web-mojo 2.2.102 → 2.3.0

package/dist/mojo-auth.es.js

@@ -17,20 +17,21 @@ var y = k((S, p) => {
       passkeyLoginComplete: "/api/auth/passkeys/login/complete",
       oauthBegin: "/api/auth/oauth/{provider}/begin",
       oauthComplete: "/api/auth/oauth/{provider}/complete",
-      refreshToken: "/api/refresh_token"
+      refreshToken: "/api/refresh_token",
+      exchangeAuthCode: "/api/auth/exchange"
     };
-    function i(e, r) {
-      var t = u[e] || w[e] || "";
-      return r && Object.keys(r).forEach(function(n) {
-        t = t.replace("{" + n + "}", r[n]);
-      }), g.replace(/\/$/, "") + t;
+    function i(e, t) {
+      var n = u[e] || w[e] || "";
+      return t && Object.keys(t).forEach(function(r) {
+        n = n.replace("{" + r + "}", t[r]);
+      }), g.replace(/\/$/, "") + n;
     }
-    function s(e, r, t) {
-      var n = Object.assign({ "Content-Type": "application/json" }, {});
+    function s(e, t, n) {
+      var r = Object.assign({ "Content-Type": "application/json" }, {});
       return fetch(e, {
         method: "POST",
-        headers: n,
-        body: JSON.stringify(r || {})
+        headers: r,
+        body: JSON.stringify(t || {})
       }).then(function(o) {
         return o.json().then(function(a) {
           if (!o.ok) throw a;
@@ -38,36 +39,36 @@ var y = k((S, p) => {
         });
       });
     }
-    function m(e, r) {
+    function m(e, t) {
       return fetch(e, {
         method: "GET",
         headers: Object.assign({ "Content-Type": "application/json" }, {})
-      }).then(function(t) {
-        return t.json().then(function(n) {
-          if (!t.ok) throw n;
-          return n;
+      }).then(function(n) {
+        return n.json().then(function(r) {
+          if (!n.ok) throw r;
+          return r;
         });
       });
     }
     function h(e) {
-      var r = e && e.data ? e.data : e;
-      if (!r || !r.access_token) throw new Error("No access_token in response");
-      return localStorage.setItem(c.access, r.access_token), r.refresh_token && localStorage.setItem(c.refresh, r.refresh_token), r;
+      var t = e && e.data ? e.data : e;
+      if (!t || !t.access_token) throw new Error("No access_token in response");
+      return localStorage.setItem(c.access, t.access_token), t.refresh_token && localStorage.setItem(c.refresh, t.refresh_token), t;
     }
     function v(e) {
       return e ? typeof e == "string" ? e : e.message || e.error || Array.isArray(e.errors) && e.errors[0] && e.errors[0].message || "An error occurred" : "An error occurred";
     }
-    function d(e) {
-      for (var r = e.replace(/-/g, "+").replace(/_/g, "/"), t = atob(r), n = new Uint8Array(t.length), o = 0; o < t.length; o++)
-        n[o] = t.charCodeAt(o);
-      return n.buffer;
+    function f(e) {
+      for (var t = e.replace(/-/g, "+").replace(/_/g, "/"), n = atob(t), r = new Uint8Array(n.length), o = 0; o < n.length; o++)
+        r[o] = n.charCodeAt(o);
+      return r.buffer;
     }
     function l(e) {
-      for (var r = new Uint8Array(e), t = "", n = 0; n < r.byteLength; n++)
-        t += String.fromCharCode(r[n]);
-      return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+      for (var t = new Uint8Array(e), n = "", r = 0; r < t.byteLength; r++)
+        n += String.fromCharCode(t[r]);
+      return btoa(n).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
     }
-    var f = {
+    var d = {
       /**
        * Initialize the library. Must be called before any auth method.
        * @param {object} config
@@ -91,10 +92,10 @@ var y = k((S, p) => {
        * NOTE: If MFA is enabled, the response will contain { mfa_required: true, mfa_token, mfa_methods }
        * instead of tokens. Check result.mfa_required before assuming login is complete.
