@asgardeo/javascript 0.1.0 → 0.1.2

package/dist/models/organization.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+export interface Organization {
+    id: string;
+    name: string;
+    orgHandle: string;
+    ref?: string;
+    status?: string;
+}

package/dist/models/token.d.ts

@@ -31,11 +31,11 @@ export interface TokenResponse {
      */
     accessToken: string;
     /**
-     * JSON Web Token (JWT) containing user identity information.
-     * This token can be decoded to access user claims and metadata
-     * without additional server requests.
+     * Unix timestamp (in seconds) when the token was created.
+     * Used in combination with expiresIn to determine when
+     * the token needs to be refreshed.
      */
-    idToken: string;
+    createdAt: number;
     /**
      * Duration in seconds until the access token expires.
      * Applications should refresh the token before this time
@@ -43,29 +43,29 @@ export interface TokenResponse {
      */
     expiresIn: string;
     /**
-     * Space-separated list of OAuth scopes granted to the application.
-     * These scopes determine what resources and actions the application
-     * has permission to access.
+     * JSON Web Token (JWT) containing user identity information.
+     * This token can be decoded to access user claims and metadata
+     * without additional server requests.
      */
-    scope: string;
+    idToken: string;
     /**
      * Token used to obtain new access tokens without re-authentication.
      * Store this securely as it enables long-term access to the user's
      * account through the refresh flow.
      */
     refreshToken: string;
+    /**
+     * Space-separated list of OAuth scopes granted to the application.
+     * These scopes determine what resources and actions the application
+     * has permission to access.
+     */
+    scope: string;
     /**
      * The type of token issued, typically "Bearer".
      * This indicates how the token should be used in
      * API request Authorization headers.
      */
     tokenType: string;
-    /**
-     * Unix timestamp (in seconds) when the token was created.
-     * Used in combination with expiresIn to determine when
-     * the token needs to be refreshed.
-     */
-    createdAt: number;
 }
 /**
  * Represents the raw token response received directly from the authentication server.
@@ -82,18 +82,18 @@ export interface AccessTokenApiResponse {
      * before any processing or validation.
      */
     access_token: string;
-    /**
-     * Raw expiration time in seconds.
-     * Indicates how long the access token will be valid
-     * from the time it was issued.
-     */
-    expires_in: string;
     /**
      * Server-provided creation timestamp in Unix seconds.
      * Used to track when the token was originally issued
      * and calculate absolute expiration time.
      */
     created_at: number;
+    /**
+     * Raw expiration time in seconds.
+     * Indicates how long the access token will be valid
+     * from the time it was issued.
+     */
+    expires_in: string;
     /**
      * Raw ID token string containing encoded user information.
      * This JWT can be decoded to access standardized claims
@@ -122,27 +122,39 @@ export interface AccessTokenApiResponse {
 /**
  * Interface for the standard (required) claims of an ID Token payload.
  */
-export interface IdTokenPayloadStandardClaims {
+export interface KnownIdToken {
     /**
      * The audience for which this token is intended.
      */
     aud: string | string[];
     /**
-     * The unique identifier of the user to whom the ID token belongs.
+     * The email of the user.
      */
-    sub: string;
+    email?: string;
     /**
      * The issuer identifier for the issuer of the response.
      */
     iss: string;
     /**
-     * The email of the user.
+     * The unique human readable slug of the organization to which the user belongs.
      */
-    email?: string;
+    org_handle?: string;
+    /**
+     * The unique identifier of the organization to which the user belongs.
+     */
+    org_id?: string;
+    /**
+     * The human readable name of the organization to which the user belongs.
+     */
+    org_name?: string;
     /**
      * The username the user prefers to be called.
      */
     preferred_username?: string;
+    /**
+     * The unique identifier of the user to whom the ID token belongs.
+     */
+    sub: string;
     /**
      * The tenant domain of the user.
      */
@@ -151,18 +163,18 @@ export interface IdTokenPayloadStandardClaims {
 /**
  * Interface for ID Token payload including custom claims.
  */
-export interface IdTokenPayload extends IdTokenPayloadStandardClaims {
+export interface IdToken extends KnownIdToken {
     /**
      * Other custom claims.
      */
     [claim: string]: any;
 }
 export interface TokenExchangeRequestConfig {
-    id: string;
-    data: any;
-    signInRequired: boolean;
     attachToken: boolean;
+    data: any;
+    id: string;
     returnsSession: boolean;
-    tokenEndpoint?: string;
     shouldReplayAfterRefresh?: boolean;
+    signInRequired: boolean;
+    tokenEndpoint?: string;
 }

