Merge branch 'main' into elef/sdk-1003-inject-clerk-js-script-for-ssr

clerk · Apr 12, 2024 · ffa9071 · ffa9071
2 parents 3003b5c + 6ca6256
commit ffa9071
Show file tree

Hide file tree

Showing 201 changed files with 2,101 additions and 629 deletions.
diff --git a/.changeset/breezy-shirts-tell.md b/.changeset/breezy-shirts-tell.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/.changeset/clean-deers-mate.md b/.changeset/clean-deers-mate.md
@@ -0,0 +1,6 @@
+---
+'@clerk/backend': minor
+'@clerk/nextjs': minor
+---
+
+Implement token signature verification when passing verified token from Next.js middleware to the application origin.
diff --git a/.changeset/early-geese-kiss.md b/.changeset/early-geese-kiss.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/.changeset/eighty-pens-mix.md b/.changeset/eighty-pens-mix.md
@@ -0,0 +1,6 @@
+---
+'@clerk/clerk-js': minor
+'@clerk/types': minor
+---
+
+Add support for different CAPTCHA widget types
diff --git a/.changeset/fresh-turkeys-sit.md b/.changeset/fresh-turkeys-sit.md
@@ -0,0 +1,5 @@
+---
+'@clerk/clerk-js': patch
+---
+
+Resolve type issues when importing `@clerk/clerk-js` directly
diff --git a/.changeset/gorgeous-schools-drive.md b/.changeset/gorgeous-schools-drive.md
@@ -0,0 +1,40 @@
+---
+'@clerk/localizations': minor
+'@clerk/clerk-js': minor
+'@clerk/types': minor
+---
+
+Move passkey related apis to stable:
+
+- Register passkey for a user
+  Usage: `await clerk.user.createPasskey()`
+- Authenticate with passkey
+  Usage: `await clerk.client.signIn.authenticateWithPasskey()`
+  ```ts
+  try {
+    await clerk.client.signIn.authenticateWithPasskey(...args);
+  }catch (e) {
+    if (isClerkRuntimeError(e)) {
+        if (err.code === 'passkey_operation_aborted') {
+            ...
+        }
+    }
+  }
+  ```
+- ClerkRuntimeError codes introduced:
+  - `passkey_not_supported`
+  - `passkeys_pa_not_supported`
+  - `passkey_invalid_rpID_or_domain`
+  - `passkey_already_exists`
+  - `passkey_operation_aborted`
+  - `passkey_retrieval_cancelled`
+  - `passkey_retrieval_failed`
+  - `passkey_registration_cancelled`
+  - `passkey_registration_failed`
+
+- Get the user's passkeys
+  `clerk.user.passkeys`
+- Update the name of a passkey
+  `clerk.user.passkeys?.[0].update({name:'Company issued passkey'})`
+- Delete a passkey
+  `clerk.user.passkeys?.[0].delete()`
diff --git a/.changeset/mighty-dragons-build.md b/.changeset/mighty-dragons-build.md
@@ -0,0 +1,4 @@
+---
+---
+
+
diff --git a/.changeset/modern-bobcats-love.md b/.changeset/modern-bobcats-love.md
@@ -0,0 +1,5 @@
+---
+'@clerk/clerk-js': patch
+---
+
+Bug Fix: When authenticating with a passkey and user was looked out an error was thrown for accessing an undefined variable
diff --git a/.changeset/pre.json b/.changeset/pre.json
@@ -79,6 +79,7 @@
     "chilly-pens-speak",
     "chilly-suns-argue",
     "chilly-tips-compete",
+    "clean-deers-mate",
     "clean-files-hug",
     "clever-bananas-turn",
     "clever-cups-knock",
@@ -142,6 +143,7 @@
     "early-cars-cross",
     "early-dryers-lay",
     "early-forks-argue",
+    "early-geese-kiss",
     "early-poets-leave",
     "early-timers-wave",
     "early-tomatoes-hide",
@@ -153,6 +155,7 @@
     "eight-mangos-do",
     "eight-plants-melt",
     "eight-pots-guess",
+    "eighty-pens-mix",
     "eighty-planets-provide",
     "eighty-walls-appear",
     "eleven-bananas-joke",
@@ -216,6 +219,7 @@
     "four-ties-yawn",
     "fresh-crews-lick",
     "fresh-kings-join",
+    "fresh-turkeys-sit",
     "friendly-apricots-camp",
     "friendly-boats-chew",
     "friendly-months-film",
@@ -256,6 +260,7 @@
     "gorgeous-camels-mate",
     "gorgeous-camels-whisper",
     "gorgeous-insects-reply",
+    "gorgeous-schools-drive",
     "gorgeous-stingrays-lay",
     "great-falcons-knock",
     "great-moons-suffer",
@@ -397,6 +402,7 @@
     "metal-wolves-wave",
     "mighty-bulldogs-try",
     "mighty-cooks-admire",
+    "mighty-dragons-build",
     "mighty-kings-play",
     "mighty-melons-greet",
     "mighty-pugs-knock",
@@ -535,6 +541,7 @@
     "rotten-rats-protect",
     "rotten-tigers-rescue",
     "rotten-ways-do",
+    "rude-chefs-train",
     "rude-cows-fry",
     "rude-deers-fetch",
     "rude-falcons-grow",
@@ -629,6 +636,7 @@
     "smooth-numbers-shout",
     "smooth-pets-rhyme",
     "soft-apples-chew",
+    "soft-bees-bathe",
     "soft-birds-thank",
     "soft-donkeys-promise",
     "soft-fireants-jog",

