@vilio/auth-passkey-module 0.0.2

package/dist/schema.d.ts

@@ -0,0 +1,415 @@
+export declare const authenticatorTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "authenticators";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "authenticators";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        name: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "authenticators";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        credentialPublicKey: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "authenticators";
+            dataType: "object buffer";
+            data: Buffer<ArrayBufferLike>;
+            driverParam: Buffer<ArrayBufferLike>;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        counter: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "authenticators";
+            dataType: "number int32";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        credentialDeviceType: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "authenticators";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        credentialBackedUp: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "authenticators";
+            dataType: "boolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        transports: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "authenticators";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        userId: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "authenticators";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "authenticators";
+            dataType: "object date";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+    };
+    dialect: "pg";
+}>;
+export declare const passkeySettingsTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "passkey_settings";
+    schema: undefined;
+    columns: {
+        userId: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "passkey_settings";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        twoFactorEnabled: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "passkey_settings";
+            dataType: "boolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "passkey_settings";
+            dataType: "object date";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+    };
+    dialect: "pg";
+}>;
+export declare const authPasskeySchema: {
+    authenticatorTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
+        name: "authenticators";
+        schema: undefined;
+        columns: {
+            id: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "authenticators";
+                dataType: "string";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: true;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            name: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "authenticators";
+                dataType: "string";
+                data: string;
+                driverParam: string;
+                notNull: false;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            credentialPublicKey: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "authenticators";
+                dataType: "object buffer";
+                data: Buffer<ArrayBufferLike>;
+                driverParam: Buffer<ArrayBufferLike>;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            counter: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "authenticators";
+                dataType: "number int32";
+                data: number;
+                driverParam: string | number;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            credentialDeviceType: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "authenticators";
+                dataType: "string";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            credentialBackedUp: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "authenticators";
+                dataType: "boolean";
+                data: boolean;
+                driverParam: boolean;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            transports: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "authenticators";
+                dataType: "string";
+                data: string;
+                driverParam: string;
+                notNull: false;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            userId: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "authenticators";
+                dataType: "string";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            createdAt: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "authenticators";
+                dataType: "object date";
+                data: Date;
+                driverParam: string;
+                notNull: true;
+                hasDefault: true;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+        };
+        dialect: "pg";
+    }>;
+    passkeySettingsTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
+        name: "passkey_settings";
+        schema: undefined;
+        columns: {
+            userId: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "passkey_settings";
+                dataType: "string";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: true;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            twoFactorEnabled: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "passkey_settings";
+                dataType: "boolean";
+                data: boolean;
+                driverParam: boolean;
+                notNull: true;
+                hasDefault: true;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+            updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+                name: string;
+                tableName: "passkey_settings";
+                dataType: "object date";
+                data: Date;
+                driverParam: string;
+                notNull: false;
+                hasDefault: true;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}>;
+        };
+        dialect: "pg";
+    }>;
+};
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY7B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO/B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAG7B,CAAC"}

package/dist/schema.js

@@ -0,0 +1,28 @@
+import { boolean, bytea, integer, pgTable, text, timestamp, } from "drizzle-orm/pg-core";
+import { userTable } from "@vilio/core/server";
+export const authenticatorTable = pgTable("authenticators", {
+    id: text("id").primaryKey(), // Credential ID (base64url)
+    name: text("name"), // Optional label like "iPhone", "MacBook"
+    credentialPublicKey: bytea("credential_public_key").notNull(),
+    counter: integer("counter").notNull(),
+    credentialDeviceType: text("credential_device_type").notNull(),
+    credentialBackedUp: boolean("credential_backed_up").notNull(),
+    transports: text("transports"), // JSON string array
+    userId: text("user_id")
+        .notNull()
+        .references(() => userTable.id, { onDelete: "cascade" }),
+    createdAt: timestamp("created_at").notNull().defaultNow(),
+});
+export const passkeySettingsTable = pgTable("passkey_settings", {
+    userId: text("user_id")
+        .notNull()
+        .primaryKey()
+        .references(() => userTable.id, { onDelete: "cascade" }),
+    twoFactorEnabled: boolean("two_factor_enabled").notNull().default(false),
+    updatedAt: timestamp("updated_at").defaultNow(),
+});
+export const authPasskeySchema = {
+    authenticatorTable,
+    passkeySettingsTable,
+};
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,KAAK,EACL,OAAO,EACP,OAAO,EACP,IAAI,EACJ,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,EAAE;IAC1D,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,4BAA4B;IACzD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,0CAA0C;IAC9D,mBAAmB,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE;IAC7D,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACrC,oBAAoB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE;IAC9D,kBAAkB,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE;IAC7D,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,oBAAoB;IACpD,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC1D,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAC1D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAC9D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,EAAE;SACZ,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC1D,gBAAgB,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACxE,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,kBAAkB;IAClB,oBAAoB;CACrB,CAAC"}

