@unidy.io/sdk 1.1.2 → 1.1.4

package/dist/collection/auth/auth-helpers.js

@@ -0,0 +1,299 @@
+import { jwtDecode } from "jwt-decode";
+import { authState, authStore } from "../auth/store/auth-store";
+import { t } from "../i18n";
+import { createLogger } from "../logger";
+import { state as profileState } from "../profile/store/profile-store";
+import { clearUrlParam } from "../shared/component-utils";
+import { Flash } from "../shared/store/flash-store";
+import { authenticateWithPasskey } from "./passkey-auth";
+export class AuthHelpers {
+    client;
+    logger = createLogger("AuthHelpers");
+    static PASSWORD_ERROR_IDENTIFIERS = [
+        "invalid_password",
+        "password_required",
+        "password_not_set",
+        "passwords_do_not_match",
+    ];
+    constructor(client) {
+        this.client = client;
+    }
+    async createSignIn(email, password, sendMagicCode) {
+        if (!email) {
+            throw new Error(t("errors.required_field", { field: "Email" }));
+        }
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        const [error, response] = await this.client.auth.createSignIn(email, password, sendMagicCode);
+        if (error) {
+            this.handleAuthError(error, response);
+            return;
+        }
+        if (password) {
+            const token = jwtDecode(response.jwt);
+            authStore.setSignInId(token.sid);
+            authStore.setToken(response.jwt);
+            authStore.setLoading(false);
+            authStore.getRootComponentRef()?.onAuth(response);
+            return;
+        }
+        if (sendMagicCode) {
+            authStore.setSignInId(response.sid);
+            authStore.setMagicCodeStep("sent");
+            authStore.setStep("magic-code");
+            authStore.setLoading(false);
+            return [error, response];
+        }
+        const signInResponse = response;
+        authStore.setStep("verification");
+        authStore.setEmail(email);
+        authStore.setSignInId(signInResponse.sid);
+        authStore.setLoginOptions(signInResponse.login_options);
+        authStore.setLoading(false);
+    }
+    async authenticateWithPassword(password) {
+        if (!authState.sid) {
+            throw new Error(t("errors.no_sign_in_id"));
+        }
+        if (!password) {
+            throw new Error(t("errors.required_field", { field: "Password" }));
+        }
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        const [error, response] = await this.client.auth.authenticateWithPassword(authState.sid, password);
+        if (error) {
+            this.handleAuthError(error, response);
+        }
+        else {
+            authStore.setLoading(false);
+            this.handleAuthSuccess(response);
+            return;
+        }
+    }
+    handleAuthError(error, response) {
+        switch (error) {
+            case "account_not_found":
+                authStore.setFieldError("email", error);
+                break;
+            case "missing_required_fields": {
+                authStore.setMissingFields(response.fields);
+                profileState.data = response.fields;
+                if (response.sid) {
+                    authStore.setSignInId(response.sid);
+                }
+                authStore.setStep("missing-fields");
+                break;
+            }
+            default:
+                if (AuthHelpers.PASSWORD_ERROR_IDENTIFIERS.includes(error)) {
+                    authStore.setFieldError("password", error);
+                }
+                else {
+                    // e.g. "account_locked", "internal_server_error"
+                    authStore.setGlobalError("auth", error);
+                }
+                break;
+        }
+        authStore.setLoading(false);
+    }
+    async logout() {
+        const [error, _] = await this.client.auth.signOut(authState.sid);
+        if (error) {
+            authStore.setGlobalError("auth", error);
+        }
+        return [error, _];
+    }
+    async refreshToken() {
+        if (authState.step === "missing-fields") {
+            return;
+        }
+        this.extractSignInIdFromQuery();
+        if (!authState.sid) {
+            this.logger.warn("No sign-in ID in the session");
+            return;
+        }
+        const [error, response] = await this.client.auth.refreshToken(authState.sid);
+        if (error) {
+            authStore.reset();
+            authStore.setGlobalError("auth", error);
+        }
+        else {
+            authStore.setToken(response.jwt);
+        }
+    }
+    handleSocialAuthRedirect() {
+        // missing required fields flow
+        const url = new URL(window.location.href);
+        const params = url.searchParams;
+        const error = params.get("error");
+        if (error !== "missing_required_fields") {
+            return;
+        }
+        const fieldsFromUrl = params.get("fields");
+        if (!fieldsFromUrl) {
+            return;
+        }
+        const signInId = params.get("sid");
+        if (signInId) {
+            authStore.setSignInId(signInId);
+        }
+        else {
+            return;
+        }
+        try {
+            const fields = JSON.parse(fieldsFromUrl);
+            authStore.setMissingFields(fields);
+            profileState.data = fields;
+            authStore.setStep("missing-fields");
+            params.delete("error");
+            params.delete("fields");
+            const cleanUrl = `${url.origin}${url.pathname}${url.hash}`;
+            window.history.replaceState(null, "", cleanUrl);
+        }
+        catch (e) {
+            this.logger.error("Failed to parse missing fields payload:", e);
+            authStore.setGlobalError("auth", "invalid_required_fields_payload");
+        }
+    }
+    async sendMagicCode() {
+        if (!authState.sid && authState.step !== "single-login") {
+            throw new Error(t("errors.no_sign_in_id"));
+        }
+        authStore.setMagicCodeStep("requested");
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        if (authState.step === "single-login") {
+            const [error, response] = await this.createSignIn(authState.email, undefined, true);
+            authStore.setLoading(false);
+            return [error, response];
+        }
+        const [error, response] = await this.client.auth.sendMagicCode(authState.sid);
+        authStore.setLoading(false);
