@strands.gg/accui 1.2.1 → 1.2.2

package/dist/strands-auth-ui.cjs.js

@@ -7427,15 +7427,38 @@ const _sfc_main$b = /* @__PURE__ */ vue.defineComponent({
           challenge: safeBufferConvert(challenge.challenge),
           pubKeyCredParams: challenge.pubKeyCredParams || [
             { type: "public-key", alg: -7 },
-            // ES256
-            { type: "public-key", alg: -257 }
-            // RS256
+            // ES256 (ECDSA w/ SHA-256)
+            { type: "public-key", alg: -35 },
+            // ES384 (ECDSA w/ SHA-384) 
+            { type: "public-key", alg: -36 },
+            // ES512 (ECDSA w/ SHA-512)
+            { type: "public-key", alg: -257 },
+            // RS256 (RSASSA-PKCS1-v1_5 w/ SHA-256)
+            { type: "public-key", alg: -258 },
+            // RS384 (RSASSA-PKCS1-v1_5 w/ SHA-384)
+            { type: "public-key", alg: -259 },
+            // RS512 (RSASSA-PKCS1-v1_5 w/ SHA-512)
+            { type: "public-key", alg: -37 },
+            // PS256 (RSASSA-PSS w/ SHA-256)
+            { type: "public-key", alg: -38 },
+            // PS384 (RSASSA-PSS w/ SHA-384)
+            { type: "public-key", alg: -39 },
+            // PS512 (RSASSA-PSS w/ SHA-512)
+            { type: "public-key", alg: -8 }
+            // EdDSA (Ed25519)
           ],
-          timeout: challenge.timeout || 6e4,
+          timeout: challenge.timeout || 12e4,
+          // Longer timeout for hardware keys
           authenticatorSelection: challenge.authenticatorSelection || {
-            userVerification: "preferred"
+            authenticatorAttachment: "cross-platform",
+            // Prefer external authenticators like YubiKey
+            requireResidentKey: false,
+            residentKey: "discouraged",
+            userVerification: "discouraged"
+            // YubiKeys work better with discouraged
           },
-          attestation: challenge.attestation || "none"
+          attestation: challenge.attestation || "direct"
+          // Better compatibility with hardware keys
         };
         if (challenge.excludeCredentials && Array.isArray(challenge.excludeCredentials) && challenge.excludeCredentials.length > 0) {
           cleanChallenge.excludeCredentials = challenge.excludeCredentials.map((cred) => ({
@@ -7465,6 +7488,16 @@ const _sfc_main$b = /* @__PURE__ */ vue.defineComponent({
         if (!window.navigator.credentials || !window.PublicKeyCredential) {
           throw new Error("WebAuthn is not supported in this browser");
         }
+        try {
+          const available = await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable?.();
+          console.log("Platform authenticator available:", available);
+          if (PublicKeyCredential.isConditionalMediationAvailable) {
+            const conditionalMediationAvailable = await PublicKeyCredential.isConditionalMediationAvailable();
+            console.log("Conditional mediation available:", conditionalMediationAvailable);
+          }
+        } catch (checkError) {
+          console.warn("Could not check authenticator availability:", checkError);
+        }
         if (!currentSession.value?.accessToken) {
           throw new Error("Not authenticated. Please sign in again.");
         }
@@ -7531,7 +7564,26 @@ const _sfc_main$b = /* @__PURE__ */ vue.defineComponent({
         }
       } catch (error) {
         console.error("Hardware key registration error:", error);
-        errorMessage.value = error instanceof Error ? error.message : "Hardware key registration failed";
+        let userErrorMessage = "Hardware key registration failed";
+        if (error instanceof Error) {
+          const errorMsg = error.message.toLowerCase();
+          if (errorMsg.includes("not supported") || errorMsg.includes("webauthn")) {
+            userErrorMessage = "WebAuthn is not supported in this browser. Please use Chrome, Firefox, Safari, or Edge.";
+          } else if (errorMsg.includes("cancelled") || errorMsg.includes("aborted")) {
+            userErrorMessage = "Hardware key registration was cancelled. Please try again and touch your key when prompted.";
+          } else if (errorMsg.includes("timeout")) {
+            userErrorMessage = "Hardware key registration timed out. Please ensure your key is connected and try again.";
+          } else if (errorMsg.includes("not allowed") || errorMsg.includes("invalid state")) {
+            userErrorMessage = "This hardware key may already be registered or cannot be used. Try a different key or contact support.";
+          } else if (errorMsg.includes("can't be used") || errorMsg.includes("newer or different")) {
+            userErrorMessage = "Your hardware key is not compatible. Please ensure you have a FIDO2/WebAuthn compatible key like YubiKey 5 Series, and that it's properly connected.";
+          } else if (errorMsg.includes("user verification") || errorMsg.includes("pin")) {
+            userErrorMessage = "Hardware key verification failed. If your key has a PIN, please enter it when prompted.";
+          } else {
+            userErrorMessage = error.message;
+          }
+        }
+        errorMessage.value = userErrorMessage;
         step.value = 5;
       } finally {
         internalLoading.value = false;