@unidy.io/sdk 1.1.8 → 1.1.9

package/dist/components/unidy-store.js

@@ -0,0 +1,37 @@
+import { c as createStore } from './index3.js';
+
+const initialState = {
+    mode: "production",
+    apiKey: "",
+    baseUrl: "",
+    locale: "en",
+    isConfigured: false,
+    backendConnected: true,
+};
+const store = createStore(initialState);
+const unidyState = store.state;
+const onChange = store.onChange;
+const CONFIG_TIMEOUT_MS = 1000;
+function waitForConfig() {
+    if (unidyState.isConfigured) {
+        return Promise.resolve();
+    }
+    return new Promise((resolve, reject) => {
+        const timeout = setTimeout(() => {
+            unsubscribe();
+            reject(new Error(`Unidy SDK: <u-config> not found or not loaded within ${CONFIG_TIMEOUT_MS}ms`));
+        }, CONFIG_TIMEOUT_MS);
+        const unsubscribe = onChange("isConfigured", (value) => {
+            if (value) {
+                clearTimeout(timeout);
+                unsubscribe();
+                resolve();
+            }
+        });
+    });
+}
+
+export { onChange as o, unidyState as u, waitForConfig as w };
+//# sourceMappingURL=unidy-store.js.map
+
+//# sourceMappingURL=unidy-store.js.map

package/dist/components/unidy-store.js.map

@@ -0,0 +1 @@
+{"file":"unidy-store.js","mappings":";;AAYA,MAAM,YAAY,GAAe;AAC/B,IAAA,IAAI,EAAE,YAAY;AAClB,IAAA,MAAM,EAAE,EAAE;AACV,IAAA,OAAO,EAAE,EAAE;AACX,IAAA,MAAM,EAAE,IAAI;AAEZ,IAAA,YAAY,EAAE,KAAK;AACnB,IAAA,gBAAgB,EAAE,IAAI;CACvB;AAED,MAAM,KAAK,GAAG,WAAW,CAAa,YAAY,CAAC;AAEtC,MAAA,UAAU,GAAG,KAAK,CAAC;AAEnB,MAAA,QAAQ,GAA4F,KAAK,CAAC;AAEvH,MAAM,iBAAiB,GAAG,IAAI;SAEd,aAAa,GAAA;AAC3B,IAAA,IAAI,UAAU,CAAC,YAAY,EAAE;AAC3B,QAAA,OAAO,OAAO,CAAC,OAAO,EAAE;;IAG1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;AACrC,QAAA,MAAM,OAAO,GAAG,UAAU,CAAC,MAAK;AAC9B,YAAA,WAAW,EAAE;YACb,MAAM,CAAC,IAAI,KAAK,CAAC,wDAAwD,iBAAiB,CAAA,EAAA,CAAI,CAAC,CAAC;SACjG,EAAE,iBAAiB,CAAC;QAErB,MAAM,WAAW,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC,KAAK,KAAI;YACrD,IAAI,KAAK,EAAE;gBACT,YAAY,CAAC,OAAO,CAAC;AACrB,gBAAA,WAAW,EAAE;AACb,gBAAA,OAAO,EAAE;;AAEb,SAAC,CAAC;AACJ,KAAC,CAAC;AACJ;;;;","names":[],"sources":["src/shared/store/unidy-store.ts"],"sourcesContent":["import { createStore } from \"@stencil/store\";\n\nexport interface UnidyState {\n  mode: \"production\" | \"development\";\n  apiKey: string;\n  baseUrl: string;\n  locale: string;\n\n  isConfigured: boolean;\n  backendConnected: boolean;\n}\n\nconst initialState: UnidyState = {\n  mode: \"production\",\n  apiKey: \"\",\n  baseUrl: \"\",\n  locale: \"en\",\n\n  isConfigured: false,\n  backendConnected: true,\n};\n\nconst store = createStore<UnidyState>(initialState);\n\nexport const unidyState = store.state;\nexport const reset = store.reset;\nexport const onChange: <K extends keyof UnidyState>(prop: K, cb: (value: UnidyState[K]) => void) => () => void = store.onChange;\n\nconst CONFIG_TIMEOUT_MS = 1000;\n\nexport function waitForConfig(): Promise<void> {\n  if (unidyState.isConfigured) {\n    return Promise.resolve();\n  }\n\n  return new Promise((resolve, reject) => {\n    const timeout = setTimeout(() => {\n      unsubscribe();\n      reject(new Error(`Unidy SDK: <u-config> not found or not loaded within ${CONFIG_TIMEOUT_MS}ms`));\n    }, CONFIG_TIMEOUT_MS);\n\n    const unsubscribe = onChange(\"isConfigured\", (value) => {\n      if (value) {\n        clearTimeout(timeout);\n        unsubscribe();\n        resolve();\n      }\n    });\n  });\n}\n"],"version":3}

package/dist/esm/app-globals-CPU9ZcqZ.js

@@ -0,0 +1,8 @@
+import { a as appGlobalScript } from './index-Ci3aTmzp.js';
+
+const globalScripts = appGlobalScript;
+
+export { globalScripts as g };
+//# sourceMappingURL=app-globals-CPU9ZcqZ.js.map
+
+//# sourceMappingURL=app-globals-CPU9ZcqZ.js.map

package/dist/esm/app-globals-CPU9ZcqZ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-globals-CPU9ZcqZ.js","sources":["@stencil/core/internal/app-globals"],"sourcesContent":["import appGlobalScript from '/Users/fran/work/unidy-sdk/packages/sdk/src/globalScript.ts';\nexport const globalScripts = appGlobalScript;\nexport const globalStyles = \"\";\n"],"names":[],"mappings":";;AACY,MAAC,aAAa,GAAG;;;;"}