diff --git a/.changeset/rare-shoes-hunt.md b/.changeset/rare-shoes-hunt.md
@@ -0,0 +1,5 @@
+---
+'@clerk/backend': patch
+---
+
+Trigger the handshake when no dev browser token exists in development.
diff --git a/.changeset/rude-beers-confess.md b/.changeset/rude-beers-confess.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/.changeset/rude-chefs-train.md b/.changeset/rude-chefs-train.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/.changeset/soft-bees-bathe.md b/.changeset/soft-bees-bathe.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/.changeset/unlucky-years-provide.md b/.changeset/unlucky-years-provide.md
@@ -0,0 +1,7 @@
+---
+'@clerk/localizations': patch
+'@clerk/clerk-js': patch
+'@clerk/types': patch
+---
+
+Renaming `passkeys_pa_not_supported` to `passkey_pa_not_supported` to align with the rest passkey error codes.
diff --git a/.changeset/witty-schools-occur.md b/.changeset/witty-schools-occur.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/.github/actions/init/action.yml b/.github/actions/init/action.yml
@@ -45,7 +45,7 @@ runs:
   steps:
     - name: Configure Turborepo
       id: turbo
-      uses: actions/github-script@v6
+      uses: actions/github-script@v7
       env:
         # envs are required to pass inputs to the script
         ENABLED: ${{ inputs.turbo-enabled }}
@@ -109,7 +109,7 @@ runs:
 
     - name: Cache Playwright Binaries
       if: inputs.playwright-enabled == 'true'
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       id: playwright-cache
       with:
         path: ~/.cache/ms-playwright

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -16,21 +16,19 @@ jobs:
   formatting-linting:
     name: Formatting, linting & changeset checks
     runs-on: ${{ vars.RUNNER_LARGE }}
-    timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_NORMAL) }}
+    timeout-minutes: 10
 
     env:
       TURBO_SUMMARIZE: false
 
     steps:
       - name: Checkout Repo
-        timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
           show-progress: false
 
       - name: Setup
-        timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
         id: config
         uses: ./.github/actions/init
         with:
@@ -44,7 +42,6 @@ jobs:
         shell: bash
 
       - name: Require Changeset
-        timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
         if: ${{ !(github.event_name == 'merge_group') }}
         run: if [ "${{ github.event.pull_request.user.login }}" = "clerk-cookie" ]; then echo 'Skipping' && exit 0; else npx changeset status --since=origin/main; fi
 
@@ -53,28 +50,22 @@ jobs:
         shell: bash
 
       - name: Check Formatting
-        timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
         run: npm run format:check
 
       - name: Build Packages
-        timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
         run: npx turbo build $TURBO_ARGS --only
 
       - name: Lint packages using publint
-        timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
         run: npx turbo lint:publint $TURBO_ARGS --only
 
       - name: Lint types using attw
-        timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
         run: npx turbo lint:attw $TURBO_ARGS --filter=!nextjs --filter=!elements --filter=!backend --only
 
       - name: Lint types using attw [Errors Allowed]
-        timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
         run: npx turbo lint:attw $TURBO_ARGS --filter=nextjs --filter=backend --filter=elements --continue --only
-        continue-on-error: true  # TODO: Remove this when all related errors are fixed
+        continue-on-error: true # TODO: Remove this when all related errors are fixed
 
       - name: Run lint
-        timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
         run: npx turbo lint $TURBO_ARGS --only -- --quiet
 
       - name: Upload Turbo Summary
@@ -90,14 +81,14 @@ jobs:
     name: Unit Tests
     needs: formatting-linting
     runs-on: ${{ vars.RUNNER_LARGE }}
-    timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_NORMAL) }}
+    timeout-minutes: 10
 
     env:
       TURBO_SUMMARIZE: false
 
     strategy:
       matrix:
-        node-version: [ 18, 20 ]
+        node-version: [18, 20]
 
     steps:
       - name: Checkout Repo
@@ -134,12 +125,12 @@ jobs:
     name: Integration Tests
     needs: formatting-linting
     runs-on: ${{ vars.RUNNER_MEDIUM }}
-    timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_NORMAL) }}
+    timeout-minutes: 10
 
