strapi-plugin-oidc 1.7.6 → 1.8.1

package/dist/admin/{index-CrnGXADu.js → index-Dk6TYtio.js}

@@ -1,5 +1,10 @@
 "use strict";
-const react = require("react");
+const React = require("react");
+const client = require("react-dom/client");
+const jsxRuntime = require("react/jsx-runtime");
+const designSystem = require("@strapi/design-system");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const React__default = /* @__PURE__ */ _interopDefault(React);
 const __variableDynamicImportRuntimeHelper = (glob, path, segs) => {
   const v = glob[path];
   if (v) {
@@ -24,15 +29,51 @@ const pluginPkg = {
 };
 const pluginId = pluginPkg.name.replace(/^@strapi\/plugin-/i, "");
 function Initializer({ setPlugin }) {
-  const ref = react.useRef();
+  const ref = React.useRef();
   ref.current = setPlugin;
-  react.useEffect(() => {
+  React.useEffect(() => {
     if (ref.current) {
       ref.current(pluginId);
     }
   }, []);
   return null;
 }
+const LOGOUT_EVENT = "strapi-oidc:logout";
+function Overlay({ bg }) {
+  const [active, setActive] = React.useState(false);
+  React.useEffect(() => {
+    const handler = () => setActive(true);
+    window.addEventListener(LOGOUT_EVENT, handler);
+    return () => window.removeEventListener(LOGOUT_EVENT, handler);
+  }, []);
+  if (!active) return null;
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    "div",
+    {
+      style: {
+        position: "fixed",
+        inset: 0,
+        zIndex: 1e4,
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "center",
+        background: bg,
+        backdropFilter: "blur(2px)"
+      },
+      children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Loader, {})
+    }
+  );
+}
+function resolveTheme() {
+  const stored = window.localStorage.getItem("STRAPI_THEME") ?? "system";
+  const isDark = stored === "dark" || stored === "system" && (window.matchMedia?.("(prefers-color-scheme: dark)").matches ?? false);
+  return isDark ? designSystem.darkTheme : designSystem.lightTheme;
+}
+function LogoutOverlay() {
+  const theme = resolveTheme();
+  const bg = theme === designSystem.darkTheme ? "rgba(24, 24, 38, 0.85)" : "rgba(255, 255, 255, 0.85)";
+  return /* @__PURE__ */ jsxRuntime.jsx(designSystem.DesignSystemProvider, { theme, children: /* @__PURE__ */ jsxRuntime.jsx(Overlay, { bg }) });
+}
 const en = {
   "global.plugins.strapi-plugin-oidc": "OIDC Plugin",
   "page.title": "Configure OIDC default role(s) and access controls.",
@@ -95,7 +136,6 @@ const en = {
   "auditlog.table.ip": "IP",
   "auditlog.table.details": "Details",
   "auditlog.table.empty": "No audit log entries",
-  "auditlog.loading": "Loading…",
   "auditlog.clear": "Clear Logs",
   "auditlog.clear.title": "Clear All Logs",
   "auditlog.clear.description": "This will permanently delete all {count, plural, one {# audit log entry} other {# audit log entries}}. This action cannot be undone.",
@@ -126,6 +166,8 @@ const en = {
   "auditlog.action.nonce_mismatch": "The nonce in the ID token did not match the one generated at login. This may indicate a token replay attack.",
   "auditlog.action.token_exchange_failed": "The authorisation code could not be exchanged for tokens. The OIDC provider rejected the request.",
   "auditlog.action.whitelist_rejected": "The user's email address is not on the whitelist. Access was denied.",
+  "auditlog.action.email_not_verified": "The OIDC provider did not confirm the user's email address as verified. Access was denied.",
+  "auditlog.action.id_token_invalid": "The ID token failed signature, issuer, audience, or expiry validation. Access was denied.",
   "auth.page.authenticating.title": "Authenticating...",
   "auth.page.authenticating.noscript.heading": "JavaScript Required",
   "auth.page.authenticating.noscript.body": "JavaScript must be enabled for authentication to complete.",
@@ -166,7 +208,7 @@ const index = {
           defaultMessage: "Configuration"
         },
         Component: async () => {
-          return await Promise.resolve().then(() => require("./index-D2rlNx1-.js"));
+          return await Promise.resolve().then(() => require("./index-Bmg4eTYb.js"));
         },
         permissions: [{ action: "plugin::strapi-plugin-oidc.read", subject: null }]
       }
@@ -178,6 +220,9 @@ const index = {
     });
   },
   bootstrap() {
+    const overlayContainer = document.createElement("div");
+    document.body.appendChild(overlayContainer);
+    client.createRoot(overlayContainer).render(React__default.default.createElement(LogoutOverlay));
     const defaultButtonText = t("login.sso");
     const isAuthRoute = (path) => /\/auth\/(login|register|forgot-password|reset-password)/.test(path);
     let ssoButtonInjected = false;
@@ -237,6 +282,7 @@ const index = {
         if (!isAuthRoute(window.location.pathname)) return;
         injectSSOButton(buttonText);
         if (enforced) removeEnforcedElements();
+        if (ssoButtonInjected && !enforced) loginObserver?.disconnect();
       };
       tick();
       loginObserver = new MutationObserver(tick);
@@ -257,23 +303,27 @@ const index = {
       }
     };
     applySettings();
+    if (window.__strapiOidcFetchPatched) return;
+    window.__strapiOidcFetchPatched = true;
     const originalFetch = window.fetch;
     window.fetch = async (...args) => {
       const url = typeof args[0] === "string" ? args[0] : args[0].url;
       const isLogout = url?.endsWith("/admin/logout") && args[1]?.method?.toUpperCase() === "POST";
-      const response = await originalFetch(...args);
-      if (isLogout && response.ok) {
+      if (isLogout) {
+        window.dispatchEvent(new CustomEvent(LOGOUT_EVENT));
         window.localStorage.removeItem("jwtToken");
         window.localStorage.removeItem("isLoggedIn");
         window.sessionStorage.removeItem("jwtToken");
         window.sessionStorage.removeItem("isLoggedIn");
         document.cookie = "jwtToken=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/";
         document.cookie = "jwtToken=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/admin";
+        originalFetch(...args).catch(() => {
+        });
         window.location.href = "/strapi-plugin-oidc/logout";
         return new Promise(() => {
         });
       }
-      return response;
+      return originalFetch(...args);
     };
   },
   async registerTrads({ locales }) {

package/dist/admin/index.js

@@ -1,4 +1,6 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const index = require("./index-CrnGXADu.js");
+const index = require("./index-Dk6TYtio.js");
+require("react");
+require("react-dom/client");
 exports.default = index.index;

package/dist/admin/index.mjs

@@ -1,4 +1,6 @@
-import { i } from "./index-DRJ6Ty2J.mjs";
+import { i } from "./index-Bb9-aYb4.mjs";
+import "react";
+import "react-dom/client";
 export {
   i as default
 };