@visns-studio/visns-components 6.6.4 → 6.15.0

package/src/components/vault/vaultOtp.js

@@ -0,0 +1,105 @@
+/**
+ * Asking the server for one 2FA code.
+ *
+ * Two places want the current code — the chip that ticks in the list's 2FA
+ * column, and the "copy 2FA" button in the row's actions — and they want the
+ * same request, the same defaults for a malformed response, and the same
+ * wording when it lands on the clipboard. That is all this module is.
+ *
+ * The code is never computed here. The shared secret stays on the server and
+ * the endpoint returns only the current code and how long it has left, so a
+ * compromised bundle leaks one 30-second code rather than a permanent seed.
+ *
+ * `request` is a parameter rather than an import so this file stays free of
+ * React and of the library's `Fetch` module: `node --test` drives it with a
+ * fake, and the two components pass `CustomFetch`.
+ */
+
+/** What a TOTP period is when the server does not say. */
+export const DEFAULT_OTP_PERIOD = 30;
+
+/**
+ * The endpoint's payload, in the shape the components use.
+ *
+ * Defensive about every field: a proxy that returns an HTML error page with a
+ * 200 must leave the chip showing nothing rather than the string "undefined".
+ *
+ * @param {object} result `{code, expires_in, period}`
+ * @returns {{code: string, period: number, expiresIn: number}}
+ */
+export const normaliseOtpResult = (result) => {
+    const code = String(result?.code ?? '');
+    const period = Number(result?.period);
+    const expiresIn = Number(result?.expires_in);
+
+    return {
+        code,
+        period: Number.isFinite(period) && period > 0 ? period : DEFAULT_OTP_PERIOD,
+        expiresIn: Number.isFinite(expiresIn) && expiresIn > 0 ? expiresIn : 0,
+    };
+};
+
+/**
+ * Fetch the current code for one entry.
+ *
+ * Resolves with `{code, period, expiresIn}` and rejects with whatever the
+ * request rejected with — the caller's `catch` is the "already reported by
+ * CustomFetch" path, so nothing here toasts.
+ *
+ * @param {Function} request  CustomFetch, or anything with its signature.
+ * @param {object}   routes   resolved endpoints; only `otp` is read.
+ * @param {number|string} entryId
+ * @returns {Promise<{code: string, period: number, expiresIn: number}>}
+ */
+export const fetchOtp = (request, routes, entryId) =>
+    new Promise((resolve, reject) => {
+        let settled = false;
+
+        const done = (result) => {
+            settled = true;
+            resolve(normaliseOtpResult(result));
+        };
+
+        let pending;
+
+        try {
+            pending = request(routes.otp(entryId), 'GET', {}, done, null);
+        } catch (error) {
+            reject(error);
+            return;
+        }
+
+        Promise.resolve(pending).then(
+            () => {
+                // A request that resolved without ever calling back has failed
+                // in a way the caller must still hear about, or a button sits
+                // spinning for the rest of the session.
+                if (!settled) {
+                    reject(new Error('The 2FA endpoint returned no code.'));
+                }
+            },
+            (error) => {
+                if (!settled) reject(error);
+            }
+        );
+    });
+
+/**
+ * What to tell the user once the code is on their clipboard.
+ *
+ * The remaining seconds are the point of the message: a TOTP copied with two
+ * seconds left is about to stop working, and the user is better off pressing
+ * the button again than pasting it.
+ *
+ * @param {number} expiresIn seconds the code has left, as the server counted.
+ * @returns {string}
+ */
+export const otpCopiedMessage = (expiresIn) => {
+    const seconds = Math.floor(Number(expiresIn));
+
+    if (!Number.isFinite(seconds) || seconds <= 0) return '2FA code copied';
+
+    return `2FA code copied · valid for ${seconds}s`;
+};
+
+export default fetchOtp;

package/src/index.js

@@ -7,7 +7,13 @@ import SortableList from './components/sorting/List';
 /** Utility Components */
 import { confirmDialog } from './components/utils/ConfirmDialog';
 import { showConfirmDialog } from './components/generic/ConfirmationDialog';
-import { useDensity, useAvailableHeight, DENSITY_GRID } from './components/utils/useDensity';
+import {
+    useDensity,
+    useAvailableHeight,
+    DENSITY_GRID,
+    SECONDARY_GRID_HEIGHT,
+} from './components/utils/useDensity';
+import { readBuildEnv, buildEnv } from './components/utils/buildEnv';
 
