@structured-id/ui-core 4.3.0 → 4.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@structured-id/ui-core",
-  "version": "4.3.0",
+  "version": "4.4.0",
   "type": "module",
   "publishConfig": {
     "access": "public",
@@ -42,7 +42,7 @@
     "@protobuf-ts/grpcweb-transport": "^2.11.1",
     "@protobuf-ts/runtime": "^2.11.1",
     "@protobuf-ts/runtime-rpc": "^2.11.1",
-    "@structured-id/proto": "^0.3.0",
+    "@structured-id/proto": "^0.4.1",
     "@structured-world/structured-email-address-ts": "^0.0.22",
     "@structured-world/structured-public-domains": "0.0.x",
     "libphonenumber-js": "^1.13.15"

package/src/composables/index.ts

@@ -1,11 +1,4 @@
-export {
-  useGrpc,
-  initGrpc,
-  getTransport,
-  closeTransport,
-  getTransportType,
-  type TransportType,
-} from "./useGrpc";
+export { useGrpc, initGrpc, getTransport, closeTransport } from "./useGrpc";
 export {
   initAccountApi,
   getAccountTransport,

package/src/composables/useGrpc.test.ts

@@ -4,28 +4,8 @@ import { describe, it, expect, vi, beforeEach } from "vitest";
 // Mock modules BEFORE importing the module under test
 // ---------------------------------------------------------------------------
 
-const mockAdaptiveInit = vi
-  .fn<() => Promise<void>>()
-  .mockResolvedValue(undefined);
-const mockAdaptiveClose = vi.fn();
-const mockAdaptiveActiveTransport = vi
-  .fn<() => string>()
-  .mockReturnValue("grpc-web");
-
-vi.mock("@structured-id/proto/transport", () => ({
-  // Constructor mocks are `function`s: they are called with `new`.
-  AdaptiveRpcTransport: vi.fn().mockImplementation(function () {
-    return {
-      init: mockAdaptiveInit,
-      close: mockAdaptiveClose,
-      get activeTransport() {
-        return mockAdaptiveActiveTransport();
-      },
-    };
-  }),
-}));
-
 vi.mock("@protobuf-ts/grpcweb-transport", () => ({
+  // Constructor mocks are `function`s: they are called with `new`.
   GrpcWebFetchTransport: vi.fn().mockImplementation(function () {
     return { type: "grpc-web-transport" };
   }),
@@ -33,14 +13,7 @@ vi.mock("@protobuf-ts/grpcweb-transport", () => ({
 
 // Import AFTER mocks
 import { GrpcWebFetchTransport } from "@protobuf-ts/grpcweb-transport";
-import { AdaptiveRpcTransport } from "@structured-id/proto/transport";
-import {
-  initGrpc,
-  getTransport,
-  closeTransport,
-  getTransportType,
-  useGrpc,
-} from "./useGrpc";
+import { initGrpc, getTransport, closeTransport, useGrpc } from "./useGrpc";
 import type { GrpcConfig } from "../types/auth";
 
 // ---------------------------------------------------------------------------
@@ -50,11 +23,12 @@ import type { GrpcConfig } from "../types/auth";
 describe("useGrpc", () => {
   beforeEach(() => {
     vi.clearAllMocks();
-    // Reset transport state by calling close between tests
     closeTransport();
   });
 