package/dist/server/passkey.d.ts

@@ -0,0 +1,8 @@
+export declare function getRegistrationOptions(userId: string, userEmail: string): Promise<import("@simplewebauthn/server").PublicKeyCredentialCreationOptionsJSON>;
+export declare function verifyRegistration(userId: string, body: any): Promise<import("@simplewebauthn/server").VerifiedRegistrationResponse>;
+export declare function getLoginOptions(): Promise<import("@simplewebauthn/server").PublicKeyCredentialRequestOptionsJSON>;
+export declare function verifyLogin(body: any): Promise<{
+    verification: import("@simplewebauthn/server").VerifiedAuthenticationResponse;
+    userId: string;
+}>;
+//# sourceMappingURL=passkey.d.ts.map

package/dist/server/passkey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.d.ts","sourceRoot":"","sources":["../../src/server/passkey.ts"],"names":[],"mappings":"AAYA,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,oFAmClB;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,0EAyCjE;AAED,wBAAsB,eAAe,oFAgBpC;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,GAAG;;;GAoD1C"}

package/dist/server/passkey.js

@@ -0,0 +1,126 @@
+import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse, } from "@simplewebauthn/server";
+import { db } from "@vilio/core/server";
+import { eq } from "drizzle-orm";
+import { cookies } from "next/headers";
+import { authenticatorTable } from "../schema";
+import { getPasskeyConfig } from "../actions/settings";
+export async function getRegistrationOptions(userId, userEmail) {
+    const config = await getPasskeyConfig();
+    const userAuthenticators = await db
+        .select()
+        .from(authenticatorTable)
+        .where(eq(authenticatorTable.userId, userId));
+    const options = await generateRegistrationOptions({
+        rpName: config.rpName,
+        rpID: config.rpId,
+        userID: new TextEncoder().encode(userId),
+        userName: userEmail,
+        attestationType: "none",
+        excludeCredentials: userAuthenticators.map((auth) => ({
+            id: auth.id,
+            type: "public-key",
+            transports: auth.transports ? JSON.parse(auth.transports) : undefined,
+        })),
+        authenticatorSelection: {
+            residentKey: "preferred",
+            userVerification: "preferred",
+            authenticatorAttachment: "platform",
+        },
+    });
+    const cookieStore = await cookies();
+    cookieStore.set("passkey_registration_challenge", options.challenge, {
+        httpOnly: true,
+        secure: process.env.NODE_ENV === "production",
+        sameSite: "lax",
+        maxAge: 60 * 5, // 5 minutes
+    });
+    return options;
+}
+export async function verifyRegistration(userId, body) {
+    const config = await getPasskeyConfig();
+    const cookieStore = await cookies();
+    const expectedChallenge = cookieStore.get("passkey_registration_challenge")?.value;
+    if (!expectedChallenge) {
+        throw new Error("Registration challenge not found");
+    }
+    const verification = await verifyRegistrationResponse({
+        response: body,
+        expectedChallenge,
+        expectedOrigin: config.origin,
+        expectedRPID: config.rpId,
+        requireUserVerification: false,
+    });
+    console.log("[PasskeyAuth] Verification result:", JSON.stringify(verification, null, 2));
+    if (verification.verified && verification.registrationInfo) {
+        const { credential, credentialDeviceType, credentialBackedUp } = verification.registrationInfo;
+        const { id, publicKey, counter } = credential;
+        await db.insert(authenticatorTable).values({
+            id: id,
+            credentialPublicKey: Buffer.from(publicKey),
+            counter,
+            credentialDeviceType,
+            credentialBackedUp,
+            userId,
+            transports: JSON.stringify(body.response.transports || []),
+        });
+    }
+    return verification;
+}
+export async function getLoginOptions() {
+    const config = await getPasskeyConfig();
+    const options = await generateAuthenticationOptions({
+        rpID: config.rpId,
+        userVerification: "preferred",
+    });
+    const cookieStore = await cookies();
+    cookieStore.set("passkey_login_challenge", options.challenge, {
+        httpOnly: true,
+        secure: process.env.NODE_ENV === "production",
+        sameSite: "lax",
+        maxAge: 60 * 5,
+    });
+    return options;
+}
+export async function verifyLogin(body) {
+    const config = await getPasskeyConfig();
+    const cookieStore = await cookies();
+    const expectedChallenge = cookieStore.get("passkey_login_challenge")?.value;
+    if (!expectedChallenge) {
+        throw new Error("Login challenge not found");
+    }
+    const [authenticator] = await db
+        .select()
+        .from(authenticatorTable)
+        .where(eq(authenticatorTable.id, body.id));
+    if (!authenticator) {
+        throw new Error("Authenticator not found");
+    }
+    console.log("[PasskeyAuth] Authenticator from DB:", {
+        id: authenticator.id,
+        counter: authenticator.counter,
+        publicKeyType: typeof authenticator.credentialPublicKey,
+        isBuffer: Buffer.isBuffer(authenticator.credentialPublicKey),
+    });
+    const verification = await verifyAuthenticationResponse({
+        response: body,
+        expectedChallenge,
+        expectedOrigin: config.origin,
+        expectedRPID: config.rpId,
+        requireUserVerification: false,
+        credential: {
+            id: authenticator.id,
+            publicKey: authenticator.credentialPublicKey,
+            counter: authenticator.counter,
+        },
+    });
+    console.log("[PasskeyAuth] Login Verification result:", JSON.stringify(verification, null, 2));
+    if (verification.verified && verification.authenticationInfo) {
+        const { newCounter } = verification.authenticationInfo;
+        await db
+            .update(authenticatorTable)
+            .set({ counter: newCounter })
+            .where(eq(authenticatorTable.id, authenticator.id));
+    }
+    return { verification, userId: authenticator.userId };
+}
+//# sourceMappingURL=passkey.js.map

