quidproquo-web-admin 0.0.263 → 0.1.1

package/README.md

@@ -1,64 +1,76 @@
-# Quidproquo Web Logs - WIP - Not for production
+# quidproquo-web-admin — WIP, not for production
 
-Welcome to Quidproquo Web Logs, an interface for viewing logs that happen in your server! This project is part of the Quidproquo platform, which
-deploys web servers to AWS but is platform independent.
+A React admin UI for Quidproquo backends — log viewing, config inspection, and
+auth, wired to your deployed QPQ services.
 
-## Features
+This package is a **React component library**, not a standalone app. It ships
+dual CommonJS/ESM builds (plus type declarations) compiled with `tsc`. There is
+no bundler — you import `<App />` into your own host application and build/serve
+it however you like. React (`>=18.3.1`) is a peer dependency, so the host owns
+the React instance.
 
-With Quidproquo Web Logs, you can:
+## Install
 
-- View a list of logs.
-- Filter logs by date and time.
-- Search logs by keyword.
-- View detailed information for each log entry.
+```bash
+npm install quidproquo-web-admin
+```
 
-## Technologies Used
+## Usage
 
-Quidproquo Web Logs is built using React, a popular JavaScript library for building user interfaces. It uses Axios for making HTTP requests to the
-server and Moment.js for parsing and formatting dates.
+Mount `<App />`, telling it how to resolve the URLs of your deployed QPQ
+services:
 
-## Installation
+```tsx
+import { App } from 'quidproquo-web-admin';
+import { BaseUrlResolvers } from 'quidproquo-web-react';
+import { createRoot } from 'react-dom/client';
 
-To install Quidproquo Web Logs, follow these steps:
+const urlResolvers: BaseUrlResolvers = {
+  getApiUrl: () => 'https://api.example.com',
+  getWsUrl: () => 'wss://ws.example.com',
+};
 
-1. Clone this repository to your local machine.
-2. Navigate to the project directory.
-3. Run `npm install` to install the required dependencies.
-4. Run `npm start` to start the development server.
+createRoot(document.getElementById('root')!).render(<App urlResolvers={urlResolvers} />);
+```
 
-## Usage
+## Addons
 
-To use Quidproquo Web Logs, follow these steps:
+The admin UI can be extended with addon tabs. `quidproquo-web-admin` does not
+own the loading mechanism — the host application supplies a `loadAddons`
+function (module federation, dynamic `import()`, a static array, whatever you
+like), and the admin renders whatever addons it returns.
 
-1. Open your web browser and navigate to the URL of the Quidproquo Web Logs interface.
-2. Log in with your Quidproquo credentials.
-3. Select the web server whose logs you want to view.
-4. Use the date and time filters to narrow down the list of logs.
-5. Use the search bar to search for logs by keyword.
-6. Click on a log entry to view detailed information about it.
+```tsx
+import { App, createAddon, LoadFederatedAddons } from 'quidproquo-web-admin';
 
-## Contributing
+const MyTab = () => <div>Hello from an addon</div>;
 
-If you'd like to contribute to Quidproquo Web Logs, please follow these steps:
+const loadAddons: LoadFederatedAddons = async ({ baseUrlResolvers, accessToken }) => [
+  createAddon('My Tab', MyTab),
+];
 
-1. Fork this repository to your own GitHub account.
-2. Clone your forked repository to your local machine.
-3. Make your changes and test them locally.
-4. Push your changes to your forked repository on GitHub.
-5. Submit a pull request to the original repository.
+<App urlResolvers={urlResolvers} loadAddons={loadAddons} />;
+```
 
-## License
+When `loadAddons` is omitted, no addons are loaded.
 
-Quidproquo Web Logs is licensed under the MIT License. See `LICENSE` for more information.
+## Build
 
-## Acknowledgments
+```bash
+# from the repo root
+npm run build -w quidproquo-web-admin
+```
 
-- The Quidproquo team for their support and feedback.
+This runs `tsc` twice, emitting:
 
-### Note
+- `lib/esm` — ES modules (`module`, `types`)
+- `lib/commonjs` — CommonJS (`main`)
 
-Currently under development ~ Not for production
+```bash
+# watch ESM during development
+npm run watch -w quidproquo-web-admin
+```
 
