@umbraco-cms/backoffice 17.2.1 → 17.3.0-rc

package/dist-cms/external/openid/src/index.d.ts

@@ -1,17 +1,242 @@
-export * from './authorization_request.js';
-export * from './authorization_request_handler.js';
-export * from './authorization_response.js';
-export * from './authorization_service_configuration.js';
-export * from './crypto_utils.js';
-export * from './errors.js';
-export * from './flags.js';
-export * from './logger.js';
-export * from './query_string_utils.js';
-export * from './redirect_based_handler.js';
-export * from './revoke_token_request.js';
-export * from './storage.js';
-export * from './token_request.js';
-export * from './token_request_handler.js';
-export * from './token_response.js';
-export type * from './types.js';
-export * from './xhr.js';
+/**
+ * @deprecated This package is no longer used by Umbraco auth. Scheduled for removal in Umbraco 19.
+ * The Umbraco backoffice now uses cookie-based authentication with a minimal PKCE client.
+ * Data classes (TokenResponse, AuthorizationRequest, etc.) remain functional for compatibility.
+ * Handler classes (RedirectRequestHandler, BaseTokenRequestHandler, etc.) reject with an error
+ * because the underlying OAuth operations are no longer possible with cookie-based auth.
+ */
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export type TokenType = 'bearer' | 'mac';
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export interface TokenResponseJson {
+    access_token: string;
+    token_type?: TokenType;
+    expires_in?: string;
+    refresh_token?: string;
+    scope?: string;
+    id_token?: string;
+    issued_at?: number;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export type ErrorType = 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'unauthorized_client' | 'unsupported_grant_type' | 'invalid_scope';
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export interface TokenErrorJson {
+    error: ErrorType;
+    error_description?: string;
+    error_uri?: string;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class TokenResponse {
+    accessToken: string;
+    tokenType: TokenType;
+    expiresIn: number | undefined;
+    refreshToken: string | undefined;
+    scope: string | undefined;
+    idToken: string | undefined;
+    issuedAt: number;
+    constructor(response: TokenResponseJson);
+    toJson(): TokenResponseJson;
+    isValid(buffer?: number): boolean;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class TokenError {
+    error: ErrorType;
+    errorDescription: string | undefined;
+    errorUri: string | undefined;
+    constructor(tokenError: TokenErrorJson);
+    toJson(): TokenErrorJson;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export interface StringMap {
+    [key: string]: string;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export interface LocationLike {
+    hash: string;
+    host: string;
+    origin: string;
+    hostname: string;
+    pathname: string;
+    port: string;
+    protocol: string;
+    search: string;
+    assign(url: string): void;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export interface AuthorizationServiceConfigurationJson {
+    authorization_endpoint: string;
+    token_endpoint: string;
+    revocation_endpoint: string;
+    end_session_endpoint?: string;
+    userinfo_endpoint?: string;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class AuthorizationServiceConfiguration {
+    authorizationEndpoint: string;
+    tokenEndpoint: string;
+    revocationEndpoint: string;
+    userInfoEndpoint?: string;
+    endSessionEndpoint?: string;
+    constructor(request: AuthorizationServiceConfigurationJson);
+    toJson(): AuthorizationServiceConfigurationJson;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export interface AuthorizationRequestJson {
+    response_type: string;
+    client_id: string;
+    redirect_uri: string;
+    scope: string;
+    state?: string;
+    extras?: StringMap;
+    internal?: StringMap;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class AuthorizationRequest {
+    static RESPONSE_TYPE_TOKEN: string;
+    static RESPONSE_TYPE_CODE: string;
+    clientId: string;
+    redirectUri: string;
+    scope: string;
+    responseType: string;
+    state: string;
+    extras?: StringMap;
+    internal?: StringMap;
+    constructor(request: AuthorizationRequestJson);
+    setupCodeVerifier(): Promise<void>;
+    toJson(): Promise<AuthorizationRequestJson>;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class AuthorizationResponse {
+    code: string;
+    state: string;
+    constructor(response: {
+        code: string;
+        state: string;
+    });
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class AuthorizationError {
+    error: string;
+    errorDescription: string | undefined;
+    errorUri: string | undefined;
+    state: string | undefined;
+    constructor(error: {
+        error: string;
+        error_description?: string;
+        error_uri?: string;
+        state?: string;
+    });
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare const GRANT_TYPE_AUTHORIZATION_CODE = "authorization_code";
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare const GRANT_TYPE_REFRESH_TOKEN = "refresh_token";
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class AuthorizationNotifier {
+    setAuthorizationListener(_listener: unknown): void;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class LocalStorageBackend {
+    getItem(name: string): Promise<string | null>;
+    setItem(name: string, value: string): Promise<void>;
+    removeItem(name: string): Promise<void>;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class BasicQueryStringUtils {
+    parse(_input: LocationLike, _useHash?: boolean): StringMap;
+    stringify(input: StringMap): string;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class FetchRequestor {
+    xhr<T>(_settings: unknown): Promise<T>;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class RedirectRequestHandler {
+    constructor(..._args: unknown[]);
+    setAuthorizationNotifier(_notifier: unknown): void;
+    performAuthorizationRequest(_config: unknown, _request: unknown): Promise<string>;
+    completeAuthorizationRequestIfPossible(): Promise<null>;
+    cleanupStaleAuthorizationData(): Promise<void>;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class BaseTokenRequestHandler {
+    constructor(..._args: unknown[]);
+    performTokenRequest(_config: unknown, _request: unknown): Promise<TokenResponse>;
+    performRevokeTokenRequest(_config: unknown, _request: unknown): Promise<boolean>;
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class TokenRequest {
+    clientId: string;
+    redirectUri: string;
+    grantType: string;
+    code?: string;
+    refreshToken?: string;
+    extras?: StringMap;
+    constructor(request: {
+        client_id: string;
+        redirect_uri: string;
+        grant_type: string;
+        code?: string;
+        refresh_token?: string;
+        extras?: StringMap;
+    });
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export declare class RevokeTokenRequest {
+    token: string;
+    tokenTypeHint?: string;
+    clientId?: string;
+    constructor(request: {
+        token: string;
+        token_type_hint?: string;
+        client_id?: string;
+    });
+}

