@asgardeo/browser 0.1.0 → 0.1.2

package/dist/cjs/index.js

@@ -1940,12 +1940,13 @@ __export(index_exports, {
   ResponseType: () => import_axios2.ResponseType,
   SPAHelper: () => SPAHelper,
   SPAUtils: () => SPAUtils,
-  StyleConstants: () => StyleConstants_default,
   TOKEN_REQUEST_CONFIG_KEY: () => TOKEN_REQUEST_CONFIG_KEY,
   WebWorkerClass: () => WebWorkerClass,
   WebWorkerClient: () => WebWorkerClient,
+  createClassObserver: () => createClassObserver,
+  createMediaQueryListener: () => createMediaQueryListener,
+  detectThemeMode: () => detectThemeMode,
   hasAuthParamsInUrl: () => hasAuthParamsInUrl_default,
-  withVendorCSSClassPrefix: () => withVendorCSSClassPrefix_default,
   workerReceiver: () => workerReceiver
 });
 module.exports = __toCommonJS(index_exports);
@@ -1954,7 +1955,7 @@ module.exports = __toCommonJS(index_exports);
 var import_javascript8 = require("@asgardeo/javascript");
 
 // src/__legacy__/clients/main-thread-client.ts
-var import_javascript6 = require("@asgardeo/javascript");
+var import_javascript5 = require("@asgardeo/javascript");
 
 // src/__legacy__/constants/messages-types.ts
 var INIT = "init";
@@ -2024,7 +2025,7 @@ var STATE_QUERY = "state";
 // src/__legacy__/constants/errors.ts
 var ACCESS_TOKEN_INVALID = "Access token is invalid";
 
-// src/__legacy__/helpers/authentication-helper.ts
+// src/__legacy__/helpers/session-management-helper.ts
 var import_javascript2 = require("@asgardeo/javascript");
 
 // src/__legacy__/utils/message-utils.ts
@@ -2239,665 +2240,156 @@ __publicField(_SPAUtils, "until", (condition, timeout = 500) => {
 });
 var SPAUtils = _SPAUtils;
 