-### References
+## License
 
-https://levelup.gitconnected.com/full-guide-start-react-app-from-scratch-2e1579ac6868
+MIT

package/lib/commonjs/App/App.d.ts

@@ -1,6 +1,8 @@
 import { BaseUrlResolvers } from 'quidproquo-web-react';
 import React from 'react';
+import { LoadFederatedAddons } from '../FederatedAddon';
 export type AppProps = {
     urlResolvers: BaseUrlResolvers;
+    loadAddons?: LoadFederatedAddons;
 };
 export declare const App: React.FC<AppProps>;

package/lib/commonjs/App/App.js

@@ -12,6 +12,7 @@ const CssBaseline_1 = __importDefault(require("@mui/material/CssBaseline"));
 const styles_1 = require("@mui/material/styles");
 const Auth_1 = require("../Auth/Auth");
 const components_1 = require("../components");
+const FederatedAddonProvider_1 = require("../FederatedAddonProvider");
 const contexts_1 = require("../platformLogic/contexts");
 const view_1 = require("../view");
 const WebSocketAuthProvider_1 = require("../WebSocketAuthProvider");
@@ -20,11 +21,11 @@ const darkTheme = (0, styles_1.createTheme)({
         mode: 'light',
     },
 });
-const App = ({ urlResolvers }) => {
+const App = ({ urlResolvers, loadAddons }) => {
     const baseUrls = (0, react_1.useMemo)(() => ({
         api: urlResolvers.getApiUrl(),
         ws: urlResolvers.getWsUrl(),
     }), [urlResolvers]);
-    return ((0, jsx_runtime_1.jsx)(quidproquo_web_react_1.QpqContextProvider, { contextIdentifier: contexts_1.baseUrlsContext, value: baseUrls, children: (0, jsx_runtime_1.jsx)(react_router_dom_1.BrowserRouter, { children: (0, jsx_runtime_1.jsx)(quidproquo_web_react_1.BaseUrlProvider, { urlResolvers: urlResolvers, children: (0, jsx_runtime_1.jsxs)(styles_1.ThemeProvider, { theme: darkTheme, children: [(0, jsx_runtime_1.jsx)(CssBaseline_1.default, {}), (0, jsx_runtime_1.jsx)(view_1.LoadingProvider, { children: (0, jsx_runtime_1.jsx)(Auth_1.Auth, { children: (0, jsx_runtime_1.jsx)(quidproquo_web_react_1.WebsocketProvider, { wsUrl: urlResolvers.getWsUrl(), children: (0, jsx_runtime_1.jsx)(WebSocketAuthProvider_1.WebSocketAuthProvider, { children: (0, jsx_runtime_1.jsx)(components_1.MainLayout, {}) }) }) }) })] }) }) }) }));
+    return ((0, jsx_runtime_1.jsx)(quidproquo_web_react_1.QpqContextProvider, { contextIdentifier: contexts_1.baseUrlsContext, value: baseUrls, children: (0, jsx_runtime_1.jsx)(react_router_dom_1.BrowserRouter, { children: (0, jsx_runtime_1.jsx)(quidproquo_web_react_1.BaseUrlProvider, { urlResolvers: urlResolvers, children: (0, jsx_runtime_1.jsxs)(styles_1.ThemeProvider, { theme: darkTheme, children: [(0, jsx_runtime_1.jsx)(CssBaseline_1.default, {}), (0, jsx_runtime_1.jsx)(view_1.LoadingProvider, { children: (0, jsx_runtime_1.jsx)(Auth_1.Auth, { children: (0, jsx_runtime_1.jsx)(quidproquo_web_react_1.WebsocketProvider, { wsUrl: urlResolvers.getWsUrl(), children: (0, jsx_runtime_1.jsx)(WebSocketAuthProvider_1.WebSocketAuthProvider, { children: (0, jsx_runtime_1.jsx)(FederatedAddonProvider_1.FederatedAddonProvider, { loadAddons: loadAddons, children: (0, jsx_runtime_1.jsx)(components_1.MainLayout, {}) }) }) }) }) })] }) }) }) }));
 };
 exports.App = App;

package/lib/commonjs/Auth/Auth.d.ts

@@ -2,5 +2,5 @@ import { ReactNode } from 'react';
 interface AuthProps {
     children?: ReactNode;
 }
-export declare function Auth({ children }: AuthProps): import("react/jsx-runtime").JSX.Element;
+export declare function Auth({ children }: AuthProps): import("react").JSX.Element;
 export {};

