fix(ui): pass selected provider to createConnection and restore reverification

- createConnection now accepts the provider as a parameter instead of reading
  it from React state (which was stale within the same tick as setProvider)
- Restore the useReverification wrap on createConnection, matching the rest of
  @clerk/ui's user.* mutation pattern (createEmailAddress, delete, createTOTP,
  setPrimary, createWeb3Wallet, …) — handles backend session-reverification
  policy transparently when present, no-ops otherwise

Author: iagodahlem

packages/ui/src/components/ConfigureSSO/ConfigureSSOContext.tsx

@@ -1,4 +1,4 @@
-import { __internal_useUserEnterpriseConnections, useSession, useUser } from '@clerk/shared/react';
+import { __internal_useUserEnterpriseConnections, useReverification, useSession, useUser } from '@clerk/shared/react';
 import type { EnterpriseConnectionResource } from '@clerk/shared/types';
 import React, { type PropsWithChildren } from 'react';
 
@@ -30,12 +30,11 @@ export interface ConfigureSSOData {
    */
   setProvider: (provider: ProviderType) => void;
   /**
-   * Creates the enterprise connection from the current provider selection,
-   * the user's primary email domain, and the session's active organization.
-   * No-ops when an enterprise connection already exists so callers can
-   * safely re-trigger.
+   * Creates the enterprise connection for the supplied provider, the user's
+   * primary email domain, and the session's active organization. No-ops when
+   * an enterprise connection already exists so callers can safely re-trigger.
    */
-  createConnection: () => Promise<void>;
+  createConnection: (provider: ProviderType) => Promise<void>;
 }
 
 interface ConfigureSSOFlowProviderProps {
@@ -61,26 +60,28 @@ export const ConfigureSSOFlowProvider = ({
 
   const initialStepId = deriveInitialStep(enterpriseConnection);
 
-  const createConnection = React.useCallback(async () => {
-    if (enterpriseConnection) {
-      return;
-    }
-    if (!provider) {
-      throw new Error('Provider not selected');
-    }
-    if (!user?.primaryEmailAddress) {
-      throw new Error('Primary email required');
-    }
+  const createConnectionFetcher = React.useCallback(
+    async (selectedProvider: ProviderType) => {
+      if (enterpriseConnection) {
+        return;
+      }
+      if (!user?.primaryEmailAddress) {
+        throw new Error('Primary email required');
+      }
 
-    const emailDomain = user.primaryEmailAddress.emailAddress.split('@')[1];
-    const organizationId = session?.lastActiveOrganizationId ?? null;
+      const emailDomain = user.primaryEmailAddress.emailAddress.split('@')[1];
+      const organizationId = session?.lastActiveOrganizationId ?? null;
 
-    await createEnterpriseConnection({
-      provider: 'saml_okta',
-      name: emailDomain,
-      organizationId,
-    });
-  }, [enterpriseConnection, provider, user, session, createEnterpriseConnection]);
+      await createEnterpriseConnection({
+        provider: selectedProvider,
+        name: emailDomain,
+        organizationId,
+      });
+    },
+    [enterpriseConnection, user, session, createEnterpriseConnection],
+  );
+
+  const createConnection = useReverification(createConnectionFetcher);
 
   const value = React.useMemo<ConfigureSSOData>(
     () => ({
@@ -91,7 +92,7 @@ export const ConfigureSSOFlowProvider = ({
       setProvider,
       createConnection,
     }),
-    [initialStepId, enterpriseConnection, isLoading, provider, setProvider, createConnection],
+    [initialStepId, enterpriseConnection, isLoading, provider, createConnection],
   );
 
   return <ConfigureSSOFlowContext.Provider value={value}>{children}</ConfigureSSOFlowContext.Provider>;

packages/ui/src/components/ConfigureSSO/steps/SelectProviderStep.tsx

@@ -57,7 +57,7 @@ export const SelectProviderStep = (): JSX.Element => {
     card.setLoading();
 
     try {
-      await createConnection();
+      await createConnection(selected);
       void goNext();
     } catch (err) {
       handleError(err as Error, [], card.setError);

packages/ui/src/components/ConfigureSSO/steps/__tests__/SelectProviderStep.test.tsx

@@ -163,6 +163,7 @@ describe('SelectProviderStep', () => {
 
     expect(setProvider).toHaveBeenCalledWith('saml_okta');
     expect(createConnection).toHaveBeenCalledTimes(1);
+    expect(createConnection).toHaveBeenCalledWith('saml_okta');
     expect(callOrder).toEqual(['setProvider', 'createConnection', 'goNext']);
   });
 
@@ -180,6 +181,7 @@ describe('SelectProviderStep', () => {
 
     expect(setProvider).toHaveBeenCalledWith('saml_custom');
     expect(createConnection).toHaveBeenCalledTimes(1);
+    expect(createConnection).toHaveBeenCalledWith('saml_custom');
   });
 
   it('shows loading state while createConnection is pending', async () => {