web-mojo 2.2.57 → 2.2.59

package/dist/auth.es.js

@@ -1,589 +1,2 @@
-import { B, a, V, b, c, d } from "./chunks/version-OyPGnx30.js";
-function createAuthClient({
-  baseURL,
-  fetchImpl = typeof fetch !== "undefined" ? fetch.bind(window) : null,
-  storage = typeof localStorage !== "undefined" ? localStorage : null,
-  endpoints = {}
-} = {}) {
-  if (!baseURL) {
-    throw new Error("createAuthClient: baseURL is required");
-  }
-  if (!fetchImpl) {
-    throw new Error("createAuthClient: fetch implementation is not available in this environment");
-  }
-  if (!storage) {
-    throw new Error("createAuthClient: storage (localStorage) is not available in this environment");
-  }
-  const KEYS = {
-    access: "access_token",
-    refresh: "refresh_token",
-    user: "user"
-  };
-  const EP = {
-    login: "/login",
-    forgot: "/auth/forgot",
-    resetCode: "/auth/password/reset/code",
-    resetToken: "/auth/password/reset/token",
-    ...endpoints
-  };
-  async function post(path, body) {
-    const res = await fetchImpl(`${baseURL}${path}`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body || {})
-    });
-    let json = {};
-    try {
-      json = await res.json();
-    } catch (_) {
-    }
-    if (!res.ok) {
-      throw json || { message: `Request failed with status ${res.status}` };
-    }
-    return json;
-  }
-  function parseResponse(r) {
-    return r && r.data && r.data.data || r && r.data || r;
-  }
-  function saveAuthData(resp) {
-    const d2 = parseResponse(resp);
-    if (!d2 || !d2.access_token) {
-      throw new Error("No access_token in response.");
-    }
-    storage.setItem(KEYS.access, d2.access_token);
-    if (d2.refresh_token) storage.setItem(KEYS.refresh, d2.refresh_token);
-    if (d2.user) storage.setItem(KEYS.user, JSON.stringify(d2.user));
-  }
-  function getErrorMessage(err) {
-    return err?.message || err?.error || Array.isArray(err?.errors) && err.errors[0]?.message || "An error occurred. Please try again.";
-  }
-  return {
-    async login(username, password) {
-      const resp = await post(EP.login, { username, password });
-      saveAuthData(resp);
-      return parseResponse(resp);
-    },
-    async forgot({ email, method }) {
-      return post(EP.forgot, { email, method });
-    },
-    async resetWithCode({ email, code, newPassword }) {
-      const resp = await post(EP.resetCode, { email, code, new_password: newPassword });
-      saveAuthData(resp);
-      return parseResponse(resp);
-    },
-    async resetWithToken({ token, newPassword }) {
-      const resp = await post(EP.resetToken, { token, new_password: newPassword });
-      saveAuthData(resp);
-      return parseResponse(resp);
-    },
-    logout() {
-      storage.removeItem(KEYS.access);
-      storage.removeItem(KEYS.refresh);
-      storage.removeItem(KEYS.user);
-    },
-    isAuthenticated() {
-      return !!storage.getItem(KEYS.access);
-    },
-    getToken() {
-      return storage.getItem(KEYS.access);
-    },
-    getUser() {
-      const raw = storage.getItem(KEYS.user);
-      try {
-        return raw ? JSON.parse(raw) : null;
-      } catch {
-        return null;
-      }
-    },
-    getAuthHeader() {
-      const t = storage.getItem(KEYS.access);
-      return t ? `Bearer ${t}` : null;
-    },
-    getErrorMessage,
-    parseResponse
-  };
-}
-function mountAuth(container, options = {}) {
-  if (!container || !(container instanceof Element)) {
-    throw new Error("mountAuth: container must be a DOM Element");
-  }
-  const {
-    baseURL,
-    onSuccessRedirect,
-    allowRedirectOrigins,
-    branding = {},
-    theme,
-    endpoints,
-    providers,
-    texts = {}
-  } = options;
-  if (!baseURL) {
-    throw new Error("mountAuth: baseURL is required");
-  }
-  const urlParams = new URLSearchParams(window.location.search);
-  const redirectParam = urlParams.get("redirect") || urlParams.get("next") || urlParams.get("returnTo");
-  const redirectTarget = String(onSuccessRedirect || redirectParam || "/");
-  function isAllowedRedirect(url) {
-    if (!allowRedirectOrigins || allowRedirectOrigins.length === 0) {
-      return true;
-    }
-    try {
-      const target = new URL(url, window.location.origin);
-      return allowRedirectOrigins.includes(target.origin);
-    } catch {
-      return false;
-    }
-  }
-  function performRedirect() {
-    if (!isAllowedRedirect(redirectTarget)) {
-      window.location.href = "/";
-      return;
-    }
-    window.location.href = redirectTarget.startsWith("http") ? redirectTarget : new URL(redirectTarget, window.location.origin).href;
-  }
-  const auth = createAuthClient({ baseURL, endpoints });
-  const B2 = {
-    title: branding.title || "Sign In",
-    subtitle: branding.subtitle || "Sign in to your account",
-    logoUrl: branding.logoUrl || ""
-  };
-  const T = {
-    emailOrUsername: texts.emailOrUsername || "Email or Username",
-    password: texts.password || "Password",
-    signIn: texts.signIn || "Sign In",
-    forgotPassword: texts.forgotPassword || "Forgot password?",
-    resetYourPassword: texts.resetYourPassword || "Reset Your Password",
-    emailAddress: texts.emailAddress || "Email Address",
-    resetMethod: texts.resetMethod || "Reset Method",
-    emailCode: texts.emailCode || "Email me a code",
-    emailLink: texts.emailLink || "Email me a magic link",
-    sendReset: texts.sendReset || "Send Reset",
-    back: texts.back || "Back",
-    enterResetCode: texts.enterResetCode || "Enter Reset Code",
-    weSentCodeTo: texts.weSentCodeTo || "We sent a code to",
-    resetCode: texts.resetCode || "Reset Code",
-    newPassword: texts.newPassword || "New Password",
-    confirmPassword: texts.confirmPassword || "Confirm Password",
-    resetPassword: texts.resetPassword || "Reset Password",
-    setYourNewPassword: texts.setYourNewPassword || "Set Your New Password",
-    setPassword: texts.setPassword || "Set Password",
-    invalidCredentials: texts.invalidCredentials || "Invalid credentials.",
-    successRedirecting: texts.successRedirecting || "Success! Redirecting...",
-    pleaseFillAllFields: texts.pleaseFillAllFields || "Please fill in all fields.",
-    passwordsDoNotMatch: texts.passwordsDoNotMatch || "Passwords do not match."