package/dist/esm/auth-B0RIcDM-.js

@@ -0,0 +1,580 @@
+import { g as getUnidyClient } from './index-DSDkaHWI.js';
+import { t } from './i18n-CLdWzy5J.js';
+import { w as waitForConfig } from './unidy-store-BldTAtO0.js';
+import { a as authStore, s as state } from './auth-store-BGMYm_jK.js';
+import { e as createLogger, d as captureException } from './index-Ci3aTmzp.js';
+import { s as state$1 } from './profile-store-RmZB2PTc.js';
+import { c as clearUrlParam } from './component-utils-D1lzXl_Z.js';
+import { F as Flash } from './flash-store-CEvWSG0c.js';
+
+class InvalidTokenError extends Error {
+}
+InvalidTokenError.prototype.name = "InvalidTokenError";
+function b64DecodeUnicode(str) {
+    return decodeURIComponent(atob(str).replace(/(.)/g, (m, p) => {
+        let code = p.charCodeAt(0).toString(16).toUpperCase();
+        if (code.length < 2) {
+            code = "0" + code;
+        }
+        return "%" + code;
+    }));
+}
+function base64UrlDecode(str) {
+    let output = str.replace(/-/g, "+").replace(/_/g, "/");
+    switch (output.length % 4) {
+        case 0:
+            break;
+        case 2:
+            output += "==";
+            break;
+        case 3:
+            output += "=";
+            break;
+        default:
+            throw new Error("base64 string is not of the correct length");
+    }
+    try {
+        return b64DecodeUnicode(output);
+    }
+    catch (err) {
+        return atob(output);
+    }
+}
+function jwtDecode(token, options) {
+    if (typeof token !== "string") {
+        throw new InvalidTokenError("Invalid token specified: must be a string");
+    }
+    options || (options = {});
+    const pos = options.header === true ? 0 : 1;
+    const part = token.split(".")[pos];
+    if (typeof part !== "string") {
+        throw new InvalidTokenError(`Invalid token specified: missing part #${pos + 1}`);
+    }
+    let decoded;
+    try {
+        decoded = base64UrlDecode(part);
+    }
+    catch (e) {
+        throw new InvalidTokenError(`Invalid token specified: invalid base64 for part #${pos + 1} (${e.message})`);
+    }
+    try {
+        return JSON.parse(decoded);
+    }
+    catch (e) {
+        throw new InvalidTokenError(`Invalid token specified: invalid json for part #${pos + 1} (${e.message})`);
+    }
+}
+
+const logger = createLogger("PasskeyAuth");
+const PASSKEY_ERRORS = {
+    NotSupportedError: "passkey_not_supported",
+    NotAllowedError: "passkey_cancelled",
+    SecurityError: "passkey_security_error",
+    InvalidStateError: "passkey_invalid_state",
+};
+function decodeBase64Url(base64url) {
+    const base64 = base64url.replace(/-/g, "+").replace(/_/g, "/");
+    const padded = base64 + "=".repeat((4 - (base64.length % 4)) % 4);
+    return Uint8Array.from(atob(padded), (c) => c.charCodeAt(0));
+}
+function buildPublicKeyOptions(options) {
+    return {
+        challenge: Uint8Array.from(atob(options.challenge), (c) => c.charCodeAt(0)),
+        timeout: options.timeout || 60000,
+        rpId: options.rpId,
+        userVerification: options.userVerification || "required",
+        allowCredentials: options.allowCredentials?.map((cred) => ({
+            ...cred,
+            id: decodeBase64Url(cred.id),
+        })),
+    };
+}
+function formatCredentialForServer(credential) {
+    const response = credential.response;
+    return {
+        id: credential.id,
+        rawId: btoa(String.fromCharCode(...new Uint8Array(credential.rawId))),
+        response: {
+            authenticatorData: btoa(String.fromCharCode(...new Uint8Array(response.authenticatorData))),
+            clientDataJSON: btoa(String.fromCharCode(...new Uint8Array(response.clientDataJSON))),
+            signature: btoa(String.fromCharCode(...new Uint8Array(response.signature))),
+        },
+        type: credential.type,
+    };
+}
+function extractAndSetSignInId(tokenResponse) {
+    if (tokenResponse.sid) {
+        authStore.setSignInId(tokenResponse.sid);
+        return;
+    }
+    // Fallback: extract sid from JWT token payload
+    try {
+        const decoded = jwtDecode(tokenResponse.jwt);
