tinacms 0.0.0-df15996-20250420014759 → 0.0.0-e5c0e91-20250421003142

package/dist/index.js

@@ -30337,12 +30337,27 @@ flowchart TD
   }
   const TINA_LOGIN_EVENT = "tinaCloudLogin";
   const AUTH_TOKEN_KEY = "tinacms-auth";
+  const generateRandomString = (length) => {
+    const array = new Uint32Array(length);
+    window.crypto.getRandomValues(array);
+    return Array.from(array, (dec) => ("0" + dec.toString(16)).slice(-2)).join(
+      ""
+    );
+  };
+  const generateCodeChallenge = async (codeVerifier) => {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(codeVerifier);
+    const digest = await window.crypto.subtle.digest("SHA-256", data);
+    return btoa(String.fromCharCode(...new Uint8Array(digest))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  };
   const authenticate = (clientId, frontendUrl, oauth2) => {
-    return new Promise((resolve) => {
+    return new Promise(async (resolve) => {
       const origin = `${window.location.protocol}//${window.location.host}`;
       if (oauth2) {
+        const codeVerifier = generateRandomString(32);
+        const codeChallenge = await generateCodeChallenge(codeVerifier);
+        localStorage.setItem("code_verifier", codeVerifier);
         const redirectUri = encodeURIComponent(`${origin}/admin/auth/callback`);
-        const codeChallenge = "jksdfjdsklf";
         window.location.href = `${frontendUrl}/oauth-signin?redirect_uri=${redirectUri}&code_challenge=${codeChallenge}&client_id=${clientId}`;
         return;
       }

package/dist/index.mjs

@@ -30364,12 +30364,27 @@ function popupWindow(url, title, window2, w, h) {
 }
 const TINA_LOGIN_EVENT = "tinaCloudLogin";
 const AUTH_TOKEN_KEY = "tinacms-auth";
+const generateRandomString = (length) => {
+  const array = new Uint32Array(length);
+  window.crypto.getRandomValues(array);
+  return Array.from(array, (dec) => ("0" + dec.toString(16)).slice(-2)).join(
+    ""
+  );
+};
+const generateCodeChallenge = async (codeVerifier) => {
+  const encoder = new TextEncoder();
+  const data = encoder.encode(codeVerifier);
+  const digest = await window.crypto.subtle.digest("SHA-256", data);
+  return btoa(String.fromCharCode(...new Uint8Array(digest))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+};
 const authenticate = (clientId, frontendUrl, oauth2) => {
-  return new Promise((resolve) => {
+  return new Promise(async (resolve) => {
     const origin = `${window.location.protocol}//${window.location.host}`;
     if (oauth2) {
+      const codeVerifier = generateRandomString(32);
+      const codeChallenge = await generateCodeChallenge(codeVerifier);
+      localStorage.setItem("code_verifier", codeVerifier);
       const redirectUri = encodeURIComponent(`${origin}/admin/auth/callback`);
-      const codeChallenge = "jksdfjdsklf";
       window.location.href = `${frontendUrl}/oauth-signin?redirect_uri=${redirectUri}&code_challenge=${codeChallenge}&client_id=${clientId}`;
       return;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tinacms",
-  "version": "0.0.0-df15996-20250420014759",
+  "version": "0.0.0-e5c0e91-20250421003142",
   "main": "dist/index.js",
   "module": "./dist/index.mjs",
   "exports": {
@@ -129,9 +129,9 @@
     "webfontloader": "1.6.28",
     "yup": "^1.6.1",
     "zod": "^3.24.2",
-    "@tinacms/mdx": "0.0.0-df15996-20250420014759",
-    "@tinacms/search": "0.0.0-df15996-20250420014759",
-    "@tinacms/schema-tools": "0.0.0-df15996-20250420014759"
+    "@tinacms/mdx": "0.0.0-e5c0e91-20250421003142",
+    "@tinacms/schema-tools": "0.0.0-e5c0e91-20250421003142",
+    "@tinacms/search": "0.0.0-e5c0e91-20250421003142"
   },
   "devDependencies": {
     "@graphql-tools/utils": "^10.8.1",