package/lib/commonjs/Auth/Auth.js

@@ -4,24 +4,31 @@ exports.Auth = Auth;
 const jsx_runtime_1 = require("react/jsx-runtime");
 const quidproquo_core_1 = require("quidproquo-core");
 const quidproquo_web_react_1 = require("quidproquo-web-react");
+const AuthChallengeMfaSetup_1 = require("./AuthChallengeMfaSetup/AuthChallengeMfaSetup");
 const AuthChallengeNewPasswordRequired_1 = require("./AuthChallengeNewPasswordRequired/AuthChallengeNewPasswordRequired");
+const AuthChallengeSoftwareTokenMfa_1 = require("./AuthChallengeSoftwareTokenMfa/AuthChallengeSoftwareTokenMfa");
 const isLoggedOn_1 = require("./logic/isLoggedOn");
 const askAuthMain_1 = require("./logic/runtime/askAuthMain");
 const logic_1 = require("./logic");
 const Login_1 = require("./Login");
-const authRuntime = (0, quidproquo_web_react_1.createQpqRuntimeDefinition)(logic_1.authLogic, logic_1.authInitalState, logic_1.authReducer);
 function Auth({ children }) {
-    var _a, _b, _c, _d;
-    const [api, state, dispatch] = (0, quidproquo_web_react_1.useQpqRuntime)(authRuntime, askAuthMain_1.askAuthMain);
+    var _a, _b, _c, _d, _e, _f;
+    const [api, state, dispatch] = (0, quidproquo_web_react_1.useQpqRuntime)(logic_1.authRuntime, askAuthMain_1.askAuthMain);
     const isAuthenticated = (0, isLoggedOn_1.isLoggedOn)(state);
     if (((_a = state.authenticateUserResponse) === null || _a === void 0 ? void 0 : _a.challenge) === quidproquo_core_1.AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED) {
-        return ((0, jsx_runtime_1.jsx)(quidproquo_web_react_1.QpqRuntimeEffectCatcher, { runtime: authRuntime, children: (0, jsx_runtime_1.jsx)(AuthChallengeNewPasswordRequired_1.AuthChallengeNewPasswordRequired, { authState: state }) }));
+        return ((0, jsx_runtime_1.jsx)(quidproquo_web_react_1.QpqRuntimeEffectCatcher, { runtime: logic_1.authRuntime, children: (0, jsx_runtime_1.jsx)(AuthChallengeNewPasswordRequired_1.AuthChallengeNewPasswordRequired, { authState: state }) }));
     }
-    return ((0, jsx_runtime_1.jsxs)(quidproquo_web_react_1.QpqRuntimeEffectCatcher, { runtime: authRuntime, children: [!isAuthenticated && ((0, jsx_runtime_1.jsx)(Login_1.Login, { setUsername: api.authUISetUsername, setPassword: api.authUISetPassword, username: state.username, password: state.password, onLogin: api.authLogin })), isAuthenticated && ((0, jsx_runtime_1.jsx)(quidproquo_web_react_1.authContext.Provider, { value: {
-                    challenge: (_b = state.authenticateUserResponse) === null || _b === void 0 ? void 0 : _b.challenge,
-                    session: (_c = state.authenticateUserResponse) === null || _c === void 0 ? void 0 : _c.session,
+    if (((_b = state.authenticateUserResponse) === null || _b === void 0 ? void 0 : _b.challenge) === quidproquo_core_1.AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA) {
+        return ((0, jsx_runtime_1.jsx)(quidproquo_web_react_1.QpqRuntimeEffectCatcher, { runtime: logic_1.authRuntime, children: (0, jsx_runtime_1.jsx)(AuthChallengeSoftwareTokenMfa_1.AuthChallengeSoftwareTokenMfa, { authState: state }) }));
+    }
+    if (((_c = state.authenticateUserResponse) === null || _c === void 0 ? void 0 : _c.challenge) === quidproquo_core_1.AuthenticateUserChallenge.MFA_SETUP) {
+        return ((0, jsx_runtime_1.jsx)(quidproquo_web_react_1.QpqRuntimeEffectCatcher, { runtime: logic_1.authRuntime, children: (0, jsx_runtime_1.jsx)(AuthChallengeMfaSetup_1.AuthChallengeMfaSetup, { authState: state }) }));
+    }
+    return ((0, jsx_runtime_1.jsxs)(quidproquo_web_react_1.QpqRuntimeEffectCatcher, { runtime: logic_1.authRuntime, children: [!isAuthenticated && ((0, jsx_runtime_1.jsx)(Login_1.Login, { setUsername: api.authUISetUsername, setPassword: api.authUISetPassword, username: state.username, password: state.password, onLogin: api.authLogin })), isAuthenticated && ((0, jsx_runtime_1.jsx)(quidproquo_web_react_1.authContext.Provider, { value: {
+                    challenge: (_d = state.authenticateUserResponse) === null || _d === void 0 ? void 0 : _d.challenge,
+                    session: (_e = state.authenticateUserResponse) === null || _e === void 0 ? void 0 : _e.session,
                     username: state.username,
                     password: state.password,
-                    authenticationInfo: (_d = state.authenticateUserResponse) === null || _d === void 0 ? void 0 : _d.authenticationInfo,
+                    authenticationInfo: (_f = state.authenticateUserResponse) === null || _f === void 0 ? void 0 : _f.authenticationInfo,
                 }, children: children }))] }));
 }

