cauthy-auth 0.22.0 → 0.23.0

package/dist/react.d.mts

@@ -606,13 +606,34 @@ interface AuthClient {
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }>>;
-        /** While the second step is asked for: whether the account has an authenticator app, and the phone (masked) a code can be sent to. */
+        /** While the second step is asked for: whether the account has an authenticator app, the phone (masked) a code can be sent to, and phones that approve sign-ins. */
         mfaMethods(): Promise<AuthResult<'ok', {
             totp: boolean;
             phone: {
                 number: string;
                 channel: string;
             } | null;
+            push: {
+                devices: number;
+            } | null;
+        }>>;
+        /**
+         * Sends a push to the account's phones (the application's app, with
+         * cauthy-expo): show `number`, which the person picks on the phone, then
+         * call `mfaPushWait`.
+         */
+        mfaPush(): Promise<AuthResult<'sent', {
+            number: number;
+        }>>;
+        /**
+         * Waits for the phone's answer, listening (server-sent events) rather than
+         * asking again and again, and signs in when it approves. `denied`: turned
+         * down on the phone; `expired`: nobody answered in time.
+         */
+        mfaPushWait(o?: {
+            signal?: AbortSignal;
+        }): Promise<AuthResult<'signed_in', {
+            session: PublicSession;
         }>>;
         /** Sends a code to the account's phone, by SMS or WhatsApp; `mfa` takes it. A few per sign-in. */
         mfaSendCode(): Promise<AuthResult<'sent', {
@@ -815,6 +836,10 @@ interface AuthTexts {
     sendCodeSms: string;
     sendCodeWhatsapp: string;
     codeSent: string;
+    /** The second step approved on the phone; "{n}" is the number to pick. */
+    pushSend: string;
+    pushPick: string;
+    pushWaiting: string;
     phone: string;
     phoneHelp: string;
     phoneOn: string;

package/dist/react.d.ts

@@ -606,13 +606,34 @@ interface AuthClient {
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }>>;
-        /** While the second step is asked for: whether the account has an authenticator app, and the phone (masked) a code can be sent to. */
+        /** While the second step is asked for: whether the account has an authenticator app, the phone (masked) a code can be sent to, and phones that approve sign-ins. */
         mfaMethods(): Promise<AuthResult<'ok', {
             totp: boolean;
             phone: {
                 number: string;
                 channel: string;
             } | null;
+            push: {
+                devices: number;
+            } | null;
+        }>>;
+        /**
+         * Sends a push to the account's phones (the application's app, with
+         * cauthy-expo): show `number`, which the person picks on the phone, then
+         * call `mfaPushWait`.
+         */
+        mfaPush(): Promise<AuthResult<'sent', {
+            number: number;
+        }>>;
+        /**
+         * Waits for the phone's answer, listening (server-sent events) rather than
+         * asking again and again, and signs in when it approves. `denied`: turned
+         * down on the phone; `expired`: nobody answered in time.
+         */
+        mfaPushWait(o?: {
+            signal?: AbortSignal;
+        }): Promise<AuthResult<'signed_in', {
+            session: PublicSession;
         }>>;
         /** Sends a code to the account's phone, by SMS or WhatsApp; `mfa` takes it. A few per sign-in. */
         mfaSendCode(): Promise<AuthResult<'sent', {
@@ -815,6 +836,10 @@ interface AuthTexts {
     sendCodeSms: string;
     sendCodeWhatsapp: string;
     codeSent: string;
+    /** The second step approved on the phone; "{n}" is the number to pick. */
+    pushSend: string;
+    pushPick: string;
+    pushWaiting: string;
     phone: string;
     phoneHelp: string;
     phoneOn: string;

