@strands.gg/accui 1.3.0 → 1.3.2

package/dist/nuxt/runtime/composables/useStrandsAuth.cjs.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const app = require("nuxt/app");
-const useStrandsAuth$1 = require("../../../useStrandsAuth-DK6bMycB.cjs");
+const useStrandsAuth$1 = require("../../../useStrandsAuth-Bw5wrBA2.cjs");
 const useStrandsAuth = () => {
   const config = app.useRuntimeConfig().public["strandsAuth"];
   const vueAuth = useStrandsAuth$1.useStrandsAuth();

package/dist/nuxt/runtime/composables/useStrandsAuth.d.ts

@@ -81,6 +81,7 @@ export declare const useStrandsAuth: () => {
     setAuthData: (authResponse: import('../../..').AuthResponse) => void;
     verifyMfa: (deviceId: string, code: string, isBackupCode?: boolean) => Promise<import('../../..').AuthResponse>;
     sendMfaEmailCode: (deviceId: string) => Promise<any>;
+    getMfaWebAuthnChallenge: (deviceId: string) => Promise<any>;
     registerHardwareKey: (deviceName: string, accessToken: string, deviceType?: "hardware" | "passkey") => Promise<any>;
     completeHardwareKeyRegistration: (deviceId: string, credential: any, accessToken: string) => Promise<any>;
     startTokenRefreshTimer: () => void;

package/dist/nuxt/runtime/composables/useStrandsAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useStrandsAuth.d.ts","sourceRoot":"","sources":["../../../../../../apps/accounts-ui/src/nuxt/runtime/composables/useStrandsAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,KAAK,CAAA;AAK3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAE1C,eAAO,MAAM,cAAc;;0BAYU;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;uBAYtC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqClD,CAAA;AAGD,eAAO,MAAM,WAAW,QAAO;IAAE,IAAI,EAAE,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;CAG9D,CAAA;AAED,eAAO,MAAM,YAAY,QAAO;IAAE,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAAC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;CAGvG,CAAA"}
+{"version":3,"file":"useStrandsAuth.d.ts","sourceRoot":"","sources":["../../../../../../apps/accounts-ui/src/nuxt/runtime/composables/useStrandsAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,KAAK,CAAA;AAK3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAE1C,eAAO,MAAM,cAAc;;0BAYU;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;uBAYtC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqClD,CAAA;AAGD,eAAO,MAAM,WAAW,QAAO;IAAE,IAAI,EAAE,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;CAG9D,CAAA;AAED,eAAO,MAAM,YAAY,QAAO;IAAE,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAAC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;CAGvG,CAAA"}

package/dist/nuxt/runtime/composables/useStrandsAuth.es.js

@@ -1,5 +1,5 @@
 import { useRuntimeConfig, navigateTo } from "nuxt/app";
-import { u as useStrandsAuth$1 } from "../../../useStrandsAuth-DiT3EcHV.js";
+import { u as useStrandsAuth$1 } from "../../../useStrandsAuth-DQbwHB-6.js";
 const useStrandsAuth = () => {
   const config = useRuntimeConfig().public["strandsAuth"];
   const vueAuth = useStrandsAuth$1();

package/dist/nuxt/runtime/plugin.client.cjs.js

@@ -1,6 +1,6 @@
 "use strict";
 const app = require("nuxt/app");
-const useStrandsConfig = require("../../useStrandsConfig-CjQTmiYi.cjs");
+const useStrandsConfig = require("../../useStrandsConfig-B9UkrP-c.cjs");
 const plugin_client = app.defineNuxtPlugin({
   name: "strands-auth-client",
   async setup() {

package/dist/nuxt/runtime/plugin.client.es.js

@@ -1,5 +1,5 @@
 import { defineNuxtPlugin, useRuntimeConfig } from "nuxt/app";
-import { p as provideStrandsConfig, S as STRANDS_AUTH_DEFAULTS } from "../../useStrandsConfig-EVnsLNNn.js";
+import { p as provideStrandsConfig, S as STRANDS_AUTH_DEFAULTS } from "../../useStrandsConfig-V7XSMyQ5.js";
 const plugin_client = defineNuxtPlugin({
   name: "strands-auth-client",
   async setup() {