-  };
-  const HTML = `
-    <div class="auth-container">
-      <div class="auth-card">
-        <div class="auth-header">
-          ${B2.logoUrl ? `<img src="${B2.logoUrl}" alt="${B2.title}" style="max-height:60px;margin-bottom:10px" />` : ""}
-          <h1 class="auth-title">${B2.title}</h1>
-          <p class="auth-subtitle">${B2.subtitle}</p>
-        </div>
-
-        <div id="status-message" class="alert" role="status" style="display:none;"></div>
-
-        <!-- Sign In View -->
-        <div id="view-signin" class="auth-view">
-          <form id="form-signin" novalidate>
-            <div class="mb-3">
-              <label for="signin-username" class="form-label">${T.emailOrUsername}</label>
-              <input type="text" class="form-control" id="signin-username" placeholder="${T.emailOrUsername}" autocomplete="username" required />
-            </div>
-            <div class="mb-3">
-              <label for="signin-password" class="form-label">${T.password}</label>
-              <input type="password" class="form-control" id="signin-password" placeholder="${T.password}" autocomplete="current-password" required />
-            </div>
-            <button type="submit" class="btn btn-primary w-100 mb-3" id="btn-signin">
-              <span class="btn-text">${T.signIn}</span>
-              <span class="btn-spinner spinner-border spinner-border-sm" style="display:none;"></span>
-            </button>
-            <div class="text-center">
-              <a href="#" id="link-forgot" class="text-decoration-none">${T.forgotPassword}</a>
-            </div>
-
-            ${providers && (providers.google || providers.passkey) ? `
-              <div class="position-relative my-3">
-                <hr class="text-muted" />
-                <span class="position-absolute top-50 start-50 translate-middle bg-white px-3 text-muted small">OR</span>
-              </div>
-              <div class="d-grid gap-2">
-                ${providers.google ? `<button type="button" class="btn btn-outline-primary" id="btn-google"><i class="bi bi-google me-2"></i>Continue with Google</button>` : ""}
-                ${providers.passkey ? `<button type="button" class="btn btn-outline-secondary" id="btn-passkey"><i class="bi bi-fingerprint me-2"></i>Sign in with Passkey</button>` : ""}
-              </div>
-            ` : ""}
-          </form>
-        </div>
-
-        <!-- Forgot Password View -->
-        <div id="view-forgot" class="auth-view" style="display:none;">
-          <button type="button" class="btn btn-link p-0 mb-3" id="btn-back-signin">
-            <span aria-hidden="true">←</span> ${T.back}
-          </button>
-          <h2 class="h5 mb-3">${T.resetYourPassword}</h2>
-          <form id="form-forgot" novalidate>
-            <div class="mb-3">
-              <label for="forgot-email" class="form-label">${T.emailAddress}</label>
-              <input type="email" class="form-control" id="forgot-email" placeholder="${T.emailAddress}" autocomplete="email" required />
-            </div>
-            <div class="mb-3">
-              <label class="form-label">${T.resetMethod}</label>
-              <div class="form-check">
-                <input class="form-check-input" type="radio" name="reset-method" id="method-code" value="code" checked />
-                <label class="form-check-label" for="method-code">${T.emailCode}</label>
-              </div>
-              <div class="form-check">
-                <input class="form-check-input" type="radio" name="reset-method" id="method-link" value="link" />
-                <label class="form-check-label" for="method-link">${T.emailLink}</label>
-              </div>
-            </div>
-            <button type="submit" class="btn btn-primary w-100" id="btn-forgot">
-              <span class="btn-text">${T.sendReset}</span>
-              <span class="btn-spinner spinner-border spinner-border-sm" style="display:none;"></span>
-            </button>
-          </form>
-        </div>
-
-        <!-- Reset with Code View -->
-        <div id="view-reset-code" class="auth-view" style="display:none;">
-          <button type="button" class="btn btn-link p-0 mb-3" id="btn-back-forgot">
-            <span aria-hidden="true">←</span> ${T.back}
-          </button>
-          <h2 class="h5 mb-3">${T.enterResetCode}</h2>
-          <p class="text-muted small mb-3">${T.weSentCodeTo} <strong id="reset-email-display"></strong></p>
-          <form id="form-reset-code" novalidate>
-            <div class="mb-3">
-              <label for="reset-code" class="form-label">${T.resetCode}</label>
-              <input type="text" class="form-control" id="reset-code" placeholder="${T.resetCode}" required />
-            </div>
-            <div class="mb-3">
-              <label for="reset-password" class="form-label">${T.newPassword}</label>
-              <input type="password" class="form-control" id="reset-password" placeholder="${T.newPassword}" autocomplete="new-password" required />
-            </div>
-            <div class="mb-3">