package/lib/commonjs/Auth/AuthChallengeMfaSetup/AuthChallengeMfaSetup.d.ts

@@ -0,0 +1,6 @@
+import { AuthState } from '../logic';
+interface AuthChallengeMfaSetupProps {
+    authState: AuthState;
+}
+export declare function AuthChallengeMfaSetup({ authState }: AuthChallengeMfaSetupProps): import("react").JSX.Element;
+export {};

package/lib/commonjs/Auth/AuthChallengeMfaSetup/AuthChallengeMfaSetup.js

@@ -0,0 +1,50 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthChallengeMfaSetup = AuthChallengeMfaSetup;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const quidproquo_web_react_1 = require("quidproquo-web-react");
+const react_1 = require("react");
+const Lock_1 = __importDefault(require("@mui/icons-material/Lock"));
+const Box_1 = __importDefault(require("@mui/material/Box"));
+const Grid_1 = __importDefault(require("@mui/material/Grid"));
+const TextField_1 = __importDefault(require("@mui/material/TextField"));
+const Typography_1 = __importDefault(require("@mui/material/Typography"));
+const components_1 = require("../../components");
+const logic_1 = require("./logic");
+const atom = (0, quidproquo_web_react_1.createQpqRuntimeDefinition)(logic_1.authChallengeMfaSetupLogic, logic_1.authChallengeMfaSetupInitalState, logic_1.authChallengeMfaSetupReducer);
+// otpauth:// URI consumed by authenticator apps when scanning / importing.
+const buildOtpAuthUri = (email, secretCode) => {
+    const issuer = window.location.host;
+    const label = encodeURIComponent(`${issuer}:${email}`);
+    return `otpauth://totp/${label}?secret=${secretCode}&issuer=${encodeURIComponent(issuer)}`;
+};
+function AuthChallengeMfaSetup({ authState }) {
+    var _a, _b;
+    const [api, state] = (0, quidproquo_web_react_1.useQpqRuntime)(atom);
+    const isCodeValid = /^\d{6}$/.test(state.mfaCode);
+    const challenge = (_a = authState.authenticateUserResponse) === null || _a === void 0 ? void 0 : _a.challenge;
+    const session = (_b = authState.authenticateUserResponse) === null || _b === void 0 ? void 0 : _b.session;
+    // Associate a software token once, using the MFA_SETUP challenge session.
+    const hasAssociated = (0, react_1.useRef)(false);
+    (0, react_1.useEffect)(() => {
+        if (!hasAssociated.current && session) {
+            hasAssociated.current = true;
+            api.authChallengeAssociateSoftwareToken(session);
+        }
+    }, [api, session]);
+    if (!challenge || !session) {
+        return (0, jsx_runtime_1.jsx)("div", { children: "Error, missing challenge / session" });
+    }
+    return ((0, jsx_runtime_1.jsx)(Box_1.default, { sx: {
+            height: '100vh',
+            width: '100%',
+            p: 2,
+            display: 'flex',
+            flexDirection: 'column',
+            justifyContent: 'center',
+            alignItems: 'center',
+        }, children: (0, jsx_runtime_1.jsx)(Box_1.default, { component: "form", sx: { width: '100%', maxWidth: 360 }, children: (0, jsx_runtime_1.jsxs)(Grid_1.default, { container: true, spacing: 2, children: [(0, jsx_runtime_1.jsx)(Grid_1.default, { item: true, xs: 12, children: (0, jsx_runtime_1.jsxs)(Typography_1.default, { variant: "h5", gutterBottom: true, sx: { display: 'flex', alignItems: 'center' }, children: [(0, jsx_runtime_1.jsx)(Lock_1.default, { sx: { marginRight: 1 } }), "Set Up Authenticator"] }) }), (0, jsx_runtime_1.jsx)(Grid_1.default, { item: true, xs: 12, children: (0, jsx_runtime_1.jsx)(Typography_1.default, { variant: "body2", color: "text.secondary", children: "Add this account to your authenticator app, then enter the 6-digit code it generates." }) }), (0, jsx_runtime_1.jsxs)(Grid_1.default, { item: true, xs: 12, children: [(0, jsx_runtime_1.jsx)(Typography_1.default, { variant: "caption", color: "text.secondary", children: "Secret key" }), (0, jsx_runtime_1.jsx)(Typography_1.default, { variant: "body1", sx: { fontFamily: 'monospace', wordBreak: 'break-all' }, children: state.secretCode || 'Loading…' })] }), state.secretCode && ((0, jsx_runtime_1.jsx)(Grid_1.default, { item: true, xs: 12, children: (0, jsx_runtime_1.jsx)(Typography_1.default, { variant: "caption", color: "text.secondary", sx: { wordBreak: 'break-all' }, children: buildOtpAuthUri(authState.username, state.secretCode) }) })), (0, jsx_runtime_1.jsx)(Grid_1.default, { item: true, xs: 12, children: (0, jsx_runtime_1.jsx)(TextField_1.default, { required: true, fullWidth: true, id: "mfaCode", label: "Authentication Code", autoFocus: true, inputProps: { inputMode: 'numeric', pattern: '[0-9]*', maxLength: 6 }, value: state.mfaCode, onChange: (event) => api.authChallengeSetMfaSetupCode(event.target.value.replace(/\D/g, '')) }) }), (0, jsx_runtime_1.jsx)(Grid_1.default, { item: true, xs: 12, children: (0, jsx_runtime_1.jsx)(components_1.AsyncButton, { onClick: () => api.authChallengeSendMfaSetupCode(challenge, authState.username), disabled: !isCodeValid || !state.secretCode, children: "Verify" }) })] }) }) }));
+}

