@things-factory/auth-ui 10.1.17 → 10.1.18

package/dist-client/utils/form-values.d.ts

@@ -40,3 +40,32 @@ export declare function filledValues(formData: FormData): Record<string, FormVal
  * watching a mutation fail on a rule the form never mentioned.
  */
 export declare function missingRequired(formData: FormData, required: string[]): string[];
+/**
+ * What the person changed, as a patch.
+ *
+ * ── Why this is not `filledValues` ──────────────────────────────────────────
+ * On a create, an empty box means "I did not fill this in" and the key is left out — that is
+ * what optional means on the wire, and it is what `filledValues` does.
+ *
+ * On an **update** that reading is wrong. `AppliancePatch` and `ApplicationPatch` are applied
+ * by spreading over the loaded row (`applianceRepository.save({ ...appliance, ...patch })`),
+ * so a key that is absent means "leave it alone" and a key set to `''` means "clear it".
+ * Those are two different intentions and a form has to tell them apart:
+ *
+ *     netmask was '10.0.0.0/8', box is now empty   →  the person cleared it   →  send ''
+ *     netmask was never set,    box is still empty →  nothing happened        →  send nothing
+ *
+ * `filledValues` cannot express the first one — it drops every empty box — so an update
+ * screen built on it can never clear a field. Sending the whole form instead has the opposite
+ * fault: every untouched box goes as `''`, which clears fields nobody touched, and for
+ * `ApplicationPatch.email` (a GraphQLEmailAddress) `''` is not "no email" but an invalid one,
+ * so the whole update is refused over a box the person never visited.
+ *
+ * Comparing against the record that was loaded is the only thing that tells the two apart.
+ *
+ * ── The other thing this buys ───────────────────────────────────────────────
+ * The patch carries only what moved. A screen that sends every field back writes values it
+ * merely displayed, so a row edited from a stale copy silently overwrites whatever someone
+ * else changed in between.
+ */
+export declare function changedValues(formData: FormData, original: Record<string, any> | null | undefined): Record<string, FormValue>;

package/dist-client/utils/form-values.js

@@ -54,4 +54,49 @@ export function missingRequired(formData, required) {
     const values = filledValues(formData);
     return required.filter(name => !values[name]);
 }
+/**
+ * What the person changed, as a patch.
+ *
+ * ── Why this is not `filledValues` ──────────────────────────────────────────
+ * On a create, an empty box means "I did not fill this in" and the key is left out — that is
+ * what optional means on the wire, and it is what `filledValues` does.
+ *
+ * On an **update** that reading is wrong. `AppliancePatch` and `ApplicationPatch` are applied
+ * by spreading over the loaded row (`applianceRepository.save({ ...appliance, ...patch })`),
+ * so a key that is absent means "leave it alone" and a key set to `''` means "clear it".
+ * Those are two different intentions and a form has to tell them apart:
+ *
+ *     netmask was '10.0.0.0/8', box is now empty   →  the person cleared it   →  send ''
+ *     netmask was never set,    box is still empty →  nothing happened        →  send nothing
+ *
+ * `filledValues` cannot express the first one — it drops every empty box — so an update
+ * screen built on it can never clear a field. Sending the whole form instead has the opposite
+ * fault: every untouched box goes as `''`, which clears fields nobody touched, and for
+ * `ApplicationPatch.email` (a GraphQLEmailAddress) `''` is not "no email" but an invalid one,
+ * so the whole update is refused over a box the person never visited.
+ *
+ * Comparing against the record that was loaded is the only thing that tells the two apart.
+ *
+ * ── The other thing this buys ───────────────────────────────────────────────
+ * The patch carries only what moved. A screen that sends every field back writes values it
+ * merely displayed, so a row edited from a stale copy silently overwrites whatever someone
+ * else changed in between.
+ */
+export function changedValues(formData, original) {
+    const record = original || {};
+    const patch = {};
+    for (const [key, value] of Array.from(formData.entries())) {
+        if (typeof value !== 'string') {
+            /* A file is never "unchanged" — there is nothing on the record to compare it against. */
+            patch[key] = value;
+            continue;
+        }
+        const next = value.trim();
+        const before = record[key] === null || record[key] === undefined ? '' : String(record[key]).trim();
+        if (next !== before) {
+            patch[key] = next;
+        }
+    }
+    return patch;
+}
 //# sourceMappingURL=form-values.js.map

