@axcode/axcloud-sdk 0.3.2 → 0.4.0-dev.35742cb

package/README.md

@@ -137,6 +137,37 @@ function App() {
 `auth0.organization` is the Auth0 Organization ID used during login, for example `org_o960yILn77d4vY6u`.
 Set `auth0.organization` for invite-only customer member sites so Universal Login is scoped to that customer organization.
 
+### Customer-owned identity providers
+
+An organization may authenticate through its own Auth0 tenant while AxCloud
+continues to provide content, membership and authorization APIs. Configure the
+complete, reviewed provider tuple statically in the first-party site:
+
+```tsx
+<AxCloudProvider
+  orgId="org_customer"
+  apiUrl="https://dev-api.axcloud.app"
+  stage="dev"
+  auth0={{
+    identityProviderId: 'idp_customer_dev',
+    domain: 'dev-auth.customer.example',
+    clientId: 'customer-member-spa-client-id',
+    audience: 'https://api.axcloud.app',
+    organization: 'org_customer_auth0',
+    redirectUri: window.location.origin,
+  }}
+>
+  <App />
+</AxCloudProvider>
+```
+
+`identityProviderId` is a public AxCloud identifier, not a credential. It is
+included in the SDK cache-owner signature so a provider switch or rotation
+cannot reuse identity-bound query data. The SDK does not discover providers or
+hold Auth0 Management API credentials. Keep domain, client ID, audience,
+organization ID, AxCloud stage and API URL together as one environment-specific
+configuration; never mix a customer DEV tenant with AxCloud PROD APIs.
+
 ### 2. Fetch content
 
 ```tsx
@@ -586,7 +617,7 @@ The SDK uses two types of credentials:
 | Public content | API key (x-api-key header) | `/content/public/{orgId}/news`  |
 | Member content | JWT Bearer token           | `/content/members/{orgId}/news` |
 | User data      | JWT Bearer token           | `/api/users/me`                 |
-| Admin          | JWT Bearer token + role    | `/api/admin/forms/submissions`  |
+| Admin          | JWT Bearer token + role    | `/forms/admin/submissions`      |
 
 ## Error Handling
 

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 export { A as AxCloudClient, c as createClient, g as getClient } from './client-FOpKwe3e.mjs';
-import { A as AxCloudAnalyticsOptions, U as User$1, a as UserRole, O as Organization, b as AxCloudModule, C as ContentQueryOptions, N as NewsItem, c as ContentListResponse, S as Section, d as SignedMediaUrl, e as OrganizationBranding, M as MediaItem, f as MediaListResponse, g as SignedDocumentUrl, D as DocumentQueryOptions, h as DocumentItem, i as DocumentListResponse, j as DocumentFolder, k as DocumentFolderListResponse } from './useContent-1WbKvPY4.mjs';
-export { l as AnalyticsEventData, m as AnalyticsEventValue, n as AnalyticsPublicConfig, o as AnalyticsRuntime, p as AnalyticsRuntimeConfig, q as AxCloudConfig, B as BaseRole, r as ContentCollectionType, s as ContentDetailType, t as ContentItem, u as ContentSlotImage, v as ContentSlotMap, w as ContentSlotReader, x as ContentSlotValue, y as CustomRole, z as DocumentAudience, E as DocumentSourceProvider, F as DocumentStatus, G as Membership, H as OrganizationSettings, P as Page, I as PageContentState, J as