@zitadel/components 0.0.0 → 0.1.0-alpha.2

package/dist/orchestrator/zitadel-login.d.ts

@@ -40,10 +40,28 @@ export declare class ZitadelLogin extends LitElement {
     static styles: import("lit").CSSResult;
     accessor purpose: CreateFlowBodyPurpose;
     /**
-     * SDK project handle returned by `configureZitadel()`. When set, takes
-     * precedence over the global singleton from `getZitadelConfig()`.
+     * SDK project handle returned by `configureZitadel()`. Set from JS (or a
+     * framework binding). When set, takes precedence over both the
+     * `project-id`/`proxy-path`/`url` attributes and the global singleton from
+     * `getZitadelConfig()`.
      */
     accessor project: ZitadelProject | undefined;
+    /**
+     * Project ID, set declaratively in HTML. Lets the component be configured on
+     * a plain page without JS or `configureZitadel()`. Ignored when the `project`
+     * property or a `configureZitadel()` global is set. See {@link projectAttrs}.
+     */
+    accessor projectId: string;
+    /**
+     * Proxy path for API requests (e.g. `/__nextgen`), set declaratively in HTML.
+     * Defaults to `/__nextgen` when omitted, matching `configureZitadel()`.
+     */
+    accessor proxyPath: string;
+    /**
+     * Full URL of the Zitadel auth backend, set declaratively in HTML. Optional —
+     * not needed in client-only setups.
+     */
+    accessor url: string;
     /**
      * URL to navigate to after a successful embedded sign-in. When set, the
      * orchestrator exchanges the terminal `handoff_token` via the generated
@@ -109,10 +127,14 @@ export declare class ZitadelLogin extends LitElement {
      * resolved language is used as the base; entries from the `locales` map (if
      * set) are spread on top so partial overrides work without importing and
      * spreading the full base dictionary.
+     *
+     * Priority: explicit `lang` attr → `navigator.language` (user preference)
+     * → `document.documentElement.lang` (page default) → English fallback.
      */
     private resolveLocale;
     willUpdate(changed: PropertyValues<this>): void;
     updated(changed: PropertyValues<this>): void;
+    private hydrateStepAfterRender;
     render(): import("lit").TemplateResult<1>;
     /**
      * Inject the attribution badge into the rendered template's
@@ -121,6 +143,10 @@ export declare class ZitadelLogin extends LitElement {
      * Figma sign-in frame where the pill sits 24px below the card, both
      * centred on the page). It can't be a sibling of the page-shell because
      * the page-shell already occupies the full viewport height.
+     *
+     * This markup is appended AFTER `renderStep` has sanitised the Liquid
+     * output, so it is not run through DOMPurify. It is orchestrator-owned and
+     * any tenant-supplied values (`custom_link`) are escaped via `escapeHtml`.
      */
     private injectAttribution;
     /**
@@ -131,6 +157,8 @@ export declare class ZitadelLogin extends LitElement {
      * entirely or swap it for a `custom_link` value.
      */
     private renderAttributionHtml;
+    /** Declarative config read from this element's attributes. */
+    private get projectAttrs();
     private startFlow;
     private applyResponse;
     private maybeCompleteFlow;