-              <label for="reset-password-confirm" class="form-label">${T.confirmPassword}</label>
-              <input type="password" class="form-control" id="reset-password-confirm" placeholder="${T.confirmPassword}" autocomplete="new-password" required />
-            </div>
-            <button type="submit" class="btn btn-primary w-100" id="btn-reset-code">
-              <span class="btn-text">${T.resetPassword}</span>
-              <span class="btn-spinner spinner-border spinner-border-sm" style="display:none;"></span>
-            </button>
-          </form>
-        </div>
-
-        <!-- Set Password via Magic Link View -->
-        <div id="view-set-password" class="auth-view" style="display:none;">
-          <h2 class="h5 mb-3">${T.setYourNewPassword}</h2>
-          <form id="form-set-password" novalidate>
-            <div class="mb-3">
-              <label for="set-password" class="form-label">${T.newPassword}</label>
-              <input type="password" class="form-control" id="set-password" placeholder="${T.newPassword}" autocomplete="new-password" required />
-            </div>
-            <div class="mb-3">
-              <label for="set-password-confirm" class="form-label">${T.confirmPassword}</label>
-              <input type="password" class="form-control" id="set-password-confirm" placeholder="${T.confirmPassword}" autocomplete="new-password" required />
-            </div>
-            <button type="submit" class="btn btn-primary w-100" id="btn-set-password">
-              <span class="btn-text">${T.setPassword}</span>
-              <span class="btn-spinner spinner-border spinner-border-sm" style="display:none;"></span>
-            </button>
-          </form>
-        </div>
-      </div>
-    </div>
-  `;
-  container.innerHTML = HTML;
-  if (theme) {
-    container.classList.add(String(theme));
-  }
-  const els = {
-    views: {
-      signin: container.querySelector("#view-signin"),
-      forgot: container.querySelector("#view-forgot"),
-      resetCode: container.querySelector("#view-reset-code"),
-      setPassword: container.querySelector("#view-set-password")
-    },
-    forms: {
-      signin: container.querySelector("#form-signin"),
-      forgot: container.querySelector("#form-forgot"),
-      resetCode: container.querySelector("#form-reset-code"),
-      setPassword: container.querySelector("#form-set-password")
-    },
-    buttons: {
-      signin: container.querySelector("#btn-signin"),
-      forgot: container.querySelector("#btn-forgot"),
-      resetCode: container.querySelector("#btn-reset-code"),
-      setPassword: container.querySelector("#btn-set-password"),
-      backSignin: container.querySelector("#btn-back-signin"),
-      backForgot: container.querySelector("#btn-back-forgot"),
-      google: container.querySelector("#btn-google"),
-      passkey: container.querySelector("#btn-passkey")
-    },
-    inputs: {
-      signinUsername: container.querySelector("#signin-username"),
-      signinPassword: container.querySelector("#signin-password"),
-      forgotEmail: container.querySelector("#forgot-email"),
-      resetCode: container.querySelector("#reset-code"),
-      resetPassword: container.querySelector("#reset-password"),
-      resetPasswordConfirm: container.querySelector("#reset-password-confirm"),
-      setPassword: container.querySelector("#set-password"),
-      setPasswordConfirm: container.querySelector("#set-password-confirm")
-    },
-    radios: {
-      resetMethodCode: container.querySelector("#method-code"),
-      resetMethodLink: container.querySelector("#method-link")
-    },
-    labels: {
-      resetEmailDisplay: container.querySelector("#reset-email-display")
-    },
-    links: {
-      forgot: container.querySelector("#link-forgot")
-    },
-    message: container.querySelector("#status-message")
-  };
-  function showView(name) {
-    Object.entries(els.views).forEach(([key, el]) => {
-      if (el) el.style.display = key === name ? "block" : "none";
-    });
-    setTimeout(() => {
-      const view = els.views[name];
-      const heading = view?.querySelector("h1, h2, .auth-title, .h5");
-      if (heading) {
-        heading.setAttribute("tabindex", "-1");
-        heading.focus?.();
-      } else {
-        const firstInput = view?.querySelector("input, button");
-        firstInput?.focus?.();
-      }
-    }, 60);
-  }
-  function showMessage(message, type = "info") {
-    const el = els.message;
-    if (!el) return;
-    el.textContent = message;
-    el.className = `alert alert-${type}`;
-    el.style.display = "block";
-    el.setAttribute("role", type === "danger" ? "alert" : "status");
-  }
-  function hideMessage() {
-    const el = els.message;
-    if (!el) return;
-    el.style.display = "none";
-  }
-  function setButtonLoading(button, loading) {
-    if (!button) return;
-    const textSpan = button.querySelector(".btn-text");
-    const spinner = button.querySelector(".btn-spinner");
-    button.disabled = !!loading;
-    if (textSpan) textSpan.style.display = loading ? "none" : "inline";