package/dist/theme/createTheme.d.ts

@@ -15,7 +15,7 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { RecursivePartial } from '../models/utility-types';
 import { Theme, ThemeConfig } from './types';
+import { RecursivePartial } from '../models/utility-types';
 declare const createTheme: (config?: RecursivePartial<ThemeConfig>, isDark?: boolean) => Theme;
 export default createTheme;

package/dist/theme/types.d.ts

@@ -16,43 +16,68 @@
  * under the License.
  */
 export interface ThemeColors {
-    primary: {
+    background: {
+        body: {
+            main: string;
+        };
+        disabled: string;
+        surface: string;
+    };
+    border: string;
+    error: {
+        contrastText: string;
         main: string;
+    };
+    primary: {
         contrastText: string;
+        main: string;
     };
     secondary: {
-        main: string;
         contrastText: string;
+        main: string;
     };
-    background: {
-        surface: string;
-        disabled: string;
-        body: {
-            main: string;
-        };
+    success: {
+        contrastText: string;
+        main: string;
     };
     text: {
         primary: string;
         secondary: string;
     };
-    border: string;
-    error: {
-        main: string;
+    warning: {
         contrastText: string;
+        main: string;
     };
 }
 export interface ThemeConfig {
-    colors: ThemeColors;
-    spacing: {
-        unit: number;
-    };
     borderRadius: {
-        small: string;
+        large: string;
         medium: string;
+        small: string;
+    };
+    colors: ThemeColors;
+    shadows: {
         large: string;
+        medium: string;
+        small: string;
+    };
+    spacing: {
+        unit: number;
     };
 }
 export interface Theme extends ThemeConfig {
     cssVariables: Record<string, string>;
 }
-export type ThemeMode = 'light' | 'dark' | 'system';
+export type ThemeMode = 'light' | 'dark' | 'system' | 'class';
+export interface ThemeDetection {
+    /**
+     * The CSS class name to detect for dark mode (without the dot)
+     * @default 'dark'
+     */
+    darkClass?: string;
+    /**
+     * The CSS class name to detect for light mode (without the dot)
+     * @default 'light'
+     */
+    lightClass?: string;
+}

package/dist/utils/deriveOrganizationHandleFromBaseUrl.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Extracts the organization handle from an Asgardeo base URL.
+ *
+ * This function parses Asgardeo URLs with the standard pattern:
+ * - https://dev.asgardeo.io/t/{orgHandle}
+ * - https://stage.asgardeo.io/t/{orgHandle}
+ * - https://prod.asgardeo.io/t/{orgHandle}
+ * - https://{subdomain}.asgardeo.io/t/{orgHandle}
+ *
+ * @param baseUrl - The base URL of the Asgardeo identity server
+ * @returns The extracted organization handle
+ * @throws {AsgardeoRuntimeError} When the URL doesn't match the expected Asgardeo pattern,
+ *   indicating a custom domain is configured and organizationHandle must be provided explicitly
+ *
+ * @example
+ * ```typescript
+ * // Standard Asgardeo URLs
+ * const handle1 = deriveOrganizationHandleFromBaseUrl('https://dev.asgardeo.io/t/dxlab');
+ * // Returns: 'dxlab'
+ *
+ * const handle2 = deriveOrganizationHandleFromBaseUrl('https://stage.asgardeo.io/t/myorg');
+ * // Returns: 'myorg'
+ *
+ * // Custom domain - throws error
+ * deriveOrganizationHandleFromBaseUrl('https://custom.example.com/auth');
+ * // Throws: AsgardeoRuntimeError
+ * ```
+ */
+declare const deriveOrganizationHandleFromBaseUrl: (baseUrl?: string) => string;
+export default deriveOrganizationHandleFromBaseUrl;