package/lib/commonjs/Auth/AuthChallengeMfaSetup/index.d.ts

@@ -0,0 +1 @@
+export * from './AuthChallengeMfaSetup';

package/lib/commonjs/Auth/AuthChallengeMfaSetup/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./AuthChallengeMfaSetup"), exports);

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/authActionCreator.d.ts

@@ -0,0 +1,3 @@
+import { AskResponse } from 'quidproquo-core';
+export declare function askAuthChallengeSetMfaSetupCode(mfaCode: string): AskResponse<void>;
+export declare function askAuthChallengeSetMfaSetupAssociation(secretCode: string, session: string): AskResponse<void>;

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/authActionCreator.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askAuthChallengeSetMfaSetupCode = askAuthChallengeSetMfaSetupCode;
+exports.askAuthChallengeSetMfaSetupAssociation = askAuthChallengeSetMfaSetupAssociation;
+const quidproquo_core_1 = require("quidproquo-core");
+const authChallengeTypes_1 = require("./authChallengeTypes");
+function* askAuthChallengeSetMfaSetupCode(mfaCode) {
+    yield* (0, quidproquo_core_1.askStateDispatchEffect)(authChallengeTypes_1.AuthChallengeMfaSetupEffect.SetMfaCode, mfaCode);
+}
+function* askAuthChallengeSetMfaSetupAssociation(secretCode, session) {
+    yield* (0, quidproquo_core_1.askStateDispatchEffect)(authChallengeTypes_1.AuthChallengeMfaSetupEffect.SetAssociation, {
+        secretCode,
+        session,
+    });
+}

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/authChallengeReducer.d.ts

@@ -0,0 +1,3 @@
+import { AuthChallengeMfaSetupEffects, AuthChallengeMfaSetupState } from './authChallengeTypes';
+export declare const authChallengeMfaSetupInitalState: AuthChallengeMfaSetupState;
+export declare const authChallengeMfaSetupReducer: (state: AuthChallengeMfaSetupState, effect: AuthChallengeMfaSetupEffects) => [AuthChallengeMfaSetupState, boolean];

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/authChallengeReducer.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authChallengeMfaSetupReducer = exports.authChallengeMfaSetupInitalState = void 0;
+const quidproquo_core_1 = require("quidproquo-core");
+const authChallengeTypes_1 = require("./authChallengeTypes");
+exports.authChallengeMfaSetupInitalState = {
+    secretCode: '',
+    session: '',
+    mfaCode: '',
+};
+exports.authChallengeMfaSetupReducer = (0, quidproquo_core_1.buildMutableEffectReducer)({
+    [authChallengeTypes_1.AuthChallengeMfaSetupEffect.SetMfaCode]: (state, mfaCode) => {
+        state.mfaCode = mfaCode;
+    },
+    [authChallengeTypes_1.AuthChallengeMfaSetupEffect.SetAssociation]: (state, { secretCode, session }) => {
+        state.secretCode = secretCode;
+        state.session = session;
+    },
+});