-    if (spinner) spinner.style.display = loading ? "inline-block" : "none";
-  }
-  function getResetMethod() {
-    if (els.radios.resetMethodCode?.checked) return "code";
-    if (els.radios.resetMethodLink?.checked) return "link";
-    return "code";
-  }
-  async function handleSignin(e) {
-    e?.preventDefault?.();
-    hideMessage();
-    const username = els.inputs.signinUsername?.value?.trim();
-    const password = els.inputs.signinPassword?.value;
-    if (!username || !password) {
-      showMessage("Please enter both username and password.", "danger");
-      return;
-    }
-    setButtonLoading(els.buttons.signin, true);
-    try {
-      await auth.login(username, password);
-      showMessage(`${T.successRedirecting}`, "success");
-      setTimeout(performRedirect, 350);
-    } catch (err) {
-      showMessage(auth.getErrorMessage(err) || T.invalidCredentials, "danger");
-      setButtonLoading(els.buttons.signin, false);
-    }
-  }
-  async function handleForgot(e) {
-    e?.preventDefault?.();
-    hideMessage();
-    const email = els.inputs.forgotEmail?.value?.trim();
-    const method = getResetMethod();
-    if (!email) {
-      showMessage("Please enter your email address.", "danger");
-      return;
-    }
-    setButtonLoading(els.buttons.forgot, true);
-    try {
-      await auth.forgot({ email, method });
-      if (method === "code") {
-        sessionStorage.setItem("reset_email", email);
-        sessionStorage.setItem("reset_method", method);
-        if (els.labels.resetEmailDisplay) els.labels.resetEmailDisplay.textContent = email;
-        showView("resetCode");
-        showMessage("Reset code sent! Check your email.", "success");
-      } else {
-        showMessage("Magic link sent! Check your email and click the link.", "success");
-      }
-    } catch (err) {
-      showMessage(auth.getErrorMessage(err) || "Something went wrong. Please try again.", "danger");
-    } finally {
-      setButtonLoading(els.buttons.forgot, false);
-    }
-  }
-  async function handleResetCode(e) {
-    e?.preventDefault?.();
-    hideMessage();
-    const code = els.inputs.resetCode?.value?.trim();
-    const newPassword = els.inputs.resetPassword?.value;
-    const confirmPassword = els.inputs.resetPasswordConfirm?.value;
-    const email = sessionStorage.getItem("reset_email");
-    if (!email) {
-      showMessage("Session expired. Please restart the password reset process.", "danger");
-      showView("forgot");
-      return;
-    }
-    if (!code || !newPassword) {
-      showMessage(T.pleaseFillAllFields, "danger");
-      return;
-    }
-    if (newPassword !== confirmPassword) {
-      showMessage(T.passwordsDoNotMatch, "danger");
-      return;
-    }
-    setButtonLoading(els.buttons.resetCode, true);
-    try {
-      await auth.resetWithCode({ email, code, newPassword });
-      sessionStorage.removeItem("reset_email");
-      sessionStorage.removeItem("reset_method");
-      showMessage(T.successRedirecting, "success");
-      setTimeout(performRedirect, 350);
-    } catch (err) {
-      showMessage(auth.getErrorMessage(err) || "Invalid code or code expired.", "danger");
-      setButtonLoading(els.buttons.resetCode, false);
-    }
-  }
-  async function handleSetPassword(e) {
-    e?.preventDefault?.();
-    hideMessage();
-    const newPassword = els.inputs.setPassword?.value;
-    const confirmPassword = els.inputs.setPasswordConfirm?.value;
-    const token = sessionStorage.getItem("login_token");
-    if (!token) {
-      showMessage("Invalid or expired link. Please request a new one.", "danger");
-      showView("forgot");
-      return;
-    }
-    if (!newPassword) {
-      showMessage("Please enter a new password.", "danger");
-      return;
-    }
-    if (newPassword !== confirmPassword) {
-      showMessage(T.passwordsDoNotMatch, "danger");
-      return;
-    }
-    setButtonLoading(els.buttons.setPassword, true);
-    try {
-      await auth.resetWithToken({ token, newPassword });
-      sessionStorage.removeItem("login_token");
-      showMessage(T.successRedirecting, "success");
-      setTimeout(performRedirect, 350);
-    } catch (err) {
-      showMessage(auth.getErrorMessage(err) || "Invalid or expired link.", "danger");
-      setButtonLoading(els.buttons.setPassword, false);
-    }
-  }
-  function goToForgot(e) {
-    e?.preventDefault?.();
-    hideMessage();
-    showView("forgot");
-  }
-  function backToSignin() {
-    hideMessage();
-    showView("signin");
-  }
-  function backToForgot() {
-    hideMessage();
-    showView("forgot");
-  }
-  function bindProviders() {
-    if (providers?.google && els.buttons.google) {
-      els.buttons.google.addEventListener("click", (e) => {
-        e?.preventDefault?.();
-        providers.google.onClick?.({ container, auth, redirect: performRedirect, showMessage });
-      });
-    }
-    if (providers?.passkey && els.buttons.passkey) {
-      els.buttons.passkey.addEventListener("click", (e) => {
-        e?.preventDefault?.();