package/dist/utils/extractTenantDomainFromIdTokenPayload.d.ts

@@ -15,7 +15,7 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { IdTokenPayload } from '../models/token';
+import { IdToken } from '../models/token';
 /**
  * Extracts the tenant domain from the ID token payload.
  *
@@ -27,5 +27,5 @@ import { IdTokenPayload } from '../models/token';
  *
  * Consider extracting the tenant domain using a dedicated claim (e.g., `tenant_domain`) when available.
  */
-declare const extractTenantDomainFromIdTokenPayload: (payload: IdTokenPayload, subjectSeparator?: string) => string;
+declare const extractTenantDomainFromIdTokenPayload: (payload: IdToken, subjectSeparator?: string) => string;
 export default extractTenantDomainFromIdTokenPayload;

package/dist/utils/extractUserClaimsFromIdToken.d.ts

@@ -15,7 +15,7 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { IdTokenPayload } from '../models/token';
+import { IdToken } from '../models/token';
 /**
  * Removes standard protocol-specific claims from the ID token payload
  * and returns a camelCased object of user-specific claims.
@@ -40,5 +40,5 @@ import { IdTokenPayload } from '../models/token';
  * // }
  * ```
  */
-declare const extractUserClaimsFromIdToken: (payload: IdTokenPayload) => Record<string, unknown>;
+declare const extractUserClaimsFromIdToken: (payload: IdToken) => Record<string, unknown>;
 export default extractUserClaimsFromIdToken;

package/dist/utils/generateFlattenedUserProfile.d.ts

@@ -23,6 +23,9 @@ import { User } from '../models/user';
  * a flat object with dot notation keys instead of nested objects. Multi-valued
  * properties and type-specific defaults are handled appropriately.
  *
+ * Additionally, any fields present in the response but not defined in the schema
+ * will be included to ensure no user data is lost during flattening.
+ *
  * @param meResponse - The response object containing user data
  * @param processedSchemas - Array of schema objects defining field properties
  * @param processedSchemas[].name - The field name/path for the property
@@ -37,9 +40,13 @@ import { User } from '../models/user';
  *   { name: 'name.givenName', type: 'STRING', multiValued: false },
  *   { name: 'emails', type: 'STRING', multiValued: true }
  * ];
- * const response = { name: { givenName: 'John' }, emails: 'john@example.com' };
+ * const response = {
+ *   name: { givenName: 'John' },
+ *   emails: 'john@example.com',
+ *   country: 'US' // This will be included even if not in schema
+ * };
  * const profile = generateFlattenedUserProfile(response, schemas);
- * // Result: { "name.givenName": 'John', emails: ['john@example.com'] }
+ * // Result: { "name.givenName": 'John', emails: ['john@example.com'], country: 'US' }
  * ```
  */
 declare const generateFlattenedUserProfile: (meResponse: any, processedSchemas: any[]) => User;

package/dist/utils/isEmpty.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Checks if a value is considered empty.
+ *
+ * A value is considered empty if it is:
+ * - null
+ * - undefined
+ * - empty string ("")
+ * - string containing only whitespace characters
+ * - empty array ([])
+ * - empty object ({})
+ *
+ * @param value - The value to check
+ * @returns true if the value is empty, false otherwise
+ *
+ * @example
+ * ```typescript
+ * isEmpty(null);              // true
+ * isEmpty(undefined);         // true
+ * isEmpty("");                // true
+ * isEmpty("   ");             // true
+ * isEmpty("hello");           // false
+ * isEmpty([]);                // true
+ * isEmpty([1, 2, 3]);         // false
+ * isEmpty({});                // true
+ * isEmpty({ name: "John" });  // false
+ * isEmpty(0);                 // false
+ * isEmpty(false);             // false
+ * ```
+ */
+declare const isEmpty: (value: any) => boolean;
+export default isEmpty;

package/dist/utils/withVendorCSSClassPrefix.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Adds a vendor-specific prefix to a CSS class name.
+ *
+ * @param className - The original CSS class name to be prefixed
+ * @returns A new string with the vendor prefix added to the class name
+ *
+ * @example
+ * ```typescript
+ * // Usage with clsx
+ * clsx(withVendorCSSClassPrefix('sign-in-button'), className)
+ * // Result: "wso2-sign-in-button"
+ * ```
+ */
+declare const withVendorCSSClassPrefix: (className: string) => string;
+export default withVendorCSSClassPrefix;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@asgardeo/javascript",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Framework agnostic JavaScript SDK for Asgardeo.",
   "keywords": [
     "asgardeo",