+        if (decoded.sid) {
+            authStore.setSignInId(decoded.sid);
+        }
+    }
+    catch {
+        // Failed to decode JWT token to extract sid, continue without it
+    }
+}
+function handlePasskeyError(error) {
+    logger.error("Passkey error:", error);
+    let errorMessage = "passkey_error";
+    if (error instanceof DOMException) {
+        errorMessage = PASSKEY_ERRORS[error.name] || "passkey_error";
+    }
+    authStore.setFieldError("passkey", errorMessage);
+    authStore.setLoading(false);
+}
+async function authenticateWithPasskey(client, onSuccess) {
+    authStore.setLoading(true);
+    authStore.clearErrors();
+    if (!window.PublicKeyCredential) {
+        authStore.setFieldError("passkey", "passkey_not_supported");
+        authStore.setLoading(false);
+        return;
+    }
+    try {
+        const [optionsError, options] = await client.auth.getPasskeyOptions(state.sid || undefined);
+        if (optionsError || !options) {
+            authStore.setFieldError("passkey", optionsError || "bad_request");
+            authStore.setLoading(false);
+            return;
+        }
+        const publicKeyOptions = buildPublicKeyOptions(options);
+        const credential = (await navigator.credentials.get({
+            publicKey: publicKeyOptions,
+        }));
+        if (!credential) {
+            authStore.setFieldError("passkey", "passkey_cancelled");
+            authStore.setLoading(false);
+            return;
+        }
+        const formattedCredential = formatCredentialForServer(credential);
+        const [verifyError, tkResponse] = await client.auth.authenticateWithPasskey(formattedCredential);
+        const tokenResponse = tkResponse;
+        if (verifyError || !tokenResponse) {
+            authStore.setGlobalError("auth", verifyError || "authentication_failed");
+            authStore.setLoading(false);
+            return;
+        }
+        authStore.setToken(tokenResponse.jwt);
+        extractAndSetSignInId(tokenResponse);
+        onSuccess(tokenResponse);
+    }
+    catch (error) {
+        handlePasskeyError(error);
+    }
+}
+
+class AuthHelpers {
+    client;
+    logger = createLogger("AuthHelpers");
+    constructor(client) {
+        this.client = client;
+    }
+    async createSignIn(email, password, sendMagicCode) {
+        if (!email) {
+            throw new Error(t("errors.required_field", { field: "Email" }));
+        }
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        const [error, response] = await this.client.auth.createSignIn(email, password, sendMagicCode);
+        if (error) {
+            this.handleAuthError(error, response, password ? "password" : "email");
+            return;
+        }
+        if (password) {
+            const token = jwtDecode(response.jwt);
+            authStore.setSignInId(token.sid);
+            authStore.setToken(response.jwt);
+            authStore.setLoading(false);
+            authStore.getRootComponentRef()?.onAuth(response);
+            return;
+        }
+        if (sendMagicCode) {
+            authStore.setSignInId(response.sid);
+            authStore.setMagicCodeStep("sent");
+            authStore.setStep("magic-code");
+            authStore.setLoading(false);
+            return [error, response];
+        }
+        const signInResponse = response;
+        authStore.setStep("verification");
+        authStore.setEmail(email);
+        authStore.setSignInId(signInResponse.sid);
+        authStore.setLoginOptions(signInResponse.login_options);
+        authStore.setLoading(false);
+    }
+    async authenticateWithPassword(password) {
+        if (!state.sid) {
+            throw new Error(t("errors.no_sign_in_id"));
+        }
+        if (!password) {
+            throw new Error(t("errors.required_field", { field: "Password" }));
+        }
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        const [error, response] = await this.client.auth.authenticateWithPassword(state.sid, password);
+        if (error) {
+            this.handleAuthError(error, response, "password");
+        }
+        else {
+            authStore.setLoading(false);