package/dist-cms/external/openid/src/index.js

@@ -1,16 +1,245 @@
-export * from './authorization_request.js';
-export * from './authorization_request_handler.js';
-export * from './authorization_response.js';
-export * from './authorization_service_configuration.js';
-export * from './crypto_utils.js';
-export * from './errors.js';
-export * from './flags.js';
-export * from './logger.js';
-export * from './query_string_utils.js';
-export * from './redirect_based_handler.js';
-export * from './revoke_token_request.js';
-export * from './storage.js';
-export * from './token_request.js';
-export * from './token_request_handler.js';
-export * from './token_response.js';
-export * from './xhr.js';
+/**
+ * @deprecated This package is no longer used by Umbraco auth. Scheduled for removal in Umbraco 19.
+ * The Umbraco backoffice now uses cookie-based authentication with a minimal PKCE client.
+ * Data classes (TokenResponse, AuthorizationRequest, etc.) remain functional for compatibility.
+ * Handler classes (RedirectRequestHandler, BaseTokenRequestHandler, etc.) reject with an error
+ * because the underlying OAuth operations are no longer possible with cookie-based auth.
+ */
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class TokenResponse {
+    constructor(response) {
+        this.accessToken = response.access_token;
+        this.tokenType = response.token_type || 'bearer';
+        if (response.expires_in) {
+            this.expiresIn = parseInt(response.expires_in, 10);
+        }
+        this.refreshToken = response.refresh_token;
+        this.scope = response.scope;
+        this.idToken = response.id_token;
+        this.issuedAt = response.issued_at || Math.round(Date.now() / 1000);
+    }
+    toJson() {
+        return {
+            access_token: this.accessToken,
+            id_token: this.idToken,
+            refresh_token: this.refreshToken,
+            scope: this.scope,
+            token_type: this.tokenType,
+            issued_at: this.issuedAt,
+            expires_in: this.expiresIn?.toString(),
+        };
+    }
+    isValid(buffer = 0) {
+        if (this.expiresIn) {
+            const now = Math.round(Date.now() / 1000);
+            return now < this.issuedAt + this.expiresIn + buffer;
+        }
+        return true;
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class TokenError {
+    constructor(tokenError) {
+        this.error = tokenError.error;
+        this.errorDescription = tokenError.error_description;
+        this.errorUri = tokenError.error_uri;
+    }
+    toJson() {
+        return {
+            error: this.error,
+            error_description: this.errorDescription,
+            error_uri: this.errorUri,
+        };
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class AuthorizationServiceConfiguration {
+    constructor(request) {
+        this.authorizationEndpoint = request.authorization_endpoint;
+        this.tokenEndpoint = request.token_endpoint;
+        this.revocationEndpoint = request.revocation_endpoint;
+        this.userInfoEndpoint = request.userinfo_endpoint;
+        this.endSessionEndpoint = request.end_session_endpoint;
+    }
+    toJson() {
+        return {
+            authorization_endpoint: this.authorizationEndpoint,
+            token_endpoint: this.tokenEndpoint,
+            revocation_endpoint: this.revocationEndpoint,
+            end_session_endpoint: this.endSessionEndpoint,
+            userinfo_endpoint: this.userInfoEndpoint,
+        };
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class AuthorizationRequest {
+    static { this.RESPONSE_TYPE_TOKEN = 'token'; }
+    static { this.RESPONSE_TYPE_CODE = 'code'; }
+    constructor(request) {
+        this.clientId = request.client_id;
+        this.redirectUri = request.redirect_uri;
+        this.scope = request.scope;
+        this.responseType = request.response_type || AuthorizationRequest.RESPONSE_TYPE_CODE;
+        this.state = request.state || '';
+        this.extras = request.extras;
+        this.internal = request.internal;
+    }
+    setupCodeVerifier() {
+        return Promise.resolve();
+    }
+    toJson() {
+        return Promise.resolve({
+            response_type: this.responseType,
+            client_id: this.clientId,
+            redirect_uri: this.redirectUri,
+            scope: this.scope,
+            state: this.state,
+            extras: this.extras,
+            internal: this.internal,
+        });
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class AuthorizationResponse {
+    constructor(response) {
+        this.code = response.code;
+        this.state = response.state;
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class AuthorizationError {
+    constructor(error) {
+        this.error = error.error;
+        this.errorDescription = error.error_description;
+        this.errorUri = error.error_uri;
+        this.state = error.state;
+    }
+}
+// Stub exports for classes/functions that were previously exported but are no longer functional
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export const GRANT_TYPE_AUTHORIZATION_CODE = 'authorization_code';
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export const GRANT_TYPE_REFRESH_TOKEN = 'refresh_token';
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class AuthorizationNotifier {
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    setAuthorizationListener(_listener) {
+        // no-op
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class LocalStorageBackend {
+    async getItem(name) {
+        return localStorage.getItem(name);
+    }
+    async setItem(name, value) {
+        localStorage.setItem(name, value);
+    }
+    async removeItem(name) {
+        localStorage.removeItem(name);
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class BasicQueryStringUtils {
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    parse(_input, _useHash) {
+        return {};
+    }
+    stringify(input) {
+        return new URLSearchParams(input).toString();
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class FetchRequestor {
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    xhr(_settings) {
+        return Promise.reject(new Error('FetchRequestor is deprecated'));
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class RedirectRequestHandler {
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    constructor(..._args) {
+        // no-op
+    }
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    setAuthorizationNotifier(_notifier) {
+        // no-op
+    }
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    performAuthorizationRequest(_config, _request) {
+        return Promise.reject(new Error('RedirectRequestHandler is deprecated'));
+    }
+    completeAuthorizationRequestIfPossible() {
+        return Promise.resolve(null);
+    }
+    cleanupStaleAuthorizationData() {
+        return Promise.resolve();
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class BaseTokenRequestHandler {
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    constructor(..._args) {
+        // no-op
+    }
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    performTokenRequest(_config, _request) {
+        return Promise.reject(new Error('BaseTokenRequestHandler is deprecated'));
+    }
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    performRevokeTokenRequest(_config, _request) {
+        return Promise.reject(new Error('BaseTokenRequestHandler is deprecated'));
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class TokenRequest {
+    constructor(request) {
+        this.clientId = request.client_id;
+        this.redirectUri = request.redirect_uri;
+        this.grantType = request.grant_type;
+        this.code = request.code;
+        this.refreshToken = request.refresh_token;
+        this.extras = request.extras;
+    }
+}
+/**
+ * @deprecated Scheduled for removal in Umbraco 19.
+ */
+export class RevokeTokenRequest {
+    constructor(request) {
+        this.token = request.token;
+        this.tokenTypeHint = request.token_type_hint;
+        this.clientId = request.client_id;
+    }
+}