package/dist/react.js

@@ -310,6 +310,35 @@ function createAuthClient(options = {}) {
       mfa: (f) => post("/sign-in/mfa", { code: f.code }, checkCode(f.code)),
       mfaMethods: () => post("/sign-in/mfa/methods", {}, null),
       mfaSendCode: () => post("/sign-in/mfa/send", {}, null),
+      mfaPush: () => post("/sign-in/mfa/push", {}, null),
+      async mfaPushWait(o = {}) {
+        const status = await new Promise((resolve) => {
+          if (typeof EventSource !== "function") return resolve("approved");
+          const source = new EventSource(`${base}/sign-in/mfa/push/events`, { withCredentials: true });
+          const stop = (st) => {
+            source.close();
+            resolve(st);
+          };
+          o.signal?.addEventListener("abort", () => stop("aborted"));
+          source.addEventListener("status", (e) => {
+            const st = (() => {
+              try {
+                return String(JSON.parse(e.data).status);
+              } catch {
+                return "";
+              }
+            })();
+            if (st && st !== "pending") stop(st);
+          });
+          source.onerror = () => {
+            if (source.readyState === EventSource.CLOSED) stop("expired");
+          };
+        });
+        if (status === "aborted") return { ok: false, error: { code: "aborted", message: "Stopped waiting." } };
+        if (status === "denied") return { ok: false, error: { code: "push_denied", message: "The sign-in was turned down on the phone." } };
+        if (status === "expired") return { ok: false, error: { code: "push_expired", message: "Nobody answered on the phone in time." } };
+        return post("/sign-in/mfa/push/finish", {}, null);
+      },
       magicLink: (f) => post("/sign-in/magic-link", { email: f.email, ...f.create ? { create: true } : {}, ...f.returnTo ? { returnTo: f.returnTo } : {} }, checkEmail(f.email), f.captchaToken),
       magicLinkVerify: (f) => post("/sign-in/magic-link/verify", { token: f.token }, null),
       emailCode: (f) => post("/sign-in/email-code", { code: f.code }, checkCode(f.code)),
@@ -574,6 +603,9 @@ var TEXTS = {
     sendCodeSms: "Send a code by SMS to {to}",
     sendCodeWhatsapp: "Send a code by WhatsApp to {to}",
     codeSent: "We sent a code to {to}. Type it here.",
+    pushSend: "Approve on my phone",
+    pushPick: "On your phone, pick {n}",
+    pushWaiting: "We sent a notification to your phone. Open it and pick this number.",
     phone: "Phone, with its country code",
     phoneHelp: "Get your codes by SMS or WhatsApp instead of an app.",
     phoneOn: "Codes go to {to}.",
@@ -720,6 +752,9 @@ var TEXTS = {
     sendCodeSms: "Enviar un c\xF3digo por SMS a {to}",
     sendCodeWhatsapp: "Enviar un c\xF3digo por WhatsApp a {to}",
     codeSent: "Te enviamos un c\xF3digo a {to}. Escr\xEDbelo aqu\xED.",
+    pushSend: "Aprobar en mi tel\xE9fono",
+    pushPick: "En tu tel\xE9fono, elige el {n}",
+    pushWaiting: "Enviamos una notificaci\xF3n a tu tel\xE9fono. \xC1brela y elige este n\xFAmero.",
     phone: "Tel\xE9fono, con su c\xF3digo de pa\xEDs",
     phoneHelp: "Recibe tus c\xF3digos por SMS o WhatsApp en vez de una app.",
     phoneOn: "Los c\xF3digos van a {to}.",
@@ -1022,9 +1057,28 @@ function SignIn(props) {
   (0, import_react.useEffect)(() => {
     if (step !== "code") return;
     void auth.signIn.mfaMethods().then((r) => {
-      if (r.ok) setPhoneWay({ totp: r.totp, phone: r.phone });
+      if (r.ok) setPhoneWay({ totp: r.totp, phone: r.phone, push: r.push });
     });
   }, [step]);
+  const [pushNumber, setPushNumber] = (0, import_react.useState)(0);
+  const pushWait = (0, import_react.useRef)(null);
+  (0, import_react.useEffect)(() => () => pushWait.current?.abort(), []);
+  const sendPush = async () => {
+    f.setBusy(true);
+    f.setError(null);
+    const r = await auth.signIn.mfaPush();
+    f.setBusy(false);
+    if (!r.ok) return f.setError(r.error);
+    setPushNumber(r.number);
+    pushWait.current?.abort();
+    const ctl = new AbortController();
+    pushWait.current = ctl;
+    const done = await auth.signIn.mfaPushWait({ signal: ctl.signal });
+    if (ctl.signal.aborted) return;
+    setPushNumber(0);
+    if (!done.ok) return f.setError(done.error);
+    f.done();
+  };
   const sendCode = async () => {
     f.setBusy(true);
     f.setError(null);
@@ -1136,6 +1190,11 @@ function SignIn(props) {
     return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("form", { className: f.cx("form"), ...f.root, onSubmit: submit, noValidate: true, children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: f.cx("notice"), children: phoneSent ? f.t.codeSent.replace("{to}", phoneSent) : phoneWay?.phone && !phoneWay.totp ? f.t.codeHelpPhone : f.t.codeHelp }),
       general && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { role: "alert", className: f.cx("error"), children: f.say(general) }),
+      pushNumber > 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: f.cx("notice"), role: "status", "aria-live": "polite", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: f.t.pushPick.replace("{n}", String(pushNumber)) }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: { fontSize: 48, fontWeight: 700, margin: "4px 0", textAlign: "center" }, children: pushNumber }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: f.t.pushWaiting })
+      ] }) : phoneWay?.push && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(f.Button, { type: "button", disabled: f.busy, className: f.cx("button"), onClick: () => void sendPush(), children: f.t.pushSend }),
       phoneWay?.phone && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(f.Button, { type: "button", disabled: f.busy, className: f.cx("providerButton"), onClick: () => void sendCode(), children: (phoneWay.phone.channel === "whatsapp" ? f.t.sendCodeWhatsapp : f.t.sendCodeSms).replace("{to}", to) }),
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Field, { f, name: "code", type: "text", label: f.t.code, value: code, autoComplete: "one-time-code", required: true, onChange: setCode }),
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)(f.Button, { type: "submit", disabled: f.busy, className: f.cx("button"), children: f.t.verify })
@@ -1928,6 +1987,7 @@ function useAuth() {
         anonymously: (f) => then(client.signIn.anonymously(f)),
         email: (f) => then(client.signIn.email(f)),
         mfa: (f) => then(client.signIn.mfa(f)),
+        mfaPushWait: (o) => then(client.signIn.mfaPushWait(o)),
         magicLinkVerify: (f) => then(client.signIn.magicLinkVerify(f)),
         emailCode: (f) => then(client.signIn.emailCode(f)),
         passkey: (o) => then(client.signIn.passkey(o)),