-        providers.passkey.onClick?.({ container, auth, redirect: performRedirect, showMessage });
-      });
-    }
-  }
-  els.forms.signin?.addEventListener("submit", handleSignin);
-  els.forms.forgot?.addEventListener("submit", handleForgot);
-  els.forms.resetCode?.addEventListener("submit", handleResetCode);
-  els.forms.setPassword?.addEventListener("submit", handleSetPassword);
-  els.links.forgot?.addEventListener("click", goToForgot);
-  els.buttons.backSignin?.addEventListener("click", backToSignin);
-  els.buttons.backForgot?.addEventListener("click", backToForgot);
-  bindProviders();
-  (function init() {
-    const params = new URLSearchParams(window.location.search);
-    const loginToken = params.get("login_token");
-    if (loginToken) {
-      sessionStorage.setItem("login_token", loginToken);
-      params.delete("login_token");
-      const newUrl = params.toString() ? `${window.location.pathname}?${params.toString()}` : window.location.pathname;
-      window.history.replaceState({}, "", newUrl);
-      showView("setPassword");
-      showMessage("Please set your new password.", "info");
-      return;
-    }
-    const resetEmail = sessionStorage.getItem("reset_email");
-    if (resetEmail) {
-      if (els.labels.resetEmailDisplay) els.labels.resetEmailDisplay.textContent = resetEmail;
-      showView("resetCode");
-      return;
-    }
-    showView("signin");
-  })();
-  return {
-    destroy() {
-      els.forms.signin?.removeEventListener("submit", handleSignin);
-      els.forms.forgot?.removeEventListener("submit", handleForgot);
-      els.forms.resetCode?.removeEventListener("submit", handleResetCode);
-      els.forms.setPassword?.removeEventListener("submit", handleSetPassword);
-      els.links.forgot?.removeEventListener("click", goToForgot);
-      els.buttons.backSignin?.removeEventListener("click", backToSignin);
-      els.buttons.backForgot?.removeEventListener("click", backToForgot);
-      if (providers?.google && els.buttons.google) {
-        els.buttons.google.replaceWith(els.buttons.google.cloneNode(true));
-      }
-      if (providers?.passkey && els.buttons.passkey) {
-        els.buttons.passkey.replaceWith(els.buttons.passkey.cloneNode(true));
-      }
-      container.innerHTML = "";
-    }
-  };
-}
-const index = {
-  mountAuth,
-  createAuthClient
-};
-const SimpleAuth = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
-  __proto__: null,
-  createAuthClient,
-  default: index,
-  mountAuth
-}, Symbol.toStringTag, { value: "Module" }));
-export {
-  B as BUILD_TIME,
-  a as VERSION,
-  V as VERSION_INFO,
-  b as VERSION_MAJOR,
-  c as VERSION_MINOR,
-  d as VERSION_REVISION,
-  createAuthClient,
-  SimpleAuth as default,
-  mountAuth
-};
+import{B as e,V as s,a as t,b as n,c as o,d as r}from"./chunks/version-C3dnl1bg.js";function a({baseURL:e,fetchImpl:s=("undefined"!=typeof fetch?fetch.bind(window):null),storage:t=("undefined"!=typeof localStorage?localStorage:null),endpoints:n={}}={}){if(!e)throw new Error("createAuthClient: baseURL is required");if(!s)throw new Error("createAuthClient: fetch implementation is not available in this environment");if(!t)throw new Error("createAuthClient: storage (localStorage) is not available in this environment");const o="access_token",r="refresh_token",a="user",i={login:"/login",forgot:"/auth/forgot",resetCode:"/auth/password/reset/code",resetToken:"/auth/password/reset/token",...n};async function l(t,n){const o=await s(`${e}${t}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(n||{})});let r={};try{r=await o.json()}catch(a){}if(!o.ok)throw r||{message:`Request failed with status ${o.status}`};return r}function d(e){return e&&e.data&&e.data.data||e&&e.data||e}function c(e){const s=d(e);if(!s||!s.access_token)throw new Error("No access_token in response.");t.setItem(o,s.access_token),s.refresh_token&&t.setItem(r,s.refresh_token),s.user&&t.setItem(a,JSON.stringify(s.user))}return{async login(e,s){const t=await l(i.login,{username:e,password:s});return c(t),d(t)},forgot:async({email:e,method:s})=>l(i.forgot,{email:e,method:s}),async resetWithCode({email:e,code:s,newPassword:t}){const n=await l(i.resetCode,{email:e,code:s,new_password:t});return c(n),d(n)},async resetWithToken({token:e,newPassword:s}){const t=await l(i.resetToken,{token:e,new_password:s});return c(t),d(t)},logout(){t.removeItem(o),t.removeItem(r),t.removeItem(a)},isAuthenticated:()=>!!t.getItem(o),getToken:()=>t.getItem(o),getUser(){const e=t.getItem(a);try{return e?JSON.parse(e):null}catch{return null}},getAuthHeader(){const e=t.getItem(o);return e?`Bearer ${e}`:null},getErrorMessage:function(e){return e?.message||e?.error||Array.isArray(e?.errors)&&e.errors[0]?.message||"An error occurred. Please try again."},parseResponse:d}}function i(e,s={}){if(!