package/dist-client/utils/form-values.js.map

@@ -1 +1 @@
-{"version":3,"file":"form-values.js","sourceRoot":"","sources":["../../client/utils/form-values.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAkB;IAC7C,MAAM,MAAM,GAA8B,EAAE,CAAA;IAE5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;YAE5B,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAA;YACvB,CAAC;YAED,SAAQ;QACV,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,KAAa,CAAA;IAC7B,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAkB,EAAE,QAAkB;IACpE,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAErC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;AAC/C,CAAC","sourcesContent":["/**\n * Turning a form into the object a mutation takes.\n *\n * ── The bug this exists for ──────────────────────────────────────────────────\n * The application register screen built its input like this:\n *\n *     Array.from(formData.entries()).reduce((app, [key, value]) => { app[key] = value; … })\n *\n * `FormData` carries **every named input**, including the ones nobody typed in, each as an\n * empty string. So an untouched optional field went to the server as `''` rather than as\n * absent — and for `email` that is not the same thing at all:\n *\n *     NewApplication.email is GraphQLEmailAddress, nullable\n *     EmailAddressResolver.parseValue('')  →  \"Value is not a valid email address\"\n *\n * Registering an application without a contact email therefore failed, on a field the schema\n * marks optional. The screen said nothing useful about why.\n *\n * ── What \"absent\" means here ─────────────────────────────────────────────────\n * An empty text input means the person did not fill it in. It does not mean \"set this to the\n * empty string\" — HTML has no way to say that, and no field in these forms wants it. So an\n * empty value is dropped and the key never appears, which is what \"optional\" means on the\n * wire.\n *\n * Whitespace counts as empty for the same reason: a space typed by accident is not an answer,\n * and every scalar that rejects `''` rejects `' '` too.\n */\n\n/** Values a form can carry. Files pass through untouched — there is no empty file to drop. */\nexport type FormValue = string | File\n\n/**\n * The filled-in fields, as an object.\n *\n * Keys whose value is empty or whitespace are left out entirely rather than sent as `''`.\n */\nexport function filledValues(formData: FormData): Record<string, FormValue> {\n  const values: Record<string, FormValue> = {}\n\n  for (const [key, value] of Array.from(formData.entries())) {\n    if (typeof value === 'string') {\n      const trimmed = value.trim()\n\n      if (trimmed) {\n        values[key] = trimmed\n      }\n\n      continue\n    }\n\n    values[key] = value as File\n  }\n\n  return values\n}\n\n/**\n * Which of the named fields are still missing.\n *\n * The screen asks before it sends, so the person is told which box to fill rather than\n * watching a mutation fail on a rule the form never mentioned.\n */\nexport function missingRequired(formData: FormData, required: string[]): string[] {\n  const values = filledValues(formData)\n\n  return required.filter(name => !values[name])\n}\n"]}
+{"version":3,"file":"form-values.js","sourceRoot":"","sources":["../../client/utils/form-values.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAkB;IAC7C,MAAM,MAAM,GAA8B,EAAE,CAAA;IAE5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;YAE5B,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAA;YACvB,CAAC;YAED,SAAQ;QACV,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,KAAa,CAAA;IAC7B,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAkB,EAAE,QAAkB;IACpE,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAErC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAkB,EAClB,QAAgD;IAEhD,MAAM,MAAM,GAAG,QAAQ,IAAI,EAAE,CAAA;IAC7B,MAAM,KAAK,GAA8B,EAAE,CAAA;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,yFAAyF;YACzF,KAAK,CAAC,GAAG,CAAC,GAAG,KAAa,CAAA;YAC1B,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAElG,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;QACnB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC","sourcesContent":["/**\n * Turning a form into the object a mutation takes.\n *\n * ── The bug this exists for ──────────────────────────────────────────────────\n * The application register screen built its input like this:\n *\n *     Array.from(formData.entries()).reduce((app, [key, value]) => { app[key] = value; … })\n *\n * `FormData` carries **every named input**, including the ones nobody typed in, each as an\n * empty string. So an untouched optional field went to the server as `''` rather than as\n * absent — and for `email` that is not the same thing at all:\n *\n *     NewApplication.email is GraphQLEmailAddress, nullable\n *     EmailAddressResolver.parseValue('')  →  \"Value is not a valid email address\"\n *\n * Registering an application without a contact email therefore failed, on a field the schema\n * marks optional. The screen said nothing useful about why.\n *\n * ── What \"absent\" means here ─────────────────────────────────────────────────\n * An empty text input means the person did not fill it in. It does not mean \"set this to the\n * empty string\" — HTML has no way to say that, and no field in these forms wants it. So an\n * empty value is dropped and the key never appears, which is what \"optional\" means on the\n * wire.\n *\n * Whitespace counts as empty for the same reason: a space typed by accident is not an answer,\n * and every scalar that rejects `''` rejects `' '` too.\n */\n\n/** Values a form can carry. Files pass through untouched — there is no empty file to drop. */\nexport type FormValue = string | File\n\n/**\n * The filled-in fields, as an object.\n *\n * Keys whose value is empty or whitespace are left out entirely rather than sent as `''`.\n */\nexport function filledValues(formData: FormData): Record<string, FormValue> {\n  const values: Record<string, FormValue> = {}\n\n  for (const [key, value] of Array.from(formData.entries())) {\n    if (typeof value === 'string') {\n      const trimmed = value.trim()\n\n      if (trimmed) {\n        values[key] = trimmed\n      }\n\n      continue\n    }\n\n    values[key] = value as File\n  }\n\n  return values\n}\n\n/**\n * Which of the named fields are still missing.\n *\n * The screen asks before it sends, so the person is told which box to fill rather than\n * watching a mutation fail on a rule the form never mentioned.\n */\nexport function missingRequired(formData: FormData, required: string[]): string[] {\n  const values = filledValues(formData)\n\n  return required.filter(name => !values[name])\n}\n\n/**\n * What the person changed, as a patch.\n *\n * ── Why this is not `filledValues` ──────────────────────────────────────────\n * On a create, an empty box means \"I did not fill this in\" and the key is left out — that is\n * what optional means on the wire, and it is what `filledValues` does.\n *\n * On an **update** that reading is wrong. `AppliancePatch` and `ApplicationPatch` are applied\n * by spreading over the loaded row (`applianceRepository.save({ ...appliance, ...patch })`),\n * so a key that is absent means \"leave it alone\" and a key set to `''` means \"clear it\".\n * Those are two different intentions and a form has to tell them apart:\n *\n *     netmask was '10.0.0.0/8', box is now empty   →  the person cleared it   →  send ''\n *     netmask was never set,    box is still empty →  nothing happened        →  send nothing\n *\n * `filledValues` cannot express the first one — it drops every empty box — so an update\n * screen built on it can never clear a field. Sending the whole form instead has the opposite\n * fault: every untouched box goes as `''`, which clears fields nobody touched, and for\n * `ApplicationPatch.email` (a GraphQLEmailAddress) `''` is not \"no email\" but an invalid one,\n * so the whole update is refused over a box the person never visited.\n *\n * Comparing against the record that was loaded is the only thing that tells the two apart.\n *\n * ── The other thing this buys ───────────────────────────────────────────────\n * The patch carries only what moved. A screen that sends every field back writes values it\n * merely displayed, so a row edited from a stale copy silently overwrites whatever someone\n * else changed in between.\n */\nexport function changedValues(\n  formData: FormData,\n  original: Record<string, any> | null | undefined\n): Record<string, FormValue> {\n  const record = original || {}\n  const patch: Record<string, FormValue> = {}\n\n  for (const [key, value] of Array.from(formData.entries())) {\n    if (typeof value !== 'string') {\n      /* A file is never \"unchanged\" — there is nothing on the record to compare it against. */\n      patch[key] = value as File\n      continue\n    }\n\n    const next = value.trim()\n    const before = record[key] === null || record[key] === undefined ? '' : String(record[key]).trim()\n\n    if (next !== before) {\n      patch[key] = next\n    }\n  }\n\n  return patch\n}\n"]}