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/authChallengeTypes.d.ts

@@ -0,0 +1,25 @@
+import { Effect } from 'quidproquo-core';
+export type AuthChallengeMfaSetupState = {
+    secretCode: string;
+    session: string;
+    mfaCode: string;
+};
+export declare enum AuthChallengeMfaSetupEffect {
+    SetMfaCode = "authMfaSetup/SetMfaCode",
+    SetAssociation = "authMfaSetup/SetAssociation"
+}
+export type AuthChallengeMfaSetupSetMfaCodeEffect = Effect<AuthChallengeMfaSetupEffect.SetMfaCode, string>;
+export type AuthChallengeMfaSetupSetAssociationEffect = Effect<AuthChallengeMfaSetupEffect.SetAssociation, {
+    secretCode: string;
+    session: string;
+}>;
+export type AuthChallengeMfaSetupEffects = AuthChallengeMfaSetupSetMfaCodeEffect | AuthChallengeMfaSetupSetAssociationEffect;
+export type AuthChallengeAssociateSoftwareTokenPayload = {
+    session: string;
+};
+export type AuthChallengeSendMfaSetupCodePayload = {
+    email: string;
+    session: string;
+    challenge: string;
+    mfaCode: string;
+};

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/authChallengeTypes.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthChallengeMfaSetupEffect = void 0;
+var AuthChallengeMfaSetupEffect;
+(function (AuthChallengeMfaSetupEffect) {
+    AuthChallengeMfaSetupEffect["SetMfaCode"] = "authMfaSetup/SetMfaCode";
+    AuthChallengeMfaSetupEffect["SetAssociation"] = "authMfaSetup/SetAssociation";
+})(AuthChallengeMfaSetupEffect || (exports.AuthChallengeMfaSetupEffect = AuthChallengeMfaSetupEffect = {}));

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/index.d.ts

@@ -0,0 +1,4 @@
+export * from './authActionCreator';
+export * from './authChallengeReducer';
+export * from './authChallengeTypes';
+export * from './runtime';

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authActionCreator"), exports);
+__exportStar(require("./authChallengeReducer"), exports);
+__exportStar(require("./authChallengeTypes"), exports);
+__exportStar(require("./runtime"), exports);

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/runtime/askAuthChallengeAssociateSoftwareToken.d.ts

@@ -0,0 +1,2 @@
+import { AskResponse } from 'quidproquo-core';
+export declare function askAuthChallengeAssociateSoftwareToken(session: string): AskResponse<void>;

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/runtime/askAuthChallengeAssociateSoftwareToken.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askAuthChallengeAssociateSoftwareToken = askAuthChallengeAssociateSoftwareToken;
+const platformLogic_1 = require("../../../../platformLogic");
+const authActionCreator_1 = require("../authActionCreator");
+// Kicks off TOTP enrollment: trades the MFA_SETUP challenge session for the
+// shared secret (to show as a QR / manual key) and a refreshed session.
+function* askAuthChallengeAssociateSoftwareToken(session) {
+    const response = yield* (0, platformLogic_1.askPlatformRequest)('POST', '/associateSoftwareToken', {
+        body: {
+            session,
+        },
+    });
+    if (response.status < 200 || response.status >= 300) {
+        return;
+    }
+    yield* (0, authActionCreator_1.askAuthChallengeSetMfaSetupAssociation)(response.data.secretCode, response.data.session);
+}

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/runtime/askAuthChallengeSendMfaSetupCode.d.ts

@@ -0,0 +1,2 @@
+import { AskResponse } from 'quidproquo-core';
+export declare function askAuthChallengeSendMfaSetupCode(challenge: string, email: string): AskResponse<void>;

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/runtime/askAuthChallengeSendMfaSetupCode.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askAuthChallengeSendMfaSetupCode = askAuthChallengeSendMfaSetupCode;
+const quidproquo_core_1 = require("quidproquo-core");
+const platformLogic_1 = require("../../../../platformLogic");
+const logic_1 = require("../../../logic");
+// Completes MFA_SETUP. Sends the first TOTP code together with the refreshed
+// session from the associate step; the server verifies the code and finishes login.
+function* askAuthChallengeSendMfaSetupCode(challenge, email) {
+    const { mfaCode, session } = yield* (0, quidproquo_core_1.askStateRead)('');
+    const response = yield* (0, platformLogic_1.askPlatformRequest)('POST', '/challenge', {
+        body: {
+            challenge,
+            email,
+            mfaCode,
+            session,
+        },
+    });
+    if (response.status < 200 || response.status >= 300) {
+        return;
+    }
+    yield* (0, platformLogic_1.askSaveAuthToken)(response.data);
+    yield* (0, logic_1.askAuthUISetAuthInfo)(response.data);
+}

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/runtime/authChallengeLogic.d.ts

