@turnkey/sdk-react 5.1.0 → 5.2.1

package/dist/components/auth/Auth.mjs

@@ -4,6 +4,7 @@ import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
 import styles from './Auth.module.css.mjs';
 import React, { useState, useEffect } from 'react';
 import { MuiPhone } from './PhoneInput.mjs';
+import { jwtDecode } from 'jwt-decode';
 import GoogleAuthButton from './Google.mjs';
 import AppleAuthButton from './Apple.mjs';
 import FacebookAuthButton from './Facebook.mjs';
@@ -398,107 +399,307 @@ var Auth = function Auth(_ref) {
     };
   }();
   var handleOAuthLogin = /*#__PURE__*/function () {
-    var _ref8 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee6(credential, providerName) {
-      var pubKey, createSuborgData, resp, suborgIds, suborgId, sessionResponse;
-      return _regeneratorRuntime().wrap(function _callee6$(_context6) {
-        while (1) switch (_context6.prev = _context6.next) {
+    var _ref8 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee7(credential, providerName) {
+      var _yield$server$getSubo;
+      var socialLinking,
+        pubKey,
+        oauthProviders,
+        createSuborgData,
+        completeLogin,
+        resp,
+        suborgIds,
+        oidcOrgIds,
+        orgId,
+        _ref10,
+        oidcEmail,
+        iss,
+        _yield$server$getVeri,
+        emailOrgIds,
+        _yield$server$getUser,
+        _yield$server$getUser2,
+        _yield$server$getUser3,
+        userId,
+        _yield$server$createS,
+        _yield$server$createS2,
+        _args7 = arguments;
+      return _regeneratorRuntime().wrap(function _callee7$(_context7) {
+        while (1) switch (_context7.prev = _context7.next) {
           case 0:
-            _context6.next = 2;
+            socialLinking = _args7.length > 2 && _args7[2] !== undefined ? _args7[2] : false;
+            _context7.next = 3;
             return indexedDbClient === null || indexedDbClient === void 0 ? void 0 : indexedDbClient.getPublicKey();
-          case 2:
-            pubKey = _context6.sent;
+          case 3:
+            pubKey = _context7.sent;
             if (pubKey) {
-              _context6.next = 5;
+              _context7.next = 6;
               break;
             }
-            return _context6.abrupt("return");
-          case 5:
+            return _context7.abrupt("return");
+          case 6:
             setOauthLoading(providerName);
-            createSuborgData = {
-              oauthProviders: [{
-                providerName: providerName,
-                oidcToken: credential
-              }]
-            };
-            if (customAccounts) {
-              createSuborgData.customAccounts = customAccounts;
+            oauthProviders = [{
+              providerName: providerName,
+              oidcToken: credential
+            }];
+            createSuborgData = _objectSpread2({
+              oauthProviders: oauthProviders
+            }, customAccounts && {
+              customAccounts: customAccounts
+            });
+            completeLogin = /*#__PURE__*/function () {
+              var _ref9 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee6(suborgID) {
+                var sessionResponse;
+                return _regeneratorRuntime().wrap(function _callee6$(_context6) {
+                  while (1) switch (_context6.prev = _context6.next) {
+                    case 0:
+                      _context6.next = 2;
+                      return server.oauthLogin({
+                        suborgID: suborgID,
+                        oidcToken: credential,
+                        publicKey: pubKey,
+                        sessionLengthSeconds: authConfig.sessionLengthSeconds
+                      });
+                    case 2:
+                      sessionResponse = _context6.sent;
+                      if (!(sessionResponse !== null && sessionResponse !== void 0 && sessionResponse.session)) {
+                        _context6.next = 7;
+                        break;
+                      }
+                      _context6.next = 6;
+                      return indexedDbClient.loginWithSession(sessionResponse.session);
+                    case 6:
+                      return _context6.abrupt("return", onAuthSuccess());
+                    case 7:
+                      onError(authErrors.oauth.loginFailed);
+                    case 8:
+                    case "end":
+                      return _context6.stop();
+                  }
+                }, _callee6);
+              }));
+              return function completeLogin(_x6) {
+                return _ref9.apply(this, arguments);
+              };