package/dist/orchestrator/zitadel-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zitadel-login.d.ts","sourceRoot":"","sources":["../../src/orchestrator/zitadel-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAGV,qBAAqB,EAGtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAa,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,KAAK,CAAC;AAKjE,OAAO,mBAAmB,CAAC;AAa3B,OAAO,EAAsB,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAQrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,qBACa,YAAa,SAAQ,UAAU;IAC1C,OAAgB,iBAAiB,EAAE,cAAc,CAG/C;IAOF,OAAgB,MAAM,0BAMpB;IAE0B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAW;IAE9E;;;OAGG;IAC6B,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAC;IAE7E;;;;;;;OAOG;IACwD,QAAQ,CAAC,aAAa,SAAM;IAEvF;;;;;OAKG;IACsD,QAAQ,CAAC,YAAY,SAAM;IAEpF;;;;OAIG;IACH,SAA8C,IAAI,SAAM;IAExD;;;;;;;;;;;OAWG;IAC6B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAE5E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IAEvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuB;IAEpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IAElE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAE7D,OAAO,CAAC,MAAM,CAAuB;IAErC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAAyD;IAE3E,gBAAgB,IAAI,WAAW,GAAG,gBAAgB,CA+B1D;IAED;;;;;;;;;OASG;IACH,UAAmB,YAAY,IAAI,IAAI,CAItC;IAED;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAUZ,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,CAavD;IAEQ,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,CAQpD;IAEQ,MAAM,oCAoBd;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IASzB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;YAkBf,SAAS;IA+BvB,OAAO,CAAC,aAAa;YA0BP,iBAAiB;IAwC/B,OAAO,CAAC,UAAU;IAwDlB;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,eAAe,CAYrB;IAEF,OAAO,CAAC,gBAAgB,CAGtB;IAEF,yEAAyE;IACzE,OAAO,CAAC,qBAAqB,CAO3B;IAEF,OAAO,CAAC,gBAAgB,CAatB;IAEF;;;;OAIG;IACH,OAAO,CAAC,mBAAmB,CAUzB;IAEF;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,kBAAkB,CAaxB;IAEF,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,qBAAqB;YAUf,MAAM;IA4CpB,OAAO,CAAC,oBAAoB;CAa7B;AAWD,OAAO,CAAC,MAAM,CAAC,CAAC;IACd,UAAU,qBAAqB;QAC7B,eAAe,EAAE,YAAY,CAAC;KAC/B;CACF"}
+{"version":3,"file":"zitadel-login.d.ts","sourceRoot":"","sources":["../../src/orchestrator/zitadel-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAGV,qBAAqB,EAGtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAa,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,KAAK,CAAC;AAKjE,OAAO,mBAAmB,CAAC;AAgB3B,OAAO,EAAsB,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAQrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,qBACa,YAAa,SAAQ,UAAU;IAC1C,OAAgB,iBAAiB,EAAE,cAAc,CAG/C;IAOF,OAAgB,MAAM,0BAMpB;IAE0B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAW;IAE9E;;;;;OAKG;IAC6B,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAC;IAE7E;;;;OAIG;IACkD,QAAQ,CAAC,SAAS,SAAM;IAE7E;;;OAGG;IACkD,QAAQ,CAAC,SAAS,SAAM;IAE7E;;;OAGG;IACyB,QAAQ,CAAC,GAAG,SAAM;IAE9C;;;;;;;OAOG;IACwD,QAAQ,CAAC,aAAa,SAAM;IAEvF;;;;;OAKG;IACsD,QAAQ,CAAC,YAAY,SAAM;IAEpF;;;;OAIG;IACH,SAA8C,IAAI,SAAM;IAExD;;;;;;;;;;;OAWG;IAC6B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAE5E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IAEvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuB;IAEpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IAElE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAE7D,OAAO,CAAC,MAAM,CAAuB;IAErC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAAyD;IAE3E,gBAAgB,IAAI,WAAW,GAAG,gBAAgB,CA+B1D;IAED;;;;;;;;;OASG;IACH,UAAmB,YAAY,IAAI,IAAI,CAItC;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,aAAa;IAYZ,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,CAavD;IAEQ,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,CAIpD;YASa,sBAAsB;IAU3B,MAAM,oCAkBd;IAED;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,iBAAiB;IASzB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAe7B,8DAA8D;IAC9D,OAAO,KAAK,YAAY,GAEvB;YAEa,SAAS;IA4BvB,OAAO,CAAC,aAAa;YA0BP,iBAAiB;IAoC/B,OAAO,CAAC,UAAU;IAuDlB;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,eAAe,CAMrB;IAEF,OAAO,CAAC,gBAAgB,CAGtB;IAEF,yEAAyE;IACzE,OAAO,CAAC,qBAAqB,CAO3B;IAEF,OAAO,CAAC,gBAAgB,CAatB;IAEF;;;;OAIG;IACH,OAAO,CAAC,mBAAmB,CAUzB;IAEF;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,kBAAkB,CAexB;IAEF,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,qBAAqB;YAQf,MAAM;IAoCpB,OAAO,CAAC,oBAAoB;CAO7B;AAWD,OAAO,CAAC,MAAM,CAAC,CAAC;IACd,UAAU,qBAAqB;QAC7B,eAAe,EAAE,YAAY,CAAC;KAC/B;CACF"}

package/dist/orchestrator/zitadel-logout.d.ts

@@ -7,10 +7,12 @@ import { type ZitadelProject } from "@zitadel/api/config";
  * Reads the user's display name + email from the `__nextgen_display` cookie
  * (set by the auth backend on sign-in), renders an avatar trigger with a
  * dropdown that exposes a "Sign out" action, and calls the typed
- * `endSession` operation in `@zitadel/api`
- * (`GET /auth/end-session`). The server clears the session cookie via
+ * `revokeMySession` operation in `@zitadel/api`
+ * (`DELETE /sessions/me`). The server clears the session cookie via
  * `Set-Cookie: Max-Age=0`; on success the element fires `zitadel-signout`
- * and optionally navigates to `post-sign-out-url`.
+ * and optionally navigates to `post-sign-out-url`. (`getEndSessionUrl()`
+ * additionally exposes the OIDC end-session URL for consumers that prefer a
+ * user-agent-driven redirect.)
  *
  * ## Template-slot mode
  *
@@ -27,10 +29,28 @@ import { type ZitadelProject } from "@zitadel/api/config";
 export declare class ZitadelLogout extends LitElement {
     static styles: import("lit").CSSResult[];
     /**
-     * SDK project handle returned by `configureZitadel()`. When set, takes
-     * precedence over the global singleton from `getZitadelConfig()`.
+     * SDK project handle returned by `configureZitadel()`. Set from JS (or a
+     * framework binding). When set, takes precedence over both the
+     * `project-id`/`proxy-path`/`url` attributes and the global singleton from
+     * `getZitadelConfig()`.
      */
     accessor project: ZitadelProject | undefined;
+    /**
+     * Project ID, set declaratively in HTML. Lets the component be configured on
+     * a plain page without JS or `configureZitadel()`. Ignored when the `project`
+     * property or a `configureZitadel()` global is set.
+     */
+    accessor projectId: string;
+    /**
+     * Proxy path for API requests (e.g. `/__nextgen`), set declaratively in HTML.
+     * Defaults to `/__nextgen` when omitted, matching `configureZitadel()`.
+     */
+    accessor proxyPath: string;
+    /**
+     * Full URL of the Zitadel auth backend, set declaratively in HTML. Optional —
+     * not needed in client-only setups.
+     */
+    accessor url: string;
     /** URL to navigate to after a successful sign-out. */
     accessor postSignOutUrl: string;
     /**
@@ -67,6 +87,14 @@ export declare class ZitadelLogout extends LitElement {
     private readonly handleDocumentClick;
     private readonly handleDocumentKeydown;
     private toggleOpen;
+    /**
+     * Calls `DELETE /sessions/me` (`revokeMySession`) with `credentials: "include"`.
+     * The server validates the `__nextgen_session` cookie, deletes the session, and
+     * clears the cookie via `Set-Cookie: Max-Age=0`. On success this element fires
+     * `zitadel-signout` and optionally navigates to `postSignOutUrl`.
+     */
+    /** Declarative config read from this element's attributes. */
+    private get projectAttrs();
     private doLogout;
     /**
      * Returns the absolute URL the end-session request will hit. Useful for