-// src/__legacy__/helpers/authentication-helper.ts
-var AuthenticationHelper = class {
-  constructor(authClient, spaHelper) {
-    __publicField(this, "_authenticationClient");
-    __publicField(this, "_storageManager");
-    __publicField(this, "_spaHelper");
-    __publicField(this, "_instanceID");
-    __publicField(this, "_isTokenRefreshing");
-    this._authenticationClient = authClient;
-    this._storageManager = this._authenticationClient.getStorageManager();
-    this._spaHelper = spaHelper;
-    this._instanceID = this._authenticationClient.getInstanceId();
-    this._isTokenRefreshing = false;
-  }
-  enableHttpHandler(httpClient) {
-    httpClient?.enableHandler && httpClient.enableHandler();
-  }
-  disableHttpHandler(httpClient) {
-    httpClient?.disableHandler && httpClient.disableHandler();
-  }
-  initializeSessionManger(config, oidcEndpoints, getSessionState, getAuthzURL, sessionManagementHelper) {
-    sessionManagementHelper.initialize(
-      config.clientId,
-      oidcEndpoints.checkSessionIframe ?? "",
-      getSessionState,
-      config.checkSessionInterval ?? 3,
-      config.sessionRefreshInterval ?? 300,
-      config.afterSignInUrl,
-      getAuthzURL
-    );
-  }
-  async exchangeToken(config, enableRetrievingSignOutURLFromSession) {
-    let useDefaultEndpoint = true;
-    let matches = false;
-    if (config?.tokenEndpoint) {
-      useDefaultEndpoint = false;
-      for (const baseUrl of [
-        ...(await this._storageManager.getConfigData())?.resourceServerURLs ?? [],
-        config.baseUrl
-      ]) {
-        if (baseUrl && config.tokenEndpoint?.startsWith(baseUrl)) {
-          matches = true;
-          break;
-        }
-      }
+// src/__legacy__/helpers/session-management-helper.ts
+var SessionManagementHelper = /* @__PURE__ */ (() => {
+  let _clientID;
+  let _checkSessionEndpoint;
+  let _sessionState;
+  let _interval;
+  let _redirectURL;
+  let _sessionRefreshInterval;
+  let _signOut;
+  let _sessionRefreshIntervalTimeout;
+  let _checkSessionIntervalTimeout;
+  let _storage;
+  let _setSessionState;
+  let _getSignInUrl;
+  const initialize = (clientId, checkSessionEndpoint, getSessionState, interval, sessionRefreshInterval, redirectURL, getSignInUrl) => {
+    _clientID = clientId;
+    _checkSessionEndpoint = checkSessionEndpoint;
+    _sessionState = getSessionState;
+    _interval = interval;
+    _redirectURL = redirectURL;
+    _sessionRefreshInterval = sessionRefreshInterval;
+    _getSignInUrl = getSignInUrl;
+    if (_interval > -1) {
+      initiateCheckSession();
     }
-    if (config.shouldReplayAfterRefresh) {
-      this._storageManager.setTemporaryDataParameter(CUSTOM_GRANT_CONFIG, JSON.stringify(config));
+    if (_sessionRefreshInterval > -1) {
+      sessionRefreshInterval = setInterval(() => {
+        sendPromptNoneRequest();
+      }, _sessionRefreshInterval * 1e3);
     }
-    if (useDefaultEndpoint || matches) {
-      return this._authenticationClient.exchangeToken(config).then(async (response) => {
-        if (enableRetrievingSignOutURLFromSession && typeof enableRetrievingSignOutURLFromSession === "function") {
-          enableRetrievingSignOutURLFromSession(config);
-        }
-        if (config.returnsSession) {
-          this._spaHelper.refreshAccessTokenAutomatically(this);
-          return this._authenticationClient.getUser();
-        } else {
-          return response;
-        }
-      }).catch((error) => {
-        return Promise.reject(error);
-      });
-    } else {
-      return Promise.reject(
-        new import_javascript2.AsgardeoAuthException(
-          "SPA-MAIN_THREAD_CLIENT-RCG-IV01",
-          "Request to the provided endpoint is prohibited.",
-          "Requests can only be sent to resource servers specified by the `resourceServerURLs` attribute while initializing the SDK. The specified token endpoint in this request cannot be found among the `resourceServerURLs`"
-        )
-      );
+  };
+  const initiateCheckSession = async () => {
+    if (!_checkSessionEndpoint || !_clientID || !_redirectURL) {
+      return;
     }
-  }
-  async getCustomGrantConfigData() {
-    const configString = await this._storageManager.getTemporaryDataParameter(CUSTOM_GRANT_CONFIG);
-    if (configString) {
-      return JSON.parse(configString);
-    } else {
-      return null;
+    const OP_IFRAME2 = "opIFrame";
+    async function checkSession() {
+      const sessionState = await _sessionState();
+      if (Boolean(_clientID) && Boolean(sessionState)) {
+        const message = `${_clientID} ${sessionState}`;
+        const rpIFrame2 = document.getElementById(RP_IFRAME);
+        const opIframe2 = rpIFrame2?.contentDocument?.getElementById(OP_IFRAME2);
+        const win = opIframe2.contentWindow;
+        win?.postMessage(message, _checkSessionEndpoint);
+      }
     }
-  }
-  async refreshAccessToken(enableRetrievingSignOutURLFromSession) {
-    try {
-      await this._authenticationClient.refreshAccessToken();
-      const customGrantConfig = await this.getCustomGrantConfigData();
-      if (customGrantConfig) {
-        await this.exchangeToken(customGrantConfig, enableRetrievingSignOutURLFromSession);
+    const rpIFrame = document.getElementById(RP_IFRAME);
+    const opIframe = rpIFrame?.contentDocument?.getElementById(OP_IFRAME2);
+    opIframe.src = _checkSessionEndpoint + "?client_id=" + _clientID + "&redirect_uri=" + _redirectURL;
+    _checkSessionIntervalTimeout = setInterval(checkSession, _interval * 1e3);
+    listenToResponseFromOPIFrame();
+  };
+  const reset = () => {
+    clearInterval(_checkSessionIntervalTimeout);
+    clearInterval(_sessionRefreshIntervalTimeout);
+  };
+  const listenToResponseFromOPIFrame = () => {
+    async function receiveMessage(e) {
+      const targetOrigin = _checkSessionEndpoint;
+      if (!targetOrigin || targetOrigin?.indexOf(e.origin) < 0 || e?.data?.type === SET_SESSION_STATE_FROM_IFRAME) {
+        return;
       }
-      this._spaHelper.refreshAccessTokenAutomatically(this);
-      return this._authenticationClient.getUser();
-    } catch (error) {
-      const refreshTokenError = {
-        type: REFRESH_ACCESS_TOKEN_ERR0R
+      if (e.data === "unchanged") {
+      } else if (e.data === "error") {
+        window.location.href = await _signOut();
+      } else if (e.data === "changed") {
+        sendPromptNoneRequest();
+      }
+    }
+    window?.addEventListener("message", receiveMessage, false);
+  };
+  const sendPromptNoneRequest = async () => {
+    const rpIFrame = document.getElementById(RP_IFRAME);
+    const promptNoneIFrame = rpIFrame?.contentDocument?.getElementById(
+      PROMPT_NONE_IFRAME
+    );
+    if (SPAUtils.canSendPromptNoneRequest()) {
+      SPAUtils.setPromptNoneRequestSent(true);
+      const receiveMessageListener = (e) => {
+        if (e?.data?.type === SET_SESSION_STATE_FROM_IFRAME) {
+          _setSessionState(e?.data?.data ?? "");
+          window?.removeEventListener("message", receiveMessageListener);
+        }
       };
-      window.postMessage(refreshTokenError);
-      return Promise.reject(error);
+      if (_storage === "browserMemory" /* BrowserMemory */ || _storage === "webWorker" /* WebWorker */) {
+        window?.addEventListener("message", receiveMessageListener);
+      }
+      const promptNoneURL = await _getSignInUrl({
+        prompt: "none",
+        response_mode: "query",
+        state: STATE
+      });
+      promptNoneIFrame.src = promptNoneURL;
     }
-  }
-  async retryFailedRequests(failedRequest) {
-    const httpClient = failedRequest.httpClient;
-    const requestConfig = failedRequest.requestConfig;
-    const isHttpHandlerEnabled = failedRequest.isHttpHandlerEnabled;
-    const httpErrorCallback = failedRequest.httpErrorCallback;
-    const httpFinishCallback = failedRequest.httpFinishCallback;
-    await SPAUtils.until(() => !this._isTokenRefreshing);
-    try {
-      const httpResponse = await httpClient.request(requestConfig);
-      return Promise.resolve(httpResponse);
-    } catch (error) {
-      if (isHttpHandlerEnabled) {
-        if (typeof httpErrorCallback === "function") {
-          await httpErrorCallback(error);
+  };
+  const receivePromptNoneResponse = async (setSessionState) => {
+    const state = new URL(window.location.href).searchParams.get(STATE_QUERY);
+    const sessionState = new URL(window.location.href).searchParams.get(import_javascript2.OIDCRequestConstants.Params.SESSION_STATE);
+    const parent = window.parent.parent;
+    if (state !== null && (state.includes(STATE) || state.includes(SILENT_SIGN_IN_STATE))) {
+      const code = new URL(window.location.href).searchParams.get("code");
+      if (code !== null && code.length !== 0) {
+        if (state.includes(SILENT_SIGN_IN_STATE)) {
+          const message = {
+            data: {
+              code,
+              sessionState: sessionState ?? "",
+              state
+            },
+            type: CHECK_SESSION_SIGNED_IN
+          };
+          sessionStorage.setItem(INITIALIZED_SILENT_SIGN_IN, "false");
+          parent.postMessage(message, parent.origin);
+          SPAUtils.setPromptNoneRequestSent(false);
+          window.location.href = "about:blank";
+          await SPAUtils.waitTillPageRedirect();
+          return true;
         }
-        if (typeof httpFinishCallback === "function") {
-          httpFinishCallback();
+        const newSessionState = new URL(window.location.href).searchParams.get("session_state");
+        if (_storage === "localStorage" /* LocalStorage */ || _storage === "sessionStorage" /* SessionStorage */) {
+          setSessionState && await setSessionState(newSessionState);
+        } else {
+          const message = {
+            data: newSessionState ?? "",
+            type: SET_SESSION_STATE_FROM_IFRAME
+          };
+          window?.parent?.parent?.postMessage(message);
+        }
+        SPAUtils.setPromptNoneRequestSent(false);
+        window.location.href = "about:blank";
+        await SPAUtils.waitTillPageRedirect();
+        return true;
+      } else {
+        if (state.includes(SILENT_SIGN_IN_STATE)) {
+          const message = {
+            type: CHECK_SESSION_SIGNED_OUT
+          };
+          window.parent.parent.postMessage(message, parent.origin);
+          SPAUtils.setPromptNoneRequestSent(false);
+          window.location.href = "about:blank";
+          await SPAUtils.waitTillPageRedirect();
+          return true;
         }
-      }
-      return Promise.reject(error);
-    }
-  }
-  async httpRequest(httpClient, requestConfig, isHttpHandlerEnabled, httpErrorCallback, httpFinishCallback, enableRetrievingSignOutURLFromSession) {
-    let matches = false;
-    const config = await this._storageManager.getConfigData();
-    for (const baseUrl of [...await config?.resourceServerURLs ?? [], config.baseUrl]) {
-      if (baseUrl && requestConfig?.url?.startsWith(baseUrl)) {
-        matches = true;
-        break;
-      }
-    }
-    if (matches) {
-      return httpClient.request(requestConfig).then((response) => {
-        return Promise.resolve(response);
-      }).catch(async (error) => {
-        if (error?.response?.status === 401 || !error?.response) {
-          if (this._isTokenRefreshing) {
-            return this.retryFailedRequests({
-              enableRetrievingSignOutURLFromSession,
-              httpClient,
-              httpErrorCallback,
-              httpFinishCallback,
-              isHttpHandlerEnabled,
-              requestConfig
-            });
-          }
-          this._isTokenRefreshing = true;
-          let refreshAccessTokenResponse;
-          try {
-            refreshAccessTokenResponse = await this.refreshAccessToken(enableRetrievingSignOutURLFromSession);
-            this._isTokenRefreshing = false;
-          } catch (refreshError) {
-            this._isTokenRefreshing = false;
-            if (isHttpHandlerEnabled) {
-              if (typeof httpErrorCallback === "function") {
-                await httpErrorCallback({
-                  ...error,
-                  code: ACCESS_TOKEN_INVALID
-                });
-              }
-              if (typeof httpFinishCallback === "function") {
-                httpFinishCallback();
-              }
-            }
-            throw new import_javascript2.AsgardeoAuthException(
-              "SPA-AUTH_HELPER-HR-SE01",
-              refreshError?.name ?? "Refresh token request failed.",
-              refreshError?.message ?? "An error occurred while trying to refresh the access token following a 401 response from the server."
-            );
-          }
-          if (refreshAccessTokenResponse) {
-            try {
-              const httpResponse = await httpClient.request(requestConfig);
-              return Promise.resolve(httpResponse);
-            } catch (error2) {
-              if (isHttpHandlerEnabled) {
-                if (typeof httpErrorCallback === "function") {
-                  await httpErrorCallback(error2);
-                }
-                if (typeof httpFinishCallback === "function") {
-                  httpFinishCallback();
-                }
-              }
-              return Promise.reject(error2);
-            }
-          }
-        }
-        if (isHttpHandlerEnabled) {
-          if (typeof httpErrorCallback === "function") {
-            await httpErrorCallback(error);
-          }
-          if (typeof httpFinishCallback === "function") {
-            httpFinishCallback();
-          }
-        }
-        return Promise.reject(error);
-      });
-    } else {
-      return Promise.reject(
-        new import_javascript2.AsgardeoAuthException(
-          "SPA-AUTH_HELPER-HR-IV02",
-          "Request to the provided endpoint is prohibited.",
-          "Requests can only be sent to resource servers specified by the `resourceServerURLs` attribute while initializing the SDK. The specified endpoint in this request cannot be found among the `resourceServerURLs`"
-        )
-      );
-    }
-  }
-  async httpRequestAll(requestConfigs, httpClient, isHttpHandlerEnabled, httpErrorCallback, httpFinishCallback) {
-    let matches = true;
-    const config = await this._storageManager.getConfigData();
-    for (const requestConfig of requestConfigs) {
-      let urlMatches = false;
-      for (const baseUrl of [...(await config)?.resourceServerURLs ?? [], config.baseUrl]) {
-        if (baseUrl && requestConfig.url?.startsWith(baseUrl)) {
-          urlMatches = true;
-          break;
-        }
-      }
-      if (!urlMatches) {
-        matches = false;
-        break;
-      }
-    }
-    const requests = [];
-    if (matches) {
-      requestConfigs.forEach((request) => {
-        requests.push(httpClient.request(request));
-      });
-      return httpClient?.all && httpClient.all(requests).then((responses) => {
-        return Promise.resolve(responses);
-      }).catch(async (error) => {
-        if (error?.response?.status === 401 || !error?.response) {
-          let refreshTokenResponse;
-          try {
-            refreshTokenResponse = await this._authenticationClient.refreshAccessToken();
-          } catch (refreshError) {
-            if (isHttpHandlerEnabled) {
-              if (typeof httpErrorCallback === "function") {
-                await httpErrorCallback({
-                  ...error,
-                  code: ACCESS_TOKEN_INVALID
-                });
-              }
-              if (typeof httpFinishCallback === "function") {
-                httpFinishCallback();
-              }
-            }
-            throw new import_javascript2.AsgardeoAuthException(
-              "SPA-AUTH_HELPER-HRA-SE01",
-              refreshError?.name ?? "Refresh token request failed.",
-              refreshError?.message ?? "An error occurred while trying to refresh the access token following a 401 response from the server."
-            );
-          }
-          if (refreshTokenResponse) {
-            return httpClient.all && httpClient.all(requests).then((response) => {
-              return Promise.resolve(response);
-            }).catch(async (error2) => {
-              if (isHttpHandlerEnabled) {
-                if (typeof httpErrorCallback === "function") {
-                  await httpErrorCallback(error2);