+            }(); // Non-social-linking path: getOrCreateSuborg then login
+            if (socialLinking) {
+              _context7.next = 18;
+              break;
             }
-            _context6.next = 10;
+            _context7.next = 13;
             return server.getOrCreateSuborg({
               filterType: FilterType.OidcToken,
               filterValue: credential,
               additionalData: createSuborgData
             });
-          case 10:
-            resp = _context6.sent;
+          case 13:
+            resp = _context7.sent;
             suborgIds = resp === null || resp === void 0 ? void 0 : resp.subOrganizationIds;
-            if (!(!suborgIds || suborgIds.length === 0)) {
-              _context6.next = 15;
+            if (suborgIds !== null && suborgIds !== void 0 && suborgIds.length) {
+              _context7.next = 17;
               break;
             }
-            onError(authErrors.oauth.loginFailed);
-            return _context6.abrupt("return");
-          case 15:
-            suborgId = suborgIds[0];
-            _context6.next = 18;
-            return server.oauthLogin({
-              suborgID: suborgId,
-              oidcToken: credential,
-              publicKey: pubKey,
-              sessionLengthSeconds: authConfig.sessionLengthSeconds
-            });
+            return _context7.abrupt("return", onError(authErrors.oauth.loginFailed));
+          case 17:
+            return _context7.abrupt("return", completeLogin(suborgIds[0]));
           case 18:
-            sessionResponse = _context6.sent;
-            if (!(sessionResponse && sessionResponse.session)) {
-              _context6.next = 26;
+            _context7.next = 20;
+            return server.getSuborgs({
+              filterType: FilterType.OidcToken,
+              filterValue: credential
+            });
+          case 20:
+            _context7.t1 = _yield$server$getSubo = _context7.sent;
+            _context7.t0 = _context7.t1 === null;
+            if (_context7.t0) {
+              _context7.next = 24;
               break;
             }
-            _context6.next = 22;
-            return indexedDbClient.loginWithSession(sessionResponse.session);
-          case 22:
-            _context6.next = 24;
-            return onAuthSuccess();
+            _context7.t0 = _yield$server$getSubo === void 0;
           case 24:
-            _context6.next = 27;
+            if (!_context7.t0) {
+              _context7.next = 28;
+              break;
+            }
+            _context7.t2 = void 0;
+            _context7.next = 29;
             break;
-          case 26:
-            onError(authErrors.oauth.loginFailed);
-          case 27:
+          case 28:
+            _context7.t2 = _yield$server$getSubo.organizationIds;
+          case 29:
+            oidcOrgIds = _context7.t2;
+            orgId = oidcOrgIds === null || oidcOrgIds === void 0 ? void 0 : oidcOrgIds[0]; // If not, try to link by verified email (Google only)
+            if (orgId) {
+              _context7.next = 93;
+              break;
+            }
+            _ref10 = jwtDecode(credential) || {}, oidcEmail = _ref10.email, iss = _ref10.iss;
+            createSuborgData = _objectSpread2({
+              email: oidcEmail,
+              oauthProviders: oauthProviders
+            }, customAccounts && {
+              customAccounts: customAccounts
+            });
+            if (!(oidcEmail && iss === "https://accounts.google.com")) {
+              _context7.next = 81;
+              break;
+            }
+            _context7.next = 37;
+            return server.getVerifiedSuborgs({
+              filterType: FilterType.Email,
+              filterValue: oidcEmail
+            });
+          case 37:
+            _context7.t4 = _yield$server$getVeri = _context7.sent;
+            _context7.t3 = _context7.t4 === null;
+            if (_context7.t3) {
+              _context7.next = 41;
+              break;
+            }
+            _context7.t3 = _yield$server$getVeri === void 0;
+          case 41:
+            if (!_context7.t3) {
+              _context7.next = 45;
+              break;
+            }
+            _context7.t5 = void 0;
+            _context7.next = 46;
+            break;
+          case 45:
+            _context7.t5 = _yield$server$getVeri.organizationIds;
+          case 46:
+            emailOrgIds = _context7.t5;
+            if (!(emailOrgIds !== null && emailOrgIds !== void 0 && emailOrgIds[0])) {
+              _context7.next = 67;
+              break;
+            }
+            orgId = emailOrgIds[0];
+            // attach this new OIDC provider to the existing user
+            _context7.next = 51;