package/dist/server/passkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.js","sourceRoot":"","sources":["../../src/server/passkey.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACxC,MAAM,kBAAkB,GAAG,MAAM,EAAE;SAChC,MAAM,EAAE;SACR,IAAI,CAAC,kBAAkB,CAAC;SACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACxC,QAAQ,EAAE,SAAS;QACnB,eAAe,EAAE,MAAM;QACvB,kBAAkB,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpD,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;SACtE,CAAC,CAAC;QACH,sBAAsB,EAAE;YACtB,WAAW,EAAE,WAAW;YACxB,gBAAgB,EAAE,WAAW;YAC7B,uBAAuB,EAAE,UAAU;SACpC;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,OAAO,EAAE,CAAC;IACpC,WAAW,CAAC,GAAG,CAAC,gCAAgC,EAAE,OAAO,CAAC,SAAS,EAAE;QACnE,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAC7C,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,YAAY;KAC7B,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAS;IAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,OAAO,EAAE,CAAC;IACpC,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,CACvC,gCAAgC,CACjC,EAAE,KAAK,CAAC;IAET,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC;QACpD,QAAQ,EAAE,IAAI;QACd,iBAAiB;QACjB,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,YAAY,EAAE,MAAM,CAAC,IAAI;QACzB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CACT,oCAAoC,EACpC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CACtC,CAAC;IAEF,IAAI,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC3D,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,GAC5D,YAAY,CAAC,gBAAgB,CAAC;QAChC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;QAE9C,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;YACzC,EAAE,EAAE,EAAE;YACN,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3C,OAAO;YACP,oBAAoB;YACpB,kBAAkB;YAClB,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,6BAA6B,CAAC;QAClD,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,gBAAgB,EAAE,WAAW;KAC9B,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,OAAO,EAAE,CAAC;IACpC,WAAW,CAAC,GAAG,CAAC,yBAAyB,EAAE,OAAO,CAAC,SAAS,EAAE;QAC5D,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAC7C,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,EAAE,GAAG,CAAC;KACf,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAS;IACzC,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,OAAO,EAAE,CAAC;IACpC,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC;IAE5E,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,EAAE;SAC7B,MAAM,EAAE;SACR,IAAI,CAAC,kBAAkB,CAAC;SACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE;QAClD,EAAE,EAAE,aAAa,CAAC,EAAE;QACpB,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,aAAa,EAAE,OAAO,aAAa,CAAC,mBAAmB;QACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,mBAAmB,CAAC;KAC7D,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,4BAA4B,CAAC;QACtD,QAAQ,EAAE,IAAI;QACd,iBAAiB;QACjB,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,YAAY,EAAE,MAAM,CAAC,IAAI;QACzB,uBAAuB,EAAE,KAAK;QAC9B,UAAU,EAAE;YACV,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,SAAS,EAAE,aAAa,CAAC,mBAA8C;YACvE,OAAO,EAAE,aAAa,CAAC,OAAO;SAC/B;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CACT,0CAA0C,EAC1C,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CACtC,CAAC;IAEF,IAAI,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,kBAAkB,EAAE,CAAC;QAC7D,MAAM,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,kBAAkB,CAAC;QACvD,MAAM,EAAE;aACL,MAAM,CAAC,kBAAkB,CAAC;aAC1B,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;aAC5B,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC;AACxD,CAAC"}