-                }
-                if (typeof httpFinishCallback === "function") {
-                  httpFinishCallback();
-                }
-              }
-              return Promise.reject(error2);
-            });
-          }
-        }
-        if (isHttpHandlerEnabled) {
-          if (typeof httpErrorCallback === "function") {
-            await httpErrorCallback(error);
-          }
-          if (typeof httpFinishCallback === "function") {
-            httpFinishCallback();
-          }
-        }
-        return Promise.reject(error);
-      });
-    } else {
-      throw new import_javascript2.AsgardeoAuthException(
-        "SPA-AUTH_HELPER-HRA-IV02",
-        "Request to the provided endpoint is prohibited.",
-        "Requests can only be sent to resource servers specified by the `resourceServerURLs` attribute while initializing the SDK. The specified endpoint in this request cannot be found among the `resourceServerURLs`"
-      );
-    }
-  }
-  async requestAccessToken(authorizationCode, sessionState, checkSession, pkce, state, tokenRequestConfig) {
-    const config = await this._storageManager.getConfigData();
-    if (config.storage === "browserMemory" /* BrowserMemory */ && config.enablePKCE && sessionState) {
-      const pkce2 = SPAUtils.getPKCE((0, import_javascript2.extractPkceStorageKeyFromState)(sessionState));
-      await this._authenticationClient.setPKCECode((0, import_javascript2.extractPkceStorageKeyFromState)(sessionState), pkce2);
-    } else if (config.storage === "webWorker" /* WebWorker */ && pkce) {
-      await this._authenticationClient.setPKCECode(pkce, state ?? "");
-    }
-    if (authorizationCode) {
-      return this._authenticationClient.requestAccessToken(authorizationCode, sessionState ?? "", state ?? "", void 0, tokenRequestConfig).then(async () => {
-        if (config.storage !== "webWorker" /* WebWorker */) {
-          SPAUtils.setSignOutURL(await this._authenticationClient.getSignOutUrl(), config.clientId, this._instanceID);
-          if (this._spaHelper) {
-            this._spaHelper.clearRefreshTokenTimeout();
-            this._spaHelper.refreshAccessTokenAutomatically(this);
-          }
-          if (checkSession && typeof checkSession === "function" && config.enableOIDCSessionManagement) {
-            checkSession();
-          }
-        } else {
-          if (this._spaHelper) {
-            this._spaHelper.refreshAccessTokenAutomatically(this);
-          }
-        }
-        return this._authenticationClient.getUser();
-      }).catch((error) => {
-        return Promise.reject(error);
-      });
-    }
-    return Promise.reject(
-      new import_javascript2.AsgardeoAuthException(
-        "SPA-AUTH_HELPER-RAT1-NF01",
-        "No authorization code.",
-        "No authorization code was found."
-      )
-    );
-  }
-  async trySignInSilently(constructSilentSignInUrl, requestAccessToken, sessionManagementHelper, additionalParams, tokenRequestConfig) {
-    if (SPAUtils.isInitializedSilentSignIn()) {
-      await sessionManagementHelper.receivePromptNoneResponse();
-      return Promise.resolve({
-        allowedScopes: "",
-        displayName: "",
-        email: "",
-        sessionState: "",
-        sub: "",
-        tenantDomain: "",
-        username: ""
-      });
-    }
-    const rpIFrame = document.getElementById(RP_IFRAME);
-    const promptNoneIFrame = rpIFrame?.contentDocument?.getElementById(
-      PROMPT_NONE_IFRAME
-    );
-    try {
-      const url = await constructSilentSignInUrl(additionalParams);
-      promptNoneIFrame.src = url;
-    } catch (error) {
-      return Promise.reject(error);
-    }
-    return new Promise((resolve, reject) => {
-      const timer = setTimeout(() => {
-        resolve(false);
-      }, 1e4);
-      const listenToPromptNoneIFrame = async (e) => {
-        const data = e.data;
-        if (data?.type == CHECK_SESSION_SIGNED_OUT) {
-          window.removeEventListener("message", listenToPromptNoneIFrame);
-          clearTimeout(timer);
-          resolve(false);
-        }
-        if (data?.type == CHECK_SESSION_SIGNED_IN && data?.data?.code) {
-          requestAccessToken(data?.data?.code, data?.data?.sessionState, data?.data?.state, tokenRequestConfig).then((response) => {
-            window.removeEventListener("message", listenToPromptNoneIFrame);
-            resolve(response);
-          }).catch((error) => {
-            window.removeEventListener("message", listenToPromptNoneIFrame);
-            reject(error);
-          }).finally(() => {
-            clearTimeout(timer);
-          });
-        }
-      };
-      window.addEventListener("message", listenToPromptNoneIFrame);
-    });
-  }
-  async handleSignIn(shouldStopAuthn, checkSession, tryRetrievingUserInfo) {
-    const config = await this._storageManager.getConfigData();
-    if (await shouldStopAuthn()) {
-      return Promise.resolve({
-        allowedScopes: "",
-        displayName: "",
-        email: "",
-        sessionState: "",
-        sub: "",
-        tenantDomain: "",
-        username: ""
-      });
-    }
-    if (config.storage !== "webWorker" /* WebWorker */) {
-      if (await this._authenticationClient.isSignedIn()) {
-        this._spaHelper.clearRefreshTokenTimeout();
-        this._spaHelper.refreshAccessTokenAutomatically(this);
-        if (config.enableOIDCSessionManagement) {
-          checkSession();
-        }
-        return Promise.resolve(await this._authenticationClient.getUser());
-      }
-    }
-    const error = new URL(window.location.href).searchParams.get(ERROR);
-    const errorDescription = new URL(window.location.href).searchParams.get(ERROR_DESCRIPTION);
-    if (error) {
-      const url = new URL(window.location.href);
-      url.searchParams.delete(ERROR);
-      url.searchParams.delete(ERROR_DESCRIPTION);
-      history.pushState(null, document.title, url.toString());
-      throw new import_javascript2.AsgardeoAuthException("SPA-AUTH_HELPER-SI-SE01", error, errorDescription ?? "");
-    }
-    if (config.storage === "webWorker" /* WebWorker */ && tryRetrievingUserInfo) {
-      const basicUserInfo = await tryRetrievingUserInfo();
-      if (basicUserInfo) {
-        return basicUserInfo;
-      }
-    }
-    return Promise.resolve(void 0);
-  }
-  async attachTokenToRequestConfig(request) {
-    const requestConfig = { attachToken: true, ...request };
-    if (requestConfig.attachToken) {
-      if (requestConfig.shouldAttachIDPAccessToken) {
-        request.headers = {
-          ...request.headers,
-          Authorization: `Bearer ${await this.getIDPAccessToken()}`
-        };
-      } else {
-        request.headers = {
-          ...request.headers,
-          Authorization: `Bearer ${await this.getAccessToken()}`
-        };
-      }
-    }
-  }
-  async getUser() {
-    return this._authenticationClient.getUser();
-  }
-  async getDecodedIdToken() {
-    return this._authenticationClient.getDecodedIdToken();
-  }
-  async getDecodedIDPIDToken() {
-    return this._authenticationClient.getDecodedIdToken();
-  }
-  async getCrypto() {
-    return this._authenticationClient.getCrypto();
-  }
-  async getIdToken() {
-    return this._authenticationClient.getIdToken();
-  }
-  async getOpenIDProviderEndpoints() {
-    return this._authenticationClient.getOpenIDProviderEndpoints();
-  }
-  async getAccessToken() {
-    return this._authenticationClient.getAccessToken();
-  }
-  async getIDPAccessToken() {
-    return (await this._storageManager.getSessionData())?.access_token;
-  }
-  getStorageManager() {
-    return this._storageManager;
-  }
-  async isSignedIn() {
-    return this._authenticationClient.isSignedIn();
-  }
-};
-
-// src/__legacy__/helpers/spa-helper.ts
-var import_javascript3 = require("@asgardeo/javascript");
-var SPAHelper = class {
-  constructor(authClient) {
-    __publicField(this, "_authenticationClient");
-    __publicField(this, "_storageManager");
-    this._authenticationClient = authClient;
-    this._storageManager = this._authenticationClient.getStorageManager();
-  }
-  async refreshAccessTokenAutomatically(authenticationHelper) {
-    const shouldRefreshAutomatically = (await this._storageManager.getConfigData())?.periodicTokenRefresh ?? false;
-    if (!shouldRefreshAutomatically) {
-      return;
-    }
-    const sessionData = await this._storageManager.getSessionData();
-    if (sessionData.refresh_token) {
-      const expiryTime = parseInt(sessionData.expires_in);
-      const time = expiryTime <= 10 ? expiryTime : expiryTime - 10;
-      const timer = setTimeout(async () => {
-        await authenticationHelper.refreshAccessToken();
-      }, time * 1e3);
-      await this._storageManager.setTemporaryDataParameter(
-        import_javascript3.TokenConstants.Storage.StorageKeys.REFRESH_TOKEN_TIMER,
-        JSON.stringify(timer)
-      );
-    }
-  }
-  async getRefreshTimeoutTimer() {
-    if (await this._storageManager.getTemporaryDataParameter(import_javascript3.TokenConstants.Storage.StorageKeys.REFRESH_TOKEN_TIMER)) {
-      return JSON.parse(
-        await this._storageManager.getTemporaryDataParameter(
-          import_javascript3.TokenConstants.Storage.StorageKeys.REFRESH_TOKEN_TIMER
-        )
-      );
-    }
-    return -1;
-  }
-  async clearRefreshTokenTimeout(timer) {
-    if (timer) {
-      clearTimeout(timer);
-      return;
-    }
-    const refreshTimer = await this.getRefreshTimeoutTimer();
-    if (refreshTimer !== -1) {
-      clearTimeout(refreshTimer);
-    }
-  }
-};
-
-// src/__legacy__/helpers/session-management-helper.ts
-var import_javascript4 = require("@asgardeo/javascript");
-var SessionManagementHelper = /* @__PURE__ */ (() => {
-  let _clientID;
-  let _checkSessionEndpoint;
-  let _sessionState;
-  let _interval;
-  let _redirectURL;
-  let _sessionRefreshInterval;
-  let _signOut;
-  let _sessionRefreshIntervalTimeout;
-  let _checkSessionIntervalTimeout;
-  let _storage;
-  let _setSessionState;
-  let _getSignInUrl;
-  const initialize = (clientId, checkSessionEndpoint, getSessionState, interval, sessionRefreshInterval, redirectURL, getSignInUrl) => {
-    _clientID = clientId;
-    _checkSessionEndpoint = checkSessionEndpoint;
-    _sessionState = getSessionState;
-    _interval = interval;
-    _redirectURL = redirectURL;
-    _sessionRefreshInterval = sessionRefreshInterval;
-    _getSignInUrl = getSignInUrl;
-    if (_interval > -1) {
-      initiateCheckSession();
-    }
-    if (_sessionRefreshInterval > -1) {
-      sessionRefreshInterval = setInterval(() => {
-        sendPromptNoneRequest();
-      }, _sessionRefreshInterval * 1e3);
-    }
-  };
-  const initiateCheckSession = async () => {
-    if (!_checkSessionEndpoint || !_clientID || !_redirectURL) {
-      return;
-    }
-    const OP_IFRAME2 = "opIFrame";
-    async function checkSession() {
-      const sessionState = await _sessionState();
-      if (Boolean(_clientID) && Boolean(sessionState)) {
-        const message = `${_clientID} ${sessionState}`;
-        const rpIFrame2 = document.getElementById(RP_IFRAME);
-        const opIframe2 = rpIFrame2?.contentDocument?.getElementById(OP_IFRAME2);
-        const win = opIframe2.contentWindow;
-        win?.postMessage(message, _checkSessionEndpoint);
-      }
-    }
-    const rpIFrame = document.getElementById(RP_IFRAME);
-    const opIframe = rpIFrame?.contentDocument?.getElementById(OP_IFRAME2);
-    opIframe.src = _checkSessionEndpoint + "?client_id=" + _clientID + "&redirect_uri=" + _redirectURL;
-    _checkSessionIntervalTimeout = setInterval(checkSession, _interval * 1e3);
-    listenToResponseFromOPIFrame();
-  };
-  const reset = () => {
-    clearInterval(_checkSessionIntervalTimeout);
-    clearInterval(_sessionRefreshIntervalTimeout);
-  };
-  const listenToResponseFromOPIFrame = () => {
-    async function receiveMessage(e) {
-      const targetOrigin = _checkSessionEndpoint;
-      if (!targetOrigin || targetOrigin?.indexOf(e.origin) < 0 || e?.data?.type === SET_SESSION_STATE_FROM_IFRAME) {
-        return;
-      }
-      if (e.data === "unchanged") {
-      } else if (e.data === "error") {
-        window.location.href = await _signOut();
-      } else if (e.data === "changed") {
-        sendPromptNoneRequest();
-      }
-    }
-    window?.addEventListener("message", receiveMessage, false);
-  };
-  const sendPromptNoneRequest = async () => {
-    const rpIFrame = document.getElementById(RP_IFRAME);
-    const promptNoneIFrame = rpIFrame?.contentDocument?.getElementById(
-      PROMPT_NONE_IFRAME
-    );
-    if (SPAUtils.canSendPromptNoneRequest()) {
-      SPAUtils.setPromptNoneRequestSent(true);
-      const receiveMessageListener = (e) => {
-        if (e?.data?.type === SET_SESSION_STATE_FROM_IFRAME) {
-          _setSessionState(e?.data?.data ?? "");
-          window?.removeEventListener("message", receiveMessageListener);
-        }
-      };
-      if (_storage === "browserMemory" /* BrowserMemory */ || _storage === "webWorker" /* WebWorker */) {
-        window?.addEventListener("message", receiveMessageListener);
-      }
-      const promptNoneURL = await _getSignInUrl({
-        prompt: "none",
-        response_mode: "query",
-        state: STATE
-      });
-      promptNoneIFrame.src = promptNoneURL;
-    }
-  };
-  const receivePromptNoneResponse = async (setSessionState) => {
-    const state = new URL(window.location.href).searchParams.get(STATE_QUERY);
-    const sessionState = new URL(window.location.href).searchParams.get(import_javascript4.OIDCRequestConstants.Params.SESSION_STATE);
-    const parent = window.parent.parent;
-    if (state !== null && (state.includes(STATE) || state.includes(SILENT_SIGN_IN_STATE))) {
-      const code = new URL(window.location.href).searchParams.get("code");
-      if (code !== null && code.length !== 0) {
-        if (state.includes(SILENT_SIGN_IN_STATE)) {
-          const message = {
-            data: {
-              code,
-              sessionState: sessionState ?? "",
-              state
-            },
-            type: CHECK_SESSION_SIGNED_IN
-          };
-          sessionStorage.setItem(INITIALIZED_SILENT_SIGN_IN, "false");
-          parent.postMessage(message, parent.origin);
-          SPAUtils.setPromptNoneRequestSent(false);
-          window.location.href = "about:blank";
-          await SPAUtils.waitTillPageRedirect();
-          return true;
-        }
-        const newSessionState = new URL(window.location.href).searchParams.get("session_state");
-        if (_storage === "localStorage" /* LocalStorage */ || _storage === "sessionStorage" /* SessionStorage */) {
-          setSessionState && await setSessionState(newSessionState);
-        } else {
-          const message = {
-            data: newSessionState ?? "",
-            type: SET_SESSION_STATE_FROM_IFRAME
-          };
-          window?.parent?.parent?.postMessage(message);
-        }
-        SPAUtils.setPromptNoneRequestSent(false);
-        window.location.href = "about:blank";
-        await SPAUtils.waitTillPageRedirect();
-        return true;
-      } else {
-        if (state.includes(SILENT_SIGN_IN_STATE)) {
-          const message = {
-            type: CHECK_SESSION_SIGNED_OUT
-          };
-          window.parent.parent.postMessage(message, parent.origin);
-          SPAUtils.setPromptNoneRequestSent(false);
-          window.location.href = "about:blank";
-          await SPAUtils.waitTillPageRedirect();
-          return true;
-        }
-        SPAUtils.setPromptNoneRequestSent(false);
-        const signOutURL = await _signOut();
-        await import_javascript4.AsgardeoAuthClient.clearSession();
-        parent.location.href = signOutURL;
-        window.location.href = "about:blank";
-        await SPAUtils.waitTillPageRedirect();
-        return true;
+        SPAUtils.setPromptNoneRequestSent(false);
+        const signOutURL = await _signOut();
+        await import_javascript2.AsgardeoAuthClient.clearSession();
+        parent.location.href = signOutURL;
+        window.location.href = "about:blank";
+        await SPAUtils.waitTillPageRedirect();
+        return true;
       }
     }
     return false;
@@ -2942,6 +2434,55 @@ var SessionManagementHelper = /* @__PURE__ */ (() => {
   };
 })();
 
