feat(clerk-js,localizations,types): Enable email verification in UserProfile via enterprise SSO

.changeset/eighty-jobs-impress.md

@@ -0,0 +1,5 @@
+---
+'@clerk/types': minor
+---
+
+Deprecated `userProfile.emailAddressPage.emailLink.formHint` and `userProfile.emailAddressPage.emailCode.formHint` in favor of `userProfile.emailAddressPage.formHint`

.changeset/funny-camels-chew.md

@@ -0,0 +1,5 @@
+---
+'@clerk/localizations': minor
+---
+
+Unified `formHint` under `userProfile.emailAddressPage` for all first factor auth methods

.changeset/ninety-colts-bathe.md

@@ -0,0 +1,5 @@
+---
+'@clerk/clerk-js': minor
+---
+
+Enable email verification in `UserProfile` via enterprise SSO

packages/clerk-js/src/core/resources/EmailAddress.ts

@@ -2,21 +2,23 @@ import { Poller } from '@clerk/shared/poller';
 import type {
   AttemptEmailAddressVerificationParams,
   CreateEmailLinkFlowReturn,
+  CreateEnterpriseSSOLinkFlowReturn,
   EmailAddressJSON,
   EmailAddressJSONSnapshot,
   EmailAddressResource,
   IdentificationLinkResource,
   PrepareEmailAddressVerificationParams,
   StartEmailLinkFlowParams,
+  StartEnterpriseSSOLinkFlowParams,
   VerificationResource,
 } from '@clerk/types';
 
-import { clerkVerifyEmailAddressCalledBeforeCreate } from '../errors';
 import { BaseResource, IdentificationLink, Verification } from './internal';
 
 export class EmailAddress extends BaseResource implements EmailAddressResource {
   id!: string;
   emailAddress = '';
+  matchesSsoConnection = false;
   linkedTo: IdentificationLinkResource[] = [];
   verification!: VerificationResource;
 
@@ -52,9 +54,6 @@ export class EmailAddress extends BaseResource implements EmailAddressResource {
     const { run, stop } = Poller();
 
     const startEmailLinkFlow = async ({ redirectUrl }: StartEmailLinkFlowParams): Promise<EmailAddressResource> => {
-      if (!this.id) {
-        clerkVerifyEmailAddressCalledBeforeCreate('SignUp');
-      }
       await this.prepareVerification({
         strategy: 'email_link',
         redirectUrl: redirectUrl,
@@ -78,6 +77,41 @@ export class EmailAddress extends BaseResource implements EmailAddressResource {
     return { startEmailLinkFlow, cancelEmailLinkFlow: stop };
   };
 
+  createEnterpriseSSOLinkFlow = (): CreateEnterpriseSSOLinkFlowReturn<
+    StartEnterpriseSSOLinkFlowParams,
+    EmailAddressResource
+  > => {
+    const { run, stop } = Poller();
+
+    const startEnterpriseSSOLinkFlow = async ({
+      redirectUrl,
+    }: StartEnterpriseSSOLinkFlowParams): Promise<EmailAddressResource> => {
+      const response = await this.prepareVerification({
+        strategy: 'enterprise_sso',
+        redirectUrl,
+      });
+      if (!response.verification.externalVerificationRedirectURL) {
+        throw Error('Unexpected: External verification redirect URL is missing');
+      }
+      return new Promise((resolve, reject) => {
+        void run(() => {
+          return this.reload()
+            .then(res => {
+              if (res.verification.status === 'verified') {
+                stop();
+                resolve(res);
+              }
+            })
+            .catch(err => {
+              stop();
+              reject(err);
+            });
+        });
+      });
+    };
+    return { startEnterpriseSSOLinkFlow, cancelEnterpriseSSOLinkFlow: stop };
+  };
+
   destroy = (): Promise<void> => this._baseDelete();
 
   toString = (): string => this.emailAddress;
@@ -90,6 +124,7 @@ export class EmailAddress extends BaseResource implements EmailAddressResource {
     this.id = data.id;
     this.emailAddress = data.email_address;
     this.verification = new Verification(data.verification);
+    this.matchesSsoConnection = data.matches_sso_connection;
     this.linkedTo = (data.linked_to || []).map(link => new IdentificationLink(link));
     return this;
   }
@@ -101,6 +136,7 @@ export class EmailAddress extends BaseResource implements EmailAddressResource {
       email_address: this.emailAddress,
       verification: this.verification.__internal_toSnapshot(),
       linked_to: this.linkedTo.map(link => link.__internal_toSnapshot()),
+      matches_sso_connection: this.matchesSsoConnection,
     };
   }
 }

packages/clerk-js/src/ui/common/__tests__/redirects.test.ts

@@ -1,31 +1,31 @@
-import { buildEmailLinkRedirectUrl, buildSSOCallbackURL } from '../redirects';
+import { buildSSOCallbackURL, buildVerificationRedirectUrl, buildVerificationRedirectUrl } from '../redirects';
 
-describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
+describe('buildVerificationRedirectUrl(routing, baseUrl)', () => {
   it('defaults to hash based routing strategy on empty routing', function () {
     expect(
-      buildEmailLinkRedirectUrl({ ctx: { path: '', authQueryString: '' } as any, baseUrl: '', intent: 'sign-in' }),
+      buildVerificationRedirectUrl({ ctx: { path: '', authQueryString: '' } as any, baseUrl: '', intent: 'sign-in' }),
     ).toBe('http://localhost/#/verify');
   });
 
   it('returns the magic link redirect url for components using path based routing ', function () {
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: { routing: 'path', authQueryString: '' } as any,
         baseUrl: '',
         intent: 'sign-in',
       }),
     ).toBe('http://localhost/verify');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: { routing: 'path', path: '/sign-in', authQueryString: '' } as any,
         baseUrl: '',
         intent: 'sign-in',
       }),
     ).toBe('http://localhost/sign-in/verify');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'path',
           path: '',
@@ -37,7 +37,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
     ).toBe('http://localhost/verify?redirectUrl=https://clerk.com');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'path',
           path: '/sign-in',
@@ -49,7 +49,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
     ).toBe('http://localhost/sign-in/verify?redirectUrl=https://clerk.com');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'path',
           path: '/sign-in',
@@ -63,7 +63,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
 
   it('returns the magic link redirect url for components using hash based routing ', function () {
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'hash',
           authQueryString: '',
@@ -74,7 +74,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
     ).toBe('http://localhost/#/verify');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'hash',
           path: '/sign-in',
@@ -86,7 +86,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
     ).toBe('http://localhost/#/verify');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'hash',
           path: '',
@@ -98,7 +98,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
     ).toBe('http://localhost/#/verify?redirectUrl=https://clerk.com');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'hash',
           path: '/sign-in',
@@ -110,7 +110,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
     ).toBe('http://localhost/#/verify?redirectUrl=https://clerk.com');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'hash',
           path: '/sign-in',
@@ -124,7 +124,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
 
   it('returns the magic link redirect url for components using virtual routing ', function () {
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'virtual',
           authQueryString: 'redirectUrl=https://clerk.com',
@@ -135,7 +135,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
     ).toBe('https://accounts.clerk.com/sign-in#/verify?redirectUrl=https://clerk.com');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'virtual',
         } as any,
@@ -147,7 +147,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
 
   it('returns the magic link redirect url for components using the combined flow based on intent', function () {
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'path',
           path: '/sign-up',
@@ -159,7 +159,7 @@ describe('buildEmailLinkRedirectUrl(routing, baseUrl)', () => {
     ).toBe('http://localhost/sign-up/create/verify');
 
     expect(
-      buildEmailLinkRedirectUrl({
+      buildVerificationRedirectUrl({
         ctx: {
           routing: 'path',
           path: '/sign-in',

packages/clerk-js/src/ui/common/redirects.ts

@@ -4,7 +4,7 @@ import type { SignInContextType, SignUpContextType, UserProfileContextType } fro
 export const SSO_CALLBACK_PATH_ROUTE = '/sso-callback';
 export const MAGIC_LINK_VERIFY_PATH_ROUTE = '/verify';
 
-export function buildEmailLinkRedirectUrl({
+export function buildVerificationRedirectUrl({
   ctx,
   baseUrl = '',
   intent = 'sign-in',

packages/clerk-js/src/ui/components/SignIn/SignInFactorOneEmailLinkCard.tsx

@@ -4,7 +4,7 @@ import type { EmailLinkFactor, SignInResource } from '@clerk/types';
 import React from 'react';
 
 import { EmailLinkStatusCard } from '../../common';
-import { buildEmailLinkRedirectUrl } from '../../common/redirects';
+import { buildVerificationRedirectUrl } from '../../common/redirects';
 import { useCoreSignIn, useSignInContext } from '../../contexts';
 import { Flow, localizationKeys, useLocalizations } from '../../customizables';
 import type { VerificationCodeCardProps } from '../../elements';
@@ -45,7 +45,7 @@ export const SignInFactorOneEmailLinkCard = (props: SignInFactorOneEmailLinkCard
   const startEmailLinkVerification = () => {
     startEmailLinkFlow({
       emailAddressId: props.factor.emailAddressId,
-      redirectUrl: buildEmailLinkRedirectUrl({ ctx: signInContext, baseUrl: signInUrl, intent: 'sign-in' }),
+      redirectUrl: buildVerificationRedirectUrl({ ctx: signInContext, baseUrl: signInUrl, intent: 'sign-in' }),
     })
       .then(res => handleVerificationResult(res))
       .catch(err => {

packages/clerk-js/src/ui/components/UserProfile/ConnectedAccountsSection.tsx

@@ -164,7 +164,7 @@ const ConnectedAccount = ({ account }: { account: ExternalAccountResource }) =>
           <ImageOrInitial />
           <Box sx={{ whiteSpace: 'nowrap', overflow: 'hidden' }}>
             <Flex
-              gap={2}
+              gap={1}
               center
             >
               <Text sx={t => ({ color: t.colors.$colorText })}>{`${