {
-              console.log(
-                "[@stokr/components-library] getUser: continuing with API user only (no Firebase user on merged object).",
-                {
-                  code: fbCode
-                }
-              );
-            }
-          } else {
-            throw firebaseErr;
-          }
-        }
-      }
-      const user = this.patchUserObject(result.user, firebaseUser);
-      this.checkUserIsValid(user);
-      customValidateGetUser?.(user);
-      this.loadAvatar();
-      this.setUser(user);
-      this.setState({
-        isFetchingUser: false
-      });
-      const identityKey = user._id ?? user.id ?? user.uid;
-      if (typeof console !== "undefined" && console.log) {
-        console.log(
-          "[@stokr/components-library] getUser: user/get succeeded — context User updated; HeaderHo shows Dashboard when hasLoggedInSession is true.",
-          {
-            identity: identityKey,
-            hasLoggedInSession: hasLoggedInSession(user)
-          }
-        );
-      }
-      identify(user._id ?? user.id, {
-        role: user.user_type,
-        is_internal: user.email?.endsWith("@stokr.io") ?? false
-      });
-      this.replaceLocationPathName();
-      return user;
-    } catch (error) {
-      this.setState({
-        isFetchingUser: false
-      });
-      const code = error?.code;
-      const httpStatus = error?.response?.status;
-      if (typeof console !== "undefined" && console.log) {
-        console.log("[@stokr/components-library] getUser: request failed or validation error", {
-          code,
-          httpStatus,
-          message: error?.message
-        });
-      }
-      if (code === "auth/internal-error" || code === "auth/network-request-failed") {
-        if (typeof console !== "undefined" && console.warn) {
-          console.warn(
-            "[@stokr/components-library] getUser() encountered Firebase error (" + code + "). Ensure AuthProvider receives config.firebase and the domain is in Firebase Console → Authorized domains."
-          );
-        }
-        return;
-      }
-      if (httpStatus === 401 || httpStatus === 403) {
-        Auth.logout();
-        this.setState({ user: null, firebaseUser: null });
-        if (typeof console !== "undefined" && console.warn) {
-          console.warn(
-            "[@stokr/components-library] getUser() rejected by server (" + httpStatus + ") — stale session cleared."
-          );
-        }
-        return;
-      }
-      console.log(`Error in getUser: ${error}`);
-      throw error;
-    }
-  };
-  checkUserIsValid = (user) => {
-    if (!user) {
-      throw new Error("User is not defined");
-    }
-    const isOnVerifyEmailPage = window.location.href.includes("verifyEmail");
-    if (isOnVerifyEmailPage) {
-      return true;
-    }
-    if (!user?.emailVerified && !isAlreadyOnOnboardingFlow()) {
-      navigateToHref(this.props.navigate, `${getConfig("onboardingUrl")}/resend-activation-email`);
-      return false;
-    } else if (!user?.country && user?.user_type === "investor" && !isAlreadyOnOnboardingFlow()) {
-      navigateToHref(this.props.navigate, `${getConfig("onboardingUrl")}/welcome`);
-      return false;
-    }
-    return true;
-  };
-  uploadPhoto = async (file) => {
-    try {
-      const { user } = this.state;
-      if (!user || !file) {
-        return;
-      }
-      const formData = new FormData();
-      formData.append("file", file);
-      const blob = await Auth.uploadPhoto(formData);
-      this.setAvatarObjectUrl(blob ? URL.createObjectURL(blob) : avatarPlaceholder);
-      return blob;
-    } catch (error) {
-      console.log(`Error: ${error}`);
-      throw error;
-    }
-  };
-  deletePhoto = async () => {
-    const { user } = this.state;
-    if (!user) {
-      return;
-    }
-    await Auth.deletePhoto();
-    this.setAvatarObjectUrl(avatarPlaceholder);
-  };
-  replaceLocationPathName = () => {
-    const pathname = this.props.location?.pathname ?? "";
-    if (pathname === "/login" || pathname === "/signup") {
-      this.props.navigate("/");
-    }
-  };
-  updateUser = async (data) => {
-    try {
-      const existingFirebaseUser = this.state.firebaseUser;
-      const [{ user }, tokenRes] = await Promise.all([
-        Auth.updateUser(data),
-        !existingFirebaseUser ? fetchData("auth/get-custom-token") : Promise.resolve(null)
-      ]);
-      let firebaseUser = existingFirebaseUser;
-      if (!firebaseUser) {
-        const customToken = tokenRes?.customToken ?? tokenRes?.custom_token ?? tokenRes?.token ?? tokenRes;
-        firebaseUser = await Auth.signInWithToken(customToken);
-      }
-      const newUser = this.patchUserObject(user, firebaseUser);
-      this.setUser(newUser);
-      return user;
-    } catch (error) {
-      console.log(`Error updating the user: ${error}`);
-      throw error;
-    }
-  };
-  checkIfPrivateInvestor = async (project, user = this.state.user, returnData = false) => {
-    if (!user || !project) {
-      return;
-    }
-    try {
-      let dataToSend = {
-        userId: user._id,
-        projectId: project._id
-      };
-      const isPrivateInvestor = await Auth.checkPrivateInvestor(dataToSend);
-      const userCopy = { ...user };
-      userCopy.isPrivateInvestor = isPrivateInvestor.isAllowed;
-      userCopy.privateInvestorStatus = isPrivateInvestor.status;
-      if (returnData) {
-        return userCopy;
-      } else {
-        this.setState({ user: userCopy });
-      }
-    } catch (error) {
-      console.log("🚀 ~ error in checkPrivateInvestor", error);
-      throw error;
-    }
-  };
-  checkPrivateInvestorAll = async (user = this.state.user, returnData = false) => {
-    try {
-      const { list } = await Auth.checkPrivateInvestor();
-      if (list) {
-        const userCopy = { ...user };
-        userCopy.privateInvestorProjects = list;
-        if (returnData) {
-          return userCopy;
-        } else {
-          this.setState({ user: userCopy });
-        }
-      }
-    } catch (error) {
-      console.log("🚀 ~ error in checkPrivateInvestorAll", error);
-      throw error;
-    }
-  };
-  checkIfUserSubscribed = async (project, user = this.state.user, returnData = false) => {
-    if (!user || !project) {
-      return;
-    }
-    try {
-      let dataToSend = {
-        listName: project.name,
-        email: user.email
-      };
-      const isSubscribed = await Auth.checkIfUserSubscribed(dataToSend);
-      const userCopy = { ...user };
-      userCopy.isSubscribed = isSubscribed;
-      if (returnData) {
-        return userCopy;
-      } else {
-        this.setState({ user: userCopy });
-      }
-    } catch (error) {
-      console.log("🚀 ~ error in checkIfUserSubscribed", error);
-      throw error;
-    }
-  };
-  checkIfUserSubscribedAll = async (user = this.state.user, returnData = false) => {
-    if (!user) {
-      return;
-    }
-    try {
-      let dataToSend = {
-        email: user.email
-      };
-      const result = await Auth.checkIfUserSubscribed(dataToSend);
-      const userCopy = { ...user };
-      userCopy.subscribedProjects = result;
-      if (returnData) {
-        return userCopy;
-      } else {
-        this.setState({ user: userCopy });
-      }
-    } catch (error) {
-      console.log("🚀 ~ error in checkIfUserSubscribed", error);
-      throw error;
-    }
-  };
-  handleVerifyEmail = async () => {
-    this.setState({ isVerifyingEmail: true });
-    const { location } = this.props;
-    const query = new URLSearchParams(location.search);
-    try {
-      let oobCode = query.get("oobCode");
-      await Auth.handleVerifyEmail(oobCode);
-      this.setState({ isVerifyingEmail: false });
-      let customToken = query.get("customtoken");
-      if (customToken) {
-        await this.loginUser(null, null, customToken);
-      }
-    } catch (error) {
-      switch (error?.code) {
-        case "auth/expired-action-code": {
-          error.message = "The activation link has expired. We are sending you a new one right now.";
-          let email = query.get("email");
-          if (email) {
-            error.email = email;
-          }
-          break;
-        }
-        case "auth/invalid-action-code":
-          error.message = "This link is invalid. Please try verifying email again.";
-          break;
-        case "auth/user-disabled":
-          error.message = "Your account has been disabled. Please contact our support.";
-          break;
-      }
-      console.log("🚀 ~ file: AuthContext.js:446 ~ error:", error);
-      this.setState({
-        verifyEmailError: error,
-        isVerifyingEmail: false,
-        isFetchingUser: false
-      });
-    }
-  };
-  handleResetPassword = async (password) => {
-    const { location } = this.props;
-    try {
-      const query = new URLSearchParams(location.search);
-      let oobCode = query.get("oobCode");
-      await Auth.handleResetPassword(oobCode, password);
-    } catch (error) {
-      switch (error?.code) {
-        case "auth/expired-action-code":