package/dist/ui/passkey-button.d.ts

@@ -0,0 +1,2 @@
+export declare function PasskeyLoginButton(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=passkey-button.d.ts.map

package/dist/ui/passkey-button.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-button.d.ts","sourceRoot":"","sources":["../../src/ui/passkey-button.tsx"],"names":[],"mappings":"AASA,wBAAgB,kBAAkB,4CA8DjC"}

package/dist/ui/passkey-button.js

@@ -0,0 +1,56 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useTranslation } from "@vilio/intl";
+import { Button } from "@vilio/ui";
+import { Fingerprint } from "lucide-react";
+import { startAuthentication } from "@simplewebauthn/browser";
+import { toast } from "sonner";
+import { useState } from "react";
+export function PasskeyLoginButton() {
+    const { t } = useTranslation();
+    const [loading, setLoading] = useState(false);
+    const handleLogin = async () => {
+        setLoading(true);
+        try {
+            // 1. Get options from server
+            const resp = await fetch("/api/auth/passkey/login-options");
+            if (!resp.ok) {
+                const err = await resp.json();
+                throw new Error(err.message || t("Failed to get login options"));
+            }
+            const opts = await resp.json();
+            // 2. Start authentication
+            const asseResp = await startAuthentication(opts);
+            // 3. Verify response on server
+            const verifyResp = await fetch("/api/auth/passkey/login-verify", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify(asseResp),
+            });
+            if (!verifyResp.ok) {
+                const err = await verifyResp.json();
+                throw new Error(err.message || t("Verification failed"));
+            }
+            const verification = await verifyResp.json();
+            if (verification.verified) {
+                toast.success(t("Logged in successfully!"));
+                setLoading(false);
+                setTimeout(() => {
+                    window.location.href = "/";
+                }, 1500);
+            }
+            else {
+                toast.error(t("Login failed."));
+            }
+        }
+        catch (err) {
+            console.error(err);
+            toast.error(err.message || t("Login failed."));
+        }
+        finally {
+            setLoading(false);
+        }
+    };
+    return (_jsxs(Button, { type: "button", variant: "outline", className: "w-full gap-2", onClick: handleLogin, children: [_jsx(Fingerprint, { className: "size-4" }), t("Continue with Passkey")] }));
+}
+//# sourceMappingURL=passkey-button.js.map

package/dist/ui/passkey-button.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-button.js","sourceRoot":"","sources":["../../src/ui/passkey-button.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,CAAC,EAAE,GAAG,cAAc,EAAE,CAAC;IAE/B,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9C,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC7B,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,6BAA6B;YAC7B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAE/B,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAEjD,+BAA+B;YAC/B,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,gCAAgC,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;YAE7C,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBAE5C,UAAU,CAAC,KAAK,CAAC,CAAC;gBAClB,UAAU,CAAC,GAAG,EAAE;oBACd,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC;gBAC7B,CAAC,EAAE,IAAI,CAAC,CAAC;YACX,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAC,SAAS,EACjB,SAAS,EAAC,cAAc,EACxB,OAAO,EAAE,WAAW,aAEpB,KAAC,WAAW,IAAC,SAAS,EAAC,QAAQ,GAAG,EACjC,CAAC,CAAC,uBAAuB,CAAC,IACpB,CACV,CAAC;AACJ,CAAC"}

package/dist/ui/session-badge.d.ts

@@ -0,0 +1,5 @@
+import { Session } from "@vilio/core";
+export declare function Passkey2FAVerifiedBadge({ session }: {
+    session: Session;
+}): import("react/jsx-runtime").JSX.Element | null;
+//# sourceMappingURL=session-badge.d.ts.map