package/dist/nuxt/runtime/plugin.server.cjs.js

@@ -1,6 +1,6 @@
 "use strict";
 const app = require("nuxt/app");
-const useStrandsConfig = require("../../useStrandsConfig-CjQTmiYi.cjs");
+const useStrandsConfig = require("../../useStrandsConfig-B9UkrP-c.cjs");
 const plugin_server = app.defineNuxtPlugin({
   name: "strands-auth-server",
   setup() {

package/dist/nuxt/runtime/plugin.server.es.js

@@ -1,5 +1,5 @@
 import { defineNuxtPlugin, useRuntimeConfig } from "nuxt/app";
-import { p as provideStrandsConfig, S as STRANDS_AUTH_DEFAULTS } from "../../useStrandsConfig-EVnsLNNn.js";
+import { p as provideStrandsConfig, S as STRANDS_AUTH_DEFAULTS } from "../../useStrandsConfig-V7XSMyQ5.js";
 const plugin_server = defineNuxtPlugin({
   name: "strands-auth-server",
   setup() {

package/dist/nuxt-v4/runtime/composables/useStrandsAuth.cjs.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const app = require("nuxt/app");
-const useStrandsAuth$1 = require("../../../useStrandsAuth-DK6bMycB.cjs");
+const useStrandsAuth$1 = require("../../../useStrandsAuth-Bw5wrBA2.cjs");
 const useStrandsAuth = () => {
   const config = app.useRuntimeConfig().public["strandsAuth"];
   const vueAuth = useStrandsAuth$1.useStrandsAuth();

package/dist/nuxt-v4/runtime/composables/useStrandsAuth.es.js

@@ -1,5 +1,5 @@
 import { useRuntimeConfig, navigateTo } from "nuxt/app";
-import { u as useStrandsAuth$1 } from "../../../useStrandsAuth-DiT3EcHV.js";
+import { u as useStrandsAuth$1 } from "../../../useStrandsAuth-DQbwHB-6.js";
 const useStrandsAuth = () => {
   const config = useRuntimeConfig().public["strandsAuth"];
   const vueAuth = useStrandsAuth$1();

package/dist/nuxt-v4/runtime/plugin.client.cjs.js

@@ -1,6 +1,6 @@
 "use strict";
 const app = require("nuxt/app");
-const useStrandsConfig = require("../../useStrandsConfig-CjQTmiYi.cjs");
+const useStrandsConfig = require("../../useStrandsConfig-B9UkrP-c.cjs");
 const plugin_client = app.defineNuxtPlugin({
   name: "strands-auth-client-v4",
   async setup() {

package/dist/nuxt-v4/runtime/plugin.client.es.js

@@ -1,5 +1,5 @@
 import { defineNuxtPlugin, useRuntimeConfig } from "nuxt/app";
-import { p as provideStrandsConfig, S as STRANDS_AUTH_DEFAULTS } from "../../useStrandsConfig-EVnsLNNn.js";
+import { p as provideStrandsConfig, S as STRANDS_AUTH_DEFAULTS } from "../../useStrandsConfig-V7XSMyQ5.js";
 const plugin_client = defineNuxtPlugin({
   name: "strands-auth-client-v4",
   async setup() {

package/dist/nuxt-v4/runtime/plugin.server.cjs.js

@@ -1,6 +1,6 @@
 "use strict";
 const app = require("nuxt/app");
-const useStrandsConfig = require("../../useStrandsConfig-CjQTmiYi.cjs");
+const useStrandsConfig = require("../../useStrandsConfig-B9UkrP-c.cjs");
 const plugin_server = app.defineNuxtPlugin({
   name: "strands-auth-server-v4",
   setup() {