+        authStore.setStep("magic-code");
+        if (!error) {
+            authStore.setMagicCodeStep("sent");
+            return [null, response];
+        }
+        authStore.setFieldError("magicCode", error);
+        if (error === "magic_code_recently_created") {
+            authStore.setMagicCodeStep("sent");
+        }
+        return [error, response];
+    }
+    async authenticateWithMagicCode(code) {
+        if (!authState.sid) {
+            throw new Error(t("errors.no_sign_in_id"));
+        }
+        if (!code) {
+            throw new Error(t("errors.magic_code_is_missing"));
+        }
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        const [error, response] = await this.client.auth.authenticateWithMagicCode(authState.sid, code);
+        if (!error) {
+            this.handleAuthSuccess(response);
+            return;
+        }
+        if (error === "missing_required_fields") {
+            this.handleMissingFields(response);
+            return;
+        }
+        authStore.setLoading(false);
+        authStore.setFieldError("magicCode", error);
+    }
+    async sendResetPasswordEmail() {
+        if (!authState.sid) {
+            throw new Error(t("errors.no_sign_in_id"));
+        }
+        authStore.setLoading(true);
+        authStore.setResetPasswordStep("requested");
+        const [error, _] = await this.client.auth.sendResetPasswordEmail(authState.sid, window.location.href);
+        if (error) {
+            authStore.setFieldError("resetPassword", error);
+        }
+        else {
+            authStore.setResetPasswordStep("sent");
+            authStore.clearErrors();
+        }
+        authStore.setLoading(false);
+    }
+    async handleResetPasswordRedirect() {
+        const url = new URL(window.location.href);
+        const params = url.searchParams;
+        const resetToken = params.get("reset_password_token");
+        if (!resetToken) {
+            return false;
+        }
+        if (authState.sid) {
+            authStore.setLoading(true);
+            const [error] = await this.client.auth.validateResetPasswordToken(authState.sid, resetToken);
+            if (error) {
+                authStore.setFieldError("resetPassword", error);
+                authStore.setStep("reset-password");
+                authStore.setLoading(false);
+                return false;
+            }
+        }
+        authStore.setResetToken(resetToken);
+        authStore.setStep("reset-password");
+        authStore.setLoading(false);
+        return true;
+    }
+    async resetPassword() {
+        if (!authState.resetPassword.token) {
+            throw new Error("No reset token available");
+        }
+        if (!authState.resetPassword.newPassword) {
+            authStore.setFieldError("resetPassword", "password_required");
+            return;
+        }
+        if (authState.resetPassword.passwordConfirmation &&
+            authState.resetPassword.newPassword !== authState.resetPassword.passwordConfirmation) {
+            authStore.setFieldError("resetPassword", "passwords_do_not_match");
+            return;
+        }
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        const [error, response] = await this.client.auth.resetPassword(authState.sid, authState.resetPassword.token, authState.resetPassword.newPassword, authState.resetPassword.passwordConfirmation);
+        if (error) {
+            authStore.setFieldError("resetPassword", error);
+            // TODO: add proper password requirements handling --> for now this is fine
+            if (error === "invalid_password") {
+                authStore.setFieldError("password", response.error_details?.password.map((p) => t(`errors.password_requirements.${p}`)).join("\n"));
+            }
+        }
+        else {
+            authStore.setStep("email");
+            authStore.updateResetPassword({
+                step: "completed",
+                token: null,
+                newPassword: "",
+                passwordConfirmation: "",
+            });
+            clearUrlParam("reset_password_token");
+            Flash.success.addMessage("Password reset successfully");
+        }
+        authStore.setLoading(false);
+    }
+    authenticateWithPasskey() {
+        return authenticateWithPasskey(this.client, (response) => this.handleAuthSuccess(response));
+    }
+    extractSignInIdFromQuery() {
+        const sid = clearUrlParam("sid");
+        if (sid) {
+            authStore.setSignInId(sid);
+        }
+    }
+    handleMissingFields(response) {
+        authStore.setMissingFields(response.fields);
+        profileState.data = response.fields;
+        authStore.setStep("missing-fields");
+        authStore.setLoading(false);
+    }
+    handleAuthSuccess(response) {
+        authStore.setToken(response.jwt);
+        authStore.setLoading(false);
+        authStore.getRootComponentRef()?.onAuth(response);
+    }
+}
+//# sourceMappingURL=auth-helpers.js.map

package/dist/collection/auth/auth-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helpers.js","sourceRoot":"","sources":["../../src/auth/auth-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,CAAC,EAAE,MAAM,SAAS,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,KAAK,IAAI,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAEpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,MAAM,OAAO,WAAW;IACd,MAAM,CAAc;IACpB,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAErC,MAAM,CAAU,0BAA0B,GAAG;QACnD,kBAAkB;QAClB,mBAAmB;QACnB,kBAAkB;QAClB,wBAAwB;KACzB,CAAC;IAEF,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,QAAiB,EAAE,aAAuB;QAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,CAAC,WAAW,EAAE,CAAC;QAExB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAE9F,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,SAAS,CAAgB,QAA0B,CAAC,GAAG,CAAC,CAAC;YACvE,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjC,SAAS,CAAC,QAAQ,CAAE,QAA0B,CAAC,GAAG,CAAC,CAAC;YACpD,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5B,SAAS,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,QAAyB,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,SAAS,CAAC,WAAW,CAAE,QAAiC,CAAC,GAAG,CAAC,CAAC;YAC9D,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACnC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAChC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAU,CAAC;QACpC,CAAC;QACD,MAAM,cAAc,GAAG,QAAgC,CAAC;QACxD,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,SAAS,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC1C,SAAS,CAAC,eAAe,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QACxD,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,QAAgB;QAC7C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,CAAC,WAAW,EAAE,CAAC;QAExB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEnG,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,iBAAiB,CAAC,QAAyB,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,KAAa,EAAE,QAAiB;QACtD,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,mBAAmB;gBACtB,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACxC,MAAM;YAER,KAAK,yBAAyB,CAAC,CAAC,CAAC;gBAC/B,SAAS,CAAC,gBAAgB,CAAE,QAAmC,CAAC,MAAM,CAAC,CAAC;gBACxE,YAAY,CAAC,IAAI,GAAI,QAAmC,CAAC,MAAoB,CAAC;gBAE9E,IAAK,QAAmC,CAAC,GAAG,EAAE,CAAC;oBAC7C,SAAS,CAAC,WAAW,CAAE,QAAmC,CAAC,GAAa,CAAC,CAAC;gBAC5E,CAAC;gBAED,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACpC,MAAM;YACR,CAAC;YAED;gBACE,IAAI,WAAW,CAAC,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3D,SAAS,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC7C,CAAC;qBAAM,CAAC;oBACN,iDAAiD;oBACjD,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC1C,CAAC;gBACD,MAAM;QACV,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAa,CAAC,CAAC;QAE3E,IAAI,KAAK,EAAE,CAAC;YACV,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC,CAAU,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAEhC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAE7E,IAAI,KAAK,EAAE,CAAC;YACV,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,QAAQ,CAAE,QAA0B,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,wBAAwB;QACtB,+BAA+B;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,KAAK,KAAK,yBAAyB,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAEzC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACnC,YAAY,CAAC,IAAI,GAAG,MAAoB,CAAC;YACzC,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAEpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxB,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;YAChE,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,SAAS,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACxC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,CAAC,WAAW,EAAE,CAAC;QAExB,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACpF,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAU,CAAC;QACpC,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAE9E,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAE5B,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAEnC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAU,CAAC;QACnC,CAAC;QAED,SAAS,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAE5C,IAAI,KAAK,KAAK,6BAA6B,EAAE,CAAC;YAC5C,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAU,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,IAAY;QAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,CAAC,WAAW,EAAE,CAAC;QAExB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEhG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,iBAAiB,CAAC,QAAyB,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,IAAI,KAAK,KAAK,yBAAyB,EAAE,CAAC;YACxC,IAAI,CAAC,mBAAmB,CAAC,QAAkC,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,SAAS,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAE5C,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEtG,IAAI,KAAK,EAAE,CAAC;YACV,SAAS,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACvC,SAAS,CAAC,WAAW,EAAE,CAAC;QAC1B,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,2BAA2B;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAEtD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;YAClB,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAE3B,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAE7F,IAAI,KAAK,EAAE,CAAC;gBACV,SAAS,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;gBAChD,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACpC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAC5B,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACpC,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACpC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAE5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;YACzC,SAAS,CAAC,aAAa,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,IACE,SAAS,CAAC,aAAa,CAAC,oBAAoB;YAC5C,SAAS,CAAC,aAAa,CAAC,WAAW,KAAK,SAAS,CAAC,aAAa,CAAC,oBAAoB,EACpF,CAAC;YACD,SAAS,CAAC,aAAa,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,CAAC,WAAW,EAAE,CAAC;QAExB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAC5D,SAAS,CAAC,GAAa,EACvB,SAAS,CAAC,aAAa,CAAC,KAAK,EAC7B,SAAS,CAAC,aAAa,CAAC,WAAW,EACnC,SAAS,CAAC,aAAa,CAAC,oBAAoB,CAC7C,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACV,SAAS,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YAEhD,2EAA2E;YAC3E,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;gBACjC,SAAS,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACtI,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3B,SAAS,CAAC,mBAAmB,CAAC;gBAC5B,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,IAAI;gBACX,WAAW,EAAE,EAAE;gBACf,oBAAoB,EAAE,EAAE;aACzB,CAAC,CAAC;YAEH,aAAa,CAAC,sBAAsB,CAAC,CAAC;YACtC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC;QAC1D,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,uBAAuB;QACrB,OAAO,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9F,CAAC;IAEO,wBAAwB;QAC9B,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAEjC,IAAI,GAAG,EAAE,CAAC;YACR,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,QAAgC;QAC1D,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,YAAY,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAoB,CAAC;QAClD,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACpC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAEO,iBAAiB,CAAC,QAAuB;QAC/C,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,SAAS,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC","sourcesContent":["import { jwtDecode } from \"jwt-decode\";\nimport type { CreateSignInResponse, RequiredFieldsResponse, TokenResponse, UnidyClient } from \"../api\";\nimport { authState, authStore } from \"../auth/store/auth-store\";\nimport { t } from \"../i18n\";\nimport { createLogger } from \"../logger\";\nimport type { ProfileRaw } from \"../profile\";\nimport { state as profileState } from \"../profile/store/profile-store\";\nimport { clearUrlParam } from \"../shared/component-utils\";\nimport { Flash } from \"../shared/store/flash-store\";\nimport type { TokenPayload } from \"./auth\";\nimport { authenticateWithPasskey } from \"./passkey-auth\";\n\nexport class AuthHelpers {\n  private client: UnidyClient;\n  private logger = createLogger(\"AuthHelpers\");\n\n  private static readonly PASSWORD_ERROR_IDENTIFIERS = [\n    \"invalid_password\",\n    \"password_required\",\n    \"password_not_set\",\n    \"passwords_do_not_match\",\n  ];\n\n  constructor(client: UnidyClient) {\n    this.client = client;\n  }\n\n  async createSignIn(email: string, password?: string, sendMagicCode?: boolean) {\n    if (!email) {\n      throw new Error(t(\"errors.required_field\", { field: \"Email\" }));\n    }\n\n    authStore.setLoading(true);\n    authStore.clearErrors();\n\n    const [error, response] = await this.client.auth.createSignIn(email, password, sendMagicCode);\n\n    if (error) {\n      this.handleAuthError(error, response);\n      return;\n    }\n\n    if (password) {\n      const token = jwtDecode<TokenPayload>((response as TokenResponse).jwt);\n      authStore.setSignInId(token.sid);\n      authStore.setToken((response as TokenResponse).jwt);\n      authStore.setLoading(false);\n      authStore.getRootComponentRef()?.onAuth(response as TokenResponse);\n      return;\n    }\n\n    if (sendMagicCode) {\n      authStore.setSignInId((response as CreateSignInResponse).sid);\n      authStore.setMagicCodeStep(\"sent\");\n      authStore.setStep(\"magic-code\");\n      authStore.setLoading(false);\n      return [error, response] as const;\n    }\n    const signInResponse = response as CreateSignInResponse;\n    authStore.setStep(\"verification\");\n    authStore.setEmail(email);\n    authStore.setSignInId(signInResponse.sid);\n    authStore.setLoginOptions(signInResponse.login_options);\n    authStore.setLoading(false);\n  }\n\n  async authenticateWithPassword(password: string) {\n    if (!authState.sid) {\n      throw new Error(t(\"errors.no_sign_in_id\"));\n    }\n\n    if (!password) {\n      throw new Error(t(\"errors.required_field\", { field: \"Password\" }));\n    }\n\n    authStore.setLoading(true);\n    authStore.clearErrors();\n\n    const [error, response] = await this.client.auth.authenticateWithPassword(authState.sid, password);\n\n    if (error) {\n      this.handleAuthError(error, response);\n    } else {\n      authStore.setLoading(false);\n      this.handleAuthSuccess(response as TokenResponse);\n      return;\n    }\n  }\n\n  private handleAuthError(error: string, response: unknown) {\n    switch (error) {\n      case \"account_not_found\":\n        authStore.setFieldError(\"email\", error);\n        break;\n\n      case \"missing_required_fields\": {\n        authStore.setMissingFields((response as RequiredFieldsResponse).fields);\n        profileState.data = (response as RequiredFieldsResponse).fields as ProfileRaw;\n\n        if ((response as RequiredFieldsResponse).sid) {\n          authStore.setSignInId((response as RequiredFieldsResponse).sid as string);\n        }\n\n        authStore.setStep(\"missing-fields\");\n        break;\n      }\n\n      default:\n        if (AuthHelpers.PASSWORD_ERROR_IDENTIFIERS.includes(error)) {\n          authStore.setFieldError(\"password\", error);\n        } else {\n          // e.g. \"account_locked\", \"internal_server_error\"\n          authStore.setGlobalError(\"auth\", error);\n        }\n        break;\n    }\n\n    authStore.setLoading(false);\n  }\n\n  async logout() {\n    const [error, _] = await this.client.auth.signOut(authState.sid as string);\n\n    if (error) {\n      authStore.setGlobalError(\"auth\", error);\n    }\n\n    return [error, _] as const;\n  }\n\n  async refreshToken() {\n    if (authState.step === \"missing-fields\") {\n      return;\n    }\n    this.extractSignInIdFromQuery();\n\n    if (!authState.sid) {\n      this.logger.warn(\"No sign-in ID in the session\");\n      return;\n    }\n\n    const [error, response] = await this.client.auth.refreshToken(authState.sid);\n\n    if (error) {\n      authStore.reset();\n      authStore.setGlobalError(\"auth\", error);\n    } else {\n      authStore.setToken((response as TokenResponse).jwt);\n    }\n  }\n\n  handleSocialAuthRedirect(): void {\n    // missing required fields flow\n    const url = new URL(window.location.href);\n    const params = url.searchParams;\n    const error = params.get(\"error\");\n\n    if (error !== \"missing_required_fields\") {\n      return;\n    }\n\n    const fieldsFromUrl = params.get(\"fields\");\n    if (!fieldsFromUrl) {\n      return;\n    }\n\n    const signInId = params.get(\"sid\");\n    if (signInId) {\n      authStore.setSignInId(signInId);\n    } else {\n      return;\n    }\n\n    try {\n      const fields = JSON.parse(fieldsFromUrl);\n\n      authStore.setMissingFields(fields);\n      profileState.data = fields as ProfileRaw;\n      authStore.setStep(\"missing-fields\");\n\n      params.delete(\"error\");\n      params.delete(\"fields\");\n      const cleanUrl = `${url.origin}${url.pathname}${url.hash}`;\n      window.history.replaceState(null, \"\", cleanUrl);\n    } catch (e) {\n      this.logger.error(\"Failed to parse missing fields payload:\", e);\n      authStore.setGlobalError(\"auth\", \"invalid_required_fields_payload\");\n    }\n  }\n\n  async sendMagicCode() {\n    if (!authState.sid && authState.step !== \"single-login\") {\n      throw new Error(t(\"errors.no_sign_in_id\"));\n    }\n\n    authStore.setMagicCodeStep(\"requested\");\n    authStore.setLoading(true);\n    authStore.clearErrors();\n\n    if (authState.step === \"single-login\") {\n      const [error, response] = await this.createSignIn(authState.email, undefined, true);\n      authStore.setLoading(false);\n      return [error, response] as const;\n    }\n\n    const [error, response] = await this.client.auth.sendMagicCode(authState.sid);\n\n    authStore.setLoading(false);\n\n    authStore.setStep(\"magic-code\");\n\n    if (!error) {\n      authStore.setMagicCodeStep(\"sent\");\n\n      return [null, response] as const;\n    }\n\n    authStore.setFieldError(\"magicCode\", error);\n\n    if (error === \"magic_code_recently_created\") {\n      authStore.setMagicCodeStep(\"sent\");\n    }\n\n    return [error, response] as const;\n  }\n\n  async authenticateWithMagicCode(code: string) {\n    if (!authState.sid) {\n      throw new Error(t(\"errors.no_sign_in_id\"));\n    }\n\n    if (!code) {\n      throw new Error(t(\"errors.magic_code_is_missing\"));\n    }\n\n    authStore.setLoading(true);\n    authStore.clearErrors();\n\n    const [error, response] = await this.client.auth.authenticateWithMagicCode(authState.sid, code);\n\n    if (!error) {\n      this.handleAuthSuccess(response as TokenResponse);\n      return;\n    }\n\n    if (error === \"missing_required_fields\") {\n      this.handleMissingFields(response as RequiredFieldsResponse);\n      return;\n    }\n\n    authStore.setLoading(false);\n    authStore.setFieldError(\"magicCode\", error);\n  }\n\n  async sendResetPasswordEmail() {\n    if (!authState.sid) {\n      throw new Error(t(\"errors.no_sign_in_id\"));\n    }\n\n    authStore.setLoading(true);\n    authStore.setResetPasswordStep(\"requested\");\n\n    const [error, _] = await this.client.auth.sendResetPasswordEmail(authState.sid, window.location.href);\n\n    if (error) {\n      authStore.setFieldError(\"resetPassword\", error);\n    } else {\n      authStore.setResetPasswordStep(\"sent\");\n      authStore.clearErrors();\n    }\n\n    authStore.setLoading(false);\n  }\n\n  async handleResetPasswordRedirect(): Promise<boolean> {\n    const url = new URL(window.location.href);\n    const params = url.searchParams;\n    const resetToken = params.get(\"reset_password_token\");\n\n    if (!resetToken) {\n      return false;\n    }\n\n    if (authState.sid) {\n      authStore.setLoading(true);\n\n      const [error] = await this.client.auth.validateResetPasswordToken(authState.sid, resetToken);\n\n      if (error) {\n        authStore.setFieldError(\"resetPassword\", error);\n        authStore.setStep(\"reset-password\");\n        authStore.setLoading(false);\n        return false;\n      }\n    }\n\n    authStore.setResetToken(resetToken);\n    authStore.setStep(\"reset-password\");\n    authStore.setLoading(false);\n\n    return true;\n  }\n\n  async resetPassword() {\n    if (!authState.resetPassword.token) {\n      throw new Error(\"No reset token available\");\n    }\n\n    if (!authState.resetPassword.newPassword) {\n      authStore.setFieldError(\"resetPassword\", \"password_required\");\n      return;\n    }\n\n    if (\n      authState.resetPassword.passwordConfirmation &&\n      authState.resetPassword.newPassword !== authState.resetPassword.passwordConfirmation\n    ) {\n      authStore.setFieldError(\"resetPassword\", \"passwords_do_not_match\");\n      return;\n    }\n\n    authStore.setLoading(true);\n    authStore.clearErrors();\n\n    const [error, response] = await this.client.auth.resetPassword(\n      authState.sid as string,\n      authState.resetPassword.token,\n      authState.resetPassword.newPassword,\n      authState.resetPassword.passwordConfirmation,\n    );\n\n    if (error) {\n      authStore.setFieldError(\"resetPassword\", error);\n\n      // TODO: add proper password requirements handling --> for now this is fine\n      if (error === \"invalid_password\") {\n        authStore.setFieldError(\"password\", response.error_details?.password.map((p) => t(`errors.password_requirements.${p}`)).join(\"\\n\"));\n      }\n    } else {\n      authStore.setStep(\"email\");\n      authStore.updateResetPassword({\n        step: \"completed\",\n        token: null,\n        newPassword: \"\",\n        passwordConfirmation: \"\",\n      });\n\n      clearUrlParam(\"reset_password_token\");\n      Flash.success.addMessage(\"Password reset successfully\");\n    }\n\n    authStore.setLoading(false);\n  }\n\n  authenticateWithPasskey() {\n    return authenticateWithPasskey(this.client, (response) => this.handleAuthSuccess(response));\n  }\n\n  private extractSignInIdFromQuery() {\n    const sid = clearUrlParam(\"sid\");\n\n    if (sid) {\n      authStore.setSignInId(sid);\n    }\n  }\n\n  private handleMissingFields(response: RequiredFieldsResponse) {\n    authStore.setMissingFields(response.fields);\n    profileState.data = response.fields as ProfileRaw;\n    authStore.setStep(\"missing-fields\");\n    authStore.setLoading(false);\n  }\n\n  private handleAuthSuccess(response: TokenResponse) {\n    authStore.setToken(response.jwt);\n    authStore.setLoading(false);\n    authStore.getRootComponentRef()?.onAuth(response);\n  }\n}\n"]}

package/dist/collection/auth/auth.js

@@ -0,0 +1,121 @@
+import * as Sentry from "@sentry/browser";
+import { authStore, authState } from "./store/auth-store";
+import { jwtDecode } from "jwt-decode";
+import { AuthHelpers } from "./auth-helpers";
+import { waitForConfig } from "../shared/store/unidy-store";
+import { getUnidyClient } from "../api";
+import { t } from "../i18n";
+export class Auth {
+    static instance;
+    helpers;
+    constructor(client) {
+        this.helpers = new AuthHelpers(client);
+        this.helpers.handleSocialAuthRedirect();
+        this.helpers.handleResetPasswordRedirect();
+    }
+    static Errors = {
+        email: {
+            NOT_FOUND: "account_not_found",
+        },
+        magicCode: {
+            RECENTLY_CREATED: "magic_code_recently_created",
+            NOT_VALID: "magic_code_not_valid",
+            EXPIRED: "magic_code_expired",
+            USED: "magic_code_used",
+        },
+        password: {
+            INVALID: "invalid_password",
+            NOT_SET: "password_not_set",
+            RESET_PASSWORD_ALREADY_SENT: "reset_password_already_sent",
+        },
+        general: {
+            ACCOUNT_LOCKED: "account_locked",
+            SIGN_IN_EXPIRED: "sign_in_expired",
+        },
+    };
+    static async getInstance() {
+        if (!Auth.isInitialized()) {
+            await waitForConfig();
+            return Auth.initialize(getUnidyClient());
+        }
+        return Auth.instance;
+    }
+    static initialize(client) {
+        Auth.instance = new Auth(client);
+        if (Auth.instance.isTokenValid(authState.token)) {
+            authStore.setAuthenticated(true);
+        }
+        return Auth.instance;
+    }
+    static isInitialized() {
+        return !!Auth.instance;
+    }
+    isTokenValid(token) {
+        try {
+            let decoded;
+            if (typeof token === "string") {
+                decoded = jwtDecode(token);
+            }
+            else {
+                decoded = token;
+            }
+            if (!decoded)
+                return false;
+            const currentTime = Date.now() / 1000;