package/dist/api/handleApplicationNativeAuthentication.d.ts

@@ -1,33 +0,0 @@
-/**
- * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
- *
- * WSO2 LLC. licenses this file to you under the Apache License,
- * Version 2.0 (the "License"); you may not use this file except
- * in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied. See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-import { ApplicationNativeAuthenticationHandleRequestPayload, ApplicationNativeAuthenticationHandleResponse } from '../models/application-native-authentication';
-/**
- * Request configuration for the authorize function.
- */
-export interface AuthorizeRequestConfig extends Partial<Request> {
-    /**
-     * The base URL of the Asgardeo server.
-     */
-    baseUrl?: string;
-    /**
-     * The authorization request payload.
-     */
-    payload: ApplicationNativeAuthenticationHandleRequestPayload;
-}
-declare const handleApplicationNativeAuthentication: ({ url, baseUrl, payload, ...requestConfig }: AuthorizeRequestConfig) => Promise<ApplicationNativeAuthenticationHandleResponse>;
-export default handleApplicationNativeAuthentication;

package/dist/api/initializeApplicationNativeAuthentication.d.ts

@@ -1,117 +0,0 @@
-/**
- * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
- *
- * WSO2 LLC. licenses this file to you under the Apache License,
- * Version 2.0 (the "License"); you may not use this file except
- * in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied. See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-import { ApplicationNativeAuthenticationInitiateResponse } from '../models/application-native-authentication';
-/**
- * Represents the authorization request payload that can be sent to the authorization endpoint.
- */
-export interface AuthorizationRequest {
-    /**
-     * The response type (e.g., 'code', 'token', 'id_token').
-     */
-    response_type?: string;
-    /**
-     * The client identifier.
-     */
-    client_id?: string;
-    /**
-     * The redirection URI after authorization.
-     */
-    redirect_uri?: string;
-    /**
-     * The scope of the access request.
-     */
-    scope?: string;
-    /**
-     * An unguessable random string to prevent CSRF attacks.
-     */
-    state?: string;
-    /**
-     * String value used to associate a Client session with an ID Token.
-     */
-    nonce?: string;
-    /**
-     * How the authorization response should be returned.
-     */
-    response_mode?: string;
-    /**
-     * Space delimited, case sensitive list of ASCII string values.
-     */
-    prompt?: string;
-    /**
-     * The allowable elapsed time in seconds since the last time the End-User was actively authenticated.
-     */
-    max_age?: number;
-    /**
-     * PKCE code challenge.
-     */
-    code_challenge?: string;
-    /**
-     * PKCE code challenge method.
-     */
-    code_challenge_method?: string;
-    /**
-     * Additional authorization parameters.
-     */
-    [key: string]: any;
-}
-/**
- * Request configuration for the authorize function.
- */
-export interface AuthorizeRequestConfig extends Partial<Request> {
-    url?: string;
-    /**
-     * The base URL of the Asgardeo server.
-     */
-    baseUrl?: string;
-    /**
-     * The authorization request payload.
-     */
-    payload: AuthorizationRequest;
-}
-/**
- * Sends an authorization request to the specified OAuth2/OIDC authorization endpoint.
- *
- * @param requestConfig - Request configuration object containing URL and payload.
- * @returns A promise that resolves with the authorization response.
- * @throws AsgardeoAPIError when the request fails or URL is invalid.
- *
- * @example
- * ```typescript
- * try {
- *   const authResponse = await initializeApplicationNativeAuthentication({
- *     url: "https://api.asgardeo.io/t/<ORGANIZATION>/oauth2/authorize",
- *     payload: {
- *       response_type: "code",
- *       client_id: "your-client-id",
- *       redirect_uri: "https://your-app.com/callback",
- *       scope: "openid profile email",
- *       state: "random-state-value",
- *       code_challenge: "your-pkce-challenge",
- *       code_challenge_method: "S256"
- *     }
- *   });
- *   console.log(authResponse);
- * } catch (error) {
- *   if (error instanceof AsgardeoAPIError) {
- *     console.error('Authorization failed:', error.message);
- *   }
- * }
- * ```
- */
-declare const initializeApplicationNativeAuthentication: ({ url, baseUrl, payload, ...requestConfig }: AuthorizeRequestConfig) => Promise<ApplicationNativeAuthenticationInitiateResponse>;
-export default initializeApplicationNativeAuthentication;