PaginatedResponse, K as SectionPermissions, L as SystemRole, Q as createContentSlotReader, R as fetchAnalyticsPublicConfig, T as getContentSlotMap, V as isAllowedAnalyticsEvent, W as isLocalAnalyticsHostname, X as sanitizeAnalyticsEventData, Y as sanitizeAnalyticsPath, Z as useAnalytics, _ as useAnalyticsRuntime, $ as useAxCloudContext, a0 as useContent, a1 as useContentItem, a2 as usePageContent, a3 as userHasAllPermissions, a4 as userHasAnyPermission, a5 as userHasPermission } from './useContent-1WbKvPY4.mjs';
+import { A as AxCloudAnalyticsOptions, U as User$1, a as UserRole, O as Organization, b as AxCloudModule, C as ContentQueryOptions, N as NewsItem, c as ContentListResponse, S as Section, d as SignedMediaUrl, e as OrganizationBranding, M as MediaItem, f as MediaListResponse, g as SignedDocumentUrl, D as DocumentQueryOptions, h as DocumentItem, i as DocumentListResponse, j as DocumentFolder, k as DocumentFolderListResponse } from './useContent-DLoyqAWH.mjs';
+export { l as AnalyticsEventData, m as AnalyticsEventValue, n as AnalyticsPublicConfig, o as AnalyticsRuntime, p as AnalyticsRuntimeConfig, q as AxCloudConfig, B as BaseRole, r as ContentCollectionType, s as ContentDetailType, t as ContentItem, u as ContentSlotImage, v as ContentSlotMap, w as ContentSlotReader, x as ContentSlotValue, y as CustomRole, z as DocumentAudience, E as DocumentSourceProvider, F as DocumentStatus, G as Membership, H as OrganizationSettings, P as Page, I as PageContentState, J as PaginatedResponse, K as SectionPermissions, L as SystemRole, Q as createContentSlotReader, R as fetchAnalyticsPublicConfig, T as getContentSlotMap, V as isAllowedAnalyticsEvent, W as isLocalAnalyticsHostname, X as sanitizeAnalyticsEventData, Y as sanitizeAnalyticsPath, Z as useAnalytics, _ as useAnalyticsRuntime, $ as useAxCloudContext, a0 as useContent, a1 as useContentItem, a2 as usePageContent, a3 as userHasAllPermissions, a4 as userHasAnyPermission, a5 as userHasPermission } from './useContent-DLoyqAWH.mjs';
 export { B as BarnsportActivitiesFilter, a as BarnsportActivity, b as BarnsportActivityListItem, c as BarnsportActivityLocation, d as BarnsportActivityResponse, e as BarnsportActivitySchedule, f as BarnsportInquirySubmissionRequest, g as BarnsportInterestSubmissionRequest, h as BarnsportInterestSubmissionResponse, i as BarnsportListResponse, j as BarnsportMunicipality, k as BarnsportRegistrationMethod, l as BarnsportSitemapResponse, m as BarnsportSitemapUrl, n as BarnsportSport, u as useBarnsportActivities, o as useBarnsportActivity, p as useBarnsportMunicipalities, q as useBarnsportSitemap, r as useBarnsportSport, s as useBarnsportSports, t as useSubmitBarnsportInterest } from './useBarnsport-DHyNF9GM.mjs';
 import React from 'react';
 import * as _tanstack_react_query from '@tanstack/react-query';
@@ -323,6 +323,11 @@ interface AxCloudProviderProps {
     /** Optional privacy-safe analytics collection through AxCloud. */
     analytics?: AxCloudAnalyticsOptions;
     auth0: {
+        /**
+         * Stable public AxCloud identity-provider identifier.
+         * Used only to isolate SDK-owned state across provider changes.