+// src/__legacy__/helpers/spa-helper.ts
+var import_javascript3 = require("@asgardeo/javascript");
+var SPAHelper = class {
+  constructor(authClient) {
+    __publicField(this, "_authenticationClient");
+    __publicField(this, "_storageManager");
+    this._authenticationClient = authClient;
+    this._storageManager = this._authenticationClient.getStorageManager();
+  }
+  async refreshAccessTokenAutomatically(authenticationHelper) {
+    const shouldRefreshAutomatically = (await this._storageManager.getConfigData())?.periodicTokenRefresh ?? false;
+    if (!shouldRefreshAutomatically) {
+      return;
+    }
+    const sessionData = await this._storageManager.getSessionData();
+    if (sessionData.refresh_token) {
+      const expiryTime = parseInt(sessionData.expires_in);
+      const time = expiryTime <= 10 ? expiryTime : expiryTime - 10;
+      const timer = setTimeout(async () => {
+        await authenticationHelper.refreshAccessToken();
+      }, time * 1e3);
+      await this._storageManager.setTemporaryDataParameter(
+        import_javascript3.TokenConstants.Storage.StorageKeys.REFRESH_TOKEN_TIMER,
+        JSON.stringify(timer)
+      );
+    }
+  }
+  async getRefreshTimeoutTimer() {
+    if (await this._storageManager.getTemporaryDataParameter(import_javascript3.TokenConstants.Storage.StorageKeys.REFRESH_TOKEN_TIMER)) {
+      return JSON.parse(
+        await this._storageManager.getTemporaryDataParameter(
+          import_javascript3.TokenConstants.Storage.StorageKeys.REFRESH_TOKEN_TIMER
+        )
+      );
+    }
+    return -1;
+  }
+  async clearRefreshTokenTimeout(timer) {
+    if (timer) {
+      clearTimeout(timer);
+      return;
+    }
+    const refreshTimer = await this.getRefreshTimeoutTimer();
+    if (refreshTimer !== -1) {
+      clearTimeout(refreshTimer);
+    }
+  }
+};
+
 // src/__legacy__/http-client/clients/axios-http-client.ts
 var import_axios = __toESM(require("axios"), 1);
 