        */
-      login: function(e, r) {
-        return s(i("login"), { username: e, password: r }).then(function(t) {
-          var n = t.data || t;
-          return n.mfa_required ? n : h(t);
+      login: function(e, t) {
+        return s(i("login"), { username: e, password: t }).then(function(n) {
+          var r = n.data || n;
+          return r.mfa_required ? r : h(n);
         });
       },
       // -----------------------------------------------------------------------
@@ -116,11 +117,11 @@ var y = k((S, p) => {
        * @param {string} newPassword
        * @returns {Promise<object>}
        */
-      resetWithCode: function(e, r, t) {
+      resetWithCode: function(e, t, n) {
         return s(i("resetWithCode"), {
           email: e,
-          code: r,
-          new_password: t
+          code: t,
+          new_password: n
         }).then(h);
       },
       // -----------------------------------------------------------------------
@@ -141,10 +142,10 @@ var y = k((S, p) => {
        * @param {string} newPassword
        * @returns {Promise<object>}
        */
-      resetWithToken: function(e, r) {
+      resetWithToken: function(e, t) {
         return s(i("resetWithToken"), {
           token: e,
-          new_password: r
+          new_password: t
         }).then(h);
       },
       // -----------------------------------------------------------------------
@@ -173,11 +174,11 @@ var y = k((S, p) => {
        * @returns {Promise<object|null>} resolves with auth data or null if no token found
        */
       handleMagicTokenFromURL: function() {
-        var e = new URLSearchParams(window.location.search), r = e.get("token");
-        if (!r || r.indexOf("ml:") !== 0) return Promise.resolve(null);
+        var e = new URLSearchParams(window.location.search), t = e.get("token");
+        if (!t || t.indexOf("ml:") !== 0) return Promise.resolve(null);
         e.delete("token");
-        var t = e.toString() ? window.location.pathname + "?" + e.toString() : window.location.pathname;
-        return window.history.replaceState({}, "", t), f.loginWithMagicToken(r);
+        var n = e.toString() ? window.location.pathname + "?" + e.toString() : window.location.pathname;
+        return window.history.replaceState({}, "", n), d.loginWithMagicToken(t);
       },
       // -----------------------------------------------------------------------
       // Passkey Login (WebAuthn)
@@ -197,14 +198,14 @@ var y = k((S, p) => {
        * @returns {Promise<object>}
        */
       loginWithPasskeyDiscoverable: function() {
-        return f.isPasskeySupported() ? s(i("passkeyLoginBegin"), {}).then(function(e) {
-          var r = e.data || e, t = r.challenge_id, n = r.publicKey;
-          return n.challenge = d(n.challenge), n.allowCredentials && (n.allowCredentials = n.allowCredentials.map(function(o) {
-            return Object.assign({}, o, { id: d(o.id) });
-          })), navigator.credentials.get({ publicKey: n }).then(function(o) {
+        return d.isPasskeySupported() ? s(i("passkeyLoginBegin"), {}).then(function(e) {
+          var t = e.data || e, n = t.challenge_id, r = t.publicKey;
+          return r.challenge = f(r.challenge), r.allowCredentials && (r.allowCredentials = r.allowCredentials.map(function(o) {
+            return Object.assign({}, o, { id: f(o.id) });
+          })), navigator.credentials.get({ publicKey: r }).then(function(o) {
             if (!o) throw new Error("No credential received from authenticator");
             return s(i("passkeyLoginComplete"), {
-              challenge_id: t,
+              challenge_id: n,
               credential: {
                 id: o.id,
                 rawId: l(o.rawId),
@@ -228,14 +229,14 @@ var y = k((S, p) => {
        * @returns {Promise<object>}
        */
       loginWithPasskey: function(e) {
-        return f.isPasskeySupported() ? s(i("passkeyLoginBegin"), { username: e }).then(function(r) {
-          var t = r.data || r, n = t.challenge_id, o = t.publicKey;
-          return o.challenge = d(o.challenge), o.allowCredentials && (o.allowCredentials = o.allowCredentials.map(function(a) {
-            return Object.assign({}, a, { id: d(a.id) });
+        return d.isPasskeySupported() ? s(i("passkeyLoginBegin"), { username: e }).then(function(t) {
+          var n = t.data || t, r = n.challenge_id, o = n.publicKey;
+          return o.challenge = f(o.challenge), o.allowCredentials && (o.allowCredentials = o.allowCredentials.map(function(a) {
+            return Object.assign({}, a, { id: f(a.id) });
           })), navigator.credentials.get({ publicKey: o }).then(function(a) {
             if (!a) throw new Error("No credential received from authenticator");
             return s(i("passkeyLoginComplete"), {
-              challenge_id: n,
+              challenge_id: r,
               credential: {
                 id: a.id,
                 rawId: l(a.rawId),
@@ -269,17 +270,17 @@ var y = k((S, p) => {
        *                                 allowed by the backend (ALLOWED_REDIRECT_URLS or per-group).