(e&&e instanceof Element))throw new Error("mountAuth: container must be a DOM Element");const{baseURL:t,onSuccessRedirect:n,allowRedirectOrigins:o,branding:r={},theme:i,endpoints:l,providers:d,texts:c={}}=s;if(!t)throw new Error("mountAuth: baseURL is required");const u=new URLSearchParams(window.location.search),m=u.get("redirect")||u.get("next")||u.get("returnTo"),p=String(n||m||"/");function g(){!function(e){if(!o||0===o.length)return!0;try{const s=new URL(e,window.location.origin);return o.includes(s.origin)}catch{return!1}}(p)?window.location.href="/":window.location.href=p.startsWith("http")?p:new URL(p,window.location.origin).href}const w=a({baseURL:t,endpoints:l}),b=r.title||"Sign In",f=r.subtitle||"Sign in to your account",h=r.logoUrl||"",y={emailOrUsername:c.emailOrUsername||"Email or Username",password:c.password||"Password",signIn:c.signIn||"Sign In",forgotPassword:c.forgotPassword||"Forgot password?",resetYourPassword:c.resetYourPassword||"Reset Your Password",emailAddress:c.emailAddress||"Email Address",resetMethod:c.resetMethod||"Reset Method",emailCode:c.emailCode||"Email me a code",emailLink:c.emailLink||"Email me a magic link",sendReset:c.sendReset||"Send Reset",back:c.back||"Back",enterResetCode:c.enterResetCode||"Enter Reset Code",weSentCodeTo:c.weSentCodeTo||"We sent a code to",resetCode:c.resetCode||"Reset Code",newPassword:c.newPassword||"New Password",confirmPassword:c.confirmPassword||"Confirm Password",resetPassword:c.resetPassword||"Reset Password",setYourNewPassword:c.setYourNewPassword||"Set Your New Password",setPassword:c.setPassword||"Set Password",invalidCredentials:c.invalidCredentials||"Invalid credentials.",successRedirecting:c.successRedirecting||"Success! Redirecting...",pleaseFillAllFields:c.pleaseFillAllFields||"Please fill in all fields.",passwordsDoNotMatch:c.passwordsDoNotMatch||"Passwords do not match."},v=`\n    <div class="auth-container">\n      <div class="auth-card">\n        <div class="auth-header">\n          ${h?`<img src="${h}" alt="${b}" style="max-height:60px;margin-bottom:10px" />`:""}\n          <h1 class="auth-title">${b}</h1>\n          <p class="auth-subtitle">${f}</p>\n        </div>\n\n        <div id="status-message" class="alert" role="status" style="display:none;"></div>\n\n        \x3c!-- Sign In View --\x3e\n        <div id="view-signin" class="auth-view">\n          <form id="form-signin" novalidate>\n            <div class="mb-3">\n              <label for="signin-username" class="form-label">${y.emailOrUsername}</label>\n              <input type="text" class="form-control" id="signin-username" placeholder="${y.emailOrUsername}" autocomplete="username" required />\n            </div>\n            <div class="mb-3">\n              <label for="signin-password" class="form-label">${y.password}</label>\n              <input type="password" class="form-control" id="signin-password" placeholder="${y.password}" autocomplete="current-password" required />\n            </div>\n            <button type="submit" class="btn btn-primary w-100 mb-3" id="btn-signin">\n              <span class="btn-text">${y.signIn}</span>\n              <span class="btn-spinner spinner-border spinner-border-sm" style="display:none;"></span>\n            </button>\n            <div class="text-center">\n              <a href="#" id="link-forgot" class="text-decoration-none">${y.forgotPassword}</a>\n            </div>\n\n            ${d&&(d.google||d.passkey)?`\n              <div class="position-relative my-3">\n                <hr class="text-muted" />\n                <span class="position-absolute top-50 start-50 translate-middle bg-white px-3 text-muted small">OR</span>\n              </div>\n              <div class="d-grid gap-2">\n                ${d.google?'<button type="button" class="btn btn-outline-primary" id="btn-google"><i class="bi bi-google me-2"></i>Continue with Google</button>':""}\n                ${d.passkey?'<button type="button" class="btn btn-outline-secondary" id="btn-passkey"><i class="bi bi-fingerprint me-2"></i>Sign in with Passkey</button>':""}\n              </div>\n            `:""}\n          </form>\n        </div>\n\n        \x3c!-- Forgot Password View --\x3e\n        <div id="view-forgot" class="auth-view" style="display:none;">\n          <button type="button" class="btn btn-link p-0 mb-3" id="btn-back-signin">\n            <span aria-hidden="true">←</span> ${y.back}\n          </button>\n          <h2 class="h5 mb-3">${y.resetYourPassword}</h2>\n          <form id="form-forgot" novalidate>\n            <div class="mb-3">\n              <label for="forgot-email" class="form-label">${y.emailAddress}</label>\n              <input type="email" class="form-control" id="forgot-email" placeholder="${y.emailAddress}" autocomplete="email" required />\n            </div>\n            <div class="mb-3">\n              <label class="form-label">${y.resetMethod}</label>\n              <div class="form-check">\n                <input class="form-check-input" type="radio" name="reset-method" id="method-code" value="code" checked />\n                <label class="form-check-label" for="method-code">${y.emailCode}</label>\n              </div>\n              <div class="form-check">\n                <input class="form-check-input" type="radio" name="reset-method" id="method-link" value="link" />\n                <label class="form-check-label" for="method-link">${y.emailLink}</label>\n              </div>\n            </div>\n            <button type="submit" class="btn btn-primary w-100" id="btn-forgot">\n              <span class="btn-text">${y.sendReset}</span>\n              <span class="btn-spinner spinner-border spinner-border-sm" style="display:none;"></span>\n            </button>\n          </form>\n        </div>\n\n        \x3c!