@@ -3094,456 +2635,873 @@ var HttpClient = class {
     HttpClient.isHandlerEnabled = false;
   }
   /**
-   * Disables the handler for a given period of time.
+   * Disables the handler for a given period of time.
+   *
+   * @param {number} timeout - Timeout in milliseconds.
+   */
+  disableHandlerWithTimeout(timeout = HttpClient.DEFAULT_HANDLER_DISABLE_TIMEOUT) {
+    HttpClient.isHandlerEnabled = false;
+    setTimeout(() => {
+      HttpClient.isHandlerEnabled = true;
+    }, timeout);
+  }
+  setHttpRequestStartCallback(callback) {
+    this.requestStartCallback = callback;
+  }
+  setHttpRequestSuccessCallback(callback) {
+    this.requestSuccessCallback = callback;
+  }
+  setHttpRequestErrorCallback(callback) {
+    this.requestErrorCallback = callback;
+  }
+  setHttpRequestFinishCallback(callback) {
+    this.requestFinishCallback = callback;
+  }
+};
+__publicField(HttpClient, "axiosInstance");
+__publicField(HttpClient, "clientInstance");
+__publicField(HttpClient, "isHandlerEnabled");
+__publicField(HttpClient, "DEFAULT_HANDLER_DISABLE_TIMEOUT", 1e3);
+HttpClient = __decorateClass([
+  staticDecorator()
+], HttpClient);
+
+// src/__legacy__/stores/local-store.ts
+var LocalStore = class {
+  async setData(key, value) {
+    localStorage.setItem(key, value);
+  }
+  async getData(key) {
+    return localStorage.getItem(key) ?? "{}";
+  }
+  async removeData(key) {
+    localStorage.removeItem(key);
+  }
+};
+
+// src/__legacy__/stores/memory-store.ts
+var MemoryStore = class {
+  constructor() {
+    __publicField(this, "_data");
+    this._data = /* @__PURE__ */ new Map();
+  }
+  async setData(key, value) {
+    this._data.set(key, value);
+  }
+  async getData(key) {
+    return this._data?.get(key) ?? "{}";
+  }
+  async removeData(key) {
+    this._data.delete(key);
+  }
+};
+
+// src/__legacy__/stores/session-store.ts
+var SessionStore = class {
+  async setData(key, value) {
+    sessionStorage.setItem(key, value);
+  }
+  async getData(key) {
+    return sessionStorage.getItem(key) ?? "{}";
+  }
+  async removeData(key) {
+    sessionStorage.removeItem(key);
+  }
+};
+
+// src/__legacy__/utils/crypto-utils.ts
+var import_buffer = __toESM(require_buffer(), 1);
+var import_javascript4 = require("@asgardeo/javascript");
+var import_base64url = __toESM(require("base64url"), 1);
+var import_fast_sha256 = __toESM(require("fast-sha256"), 1);
+var import_jose = require("jose");
+var import_randombytes = __toESM(require_browser(), 1);
+var SPACryptoUtils = class {
+  /**
+   * Get URL encoded string.
    *
-   * @param {number} timeout - Timeout in milliseconds.
+   * @returns {string} base 64 url encoded value.
    */
-  disableHandlerWithTimeout(timeout = HttpClient.DEFAULT_HANDLER_DISABLE_TIMEOUT) {
-    HttpClient.isHandlerEnabled = false;
-    setTimeout(() => {
-      HttpClient.isHandlerEnabled = true;
-    }, timeout);
+  base64URLEncode(value) {
+    return import_base64url.default.encode(value).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
   }
-  setHttpRequestStartCallback(callback) {
-    this.requestStartCallback = callback;
+  base64URLDecode(value) {
+    return import_base64url.default.decode(value).toString();
   }
-  setHttpRequestSuccessCallback(callback) {
-    this.requestSuccessCallback = callback;
+  hashSha256(data) {
+    return import_buffer.Buffer.from((0, import_fast_sha256.default)(new TextEncoder().encode(data)));
   }
-  setHttpRequestErrorCallback(callback) {
-    this.requestErrorCallback = callback;
+  generateRandomBytes(length) {
+    return (0, import_randombytes.default)(length);
   }
-  setHttpRequestFinishCallback(callback) {
-    this.requestFinishCallback = callback;
+  verifyJwt(idToken, jwk, algorithms, clientId, issuer, subject, clockTolerance, validateJwtIssuer) {
+    const jwtVerifyOptions = {
+      algorithms,
+      audience: clientId,
+      clockTolerance,
+      subject
+    };
+    if (validateJwtIssuer ?? true) {
+      jwtVerifyOptions["issuer"] = issuer;
+    }
+    return (0, import_jose.jwtVerify)(
+      idToken,
+      (0, import_jose.createLocalJWKSet)({
+        keys: [jwk]
+      }),
+      jwtVerifyOptions
+    ).then(() => {
+      return Promise.resolve(true);
+    }).catch((error) => {
+      return Promise.reject(
+        new import_javascript4.AsgardeoAuthException(
+          "SPA-CRYPTO-UTILS-VJ-IV01",
+          error?.reason ?? JSON.stringify(error),
+          `${error?.code} ${error?.claim}`
+        )
+      );
+    });
   }
 };
-__publicField(HttpClient, "axiosInstance");
-__publicField(HttpClient, "clientInstance");
-__publicField(HttpClient, "isHandlerEnabled");
-__publicField(HttpClient, "DEFAULT_HANDLER_DISABLE_TIMEOUT", 1e3);
-HttpClient = __decorateClass([
-  staticDecorator()
-], HttpClient);
 