+         */
+        identityProviderId?: string;
         domain: string;
         clientId: string;
         redirectUri: string;
@@ -348,6 +353,7 @@ interface AxCloudProviderProps {
  *   apiUrl="https://api.axcloud.app"
  *   apiKey="your-api-key"  // Required for public content access
  *   auth0={{
+ *     identityProviderId: "idp_customer_abc123",
  *     domain: "auth.axcloud.app",
  *     clientId: "xxx",
  *     redirectUri: window.location.origin,

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { A as AxCloudClient, c as createClient, g as getClient } from './client-FOpKwe3e.js';
-import { A as AxCloudAnalyticsOptions, U as User$1, a as UserRole, O as Organization, b as AxCloudModule, C as ContentQueryOptions, N as NewsItem, c as ContentListResponse, S as Section, d as SignedMediaUrl, e as OrganizationBranding, M as MediaItem, f as MediaListResponse, g as SignedDocumentUrl, D as DocumentQueryOptions, h as DocumentItem, i as DocumentListResponse, j as DocumentFolder, k as DocumentFolderListResponse } from './useContent-Cl7dvERE.js';
-export { l as AnalyticsEventData, m as AnalyticsEventValue, n as AnalyticsPublicConfig, o as AnalyticsRuntime, p as AnalyticsRuntimeConfig, q as AxCloudConfig, B as BaseRole, r as ContentCollectionType, s as ContentDetailType, t as ContentItem, u as ContentSlotImage, v as ContentSlotMap, w as ContentSlotReader, x as ContentSlotValue, y as CustomRole, z as DocumentAudience, E as DocumentSourceProvider, F as DocumentStatus, G as Membership, H as OrganizationSettings, P as Page, I as PageContentState, J as PaginatedResponse, K as SectionPermissions, L as SystemRole, Q as createContentSlotReader, R as fetchAnalyticsPublicConfig, T as getContentSlotMap, V as isAllowedAnalyticsEvent, W as isLocalAnalyticsHostname, X as sanitizeAnalyticsEventData, Y as sanitizeAnalyticsPath, Z as useAnalytics, _ as useAnalyticsRuntime, $ as useAxCloudContext, a0 as useContent, a1 as useContentItem, a2 as usePageContent, a3 as userHasAllPermissions, a4 as userHasAnyPermission, a5 as userHasPermission } from './useContent-Cl7dvERE.js';
+import { A as AxCloudAnalyticsOptions, U as User$1, a as UserRole, O as Organization, b as AxCloudModule, C as ContentQueryOptions, N as NewsItem, c as ContentListResponse, S as Section, d as SignedMediaUrl, e as OrganizationBranding, M as MediaItem, f as MediaListResponse, g as SignedDocumentUrl, D as DocumentQueryOptions, h as DocumentItem, i as DocumentListResponse, j as DocumentFolder, k as DocumentFolderListResponse } from './useContent-CGI1l3Gs.js';
+export { l as AnalyticsEventData, m as AnalyticsEventValue, n as AnalyticsPublicConfig, o as AnalyticsRuntime, p as AnalyticsRuntimeConfig, q as AxCloudConfig, B as BaseRole, r as ContentCollectionType, s as ContentDetailType, t as ContentItem, u as ContentSlotImage, v as ContentSlotMap, w as ContentSlotReader, x as ContentSlotValue, y as CustomRole, z as DocumentAudience, E as DocumentSourceProvider, F as DocumentStatus, G as Membership, H as OrganizationSettings, P as Page, I as PageContentState, J as PaginatedResponse, K as SectionPermissions, L as SystemRole, Q as createContentSlotReader, R as fetchAnalyticsPublicConfig, T as getContentSlotMap, V as isAllowedAnalyticsEvent, W as isLocalAnalyticsHostname, X as sanitizeAnalyticsEventData, Y as sanitizeAnalyticsPath, Z as useAnalytics, _ as useAnalyticsRuntime, $ as useAxCloudContext, a0 as useContent, a1 as useContentItem, a2 as usePageContent, a3 as userHasAllPermissions, a4 as userHasAnyPermission, a5 as userHasPermission } from './useContent-CGI1l3Gs.js';
 export { B as BarnsportActivitiesFilter, a as BarnsportActivity, b as BarnsportActivityListItem, c as BarnsportActivityLocation, d as BarnsportActivityResponse, e as BarnsportActivitySchedule, f as BarnsportInquirySubmissionRequest, g as BarnsportInterestSubmissionRequest, h as BarnsportInterestSubmissionResponse, i as BarnsportListResponse, j as BarnsportMunicipality, k as BarnsportRegistrationMethod, l as BarnsportSitemapResponse, m as BarnsportSitemapUrl, n as BarnsportSport, u as useBarnsportActivities, o as useBarnsportActivity, p as useBarnsportMunicipalities, q as useBarnsportSitemap, r as useBarnsportSport, s as useBarnsportSports, t as useSubmitBarnsportInterest } from './useBarnsport-DHyNF9GM.js';
 import React from 'react';
 import * as _tanstack_react_query from '@tanstack/react-query';
@@ -323,6 +323,11 @@ interface AxCloudProviderProps {
     /** Optional privacy-safe analytics collection through AxCloud. */
     analytics?: AxCloudAnalyticsOptions;
     auth0: {
+        /**
+         * Stable public AxCloud identity-provider identifier.