-          error.message = "This link has expired. Please try reseting password again.";
-          break;
-        case "auth/invalid-action-code":
-          error.message = "This link is invalid. Please try reseting password again.";
-          break;
-        case "auth/user-disabled":
-          error.message = "Your account has been disabled. Please contact our support.";
-          break;
-      }
-      throw error;
-    }
-  };
-  sendWelcomeEmail = async () => {
-    try {
-      await Auth.sendWelcomeEmail();
-    } catch (error) {
-      console.log(`Error sending welcome email: ${error}`);
-    }
-  };
-  uploaProofOfAddress = async (data, ip) => {
-    try {
-      const user = await Auth.uploaProofOfAddress(data, ip);
-      this.setUser(user);
-    } catch (error) {
-      console.log(`Error uploading proof of address: ${error}`);
-      throw error;
-    }
-  };
-  validateGreenWalletId = async (id) => {
-    try {
-      return await Auth.validateGreenWalletId(id);
-    } catch (error) {
-      console.log(`Error validating Green Wallet ID: ${error}`);
-      throw error;
-    }
-  };
-  createWallet = async (data) => {
-    try {
-      const wallet = await Auth.createWallet(data);
-      return wallet;
-    } catch (error) {
-      console.log(`Error creating wallet: ${error}`);
-      throw error;
-    }
-  };
-  setUser = (user) => {
-    this.userRef.current = user;
-    this.setState({ user });
-  };
-  fetchLastTime = async (projectName, page, userId) => {
-    try {
-      let filterBody = {
-        projectName,
-        page
-      };
-      if (userId) {
-        filterBody.userId = userId;
-      }
-      let response = await Auth.fetchTrackingUserLastTime({
-        filter: filterBody
-      });
-      return response;
-    } catch (error) {
-      console.log(" error", error);
-    }
-  };
-  render() {
-    const { children } = this.props;
-    return /* @__PURE__ */ jsxs(
-      AuthContext.Provider,
-      {
-        value: {
-          ...this.state,
-          userRef: this.userRef,
-          checkUserIsValid: this.checkUserIsValid,
-          checkTokenIsValid: this.checkTokenIsValid,
-          checkUserPhoto: this.checkUserPhoto,
-          uploadPhoto: this.uploadPhoto,
-          deletePhoto: this.deletePhoto,
-          unenrollUser2FA: this.unenrollUser2FA,
-          loginUserWithTotp: this.loginUserWithTotp,
-          checkMfaEnrollment: this.checkMfaEnrollment,
-          generateTotpSecret: this.generateTotpSecret,
-          enrollUserToTotp: this.enrollUserToTotp,
-          loginUser: this.loginUser,
-          logoutUser: this.logoutUser,
-          getUser: this.getUser,
-          updateUser: this.updateUser,
-          checkIfPrivateInvestor: this.checkIfPrivateInvestor,
-          checkPrivateInvestorAll: this.checkPrivateInvestorAll,
-          checkIfUserSubscribed: this.checkIfUserSubscribed,
-          checkIfUserSubscribedAll: this.checkIfUserSubscribedAll,
-          sendWelcomeEmail: this.sendWelcomeEmail,
-          resendActivationEmail: Auth.resendActivationEmail,
-          uploaProofOfAddress: this.uploaProofOfAddress,
-          validateGreenWalletId: this.validateGreenWalletId,
-          fetchLastTime: this.fetchLastTime,
-          createWallet: this.createWallet,
-          requestUpdateEmail: Auth.requestUpdateEmail,
-          updatePassword: Auth.updateUserPassword,
-          createUser: this.createUser,
-          updateFirebaseUser: Auth.updateFirebaseUser,
-          handleResetPassword: this.handleResetPassword,
-          handleVerifyEmail: this.handleVerifyEmail,
-          setUser: this.setUser,
-          refreshIdToken: Auth.refreshIdToken,
-          clearLoggedOutDueToInactivity: this.clearLoggedOutDueToInactivity,
-          clearLoggedOutDueToCookieExpiry: this.clearLoggedOutDueToCookieExpiry,
-          dismissSessionExpiryModal: this.dismissSessionExpiryModal,
-          extendSessionFromInactivityWarning: this.extendSessionFromInactivityWarning,
-          dismissInactivityWarningModal: this.dismissInactivityWarningModal,
-          reset2faFlow: this.reset2faFlow
-        },
-        children: [
-          children,
-          !this.props.hideInactivityModal && this.state.showInactivityWarningModal && /* @__PURE__ */ jsx(
-            SuccessModalComponent,
-            {
-              isOpen: hasLoggedInSession(this.state.user) && !this.state.sessionExpiryPendingReason,
-              onClose: this.dismissInactivityWarningModal,