package/dist/orchestrator/zitadel-logout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zitadel-logout.d.ts","sourceRoot":"","sources":["../../src/orchestrator/zitadel-logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAa,OAAO,EAAE,MAAM,KAAK,CAAC;AAErD,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAkBpF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBACa,aAAc,SAAQ,UAAU;IAC3C,OAAgB,MAAM,4BA2IpB;IAEF;;;OAGG;IAC6B,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAC;IAE7E,sDAAsD;IACM,QAAQ,CAAC,cAAc,SAAM;IAEzF;;;;;OAKG;IACiD,QAAQ,CAAC,QAAQ,SAAM;IAElE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAM;IAElC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAM;IAEnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAE9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAM;IAK5C,OAAO,CAAC,YAAY,CAAS;IAEpB,iBAAiB,IAAI,IAAI,CAajC;IAEQ,oBAAoB,IAAI,IAAI,CAIpC;IAEQ,OAAO,IAAI,IAAI,CAKvB;IAED;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAezB,OAAO,KAAK,OAAO,GAGlB;IAED;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAIlC;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAKpC;IAEF,OAAO,CAAC,UAAU;YAWJ,QAAQ;IAqCtB;;;;;OAKG;IACH,gBAAgB,IAAI,MAAM,CAQzB;IAED,OAAO,CAAC,kBAAkB;IAKjB,MAAM,qDAsEd;CACF;AA0BD,OAAO,CAAC,MAAM,CAAC,CAAC;IACd,UAAU,qBAAqB;QAC7B,gBAAgB,EAAE,aAAa,CAAC;KACjC;CACF"}
+{"version":3,"file":"zitadel-logout.d.ts","sourceRoot":"","sources":["../../src/orchestrator/zitadel-logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAa,OAAO,EAAE,MAAM,KAAK,CAAC;AAErD,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAoB1D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBACa,aAAc,SAAQ,UAAU;IAC3C,OAAgB,MAAM,4BA2IpB;IAEF;;;;;OAKG;IAC6B,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAC;IAE7E;;;;OAIG;IACkD,QAAQ,CAAC,SAAS,SAAM;IAE7E;;;OAGG;IACkD,QAAQ,CAAC,SAAS,SAAM;IAE7E;;;OAGG;IACyB,QAAQ,CAAC,GAAG,SAAM;IAE9C,sDAAsD;IACM,QAAQ,CAAC,cAAc,SAAM;IAEzF;;;;;OAKG;IACiD,QAAQ,CAAC,QAAQ,SAAM;IAElE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAM;IAElC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAM;IAEnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAE9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAM;IAK5C,OAAO,CAAC,YAAY,CAAS;IAEpB,iBAAiB,IAAI,IAAI,CAajC;IAEQ,oBAAoB,IAAI,IAAI,CAIpC;IAEQ,OAAO,IAAI,IAAI,CAKvB;IAED;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAazB,OAAO,KAAK,OAAO,GAGlB;IAED;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAIlC;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAKpC;IAEF,OAAO,CAAC,UAAU;IAKlB;;;;;OAKG;IACH,8DAA8D;IAC9D,OAAO,KAAK,YAAY,GAEvB;YAEa,QAAQ;IAwBtB;;;;;OAKG;IACH,gBAAgB,IAAI,MAAM,CAOzB;IAED,OAAO,CAAC,kBAAkB;IAKjB,MAAM,qDAsEd;CACF;AA0BD,OAAO,CAAC,MAAM,CAAC,CAAC;IACd,UAAU,qBAAqB;QAC7B,gBAAgB,EAAE,aAAa,CAAC;KACjC;CACF"}