@@ -0,0 +1,8 @@
+import { askAuthChallengeSetMfaSetupCode } from '../authActionCreator';
+import { askAuthChallengeAssociateSoftwareToken } from './askAuthChallengeAssociateSoftwareToken';
+import { askAuthChallengeSendMfaSetupCode } from './askAuthChallengeSendMfaSetupCode';
+export declare const authChallengeMfaSetupLogic: {
+    askAuthChallengeSetMfaSetupCode: typeof askAuthChallengeSetMfaSetupCode;
+    askAuthChallengeAssociateSoftwareToken: typeof askAuthChallengeAssociateSoftwareToken;
+    askAuthChallengeSendMfaSetupCode: typeof askAuthChallengeSendMfaSetupCode;
+};

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/runtime/authChallengeLogic.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authChallengeMfaSetupLogic = void 0;
+const authActionCreator_1 = require("../authActionCreator");
+const askAuthChallengeAssociateSoftwareToken_1 = require("./askAuthChallengeAssociateSoftwareToken");
+const askAuthChallengeSendMfaSetupCode_1 = require("./askAuthChallengeSendMfaSetupCode");
+exports.authChallengeMfaSetupLogic = {
+    askAuthChallengeSetMfaSetupCode: authActionCreator_1.askAuthChallengeSetMfaSetupCode,
+    askAuthChallengeAssociateSoftwareToken: askAuthChallengeAssociateSoftwareToken_1.askAuthChallengeAssociateSoftwareToken,
+    askAuthChallengeSendMfaSetupCode: askAuthChallengeSendMfaSetupCode_1.askAuthChallengeSendMfaSetupCode,
+};

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/runtime/index.d.ts

@@ -0,0 +1 @@
+export * from './authChallengeLogic';

package/lib/commonjs/Auth/AuthChallengeMfaSetup/logic/runtime/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authChallengeLogic"), exports);

package/lib/commonjs/Auth/AuthChallengeNewPasswordRequired/AuthChallengeNewPasswordRequired.d.ts

@@ -2,5 +2,5 @@ import { AuthState } from '../logic';
 interface AuthChallengeNewPasswordRequiredProps {
     authState: AuthState;
 }
-export declare function AuthChallengeNewPasswordRequired({ authState }: AuthChallengeNewPasswordRequiredProps): import("react/jsx-runtime").JSX.Element;
+export declare function AuthChallengeNewPasswordRequired({ authState }: AuthChallengeNewPasswordRequiredProps): import("react").JSX.Element;
 export {};

package/lib/commonjs/Auth/AuthChallengeSoftwareTokenMfa/AuthChallengeSoftwareTokenMfa.d.ts

@@ -0,0 +1,6 @@
+import { AuthState } from '../logic';
+interface AuthChallengeSoftwareTokenMfaProps {
+    authState: AuthState;
+}
+export declare function AuthChallengeSoftwareTokenMfa({ authState }: AuthChallengeSoftwareTokenMfaProps): import("react").JSX.Element;
+export {};

package/lib/commonjs/Auth/AuthChallengeSoftwareTokenMfa/AuthChallengeSoftwareTokenMfa.js