        * @returns {Promise<void>}
        */
-      startOAuthLogin: function(e, r) {
+      startOAuthLogin: function(e, t) {
         sessionStorage.setItem("oauth_provider", e);
-        var t = r || window.location.origin + window.location.pathname, n = i("oauthBegin", { provider: e }) + "?redirect_uri=" + encodeURIComponent(t);
-        return m(n).then(function(o) {
+        var n = t || window.location.origin + window.location.pathname, r = i("oauthBegin", { provider: e }) + "?redirect_uri=" + encodeURIComponent(n);
+        return m(r).then(function(o) {
           var a = o.data || o;
           if (!a.auth_url) throw new Error("No auth_url in OAuth begin response");
           window.location.href = a.auth_url;
         });
       },
       startGoogleLogin: function(e) {
-        return f.startOAuthLogin("google", e);
+        return d.startOAuthLogin("google", e);
       },
       /**
        * Complete OAuth login for any provider — call this on your OAuth callback page.
@@ -289,15 +290,43 @@ var y = k((S, p) => {
        * @returns {Promise<object>}
        */
       completeOAuthLogin: function(e) {
-        var r = new URLSearchParams(window.location.search), t = r.get("code"), n = r.get("state");
-        return t ? s(i("oauthComplete", { provider: e }), {
-          code: t,
-          state: n
+        var t = new URLSearchParams(window.location.search), n = t.get("code"), r = t.get("state");
+        return n ? s(i("oauthComplete", { provider: e }), {
+          code: n,
+          state: r
         }).then(h) : Promise.reject(new Error("No OAuth code in URL"));
       },
       /** @deprecated use completeOAuthLogin('google') */
       completeGoogleLogin: function() {
-        return f.completeOAuthLogin("google");
+        return d.completeOAuthLogin("google");
+      },
+      // -----------------------------------------------------------------------
+      // Cross-Origin Auth Handoff
+      // -----------------------------------------------------------------------
+      /**
+       * Exchange a one-time auth handoff code for access + refresh tokens.
+       * The auth domain mints the code via /api/auth/handoff and appends it
+       * as ?auth_code= on the redirect to the consuming app. Single-use,
+       * 60s TTL — server-enforced.
+       * Stores tokens on success.
+       * @param {string} code  - 32-hex auth handoff code from ?auth_code=
+       * @returns {Promise<object>} response data ({ access_token, refresh_token, user })
+       */
+      exchangeAuthCode: function(e) {
+        return s(i("exchangeAuthCode"), { code: e }).then(h);
+      },
+      /**
+       * Convenience: read ?auth_code= from current URL and exchange it for
+       * tokens. Cleans the param from the URL *before* the network call so
+       * a slow exchange can't leak the code to third-party scripts.