package/dist-cms/external/rxjs/index.d.ts

@@ -1 +1 @@
-export { BehaviorSubject, Observable, ReplaySubject, Subject, Subscription, catchError, combineLatest, debounceTime, distinctUntilChanged, filter, first, firstValueFrom, from, lastValueFrom, map, of, shareReplay, skip, startWith, switchMap, takeUntil, tap, delay, throttleTime, auditTime, } from 'rxjs';
+export { BehaviorSubject, Observable, ReplaySubject, Subject, Subscription, catchError, combineLatest, debounceTime, distinctUntilChanged, filter, first, firstValueFrom, from, lastValueFrom, map, of, shareReplay, skip, startWith, switchMap, takeUntil, tap, delay, throttleTime, auditTime, defer, } from 'rxjs';

package/dist-cms/external/rxjs/index.js

@@ -1 +1 @@
-export { BehaviorSubject, Observable, ReplaySubject, Subject, Subscription, catchError, combineLatest, debounceTime, distinctUntilChanged, filter, first, firstValueFrom, from, lastValueFrom, map, of, shareReplay, skip, startWith, switchMap, takeUntil, tap, delay, throttleTime, auditTime, } from 'rxjs';
+export { BehaviorSubject, Observable, ReplaySubject, Subject, Subscription, catchError, combineLatest, debounceTime, distinctUntilChanged, filter, first, firstValueFrom, from, lastValueFrom, map, of, shareReplay, skip, startWith, switchMap, takeUntil, tap, delay, throttleTime, auditTime, defer, } from 'rxjs';

package/dist-cms/external/uui/package.json

@@ -6,7 +6,7 @@
         "build": "vite build"
     },
     "dependencies": {
-        "@umbraco-ui/uui": "^1.17.0",
-        "@umbraco-ui/uui-css": "^1.17.0"
+        "@umbraco-ui/uui": "^1.17.2",
+        "@umbraco-ui/uui-css": "^1.17.1"
     }
 }