-              variant: "progress",
-              title: "Session is about to expire",
-              subtitle: "Your session will expire due to inactivity. Click below to stay signed in.",
-              content: /* @__PURE__ */ jsx(Text, { children: /* @__PURE__ */ jsx(stdin_default, { onClick: this.extendSessionFromInactivityWarning, children: "To continue, press here" }) }),
-              maxWidth: "600px"
-            }
-          ),
-          (this.state.loggedOutDueToInactivity || this.state.loggedOutDueToCookieExpiry || this.state.sessionExpiryPendingReason && hasLoggedInSession(this.state.user)) && !this.props.hideInactivityModal && /* @__PURE__ */ jsx(
-            SuccessModalComponent,
-            {
-              isOpen: true,
-              onClose: this.dismissSessionExpiryModal,
-              variant: "progress",
-              title: "Session expired",
-              content: /* @__PURE__ */ jsxs(Text, { children: [
-                /* @__PURE__ */ jsx("p", { style: { fontSize: 16 }, children: this.state.sessionExpiryPendingReason === "inactivity" || this.state.loggedOutDueToInactivity ? "You have been logged out due to inactivity." : "Your session has expired. Please log in again." }),
-                /* @__PURE__ */ jsx(
-                  stdin_default,
-                  {
-                    onClick: () => {
-                      this.dismissSessionExpiryModal();
-                      this.props.onSessionExpiredLoginClick?.();
-                    },
-                    children: "Log in"
-                  }
-                )
-              ] }),
-              maxWidth: "600px"
-            }
-          )
-        ]
-      }
-    );
-  }
-}
-AuthProviderClass.propTypes = {
-  children: PropTypes.node.isRequired,
-  /** Runtime config for the library. Sets API URLs, Firebase config, cookie domain, etc.
-   *  When omitted, the library falls back to Vite env via getConfig() (Storybook / dev).
-   *  When consumed as an npm package, pass this prop so values are available at runtime. */
-  config: PropTypes.shape({
-    apiUrl: PropTypes.string,
-    baseUrlPublic: PropTypes.string,
-    cookieDomain: PropTypes.string,
-    websiteDomain: PropTypes.string,
-    /** Full base URL for the onboarding / sign-up app (e.g. `'https://signup.stokr.io'` or `'https://stokr.io/signin'`). */
-    onboardingUrl: PropTypes.string,
-    /** Full base URL for the investor dashboard (e.g. `'https://dashboard.stokr.io'`). */
-    dashboardUrl: PropTypes.string,
-    /** Full base URL for the admin / venture dashboard (e.g. `'https://admin.stokr.io'`). */
-    adminUrl: PropTypes.string,
-    /** URL for the registration entry point (e.g. `'https://stokr.io/signup'`). */
-    registerUrl: PropTypes.string,
-    firebase: PropTypes.shape({
-      apiKey: PropTypes.string,
-      authDomain: PropTypes.string,
-      projectId: PropTypes.string,
-      storageBucket: PropTypes.string,
-      messagingSenderId: PropTypes.string,
-      appId: PropTypes.string,
-      measurementId: PropTypes.string
-    })
-  }),
-  /** Override inactivity timeout in ms (e.g. for Storybook). Production uses 5 minutes. */
-  inactivityTimeMs: PropTypes.number,
-  /** How long before inactivity logout to show the warning modal (ms). Default 30 seconds. */
-  inactivityWarningBeforeMs: PropTypes.number,
-  /** When true, the inactivity modal is not shown after auto-logout. Default false. */
-  hideInactivityModal: PropTypes.bool,
-  /** Override access token cookie lifetime in ms (e.g. for Storybook). Production uses 1 hour. */
-  accessTokenExpiryMs: PropTypes.number,
-  /** A function to be called when the session expires. Default undefined. */
-  onSessionExpiredLoginClick: PropTypes.func
-};
-function resolveFirebaseConfigForGuard(props) {
-  if (props.config?.firebase != null) return props.config.firebase;
-  return getConfig("firebase");
-}
-function AuthProviderGuard(props) {
-  if (props.config) {
-    configure(props.config);
-  }
-  const firebase = resolveFirebaseConfigForGuard(props);
-  if (!isValidFirebaseConfig(firebase)) {
-    return /* @__PURE__ */ jsx(AuthContext.Provider, { value: FALLBACK_AUTH_CONTEXT_VALUE, children: props.children });
-  }
-  return /* @__PURE__ */ jsx(AuthProviderClass, { ...props });
-}
-AuthProviderGuard.propTypes = AuthProviderClass.propTypes;
-const AuthConsumer = AuthContext.Consumer;
-const AuthProvider = withRouter(AuthProviderGuard);
-export {
-  AuthConsumer,
-  AuthContext,
-  AuthProvider,
-  DEFAULT_TOKEN_EXPIRY_MS
-};