+            return decoded.exp > currentTime;
+        }
+        catch (error) {
+            Sentry.captureException(error);
+            return false;
+        }
+    }
+    async isAuthenticated() {
+        const token = await this.getToken();
+        return typeof token === "string";
+    }
+    async getToken() {
+        const currentToken = authState.token;
+        if (currentToken && this.isTokenValid(currentToken)) {
+            return currentToken;
+        }
+        await this.helpers.refreshToken();
+        if (authState.globalErrors.auth || !authState.token) {
+            return this.createAuthError(t("errors.refresh_failed"), "REFRESH_FAILED", true);
+        }
+        return authState.token;
+    }
+    async userData() {
+        const token = await this.getToken();
+        if (typeof token !== "string") {
+            return null;
+        }
+        if (!token) {
+            return null;
+        }
+        try {
+            return jwtDecode(token);
+        }
+        catch (error) {
+            Sentry.captureException(error);
+            return null;
+        }
+    }
+    async logout() {
+        const [error, _] = await this.helpers.logout();
+        if (error) {
+            return this.createAuthError(t("errors.sign_out_failed", { reason: error }), "SIGN_OUT_FAILED", false);
+        }
+        authStore.reset();
+        return true;
+    }
+    getEmail() {
+        return authState.email;
+    }
+    createAuthError(message, code, requiresReauth = false) {
+        const error = new Error(message);
+        error.code = code;
+        error.requiresReauth = requiresReauth;
+        return error;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/collection/auth/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,SAAS,CAAC;AAqB5B,MAAM,OAAO,IAAI;IACP,MAAM,CAAC,QAAQ,CAAO;IAErB,OAAO,CAAc;IAE9B,YAAoB,MAAmB;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,MAAM,GAAG;QACd,KAAK,EAAE;YACL,SAAS,EAAE,mBAAmB;SAC/B;QACD,SAAS,EAAE;YACT,gBAAgB,EAAE,6BAA6B;YAC/C,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,oBAAoB;YAC7B,IAAI,EAAE,iBAAiB;SACxB;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,kBAAkB;YAC3B,2BAA2B,EAAE,6BAA6B;SAC3D;QACD,OAAO,EAAE;YACP,cAAc,EAAE,gBAAgB;YAChC,eAAe,EAAE,iBAAiB;SACnC;KACO,CAAC;IAEX,MAAM,CAAC,KAAK,CAAC,WAAW;QACtB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YAC1B,MAAM,aAAa,EAAE,CAAC;YAEtB,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,MAAmB;QACnC,IAAI,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,aAAa;QAClB,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,YAAY,CAAC,KAAmC;QAC9C,IAAI,CAAC;YACH,IAAI,OAA4B,CAAC;YAEjC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,GAAG,SAAS,CAAe,KAAK,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;YAED,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAE3B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACtC,OAAO,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC;QAErC,IAAI,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;YACpD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAElC,IAAI,SAAS,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,SAAS,CAAC,KAAe,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,SAAS,CAAe,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAE/C,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACxG,CAAC;QAED,SAAS,CAAC,KAAK,EAAE,CAAC;QAElB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ;QACN,OAAO,SAAS,CAAC,KAAK,CAAC;IACzB,CAAC;IAEO,eAAe,CAAC,OAAe,EAAE,IAAuB,EAAE,cAAc,GAAG,KAAK;QACtF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAc,CAAC;QAC9C,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QAClB,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;QAEtC,OAAO,KAAK,CAAC;IACf,CAAC","sourcesContent":["import * as Sentry from \"@sentry/browser\";\nimport type { UnidyClient } from \"../api\";\nimport { authStore, authState } from \"./store/auth-store\";\nimport { jwtDecode } from \"jwt-decode\";\nimport { AuthHelpers } from \"./auth-helpers\";\nimport { waitForConfig } from \"../shared/store/unidy-store\";\nimport { getUnidyClient } from \"../api\";\nimport { t } from \"../i18n\";\n\nexport interface TokenPayload {\n  sub: string; // unidy id\n  sid: string; // sign-in id\n  exp: number;\n  iat: number;\n  iss: string;\n  aud: string;\n  nonce: string;\n  auth_time: number;\n  email: string;\n  email_verified: boolean;\n  [key: string]: unknown;\n}\n\nexport type AuthError = Error & {\n  code: \"TOKEN_EXPIRED\" | \"REFRESH_FAILED\" | \"NO_TOKEN\" | \"INVALID_TOKEN\" | \"SIGN_IN_NOT_FOUND\" | \"SIGN_OUT_FAILED\";\n  requiresReauth: boolean;\n};\n\nexport class Auth {\n  private static instance: Auth;\n\n  readonly helpers: AuthHelpers;\n\n  private constructor(client: UnidyClient) {\n    this.helpers = new AuthHelpers(client);\n    this.helpers.handleSocialAuthRedirect();\n    this.helpers.handleResetPasswordRedirect();\n  }\n\n  static Errors = {\n    email: {\n      NOT_FOUND: \"account_not_found\",\n    },\n    magicCode: {\n      RECENTLY_CREATED: \"magic_code_recently_created\",\n      NOT_VALID: \"magic_code_not_valid\",\n      EXPIRED: \"magic_code_expired\",\n      USED: \"magic_code_used\",\n    },\n    password: {\n      INVALID: \"invalid_password\",\n      NOT_SET: \"password_not_set\",\n      RESET_PASSWORD_ALREADY_SENT: \"reset_password_already_sent\",\n    },\n    general: {\n      ACCOUNT_LOCKED: \"account_locked\",\n      SIGN_IN_EXPIRED: \"sign_in_expired\",\n    },\n  } as const;\n\n  static async getInstance(): Promise<Auth> {\n    if (!Auth.isInitialized()) {\n      await waitForConfig();\n\n      return Auth.initialize(getUnidyClient());\n    }\n\n    return Auth.instance;\n  }\n\n  static initialize(client: UnidyClient): Auth {\n    Auth.instance = new Auth(client);\n\n    if (Auth.instance.isTokenValid(authState.token)) {\n      authStore.setAuthenticated(true);\n    }\n\n    return Auth.instance;\n  }\n\n  static isInitialized(): boolean {\n    return !!Auth.instance;\n  }\n\n  isTokenValid(token: string | TokenPayload | null): boolean {\n    try {\n      let decoded: TokenPayload | null;\n\n      if (typeof token === \"string\") {\n        decoded = jwtDecode<TokenPayload>(token);\n      } else {\n        decoded = token;\n      }\n\n      if (!decoded) return false;\n\n      const currentTime = Date.now() / 1000;\n      return decoded.exp > currentTime;\n    } catch (error) {\n      Sentry.captureException(error);\n      return false;\n    }\n  }\n\n  async isAuthenticated(): Promise<boolean> {\n    const token = await this.getToken();\n    return typeof token === \"string\";\n  }\n\n  async getToken(): Promise<string | AuthError> {\n    const currentToken = authState.token;\n\n    if (currentToken && this.isTokenValid(currentToken)) {\n      return currentToken;\n    }\n\n    await this.helpers.refreshToken();\n\n    if (authState.globalErrors.auth || !authState.token) {\n      return this.createAuthError(t(\"errors.refresh_failed\"), \"REFRESH_FAILED\", true);\n    }\n\n    return authState.token as string;\n  }\n\n  async userData(): Promise<TokenPayload | null> {\n    const token = await this.getToken();\n\n    if (typeof token !