package/dist/nuxt-v4/runtime/plugin.server.es.js

@@ -1,5 +1,5 @@
 import { defineNuxtPlugin, useRuntimeConfig } from "nuxt/app";
-import { S as STRANDS_AUTH_DEFAULTS, p as provideStrandsConfig } from "../../useStrandsConfig-EVnsLNNn.js";
+import { S as STRANDS_AUTH_DEFAULTS, p as provideStrandsConfig } from "../../useStrandsConfig-V7XSMyQ5.js";
 const plugin_server = defineNuxtPlugin({
   name: "strands-auth-server-v4",
   setup() {

package/dist/strands-auth-ui.cjs.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const vue = require("vue");
-const useStrandsConfig = require("./useStrandsConfig-CjQTmiYi.cjs");
-const useStrandsAuth = require("./useStrandsAuth-DK6bMycB.cjs");
+const useStrandsConfig = require("./useStrandsConfig-B9UkrP-c.cjs");
+const useStrandsAuth = require("./useStrandsAuth-Bw5wrBA2.cjs");
 const _sfc_main$r = /* @__PURE__ */ vue.defineComponent({
   __name: "UiAlert",
   props: {
@@ -1248,6 +1248,7 @@ const _sfc_main$i = /* @__PURE__ */ vue.defineComponent({
     const {
       verifyMfa,
       sendMfaEmailCode,
+      getMfaWebAuthnChallenge,
       mfaSessionId: authMfaSessionId,
       loading: authLoading,
       loadingMessage: authLoadingMessage,
@@ -1327,9 +1328,11 @@ const _sfc_main$i = /* @__PURE__ */ vue.defineComponent({
     const onBackupCodeInput = (value) => {
       let cleaned = value.replace(/[^a-zA-Z0-9-]/g, "").toLowerCase();
       if (!/[-]/.test(cleaned) && cleaned.length > 4) {
-        cleaned = cleaned.match(/.{1,4}/g)?.join("-") || cleaned;
+        const part1 = cleaned.substring(0, 4);
+        const part2 = cleaned.substring(4, 8);
+        cleaned = part2 ? `${part1}-${part2}` : part1;
       }
-      if (cleaned.replace(/-/g, "").length <= 16) {
+      if (cleaned.replace(/-/g, "").length <= 8) {
         backupCode.value = cleaned;
       }
       backupCodeError.value = "";
@@ -1388,16 +1391,13 @@ const _sfc_main$i = /* @__PURE__ */ vue.defineComponent({
         if (!window.navigator.credentials || !window.PublicKeyCredential) {
           throw new Error("Hardware keys are not supported in this browser");
         }
-        const challenge = new Uint8Array(32);
-        crypto.getRandomValues(challenge);
+        const challengeResponse = await getMfaWebAuthnChallenge(selectedMethod.value.id);
+        const challenge = challengeResponse.challenge;
+        console.log("Received WebAuthn challenge:", challenge);
         const isPasskey = selectedMethod.value.device_type === "passkey";
         const publicKeyCredentialRequestOptions = {
-          challenge,
-          timeout: isPasskey ? 3e5 : 6e4,
-          // Longer timeout for passkeys
-          rpId: window.location.hostname,
-          allowCredentials: [],
-          // Empty to allow any registered credential
+          ...challenge,
+          timeout: isPasskey ? 3e5 : challenge.timeout || 6e4,
           userVerification: isPasskey ? "required" : "discouraged"
         };
         const credential = await navigator.credentials.get({
@@ -1443,7 +1443,7 @@ const _sfc_main$i = /* @__PURE__ */ vue.defineComponent({
         emit("error", error instanceof Error ? error.message : "Hardware key authentication failed");
       }
     };
-    const __returned__ = { props, emit, mfaLoading, getDeviceTypeIcon, getDeviceTypeName, verifyMfa, sendMfaEmailCode, authMfaSessionId, authLoading, authLoadingMessage, isSendingMfaEmail, isVerifyingMfa, loading: loading2, selectedMethod, verificationCode, verificationError, backupCode, backupCodeError, showBackupCodeInput, emailCodeSent, cooldownActive, cooldownSeconds, get cooldownInterval() {