+       * @returns {Promise<object|null>} resolves with auth data or null if no code found
+       */
+      handleAuthCodeFromURL: function() {
+        var e = new URLSearchParams(window.location.search), t = e.get("auth_code");
+        if (!t) return Promise.resolve(null);
+        e.delete("auth_code");
+        var n = window.location.pathname + (e.toString() ? "?" + e.toString() : "") + (window.location.hash || "");
+        return window.history.replaceState({}, "", n), d.exchangeAuthCode(t);
       },
       // -----------------------------------------------------------------------
       // Session helpers
@@ -346,10 +375,10 @@ var y = k((S, p) => {
         var e = localStorage.getItem(c.access);
         if (!e) return null;
         try {
-          var r = e.split(".");
-          if (r.length !== 3) return null;
-          var t = r[1].replace(/-/g, "+").replace(/_/g, "/"), n = 4 - t.length % 4;
-          return n !== 4 && (t += "====".slice(0, n)), JSON.parse(atob(t));
+          var t = e.split(".");
+          if (t.length !== 3) return null;
+          var n = t[1].replace(/-/g, "+").replace(/_/g, "/"), r = 4 - n.length % 4;
+          return r !== 4 && (n += "====".slice(0, r)), JSON.parse(atob(n));
         } catch {
           return null;
         }
@@ -360,7 +389,7 @@ var y = k((S, p) => {
        * @returns {boolean}
        */
       isTokenExpired: function() {
-        var e = f.getTokenPayload();
+        var e = d.getTokenPayload();
         return !e || !e.exp ? !0 : Math.floor(Date.now() / 1e3) >= e.exp;
       },
       /**
@@ -383,7 +412,7 @@ var y = k((S, p) => {
        */
       getError: v
     };
-    return f;
+    return d;
   });
 });
 export default y();

package/dist/mojo-auth.umd.js

@@ -1 +1 @@
-(function(f){typeof define=="function"&&define.amd?define(f):f()})((function(){"use strict";(function(f,h){typeof define=="function"&&define.amd?define([],h):typeof module<"u"&&module.exports?module.exports=h():f.MojoAuth=h()})(typeof globalThis<"u"?globalThis:typeof window<"u"?window:void 0,function(){var f="",h={},u={access:"access_token",refresh:"refresh_token"},p={login:"/api/login",forgotPassword:"/api/auth/forgot",resetWithCode:"/api/auth/password/reset/code",resetWithToken:"/api/auth/password/reset/token",magicSend:"/api/auth/magic/send",magicLogin:"/api/auth/magic/login",passkeyLoginBegin:"/api/auth/passkeys/login/begin",passkeyLoginComplete:"/api/auth/passkeys/login/complete",oauthBegin:"/api/auth/oauth/{provider}/begin",oauthComplete:"/api/auth/oauth/{provider}/complete",refreshToken:"/api/refresh_token"};function i(e,n){var t=h[e]||p[e]||"";return n&&Object.keys(n).forEach(function(r){t=t.replace("{"+r+"}",n[r])}),f.replace(/\/$/,"")+t}function s(e,n,t){var r=Object.assign({"Content-Type":"application/json"},{});return fetch(e,{method:"POST",headers:r,body:JSON.stringify(n||{})}).then(function(o){return o.json().then(function(a){if(!o.ok)throw a;return a})})}function w(e,n){return fetch(e,{method:"GET",headers:Object.assign({"Content-Type":"application/json"},{})}).then(function(t){return t.json().then(function(r){if(!t.ok)throw r;return r})})}function l(e){var n=e&&e.data?e.data:e;if(!n||!n.access_token)throw new Error("No access_token in response");return localStorage.setItem(u.access,n.access_token),n.refresh_token&&localStorage.setItem(u.refresh,n.refresh_token),n}function m(e){return e?typeof e=="string"?e:e.message||e.error||Array.isArray(e.errors)&&e.errors[0]&&e.errors[0].message||"An error occurred":"An error occurred"}function g(e){for(var n=e.replace(/-/g,"+").replace(/_/g,"/"),t=atob(n),r=new Uint8Array(t.length),o=0;o<t.length;o++)r[o]=t.charCodeAt(o);return r.buffer}function c(e){for(var n=new Uint8Array(e),t="",r=0;r<n.byteLength;r++)t+=String.fromCharCode(n[r]);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}var d={init:function(e){if(!e||!e.baseURL)throw new Error("MojoAuth.init: baseURL is