cauthy-auth 0.8.0 → 0.10.0

package/dist/react.mjs

@@ -105,13 +105,17 @@ var UNAVAILABLE = { code: "unavailable", message: "Sign-in is unavailable right
 function createAuthClient(options = {}) {
   const base = (options.basePath ?? "/api/auth").replace(/\/+$/, "");
   const doFetch = (...args) => (options.fetch ?? fetch)(...args);
+  const locale = () => {
+    const said = typeof options.locale === "function" ? options.locale() : options.locale;
+    return (said ?? (typeof document === "undefined" ? "" : document.documentElement?.lang) ?? "").trim();
+  };
   async function post(path, form, bad) {
     if (bad) return { ok: false, error: { code: bad.code, message: bad.message, field: bad.field } };
     try {
       const res = await doFetch(`${base}${path}`, {
         method: "POST",
         credentials: "same-origin",
-        headers: { "content-type": "application/json", accept: "application/json" },
+        headers: { "content-type": "application/json", accept: "application/json", ...locale() ? { "x-cauthy-locale": locale() } : {} },
         body: JSON.stringify(form)
       });
       const body = await res.json().catch(() => null);
@@ -131,6 +135,7 @@ function createAuthClient(options = {}) {
       return null;
     }
   }
+  const linkUrl = (provider, o = {}) => `${base}/me/identities/link/${encodeURIComponent(provider)}${o.returnTo ? `?return_to=${encodeURIComponent(o.returnTo)}` : ""}`;
   const socialUrl = (provider, o = {}) => `${base}/sign-in/social/${encodeURIComponent(provider)}${o.returnTo ? `?return_to=${encodeURIComponent(o.returnTo)}` : ""}`;
   const passkeyUrl = (o = {}) => {
     const q = new URLSearchParams({ method: "passkey" });
@@ -177,6 +182,16 @@ function createAuthClient(options = {}) {
         disable: (f) => post("/me/mfa/disable", { password: f.password }, null),
         recoveryCodes: (f) => post("/me/mfa/recovery-codes", { password: f.password }, null)
       },
+      changeEmail: (f) => post("/me/email", { email: f.email, password: f.password }, checkEmail(f.email)),
+      async identities() {
+        const body = await read("/me/identities");
+        return body && Array.isArray(body.identities) ? body.identities : [];
+      },
+      linkUrl,
+      link(provider, o) {
+        window.location.assign(linkUrl(provider, o));
+      },
+      unlink: (provider) => post("/me/identities/unlink", { provider }, null),
       async sessions() {
         const body = await read("/me/sessions");
         return body && Array.isArray(body.sessions) ? body.sessions : [];
@@ -313,6 +328,15 @@ var TEXTS = {
     sessions: "Where you are signed in",
     signOutEverywhere: "Sign out everywhere",
     unknownDevice: "Unknown device",
+    emailAddress: "Email address",
+    newEmail: "New email address",
+    changeEmail: "Change email",
+    emailSent: "We sent a link to {email}. Your address changes once you open it.",
+    linkedAccounts: "Linked accounts",
+    noLinkedAccounts: "No account is linked.",
+    linkWith: "Link",
+    unlink: "Unlink",
+    linked: "The account was linked.",
     errors: {
       required: "This is required.",
       invalid_email: "That does not look like an email address.",
@@ -321,6 +345,11 @@ var TEXTS = {
       unavailable: "Sign-in is unavailable right now. Try again in a moment.",
       state_mismatch: "That sign-in could not be completed. Try again.",
       cancelled: "The sign-in was cancelled.",
+      email_taken: "That address already has an account.",
+      email_unchanged: "That is already your address.",
+      last_sign_in_method: "Add a password or link another account first: it is your only way to sign in.",
+      identity_already_linked: "That account is linked to someone else.",
+      manual_linking_disabled: "Linking accounts is turned off for this workspace.",
       invalid_token: "This link is not valid, or it has expired. Ask for a new one.",
       invalid_code: "That code is not right, or it has expired.",
       wrong_password: "The current password is not right.",
@@ -378,6 +407,15 @@ var TEXTS = {
     sessions: "D\xF3nde tienes la sesi\xF3n abierta",
     signOutEverywhere: "Cerrar sesi\xF3n en todas partes",
     unknownDevice: "Dispositivo desconocido",
+    emailAddress: "Correo",
+    newEmail: "Correo nuevo",
+    changeEmail: "Cambiar el correo",
+    emailSent: "Enviamos un enlace a {email}. Tu correo cambia cuando lo abras.",
+    linkedAccounts: "Cuentas vinculadas",
+    noLinkedAccounts: "No hay cuentas vinculadas.",
+    linkWith: "Vincular",
+    unlink: "Desvincular",
+    linked: "La cuenta qued\xF3 vinculada.",
     errors: {
       required: "Este dato es obligatorio.",
       invalid_email: "Eso no parece un correo.",
@@ -386,6 +424,11 @@ var TEXTS = {
       unavailable: "No se puede entrar en este momento. Intenta de nuevo en un momento.",
       state_mismatch: "No se pudo completar el ingreso. Intenta de nuevo.",
       cancelled: "El ingreso se cancel\xF3.",
+      email_taken: "Ese correo ya tiene una cuenta.",
+      email_unchanged: "Ese ya es tu correo.",
+      last_sign_in_method: "Primero agrega una contrase\xF1a o vincula otra cuenta: es tu \xFAnica forma de entrar.",