+            return server.getUsers({
+              organizationId: orgId
+            });
+          case 51:
+            _context7.t7 = _yield$server$getUser = _context7.sent;
+            _context7.t6 = _context7.t7 === null;
+            if (_context7.t6) {
+              _context7.next = 55;
+              break;
+            }
+            _context7.t6 = _yield$server$getUser === void 0;
+          case 55:
+            if (!_context7.t6) {
+              _context7.next = 59;
+              break;
+            }
+            _context7.t8 = void 0;
+            _context7.next = 60;
+            break;
+          case 59:
+            _context7.t8 = (_yield$server$getUser2 = _yield$server$getUser.users) === null || _yield$server$getUser2 === void 0 ? void 0 : (_yield$server$getUser3 = _yield$server$getUser2[0]) === null || _yield$server$getUser3 === void 0 ? void 0 : _yield$server$getUser3.userId;
+          case 60:
+            userId = _context7.t8;
+            if (userId) {
+              _context7.next = 63;
+              break;
+            }
+            return _context7.abrupt("return", onError(authErrors.oauth.loginFailed));
+          case 63:
+            _context7.next = 65;
+            return server.createOauthProviders({
+              organizationId: orgId,
+              userId: userId,
+              oauthProviders: oauthProviders
+            });
+          case 65:
+            _context7.next = 79;
+            break;
+          case 67:
+            _context7.next = 69;
+            return server.createSuborg(createSuborgData);
+          case 69:
+            _context7.t10 = _yield$server$createS = _context7.sent;
+            _context7.t9 = _context7.t10 === null;
+            if (_context7.t9) {
+              _context7.next = 73;
+              break;
+            }
+            _context7.t9 = _yield$server$createS === void 0;
+          case 73:
+            if (!_context7.t9) {
+              _context7.next = 77;
+              break;
+            }
+            _context7.t11 = void 0;
+            _context7.next = 78;
+            break;
+          case 77:
+            _context7.t11 = _yield$server$createS.subOrganizationId;
+          case 78:
+            orgId = _context7.t11;
+          case 79:
+            _context7.next = 93;
+            break;
+          case 81:
+            _context7.next = 83;
+            return server.createSuborg(createSuborgData);
+          case 83:
+            _context7.t13 = _yield$server$createS2 = _context7.sent;
+            _context7.t12 = _context7.t13 === null;
+            if (_context7.t12) {
+              _context7.next = 87;
+              break;
+            }
+            _context7.t12 = _yield$server$createS2 === void 0;
+          case 87:
+            if (!_context7.t12) {
+              _context7.next = 91;
+              break;
+            }
+            _context7.t14 = void 0;
+            _context7.next = 92;
+            break;
+          case 91:
+            _context7.t14 = _yield$server$createS2.subOrganizationId;
+          case 92:
+            orgId = _context7.t14;
+          case 93:
+            return _context7.abrupt("return", orgId ? completeLogin(orgId) : onError(authErrors.oauth.loginFailed));
+          case 94:
           case "end":
-            return _context6.stop();
+            return _context7.stop();
         }
-      }, _callee6);
+      }, _callee7);
     }));
     return function handleOAuthLogin(_x4, _x5) {
       return _ref8.apply(this, arguments);
     };
   }();
   var handleLoginWithWallet = /*#__PURE__*/function () {
-    var _ref9 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee7() {
+    var _ref11 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee8() {
       var _authConfig$sessionLe3, publicKey, _walletClient$getWall, type, resp, suborgIds, pubKey;
-      return _regeneratorRuntime().wrap(function _callee7$(_context7) {
-        while (1) switch (_context7.prev = _context7.next) {
+      return _regeneratorRuntime().wrap(function _callee8$(_context8) {
+        while (1) switch (_context8.prev = _context8.next) {
           case 0:
             setLoading("wallet");
-            _context7.prev = 1;
+            _context8.prev = 1;
             if (walletClient) {
-              _context7.next = 4;
+              _context8.next = 4;
               break;
             }
             throw new Error("Wallet client not initialized");
           case 4:
-            _context7.next = 6;
+            _context8.next = 6;
             return walletClient.getPublicKey();
           case 6:
-            publicKey = _context7.sent;
+            publicKey = _context8.sent;