package/dist-client/utils/form-values.test.js

@@ -1,4 +1,4 @@
-import { filledValues, missingRequired } from './form-values';
+import { changedValues, filledValues, missingRequired } from './form-values';
 /**
  * The application register screen sent every input it had, including the untouched ones, each
  * as an empty string. `NewApplication.email` is a GraphQLEmailAddress and rejects `''`, so
@@ -59,4 +59,62 @@ describe('what the form still needs', () => {
         expect(missingRequired(form({ name: 'Billing' }), ['name'])).toEqual([]);
     });
 });
+describe('what the person changed, as a patch', () => {
+    /*
+     * The patch is spread over the loaded row on the server, so an absent key means "leave it
+     * alone" and a key set to '' means "clear it". A form can only tell those apart by looking
+     * at what it loaded.
+     */
+    it('sends only what moved', () => {
+        const patch = changedValues(form({ name: 'Gate B', brand: 'Acme', model: 'X1' }), {
+            name: 'Gate A',
+            brand: 'Acme',
+            model: 'X1'
+        });
+        expect(patch).toEqual({ name: 'Gate B' });
+    });
+    it('sends an empty string for a field the person cleared', () => {
+        /*
+         * ⚠ The case `filledValues` cannot express. Dropping this key would mean the netmask can
+         * never be removed once it is set — the screen would look like it saved and the value
+         * would come back on the next load.
+         */
+        const patch = changedValues(form({ netmask: '' }), { netmask: '10.0.0.0/8' });
+        expect(patch).toEqual({ netmask: '' });
+        expect('netmask' in patch).toBe(true);
+    });
+    it('leaves out a field that was empty and stayed empty', () => {
+        /*
+         * ⚠ The case sending the whole form gets wrong. `ApplicationPatch.email` is a
+         * GraphQLEmailAddress: '' is not "no email", it is an invalid one, and the server refuses
+         * the whole update over a box nobody visited.
+         */
+        const patch = changedValues(form({ name: 'Billing', email: '' }), { name: 'Billing', email: null });
+        expect(patch).toEqual({});
+        expect('email' in patch).toBe(false);
+    });
+    it('treats an absent field on the record as empty', () => {
+        expect(changedValues(form({ description: '' }), {})).toEqual({});
+        expect(changedValues(form({ description: 'hello' }), {})).toEqual({ description: 'hello' });
+    });
+    it('does not count retyping the same value with stray spaces as a change', () => {
+        expect(changedValues(form({ name: '  Billing  ' }), { name: 'Billing' })).toEqual({});
+    });
+    it('compares a non-string field value as text', () => {
+        /* A record can carry a number or an enum; the box always holds text. */
+        expect(changedValues(form({ port: '8080' }), { port: 8080 })).toEqual({});
+        expect(changedValues(form({ port: '9090' }), { port: 8080 })).toEqual({ port: '9090' });
+    });
+    it('sends nothing at all when the person pressed save without touching anything', () => {
+        /*
+         * The whole point: an untouched form must not write. A screen that sends every field back
+         * overwrites whatever someone else changed while this copy was on screen.
+         */
+        const record = { name: 'Gate A', description: 'front door', brand: 'Acme', netmask: null };
+        expect(changedValues(form({ name: 'Gate A', description: 'front door', brand: 'Acme', netmask: '' }), record)).toEqual({});
+    });
+    it('treats a missing record as everything being new', () => {
+        expect(changedValues(form({ name: 'Gate A', netmask: '' }), null)).toEqual({ name: 'Gate A' });
+    });
+});
 //# sourceMappingURL=form-values.test.js.map

