@axcode/axcloud-sdk 0.3.2-dev.359fd8b → 0.3.2-dev.9bbafe5

package/README.md

@@ -137,6 +137,37 @@ function App() {
 `auth0.organization` is the Auth0 Organization ID used during login, for example `org_o960yILn77d4vY6u`.
 Set `auth0.organization` for invite-only customer member sites so Universal Login is scoped to that customer organization.
 
+### Customer-owned identity providers
+
+An organization may authenticate through its own Auth0 tenant while AxCloud
+continues to provide content, membership and authorization APIs. Configure the
+complete, reviewed provider tuple statically in the first-party site:
+
+```tsx
+<AxCloudProvider
+  orgId="org_customer"
+  apiUrl="https://dev-api.axcloud.app"
+  stage="dev"
+  auth0={{
+    identityProviderId: 'idp_customer_dev',
+    domain: 'dev-auth.customer.example',
+    clientId: 'customer-member-spa-client-id',
+    audience: 'https://api.axcloud.app',
+    organization: 'org_customer_auth0',
+    redirectUri: window.location.origin,
+  }}
+>
+  <App />
+</AxCloudProvider>
+```
+
+`identityProviderId` is a public AxCloud identifier, not a credential. It is
+included in the SDK cache-owner signature so a provider switch or rotation
+cannot reuse identity-bound query data. The SDK does not discover providers or
+hold Auth0 Management API credentials. Keep domain, client ID, audience,
+organization ID, AxCloud stage and API URL together as one environment-specific
+configuration; never mix a customer DEV tenant with AxCloud PROD APIs.
+
 ### 2. Fetch content
 
 ```tsx

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 export { A as AxCloudClient, c as createClient, g as getClient } from './client-FOpKwe3e.mjs';
-import { A as AxCloudAnalyticsOptions, U as User$1, a as UserRole, O as Organization, b as AxCloudModule, C as ContentQueryOptions, N as NewsItem, c as ContentListResponse, S as Section, d as SignedMediaUrl, e as OrganizationBranding, M as MediaItem, f as MediaListResponse, g as SignedDocumentUrl, D as DocumentQueryOptions, h as DocumentItem, i as DocumentListResponse, j as DocumentFolder, k as DocumentFolderListResponse } from './useContent-1WbKvPY4.mjs';
-export { l as AnalyticsEventData, m as AnalyticsEventValue, n as AnalyticsPublicConfig, o as AnalyticsRuntime, p as AnalyticsRuntimeConfig, q as AxCloudConfig, B as BaseRole, r as ContentCollectionType, s as ContentDetailType, t as ContentItem, u as ContentSlotImage, v as ContentSlotMap, w as ContentSlotReader, x as ContentSlotValue, y as CustomRole, z as DocumentAudience, E as DocumentSourceProvider, F as DocumentStatus, G as Membership, H as OrganizationSettings, P as Page, I as PageContentState, J as PaginatedResponse, K as SectionPermissions, L as SystemRole, Q as createContentSlotReader, R as fetchAnalyticsPublicConfig, T as getContentSlotMap, V as isAllowedAnalyticsEvent, W as isLocalAnalyticsHostname, X as sanitizeAnalyticsEventData, Y as sanitizeAnalyticsPath, Z as useAnalytics, _ as useAnalyticsRuntime, $ as useAxCloudContext, a0 as useContent, a1 as useContentItem, a2 as usePageContent, a3 as userHasAllPermissions, a4 as userHasAnyPermission, a5 as userHasPermission } from './useContent-1WbKvPY4.mjs';
+import { A as AxCloudAnalyticsOptions, U as User$1, a as UserRole, O as Organization, b as AxCloudModule, C as ContentQueryOptions, N as NewsItem, c as ContentListResponse, S as Section, d as SignedMediaUrl, e as OrganizationBranding, M as MediaItem, f as MediaListResponse, g as SignedDocumentUrl, D as DocumentQueryOptions, h as DocumentItem, i as DocumentListResponse, j as DocumentFolder, k as DocumentFolderListResponse } from './useContent-aln3Xpis.mjs';