+      identity_already_linked: "Esa cuenta est\xE1 vinculada a otra persona.",
+      manual_linking_disabled: "Vincular cuentas est\xE1 desactivado en este workspace.",
       invalid_token: "Este enlace no es v\xE1lido o ya venci\xF3. Pide uno nuevo.",
       invalid_code: "Ese c\xF3digo no es correcto o ya venci\xF3.",
       wrong_password: "La contrase\xF1a actual no es correcta.",
@@ -745,7 +788,9 @@ function Account(props) {
   const when = props.formatDate ?? ((iso) => new Date(iso).toLocaleString());
   return /* @__PURE__ */ jsxs("div", { className: cx("account"), ...root, children: [
     /* @__PURE__ */ jsx(ProfilePart, { props, account, onSaved: setAccount }),
+    /* @__PURE__ */ jsx(EmailPart, { props, account }),
     account.hasPassword && /* @__PURE__ */ jsx(PasswordPart, { props }),
+    /* @__PURE__ */ jsx(LinkedPart, { props }),
     /* @__PURE__ */ jsx(SecondStepPart, { props, account, onChanged: (mfaEnabled) => setAccount({ ...account, mfaEnabled }) }),
     /* @__PURE__ */ jsxs("section", { className: cx("section"), children: [
       /* @__PURE__ */ jsx("h2", { className: cx("heading"), children: t.passkeys }),
@@ -784,6 +829,65 @@ function ProfilePart({ props, account, onSaved }) {
     done && /* @__PURE__ */ jsx("p", { role: "status", className: f.cx("notice"), children: done })
   ] });
 }
+function EmailPart({ props, account }) {
+  const auth = useAuth();
+  const { f, done, setDone, run, general } = useSection(props);
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const submit = async (e) => {
+    e.preventDefault();
+    const r = await run(() => auth.account.changeEmail({ email, password }));
+    if (!r.ok) return;
+    setPassword("");
+    setDone(f.t.emailSent.replace("{email}", r.email));
+  };
+  return /* @__PURE__ */ jsxs("form", { className: f.cx("section"), onSubmit: submit, noValidate: true, children: [
+    /* @__PURE__ */ jsx("h2", { className: f.cx("heading"), children: f.t.emailAddress }),
+    /* @__PURE__ */ jsx("p", { className: f.cx("notice"), children: account.email }),
+    general && /* @__PURE__ */ jsx("p", { role: "alert", className: f.cx("error"), children: f.say(general) }),
+    /* @__PURE__ */ jsx(Field, { f, name: "email", type: "email", label: f.t.newEmail, value: email, autoComplete: "email", required: true, onChange: setEmail }),
+    account.hasPassword && /* @__PURE__ */ jsx(Field, { f, name: "password", type: "password", label: f.t.currentPassword, value: password, autoComplete: "current-password", required: true, onChange: setPassword }),
+    /* @__PURE__ */ jsx(f.Button, { type: "submit", disabled: f.busy, className: f.cx("button"), children: f.t.changeEmail }),
+    done && /* @__PURE__ */ jsx("p", { role: "status", className: f.cx("notice"), children: done })
+  ] });
+}
+function LinkedPart({ props }) {
+  const auth = useAuth();
+  const { f, run, general } = useSection(props);
+  const [linked, setLinked] = useState(null);
+  const [offered, setOffered] = useState([]);
+  const [came, setCame] = useState(null);
+  useEffect(() => {
+    void auth.account.identities().then(setLinked);
+    void auth.methods().then((m) => setOffered(m.providers));
+    const back = typeof window === "undefined" ? null : new URLSearchParams(window.location.search);
+    if (back?.get("linked")) setCame(back.get("linked"));
+    else if (back?.get("auth_error")) f.setError({ code: back.get("auth_error"), message: "That account could not be linked. Try again." });
+  }, []);
+  if (linked === null) return null;
+  const name = (id) => offered.find((p) => p.id === id)?.name ?? id;
+  const unlink = async (provider) => {
+    const r = await run(() => auth.account.unlink(provider));
+    if (r.ok) setLinked(linked.filter((x) => x.provider !== provider));
+  };
+  const here = typeof window === "undefined" ? void 0 : window.location.pathname;
+  return /* @__PURE__ */ jsxs("section", { className: f.cx("section"), children: [
+    /* @__PURE__ */ jsx("h2", { className: f.cx("heading"), children: f.t.linkedAccounts }),
+    came && /* @__PURE__ */ jsx("p", { role: "status", className: f.cx("notice"), children: f.t.linked }),
+    general && /* @__PURE__ */ jsx("p", { role: "alert", className: f.cx("error"), children: f.say(general) }),
+    linked.length === 0 ? /* @__PURE__ */ jsx("p", { className: f.cx("notice"), children: f.t.noLinkedAccounts }) : /* @__PURE__ */ jsx("ul", { className: f.cx("sessions"), children: linked.map((x) => /* @__PURE__ */ jsxs("li", { className: f.cx("session"), children: [
+      name(x.provider),
+      x.email ? ` \xB7 ${x.email}` : "",
+      " ",
+      /* @__PURE__ */ jsx(f.Button, { type: "button", disabled: f.busy, className: f.cx("providerButton"), onClick: () => void unlink(x.provider), children: f.t.unlink })
+    ] }, x.provider)) }),
+    offered.filter((p) => !linked.some((x) => x.provider === p.id)).map((p) => /* @__PURE__ */ jsxs(f.Button, { type: "button", className: f.cx("providerButton"), onClick: () => auth.account.link(p.id, { returnTo: here }), children: [
+      f.t.linkWith,
+      " ",
+      p.name
+    ] }, p.id))
+  ] });
+}
 function PasswordPart({ props }) {
   const auth = useAuth();
   const { f, done, setDone, run, general } = useSection(props);