package/dist-client/utils/form-values.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"form-values.test.js","sourceRoot":"","sources":["../../client/utils/form-values.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE7D;;;;GAIG;AAEH,SAAS,IAAI,CAAC,OAA+B;IAC3C,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;IAE3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACzB,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAClF,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,qBAAqB;SAC3B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E;;;;WAIG;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAE1E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;QAC3C,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,gFAAgF;QAChF,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,8DAA8D;QAC9D,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD;;;;WAIG;QACH,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { filledValues, missingRequired } from './form-values'\n\n/**\n * The application register screen sent every input it had, including the untouched ones, each\n * as an empty string. `NewApplication.email` is a GraphQLEmailAddress and rejects `''`, so\n * leaving the optional contact email blank made registration fail.\n */\n\nfunction form(entries: Record<string, string>): FormData {\n  const data = new FormData()\n\n  for (const [key, value] of Object.entries(entries)) {\n    data.append(key, value)\n  }\n\n  return data\n}\n\ndescribe('the fields a person actually filled in', () => {\n  it('keeps what was typed', () => {\n    expect(filledValues(form({ name: 'Billing', url: 'https://example.com' }))).toEqual({\n      name: 'Billing',\n      url: 'https://example.com'\n    })\n  })\n\n  it('leaves an untouched field out instead of sending an empty string', () => {\n    /*\n     * ⚠ The case this file exists for. `email: ''` is not \"no email\" to a scalar that\n     * validates format — it is an invalid email, and the mutation fails on a field the\n     * schema marks optional.\n     */\n    const values = filledValues(form({ name: 'Billing', email: '', url: '' }))\n\n    expect(values).toEqual({ name: 'Billing' })\n    expect('email' in values).toBe(false)\n  })\n\n  it('treats whitespace as untouched', () => {\n    /* A space typed by accident is not an answer, and the scalars reject it too. */\n    expect(filledValues(form({ name: 'Billing', email: '   ' }))).toEqual({ name: 'Billing' })\n  })\n\n  it('trims what it keeps', () => {\n    expect(filledValues(form({ name: '  Billing  ' }))).toEqual({ name: 'Billing' })\n  })\n\n  it('keeps a value that only looks empty', () => {\n    /* '0' is falsy as a string in some hands. It is an answer. */\n    expect(filledValues(form({ name: '0' }))).toEqual({ name: '0' })\n  })\n})\n\ndescribe('what the form still needs', () => {\n  it('names the required field nobody filled in', () => {\n    expect(missingRequired(form({ name: '', description: 'x' }), ['name'])).toEqual(['name'])\n  })\n\n  it('counts whitespace as not filled in', () => {\n    expect(missingRequired(form({ name: '  ' }), ['name'])).toEqual(['name'])\n  })\n\n  it('says nothing when the required fields are there', () => {\n    expect(missingRequired(form({ name: 'Billing', email: '' }), ['name'])).toEqual([])\n  })\n\n  it('does not require what the schema left optional', () => {\n    /*\n     * The list comes from the schema — NewApplication marks only `name` non-null. Adding a\n     * field here that the server accepts as absent would invent a rule the product does not\n     * have.\n     */\n    expect(missingRequired(form({ name: 'Billing' }), ['name'])).toEqual([])\n  })\n})\n"]}
+{"version":3,"file":"form-values.test.js","sourceRoot":"","sources":["../../client/utils/form-values.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE5E;;;;GAIG;AAEH,SAAS,IAAI,CAAC,OAA+B;IAC3C,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;IAE3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACzB,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAClF,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,qBAAqB;SAC3B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E;;;;WAIG;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAE1E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;QAC3C,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,gFAAgF;QAChF,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,8DAA8D;QAC9D,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD;;;;WAIG;QACH,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD;;;;OAIG;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE;YAChF,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,IAAI;SACZ,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D;;;;WAIG;QACH,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;QAE7E,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;QACtC,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D;;;;WAIG;QACH,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAEnG,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAChE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,wEAAwE;QACxE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF;;;WAGG;QACH,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAE1F,MAAM,CACJ,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CACvG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACf,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { changedValues, filledValues, missingRequired } from './form-values'\n\n/**\n * The application register screen sent every input it had, including the untouched ones, each\n * as an empty string. `NewApplication.email` is a GraphQLEmailAddress and rejects `''`, so\n * leaving the optional contact email blank made registration fail.\n */\n\nfunction form(entries: Record<string, string>): FormData {\n  const data = new FormData()\n\n  for (const [key, value] of Object.entries(entries)) {\n    data.append(key, value)\n  }\n\n  return data\n}\n\ndescribe('the fields a person actually filled in', () => {\n  it('keeps what was typed', () => {\n    expect(filledValues(form({ name: 'Billing', url: 'https://example.com' }))).toEqual({\n      name: 'Billing',\n      url: 'https://example.com'\n    })\n  })\n\n  it('leaves an untouched field out instead of sending an empty string', () => {\n    /*\n     * ⚠ The case this file exists for. `email: ''` is not \"no email\" to a scalar that\n     * validates format — it is an invalid email, and the mutation fails on a field the\n     * schema marks optional.\n     */\n    const values = filledValues(form({ name: 'Billing', email: '', url: '' }))\n\n    expect(values).toEqual({ name: 'Billing' })\n    expect('email' in values).toBe(false)\n  })\n\n  it('treats whitespace as untouched', () => {\n    /* A space typed by accident is not an answer, and the scalars reject it too. */\n    expect(filledValues(form({ name: 'Billing', email: '   ' }))).toEqual({ name: 'Billing' })\n  })\n\n  it('trims what it keeps', () => {\n    expect(filledValues(form({ name: '  Billing  ' }))).toEqual({ name: 'Billing' })\n  })\n\n  it('keeps a value that only looks empty', () => {\n    /* '0' is falsy as a string in some hands. It is an answer. */\n    expect(filledValues(form({ name: '0' }))).toEqual({ name: '0' })\n  })\n})\n\ndescribe('what the form still needs', () => {\n  it('names the required field nobody filled in', () => {\n    expect(missingRequired(form({ name: '', description: 'x' }), ['name'])).toEqual(['name'])\n  })\n\n  it('counts whitespace as not filled in', () => {\n    expect(missingRequired(form({ name: '  ' }), ['name'])).toEqual(['name'])\n  })\n\n  it('says nothing when the required fields are there', () => {\n    expect(missingRequired(form({ name: 'Billing', email: '' }), ['name'])).toEqual([])\n  })\n\n  it('does not require what the schema left optional', () => {\n    /*\n     * The list comes from the schema — NewApplication marks only `name` non-null. Adding a\n     * field here that the server accepts as absent would invent a rule the product does not\n     * have.\n     */\n    expect(missingRequired(form({ name: 'Billing' }), ['name'])).toEqual([])\n  })\n})\n\ndescribe('what the person changed, as a patch', () => {\n  /*\n   * The patch is spread over the loaded row on the server, so an absent key means \"leave it\n   * alone\" and a key set to '' means \"clear it\". A form can only tell those apart by looking\n   * at what it loaded.\n   */\n\n  it('sends only what moved', () => {\n    const patch = changedValues(form({ name: 'Gate B', brand: 'Acme', model: 'X1' }), {\n      name: 'Gate A',\n      brand: 'Acme',\n      model: 'X1'\n    })\n\n    expect(patch).toEqual({ name: 'Gate B' })\n  })\n\n  it('sends an empty string for a field the person cleared', () => {\n    /*\n     * ⚠ The case `filledValues` cannot express. Dropping this key would mean the netmask can\n     * never be removed once it is set — the screen would look like it saved and the value\n     * would come back on the next load.\n     */\n    const patch = changedValues(form({ netmask: '' }), { netmask: '10.0.0.0/8' })\n\n    expect(patch).toEqual({ netmask: '' })\n    expect('netmask' in patch).toBe(true)\n  })\n\n  it('leaves out a field that was empty and stayed empty', () => {\n    /*\n     * ⚠ The case sending the whole form gets wrong. `ApplicationPatch.email` is a\n     * GraphQLEmailAddress: '' is not \"no email\", it is an invalid one, and the server refuses\n     * the whole update over a box nobody visited.\n     */\n    const patch = changedValues(form({ name: 'Billing', email: '' }), { name: 'Billing', email: null })\n\n    expect(patch).toEqual({})\n    expect('email' in patch).toBe(false)\n  })\n\n  it('treats an absent field on the record as empty', () => {\n    expect(changedValues(form({ description: '' }), {})).toEqual({})\n    expect(changedValues(form({ description: 'hello' }), {})).toEqual({ description: 'hello' })\n  })\n\n  it('does not count retyping the same value with stray spaces as a change', () => {\n    expect(changedValues(form({ name: '  Billing  ' }), { name: 'Billing' })).toEqual({})\n  })\n\n  it('compares a non-string field value as text', () => {\n    /* A record can carry a number or an enum; the box always holds text. */\n    expect(changedValues(form({ port: '8080' }), { port: 8080 })).toEqual({})\n    expect(changedValues(form({ port: '9090' }), { port: 8080 })).toEqual({ port: '9090' })\n  })\n\n  it('sends nothing at all when the person pressed save without touching anything', () => {\n    /*\n     * The whole point: an untouched form must not write. A screen that sends every field back\n     * overwrites whatever someone else changed while this copy was on screen.\n     */\n    const record = { name: 'Gate A', description: 'front door', brand: 'Acme', netmask: null }\n\n    expect(\n      changedValues(form({ name: 'Gate A', description: 'front door', brand: 'Acme', netmask: '' }), record)\n    ).toEqual({})\n  })\n\n  it('treats a missing record as everything being new', () => {\n    expect(changedValues(form({ name: 'Gate A', netmask: '' }), null)).toEqual({ name: 'Gate A' })\n  })\n})\n"]}