     strategy:
       matrix:
-        test-name: [ 'generic', 'nextjs', 'express', 'quickstart', 'ap-flows' ]
-        test-project: [ 'chrome' ]
+        test-name: ['generic', 'nextjs', 'express', 'quickstart', 'ap-flows']
+        test-project: ['chrome']
 
     steps:
       - name: Checkout Repo

diff --git a/.github/workflows/e2e-cleanups.yml b/.github/workflows/e2e-cleanups.yml
@@ -3,13 +3,13 @@ on:
   workflow_dispatch:
   schedule:
     # run every 6 hours on every weekday
-    - cron: "0 */6 * * 1-5"
+    - cron: '0 */6 * * 1-5'
 
 jobs:
   integration-tests:
     name: Cleanup e2e instances
     runs-on: ${{ vars.RUNNER_NORMAL }}
-    timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_NORMAL) }}
+    timeout-minutes: 10
 
     steps:
       - name: Checkout Repo

diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml
@@ -17,7 +17,7 @@ concurrency:
 
 jobs:
   action:
-    timeout-minutes: ${{  fromJSON(vars.TIMEOUT_MINUTES_SHORT) }}
+    timeout-minutes: 3
     runs-on: ${{ vars.RUNNER_NORMAL }}
     steps:
       - uses: actions/stale@v9

diff --git a/.github/workflows/nightly-checks.yml b/.github/workflows/nightly-checks.yml
@@ -8,11 +8,11 @@ jobs:
   integration-tests:
     name: Integration Tests
     runs-on: ${{ vars.RUNNER_NORMAL }}
-    timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_NORMAL) }}
+    timeout-minutes: 10
 
     strategy:
       matrix:
-        test-name: [ 'nextjs' ]
+        test-name: ['nextjs']
 
     steps:
       - name: Checkout Repo

diff --git a/.github/workflows/preview.retheme.yml b/.github/workflows/preview.retheme.yml
@@ -17,7 +17,7 @@ concurrency:
 jobs:
   preview:
     runs-on: ${{ vars.RUNNER_NORMAL }}
-    timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_NORMAL) }}
+    timeout-minutes: 10
     permissions:
       contents: write
       pull-requests: write
@@ -32,7 +32,7 @@ jobs:
           turbo-signature: ${{ secrets.TURBO_REMOTE_CACHE_SIGNATURE_KEY }}
           turbo-team: ${{ vars.TURBO_TEAM }}
           turbo-token: ${{ secrets.TURBO_TOKEN }}
-          registry-url: "https://registry.npmjs.org"
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Build packages
         run: npx turbo build $TURBO_ARGS

diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
@@ -16,17 +16,19 @@ jobs:
   preview:
     if: ${{ startsWith(github.event.comment.body, '!preview') && github.repository == 'clerk/javascript' && github.event.issue.pull_request }}
     runs-on: ${{ vars.RUNNER_NORMAL }}
-    timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_NORMAL) }}
+    timeout-minutes: 10
 
     env:
       VERCEL_ORG_ID: ${{ secrets.VERCEL_CLERK_PROD_ORG_ID }}
       VERCEL_PROJECT_ID: ${{ secrets.VERCEL_JS_PREVIEW_PROJECT_ID }}
+
     permissions:
       contents: write
       pull-requests: write
+
     steps:
       - name: Limit action to Clerk members
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           result-encoding: string
           retries: 3
@@ -53,7 +55,7 @@ jobs:
           turbo-signature: ${{ secrets.TURBO_REMOTE_CACHE_SIGNATURE_KEY }}
           turbo-team: ${{ vars.TURBO_TEAM }}
           turbo-token: ${{ secrets.TURBO_TOKEN }}
-          registry-url: "https://registry.npmjs.org"
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Build packages
         run: npx turbo build $TURBO_ARGS

diff --git a/.github/workflows/release-canary.yml b/.github/workflows/release-canary.yml
@@ -14,7 +14,7 @@ jobs:
   canary-release:
     if: ${{ github.repository == 'clerk/javascript' }}
     runs-on: ${{ vars.RUNNER_NORMAL }}
-    timeout-minutes: ${{ fromJSON(vars.TIMEOUT_MINUTES_NORMAL) }}
+    timeout-minutes: 10
     env:
       TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
       TURBO_TEAM: ${{ vars.TURBO_TEAM }}
@@ -34,7 +34,7 @@ jobs:
           turbo-team: ${{ vars.TURBO_TEAM }}
           turbo-token: ${{ secrets.TURBO_TOKEN }}
           playwright-enabled: true # Must be present to enable caching on branched workflows
-          registry-url: "https://registry.npmjs.org"
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Version packages for canary
         id: version-packages
@@ -52,7 +52,7 @@ jobs:
           NPM_CONFIG_PROVENANCE: true
 
       - name: Trigger workflows on related repos
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           result-encoding: string
           retries: 3