+export { l as AnalyticsEventData, m as AnalyticsEventValue, n as AnalyticsPublicConfig, o as AnalyticsRuntime, p as AnalyticsRuntimeConfig, q as AxCloudConfig, B as BaseRole, r as ContentCollectionType, s as ContentDetailType, t as ContentItem, u as ContentSlotImage, v as ContentSlotMap, w as ContentSlotReader, x as ContentSlotValue, y as CustomRole, z as DocumentAudience, E as DocumentSourceProvider, F as DocumentStatus, G as Membership, H as OrganizationSettings, P as Page, I as PageContentState, J as PaginatedResponse, K as SectionPermissions, L as SystemRole, Q as createContentSlotReader, R as fetchAnalyticsPublicConfig, T as getContentSlotMap, V as isAllowedAnalyticsEvent, W as isLocalAnalyticsHostname, X as sanitizeAnalyticsEventData, Y as sanitizeAnalyticsPath, Z as useAnalytics, _ as useAnalyticsRuntime, $ as useAxCloudContext, a0 as useContent, a1 as useContentItem, a2 as usePageContent, a3 as userHasAllPermissions, a4 as userHasAnyPermission, a5 as userHasPermission } from './useContent-aln3Xpis.mjs';
 export { B as BarnsportActivitiesFilter, a as BarnsportActivity, b as BarnsportActivityListItem, c as BarnsportActivityLocation, d as BarnsportActivityResponse, e as BarnsportActivitySchedule, f as BarnsportInquirySubmissionRequest, g as BarnsportInterestSubmissionRequest, h as BarnsportInterestSubmissionResponse, i as BarnsportListResponse, j as BarnsportMunicipality, k as BarnsportRegistrationMethod, l as BarnsportSitemapResponse, m as BarnsportSitemapUrl, n as BarnsportSport, u as useBarnsportActivities, o as useBarnsportActivity, p as useBarnsportMunicipalities, q as useBarnsportSitemap, r as useBarnsportSport, s as useBarnsportSports, t as useSubmitBarnsportInterest } from './useBarnsport-DHyNF9GM.mjs';
 import React from 'react';
 import * as _tanstack_react_query from '@tanstack/react-query';
@@ -323,6 +323,11 @@ interface AxCloudProviderProps {
     /** Optional privacy-safe analytics collection through AxCloud. */
     analytics?: AxCloudAnalyticsOptions;
     auth0: {
+        /**
+         * Stable public AxCloud identity-provider identifier.
+         * Used only to isolate SDK-owned state across provider changes.
+         */
+        identityProviderId?: string;
         domain: string;
         clientId: string;
         redirectUri: string;
@@ -348,6 +353,7 @@ interface AxCloudProviderProps {
  *   apiUrl="https://api.axcloud.app"
  *   apiKey="your-api-key"  // Required for public content access
  *   auth0={{
+ *     identityProviderId: "idp_customer_abc123",
  *     domain: "auth.axcloud.app",
  *     clientId: "xxx",
  *     redirectUri: window.location.origin,

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { A as AxCloudClient, c as createClient, g as getClient } from './client-FOpKwe3e.js';
-import { A as AxCloudAnalyticsOptions, U as User$1, a as UserRole, O as Organization, b as AxCloudModule, C as ContentQueryOptions, N as NewsItem, c as ContentListResponse, S as Section, d as SignedMediaUrl, e as OrganizationBranding, M as MediaItem, f as MediaListResponse, g as SignedDocumentUrl, D as DocumentQueryOptions, h as DocumentItem, i as DocumentListResponse, j as DocumentFolder, k as DocumentFolderListResponse } from './useContent-Cl7dvERE.js';
-export { l as AnalyticsEventData, m as AnalyticsEventValue, n as AnalyticsPublicConfig, o as AnalyticsRuntime, p as AnalyticsRuntimeConfig, q as AxCloudConfig, B as BaseRole, r as ContentCollectionType, s as ContentDetailType, t as ContentItem, u as ContentSlotImage, v as ContentSlotMap, w as ContentSlotReader, x as ContentSlotValue, y as CustomRole, z as DocumentAudience, E as DocumentSourceProvider, F as DocumentStatus, G as Membership, H as OrganizationSettings, P as Page, I as PageContentState, J as PaginatedResponse, K as SectionPermissions, L as SystemRole, Q as createContentSlotReader, R as fetchAnalyticsPublicConfig, T as getContentSlotMap, V as isAllowedAnalyticsEvent, W as isLocalAnalyticsHostname, X as sanitizeAnalyticsEventData, Y as sanitizeAnalyticsPath, Z as useAnalytics, _ as useAnalyticsRuntime, $ as useAxCloudContext, a0 as useContent, a1 as useContentItem, a2 as usePageContent, a3 as userHasAllPermissions, a4 as userHasAnyPermission, a5 as userHasPermission } from './useContent-Cl7dvERE.js';