 /** CRM Components */
 import AsyncSelect from './components/AsyncSelect';
@@ -48,10 +54,138 @@ import Login from './components/auth/Login';
 import Profile from './components/auth/Profile';
 import Reset from './components/auth/Reset';
 import Verify from './components/auth/Verify';
+import TwoFactorAuth from './components/auth/TwoFactorAuth';
+import AuthShell from './components/auth/AuthShell';
+import AuthLoading from './components/auth/AuthLoading';
+import AuthBrandPanel from './components/auth/AuthBrandPanel';
+import ClientAuthFrame from './components/auth/ClientAuthFrame';
+import ClientAuth from './components/auth/ClientAuth';
 import ClientLogin from './components/auth/ClientLogin';
 import ClientOTPVerify from './components/auth/ClientOTPVerify';
+import ImpersonateGate from './components/auth/ImpersonateGate';
+import LogoutScreen from './components/auth/LogoutScreen';
 import ClientPortal from './components/client/ClientPortal';
 import ClientDashboard from './components/client/ClientDashboard';
+import {
+    DEFAULT_AUTH_ENDPOINTS,
+    DEFAULT_CLIENT_PATHS,
+    resolveAuthEndpoints,
+    resolveClientPaths,
+} from './components/auth/authEndpoints';
+import {
+    DEFAULT_CONTACT_HINTS,
+    applyUsernameDomain,
+    classifyContact,
+    clampOtp,
+    contactHint,
+    hasChallengeState,
+    isCompleteOtp,
+    isSuccessBody,
+    maskContact,
+    normaliseAuthError,
+    resendLabelFor,
+    syncCsrfFromResponse,
+    syncCsrfToken,
+    twoFactorSuccessTarget,
+} from './components/auth/authHelpers';
+import {
+    CLIENT_AUTH_PROTOCOLS,
+    DEFAULT_CLIENT_PROTOCOL,
+    resolveClientProtocol,
+    verifyContactFor,
+} from './components/auth/clientAuthProtocols';
+
+/** Call Queue Components */
+import CallQueuePop from './components/callQueue/CallQueuePop';
+import CallQueueSettings from './components/callQueue/CallQueueSettings';
+
+// Vault — the staff password manager. VaultQuickSearch mounts through
+// Navigation's `renderers` slot; VaultManager is the page behind it.
+import OtpChip from './components/vault/OtpChip';
+import VaultAccessLog from './components/vault/VaultAccessLog';
+import VaultConfirmPanel from './components/vault/VaultConfirmPanel';
+import VaultEntryForm from './components/vault/VaultEntryForm';
+import VaultManager from './components/vault/VaultManager';
+import VaultQuickSearch from './components/vault/VaultQuickSearch';
+import PasswordGenerator from './components/vault/PasswordGenerator';
+import QrScanner from './components/vault/QrScanner';
+import useVaultReveal from './components/vault/useVaultReveal';