package/dist-client/utils/webauthn-verification.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Reading what the server said about a passkey registration.
+ *
+ * ── Two defects that were hiding each other ─────────────────────────────────
+ * The profile screen posted the attestation and then did this:
+ *
+ *     const verification = await fetch('/auth/verify-registration', { … }).then(res => res.json())
+ *
+ *     if (verification.verified) { …registered… }
+ *     else { console.error(await verification.text()); …refused… }
+ *
+ * `verification` is **already-parsed JSON**. It has no `.text()`. So the moment the refusal
+ * branch ran it threw a `TypeError`, the outer `catch` swallowed it, and the person was told
+ * the registration had *failed* — never that it had been *refused*.
+ *
+ * The refusal message was therefore unreachable — and behind it sat a second defect that the
+ * dead branch had been hiding. There were **two near-identical keys**:
+ *
+ *     error.user credential regist_e_ration not allowed   what the code asked for — no
+ *                                                         translation, in any of the five
+ *     error.user credential registration not allowed      translated in all five — no callers
+ *
+ * So even if the branch had run, the screen would have printed the key itself. Each defect
+ * kept the other out of sight: the dead branch meant the missing word never showed, and the
+ * missing word would have been the thing that made someone look. The code now asks for the
+ * spelling that has the words, and the misspelled entry is gone.
+ *
+ * ── Why this reads the body as text first ───────────────────────────────────
+ * `createWebAuthnMiddleware` does not answer `{ verified: false }` on a refusal — it **throws**
+ * `AuthError`, and what comes back is an error response whose body is not necessarily JSON.
+ * `res.json()` on it rejects, which is a second way into the same wrong branch.
+ *
+ * So the body is read **once, as text**, and parsed only if it happens to be JSON. Text always
+ * reads; that is the point. Whatever the server said survives into `reason` either way, which
+ * is what was missing from the log.
+ */
+export type VerificationOutcome = 
+/** The server confirmed it. */
+{
+    outcome: 'registered';
+}
+/**
+ * The server said no. `reason` is the server's own words, for the log — never for the
+ * screen: it is an error code or a passport message, in English, written for us.
+ */
+ | {
+    outcome: 'refused';
+    reason: string;
+};
+/**
+ * What the verify-registration response means.
+ *
+ * Never throws. A registration attempt has exactly two ends a person cares about, and an
+ * exception thrown while working out which one it was is how this screen lost the difference.
+ */
+export declare function readVerification(response: Response): Promise<VerificationOutcome>;

package/dist-client/utils/webauthn-verification.js

@@ -0,0 +1,79 @@
+/**
+ * Reading what the server said about a passkey registration.
+ *
+ * ── Two defects that were hiding each other ─────────────────────────────────
+ * The profile screen posted the attestation and then did this:
+ *
+ *     const verification = await fetch('/auth/verify-registration', { … }).then(res => res.json())
+ *
+ *     if (verification.verified) { …registered… }
+ *     else { console.error(await verification.text()); …refused… }
+ *
+ * `verification` is **already-parsed JSON**. It has no `.text()`. So the moment the refusal
+ * branch ran it threw a `TypeError`, the outer `catch` swallowed it, and the person was told
+ * the registration had *failed* — never that it had been *refused*.
+ *
+ * The refusal message was therefore unreachable — and behind it sat a second defect that the
+ * dead branch had been hiding. There were **two near-identical keys**:
+ *
+ *     error.user credential regist_e_ration not allowed   what the code asked for — no
+ *                                                         translation, in any of the five
+ *     error.user credential registration not allowed      translated in all five — no callers
+ *
+ * So even if the branch had run, the screen would have printed the key itself. Each defect
+ * kept the other out of sight: the dead branch meant the missing word never showed, and the
+ * missing word would have been the thing that made someone look. The code now asks for the
+ * spelling that has the words, and the misspelled entry is gone.
+ *
+ * ── Why this reads the body as text first ───────────────────────────────────
+ * `createWebAuthnMiddleware` does not answer `{ verified: false }` on a refusal — it **throws**
+ * `AuthError`, and what comes back is an error response whose body is not necessarily JSON.
+ * `res.json()` on it rejects, which is a second way into the same wrong branch.
+ *
+ * So the body is read **once, as text**, and parsed only if it happens to be JSON. Text always
+ * reads; that is the point. Whatever the server said survives into `reason` either way, which
+ * is what was missing from the log.
+ */
+/**
+ * What the verify-registration response means.
+ *
+ * Never throws. A registration attempt has exactly two ends a person cares about, and an
+ * exception thrown while working out which one it was is how this screen lost the difference.
+ */
+export async function readVerification(response) {
+    const body = await readBody(response);
+    const parsed = asJson(body);
+    if (response.ok && parsed?.verified === true) {
+        return { outcome: 'registered' };
+    }
+    return { outcome: 'refused', reason: reasonFrom(response, parsed, body) };
+}
+/** The body, as text. A body that cannot be read at all is not a reason to lose the outcome. */
+async function readBody(response) {
+    try {
+        return await response.text();
+    }
+    catch {
+        return '';
+    }
+}
+function asJson(body) {
+    try {
+        return JSON.parse(body);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The most specific thing the server said.
+ *
+ * `AuthError` carries `errorCode`; passport puts its own wording in `message`. Falling back to
+ * the raw body keeps a plain-text error intact, and to the status when the body is empty —
+ * because "refused, and it said nothing" is itself worth knowing in a log.
+ */
+function reasonFrom(response, parsed, body) {
+    const said = parsed?.errorCode || parsed?.message || parsed?.error || body.trim();
+    return said || `HTTP ${response.status}`;
+}
+//# sourceMappingURL=webauthn-verification.js.map