-// src/__legacy__/stores/local-store.ts
-var LocalStore = class {
-  async setData(key, value) {
-    localStorage.setItem(key, value);
-  }
-  async getData(key) {
-    return localStorage.getItem(key) ?? "{}";
-  }
-  async removeData(key) {
-    localStorage.removeItem(key);
+// src/__legacy__/clients/main-thread-client.ts
+var initiateStore = (store) => {
+  switch (store) {
+    case "localStorage" /* LocalStorage */:
+      return new LocalStore();
+    case "sessionStorage" /* SessionStorage */:
+      return new SessionStore();
+    case "browserMemory" /* BrowserMemory */:
+      return new MemoryStore();
+    default:
+      return new SessionStore();
   }
 };
+var MainThreadClient = async (instanceID, config, getAuthHelper) => {
+  const _store = initiateStore(config.storage);
+  const _cryptoUtils = new SPACryptoUtils();
+  const _authenticationClient = new import_javascript5.AsgardeoAuthClient();
+  await _authenticationClient.initialize(config, _store, _cryptoUtils, instanceID);
+  const _spaHelper = new SPAHelper(_authenticationClient);
+  const _dataLayer = _authenticationClient.getStorageManager();
+  const _sessionManagementHelper = await SessionManagementHelper(
+    async () => _authenticationClient.getSignOutUrl(),
+    config.storage ?? "sessionStorage" /* SessionStorage */,
+    (sessionState) => _dataLayer.setSessionDataParameter(
+      import_javascript5.OIDCRequestConstants.Params.SESSION_STATE,
+      sessionState ?? ""
+    )
+  );
+  const _authenticationHelper = getAuthHelper(_authenticationClient, _spaHelper);
+  let _getSignOutURLFromSessionStorage = false;
+  const _httpClient = HttpClient.getInstance();
+  let _isHttpHandlerEnabled = true;
+  let _httpErrorCallback;
+  let _httpFinishCallback;
+  const attachToken = async (request) => {
+    await _authenticationHelper.attachTokenToRequestConfig(request);
+  };
+  _httpClient?.init && await _httpClient.init(true, attachToken);
+  const setHttpRequestStartCallback = (callback) => {
+    _httpClient?.setHttpRequestStartCallback && _httpClient.setHttpRequestStartCallback(callback);
+  };
+  const setHttpRequestSuccessCallback = (callback) => {
+    _httpClient?.setHttpRequestSuccessCallback && _httpClient.setHttpRequestSuccessCallback(callback);
+  };
+  const setHttpRequestFinishCallback = (callback) => {
+    _httpClient?.setHttpRequestFinishCallback && _httpClient.setHttpRequestFinishCallback(callback);
+  };
+  const setHttpRequestErrorCallback = (callback) => {
+    _httpErrorCallback = callback;
+  };
+  const httpRequest = async (requestConfig) => _authenticationHelper.httpRequest(
+    _httpClient,
+    requestConfig,
+    _isHttpHandlerEnabled,
+    _httpErrorCallback,
+    _httpFinishCallback
+  );
+  const httpRequestAll = async (requestConfigs) => _authenticationHelper.httpRequestAll(
+    requestConfigs,
+    _httpClient,
+    _isHttpHandlerEnabled,
+    _httpErrorCallback,
+    _httpFinishCallback
+  );
+  const getHttpClient = () => _httpClient;
+  const enableHttpHandler = () => {
+    _authenticationHelper.enableHttpHandler(_httpClient);
+    _isHttpHandlerEnabled = true;
+    return true;
+  };
+  const disableHttpHandler = () => {
+    _authenticationHelper.disableHttpHandler(_httpClient);
+    _isHttpHandlerEnabled = false;
+    return true;
+  };
+  const checkSession = async () => {
+    const oidcEndpoints = await _authenticationClient.getOpenIDProviderEndpoints();
+    const config2 = await _dataLayer.getConfigData();
+    _authenticationHelper.initializeSessionManger(
+      config2,
+      oidcEndpoints,
+      async () => (await _authenticationClient.getUserSession()).sessionState,
+      async (params) => _authenticationClient.getSignInUrl(params),
+      _sessionManagementHelper
+    );
+  };
+  const shouldStopAuthn = async () => _sessionManagementHelper.receivePromptNoneResponse(async (sessionState) => {
+    await _dataLayer.setSessionDataParameter(
+      import_javascript5.OIDCRequestConstants.Params.SESSION_STATE,
+      sessionState ?? ""
+    );
+  });
+  const setSessionStatus = async (sessionStatus) => {
+    await _dataLayer.setSessionStatus(sessionStatus);
+  };
+  const signIn = async (signInConfig, authorizationCode, sessionState, state, tokenRequestConfig) => {
+    const basicUserInfo = await _authenticationHelper.handleSignIn(shouldStopAuthn, checkSession, void 0);
+    if (basicUserInfo) {
+      return basicUserInfo;
+    }
+    let resolvedAuthorizationCode;
+    let resolvedSessionState;
+    let resolvedState;
+    let resolvedTokenRequestConfig = { params: {} };
+    if (config?.responseMode === "form_post" && authorizationCode) {
+      resolvedAuthorizationCode = authorizationCode;
+      resolvedSessionState = sessionState ?? "";
+      resolvedState = state ?? "";
+    } else {
+      resolvedAuthorizationCode = new URL(window.location.href).searchParams.get(import_javascript5.OIDCRequestConstants.Params.AUTHORIZATION_CODE) ?? "";
+      resolvedSessionState = new URL(window.location.href).searchParams.get(import_javascript5.OIDCRequestConstants.Params.SESSION_STATE) ?? "";
+      resolvedState = new URL(window.location.href).searchParams.get(import_javascript5.OIDCRequestConstants.Params.STATE) ?? "";
+      SPAUtils.removeAuthorizationCode();
+    }
+    if (resolvedAuthorizationCode && resolvedState) {
+      setSessionStatus("true");
+      const storedTokenRequestConfig = await _dataLayer.getTemporaryDataParameter(TOKEN_REQUEST_CONFIG_KEY);
+      if (storedTokenRequestConfig && typeof storedTokenRequestConfig === "string") {
+        resolvedTokenRequestConfig = JSON.parse(storedTokenRequestConfig);
+      }
+      return requestAccessToken(
+        resolvedAuthorizationCode,
+        resolvedSessionState,
+        resolvedState,
+        resolvedTokenRequestConfig
+      );
+    }
+    return _authenticationClient.getSignInUrl(signInConfig).then(async (url) => {
+      if (config.storage === "browserMemory" /* BrowserMemory */ && config.enablePKCE) {
+        const pkceKey = (0, import_javascript5.extractPkceStorageKeyFromState)(resolvedState);
+        SPAUtils.setPKCE(pkceKey, await _authenticationClient.getPKCECode(resolvedState));
+      }
+      if (tokenRequestConfig) {
+        _dataLayer.setTemporaryDataParameter(TOKEN_REQUEST_CONFIG_KEY, JSON.stringify(tokenRequestConfig));
+      }
+      if (signInConfig && signInConfig["response_mode"] === "direct") {
+        const authorizeUrl = new URL(url);
+        return (0, import_javascript5.initializeEmbeddedSignInFlow)({
+          url: `${authorizeUrl.origin}${authorizeUrl.pathname}`,
+          payload: Object.fromEntries(authorizeUrl.searchParams.entries())
+        });
+      }
+      location.href = url;
+      await SPAUtils.waitTillPageRedirect();
+      return Promise.resolve({
+        allowedScopes: "",
+        displayName: "",
+        email: "",
+        sessionState: "",
+        sub: "",
+        tenantDomain: "",
+        username: ""
+      });
+    });
+  };
+  const signOut = async () => {
+    if (await _authenticationClient.isSignedIn() && !_getSignOutURLFromSessionStorage) {
+      location.href = await _authenticationClient.getSignOutUrl();
+    } else {
+      location.href = SPAUtils.getSignOutUrl(config.clientId, instanceID);
+    }
+    _spaHelper.clearRefreshTokenTimeout();
+    await _dataLayer.removeOIDCProviderMetaData();
+    await _dataLayer.removeTemporaryData();
+    await _dataLayer.removeSessionData();
+    await _dataLayer.removeSessionStatus();
+    await SPAUtils.waitTillPageRedirect();
+    return true;
+  };
+  const enableRetrievingSignOutURLFromSession = (config2) => {
+    if (config2.preventSignOutURLUpdate) {
+      _getSignOutURLFromSessionStorage = true;
+    }
+  };
+  const exchangeToken = async (config2) => _authenticationHelper.exchangeToken(config2, enableRetrievingSignOutURLFromSession);
+  const refreshAccessToken = async () => {
+    try {
+      return await _authenticationHelper.refreshAccessToken(enableRetrievingSignOutURLFromSession);
+    } catch (error) {
+      return Promise.reject(error);
+    }
+  };
+  const revokeAccessToken = async () => {
+    const timer = await _spaHelper.getRefreshTimeoutTimer();
+    return _authenticationClient.revokeAccessToken().then(() => {
+      _sessionManagementHelper.reset();
+      _spaHelper.clearRefreshTokenTimeout(timer);
+      return Promise.resolve(true);
+    }).catch((error) => Promise.reject(error));
+  };
+  const requestAccessToken = async (resolvedAuthorizationCode, resolvedSessionState, resolvedState, tokenRequestConfig) => _authenticationHelper.requestAccessToken(
+    resolvedAuthorizationCode,
+    resolvedSessionState,
+    checkSession,
+    void 0,
+    resolvedState,
+    tokenRequestConfig
+  );
+  const constructSilentSignInUrl = async (additionalParams = {}) => {
+    const config2 = await _dataLayer.getConfigData();
+    const urlString = await _authenticationClient.getSignInUrl({
+      prompt: "none",
+      state: SILENT_SIGN_IN_STATE,
+      ...additionalParams
+    });
+    const urlObject = new URL(urlString);
+    urlObject.searchParams.set("response_mode", "query");
+    const url = urlObject.toString();
+    if (config2.storage === "browserMemory" /* BrowserMemory */ && config2.enablePKCE) {
+      const state = urlObject.searchParams.get(import_javascript5.OIDCRequestConstants.Params.STATE);
+      SPAUtils.setPKCE(
+        (0, import_javascript5.extractPkceStorageKeyFromState)(state ?? ""),
+        await _authenticationClient.getPKCECode(state ?? "")
+      );
+    }
+    return url;
+  };
+  const trySignInSilently = async (additionalParams, tokenRequestConfig) => _authenticationHelper.trySignInSilently(
+    constructSilentSignInUrl,
+    requestAccessToken,
+    _sessionManagementHelper,
+    additionalParams,
+    tokenRequestConfig
+  );
+  const getUser = async () => _authenticationHelper.getUser();
+  const getDecodedIdToken = async (sessionId) => _authenticationHelper.getDecodedIdToken(sessionId);
+  const getCrypto = async () => _authenticationHelper.getCrypto();
+  const getIdToken = async () => _authenticationHelper.getIdToken();
+  const getOpenIDProviderEndpoints = async () => _authenticationHelper.getOpenIDProviderEndpoints();
+  const getAccessToken = async () => _authenticationHelper.getAccessToken();
+  const getStorageManager = async () => _authenticationHelper.getStorageManager();
+  const getConfigData = async () => _dataLayer.getConfigData();
+  const isSignedIn = async () => _authenticationHelper.isSignedIn();
+  const isSessionActive = async () => await _dataLayer.getSessionStatus() === "true";
+  const reInitialize = async (newConfig) => {
+    const existingConfig = await _dataLayer.getConfigData();
+    const isCheckSessionIframeDifferent = !(existingConfig && existingConfig.endpoints && existingConfig.endpoints.checkSessionIframe && newConfig && newConfig.endpoints && newConfig.endpoints.checkSessionIframe && existingConfig.endpoints.checkSessionIframe === newConfig.endpoints.checkSessionIframe);
+    const config2 = { ...existingConfig, ...newConfig };
+    await _authenticationClient.reInitialize(config2);
+    if (config2.enableOIDCSessionManagement && isCheckSessionIframeDifferent) {
+      _sessionManagementHelper.reset();
+      checkSession();
+    }
+  };
+  return {
+    disableHttpHandler,
+    enableHttpHandler,
+    getAccessToken,
+    getUser,
+    getConfigData,
+    getCrypto,
+    getStorageManager,
+    getDecodedIdToken,
+    getHttpClient,
+    getIdToken,
+    getOpenIDProviderEndpoints,
+    httpRequest,
+    httpRequestAll,
+    isSignedIn,
+    isSessionActive,
+    refreshAccessToken,
+    exchangeToken,
+    revokeAccessToken,
+    setHttpRequestErrorCallback,
+    setHttpRequestFinishCallback,
+    setHttpRequestStartCallback,
+    setHttpRequestSuccessCallback,
+    signIn,
+    signOut,
+    trySignInSilently,
+    reInitialize
+  };
+};
 
-// src/__legacy__/stores/memory-store.ts
-var MemoryStore = class {
-  constructor() {
-    __publicField(this, "_data");
-    this._data = /* @__PURE__ */ new Map();
-  }
-  async setData(key, value) {
-    this._data.set(key, value);
-  }
-  async getData(key) {
-    return this._data?.get(key) ?? "{}";
-  }
-  async removeData(key) {
-    this._data.delete(key);
-  }
-};
+// src/__legacy__/clients/web-worker-client.ts
+var import_javascript7 = require("@asgardeo/javascript");
 