+            this.handleAuthSuccess(response);
+            return;
+        }
+    }
+    async authenticateWithMagicCode(code) {
+        if (!state.sid) {
+            throw new Error(t("errors.no_sign_in_id"));
+        }
+        if (!code) {
+            throw new Error(t("errors.magic_code_is_missing"));
+        }
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        const [error, response] = await this.client.auth.authenticateWithMagicCode(state.sid, code);
+        if (error) {
+            this.handleAuthError(error, response, "magicCode");
+            return;
+        }
+        this.handleAuthSuccess(response);
+    }
+    authenticateWithPasskey() {
+        return authenticateWithPasskey(this.client, (response) => this.handleAuthSuccess(response));
+    }
+    async logout() {
+        const [error, _] = await this.client.auth.signOut(state.sid);
+        if (error) {
+            authStore.setGlobalError("auth", error);
+        }
+        return [error, _];
+    }
+    async refreshToken() {
+        if (state.step === "missing-fields") {
+            return;
+        }
+        const sid = clearUrlParam("sid");
+        if (sid) {
+            authStore.setSignInId(sid);
+        }
+        if (!state.sid) {
+            this.logger.warn("No sign-in ID in the session");
+            return;
+        }
+        const [error, response] = await this.client.auth.refreshToken(state.sid);
+        if (error) {
+            authStore.reset();
+            authStore.setGlobalError("auth", error);
+        }
+        else {
+            authStore.setToken(response.jwt);
+        }
+    }
+    async sendMagicCode() {
+        if (!state.sid && state.step !== "single-login") {
+            throw new Error(t("errors.no_sign_in_id"));
+        }
+        authStore.setMagicCodeStep("requested");
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        if (state.step === "single-login") {
+            const [error, response] = await this.createSignIn(state.email, undefined, true);
+            authStore.setLoading(false);
+            return [error, response];
+        }
+        const [error, response] = await this.client.auth.sendMagicCode(state.sid);
+        authStore.setLoading(false);
+        authStore.setStep("magic-code");
+        if (!error) {
+            authStore.setMagicCodeStep("sent");
+            return [null, response];
+        }
+        authStore.setFieldError("magicCode", error);
+        if (error === "magic_code_recently_created") {
+            authStore.setMagicCodeStep("sent");
+        }
+        return [error, response];
+    }
+    async sendResetPasswordEmail() {
+        if (!state.sid) {
+            throw new Error(t("errors.no_sign_in_id"));
+        }
+        authStore.setLoading(true);
+        authStore.setResetPasswordStep("requested");
+        const [error, _] = await this.client.auth.sendResetPasswordEmail(state.sid, window.location.href);
+        if (error) {
+            authStore.setFieldError("resetPassword", error);
+        }
+        else {
+            authStore.setResetPasswordStep("sent");
+            authStore.clearErrors();
+        }
+        authStore.setLoading(false);
+    }
+    async resetPassword() {
+        if (!state.resetPassword.token) {
+            throw new Error("No reset token available");
+        }
+        if (!state.resetPassword.newPassword) {
+            authStore.setFieldError("resetPassword", "password_required");
+            return;
+        }
+        if (state.resetPassword.passwordConfirmation &&
+            state.resetPassword.newPassword !== state.resetPassword.passwordConfirmation) {
+            authStore.setFieldError("resetPassword", "passwords_do_not_match");
+            return;
+        }
+        authStore.setLoading(true);
+        authStore.clearErrors();
+        const [error, response] = await this.client.auth.resetPassword(state.sid, state.resetPassword.token, state.resetPassword.newPassword, state.resetPassword.passwordConfirmation);
+        if (error) {
+            authStore.setFieldError("resetPassword", error);
+            // TODO: add proper password requirements handling --> for now this is fine