+import { A as AxCloudAnalyticsOptions, U as User$1, a as UserRole, O as Organization, b as AxCloudModule, C as ContentQueryOptions, N as NewsItem, c as ContentListResponse, S as Section, d as SignedMediaUrl, e as OrganizationBranding, M as MediaItem, f as MediaListResponse, g as SignedDocumentUrl, D as DocumentQueryOptions, h as DocumentItem, i as DocumentListResponse, j as DocumentFolder, k as DocumentFolderListResponse } from './useContent-Cr-3N5gS.js';
+export { l as AnalyticsEventData, m as AnalyticsEventValue, n as AnalyticsPublicConfig, o as AnalyticsRuntime, p as AnalyticsRuntimeConfig, q as AxCloudConfig, B as BaseRole, r as ContentCollectionType, s as ContentDetailType, t as ContentItem, u as ContentSlotImage, v as ContentSlotMap, w as ContentSlotReader, x as ContentSlotValue, y as CustomRole, z as DocumentAudience, E as DocumentSourceProvider, F as DocumentStatus, G as Membership, H as OrganizationSettings, P as Page, I as PageContentState, J as PaginatedResponse, K as SectionPermissions, L as SystemRole, Q as createContentSlotReader, R as fetchAnalyticsPublicConfig, T as getContentSlotMap, V as isAllowedAnalyticsEvent, W as isLocalAnalyticsHostname, X as sanitizeAnalyticsEventData, Y as sanitizeAnalyticsPath, Z as useAnalytics, _ as useAnalyticsRuntime, $ as useAxCloudContext, a0 as useContent, a1 as useContentItem, a2 as usePageContent, a3 as userHasAllPermissions, a4 as userHasAnyPermission, a5 as userHasPermission } from './useContent-Cr-3N5gS.js';
 export { B as BarnsportActivitiesFilter, a as BarnsportActivity, b as BarnsportActivityListItem, c as BarnsportActivityLocation, d as BarnsportActivityResponse, e as BarnsportActivitySchedule, f as BarnsportInquirySubmissionRequest, g as BarnsportInterestSubmissionRequest, h as BarnsportInterestSubmissionResponse, i as BarnsportListResponse, j as BarnsportMunicipality, k as BarnsportRegistrationMethod, l as BarnsportSitemapResponse, m as BarnsportSitemapUrl, n as BarnsportSport, u as useBarnsportActivities, o as useBarnsportActivity, p as useBarnsportMunicipalities, q as useBarnsportSitemap, r as useBarnsportSport, s as useBarnsportSports, t as useSubmitBarnsportInterest } from './useBarnsport-DHyNF9GM.js';
 import React from 'react';
 import * as _tanstack_react_query from '@tanstack/react-query';
@@ -323,6 +323,11 @@ interface AxCloudProviderProps {
     /** Optional privacy-safe analytics collection through AxCloud. */
     analytics?: AxCloudAnalyticsOptions;
     auth0: {
+        /**
+         * Stable public AxCloud identity-provider identifier.
+         * Used only to isolate SDK-owned state across provider changes.
+         */
+        identityProviderId?: string;
         domain: string;
         clientId: string;
         redirectUri: string;
@@ -348,6 +353,7 @@ interface AxCloudProviderProps {
  *   apiUrl="https://api.axcloud.app"
  *   apiKey="your-api-key"  // Required for public content access
  *   auth0={{
+ *     identityProviderId: "idp_customer_abc123",
  *     domain: "auth.axcloud.app",
  *     clientId: "xxx",
  *     redirectUri: window.location.origin,

package/dist/index.js

@@ -252,6 +252,7 @@ function createQueryClientOwnerSignature(config, subject) {
     config.stage,
     config.apiUrl,
     config.apiKey ?? null,
+    config.auth0.identityProviderId ?? null,
     config.auth0.domain,
     config.auth0.clientId,
     config.auth0.audience ?? null,