-  describe("initGrpc — without WebTransport URL", () => {
+  describe("initGrpc", () => {
+    // The BFF session cookie rides on every call, so credentials are always
+    // included; nothing else configures the transport.
     it("creates GrpcWebFetchTransport with baseUrl and credentials", () => {
       const config: GrpcConfig = { baseUrl: "https://api.sid.example.com" };
       initGrpc(config);
@@ -63,75 +37,6 @@ describe("useGrpc", () => {
         baseUrl: "https://api.sid.example.com",
         fetchInit: { credentials: "include" },
       });
-      expect(AdaptiveRpcTransport).not.toHaveBeenCalled();
-    });
-
-    it("getTransportType returns grpc-web", () => {
-      initGrpc({ baseUrl: "https://api.sid.example.com" });
-      expect(getTransportType()).toBe("grpc-web");
-    });
-  });
-
-  describe("initGrpc — with WebTransport URL", () => {
-    it("creates AdaptiveRpcTransport with fetchInit credentials", () => {
-      const config: GrpcConfig = {
-        baseUrl: "https://api.sid.example.com",
-        webTransportUrl: "https://wt.api.sid.example.com",
-      };
-      initGrpc(config);
-
-      expect(AdaptiveRpcTransport).toHaveBeenCalledWith(
-        expect.objectContaining({
-          grpcWebUrl: "https://api.sid.example.com",
-          webTransportUrl: "https://wt.api.sid.example.com",
-          fetchInit: { credentials: "include" },
-        }),
-      );
-      expect(GrpcWebFetchTransport).not.toHaveBeenCalled();
-    });
-
-    it("calls adaptive.init() non-blocking on creation", async () => {
-      initGrpc({
-        baseUrl: "https://api.sid.example.com",
-        webTransportUrl: "https://wt.api.sid.example.com",
-      });
-
-      // init() should be called (non-blocking fire-and-forget)
-      // Give microtasks time to run
-      await Promise.resolve();
-      expect(mockAdaptiveInit).toHaveBeenCalled();
-    });
-
-    it("passes all WebTransport options to AdaptiveRpcTransport", () => {
-      const onChange = vi.fn();
-      initGrpc({
-        baseUrl: "https://api.sid.example.com",
-        webTransportUrl: "https://wt.api.sid.example.com",
-        webTransportCertHash: "abcdef1234567890",
-        webTransportReconnectDelay: 3000,
-        onTransportChange: onChange,
-      });
-
-      expect(AdaptiveRpcTransport).toHaveBeenCalledWith(
-        expect.objectContaining({
-          grpcWebUrl: "https://api.sid.example.com",
-          webTransportUrl: "https://wt.api.sid.example.com",
-          webTransportCertHash: "abcdef1234567890",
-          reconnectDelay: 3000,
-          onTransportChange: onChange,
-          fetchInit: { credentials: "include" },
-        }),
-      );
-    });
-
-    it("getTransportType delegates to AdaptiveRpcTransport.activeTransport", () => {
-      mockAdaptiveActiveTransport.mockReturnValue("webtransport");
-      initGrpc({
-        baseUrl: "https://api.sid.example.com",
-        webTransportUrl: "https://wt.api.sid.example.com",
-      });
-
-      expect(getTransportType()).toBe("webtransport");
     });
   });
 
@@ -142,8 +47,7 @@ describe("useGrpc", () => {
 
     it("returns transport after initGrpc", () => {
       initGrpc({ baseUrl: "https://api.sid.example.com" });
-      expect(() => getTransport()).not.toThrow();
-      expect(getTransport()).toBeDefined();
+      expect(getTransport()).toEqual({ type: "grpc-web-transport" });
     });
   });
 
@@ -164,36 +68,16 @@ describe("useGrpc", () => {
       expect(typeof composable.getTransport).toBe("function");
       expect(typeof composable.initGrpc).toBe("function");
     });
-
-    it("transport.value is null after closeTransport", () => {
-      initGrpc({ baseUrl: "https://api.sid.example.com" });
-      closeTransport();
-      const { transport } = useGrpc();
-      expect(transport.value).toBeNull();
-    });
   });
 