-- Reset with Code View --\x3e\n        <div id="view-reset-code" class="auth-view" style="display:none;">\n          <button type="button" class="btn btn-link p-0 mb-3" id="btn-back-forgot">\n            <span aria-hidden="true">←</span> ${y.back}\n          </button>\n          <h2 class="h5 mb-3">${y.enterResetCode}</h2>\n          <p class="text-muted small mb-3">${y.weSentCodeTo} <strong id="reset-email-display"></strong></p>\n          <form id="form-reset-code" novalidate>\n            <div class="mb-3">\n              <label for="reset-code" class="form-label">${y.resetCode}</label>\n              <input type="text" class="form-control" id="reset-code" placeholder="${y.resetCode}" required />\n            </div>\n            <div class="mb-3">\n              <label for="reset-password" class="form-label">${y.newPassword}</label>\n              <input type="password" class="form-control" id="reset-password" placeholder="${y.newPassword}" autocomplete="new-password" required />\n            </div>\n            <div class="mb-3">\n              <label for="reset-password-confirm" class="form-label">${y.confirmPassword}</label>\n              <input type="password" class="form-control" id="reset-password-confirm" placeholder="${y.confirmPassword}" autocomplete="new-password" required />\n            </div>\n            <button type="submit" class="btn btn-primary w-100" id="btn-reset-code">\n              <span class="btn-text">${y.resetPassword}</span>\n              <span class="btn-spinner spinner-border spinner-border-sm" style="display:none;"></span>\n            </button>\n          </form>\n        </div>\n\n        \x3c!-- Set Password via Magic Link View --\x3e\n        <div id="view-set-password" class="auth-view" style="display:none;">\n          <h2 class="h5 mb-3">${y.setYourNewPassword}</h2>\n          <form id="form-set-password" novalidate>\n            <div class="mb-3">\n              <label for="set-password" class="form-label">${y.newPassword}</label>\n              <input type="password" class="form-control" id="set-password" placeholder="${y.newPassword}" autocomplete="new-password" required />\n            </div>\n            <div class="mb-3">\n              <label for="set-password-confirm" class="form-label">${y.confirmPassword}</label>\n              <input type="password" class="form-control" id="set-password-confirm" placeholder="${y.confirmPassword}" autocomplete="new-password" required />\n            </div>\n            <button type="submit" class="btn btn-primary w-100" id="btn-set-password">\n              <span class="btn-text">${y.setPassword}</span>\n              <span class="btn-spinner spinner-border spinner-border-sm" style="display:none;"></span>\n            </button>\n          </form>\n        </div>\n      </div>\n    </div>\n  `;e.innerHTML=v,i&&e.classList.add(String(i));const k={views:{signin:e.querySelector("#view-signin"),forgot:e.querySelector("#view-forgot"),resetCode:e.querySelector("#view-reset-code"),setPassword:e.querySelector("#view-set-password")},forms:{signin:e.querySelector("#form-signin"),forgot:e.querySelector("#form-forgot"),resetCode:e.querySelector("#form-reset-code"),setPassword:e.querySelector("#form-set-password")},buttons:{signin:e.querySelector("#btn-signin"),forgot:e.querySelector("#btn-forgot"),resetCode:e.querySelector("#btn-reset-code"),setPassword:e.querySelector("#btn-set-password"),backSignin:e.querySelector("#btn-back-signin"),backForgot:e.querySelector("#btn-back-forgot"),google:e.querySelector("#btn-google"),passkey:e.querySelector("#btn-passkey")},inputs:{signinUsername:e.querySelector("#signin-username"),signinPassword:e.querySelector("#signin-password"),forgotEmail:e.querySelector("#forgot-email"),resetCode:e.querySelector("#reset-code"),resetPassword:e.querySelector("#reset-password"),resetPasswordConfirm:e.querySelector("#reset-password-confirm"),setPassword:e.querySelector("#set-password"),setPasswordConfirm:e.querySelector("#set-password-confirm")},radios:{resetMethodCode:e.querySelector("#method-code"),resetMethodLink:e.querySelector("#method-link")},labels:{resetEmailDisplay:e.querySelector("#reset-email-display")},links:{forgot:e.querySelector("#link-forgot")},message:e.querySelector("#status-message")};function S(e){Object.entries(k.views).forEach(([s,t])=>{t&&(t.style.display=s===e?"block":"none")}),setTimeout(()=>{const s=k.views[e],t=s?.querySelector("h1, h2, .auth-title, .h5");if(t)t.setAttribute("tabindex","-1"),t.focus?.();else{const e=s?.querySelector("input, button");e?.focus?.