package/dist-client/utils/webauthn-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn-verification.js","sourceRoot":"","sources":["../../client/utils/webauthn-verification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAWH;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IACvD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAE3B,IAAI,QAAQ,CAAC,EAAE,IAAI,MAAM,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAA;IAClC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAA;AAC3E,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,QAAkB,EAAE,MAAW,EAAE,IAAY;IAC/D,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAA;IAEjF,OAAO,IAAI,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAA;AAC1C,CAAC","sourcesContent":["/**\n * Reading what the server said about a passkey registration.\n *\n * ── Two defects that were hiding each other ─────────────────────────────────\n * The profile screen posted the attestation and then did this:\n *\n *     const verification = await fetch('/auth/verify-registration', { … }).then(res => res.json())\n *\n *     if (verification.verified) { …registered… }\n *     else { console.error(await verification.text()); …refused… }\n *\n * `verification` is **already-parsed JSON**. It has no `.text()`. So the moment the refusal\n * branch ran it threw a `TypeError`, the outer `catch` swallowed it, and the person was told\n * the registration had *failed* — never that it had been *refused*.\n *\n * The refusal message was therefore unreachable — and behind it sat a second defect that the\n * dead branch had been hiding. There were **two near-identical keys**:\n *\n *     error.user credential regist_e_ration not allowed   what the code asked for — no\n *                                                         translation, in any of the five\n *     error.user credential registration not allowed      translated in all five — no callers\n *\n * So even if the branch had run, the screen would have printed the key itself. Each defect\n * kept the other out of sight: the dead branch meant the missing word never showed, and the\n * missing word would have been the thing that made someone look. The code now asks for the\n * spelling that has the words, and the misspelled entry is gone.\n *\n * ── Why this reads the body as text first ───────────────────────────────────\n * `createWebAuthnMiddleware` does not answer `{ verified: false }` on a refusal — it **throws**\n * `AuthError`, and what comes back is an error response whose body is not necessarily JSON.\n * `res.json()` on it rejects, which is a second way into the same wrong branch.\n *\n * So the body is read **once, as text**, and parsed only if it happens to be JSON. Text always\n * reads; that is the point. Whatever the server said survives into `reason` either way, which\n * is what was missing from the log.\n */\n\nexport type VerificationOutcome =\n  /** The server confirmed it. */\n  | { outcome: 'registered' }\n  /**\n   * The server said no. `reason` is the server's own words, for the log — never for the\n   * screen: it is an error code or a passport message, in English, written for us.\n   */\n  | { outcome: 'refused'; reason: string }\n\n/**\n * What the verify-registration response means.\n *\n * Never throws. A registration attempt has exactly two ends a person cares about, and an\n * exception thrown while working out which one it was is how this screen lost the difference.\n */\nexport async function readVerification(response: Response): Promise<VerificationOutcome> {\n  const body = await readBody(response)\n  const parsed = asJson(body)\n\n  if (response.ok && parsed?.verified === true) {\n    return { outcome: 'registered' }\n  }\n\n  return { outcome: 'refused', reason: reasonFrom(response, parsed, body) }\n}\n\n/** The body, as text. A body that cannot be read at all is not a reason to lose the outcome. */\nasync function readBody(response: Response): Promise<string> {\n  try {\n    return await response.text()\n  } catch {\n    return ''\n  }\n}\n\nfunction asJson(body: string): any {\n  try {\n    return JSON.parse(body)\n  } catch {\n    return null\n  }\n}\n\n/**\n * The most specific thing the server said.\n *\n * `AuthError` carries `errorCode`; passport puts its own wording in `message`. Falling back to\n * the raw body keeps a plain-text error intact, and to the status when the body is empty —\n * because \"refused, and it said nothing\" is itself worth knowing in a log.\n */\nfunction reasonFrom(response: Response, parsed: any, body: string): string {\n  const said = parsed?.errorCode || parsed?.message || parsed?.error || body.trim()\n\n  return said || `HTTP ${response.status}`\n}\n"]}

package/dist-client/utils/webauthn-verification.test.js

@@ -0,0 +1,79 @@
+import { readVerification } from './webauthn-verification';
+/**
+ * The profile screen could not tell a refused passkey registration from a failed one.
+ *
+ * It called `.text()` on a value it had already parsed with `.json()`, which throws a
+ * `TypeError`, which the outer `catch` turned into "registration failed". The refusal branch
+ * never ran, so the missing translation behind it never showed either.
+ */
+/** Just enough of `Response` for this to read. `text()` may reject; that is one of the cases. */
+function response({ ok = true, status = 200, body = '', unreadable = false } = {}) {
+    return {
+        ok,
+        status,
+        text: async () => {
+            if (unreadable) {
+                throw new TypeError('body already consumed');
+            }
+            return body;
+        }
+    };
+}
+describe('what the server said about a passkey registration', () => {
+    it('reads a confirmation', async () => {
+        const outcome = await readVerification(response({ body: JSON.stringify({ user: { id: 'u1' }, verified: true }) }));
+        expect(outcome).toEqual({ outcome: 'registered' });
+    });
+    it('does not throw on an error body that is not JSON', async () => {
+        /*
+         * ⚠ The case this file exists for. `createWebAuthnMiddleware` throws `AuthError` rather
+         * than answering `{ verified: false }`, so the body that comes back on a refusal need not
+         * be JSON at all. `res.json()` rejects on it — which is how the screen ended up in its
+         * catch-all saying the wrong thing.
+         */
+        const outcome = await readVerification(response({ ok: false, status: 500, body: 'AUTHN_VERIFICATION_FAILED' }));
+        expect(outcome).toEqual({ outcome: 'refused', reason: 'AUTHN_VERIFICATION_FAILED' });
+    });
+    it('keeps the error code out of a JSON error body', async () => {
+        const outcome = await readVerification(response({ ok: false, status: 401, body: JSON.stringify({ errorCode: 'AUTHN_VERIFICATION_FAILED' }) }));
+        expect(outcome).toEqual({ outcome: 'refused', reason: 'AUTHN_VERIFICATION_FAILED' });
+    });
+    it("prefers passport's wording when there is no error code", async () => {
+        const outcome = await readVerification(response({ ok: false, status: 401, body: JSON.stringify({ message: 'already registered' }) }));
+        expect(outcome).toEqual({ outcome: 'refused', reason: 'already registered' });
+    });
+    it('says the status when the server refused without a word', async () => {
+        /* "refused, and it said nothing" is itself worth having in the log. */
+        const outcome = await readVerification(response({ ok: false, status: 403, body: '' }));
+        expect(outcome).toEqual({ outcome: 'refused', reason: 'HTTP 403' });
+    });
+    it('refuses a 200 that does not actually confirm', async () => {
+        /*
+         * A body without `verified: true` is not a confirmation, whatever the status line says.
+         * Leaning the other way would register nothing and tell the person it worked.
+         */
+        const outcome = await readVerification(response({ body: JSON.stringify({ user: { id: 'u1' } }) }));
+        expect(outcome.outcome).toBe('refused');
+    });
+    it('does not take a truthy value for confirmation', async () => {
+        /* `verified: 'false'` is a string, and every non-empty string is truthy. */
+        const outcome = await readVerification(response({ body: JSON.stringify({ verified: 'false' }) }));
+        expect(outcome.outcome).toBe('refused');
+    });
+    it('refuses a confirmation that arrives with a failing status', async () => {
+        const outcome = await readVerification(response({ ok: false, status: 500, body: JSON.stringify({ verified: true }) }));
+        expect(outcome.outcome).toBe('refused');
+    });
+    it('never throws, even when the body cannot be read', async () => {
+        /*
+         * The shape of the original defect, generalised: working out the outcome must not be able
+         * to throw, because the screen's catch-all cannot tell "refused" from "something broke"
+         * and says the wrong one.
+         */
+        await expect(readVerification(response({ ok: false, status: 500, unreadable: true }))).resolves.toEqual({
+            outcome: 'refused',
+            reason: 'HTTP 500'
+        });
+    });
+});
+//# sourceMappingURL=webauthn-verification.test.js.map