   describe("closeTransport", () => {
-    it("calls close() on AdaptiveRpcTransport", () => {
-      initGrpc({
-        baseUrl: "https://api.sid.example.com",
-        webTransportUrl: "https://wt.api.sid.example.com",
-      });
-
-      closeTransport();
-      expect(mockAdaptiveClose).toHaveBeenCalled();
-    });
-
+    // After close, the transport is gone: a later call must initialize
+    // again rather than reuse the old one.
     it("resets transport to null (getTransport throws after close)", () => {
       initGrpc({ baseUrl: "https://api.sid.example.com" });
       closeTransport();
       expect(() => getTransport()).toThrow("gRPC transport not initialized");
-    });
-
-    it("does not call close() on plain GrpcWebFetchTransport (no close method)", () => {
-      initGrpc({ baseUrl: "https://api.sid.example.com" });
-      // Should not throw even though GrpcWebFetchTransport has no close()
-      expect(() => closeTransport()).not.toThrow();
+      expect(useGrpc().transport.value).toBeNull();
     });
   });
 });

package/src/composables/useGrpc.ts

@@ -2,67 +2,28 @@ import { GrpcWebFetchTransport } from "@protobuf-ts/grpcweb-transport";
 import type { RpcTransport } from "@protobuf-ts/runtime-rpc";
 import { ref, type Ref } from "vue";
 import type { GrpcConfig } from "../types/auth";
-import {
-  AdaptiveRpcTransport,
-  type TransportType,
-} from "@structured-id/proto/transport";
 
-/** Shared RPC transport instance (gRPC-web or AdaptiveRpcTransport). */
+/** Shared gRPC-web transport instance. */
 let _transport: RpcTransport | null = null;
-/** Separate reference to AdaptiveRpcTransport when active (avoids instanceof). */
-let _adaptive: AdaptiveRpcTransport | null = null;
 
 /**
- * Initialize the gRPC transport. Call once at app startup.
+ * Initialize the gRPC-web transport. Call once at app startup.
  *
- * When `config.webTransportUrl` is provided, creates an AdaptiveRpcTransport
- * with WebTransport as the primary and gRPC-web as the fallback. The initial
- * WebTransport connection is attempted asynchronously (non-blocking).
- *
- * Without `config.webTransportUrl`, falls back to plain gRPC-web (same as before).
- *
- * After BFF migration (#536i-3): `credentials: "include"` is always set
- * so the httpOnly BFF session cookie is sent with every gRPC-web request.
+ * `credentials: "include"` is always set so the httpOnly BFF session cookie
+ * is sent with every request.
  *
  * @example
  * ```ts
- * // gRPC-web only
  * initGrpc({ baseUrl: 'https://api.example.com' })
- *
- * // With WebTransport failover
- * initGrpc({
- *   baseUrl: 'https://api.example.com',
- *   webTransportUrl: 'https://wt.api.example.com',
- * })
  * ```
  */
 export function initGrpc(config: GrpcConfig): void {
-  if (config.webTransportUrl) {
-    const adaptive = new AdaptiveRpcTransport({
-      grpcWebUrl: config.baseUrl,
-      webTransportUrl: config.webTransportUrl,
-      webTransportCertHash: config.webTransportCertHash,
-      reconnectDelay: config.webTransportReconnectDelay,
-      onTransportChange: config.onTransportChange,
-      // Always include credentials so the BFF session cookie is attached.
-      // The BFF proxy exchanges the cookie for a Bearer token server-side.
-      fetchInit: { credentials: "include" },
-    });
-    // Attempt WebTransport connection in background — non-blocking.
-    adaptive.init().catch(() => {
-      // Silently falls back to gRPC-web if WebTransport is unavailable.
-    });
-    _adaptive = adaptive;
-    _transport = adaptive;
-  } else {
-    _adaptive = null;
-    _transport = new GrpcWebFetchTransport({
-      baseUrl: config.baseUrl,
-      // Always include credentials so the BFF session cookie is attached.
-      // The BFF proxy exchanges the cookie for a Bearer token server-side.
-      fetchInit: { credentials: "include" },
-    });
-  }
+  _transport = new GrpcWebFetchTransport({
+    baseUrl: config.baseUrl,
+    // The BFF proxy exchanges the session cookie for a Bearer token
+    // server-side.
+    fetchInit: { credentials: "include" },
+  });
 }
 