required");f=e.baseURL,h=Object.assign({},e.endpoints||{})},login:function(e,n){return s(i("login"),{username:e,password:n}).then(function(t){var r=t.data||t;return r.mfa_required?r:l(t)})},forgotPasswordCode:function(e){return s(i("forgotPassword"),{email:e,method:"code"})},resetWithCode:function(e,n,t){return s(i("resetWithCode"),{email:e,code:n,new_password:t}).then(l)},forgotPasswordLink:function(e){return s(i("forgotPassword"),{email:e,method:"link"})},resetWithToken:function(e,n){return s(i("resetWithToken"),{token:e,new_password:n}).then(l)},sendMagicLink:function(e){return s(i("magicSend"),{email:e})},loginWithMagicToken:function(e){return s(i("magicLogin"),{token:e}).then(l)},handleMagicTokenFromURL:function(){var e=new URLSearchParams(window.location.search),n=e.get("token");if(!n||n.indexOf("ml:")!==0)return Promise.resolve(null);e.delete("token");var t=e.toString()?window.location.pathname+"?"+e.toString():window.location.pathname;return window.history.replaceState({},"",t),d.loginWithMagicToken(n)},isPasskeySupported:function(){return typeof window<"u"&&typeof window.PublicKeyCredential<"u"&&typeof navigator.credentials<"u"&&typeof navigator.credentials.get=="function"},loginWithPasskeyDiscoverable:function(){return d.isPasskeySupported()?s(i("passkeyLoginBegin"),{}).then(function(e){var n=e.data||e,t=n.challenge_id,r=n.publicKey;return r.challenge=g(r.challenge),r.allowCredentials&&(r.allowCredentials=r.allowCredentials.map(function(o){return Object.assign({},o,{id:g(o.id)})})),navigator.credentials.get({publicKey:r}).then(function(o){if(!o)throw new Error("No credential received from authenticator");return s(i("passkeyLoginComplete"),{challenge_id:t,credential:{id:o.id,rawId:c(o.rawId),type:o.type,response:{clientDataJSON:c(o.response.clientDataJSON),authenticatorData:c(o.response.authenticatorData),signature:c(o.response.signature),userHandle:o.response.userHandle?c(o.response.userHandle):null}}})})}).then(l):Promise.reject(new Error("Passkeys are not supported in this browser"))},loginWithPasskey:function(e){return d.isPasskeySupported()?s(i("passkeyLoginBegin"),{username:e}).then(function(n){var t=n.data||n,r=t.challenge_id,o=t.publicKey;return o.challenge=g(o.challenge),o.allowCredentials&&(o.allowCredentials=o.allowCredentials.map(function(a){return Object.assign({},a,{id:g(a.id)})})),navigator.credentials.get({publicKey:o}).then(function(a){if(!a)throw new Error("No credential received from authenticator");return s(i("passkeyLoginComplete"),{challenge_id:r,credential:{id:a.id,rawId:c(a.rawId),type:a.type,response:{clientDataJSON:c(a.response.clientDataJSON),authenticatorData:c(a.response.authenticatorData),signature:c(a.response.signature),userHandle:a.response.userHandle?c(a.response.userHandle):null}}})})}).then(l):Promise.reject(new Error("Passkeys are not supported in this browser"))},startOAuthLogin:function(e,n){sessionStorage.setItem("oauth_provider",e);var t=n||window.location.origin+window.location.pathname,r=i("oauthBegin",{provider:e})+"?redirect_uri="+encodeURIComponent(t);return w(r).then(function(o){var a=o.data||o;if(!a.auth_url)throw new Error("No auth_url in OAuth begin response");window.location.href=a.auth_url})},startGoogleLogin:function(e){return d.startOAuthLogin("google",e)},completeOAuthLogin:function(e){var n=new URLSearchParams(window.location.search),t=n.get("code"),r=n.get("state");return t?s(i("oauthComplete",{provider:e}),{code:t,state:r}).then(l):Promise.reject(new Error("No OAuth code in URL"))},completeGoogleLogin:function(){return d.completeOAuthLogin("google")},logout:function(){localStorage.removeItem(u.access),localStorage.removeItem(u.refresh)},isAuthenticated:function(){return!!localStorage.getItem(u.access)},getToken:function(){return localStorage.getItem(u.access)},getRefreshToken:function(){return localStorage.getItem(u.refresh)},getAuthHeader:function(){var e=localStorage.getItem(u.access);return e?"Bearer "+e:null},getTokenPayload:function(){var e=localStorage.getItem(u.access);if(!e)return null;try{var n=e.split(".");if(n.length!==3)return null;var t=n[1].replace(/-/g,"+").replace(/_/g,"/"),r=4-t.length%4;return r!==4&&(t+="====".slice(0,r)),JSON.parse(atob(t))}catch{return null}},isTokenExpired:function(){var e=d.getTokenPayload();return!e||!e.exp?!0:Math.floor(Date.now()/1e3)>=e.exp},refreshToken:function(){var e=localStorage.getItem(u.refresh);return e?s(i("refreshToken"),{refresh_token:e}).then(l):Promise.reject(new Error("No refresh token stored"))},getError:m};return d})}));