package/dist-client/utils/webauthn-verification.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn-verification.test.js","sourceRoot":"","sources":["../../client/utils/webauthn-verification.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE1D;;;;;;GAMG;AAEH,iGAAiG;AACjG,SAAS,QAAQ,CAAC,EAChB,EAAE,GAAG,IAAI,EACT,MAAM,GAAG,GAAG,EACZ,IAAI,GAAG,EAAE,EACT,UAAU,GAAG,KAAK,KAMhB,EAAE;IACJ,OAAO;QACL,EAAE;QACF,MAAM;QACN,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAA;YAC9C,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC;KACqB,CAAA;AAC1B,CAAC;AAED,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAElH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE;;;;;WAKG;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAA;QAE/G,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC,CACvG,CAAA;QAED,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAC9F,CAAA;QAED,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,uEAAuE;QACvE,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAEtF,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D;;;WAGG;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAElG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,4EAA4E;QAC5E,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAEjG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAC/E,CAAA;QAED,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D;;;;WAIG;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtG,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { readVerification } from './webauthn-verification'\n\n/**\n * The profile screen could not tell a refused passkey registration from a failed one.\n *\n * It called `.text()` on a value it had already parsed with `.json()`, which throws a\n * `TypeError`, which the outer `catch` turned into \"registration failed\". The refusal branch\n * never ran, so the missing translation behind it never showed either.\n */\n\n/** Just enough of `Response` for this to read. `text()` may reject; that is one of the cases. */\nfunction response({\n  ok = true,\n  status = 200,\n  body = '',\n  unreadable = false\n}: {\n  ok?: boolean\n  status?: number\n  body?: string\n  unreadable?: boolean\n} = {}): Response {\n  return {\n    ok,\n    status,\n    text: async () => {\n      if (unreadable) {\n        throw new TypeError('body already consumed')\n      }\n\n      return body\n    }\n  } as unknown as Response\n}\n\ndescribe('what the server said about a passkey registration', () => {\n  it('reads a confirmation', async () => {\n    const outcome = await readVerification(response({ body: JSON.stringify({ user: { id: 'u1' }, verified: true }) }))\n\n    expect(outcome).toEqual({ outcome: 'registered' })\n  })\n\n  it('does not throw on an error body that is not JSON', async () => {\n    /*\n     * ⚠ The case this file exists for. `createWebAuthnMiddleware` throws `AuthError` rather\n     * than answering `{ verified: false }`, so the body that comes back on a refusal need not\n     * be JSON at all. `res.json()` rejects on it — which is how the screen ended up in its\n     * catch-all saying the wrong thing.\n     */\n    const outcome = await readVerification(response({ ok: false, status: 500, body: 'AUTHN_VERIFICATION_FAILED' }))\n\n    expect(outcome).toEqual({ outcome: 'refused', reason: 'AUTHN_VERIFICATION_FAILED' })\n  })\n\n  it('keeps the error code out of a JSON error body', async () => {\n    const outcome = await readVerification(\n      response({ ok: false, status: 401, body: JSON.stringify({ errorCode: 'AUTHN_VERIFICATION_FAILED' }) })\n    )\n\n    expect(outcome).toEqual({ outcome: 'refused', reason: 'AUTHN_VERIFICATION_FAILED' })\n  })\n\n  it(\"prefers passport's wording when there is no error code\", async () => {\n    const outcome = await readVerification(\n      response({ ok: false, status: 401, body: JSON.stringify({ message: 'already registered' }) })\n    )\n\n    expect(outcome).toEqual({ outcome: 'refused', reason: 'already registered' })\n  })\n\n  it('says the status when the server refused without a word', async () => {\n    /* \"refused, and it said nothing\" is itself worth having in the log. */\n    const outcome = await readVerification(response({ ok: false, status: 403, body: '' }))\n\n    expect(outcome).toEqual({ outcome: 'refused', reason: 'HTTP 403' })\n  })\n\n  it('refuses a 200 that does not actually confirm', async () => {\n    /*\n     * A body without `verified: true` is not a confirmation, whatever the status line says.\n     * Leaning the other way would register nothing and tell the person it worked.\n     */\n    const outcome = await readVerification(response({ body: JSON.stringify({ user: { id: 'u1' } }) }))\n\n    expect(outcome.outcome).toBe('refused')\n  })\n\n  it('does not take a truthy value for confirmation', async () => {\n    /* `verified: 'false'` is a string, and every non-empty string is truthy. */\n    const outcome = await readVerification(response({ body: JSON.stringify({ verified: 'false' }) }))\n\n    expect(outcome.outcome).toBe('refused')\n  })\n\n  it('refuses a confirmation that arrives with a failing status', async () => {\n    const outcome = await readVerification(\n      response({ ok: false, status: 500, body: JSON.stringify({ verified: true }) })\n    )\n\n    expect(outcome.outcome).toBe('refused')\n  })\n\n  it('never throws, even when the body cannot be read', async () => {\n    /*\n     * The shape of the original defect, generalised: working out the outcome must not be able\n     * to throw, because the screen's catch-all cannot tell \"refused\" from \"something broke\"\n     * and says the wrong one.\n     */\n    await expect(readVerification(response({ ok: false, status: 500, unreadable: true }))).resolves.toEqual({\n      outcome: 'refused',\n      reason: 'HTTP 500'\n    })\n  })\n})\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/auth-ui",
-  "version": "10.1.17",
+  "version": "10.1.18",
   "main": "dist-server/index.js",
   "browser": "dist-client/index.js",
   "things-factory": true,
@@ -37,10 +37,10 @@
     "@operato/p13n": "^10.0.0",
     "@operato/popup": "^10.0.0",
     "@operato/styles": "^10.0.0",
-    "@things-factory/auth-base": "^10.1.17",
+    "@things-factory/auth-base": "^10.1.18",
     "@things-factory/more-base": "^10.1.16",
     "base64url": "^3.0.1",
     "clipboard": "^2.0.6"
   },
-  "gitHead": "0c8214182702162ceb5398bdcf42ef14ea672394"
+  "gitHead": "608fe1a70f430ae9c3aa20497173cecc8121373e"
 }