             if (publicKey) {
-              _context7.next = 9;
+              _context8.next = 9;
               break;
             }
             throw new Error(authErrors.wallet.noPublicKey);
           case 9:
             _walletClient$getWall = walletClient.getWalletInterface(), type = _walletClient$getWall.type;
-            _context7.next = 12;
+            _context8.next = 12;
             return server.getOrCreateSuborg({
               filterType: FilterType.PublicKey,
               filterValue: publicKey,
@@ -510,51 +711,51 @@ var Auth = function Auth(_ref) {
               }
             });
           case 12:
-            resp = _context7.sent;
+            resp = _context8.sent;
             suborgIds = resp === null || resp === void 0 ? void 0 : resp.subOrganizationIds;
             if (!(!suborgIds || suborgIds.length === 0)) {
-              _context7.next = 17;
+              _context8.next = 17;
               break;
             }
             onError(authErrors.wallet.loginFailed);
-            return _context7.abrupt("return");
+            return _context8.abrupt("return");
           case 17:
-            _context7.next = 19;
+            _context8.next = 19;
             return indexedDbClient.resetKeyPair();
           case 19:
-            _context7.next = 21;
+            _context8.next = 21;
             return indexedDbClient.getPublicKey();
           case 21:
-            pubKey = _context7.sent;
-            _context7.next = 24;
+            pubKey = _context8.sent;
+            _context8.next = 24;
             return walletClient.loginWithWallet({
               sessionType: SessionType.READ_WRITE,
               publicKey: pubKey,
               expirationSeconds: (_authConfig$sessionLe3 = authConfig.sessionLengthSeconds) === null || _authConfig$sessionLe3 === void 0 ? void 0 : _authConfig$sessionLe3.toString()
             });
           case 24:
-            _context7.next = 26;
+            _context8.next = 26;
             return onAuthSuccess();
           case 26:
-            _context7.next = 32;
+            _context8.next = 32;
             break;
           case 28:
-            _context7.prev = 28;
-            _context7.t0 = _context7["catch"](1);
-            onError(_context7.t0.message || authErrors.wallet.loginFailed);
-            console.error("Error during wallet login: ", _context7.t0);
+            _context8.prev = 28;
+            _context8.t0 = _context8["catch"](1);
+            onError(_context8.t0.message || authErrors.wallet.loginFailed);
+            console.error("Error during wallet login: ", _context8.t0);
           case 32:
-            _context7.prev = 32;
+            _context8.prev = 32;
             setLoading(undefined);
-            return _context7.finish(32);
+            return _context8.finish(32);
           case 35:
           case "end":
-            return _context7.stop();
+            return _context8.stop();
         }
-      }, _callee7, null, [[1, 28, 32, 35]]);
+      }, _callee8, null, [[1, 28, 32, 35]]);
     }));
     return function handleLoginWithWallet() {
-      return _ref9.apply(this, arguments);
+      return _ref11.apply(this, arguments);
     };
   }();
   var renderBackButton = function renderBackButton() {
@@ -592,7 +793,7 @@ var Auth = function Auth(_ref) {
         clientId: (_authConfig$googleCli = authConfig.googleClientId) !== null && _authConfig$googleCli !== void 0 ? _authConfig$googleCli : process.env.NEXT_PUBLIC_GOOGLE_CLIENT_ID,
         openInPage: authConfig.openOAuthInPage,
         onSuccess: function onSuccess(response) {
-          return handleOAuthLogin(response.idToken, "Google");
+          return handleOAuthLogin(response.idToken, "Google", authConfig.socialLinking);
         }
       }), appleEnabled && jsx(AppleAuthButton, {
         layout: layout,
@@ -600,14 +801,14 @@ var Auth = function Auth(_ref) {
         openInPage: authConfig.openOAuthInPage,
         onSuccess: function onSuccess(response) {
           return handleOAuthLogin(response.idToken, "Apple");
-        }
+        } // No need to pass socialLinking for Apple. It's not supported
       }), facebookEnabled && jsx(FacebookAuthButton, {
         layout: layout,
         clientId: (_authConfig$facebookC = authConfig.facebookClientId) !== null && _authConfig$facebookC !== void 0 ? _authConfig$facebookC : process.env.NEXT_PUBLIC_FACEBOOK_CLIENT_ID,
         openInPage: authConfig.openOAuthInPage,
         onSuccess: function onSuccess(response) {
           return handleOAuthLogin(response.id_token, "Facebook");
-        }
+        } // No need to pass socialLinking for Facebook. It's not supported
       })]
     });
   };