()}},60)}function P(e,s="info"){const t=k.message;t&&(t.textContent=e,t.className=`alert alert-${s}`,t.style.display="block",t.setAttribute("role","danger"===s?"alert":"status"))}function C(){const e=k.message;e&&(e.style.display="none")}function E(e,s){if(!e)return;const t=e.querySelector(".btn-text"),n=e.querySelector(".btn-spinner");e.disabled=!!s,t&&(t.style.display=s?"none":"inline"),n&&(n.style.display=s?"inline-block":"none")}async function $(e){e?.preventDefault?.(),C();const s=k.inputs.signinUsername?.value?.trim(),t=k.inputs.signinPassword?.value;if(s&&t){E(k.buttons.signin,!0);try{await w.login(s,t),P(`${y.successRedirecting}`,"success"),setTimeout(g,350)}catch(n){P(w.getErrorMessage(n)||y.invalidCredentials,"danger"),E(k.buttons.signin,!1)}}else P("Please enter both username and password.","danger")}async function q(e){e?.preventDefault?.(),C();const s=k.inputs.forgotEmail?.value?.trim(),t=k.radios.resetMethodCode?.checked?"code":k.radios.resetMethodLink?.checked?"link":"code";if(s){E(k.buttons.forgot,!0);try{await w.forgot({email:s,method:t}),"code"===t?(sessionStorage.setItem("reset_email",s),sessionStorage.setItem("reset_method",t),k.labels.resetEmailDisplay&&(k.labels.resetEmailDisplay.textContent=s),S("resetCode"),P("Reset code sent! Check your email.","success")):P("Magic link sent! Check your email and click the link.","success")}catch(n){P(w.getErrorMessage(n)||"Something went wrong. Please try again.","danger")}finally{E(k.buttons.forgot,!1)}}else P("Please enter your email address.","danger")}async function R(e){e?.preventDefault?.(),C();const s=k.inputs.resetCode?.value?.trim(),t=k.inputs.resetPassword?.value,n=k.inputs.resetPasswordConfirm?.value,o=sessionStorage.getItem("reset_email");if(!o)return P("Session expired. Please restart the password reset process.","danger"),void S("forgot");if(s&&t)if(t===n){E(k.buttons.resetCode,!0);try{await w.resetWithCode({email:o,code:s,newPassword:t}),sessionStorage.removeItem("reset_email"),sessionStorage.removeItem("reset_method"),P(y.successRedirecting,"success"),setTimeout(g,350)}catch(r){P(w.getErrorMessage(r)||"Invalid code or code expired.","danger"),E(k.buttons.resetCode,!1)}}else P(y.passwordsDoNotMatch,"danger");else P(y.pleaseFillAllFields,"danger")}async function I(e){e?.preventDefault?.(),C();const s=k.inputs.setPassword?.value,t=k.inputs.setPasswordConfirm?.value,n=sessionStorage.getItem("login_token");if(!n)return P("Invalid or expired link. Please request a new one.","danger"),void S("forgot");if(s)if(s===t){E(k.buttons.setPassword,!0);try{await w.resetWithToken({token:n,newPassword:s}),sessionStorage.removeItem("login_token"),P(y.successRedirecting,"success"),setTimeout(g,350)}catch(o){P(w.getErrorMessage(o)||"Invalid or expired link.","danger"),E(k.buttons.setPassword,!1)}}else P(y.passwordsDoNotMatch,"danger");else P("Please enter a new password.","danger")}function x(e){e?.preventDefault?.(),C(),S("forgot")}function L(){C(),S("signin")}function _(){C(),S("forgot")}return k.forms.signin?.addEventListener("submit",$),k.forms.forgot?.addEventListener("submit",q),k.forms.resetCode?.addEventListener("submit",R),k.forms.setPassword?.addEventListener("submit",I),k.links.forgot?.addEventListener("click",x),k.buttons.backSignin?.addEventListener("click",L),k.buttons.backForgot?.addEventListener("click",_),d?.google&&k.buttons.google&&k.buttons.google.addEventListener("click",s=>{s?.preventDefault?.(),d.google.onClick?.({container:e,auth:w,redirect:g,showMessage:P})}),d?.passkey&&k.buttons.passkey&&k.buttons.passkey.addEventListener("click",s=>{s?.preventDefault?.(),d.passkey.onClick?.({container:e,auth:w,redirect:g,showMessage:P})}),function(){const e=new URLSearchParams(window.location.search),s=e.get("login_token");if(s){sessionStorage.setItem("login_token",s),e.delete("login_token");const t=e.toString()?`${window.location.pathname}?${e.toString()}`:window.location.pathname;return window.history.replaceState({},"",t),S("setPassword"),void P("Please set your new password.","info")}const t=sessionStorage.getItem("reset_email");if(t)return k.labels.resetEmailDisplay&&(k.labels.resetEmailDisplay.textContent=t),void S("resetCode");S("signin")}(),{destroy(){k.forms.signin?.removeEventListener("submit",$),k.forms.forgot?.removeEventListener("submit",q),k.forms.resetCode?.removeEventListener("submit",R),k.forms.setPassword?.removeEventListener("submit",I),k.links.forgot?.removeEventListener("click",x),k.buttons.backSignin?.removeEventListener("click",L),k.buttons.backForgot?.removeEventListener("click",_),d?.google&&k.buttons.google&&k.buttons.google.replaceWith(k.buttons.google.cloneNode(!0)),d?.passkey&&k.buttons.passkey&&k.buttons.passkey.replaceWith(k.buttons.passkey.cloneNode(!0)),e.innerHTML=""}}}const l={mountAuth:i,createAuthClient:a},d=/* @__PURE__ */Object.freeze(/* @__PURE__ */Object.defineProperty({__proto__:null,createAuthClient:a,default:l,mountAuth:i},Symbol.toStringTag,{value:"Module"}));export{e as BUILD_TIME,s as VERSION,t as VERSION_INFO,n as VERSION_MAJOR,o as VERSION_MINOR,r as VERSION_REVISION,a as createAuthClient,d as default,i as mountAuth};
 //# sourceMappingURL=auth.es.js.map