package/things-factory.config.js

@@ -5,14 +5,9 @@ export default {
   route,
   routes: [
     { tagname: 'auth-profile', page: 'profile' },
-    { tagname: 'application-page', page: 'application' },
     { tagname: 'applications-page', page: 'applications' },
-    { tagname: 'application-register', page: 'application-register' },
     { tagname: 'app-bindings-page', page: 'app-bindings' },
-    { tagname: 'app-binding-page', page: 'app-binding' },
-    { tagname: 'appliance-register', page: 'appliance-register' },
     { tagname: 'appliance-home', page: 'appliance-home' },
-    { tagname: 'appliance-page', page: 'appliance' },
     { tagname: 'role-list-page', page: 'roles' },
     { tagname: 'role-privilege-page', page: 'role-privileges' },
     { tagname: 'user-list-page', page: 'users' },

package/translations/en.json

@@ -16,6 +16,7 @@
   "button.drop": "Take away",
   "button.edit privileges": "Edit privileges",
   "button.generate new access token": "generate new access token",
+  "button.generate new secret": "generate new secret",
   "button.go to home": "go to home",
   "button.hide": "hide",
   "button.logout": "logout",
@@ -23,6 +24,7 @@
   "button.register": "register",
   "button.remove from domain": "Remove from domain",
   "button.remove owner": "remove owner",
+  "button.renew access token": "renew access token",
   "button.reveal": "reveal",
   "button.save": "save",
   "button.security-key registration": "security key registration",
@@ -32,6 +34,7 @@
   "button.terminate contract": "terminate",
   "button.transfer owner": "transfer owner",
   "button.unlock": "unlock",
+  "button.update": "update",
   "error.cannot_modify_system_subdomain": "the 'system' subdomain cannot be modified.",
   "error.domain not allowed": "the '{subdomain}' domain is not allowed for this user.",
   "error.new-password-and-confirm-password-do-not-match": "new password and confirm password do not match",
@@ -43,10 +46,14 @@
   "error.user-locked": "user account is locked",
   "error.value is empty": "{value} is empty",
   "error.x already exists in y": "{x} already exists in {y}",
+  "field.access token url": "access token url",
   "field.accessed-at": "accessed at",
+  "field.app key": "app key",
   "field.application icon": "application icon",
   "field.application url": "application url",
   "field.attributes": "attributes",
+  "field.auth url": "auth url",
+  "field.available scopes": "available scopes",
   "field.brand": "brand",
   "field.client-id": "client id",
   "field.client-secret": "client secret",
@@ -96,6 +103,7 @@
   "field.user-type": "user type",
   "field.username": "user id",
   "field.username or email": "username or email",
+  "field.webhook": "webhook",
   "label.access token": "access token",
   "label.activated": "activated",
   "label.activated-user": "activated",
@@ -166,8 +174,10 @@
   "text.appliance": "terminal appliance",
   "text.appliance credential": "terminal appliance credential",
   "text.appliances": "appliances",
+  "text.application": "application",
   "text.application management": "application management",
   "text.applications": "applications",
+  "text.are you sure you want to delete x": "delete {x}? this cannot be undone.",
   "text.are_you_sure_to_delete_x": "are you sure to delete {x}",
   "text.are_you_sure_to_remove_domain_owner": "are you sure to remove {x} as a domain owner?",
   "text.are_you_sure_to_terminate_contract": "are you sure to terminate contract?",
@@ -177,6 +187,9 @@
   "text.attribute management": "attribute management",
   "text.auth profile": "user profile",
   "text.auth-provider management": "auth provider management",
+  "text.binding": "binding",
+  "text.binding credential": "binding credential",
+  "text.bound application": "bound application",
   "text.bound applications": "bound applications",
   "text.cannot be undone": "Cannot be undone",
   "text.cannot_delete": "cannot be deleted",
@@ -186,8 +199,10 @@
   "text.confirm password": "confirm password",
   "text.copied": "copied",
   "text.copying needs a secure connection": "copying needs a secure connection — select the value and copy it by hand",
+  "text.could not be saved": "could not be saved — see the message above for the reason",
   "text.could not register": "could not register — see the message above for the reason",
   "text.create role": "create role",
+  "text.credentials": "credentials",
   "text.current password": "current password",
   "text.delete account warning message": "this action cannot be undone. this will permanently delete all about this account.\n\nplease type in the email and password of this account to confirm.",
   "text.deleted_successfully": "deleted successfully",
@@ -200,7 +215,9 @@
   "text.domain owners": "domain owners",
   "text.domain_name_change_warning": "are you sure you want to change the domain name? (the subdomain will remain unchanged.)",
   "text.email is not matched": "email is not matched.",
+  "text.endpoints": "endpoints",
   "text.env-var-list-page": "environment variable list",
+  "text.expired": "expired",
   "text.expires at x": "expires {x}",
   "text.failed": "failed",
   "text.failed to fetch": "could not read the list",
@@ -238,6 +255,7 @@
   "text.please try again": "Try again in a moment.",
   "text.please_fill_all_required_fields": "please fill all required fields",
   "text.privilege no longer declared": "no code requires this privilege anymore",
+  "text.register new appliance": "register new appliance",
   "text.register new application": "register a new application",
   "text.registered roles": "registered roles",
   "text.remaining time": "{days} days {hours} hours {mins} mins {secs} seconds remain",
@@ -254,6 +272,11 @@
   "text.struck through are not installed here": "Struck through are privileges this installation does not have.",
   "text.subdomain_change_critical_warning": "warning: changing the subdomain will alter the full access URL (/{type}/{subdomain}/...) and may invalidate existing external links, bookmarks, and active user sessions. please proceed with caution.",
   "text.synchronize": "synchronize",
+  "text.the appliance could not be loaded": "the appliance could not be loaded",
+  "text.the application could not be loaded": "the application could not be loaded",
+  "text.the binding could not be loaded": "the binding could not be loaded",
+  "text.the current access token stops working immediately": "the current access token stops working immediately, and anything using it has to be given the new one.",
+  "text.the current secret stops working immediately": "the current secret stops working immediately, and anything using it has to be given the new one.",
   "text.the list could not be loaded": "the list could not be loaded",
   "text.they lose access to this domain but keep the account": "They lose access to this domain. The account itself remains, so you can add them again later.",
   "text.this domain is top level and inherits from nowhere": "top level — nothing is inherited here",
@@ -265,6 +288,8 @@
   "text.user invitation prompt": "Please enter the username or email address of the user you wish to invite.",
   "text.user management": "user management",
   "text.view only": "Inherited role — view only",
+  "text.where an integration asks for an authorization code": "where an integration asks for an authorization code",
+  "text.where that code is exchanged for an access token": "where that code is exchanged for an access token",
   "text.without a role they see nothing": "Without a role there will be no screens for them.",
   "text.x is required": "Please enter the {x}.",
   "text.x modules y privileges": "{x} modules · {y} privileges",