== \"string\") {\n      return null;\n    }\n\n    if (!token) {\n      return null;\n    }\n\n    try {\n      return jwtDecode<TokenPayload>(token);\n    } catch (error) {\n      Sentry.captureException(error);\n      return null;\n    }\n  }\n\n  async logout(): Promise<boolean | AuthError> {\n    const [error, _] = await this.helpers.logout();\n\n    if (error) {\n      return this.createAuthError(t(\"errors.sign_out_failed\", { reason: error }), \"SIGN_OUT_FAILED\", false);\n    }\n\n    authStore.reset();\n\n    return true;\n  }\n\n  getEmail(): string | null {\n    return authState.email;\n  }\n\n  private createAuthError(message: string, code: AuthError[\"code\"], requiresReauth = false): AuthError {\n    const error = new Error(message) as AuthError;\n    error.code = code;\n    error.requiresReauth = requiresReauth;\n\n    return error;\n  }\n}\n"]}

package/dist/collection/auth/components/helpers.js

@@ -0,0 +1,5 @@
+export function getParentSigninStep(element) {
+    const signinStep = element.closest("u-signin-step");
+    return signinStep;
+}
+//# sourceMappingURL=helpers.js.map

package/dist/collection/auth/components/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/auth/components/helpers.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,mBAAmB,CAAC,OAAoB;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAA2B,CAAC;IAC9E,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["export function getParentSigninStep(element: HTMLElement): HTMLUSigninStepElement | null {\n  const signinStep = element.closest(\"u-signin-step\") as HTMLUSigninStepElement;\n  return signinStep;\n}\n"]}

package/dist/collection/auth/components/logout-button/logout-button.js

@@ -0,0 +1,85 @@
+import { h } from "@stencil/core";
+import { Auth } from "../../auth";
+import { t } from "../../../i18n";
+export class LogoutButton {
+    componentClassName = "";
+    reloadOnSuccess = true;
+    logout;
+    handleLogout = async () => {
+        const authInstance = await Auth.getInstance();
+        const result = await authInstance.logout();
+        if (result === true) {
+            this.logout.emit();
+            if (this.reloadOnSuccess) {
+                window.location.reload();
+            }
+        }
+    };
+    render() {
+        return (h("button", { key: '88a2362402a6194c9dc685adbae55a9ac601e7d5', type: "button", class: this.componentClassName, onClick: this.handleLogout, "aria-live": "polite" }, t("buttons.logout")));
+    }
+    static get is() { return "u-logout-button"; }
+    static get properties() {
+        return {
+            "componentClassName": {
+                "type": "string",
+                "mutable": false,
+                "complexType": {
+                    "original": "string",
+                    "resolved": "string",
+                    "references": {}
+                },
+                "required": false,
+                "optional": false,
+                "docs": {
+                    "tags": [],
+                    "text": ""
+                },
+                "getter": false,
+                "setter": false,
+                "reflect": false,
+                "attribute": "class-name",
+                "defaultValue": "\"\""
+            },
+            "reloadOnSuccess": {
+                "type": "boolean",
+                "mutable": false,
+                "complexType": {
+                    "original": "boolean",
+                    "resolved": "boolean",
+                    "references": {}
+                },
+                "required": false,
+                "optional": false,
+                "docs": {
+                    "tags": [],
+                    "text": ""
+                },
+                "getter": false,
+                "setter": false,
+                "reflect": false,
+                "attribute": "reload-on-success",
+                "defaultValue": "true"
+            }
+        };
+    }
+    static get events() {
+        return [{
+                "method": "logout",
+                "name": "logout",
+                "bubbles": true,
+                "cancelable": true,
+                "composed": true,
+                "docs": {
+                    "tags": [],
+                    "text": ""
+                },
+                "complexType": {
+                    "original": "void",
+                    "resolved": "void",
+                    "references": {}
+                }
+            }];
+    }
+}
+//# sourceMappingURL=logout-button.js.map

package/dist/collection/auth/components/logout-button/logout-button.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout-button.js","sourceRoot":"","sources":["../../../../src/auth/components/logout-button/logout-button.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAqB,KAAK,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAMlC,MAAM,OAAO,YAAY;IACY,kBAAkB,GAAG,EAAE,CAAC;IACnD,eAAe,GAAG,IAAI,CAAC;IAEtB,MAAM,CAAsB;IAE7B,YAAY,GAAG,KAAK,IAAI,EAAE;QAChC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAE9C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,CAAC;QAE3C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAEnB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM;QACJ,OAAO,CACL,+DAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,eAAY,QAAQ,IACjG,CAAC,CAAC,gBAAgB,CAAC,CACb,CACV,CAAC;IACJ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CACF","sourcesContent":["import { Component, h, Prop, type EventEmitter, Event } from \"@stencil/core\";\nimport { Auth } from \"../../auth\";\nimport { t } from \"../../../i18n\";\n\n@Component({\n  tag: \"u-logout-button\",\n  shadow: false,\n})\nexport class LogoutButton {\n  @Prop({ attribute: \"class-name\" }) componentClassName = \"\";\n  @Prop() reloadOnSuccess = true;\n\n  @Event() logout!: EventEmitter<void>;\n\n  private handleLogout = async () => {\n    const authInstance = await Auth.getInstance();\n\n    const result = await authInstance.logout();\n\n    if (result === true) {\n      this.logout.emit();\n\n      if (this.reloadOnSuccess) {\n        window.location.reload();\n      }\n    }\n  };\n\n  render() {\n    return (\n      <button type=\"button\" class={this.componentClassName} onClick={this.handleLogout} aria-live=\"polite\">\n        {t(\"buttons.logout\")}\n      </button>\n    );\n  }\n}\n"]}