+         * Used only to isolate SDK-owned state across provider changes.
+         */
+        identityProviderId?: string;
         domain: string;
         clientId: string;
         redirectUri: string;
@@ -348,6 +353,7 @@ interface AxCloudProviderProps {
  *   apiUrl="https://api.axcloud.app"
  *   apiKey="your-api-key"  // Required for public content access
  *   auth0={{
+ *     identityProviderId: "idp_customer_abc123",
  *     domain: "auth.axcloud.app",
  *     clientId: "xxx",
  *     redirectUri: window.location.origin,

package/dist/index.js

@@ -252,6 +252,7 @@ function createQueryClientOwnerSignature(config, subject) {
     config.stage,
     config.apiUrl,
     config.apiKey ?? null,
+    config.auth0.identityProviderId ?? null,
     config.auth0.domain,
     config.auth0.clientId,
     config.auth0.audience ?? null,
@@ -858,17 +859,18 @@ function useSections() {
     refetch: query.refetch
   };
 }
+var FORMS_ADMIN_PATH = "/forms/admin";
 function useForms(options = {}) {
-  const { client, stage } = chunk7K5N3DQ4_js.useAxCloudContext();
+  const { client, orgId } = chunk7K5N3DQ4_js.useAxCloudContext();
   const { formType, status, limit = 50, cursor } = options;
   const query = reactQuery.useQuery({
-    queryKey: ["axcloud", "forms", "submissions", stage, formType, status, limit, cursor],
+    queryKey: ["axcloud", "forms", "submissions", orgId, formType, status, limit, cursor],
     queryFn: async () => {
-      const params = { limit };
+      const params = { org_id: orgId, limit };
       if (formType) params.form_type = formType;
       if (status) params.status = status;
       if (cursor) params.cursor = cursor;
-      return client.get(`/${stage}/api/admin/forms/submissions`, params);
+      return client.get(`${FORMS_ADMIN_PATH}/submissions`, params);
     },
     staleTime: 1e3 * 30
     // 30 seconds
@@ -885,12 +887,12 @@ function useForms(options = {}) {
   };
 }
 function useFormStats(options = {}) {
-  const { client, stage } = chunk7K5N3DQ4_js.useAxCloudContext();
+  const { client, orgId } = chunk7K5N3DQ4_js.useAxCloudContext();
   const { days = 30 } = options;
   const query = reactQuery.useQuery({
-    queryKey: ["axcloud", "forms", "stats", stage, days],
+    queryKey: ["axcloud", "forms", "stats", orgId, days],
     queryFn: async () => {
-      return client.get(`/${stage}/api/admin/forms/stats`, { days });
+      return client.get(`${FORMS_ADMIN_PATH}/stats`, { org_id: orgId, days });
     },
     staleTime: 1e3 * 60 * 5
     // 5 minutes
@@ -906,7 +908,7 @@ function useFormStats(options = {}) {
   };
 }
 function useUpdateFormSubmission() {
-  const { client, stage } = chunk7K5N3DQ4_js.useAxCloudContext();
+  const { client, orgId } = chunk7K5N3DQ4_js.useAxCloudContext();
   const queryClient = reactQuery.useQueryClient();
   return reactQuery.useMutation({
     mutationFn: async ({
@@ -914,7 +916,10 @@ function useUpdateFormSubmission() {
       status,
       notes
     }) => {
-      return client.patch(`/${stage}/api/admin/forms/submissions/${submissionId}`, { status, notes });
+      return client.patch(
+        `${FORMS_ADMIN_PATH}/submissions/${encodeURIComponent(submissionId)}?org_id=${encodeURIComponent(orgId)}`,
+        { status, notes }
+      );
     },
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: ["axcloud", "forms"] });