+(function(d){typeof define=="function"&&define.amd?define(d):d()})((function(){"use strict";(function(d,f){typeof define=="function"&&define.amd?define([],f):typeof module<"u"&&module.exports?module.exports=f():d.MojoAuth=f()})(typeof globalThis<"u"?globalThis:typeof window<"u"?window:void 0,function(){var d="",f={},u={access:"access_token",refresh:"refresh_token"},p={login:"/api/login",forgotPassword:"/api/auth/forgot",resetWithCode:"/api/auth/password/reset/code",resetWithToken:"/api/auth/password/reset/token",magicSend:"/api/auth/magic/send",magicLogin:"/api/auth/magic/login",passkeyLoginBegin:"/api/auth/passkeys/login/begin",passkeyLoginComplete:"/api/auth/passkeys/login/complete",oauthBegin:"/api/auth/oauth/{provider}/begin",oauthComplete:"/api/auth/oauth/{provider}/complete",refreshToken:"/api/refresh_token",exchangeAuthCode:"/api/auth/exchange"};function i(e,n){var t=f[e]||p[e]||"";return n&&Object.keys(n).forEach(function(r){t=t.replace("{"+r+"}",n[r])}),d.replace(/\/$/,"")+t}function s(e,n,t){var r=Object.assign({"Content-Type":"application/json"},{});return fetch(e,{method:"POST",headers:r,body:JSON.stringify(n||{})}).then(function(o){return o.json().then(function(a){if(!o.ok)throw a;return a})})}function w(e,n){return fetch(e,{method:"GET",headers:Object.assign({"Content-Type":"application/json"},{})}).then(function(t){return t.json().then(function(r){if(!t.ok)throw r;return r})})}function l(e){var n=e&&e.data?e.data:e;if(!n||!n.access_token)throw new Error("No access_token in response");return localStorage.setItem(u.access,n.access_token),n.refresh_token&&localStorage.setItem(u.refresh,n.refresh_token),n}function m(e){return e?typeof e=="string"?e:e.message||e.error||Array.isArray(e.errors)&&e.errors[0]&&e.errors[0].message||"An error occurred":"An error occurred"}function g(e){for(var n=e.replace(/-/g,"+").replace(/_/g,"/"),t=atob(n),r=new Uint8Array(t.length),o=0;o<t.length;o++)r[o]=t.charCodeAt(o);return r.buffer}function c(e){for(var n=new Uint8Array(e),t="",r=0;r<n.byteLength;r++)t+=String.fromCharCode(n[r]);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}var h={init:function(e){if(!e||!e.baseURL)throw new Error("MojoAuth.init: baseURL is required");d=e.baseURL,f=Object.assign({},e.endpoints||{})},login:function(e,n){return s(i("login"),{username:e,password:n}).then(function(t){var r=t.data||t;return r.mfa_required?r:l(t)})},forgotPasswordCode:function(e){return s(i("forgotPassword"),{email:e,method:"code"})},resetWithCode:function(e,n,t){return s(i("resetWithCode"),{email:e,code:n,new_password:t}).then(l)},forgotPasswordLink:function(e){return s(i("forgotPassword"),{email:e,method:"link"})},resetWithToken:function(e,n){return s(i("resetWithToken"),{token:e,new_password:n}).then(l)},sendMagicLink:function(e){return s(i("magicSend"),{email:e})},loginWithMagicToken:function(e){return s(i("magicLogin"),{token:e}).then(l)},handleMagicTokenFromURL:function(){var e=new URLSearchParams(window.location.search),n=e.get("token");if(!n||n.indexOf("ml:")!==0)return Promise.resolve(null);e.delete("token");var t=e.toString()?window.location.pathname+"?"