+// The decoders are exported for a consumer that wants the QR paths somewhere
+// else; `jsqr` itself stays behind the dynamic import inside them, so naming
+// them here still costs a consumer nothing until one is called.
+import {
+    decodeFromBlob,
+    decodeFromSource,
+    decodeImageData,
+} from './components/vault/qrDecode';
+import {
+    DEFAULT_ENDPOINTS as DEFAULT_VAULT_ENDPOINTS,
+    makeVaultEndpoints,
+    resolveVaultEndpoints,
+} from './components/vault/vaultEndpoints';
+import {
+    OTP_DEFAULTS,
+    cleanBase32,
+    describeOtpConfig,
+    formatOtp,
+    generatePassword,
+    hostFromUrl,
+    isValidBase32,
+    matchesShortcut,
+    openableUrl,
+    parseOtpAuthUri,
+    parseTags,
+    scorePassword,
+    secondsUntilBoundary,
+    shortcutLabel,
+} from './components/vault/vaultHelpers';
+
+// Messaging — the SMS inbox. SmsInboxBadge mounts through Navigation's
+// `renderers` slot; SmsInbox is the page behind it, SmsThreadPanel is the
+// conversation on its own for embedding elsewhere.
+import SmsComposeModal from './components/sms/SmsComposeModal';
+import SmsInbox from './components/sms/SmsInbox';
+import SmsInboxBadge from './components/sms/SmsInboxBadge';
+import SmsLineSettings from './components/sms/SmsLineSettings';
+import SmsThreadPanel from './components/sms/SmsThreadPanel';
+import useSmsLive from './components/sms/useSmsLive';
+import {
+    DEFAULT_ENDPOINTS as DEFAULT_SMS_ENDPOINTS,
+    makeSmsEndpoints,
+    resolveSmsEndpoints,
+} from './components/sms/smsEndpoints';
+import {
+    MAX_SEGMENTS as SMS_MAX_SEGMENTS,
+    SMS_LIMITS,
+    STATUS_LABELS as SMS_STATUS_LABELS,
+    describeTransport,
+    fillTemplate,
+    groupMessagesByDay,
+    initialsFor,
+    isHeldTransport,
+    looksLikeNumber,
+    nextPlaceholder,
+    normaliseNumberForDisplay,
+    relativeTime,
+    segmentCount,
+    splitPersonName,
+    threadDisplayName,
+    toE164,
+} from './components/sms/smsHelpers';
+
+// Desktop alerts — the browser Notification API behind three gates (support,
+// permission, the user's own switch). Used by the bell and the SMS badge; the
+// module is exported so a consumer can drive it from anywhere else too.
+import desktopNotifications, {
+    AUTO_CLOSE_MS as DESKTOP_ALERT_AUTO_CLOSE_MS,
+    STORAGE_KEY as DESKTOP_ALERTS_STORAGE_KEY,
+    getPermission as getDesktopPermission,
+    isEnabled as desktopAlertsEnabled,
+    isSupported as desktopAlertsSupported,
+    notify as desktopNotify,
+    requestPermission as requestDesktopPermission,
+    setEnabled as setDesktopAlertsEnabled,
+} from './components/notify/desktopNotifications';
 