@@ -0,0 +1,36 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthChallengeSoftwareTokenMfa = AuthChallengeSoftwareTokenMfa;
+const jsx_runtime_1 = require("react/jsx-runtime");
+/* eslint-disable @typescript-eslint/no-non-null-asserted-optional-chain */
+const quidproquo_web_react_1 = require("quidproquo-web-react");
+const Lock_1 = __importDefault(require("@mui/icons-material/Lock"));
+const Box_1 = __importDefault(require("@mui/material/Box"));
+const Grid_1 = __importDefault(require("@mui/material/Grid"));
+const TextField_1 = __importDefault(require("@mui/material/TextField"));
+const Typography_1 = __importDefault(require("@mui/material/Typography"));
+const components_1 = require("../../components");
+const logic_1 = require("./logic");
+const atom = (0, quidproquo_web_react_1.createQpqRuntimeDefinition)(logic_1.authChallengeMfaLogic, logic_1.authChallengeMfaInitalState, logic_1.authChallengeMfaReducer);
+function AuthChallengeSoftwareTokenMfa({ authState }) {
+    const [api, state] = (0, quidproquo_web_react_1.useQpqRuntime)(atom);
+    const isCodeValid = /^\d{6}$/.test(state.mfaCode);
+    if (!authState.authenticateUserResponse || !authState.authenticateUserResponse.challenge || !authState.authenticateUserResponse.session) {
+        return (0, jsx_runtime_1.jsx)("div", { children: "Error, missing challenge / session" });
+    }
+    return ((0, jsx_runtime_1.jsx)(Box_1.default, { sx: {
+            height: '100vh',
+            width: '100%',
+            p: 2,
+            display: 'flex',
+            flexDirection: 'column',
+            justifyContent: 'center',
+            alignItems: 'center',
+        }, children: (0, jsx_runtime_1.jsx)(Box_1.default, { component: "form", sx: { width: '100%', maxWidth: 360 }, children: (0, jsx_runtime_1.jsxs)(Grid_1.default, { container: true, spacing: 2, children: [(0, jsx_runtime_1.jsx)(Grid_1.default, { item: true, xs: 12, children: (0, jsx_runtime_1.jsxs)(Typography_1.default, { variant: "h5", gutterBottom: true, sx: { display: 'flex', alignItems: 'center' }, children: [(0, jsx_runtime_1.jsx)(Lock_1.default, { sx: { marginRight: 1 } }), "Verification Code"] }) }), (0, jsx_runtime_1.jsx)(Grid_1.default, { item: true, xs: 12, children: (0, jsx_runtime_1.jsx)(Typography_1.default, { variant: "body2", color: "text.secondary", children: "Enter the 6-digit code from your authenticator app." }) }), (0, jsx_runtime_1.jsx)(Grid_1.default, { item: true, xs: 12, children: (0, jsx_runtime_1.jsx)(TextField_1.default, { required: true, fullWidth: true, id: "mfaCode", label: "Authentication Code", autoFocus: true, inputProps: { inputMode: 'numeric', pattern: '[0-9]*', maxLength: 6 }, value: state.mfaCode, onChange: (event) => api.authChallengeSetMfaCode(event.target.value.replace(/\D/g, '')) }) }), (0, jsx_runtime_1.jsx)(Grid_1.default, { item: true, xs: 12, children: (0, jsx_runtime_1.jsx)(components_1.AsyncButton, { onClick: () => {
+                                var _a, _b;
+                                return api.authChallengeSendMfaCode((_a = authState.authenticateUserResponse) === null || _a === void 0 ? void 0 : _a.challenge, (_b = authState.authenticateUserResponse) === null || _b === void 0 ? void 0 : _b.session, authState.username);
+                            }, disabled: !isCodeValid, children: "Verify" }) })] }) }) }));
+}

package/lib/commonjs/Auth/AuthChallengeSoftwareTokenMfa/index.d.ts

@@ -0,0 +1 @@
+export * from './AuthChallengeSoftwareTokenMfa';

package/lib/commonjs/Auth/AuthChallengeSoftwareTokenMfa/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./AuthChallengeSoftwareTokenMfa"), exports);

package/lib/commonjs/Auth/AuthChallengeSoftwareTokenMfa/logic/authActionCreator.d.ts

@@ -0,0 +1,2 @@
+import { AskResponse } from 'quidproquo-core';
+export declare function askAuthChallengeSetMfaCode(mfaCode: string): AskResponse<void>;

package/lib/commonjs/Auth/AuthChallengeSoftwareTokenMfa/logic/authActionCreator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askAuthChallengeSetMfaCode = askAuthChallengeSetMfaCode;
+const quidproquo_core_1 = require("quidproquo-core");
+const authChallengeTypes_1 = require("./authChallengeTypes");
+function* askAuthChallengeSetMfaCode(mfaCode) {
+    yield* (0, quidproquo_core_1.askStateDispatchEffect)(authChallengeTypes_1.AuthChallengeMfaEffect.SetMfaCode, mfaCode);
+}

package/lib/commonjs/Auth/AuthChallengeSoftwareTokenMfa/logic/authChallengeReducer.d.ts

@@ -0,0 +1,3 @@
+import { AuthChallengeMfaState } from './authChallengeTypes';
+export declare const authChallengeMfaInitalState: AuthChallengeMfaState;
+export declare const authChallengeMfaReducer: (state: AuthChallengeMfaState, effect: import("./authChallengeTypes").AuthChallengeSetMfaCodeEffect) => [AuthChallengeMfaState, boolean];

package/lib/commonjs/Auth/AuthChallengeSoftwareTokenMfa/logic/authChallengeReducer.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authChallengeMfaReducer = exports.authChallengeMfaInitalState = void 0;
+const quidproquo_core_1 = require("quidproquo-core");
+const authChallengeTypes_1 = require("./authChallengeTypes");
+exports.authChallengeMfaInitalState = {
+    mfaCode: '',
+};
+exports.authChallengeMfaReducer = (0, quidproquo_core_1.buildMutableEffectReducer)({
+    [authChallengeTypes_1.AuthChallengeMfaEffect.SetMfaCode]: (state, mfaCode) => {
+        state.mfaCode = mfaCode;
+    },
+});