+            if (error === "invalid_password") {
+                authStore.setFieldError("password", response.error_details?.password.map((p) => t(`errors.password_requirements.${p}`)).join("\n"));
+            }
+        }
+        else {
+            authStore.setStep("email");
+            authStore.updateResetPassword({
+                step: "completed",
+                token: null,
+                newPassword: "",
+                passwordConfirmation: "",
+            });
+            clearUrlParam("reset_password_token");
+            Flash.success.addMessage("Password reset successfully");
+        }
+        authStore.setLoading(false);
+    }
+    async handleResetPasswordRedirect() {
+        const url = new URL(window.location.href);
+        const params = url.searchParams;
+        const resetToken = params.get("reset_password_token");
+        if (!resetToken) {
+            return;
+        }
+        if (state.sid) {
+            authStore.setLoading(true);
+            const [error] = await this.client.auth.validateResetPasswordToken(state.sid, resetToken);
+            if (error) {
+                authStore.setFieldError("resetPassword", error);
+                authStore.setStep("reset-password");
+                authStore.setLoading(false);
+                return;
+            }
+        }
+        authStore.setResetToken(resetToken);
+        authStore.setStep("reset-password");
+        authStore.setLoading(false);
+    }
+    handleSocialAuthRedirect() {
+        const url = new URL(window.location.href);
+        const params = url.searchParams;
+        const error = params.get("error");
+        // Not a social auth redirect (normal page load)
+        if (!error && !params.has("sid")) {
+            return;
+        }
+        // Handle successful social auth redirect
+        if (!error && params.has("sid") && params.has("id_token")) {
+            authStore.setSignInId(clearUrlParam("sid"));
+            const idToken = clearUrlParam("id_token");
+            if (idToken) {
+                authStore.setToken(idToken);
+                this.handleAuthSuccess({ jwt: idToken });
+            }
+            else {
+                this.logger.error("No ID token found in the URL on social auth redirect");
+            }
+            return;
+        }
+        // Handle missing required fields
+        if (error !== "missing_required_fields") {
+            this.logger.error("Social auth redirect error:", error);
+            return;
+        }
+        const fieldsFromUrl = clearUrlParam("fields");
+        const sid = clearUrlParam("sid");
+        clearUrlParam("error");
+        if (!fieldsFromUrl || !sid) {
+            return;
+        }
+        try {
+            const fields = JSON.parse(fieldsFromUrl);
+            authStore.setSignInId(sid);
+            this.handleMissingFields(fields);
+        }
+        catch (e) {
+            this.logger.error("Failed to parse missing fields payload:", e);
+            authStore.setGlobalError("auth", "invalid_required_fields_payload");
+        }
+    }
+    handleAuthError(error, response, fallbackField) {
+        switch (error) {
+            case "account_not_found":
+                authStore.setFieldError("email", error);
+                break;
+            case "missing_required_fields": {
+                const { fields, sid } = response;
+                this.handleMissingFields(fields);
+                if (sid) {
+                    authStore.setSignInId(sid);
+                }
+                break;
+            }
+            default:
+                if (fallbackField === "password") {
+                    authStore.setFieldError("password", error);
+                }
+                else if (fallbackField === "magicCode") {
+                    authStore.setFieldError("magicCode", error);
+                }
+                else if (fallbackField === "email") {
+                    authStore.setFieldError("email", error);
+                }
+                else {
+                    // e.g. "account_locked", "internal_server_error"