 /** CMS Generic Components */
 import CmsDetail from './components/generic/CmsDetail';
@@ -97,19 +231,85 @@ import DataSyncWizard from './components/oauth/DataSyncWizard';
 
 
 export {
+    applyUsernameDomain,
     AsyncSelect,
     AssociationManager,
     AudioPlayer,
+    AuthBrandPanel,
+    AuthLoading,
+    AuthShell,
     AuditLog,
     AuditLogs,
     Autocomplete,
     AutoRefreshControls,
     Breadcrumb,
+    buildEnv,
     BusinessCardOcr,
     Call,
+    CallQueuePop,
+    CallQueueSettings,
+    cleanBase32,
+    decodeFromBlob,
+    decodeFromSource,
+    decodeImageData,
+    DEFAULT_VAULT_ENDPOINTS,
+    describeOtpConfig,
+    formatOtp,
+    generatePassword,
+    hostFromUrl,
+    isValidBase32,
+    makeVaultEndpoints,
+    matchesShortcut,
+    openableUrl,
+    OTP_DEFAULTS,
+    OtpChip,
+    parseOtpAuthUri,
+    parseTags,
+    PasswordGenerator,
+    QrScanner,
+    resolveVaultEndpoints,
+    scorePassword,
+    secondsUntilBoundary,
+    shortcutLabel,
+    useVaultReveal,
+    VaultAccessLog,
+    VaultConfirmPanel,
+    VaultEntryForm,
+    VaultManager,
+    VaultQuickSearch,
+    DEFAULT_SMS_ENDPOINTS,
+    describeTransport,
+    fillTemplate,
+    groupMessagesByDay,
+    initialsFor,
+    isHeldTransport,
+    looksLikeNumber,
+    makeSmsEndpoints,
+    nextPlaceholder,
+    normaliseNumberForDisplay,
+    relativeTime,
+    resolveSmsEndpoints,
+    segmentCount,
+    splitPersonName,
+    SMS_LIMITS,
+    SMS_MAX_SEGMENTS,
+    SMS_STATUS_LABELS,
+    SmsComposeModal,
+    SmsInbox,
+    SmsInboxBadge,
+    SmsLineSettings,
+    SmsThreadPanel,
+    threadDisplayName,
+    toE164,
+    useSmsLive,
     CameraPlacement,
     CellWithTooltip,
+    clampOtp,
+    CLIENT_AUTH_PROTOCOLS,
+    classifyContact,
     ClientAssociationManager,
+    ClientAuth,
+    ClientAuthFrame,
     ClientLogin,
     ClientOTPVerify,
     ClientPortal,
@@ -118,10 +318,15 @@ export {
     CmsIndex,
     CmsSort,
     confirmDialog,
+    contactHint,
     CustomFetch,
     DataGrid,
     DataGridSearch,
     DatePickerPortal,
+    DEFAULT_AUTH_ENDPOINTS,
+    DEFAULT_CLIENT_PATHS,
+    DEFAULT_CLIENT_PROTOCOL,
+    DEFAULT_CONTACT_HINTS,
     DENSITY_GRID,
     Download,
     DropZone,
@@ -144,16 +349,32 @@ export {
     GenericReport,
     GenericSort,
     GroupedReportRenderer,
+    hasChallengeState,
+    ImpersonateGate,
     ImportWizardModal,
+    isCompleteOtp,
+    isSuccessBody,
     Loader,
     Login,
+    LogoutScreen,
+    maskContact,
     MergeEntity,
     MultiSelect,
     MultiCheckbox,
     NativeDateFilterEditor,
     Navigation,
+    normaliseAuthError,
     Notification,
     NotificationList,
+    desktopNotifications,
+    desktopAlertsEnabled,
+    desktopAlertsSupported,
+    desktopNotify,
+    DESKTOP_ALERT_AUTO_CLOSE_MS,
+    DESKTOP_ALERTS_STORAGE_KEY,
+    getDesktopPermission,
+    requestDesktopPermission,
+    setDesktopAlertsEnabled,
     DataSyncWizard,
     OAuthConnectionStatus,
     OAuthIntegrationsPage,
@@ -162,8 +383,13 @@ export {
     OcrTemplateEnhanced,
     Profile,
     ProposalTemplateSectionManager,
+    readBuildEnv,
     ProposalTemplatePreview,
     Reset,
+    resendLabelFor,
+    resolveAuthEndpoints,
+    resolveClientPaths,
+    resolveClientProtocol,
     SectionEditor,
     SectionGroupedReport,
     SectionTypeSelector,
@@ -173,10 +399,16 @@ export {
     SortableList,
     StagePopupModal,
     StandardModal,
+    syncCsrfFromResponse,
+    syncCsrfToken,
     Table,
     TableFilter,
+    TwoFactorAuth,
+    twoFactorSuccessTarget,
     useAvailableHeight,
     useDensity,
+    SECONDARY_GRID_HEIGHT,
     VariableInserter,
+    verifyContactFor,
     Verify,
 };