package/dist/collection/auth/components/magic-code-field/magic-code-field.css

@@ -0,0 +1 @@
+/*! tailwindcss v4.1.17 | MIT License | https://tailwindcss.com */@layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,::backdrop,:after,:before{--tw-border-style:solid;--tw-duration:initial;--tw-shadow:0 0 #0000;--tw-shadow-color:initial;--tw-shadow-alpha:100%;--tw-inset-shadow:0 0 #0000;--tw-inset-shadow-color:initial;--tw-inset-shadow-alpha:100%;--tw-ring-color:initial;--tw-ring-shadow:0 0 #0000;--tw-inset-ring-color:initial;--tw-inset-ring-shadow:0 0 #0000;--tw-ring-inset:initial;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-offset-shadow:0 0 #0000}}}@layer theme{:host,:root{--u-font-sans:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--u-font-mono:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--u-color-slate-200:oklch(92.9% .013 255.508);--u-spacing:.25rem;--u-text-lg:1.125rem;--u-text-lg--line-height:1.55556;--u-radius-lg:.5rem;--u-default-transition-duration:.15s;--u-default-transition-timing-function:cubic-bezier(.4,0,.2,1);--u-default-font-family:var(--u-font-sans);--u-default-mono-font-family:var(--u-font-mono);--font-sans:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-mono:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono)}}@layer base{*,::backdrop,:after,:before{border:0 solid;box-sizing:border-box;margin:0;padding:0}::file-selector-button{appearance:button;background-color:#0000;border:0 solid;border-radius:0;box-sizing:border-box;color:inherit;font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;margin:0;margin-inline-end:4px;opacity:1;padding:0}:host,html{font-family:var(--u-default-font-family,ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji");font-feature-settings:var(--u-default-font-feature-settings,normal);font-variation-settings:var(--u-default-font-variation-settings,normal);-webkit-text-size-adjust:100%;font-family:var(--default-font-family,ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);line-height:1.5;tab-size:4;-webkit-tap-highlight-color:transparent}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:var(--u-default-mono-font-family,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace);font-family:var(--default-mono-font-family,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace);font-feature-settings:var(--u-default-mono-font-feature-settings,normal);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-size:1em;font-variation-settings:var(--u-default-mono-font-variation-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal)}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-collapse:collapse;border-color:inherit;text-indent:0}:-moz-focusring{outline:auto}progress{vertical-align:baseline}summary{display:list-item}menu,ol,ul{list-style:none}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{height:auto;max-width:100%}button,input,optgroup,select,textarea{background-color:#0000;border-radius:0;color:inherit;font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;opacity:1}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab,red,red)){::placeholder{color:color-mix(in oklab,currentcolor 50%,transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-date-and-time-value{min-height:1lh;text-align:inherit}::-webkit-datetime-edit{display:inline-flex;padding-block:0}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-datetime-edit-month-field,::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field,::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-meridiem-field,::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}}@layer components;@layer utilities{.u\:flex{display:flex}.u\:h-\[50px\]{height:50px}.u\:w-\[50px\]{width:50px}.u\:w-full{width:100%}.u\:justify-center{justify-content:center}.u\:gap-0\.5{gap:calc(var(--u-spacing)*.5)}.u\:rounded-lg{border-radius:var(--u-radius-lg)}.u\:border-2{border-style:var(--tw-border-style);border-width:2px}.u\:border-solid{--tw-border-style:solid;border-style:solid}.u\:border-slate-200{border-color:var(--u-color-slate-200)}.u\:text-center{text-align:center}.u\:text-lg{font-size:var(--u-text-lg);line-height:var(--tw-leading,var(--u-text-lg--line-height))}.u\:transition-colors{transition-duration:var(--tw-duration,var(--u-default-transition-duration));transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to;transition-timing-function:var(--tw-ease,var(--u-default-transition-timing-function))}.u\:duration-200{--tw-duration:.2s;transition-duration:.2s}.u\:outline-none{--tw-outline-style:none;outline-style:none}.fixed{position:fixed}.shadow{--tw-shadow:0 1px 3px 0 var(--tw-shadow-color,#0000001a),0 1px 2px -1px var(--tw-shadow-color,#0000001a);box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-duration{syntax:"*";inherits:false} /*! tailwindcss v4.1.17 | MIT License | https://tailwindcss.com */@layer properties{}@layer base{}@layer components;@layer utilities{}@property --tw-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-shadow-color{syntax:"*";inherits:false}@property --tw-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-inset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-shadow-color{syntax:"*";inherits:false}@property --tw-inset-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-ring-color{syntax:"*";inherits:false}@property --tw-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-ring-color{syntax:"*";inherits:false}@property --tw-inset-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-ring-inset{syntax:"*";inherits:false}@property --tw-ring-offset-width{syntax:"<length>";inherits:false;initial-value:0}@property --tw-ring-offset-color{syntax:"*";inherits:false;initial-value:#fff}@property --tw-ring-offset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}