+e.toString():window.location.pathname;return window.history.replaceState({},"",t),h.loginWithMagicToken(n)},isPasskeySupported:function(){return typeof window<"u"&&typeof window.PublicKeyCredential<"u"&&typeof navigator.credentials<"u"&&typeof navigator.credentials.get=="function"},loginWithPasskeyDiscoverable:function(){return h.isPasskeySupported()?s(i("passkeyLoginBegin"),{}).then(function(e){var n=e.data||e,t=n.challenge_id,r=n.publicKey;return r.challenge=g(r.challenge),r.allowCredentials&&(r.allowCredentials=r.allowCredentials.map(function(o){return Object.assign({},o,{id:g(o.id)})})),navigator.credentials.get({publicKey:r}).then(function(o){if(!o)throw new Error("No credential received from authenticator");return s(i("passkeyLoginComplete"),{challenge_id:t,credential:{id:o.id,rawId:c(o.rawId),type:o.type,response:{clientDataJSON:c(o.response.clientDataJSON),authenticatorData:c(o.response.authenticatorData),signature:c(o.response.signature),userHandle:o.response.userHandle?c(o.response.userHandle):null}}})})}).then(l):Promise.reject(new Error("Passkeys are not supported in this browser"))},loginWithPasskey:function(e){return h.isPasskeySupported()?s(i("passkeyLoginBegin"),{username:e}).then(function(n){var t=n.data||n,r=t.challenge_id,o=t.publicKey;return o.challenge=g(o.challenge),o.allowCredentials&&(o.allowCredentials=o.allowCredentials.map(function(a){return Object.assign({},a,{id:g(a.id)})})),navigator.credentials.get({publicKey:o}).then(function(a){if(!a)throw new Error("No credential received from authenticator");return s(i("passkeyLoginComplete"),{challenge_id:r,credential:{id:a.id,rawId:c(a.rawId),type:a.type,response:{clientDataJSON:c(a.response.clientDataJSON),authenticatorData:c(a.response.authenticatorData),signature:c(a.response.signature),userHandle:a.response.userHandle?c(a.response.userHandle):null}}})})}).then(l):Promise.reject(new Error("Passkeys are not supported in this browser"))},startOAuthLogin:function(e,n){sessionStorage.setItem("oauth_provider",e);var t=n||window.location.origin+window.location.pathname,r=i("oauthBegin",{provider:e})+"?redirect_uri="+encodeURIComponent(t);return w(r).then(function(o){var a=o.data||o;if(!a.auth_url)throw new Error("No auth_url in OAuth begin response");window.location.href=a.auth_url})},startGoogleLogin:function(e){return h.startOAuthLogin("google",e)},completeOAuthLogin:function(e){var n=new URLSearchParams(window.location.search),t=n.get("code"),r=n.get("state");return t?s(i("oauthComplete",{provider:e}),{code:t,state:r}).then(l):Promise.reject(new Error("No OAuth code in URL"))},completeGoogleLogin:function(){return h.completeOAuthLogin("google")},exchangeAuthCode:function(e){return s(i("exchangeAuthCode"),{code:e}).then(l)},handleAuthCodeFromURL:function(){var e=new URLSearchParams(window.location.search),n=e.get("auth_code");if(!n)return Promise.resolve(null);e.delete("auth_code");var t=window.location.pathname+(e.toString()?"?"+e.toString():"")+(window.location.hash||"");return window.history.replaceState({},"",t),h.exchangeAuthCode(n)},logout:function(){localStorage.removeItem(u.access),localStorage.removeItem(u.refresh)},isAuthenticated:function(){return!!localStorage.getItem(u.access)},getToken:function(){return localStorage.getItem(u.access)},getRefreshToken:function(){return localStorage.getItem(u.refresh)},getAuthHeader:function(){var e=localStorage.getItem(u.access);return e?"Bearer "+e:null},getTokenPayload:function(){var e=localStorage.getItem(u.access);if(!e)return null;try{var n=e.split(".");if(n.length!==3)return null;var t=n[1].replace(/-/g,"+").replace(/_/g,"/"),r=4-t.length%4;return r!==4&&(t+="====".slice(0,r)),JSON.parse(atob(t))}catch{return null}},isTokenExpired:function(){var e=h.getTokenPayload();return!e||!e.exp?!0:Math.floor(Date.now()/1e3)>=e.exp},refreshToken:function(){var e=localStorage.getItem(u.refresh);return e?s(i("refreshToken"),{refresh_token:e}).then(l):Promise.reject(new Error("No refresh token stored"))},getError:m};return h})}));

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "web-mojo",
-    "version": "2.2.102",
+    "version": "2.3.0",
     "description": "WEB-MOJO - A lightweight JavaScript framework for building data-driven web applications",
     "type": "module",
     "main": "./dist/index.cjs.js",