+                    authStore.setGlobalError("auth", error);
+                }
+                break;
+        }
+        authStore.setLoading(false);
+    }
+    handleMissingFields(fields) {
+        authStore.setMissingFields(fields);
+        state$1.data = fields;
+        authStore.setStep("missing-fields");
+        authStore.setLoading(false);
+    }
+    handleAuthSuccess(response) {
+        authStore.setToken(response.jwt);
+        authStore.setLoading(false);
+        authStore.getRootComponentRef()?.onAuth(response);
+    }
+}
+
+class Auth {
+    static instance;
+    helpers;
+    constructor(client) {
+        this.helpers = new AuthHelpers(client);
+    }
+    static Errors = {
+        email: {
+            NOT_FOUND: "account_not_found",
+        },
+        magicCode: {
+            RECENTLY_CREATED: "magic_code_recently_created",
+            NOT_VALID: "magic_code_not_valid",
+            EXPIRED: "magic_code_expired",
+            USED: "magic_code_used",
+        },
+        password: {
+            INVALID: "invalid_password",
+            NOT_SET: "password_not_set",
+            RESET_PASSWORD_ALREADY_SENT: "reset_password_already_sent",
+        },
+        general: {
+            ACCOUNT_LOCKED: "account_locked",
+            SIGN_IN_EXPIRED: "sign_in_expired",
+        },
+    };
+    static async getInstance() {
+        if (!Auth.isInitialized()) {
+            await waitForConfig();
+            return Auth.initialize(getUnidyClient());
+        }
+        return Auth.instance;
+    }
+    static async initialize(client) {
+        if (Auth.instance) {
+            return Auth.instance;
+        }
+        Auth.instance = new Auth(client);
+        Auth.instance.helpers.handleSocialAuthRedirect();
+        await Auth.instance.helpers.handleResetPasswordRedirect();
+        if (Auth.instance.isTokenValid(state.token)) {
+            authStore.setAuthenticated(true);
+        }
+        return Auth.instance;
+    }
+    static isInitialized() {
+        return !!Auth.instance;
+    }
+    isTokenValid(token) {
+        try {
+            let decoded;
+            if (typeof token === "string") {
+                decoded = jwtDecode(token);
+            }
+            else {
+                decoded = token;
+            }
+            if (!decoded)
+                return false;
+            const currentTime = Date.now() / 1000;
+            return decoded.exp > currentTime;
+        }
+        catch (error) {
+            captureException(error);
+            return false;
+        }
+    }
+    async isAuthenticated() {
+        const token = await this.getToken();
+        return typeof token === "string";
+    }
+    async getToken() {
+        const currentToken = state.token;
+        if (currentToken && this.isTokenValid(currentToken)) {
+            return currentToken;
+        }
+        await this.helpers.refreshToken();
+        if (state.globalErrors.auth || !state.token) {
+            return this.createAuthError(t("errors.refresh_failed"), "REFRESH_FAILED", true);
+        }
+        return state.token;
+    }
+    async userData() {
+        const token = await this.getToken();
+        if (typeof token !== "string") {
+            return null;
+        }
+        if (!token) {
+            return null;
+        }
+        try {
+            return jwtDecode(token);
+        }
+        catch (error) {
+            captureException(error);
+            return null;
+        }
+    }
+    async logout() {
+        const [error, _] = await this.helpers.logout();
+        if (error) {
+            return this.createAuthError(t("errors.sign_out_failed", { reason: error }), "SIGN_OUT_FAILED", false);
+        }
+        authStore.reset();
+        return true;
+    }
+    getEmail() {
+        return state.email;
+    }
+    createAuthError(message, code, requiresReauth = false) {
+        const error = new Error(message);
+        error.code = code;
+        error.requiresReauth = requiresReauth;
+        return error;
+    }
+}
+
+export { Auth as A };
+//# sourceMappingURL=auth-B0RIcDM-.js.map
+
+//# sourceMappingURL=auth-B0RIcDM-.js.map