-// src/__legacy__/stores/session-store.ts
-var SessionStore = class {
-  async setData(key, value) {
-    sessionStorage.setItem(key, value);
+// src/__legacy__/helpers/authentication-helper.ts
+var import_javascript6 = require("@asgardeo/javascript");
+var AuthenticationHelper = class {
+  constructor(authClient, spaHelper) {
+    __publicField(this, "_authenticationClient");
+    __publicField(this, "_storageManager");
+    __publicField(this, "_spaHelper");
+    __publicField(this, "_instanceID");
+    __publicField(this, "_isTokenRefreshing");
+    this._authenticationClient = authClient;
+    this._storageManager = this._authenticationClient.getStorageManager();
+    this._spaHelper = spaHelper;
+    this._instanceID = this._authenticationClient.getInstanceId();
+    this._isTokenRefreshing = false;
   }
-  async getData(key) {
-    return sessionStorage.getItem(key) ?? "{}";
+  enableHttpHandler(httpClient) {
+    httpClient?.enableHandler && httpClient.enableHandler();
   }
-  async removeData(key) {
-    sessionStorage.removeItem(key);
+  disableHttpHandler(httpClient) {
+    httpClient?.disableHandler && httpClient.disableHandler();
   }
-};
-
-// src/__legacy__/utils/crypto-utils.ts
-var import_buffer = __toESM(require_buffer(), 1);
-var import_javascript5 = require("@asgardeo/javascript");
-var import_base64url = __toESM(require("base64url"), 1);
-var import_fast_sha256 = __toESM(require("fast-sha256"), 1);
-var import_jose = require("jose");
-var import_randombytes = __toESM(require_browser(), 1);
-var SPACryptoUtils = class {
-  /**
-   * Get URL encoded string.
-   *
-   * @returns {string} base 64 url encoded value.
-   */
-  base64URLEncode(value) {
-    return import_base64url.default.encode(value).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+  initializeSessionManger(config, oidcEndpoints, getSessionState, getAuthzURL, sessionManagementHelper) {
+    sessionManagementHelper.initialize(
+      config.clientId,
+      oidcEndpoints.checkSessionIframe ?? "",
+      getSessionState,
+      config.checkSessionInterval ?? 3,
+      config.sessionRefreshInterval ?? 300,
+      config.afterSignInUrl,
+      getAuthzURL
+    );
   }
-  base64URLDecode(value) {
-    return import_base64url.default.decode(value).toString();
+  async exchangeToken(config, enableRetrievingSignOutURLFromSession) {
+    let useDefaultEndpoint = true;
+    let matches = false;
+    if (config?.tokenEndpoint) {
+      useDefaultEndpoint = false;
+      for (const baseUrl of [
+        ...(await this._storageManager.getConfigData())?.resourceServerURLs ?? [],
+        config.baseUrl
+      ]) {
+        if (baseUrl && config.tokenEndpoint?.startsWith(baseUrl)) {
+          matches = true;
+          break;
+        }
+      }
+    }
+    if (config.shouldReplayAfterRefresh) {
+      this._storageManager.setTemporaryDataParameter(CUSTOM_GRANT_CONFIG, JSON.stringify(config));
+    }
+    if (useDefaultEndpoint || matches) {
+      return this._authenticationClient.exchangeToken(config).then(async (response) => {
+        if (enableRetrievingSignOutURLFromSession && typeof enableRetrievingSignOutURLFromSession === "function") {
+          enableRetrievingSignOutURLFromSession(config);
+        }
+        if (config.returnsSession) {
+          this._spaHelper.refreshAccessTokenAutomatically(this);
+          return this._authenticationClient.getUser();
+        } else {
+          return response;
+        }
+      }).catch((error) => {
+        return Promise.reject(error);
+      });
+    } else {
+      return Promise.reject(
+        new import_javascript6.AsgardeoAuthException(
+          "SPA-MAIN_THREAD_CLIENT-RCG-IV01",
+          "Request to the provided endpoint is prohibited.",
+          "Requests can only be sent to resource servers specified by the `resourceServerURLs` attribute while initializing the SDK. The specified token endpoint in this request cannot be found among the `resourceServerURLs`"
+        )
+      );
+    }
   }
-  hashSha256(data) {
-    return import_buffer.Buffer.from((0, import_fast_sha256.default)(new TextEncoder().encode(data)));
+  async getCustomGrantConfigData() {
+    const configString = await this._storageManager.getTemporaryDataParameter(CUSTOM_GRANT_CONFIG);
+    if (configString) {
+      return JSON.parse(configString);
+    } else {
+      return null;
+    }
   }
-  generateRandomBytes(length) {
-    return (0, import_randombytes.default)(length);
+  async refreshAccessToken(enableRetrievingSignOutURLFromSession) {
+    try {
+      await this._authenticationClient.refreshAccessToken();
+      const customGrantConfig = await this.getCustomGrantConfigData();
+      if (customGrantConfig) {
+        await this.exchangeToken(customGrantConfig, enableRetrievingSignOutURLFromSession);
+      }
+      this._spaHelper.refreshAccessTokenAutomatically(this);
+      return this._authenticationClient.getUser();
+    } catch (error) {
+      const refreshTokenError = {
+        type: REFRESH_ACCESS_TOKEN_ERR0R
+      };
+      window.postMessage(refreshTokenError);
+      return Promise.reject(error);
+    }
   }
-  verifyJwt(idToken, jwk, algorithms, clientId, issuer, subject, clockTolerance, validateJwtIssuer) {
-    const jwtVerifyOptions = {
-      algorithms,
-      audience: clientId,
-      clockTolerance,
-      subject
-    };
-    if (validateJwtIssuer ?? true) {
-      jwtVerifyOptions["issuer"] = issuer;
+  async retryFailedRequests(failedRequest) {
+    const httpClient = failedRequest.httpClient;
+    const requestConfig = failedRequest.requestConfig;
+    const isHttpHandlerEnabled = failedRequest.isHttpHandlerEnabled;
+    const httpErrorCallback = failedRequest.httpErrorCallback;
+    const httpFinishCallback = failedRequest.httpFinishCallback;
+    await SPAUtils.until(() => !this._isTokenRefreshing);
+    try {
+      const httpResponse = await httpClient.request(requestConfig);
+      return Promise.resolve(httpResponse);
+    } catch (error) {
+      if (isHttpHandlerEnabled) {
+        if (typeof httpErrorCallback === "function") {
+          await httpErrorCallback(error);
+        }
+        if (typeof httpFinishCallback === "function") {
+          httpFinishCallback();
+        }
+      }
+      return Promise.reject(error);
     }
-    return (0, import_jose.jwtVerify)(
-      idToken,
-      (0, import_jose.createLocalJWKSet)({
-        keys: [jwk]
-      }),
-      jwtVerifyOptions
-    ).then(() => {
-      return Promise.resolve(true);
-    }).catch((error) => {
+  }
+  async httpRequest(httpClient, requestConfig, isHttpHandlerEnabled, httpErrorCallback, httpFinishCallback, enableRetrievingSignOutURLFromSession) {
+    let matches = false;
+    const config = await this._storageManager.getConfigData();
+    for (const baseUrl of [...await config?.resourceServerURLs ?? [], config.baseUrl]) {
+      if (baseUrl && requestConfig?.url?.startsWith(baseUrl)) {
+        matches = true;
+        break;
+      }
+    }
+    if (matches) {
+      return httpClient.request(requestConfig).then((response) => {
+        return Promise.resolve(response);
+      }).catch(async (error) => {
+        if (error?.response?.status === 401 || !error?.response) {
+          if (this._isTokenRefreshing) {
+            return this.retryFailedRequests({
+              enableRetrievingSignOutURLFromSession,
+              httpClient,
+              httpErrorCallback,
+              httpFinishCallback,
+              isHttpHandlerEnabled,
+              requestConfig
+            });
+          }
+          this._isTokenRefreshing = true;
+          let refreshAccessTokenResponse;
+          try {
+            refreshAccessTokenResponse = await this.refreshAccessToken(enableRetrievingSignOutURLFromSession);
+            this._isTokenRefreshing = false;
+          } catch (refreshError) {
+            this._isTokenRefreshing = false;
+            if (isHttpHandlerEnabled) {
+              if (typeof httpErrorCallback === "function") {
+                await httpErrorCallback({
+                  ...error,
+                  code: ACCESS_TOKEN_INVALID
+                });
+              }
+              if (typeof httpFinishCallback === "function") {
+                httpFinishCallback();
+              }
+            }
+            throw new import_javascript6.AsgardeoAuthException(
+              "SPA-AUTH_HELPER-HR-SE01",
+              refreshError?.name ?? "Refresh token request failed.",
+              refreshError?.message ?? "An error occurred while trying to refresh the access token following a 401 response from the server."
+            );
+          }
+          if (refreshAccessTokenResponse) {
+            try {
+              const httpResponse = await httpClient.request(requestConfig);
+              return Promise.resolve(httpResponse);
+            } catch (error2) {
+              if (isHttpHandlerEnabled) {
+                if (typeof httpErrorCallback === "function") {
+                  await httpErrorCallback(error2);
+                }
+                if (typeof httpFinishCallback === "function") {
+                  httpFinishCallback();
+                }
+              }
+              return Promise.reject(error2);
+            }
+          }
+        }
+        if (isHttpHandlerEnabled) {
+          if (typeof httpErrorCallback === "function") {
+            await httpErrorCallback(error);
+          }
+          if (typeof httpFinishCallback === "function") {
+            httpFinishCallback();
+          }
+        }
+        return Promise.reject(error);
+      });
+    } else {
       return Promise.reject(
-        new import_javascript5.AsgardeoAuthException(
-          "SPA-CRYPTO-UTILS-VJ-IV01",
-          error?.reason ?? JSON.stringify(error),
-          `${error?.code} ${error?.claim}`
+        new import_javascript6.AsgardeoAuthException(
+          "SPA-AUTH_HELPER-HR-IV02",
+          "Request to the provided endpoint is prohibited.",
+          "Requests can only be sent to resource servers specified by the `resourceServerURLs` attribute while initializing the SDK. The specified endpoint in this request cannot be found among the `resourceServerURLs`"
         )
       );
-    });
-  }
-};
-
-// src/__legacy__/clients/main-thread-client.ts
-var initiateStore = (store) => {
-  switch (store) {
-    case "localStorage" /* LocalStorage */:
-      return new LocalStore();
-    case "sessionStorage" /* SessionStorage */:
-      return new SessionStore();
-    case "browserMemory" /* BrowserMemory */:
-      return new MemoryStore();
-    default:
-      return new SessionStore();
-  }
-};
-var MainThreadClient = async (instanceID, config, getAuthHelper) => {
-  const _store = initiateStore(config.storage);
-  const _cryptoUtils = new SPACryptoUtils();
-  const _authenticationClient = new import_javascript6.AsgardeoAuthClient();
-  await _authenticationClient.initialize(config, _store, _cryptoUtils, instanceID);
-  const _spaHelper = new SPAHelper(_authenticationClient);
-  const _dataLayer = _authenticationClient.getStorageManager();
-  const _sessionManagementHelper = await SessionManagementHelper(
-    async () => {
-      return _authenticationClient.getSignOutUrl();
-    },
-    config.storage ?? "sessionStorage" /* SessionStorage */,
-    (sessionState) => _dataLayer.setSessionDataParameter(
-      import_javascript6.OIDCRequestConstants.Params.SESSION_STATE,
-      sessionState ?? ""
-    )
-  );
-  const _authenticationHelper = getAuthHelper(_authenticationClient, _spaHelper);
-  let _getSignOutURLFromSessionStorage = false;
-  const _httpClient = HttpClient.getInstance();
-  let _isHttpHandlerEnabled = true;
-  let _httpErrorCallback;
-  let _httpFinishCallback;
-  const attachToken = async (request) => {
-    await _authenticationHelper.attachTokenToRequestConfig(request);
-  };
-  _httpClient?.init && await _httpClient.init(true, attachToken);
-  const setHttpRequestStartCallback = (callback) => {
-    _httpClient?.setHttpRequestStartCallback && _httpClient.setHttpRequestStartCallback(callback);
-  };
-  const setHttpRequestSuccessCallback = (callback) => {
-    _httpClient?.setHttpRequestSuccessCallback && _httpClient.setHttpRequestSuccessCallback(callback);
-  };
-  const setHttpRequestFinishCallback = (callback) => {
-    _httpClient?.setHttpRequestFinishCallback && _httpClient.setHttpRequestFinishCallback(callback);
-  };
-  const setHttpRequestErrorCallback = (callback) => {
-    _httpErrorCallback = callback;
-  };
-  const httpRequest = async (requestConfig) => {
-    return await _authenticationHelper.httpRequest(
-      _httpClient,
-      requestConfig,
-      _isHttpHandlerEnabled,
-      _httpErrorCallback,
-      _httpFinishCallback
-    );
-  };
-  const httpRequestAll = async (requestConfigs) => {
-    return await _authenticationHelper.httpRequestAll(
-      requestConfigs,
-      _httpClient,
-      _isHttpHandlerEnabled,
-      _httpErrorCallback,
-      _httpFinishCallback
-    );
-  };
-  const getHttpClient = () => {
-    return _httpClient;
-  };
-  const enableHttpHandler = () => {
-    _authenticationHelper.enableHttpHandler(_httpClient);
-    _isHttpHandlerEnabled = true;
-    return true;
-  };
-  const disableHttpHandler = () => {
-    _authenticationHelper.disableHttpHandler(_httpClient);
-    _isHttpHandlerEnabled = false;
-    return true;
-  };
-  const checkSession = async () => {
-    const oidcEndpoints = await _authenticationClient.getOpenIDProviderEndpoints();
-    const config2 = await _dataLayer.getConfigData();
-    _authenticationHelper.initializeSessionManger(
-      config2,
-      oidcEndpoints,
-      async () => (await _authenticationClient.getUserSession()).sessionState,
-      async (params) => _authenticationClient.getSignInUrl(params),
-      _sessionManagementHelper
-    );
-  };
-  const shouldStopAuthn = async () => {
-    return await _sessionManagementHelper.receivePromptNoneResponse(async (sessionState) => {
-      await _dataLayer.setSessionDataParameter(
-        import_javascript6.OIDCRequestConstants.Params.SESSION_STATE,
-        sessionState ?? ""
-      );
-      return;
-    });
-  };
-  const setSessionStatus = async (sessionStatus) => {
-    await _dataLayer.setSessionStatus(sessionStatus);
-  };
-  const signIn = async (signInConfig, authorizationCode, sessionState, state, tokenRequestConfig) => {
-    if (signInConfig["flow"]) {
-      return (0, import_javascript6.handleApplicationNativeAuthentication)({
-        url: signInConfig["flow"]["requestConfig"]["url"],
-        payload: signInConfig["flow"]["payload"]
-      });
     }
-    const basicUserInfo = await _authenticationHelper.handleSignIn(shouldStopAuthn, checkSession, void 0);
-    if (basicUserInfo) {
-      return basicUserInfo;
-    } else {
-      let resolvedAuthorizationCode;
-      let resolvedSessionState;
-      let resolvedState;
-      let resolvedTokenRequestConfig = { params: {} };
-      if (config?.responseMode === "form_post" && authorizationCode) {
-        resolvedAuthorizationCode = authorizationCode;
-        resolvedSessionState = sessionState ?? "";
-        resolvedState = state ?? "";
-      } else {
-        resolvedAuthorizationCode = new URL(window.location.href).searchParams.get(import_javascript6.OIDCRequestConstants.Params.AUTHORIZATION_CODE) ?? "";
-        resolvedSessionState = new URL(window.location.href).searchParams.get(import_javascript6.OIDCRequestConstants.Params.SESSION_STATE) ?? "";
-        resolvedState = new URL(window.location.href).searchParams.get(import_javascript6.OIDCRequestConstants.Params.STATE) ?? "";
-        SPAUtils.removeAuthorizationCode();
-      }
-      if (resolvedAuthorizationCode && resolvedState) {
-        setSessionStatus("true");
-        const storedTokenRequestConfig = await _dataLayer.getTemporaryDataParameter(TOKEN_REQUEST_CONFIG_KEY);
-        if (storedTokenRequestConfig && typeof storedTokenRequestConfig === "string") {
-          resolvedTokenRequestConfig = JSON.parse(storedTokenRequestConfig);
+  }
+  async httpRequestAll(requestConfigs, httpClient, isHttpHandlerEnabled, httpErrorCallback, httpFinishCallback) {
+    let matches = true;
+    const config = await this._storageManager.getConfigData();
+    for (const requestConfig of requestConfigs) {
+      let urlMatches = false;
+      for (const baseUrl of [...(await config)?.resourceServerURLs ?? [], config.baseUrl]) {
+        if (baseUrl && requestConfig.url?.startsWith(baseUrl)) {
+          urlMatches = true;
+          break;
         }
-        return requestAccessToken(
-          resolvedAuthorizationCode,
-          resolvedSessionState,
-          resolvedState,
-          resolvedTokenRequestConfig
-        );
       }
-      return _authenticationClient.getSignInUrl(signInConfig).then(async (url) => {
-        if (config.storage === "browserMemory" /* BrowserMemory */ && config.enablePKCE) {
-          const pkceKey = (0, import_javascript6.extractPkceStorageKeyFromState)(resolvedState);
-          SPAUtils.setPKCE(pkceKey, await _authenticationClient.getPKCECode(resolvedState));
+      if (!urlMatches) {
+        matches = false;
+        break;
+      }
+    }
+    const requests = [];
+    if (matches) {
+      requestConfigs.forEach((request) => {
+        requests.push(httpClient.request(request));
+      });
+      return httpClient?.all && httpClient.all(requests).then((responses) => {
+        return Promise.resolve(responses);
+      }).catch(async (error) => {
+        if (error?.response?.status === 401 || !error?.response) {
+          let refreshTokenResponse;
+          try {
+            refreshTokenResponse = await this._authenticationClient.refreshAccessToken();
+          } catch (refreshError) {
+            if (isHttpHandlerEnabled) {
+              if (typeof httpErrorCallback === "function") {
+                await httpErrorCallback({
+                  ...error,
+                  code: ACCESS_TOKEN_INVALID
+                });
+              }
+              if (typeof httpFinishCallback === "function") {
+                httpFinishCallback();
+              }
+            }
+            throw new import_javascript6.AsgardeoAuthException(
+              "SPA-AUTH_HELPER-HRA-SE01",
+              refreshError?.name ?? "Refresh token request failed.",
+              refreshError?.message ?? "An error occurred while trying to refresh the access token following a 401 response from the server."
+            );
+          }
+          if (refreshTokenResponse) {
+            return httpClient.all && httpClient.all(requests).then((response) => {
+              return Promise.resolve(response);
+            }).catch(async (error2) => {
+              if (isHttpHandlerEnabled) {
+                if (typeof httpErrorCallback === "function") {
+                  await httpErrorCallback(error2);
+                }
+                if (typeof httpFinishCallback === "function") {
+                  httpFinishCallback();
+                }
+              }
+              return Promise.reject(error2);
+            });
+          }
         }
-        if (tokenRequestConfig) {
-          _dataLayer.setTemporaryDataParameter(TOKEN_REQUEST_CONFIG_KEY, JSON.stringify(tokenRequestConfig));
+        if (isHttpHandlerEnabled) {
+          if (typeof httpErrorCallback === "function") {
+            await httpErrorCallback(error);
+          }
+          if (typeof httpFinishCallback === "function") {
+            httpFinishCallback();
+          }
         }
-        if (signInConfig["response_mode"] === "direct") {
-          const authorizeUrl = new URL(url);
-          return (0, import_javascript6.initializeApplicationNativeAuthentication)({
-            url: `${authorizeUrl.origin}${authorizeUrl.pathname}`,
-            payload: Object.fromEntries(authorizeUrl.searchParams.entries())
-          });
+        return Promise.reject(error);
+      });
+    } else {
+      throw new import_javascript6.AsgardeoAuthException(
+        "SPA-AUTH_HELPER-HRA-IV02",
+        "Request to the provided endpoint is prohibited.",
+        "Requests can only be sent to resource servers specified by the `resourceServerURLs` attribute while initializing the SDK. The specified endpoint in this request cannot be found among the `resourceServerURLs`"
+      );
+    }
+  }
+  async requestAccessToken(authorizationCode, sessionState, checkSession, pkce, state, tokenRequestConfig) {
+    const config = await this._storageManager.getConfigData();
+    if (config.storage === "browserMemory" /* BrowserMemory */ && config.enablePKCE && sessionState) {
+      const pkce2 = SPAUtils.getPKCE((0, import_javascript6.extractPkceStorageKeyFromState)(sessionState));
+      await this._authenticationClient.setPKCECode((0, import_javascript6.extractPkceStorageKeyFromState)(sessionState), pkce2);
+    } else if (config.storage === "webWorker" /* WebWorker */ && pkce) {
+      await this._authenticationClient.setPKCECode(pkce, state ?? "");
+    }
+    if (authorizationCode) {
+      return this._authenticationClient.requestAccessToken(authorizationCode, sessionState ?? "", state ?? "", void 0, tokenRequestConfig).then(async () => {
+        if (config.storage !== "webWorker" /* WebWorker */) {
+          SPAUtils.setSignOutURL(await this._authenticationClient.getSignOutUrl(), config.clientId, this._instanceID);
+          if (this._spaHelper) {
+            this._spaHelper.clearRefreshTokenTimeout();
+            this._spaHelper.refreshAccessTokenAutomatically(this);
+          }
+          if (checkSession && typeof checkSession === "function" && config.enableOIDCSessionManagement) {
+            checkSession();
+          }
         } else {
-          location.href = url;
+          if (this._spaHelper) {
+            this._spaHelper.refreshAccessTokenAutomatically(this);
+          }
         }
-        await SPAUtils.waitTillPageRedirect();
-        return Promise.resolve({
-          allowedScopes: "",
-          displayName: "",
-          email: "",
-          sessionState: "",
-          sub: "",
-          tenantDomain: "",
-          username: ""
-        });
+        return this._authenticationClient.getUser();
+      }).catch((error) => {
+        return Promise.reject(error);
+      });
+    }
+    return Promise.reject(
+      new import_javascript6.AsgardeoAuthException(
+        "SPA-AUTH_HELPER-RAT1-NF01",
+        "No authorization code.",
+        "No authorization code was found."
+      )
+    );
+  }
+  async trySignInSilently(constructSilentSignInUrl, requestAccessToken, sessionManagementHelper, additionalParams, tokenRequestConfig) {
+    if (SPAUtils.isInitializedSilentSignIn()) {
+      await sessionManagementHelper.receivePromptNoneResponse();
+      return Promise.resolve({
+        allowedScopes: "",
+        displayName: "",
+        email: "",
+        sessionState: "",
+        sub: "",
+        tenantDomain: "",
+        username: ""
       });
     }
-  };
-  const signOut = async () => {
-    if (await _authenticationClient.isSignedIn() && !_getSignOutURLFromSessionStorage) {
-      location.href = await _authenticationClient.getSignOutUrl();
-    } else {
-      location.href = SPAUtils.getSignOutUrl(config.clientId, instanceID);
-    }
-    _spaHelper.clearRefreshTokenTimeout();
-    await _dataLayer.removeOIDCProviderMetaData();
-    await _dataLayer.removeTemporaryData();
-    await _dataLayer.removeSessionData();
-    await _dataLayer.removeSessionStatus();
-    await SPAUtils.waitTillPageRedirect();
-    return true;
-  };
-  const enableRetrievingSignOutURLFromSession = (config2) => {
-    if (config2.preventSignOutURLUpdate) {
-      _getSignOutURLFromSessionStorage = true;
-    }
-  };
-  const exchangeToken = async (config2) => {
-    return await _authenticationHelper.exchangeToken(config2, enableRetrievingSignOutURLFromSession);
-  };
-  const refreshAccessToken = async () => {
+    const rpIFrame = document.getElementById(RP_IFRAME);
+    const promptNoneIFrame = rpIFrame?.contentDocument?.getElementById(
+      PROMPT_NONE_IFRAME
+    );
     try {
-      return await _authenticationHelper.refreshAccessToken(enableRetrievingSignOutURLFromSession);
+      const url = await constructSilentSignInUrl(additionalParams);
+      promptNoneIFrame.src = url;
     } catch (error) {
       return Promise.reject(error);
     }
-  };
-  const revokeAccessToken = async () => {
-    const timer = await _spaHelper.getRefreshTimeoutTimer();
-    return _authenticationClient.revokeAccessToken().then(() => {
-      _sessionManagementHelper.reset();
-      _spaHelper.clearRefreshTokenTimeout(timer);
-      return Promise.resolve(true);
-    }).catch((error) => Promise.reject(error));
-  };
-  const requestAccessToken = async (resolvedAuthorizationCode, resolvedSessionState, resolvedState, tokenRequestConfig) => {
-    return await _authenticationHelper.requestAccessToken(
-      resolvedAuthorizationCode,
-      resolvedSessionState,
-      checkSession,
-      void 0,
-      resolvedState,
-      tokenRequestConfig
-    );
-  };
-  const constructSilentSignInUrl = async (additionalParams = {}) => {
-    const config2 = await _dataLayer.getConfigData();
-    const urlString = await _authenticationClient.getSignInUrl({
-      prompt: "none",
-      state: SILENT_SIGN_IN_STATE,
-      ...additionalParams
+    return new Promise((resolve, reject) => {
+      const timer = setTimeout(() => {
+        resolve(false);
+      }, 1e4);
+      const listenToPromptNoneIFrame = async (e) => {
+        const data = e.data;
+        if (data?.type == CHECK_SESSION_SIGNED_OUT) {
+          window.removeEventListener("message", listenToPromptNoneIFrame);
+          clearTimeout(timer);
+          resolve(false);
+        }
+        if (data?.type == CHECK_SESSION_SIGNED_IN && data?.data?.code) {
+          requestAccessToken(data?.data?.code, data?.data?.sessionState, data?.data?.state, tokenRequestConfig).then((response) => {
+            window.removeEventListener("message", listenToPromptNoneIFrame);
+            resolve(response);
+          }).catch((error) => {
+            window.removeEventListener("message", listenToPromptNoneIFrame);
+            reject(error);
+          }).finally(() => {
+            clearTimeout(timer);
+          });
+        }
+      };
+      window.addEventListener("message", listenToPromptNoneIFrame);
     });
-    const urlObject = new URL(urlString);
-    urlObject.searchParams.set("response_mode", "query");
-    const url = urlObject.toString();
-    if (config2.storage === "browserMemory" /* BrowserMemory */ && config2.enablePKCE) {
-      const state = urlObject.searchParams.get(import_javascript6.OIDCRequestConstants.Params.STATE);
-      SPAUtils.setPKCE(
-        (0, import_javascript6.extractPkceStorageKeyFromState)(state ?? ""),
-        await _authenticationClient.getPKCECode(state ?? "")
-      );
+  }
+  async handleSignIn(shouldStopAuthn, checkSession, tryRetrievingUserInfo) {
+    const config = await this._storageManager.getConfigData();
+    if (await shouldStopAuthn()) {
+      return Promise.resolve({
+        allowedScopes: "",
+        displayName: "",
+        email: "",
+        sessionState: "",
+        sub: "",
+        tenantDomain: "",
+        username: ""
+      });
     }
-    return url;
-  };
-  const trySignInSilently = async (additionalParams, tokenRequestConfig) => {
-    return await _authenticationHelper.trySignInSilently(
-      constructSilentSignInUrl,
-      requestAccessToken,
-      _sessionManagementHelper,
-      additionalParams,
-      tokenRequestConfig
-    );
-  };
-  const getUser = async () => {
-    return _authenticationHelper.getUser();
-  };
-  const getDecodedIdToken = async () => {
-    return _authenticationHelper.getDecodedIdToken();
-  };
-  const getCrypto = async () => {
-    return _authenticationHelper.getCrypto();
-  };
-  const getIdToken = async () => {
-    return _authenticationHelper.getIdToken();
-  };
-  const getOpenIDProviderEndpoints = async () => {
-    return _authenticationHelper.getOpenIDProviderEndpoints();
-  };
-  const getAccessToken = async () => {
-    return _authenticationHelper.getAccessToken();
-  };
-  const getStorageManager = async () => {
-    return _authenticationHelper.getStorageManager();
-  };
-  const getConfigData = async () => {
-    return await _dataLayer.getConfigData();
-  };
-  const isSignedIn = async () => {
-    return _authenticationHelper.isSignedIn();
-  };
-  const isSessionActive = async () => {
-    return await _dataLayer.getSessionStatus() === "true";
-  };
-  const reInitialize = async (newConfig) => {
-    const existingConfig = await _dataLayer.getConfigData();
-    const isCheckSessionIframeDifferent = !(existingConfig && existingConfig.endpoints && existingConfig.endpoints.checkSessionIframe && newConfig && newConfig.endpoints && newConfig.endpoints.checkSessionIframe && existingConfig.endpoints.checkSessionIframe === newConfig.endpoints.checkSessionIframe);
-    const config2 = { ...existingConfig, ...newConfig };
-    await _authenticationClient.reInitialize(config2);
-    if (config2.enableOIDCSessionManagement && isCheckSessionIframeDifferent) {
-      _sessionManagementHelper.reset();
-      checkSession();
+    if (config.storage !== "webWorker" /* WebWorker */) {
+      if (await this._authenticationClient.isSignedIn()) {
+        this._spaHelper.clearRefreshTokenTimeout();
+        this._spaHelper.refreshAccessTokenAutomatically(this);
+        if (config.enableOIDCSessionManagement) {
+          checkSession();
+        }
+        return Promise.resolve(await this._authenticationClient.getUser());
+      }
     }
-  };
-  return {
-    disableHttpHandler,
-    enableHttpHandler,
-    getAccessToken,
-    getUser,
-    getConfigData,
-    getCrypto,
-    getStorageManager,
-    getDecodedIdToken,
-    getHttpClient,
-    getIdToken,
-    getOpenIDProviderEndpoints,
-    httpRequest,
-    httpRequestAll,
-    isSignedIn,
-    isSessionActive,
-    refreshAccessToken,
-    exchangeToken,
-    revokeAccessToken,
-    setHttpRequestErrorCallback,
-    setHttpRequestFinishCallback,
-    setHttpRequestStartCallback,
-    setHttpRequestSuccessCallback,
-    signIn,
-    signOut,
-    trySignInSilently,
-    reInitialize
-  };
+    const error = new URL(window.location.href).searchParams.get(ERROR);
+    const errorDescription = new URL(window.location.href).searchParams.get(ERROR_DESCRIPTION);
+    if (error) {
+      const url = new URL(window.location.href);
+      url.searchParams.delete(ERROR);
+      url.searchParams.delete(ERROR_DESCRIPTION);
+      history.pushState(null, document.title, url.toString());
+      throw new import_javascript6.AsgardeoAuthException("SPA-AUTH_HELPER-SI-SE01", error, errorDescription ?? "");
+    }
+    if (config.storage === "webWorker" /* WebWorker */ && tryRetrievingUserInfo) {
+      const basicUserInfo = await tryRetrievingUserInfo();
+      if (basicUserInfo) {
+        return basicUserInfo;
+      }
+    }
+    return Promise.resolve(void 0);
+  }
+  async attachTokenToRequestConfig(request) {
+    const requestConfig = { attachToken: true, ...request };
+    if (requestConfig.attachToken) {
+      if (requestConfig.shouldAttachIDPAccessToken) {
+        request.headers = {
+          ...request.headers,
+          Authorization: `Bearer ${await this.getIDPAccessToken()}`
+        };
+      } else {
+        request.headers = {
+          ...request.headers,
+          Authorization: `Bearer ${await this.getAccessToken()}`
+        };
+      }
+    }
+  }
+  async getUser() {
+    return this._authenticationClient.getUser();
+  }
+  async getDecodedIdToken(sessionId) {
+    return this._authenticationClient.getDecodedIdToken(sessionId);
+  }
+  async getDecodedIDPIDToken() {
+    return this._authenticationClient.getDecodedIdToken();
+  }
+  async getCrypto() {
+    return this._authenticationClient.getCrypto();
+  }
+  async getIdToken() {
+    return this._authenticationClient.getIdToken();
+  }
+  async getOpenIDProviderEndpoints() {
+    return this._authenticationClient.getOpenIDProviderEndpoints();
+  }
+  async getAccessToken() {
+    return this._authenticationClient.getAccessToken();
+  }
+  async getIDPAccessToken() {
+    return (await this._storageManager.getSessionData())?.access_token;
+  }
+  getStorageManager() {
+    return this._storageManager;
+  }
+  async isSignedIn() {
+    return this._authenticationClient.isSignedIn();
+  }
 };
 