 /**
@@ -78,24 +39,12 @@ export function getTransport(): RpcTransport {
 }
 
 /**
- * Close the transport and release resources (timers, connections).
- * Call during app teardown if using WebTransport.
+ * Drop the shared transport; the next use needs `initGrpc()` again.
  */
 export function closeTransport(): void {
-  _adaptive?.close();
-  _adaptive = null;
   _transport = null;
 }
 
-/**
- * Get the currently active transport type.
- * Returns "grpc-web" if AdaptiveRpcTransport is not used or WebTransport
- * is not available.
- */
-export function getTransportType(): TransportType {
-  return _adaptive?.activeTransport ?? "grpc-web";
-}
-
 /**
  * Vue composable for gRPC transport.
  *
@@ -118,5 +67,3 @@ export function useGrpc() {
     initGrpc,
   };
 }
-
-export type { TransportType };

package/src/index.ts

@@ -4,8 +4,6 @@ export {
   initGrpc,
   getTransport,
   closeTransport,
-  getTransportType,
-  type TransportType,
 } from "./composables/useGrpc";
 export { useSession, type SessionCallbacks } from "./composables/useSession";
 export {

package/src/profile/components/SidLoginForm.test.ts

@@ -37,7 +37,6 @@ const quasarStubs = {
 };
 
 const loginFn = vi.fn().mockResolvedValue({
-  accessToken: "tok",
   expiresIn: 3600,
   sessionId: "sess-1",
 });

package/src/profile/components/SidLoginForm.vue

@@ -175,7 +175,6 @@ const props = withDefaults(
       password: string,
       onStep?: (step: number) => void,
     ) => Promise<{
-      accessToken: string;
       expiresIn: number;
       sessionId?: string;
     }>;
@@ -207,9 +206,7 @@ const props = withDefaults(
 );
 
 const emit = defineEmits<{
-  success: [
-    result: { accessToken: string; expiresIn: number; sessionId?: string },
-  ];
+  success: [result: { expiresIn: number; sessionId?: string }];
   error: [error: Error];
   "forgot-password": [];
 }>();

package/src/profile/composables/useAuth.test.ts

@@ -125,7 +125,6 @@ describe("createAuth prewarm", () => {
     });
     api.loginFinish.mockResolvedValue({
       sessionId: "s",
-      accessToken: "t",
       expiresIn: 60n,
     });
   });
@@ -173,10 +172,13 @@ describe("createAuth register", () => {
       registrationResponse: RESPONSE,
       history: wireContext(),
     });
-    api.regFinish.mockResolvedValue({
+    // An older server's answer, still carrying a Profile identifier the
+    // current message no longer has.
+    const fromOlderServer = {
       profileId: "profile-uuid",
       credentialId: "cred-uuid",
-    });
+    };
+    api.regFinish.mockResolvedValue(fromOlderServer);
   });
 
   it("runs the operation: start, evaluate, prove, finish with the proof", async () => {
@@ -208,10 +210,9 @@ describe("createAuth register", () => {
       RESPONSE,
     );
     expect(api.regFinish).toHaveBeenCalledWith(OPERATION, RECORD, WIRE_PROOF);
-    expect(result).toEqual({
-      profileId: "profile-uuid",
-      credentialId: "cred-uuid",
-    });
+    // Regression: the result passed the server's Profile identifier on to
+    // the application; even a server still sending one is not forwarded.
+    expect(result).toEqual({ credentialId: "cred-uuid" });
   });
 
   // A password the circuit cannot hold has no history request: nothing is
@@ -651,7 +652,6 @@ describe("createAuth resetPassword", () => {
     api.executeReset.mockResolvedValue({ registrationResponse: RESPONSE });
     api.completeReset.mockResolvedValue({
       sessionId: "sess-1",
-      accessToken: "jwt",
       expiresIn: 3600,
     });
   });
@@ -687,9 +687,8 @@ describe("createAuth login", () => {
     });
     api.loginFinish.mockResolvedValue({
       sessionId: "sess-1",
-      accessToken: "jwt",
       expiresIn: BigInt(3600),
-    } as never);
+    });
   });
 
   it("signs in with the Pallas client in two round trips", async () => {
@@ -714,9 +713,10 @@ describe("createAuth login", () => {
       "server-state",
     );
     expect(steps).toEqual([1, 2, 3]);
+    // The result carries no credential: the browser holds the session
+    // cookie the answer set.
     expect(result).toEqual({
       sessionId: "sess-1",
-      accessToken: "jwt",
       expiresIn: 3600,
     });
   });

package/src/profile/composables/useAuth.ts

@@ -33,16 +33,21 @@ import {
 
 // ── Types ──
 
-/** A sign-in's session, as the server issued it. */
+/**
+ * A sign-in's session, as the server issued it. The credential itself never
+ * reaches page code: a browser holds the session cookie the answer set.
+ */
 export interface LoginResult {
   sessionId: string;
-  accessToken: string;
+  /** Seconds until the delivered credential expires. */
   expiresIn: number;
 }
 
-/** A registration's profile and its password credential. */
+/**
+ * A registration's password credential. No Profile identifier: the client
+ * signs in after registering and works through its session.
+ */
 export interface RegisterResult {
-  profileId: string;
   credentialId: string;
 }
 
@@ -394,10 +399,7 @@ export function createAuth(loadClient: ZkppClientLoader) {
       done.proof,
     );
     plan.finish();
-    return {
-      profileId: finished.profileId,
-      credentialId: finished.credentialId,
-    };
+    return { credentialId: finished.credentialId };
   }
 
   /**
@@ -541,7 +543,6 @@ export function createAuth(loadClient: ZkppClientLoader) {
     );
     return {
       sessionId: finished.sessionId,
-      accessToken: finished.accessToken,
       expiresIn: Number(finished.expiresIn),
     };
   }

package/src/profile/composables/useAuthApi.opaque.test.ts

@@ -71,7 +71,6 @@ describe("OPAQUE gRPC wrappers", () => {
     it("sends principal, finalization, and serverLoginState", async () => {
       const expected = {
         sessionId: "sess-1",
-        accessToken: "jwt",
         expiresIn: BigInt(3600),
       };
       mockOpaqueLoginFinish.mockResolvedValue({ response: expected });

package/src/types/auth.ts

@@ -29,30 +29,4 @@ export interface SessionInfo {
 export interface GrpcConfig {
   /** Base URL for gRPC-web transport (e.g., "https://api.example.com"). */
   baseUrl: string;
-  /**
-   * @deprecated BFF mode always uses credentials: "include".
-   * This field is kept for API compatibility but has no effect.
-   */
-  withCredentials?: boolean;
-  /**
-   * WebTransport server URL (e.g., "https://wt.api.example.com").
-   * When provided, AdaptiveRpcTransport is used with WebTransport as primary
-   * and gRPC-web as fallback. Omit to use gRPC-web only.
-   */
-  webTransportUrl?: string;
-  /**
-   * SHA-256 certificate hash (hex string) for dev self-signed WebTransport certs.
-   * Only needed when connecting to servers with self-signed certificates.
-   */
-  webTransportCertHash?: string;
-  /**
-   * Delay in milliseconds before attempting to reconnect WebTransport after failover.
-   * Defaults to 5000ms.
-   */
-  webTransportReconnectDelay?: number;
-  /**
-   * Callback fired when the active transport changes between "webtransport" and "grpc-web".
-   * Use this to show transport status indicators in the UI.
-   */
-  onTransportChange?: (transport: "webtransport" | "grpc-web") => void;
 }