+    const __returned__ = { props, emit, mfaLoading, getDeviceTypeIcon, getDeviceTypeName, verifyMfa, sendMfaEmailCode, getMfaWebAuthnChallenge, authMfaSessionId, authLoading, authLoadingMessage, isSendingMfaEmail, isVerifyingMfa, loading: loading2, selectedMethod, verificationCode, verificationError, backupCode, backupCodeError, showBackupCodeInput, emailCodeSent, cooldownActive, cooldownSeconds, get cooldownInterval() {
       return cooldownInterval;
     }, set cooldownInterval(v) {
       cooldownInterval = v;
@@ -1847,7 +1847,7 @@ function _sfc_render$i(_ctx, _cache, $props, $setup, $data, $options) {
                     modelValue: $setup.backupCode,
                     "onUpdate:modelValue": _cache[1] || (_cache[1] = ($event) => $setup.backupCode = $event),
                     label: "Backup Code",
-                    placeholder: "abcd-efgh-ijkl",
+                    placeholder: "abcd-1234",
                     error: $setup.backupCodeError,
                     disabled: $setup.loading,
                     onInput: $setup.onBackupCodeInput,
@@ -1974,7 +1974,7 @@ function _sfc_render$i(_ctx, _cache, $props, $setup, $data, $options) {
                     modelValue: $setup.backupCode,
                     "onUpdate:modelValue": _cache[4] || (_cache[4] = ($event) => $setup.backupCode = $event),
                     label: "Backup Code",
-                    placeholder: "abcd-efgh-ijkl",
+                    placeholder: "abcd-1234",
                     error: $setup.backupCodeError,
                     disabled: $setup.loading,
                     onInput: $setup.onBackupCodeInput,
@@ -7527,6 +7527,28 @@ const _sfc_main$b = /* @__PURE__ */ vue.defineComponent({
     const closeModal = () => {
       emit("close");
     };
+    const getOptimalAuthenticatorSelection = (deviceType) => {
+      if (deviceType === "passkey") {
+        return {
+          authenticatorAttachment: void 0,
+          // Allow both platform and cross-platform for passkeys
+          requireResidentKey: true,
+          // Passkeys are resident credentials
+          residentKey: "required",
+          userVerification: "required"
+          // Passkeys should always verify user
+        };
+      } else {
+        return {
+          authenticatorAttachment: "cross-platform",
+          // Prefer external authenticators like YubiKey
+          requireResidentKey: false,
+          residentKey: "discouraged",
+          userVerification: "discouraged"
+          // YubiKeys work better with discouraged
+        };
+      }
+    };
     const createOptimizedWebAuthnChallenge = (challenge, deviceType) => {
       const safeBufferConvert = (data) => {
         try {
@@ -7736,7 +7758,7 @@ const _sfc_main$b = /* @__PURE__ */ vue.defineComponent({
     const finish = () => {
       emit("success");
     };
-    const __returned__ = { props, emit, mfaLoading, registerHardwareKey, completeHardwareKeyRegistration, currentSession, internalLoading, loading: loading2, step, deviceName, deviceNameError, registrationMessage, errorMessage, backupCodes, closeModal, createOptimizedWebAuthnChallenge, startSetup, handleRegisterHardwareKey, copyBackupCodes, finish, get StrandsUiButton() {
+    const __returned__ = { props, emit, mfaLoading, registerHardwareKey, completeHardwareKeyRegistration, currentSession, internalLoading, loading: loading2, step, deviceName, deviceNameError, registrationMessage, errorMessage, backupCodes, closeModal, getOptimalAuthenticatorSelection, createOptimizedWebAuthnChallenge, startSetup, handleRegisterHardwareKey, copyBackupCodes, finish, get StrandsUiButton() {
       return StrandsUiButton;
     }, get StrandsUiInput() {
       return StrandsUiInput;