 // src/__legacy__/clients/web-worker-client.ts
-var import_javascript7 = require("@asgardeo/javascript");
 var initiateStore2 = (store) => {
   switch (store) {
     case "localStorage" /* LocalStorage */:
@@ -3949,7 +3907,7 @@ var WebWorkerClient = async (instanceID, config, webWorker, getAuthHelper) => {
       return Promise.reject(error);
     });
   };
-  const getDecodedIdToken = () => {
+  const getDecodedIdToken = (sessionId) => {
     const message = {
       type: GET_DECODED_ID_TOKEN
     };
@@ -4069,7 +4027,7 @@ var WebWorkerClient = async (instanceID, config, webWorker, getAuthHelper) => {
 
 // src/__legacy__/client.ts
 var DefaultConfig = {
-  autoLogoutOnTokenRefreshError: true,
+  autoLogoutOnTokenRefreshError: false,
   checkSessionInterval: 3,
   enableOIDCSessionManagement: false,
   periodicTokenRefresh: false,
@@ -4648,9 +4606,9 @@ var _AsgardeoSPAClient = class _AsgardeoSPAClient {
    *
    * @preserve
    */
-  async getDecodedIdToken() {
+  async getDecodedIdToken(sessionId) {
     await this._validateMethod();
-    return this._client?.getDecodedIdToken();
+    return this._client?.getDecodedIdToken(sessionId);
   }
   /**
    * This method returns the IsomorphicCrypto instance.
@@ -5112,8 +5070,8 @@ var WebWorkerCore = async (config, getAuthHelper) => {
   const getUser = async () => {
     return _authenticationHelper.getUser();
   };
-  const getDecodedIdToken = async () => {
-    return _authenticationHelper.getDecodedIdToken();
+  const getDecodedIdToken = async (sessionId) => {
+    return _authenticationHelper.getDecodedIdToken(sessionId);
   };
   const getCrypto = async () => {
     return _authenticationHelper.getCrypto();
@@ -5385,17 +5343,6 @@ var workerReceiver = (getAuthHelper) => {
   };
 };
 
-// src/constants/StyleConstants.ts
-var StyleConstants = class {
-  constructor() {
-  }
-};
-/**
- * CSS class prefix for out of the box components.
- */
-__publicField(StyleConstants, "VENDOR_CSS_CLASS_PREFIX", "asgardeo");
-var StyleConstants_default = StyleConstants;
-
 // src/utils/hasAuthParamsInUrl.ts
 var hasAuthParamsInUrl = (params = window.location.search) => {
   const MATCHER = /[?&]code=[^&]+/;
@@ -5403,12 +5350,6 @@ var hasAuthParamsInUrl = (params = window.location.search) => {
 };
 var hasAuthParamsInUrl_default = hasAuthParamsInUrl;
 
-// src/utils/withVendorCSSClassPrefix.ts
-var withVendorCSSClassPrefix = (className) => {
-  return `${StyleConstants_default.VENDOR_CSS_CLASS_PREFIX}-${className}`;
-};
-var withVendorCSSClassPrefix_default = withVendorCSSClassPrefix;
-
 // src/AsgardeoBrowserClient.ts
 var import_javascript11 = require("@asgardeo/javascript");
 var AsgardeoBrowserClient = class extends import_javascript11.AsgardeoJavaScriptClient {
@@ -5417,6 +5358,73 @@ var AsgardeoBrowserClient_default = AsgardeoBrowserClient;
 
 // src/index.ts
 __reExport(index_exports, require("@asgardeo/javascript"), module.exports);
+
+// src/theme/themeDetection.ts
+var detectThemeMode = (mode, config = {}) => {
+  const {
+    darkClass = "dark",
+    lightClass = "light",
+    targetElement = typeof document !== "undefined" ? document.documentElement : null
+  } = config;
+  if (mode === "light") return "light";
+  if (mode === "dark") return "dark";
+  if (mode === "system") {
+    if (typeof window !== "undefined" && window.matchMedia) {
+      return window.matchMedia("(prefers-color-scheme: dark)").matches ? "dark" : "light";
+    }
+    return "light";
+  }
+  if (mode === "class") {
+    if (!targetElement) {
+      console.warn("ThemeDetection: targetElement is required for class-based detection, falling back to light mode");
+      return "light";
+    }
+    const classList = targetElement.classList;
+    if (classList.contains(darkClass)) {
+      return "dark";
+    }
+    if (classList.contains(lightClass)) {
+      return "light";
+    }
+    return "light";
+  }
+  return "light";
+};
+var createClassObserver = (targetElement, callback, config = {}) => {
+  const { darkClass = "dark", lightClass = "light" } = config;
+  const observer = new MutationObserver((mutations) => {
+    mutations.forEach((mutation) => {
+      if (mutation.type === "attributes" && mutation.attributeName === "class") {
+        const classList = targetElement.classList;
+        if (classList.contains(darkClass)) {
+          callback(true);
+        } else if (classList.contains(lightClass)) {
+          callback(false);
+        }
+      }
+    });
+  });
+  observer.observe(targetElement, {
+    attributes: true,
+    attributeFilter: ["class"]
+  });
+  return observer;
+};
+var createMediaQueryListener = (callback) => {
+  if (typeof window === "undefined" || !window.matchMedia) {
+    return null;
+  }
+  const mediaQuery = window.matchMedia("(prefers-color-scheme: dark)");
+  const handleChange = (e) => {
+    callback(e.matches);
+  };
+  if (mediaQuery.addEventListener) {
+    mediaQuery.addEventListener("change", handleChange);
+  } else {
+    mediaQuery.addListener(handleChange);
+  }
+  return mediaQuery;
+};
 /*! Bundled license information:
 
 ieee754/index.js: