@civic/auth 0.0.1--.tsc.alpha.1

package/README.md

@@ -0,0 +1,202 @@
+# Civic Auth Client SDK
+
+The Civic Auth Client SDK is a powerful and flexible authentication library for React and Next.js applications. It provides a seamless way to integrate Civic's authentication services into your web applications.
+
+## Features
+
+- Easy-to-use React hooks and components
+- Support for various authentication flows (iframe, redirect, new tab)
+- Token management and refresh
+- User information retrieval
+- Customizable UI components
+- TypeScript support
+
+## Installation
+
+Install the package using npm or yarn:
+
+```bash
+npm install @civic/auth
+```
+
+or
+
+```bash
+yarn add @civic/auth
+```
+
+## Usage
+
+First, import the CSS styles in your main application file (e.g., `_app.tsx` for Next.js):
+
+```tsx
+import "@civic/auth/styles.css";
+```
+
+### Setup CivicAuthProvider
+
+To use the Civic Auth Client SDK, wrap your application with the `CivicAuthProvider` component. This will allow the authentication context to be accessible throughout your app.
+
+```tsx
+import { CivicAuthProvider } from "@civic/auth/react";
+
+function App({ children }) {
+  return (
+    <CivicAuthProvider clientId="your-client-id" redirectUrl="https://your-app.com/callback">
+      {children}
+    </CivicAuthProvider>
+  );
+}
+```
+
+The only required prop for `CivicAuthProvider` is the `clientId`. By default, the SDK uses Civic's endpoints. If you need to use your own endpoints, you can provide them using the `config` prop. See the advanced configuration section below for more details.
+
+### Advanced Configuration
+
+If you want to use your own endpoints, you can pass a `config` object to the `CivicAuthProvider` as shown below:
+
+```tsx
+import { CivicAuthProvider } from "@civic/auth/react";
+
+function App({ children }) {
+  return (
+    <CivicAuthProvider
+      clientId="your-client-id"
+      redirectUrl="https://your-app.com/callback"
+      config={{
+        endpoints: {
+          auth: "https://your-auth-server.com/oauth/auth",
+          token: "https://your-auth-server.com/oauth/token",
+          userinfo: "https://your-auth-server.com/oauth/userinfo",
+        },
+      }}
+    >
+      {children}
+    </CivicAuthProvider>
+  );
+}
+```
+
+### Sign In and User Profile
+
+The SDK provides hooks like `useAuth` and `useUser` to manage authentication and user information. Below is an example of a profile component that handles signing in and signing out.
+
+```tsx
+import { useAuth, useUser } from "@civic/auth/react";
+
+function Profile() {
+  const { isAuthenticated, signIn, signOut } = useAuth();
+  const { user } = useUser();
+
+  if (!isAuthenticated) {
+    return <button onClick={() => signIn()}>Sign In</button>;
+  }
+
+  return (
+    <div>
+      <h1>Welcome, {user?.name}</h1>
+      <button onClick={() => signOut()}>Sign Out</button>
+    </div>
+  );
+}
+```
+
+### UserButton Component
+
+The SDK also includes ready-to-use UI components like `UserButton`, which provides an easy way to display user information and authentication controls.
+
+```tsx
+import { UserButton } from "@civic/auth/react";
+
+function Header() {
+  return (
+    <header>
+      <h1>My App</h1>
+      <UserButton />
+    </header>
+  );
+}
+```
+
+### Embedding the login iframe in your page
+
+The default displayMode for user login is 'iframe' which will show a modal containing the login page for users, when the `signIn` hook is called. If you want to customize where this page is shown and embed it into your page instead i.e. in the case where you have a landing page and don't want users to have to click on a 'sign-in' button, you can embed the login iframe directly inside your page and it will work just like in the modal, as long as it is a child of a <CivicAuthProvider>. In this mode, the iframe auto-loads the login page.
+
+To enable this mode, you need to set the parameter 'modalIframe' to `false` (it defaults to `true` in normal operation).
+
+The example below shows the iframe centered inside a div embedded on the page:
+```tsx
+import { CivicAuthProvider } from "@civic/auth/react";
+
+function App({ children }) {
+  return (
+    <CivicAuthProvider
+      clientId="your-client-id"
+      redirectUrl="https://your-app.com/callback"
+      modalIframe={false}
+    >
+      {children}
+      <div className="flex min-h-[200px] items-center justify-center">
+        <CivicAuthIframeContainer />
+      </div>
+    </CivicAuthProvider>
+  );
+}
+```
+
+### Token Management with useToken Hook
+
+The `useToken` hook can be used to access and manage tokens within your application. This hook provides the current access and ID tokens, a refresh function, and token loading/error states.
+
+```tsx
+import { useToken } from "@civic/auth/react";
+
+function TokenInfo() {
+  const { accessToken, idToken, refreshToken, isLoading, error } = useToken();
+
+  if (isLoading) {
+    return <div>Loading tokens...</div>;
+  }
+
+  if (error) {
+    return <div>Error: {error.message}</div>;
+  }
+
+  return (
+    <div>
+      <h2>Access Token: {accessToken}</h2>
+      <h2>ID Token: {idToken}</h2>
+      <button onClick={() => refreshToken()}>Refresh Tokens</button>
+    </div>
+  );
+}
+```
+
+## Configuration Options
+
+- `clientId`: Your application's client ID provided by Civic.
+- `redirectUrl`: (Optional) The URL to which users will be redirected after authentication.
+- `endpoints`: (Optional) Object containing the URLs for the authentication endpoints (`auth`, `token`, `userinfo`). Use this if you want to point to your own authentication server.
+
+## Display modes
+
+In order to verify a user's credentials, an auth window is loaded in one of three modes:
+
+### iframe
+an iframe is overlaid onto the page where the AuthProvider lives, and the Civic auth UI is loaded inside the iframe. When authentication is complete the iframe will disappear.
+
+### redirect
+the current page is redirecting to the Civic auth UI. When authentication is complete, the page redirects back to the original page.
+
+### new_tab
+the current page remains open and a new tab is open to show the Civic auth UI. When authentication is complete, the tab is closed.
+
+Note that if a user's browser does not allow popups, then the display mode defaults to 'redirect'.
+
+## TypeScript Support
+
+This SDK is fully written in TypeScript, providing type definitions out of the box for a smooth development experience.
+
+## License
+
+This project is licensed under the MIT License.

package/dist/cjs/src/browser/storage.d.ts

@@ -0,0 +1,6 @@
+import type { AuthStorage } from "../types.js";
+export declare class LocalStorageAdapter implements AuthStorage {
+    get(key: string): string;
+    set(key: string, value: string): void;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/cjs/src/browser/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../src/browser/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,qBAAa,mBAAoB,YAAW,WAAW;IACrD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAIxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;CAGtC"}

package/dist/cjs/src/browser/storage.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalStorageAdapter = void 0;
+class LocalStorageAdapter {
+    get(key) {
+        return localStorage.getItem(key) || "";
+    }
+    set(key, value) {
+        localStorage.setItem(key, value);
+    }
+}
+exports.LocalStorageAdapter = LocalStorageAdapter;
+//# sourceMappingURL=storage.js.map

package/dist/cjs/src/browser/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../../src/browser/storage.ts"],"names":[],"mappings":";;;AAEA,MAAa,mBAAmB;IAC9B,GAAG,CAAC,GAAW;QACb,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;CACF;AARD,kDAQC","sourcesContent":["import type { AuthStorage } from \"@/types.js\";\n\nexport class LocalStorageAdapter implements AuthStorage {\n  get(key: string): string {\n    return localStorage.getItem(key) || \"\";\n  }\n\n  set(key: string, value: string): void {\n    localStorage.setItem(key, value);\n  }\n}\n"]}

package/dist/cjs/src/config.d.ts

@@ -0,0 +1,3 @@
+import type { Config } from "./types.js";
+export declare const authConfig: Config;
+//# sourceMappingURL=config.d.ts.map

package/dist/cjs/src/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,eAAO,MAAM,UAAU,EAAE,MAExB,CAAC"}

package/dist/cjs/src/config.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authConfig = void 0;
+const constants_js_1 = require("./constants.js");
+exports.authConfig = {
+    oauthServer: constants_js_1.DEFAULT_AUTH_SERVER,
+};
+//# sourceMappingURL=config.js.map

package/dist/cjs/src/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":";;;AACA,iDAAqD;AAExC,QAAA,UAAU,GAAW;IAChC,WAAW,EAAE,kCAAmB;CACjC,CAAC","sourcesContent":["import type { Config } from \"@/types.js\";\nimport { DEFAULT_AUTH_SERVER } from \"./constants.js\";\n\nexport const authConfig: Config = {\n  oauthServer: DEFAULT_AUTH_SERVER,\n};\n"]}

package/dist/cjs/src/constants.d.ts

@@ -0,0 +1,9 @@
+declare const DEFAULT_SCOPES: string[];
+declare const IFRAME_ID = "civic-auth-iframe";
+declare const DEFAULT_AUTH_SERVER = "https://auth.civic.com/oauth";
+declare const DEFAULT_OAUTH_GET_PARAMS: string[];
+declare const TOKEN_EXCHANGE_TRIGGER_TEXT = "sameDomainCodeExchangeRequired";
+declare const TOKEN_EXCHANGE_SUCCESS_TEXT = "serverSideTokenExchangeSuccess";
+declare const DEFAULT_DISPLAY_MODE = "iframe";
+export { DEFAULT_SCOPES, DEFAULT_OAUTH_GET_PARAMS, DEFAULT_DISPLAY_MODE, IFRAME_ID, DEFAULT_AUTH_SERVER, TOKEN_EXCHANGE_TRIGGER_TEXT, TOKEN_EXCHANGE_SUCCESS_TEXT, };
+//# sourceMappingURL=constants.d.ts.map

package/dist/cjs/src/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/constants.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,cAAc,UAMnB,CAAC;AACF,QAAA,MAAM,SAAS,sBAAsB,CAAC;AAEtC,QAAA,MAAM,mBAAmB,iCAAiC,CAAC;AAE3D,QAAA,MAAM,wBAAwB,UAA2B,CAAC;AAI1D,QAAA,MAAM,2BAA2B,mCAAmC,CAAC;AAErE,QAAA,MAAM,2BAA2B,mCAAmC,CAAC;AAErE,QAAA,MAAM,oBAAoB,WAAW,CAAC;AACtC,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,SAAS,EACT,mBAAmB,EACnB,2BAA2B,EAC3B,2BAA2B,GAC5B,CAAC"}

package/dist/cjs/src/constants.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOKEN_EXCHANGE_SUCCESS_TEXT = exports.TOKEN_EXCHANGE_TRIGGER_TEXT = exports.DEFAULT_AUTH_SERVER = exports.IFRAME_ID = exports.DEFAULT_DISPLAY_MODE = exports.DEFAULT_OAUTH_GET_PARAMS = exports.DEFAULT_SCOPES = void 0;
+const DEFAULT_SCOPES = [
+    "openid",
+    "profile",
+    "email",
+    "forwardedTokens",
+    "offline_access",
+];
+exports.DEFAULT_SCOPES = DEFAULT_SCOPES;
+const IFRAME_ID = "civic-auth-iframe";
+exports.IFRAME_ID = IFRAME_ID;
+const DEFAULT_AUTH_SERVER = "https://auth.civic.com/oauth";
+exports.DEFAULT_AUTH_SERVER = DEFAULT_AUTH_SERVER;
+const DEFAULT_OAUTH_GET_PARAMS = ["code", "state", "iss"];
+exports.DEFAULT_OAUTH_GET_PARAMS = DEFAULT_OAUTH_GET_PARAMS;
+// The server's callback handler renders this text if it needs the front-end to make an additional token exchange call,
+// for the iframe case where cookies are not sent along with the initial redirect.
+const TOKEN_EXCHANGE_TRIGGER_TEXT = "sameDomainCodeExchangeRequired";
+exports.TOKEN_EXCHANGE_TRIGGER_TEXT = TOKEN_EXCHANGE_TRIGGER_TEXT;
+const TOKEN_EXCHANGE_SUCCESS_TEXT = "serverSideTokenExchangeSuccess";
+exports.TOKEN_EXCHANGE_SUCCESS_TEXT = TOKEN_EXCHANGE_SUCCESS_TEXT;
+const DEFAULT_DISPLAY_MODE = "iframe";
+exports.DEFAULT_DISPLAY_MODE = DEFAULT_DISPLAY_MODE;
+//# sourceMappingURL=constants.js.map

package/dist/cjs/src/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/constants.ts"],"names":[],"mappings":";;;AAAA,MAAM,cAAc,GAAG;IACrB,QAAQ;IACR,SAAS;IACT,OAAO;IACP,iBAAiB;IACjB,gBAAgB;CACjB,CAAC;AAeA,wCAAc;AAdhB,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAiBpC,8BAAS;AAfX,MAAM,mBAAmB,GAAG,8BAA8B,CAAC;AAgBzD,kDAAmB;AAdrB,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAWxD,4DAAwB;AAT1B,uHAAuH;AACvH,kFAAkF;AAClF,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AAWnE,kEAA2B;AAT7B,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AAUnE,kEAA2B;AAR7B,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAIpC,oDAAoB","sourcesContent":["const DEFAULT_SCOPES = [\n  \"openid\",\n  \"profile\",\n  \"email\",\n  \"forwardedTokens\",\n  \"offline_access\",\n];\nconst IFRAME_ID = \"civic-auth-iframe\";\n\nconst DEFAULT_AUTH_SERVER = \"https://auth.civic.com/oauth\";\n\nconst DEFAULT_OAUTH_GET_PARAMS = [\"code\", \"state\", \"iss\"];\n\n// The server's callback handler renders this text if it needs the front-end to make an additional token exchange call,\n// for the iframe case where cookies are not sent along with the initial redirect.\nconst TOKEN_EXCHANGE_TRIGGER_TEXT = \"sameDomainCodeExchangeRequired\";\n\nconst TOKEN_EXCHANGE_SUCCESS_TEXT = \"serverSideTokenExchangeSuccess\";\n\nconst DEFAULT_DISPLAY_MODE = \"iframe\";\nexport {\n  DEFAULT_SCOPES,\n  DEFAULT_OAUTH_GET_PARAMS,\n  DEFAULT_DISPLAY_MODE,\n  IFRAME_ID,\n  DEFAULT_AUTH_SERVER,\n  TOKEN_EXCHANGE_TRIGGER_TEXT,\n  TOKEN_EXCHANGE_SUCCESS_TEXT,\n};\n"]}

package/dist/cjs/src/index.d.ts

@@ -0,0 +1,5 @@
+export type { Tokens, Endpoints, Config, User, DisplayMode, ForwardedTokens, AuthStorage, } from "./types.js";
+export type * from "./shared/lib/types.js";
+export type { UserContextType } from "./shared/providers/UserProvider.js";
+import "./styles.css";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,MAAM,EACN,SAAS,EACT,MAAM,EACN,IAAI,EACJ,WAAW,EACX,eAAe,EACf,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,mBAAmB,uBAAuB,CAAC;AAE3C,YAAY,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,cAAc,CAAC"}

package/dist/cjs/src/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// We need this to have the styles exported on the bundle
+require("./styles.css");
+//# sourceMappingURL=index.js.map

package/dist/cjs/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":";;AAgBA,yDAAyD;AACzD,wBAAsB","sourcesContent":["// These are the default exports of the project.\n// They are limited by design to ensure that the public API does not expose any internal implementation details.\n// Do not change this without thinking carefully about the impact on the client-facing public API.\nexport type {\n  Tokens,\n  Endpoints,\n  Config,\n  User,\n  DisplayMode,\n  ForwardedTokens,\n  AuthStorage,\n} from \"@/types.js\";\n\nexport type * from \"@/shared/lib/types.js\";\n\nexport type { UserContextType } from \"@/shared/providers/UserProvider.js\";\n// We need this to have the styles exported on the bundle\nimport \"./styles.css\";\n"]}

package/dist/cjs/src/lib/cookies.d.ts

@@ -0,0 +1,7 @@
+declare const getWindowCookieValue: ({ key, window, parseJson, }: {
+    key: string;
+    window: Window;
+    parseJson?: boolean;
+}) => any;
+export { getWindowCookieValue };
+//# sourceMappingURL=cookies.d.ts.map

package/dist/cjs/src/lib/cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../../../src/lib/cookies.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,oBAAoB,gCAIvB;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,QAkBA,CAAC;AACF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/cjs/src/lib/cookies.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getWindowCookieValue = void 0;
+const getWindowCookieValue = ({ key, window, parseJson = false, }) => {
+    const cookie = window.document.cookie;
+    if (!cookie)
+        return null;
+    const cookies = cookie.split(";");
+    for (const c of cookies) {
+        const [name, value] = c.trim().split("=");
+        if (value && name === key) {
+            try {
+                const decodeURIComponentValue = decodeURIComponent(value);
+                return parseJson
+                    ? JSON.parse(decodeURIComponentValue)
+                    : decodeURIComponentValue;
+            }
+            catch {
+                return value;
+            }
+        }
+    }
+    return null;
+};
+exports.getWindowCookieValue = getWindowCookieValue;
+//# sourceMappingURL=cookies.js.map

package/dist/cjs/src/lib/cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../../../src/lib/cookies.ts"],"names":[],"mappings":";;;AAAA,MAAM,oBAAoB,GAAG,CAAC,EAC5B,GAAG,EACH,MAAM,EACN,SAAS,GAAG,KAAK,GAKlB,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,uBAAuB,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC1D,OAAO,SAAS;oBACd,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC;oBACrC,CAAC,CAAC,uBAAuB,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AACO,oDAAoB","sourcesContent":["const getWindowCookieValue = ({\n  key,\n  window,\n  parseJson = false,\n}: {\n  key: string;\n  window: Window;\n  parseJson?: boolean;\n}) => {\n  const cookie = window.document.cookie;\n  if (!cookie) return null;\n  const cookies = cookie.split(\";\");\n  for (const c of cookies) {\n    const [name, value] = c.trim().split(\"=\");\n    if (value && name === key) {\n      try {\n        const decodeURIComponentValue = decodeURIComponent(value);\n        return parseJson\n          ? JSON.parse(decodeURIComponentValue)\n          : decodeURIComponentValue;\n      } catch {\n        return value;\n      }\n    }\n  }\n  return null;\n};\nexport { getWindowCookieValue };\n"]}

package/dist/cjs/src/lib/jwt.d.ts

@@ -0,0 +1,3 @@
+import type { ForwardedTokens, ForwardedTokensJWT } from "../types.js";
+export declare const convertForwardedTokenFormat: (inputTokens: ForwardedTokensJWT) => ForwardedTokens;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/cjs/src/lib/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../../src/lib/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEtE,eAAO,MAAM,2BAA2B,gBACzB,kBAAkB,KAC9B,eAUA,CAAC"}

package/dist/cjs/src/lib/jwt.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.convertForwardedTokenFormat = void 0;
+const convertForwardedTokenFormat = (inputTokens) => Object.fromEntries(Object.entries(inputTokens).map(([source, tokens]) => [
+    source,
+    {
+        idToken: tokens?.id_token,
+        accessToken: tokens?.access_token,
+        refreshToken: tokens?.refresh_token,
+    },
+]));
+exports.convertForwardedTokenFormat = convertForwardedTokenFormat;
+//# sourceMappingURL=jwt.js.map

package/dist/cjs/src/lib/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../../src/lib/jwt.ts"],"names":[],"mappings":";;;AAEO,MAAM,2BAA2B,GAAG,CACzC,WAA+B,EACd,EAAE,CACnB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACpD,MAAM;IACN;QACE,OAAO,EAAE,MAAM,EAAE,QAAQ;QACzB,WAAW,EAAE,MAAM,EAAE,YAAY;QACjC,YAAY,EAAE,MAAM,EAAE,aAAa;KACpC;CACF,CAAC,CACH,CAAC;AAZS,QAAA,2BAA2B,+BAYpC","sourcesContent":["import type { ForwardedTokens, ForwardedTokensJWT } from \"@/types.js\";\n\nexport const convertForwardedTokenFormat = (\n  inputTokens: ForwardedTokensJWT,\n): ForwardedTokens =>\n  Object.fromEntries(\n    Object.entries(inputTokens).map(([source, tokens]) => [\n      source,\n      {\n        idToken: tokens?.id_token,\n        accessToken: tokens?.access_token,\n        refreshToken: tokens?.refresh_token,\n      },\n    ]),\n  );\n"]}

package/dist/cjs/src/lib/logger.d.ts

@@ -0,0 +1,26 @@
+export interface Logger {
+    debug(message: string, ...args: unknown[]): void;
+    info(message: string, ...args: unknown[]): void;
+    warn(message: string, ...args: unknown[]): void;
+    error(message: string, ...args: unknown[]): void;
+}
+export declare const createLogger: (namespace: string) => Logger;
+export declare const loggers: {
+    readonly nextjs: {
+        readonly routes: Logger;
+        readonly middleware: Logger;
+        readonly handlers: {
+            readonly auth: Logger;
+        };
+    };
+    readonly react: {
+        readonly components: Logger;
+        readonly hooks: Logger;
+        readonly context: Logger;
+    };
+    readonly services: {
+        readonly validation: Logger;
+        readonly network: Logger;
+    };
+};
+//# sourceMappingURL=logger.d.ts.map

package/dist/cjs/src/lib/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../../src/lib/logger.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAClD;AAsCD,eAAO,MAAM,YAAY,cAAe,MAAM,KAAG,MACrB,CAAC;AAG7B,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;CAoBV,CAAC"}

package/dist/cjs/src/lib/logger.js

@@ -0,0 +1,62 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loggers = exports.createLogger = void 0;
+const debug_1 = __importDefault(require("debug"));
+const PACKAGE_NAME = "@civic/auth";
+class DebugLogger {
+    debugLogger;
+    infoLogger;
+    warnLogger;
+    errorLogger;
+    constructor(namespace) {
+        // Format: @org/package:library:component:level
+        this.debugLogger = (0, debug_1.default)(`${PACKAGE_NAME}:${namespace}:debug`);
+        this.infoLogger = (0, debug_1.default)(`${PACKAGE_NAME}:${namespace}:info`);
+        this.warnLogger = (0, debug_1.default)(`${PACKAGE_NAME}:${namespace}:warn`);
+        this.errorLogger = (0, debug_1.default)(`${PACKAGE_NAME}:${namespace}:error`);
+        this.debugLogger.color = "4";
+        this.infoLogger.color = "2";
+        this.warnLogger.color = "3";
+        this.errorLogger.color = "1";
+    }
+    debug(message, ...args) {
+        this.debugLogger(message, ...args);
+    }
+    info(message, ...args) {
+        this.infoLogger(message, ...args);
+    }
+    warn(message, ...args) {
+        this.warnLogger(message, ...args);
+    }
+    error(message, ...args) {
+        this.errorLogger(message, ...args);
+    }
+}
+const createLogger = (namespace) => new DebugLogger(namespace);
+exports.createLogger = createLogger;
+// Pre-configured loggers for different parts of your package
+exports.loggers = {
+    // Next.js specific loggers
+    nextjs: {
+        routes: (0, exports.createLogger)("api:routes"),
+        middleware: (0, exports.createLogger)("api:middleware"),
+        handlers: {
+            auth: (0, exports.createLogger)("api:handlers:auth"),
+        },
+    },
+    // React specific loggers
+    react: {
+        components: (0, exports.createLogger)("react:components"),
+        hooks: (0, exports.createLogger)("react:hooks"),
+        context: (0, exports.createLogger)("react:context"),
+    },
+    // Shared utilities loggers
+    services: {
+        validation: (0, exports.createLogger)("utils:validation"),
+        network: (0, exports.createLogger)("utils:network"),
+    },
+};
+//# sourceMappingURL=logger.js.map

package/dist/cjs/src/lib/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../../src/lib/logger.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAE1B,MAAM,YAAY,GAAG,aAAa,CAAC;AASnC,MAAM,WAAW;IACP,WAAW,CAAiB;IAC5B,UAAU,CAAiB;IAC3B,UAAU,CAAiB;IAC3B,WAAW,CAAiB;IAEpC,YAAY,SAAiB;QAC3B,+CAA+C;QAC/C,IAAI,CAAC,WAAW,GAAG,IAAA,eAAK,EAAC,GAAG,YAAY,IAAI,SAAS,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,GAAG,IAAA,eAAK,EAAC,GAAG,YAAY,IAAI,SAAS,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,GAAG,IAAA,eAAK,EAAC,GAAG,YAAY,IAAI,SAAS,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,GAAG,IAAA,eAAK,EAAC,GAAG,YAAY,IAAI,SAAS,QAAQ,CAAC,CAAC;QAE/D,IAAI,CAAC,WAAW,CAAC,KAAK,GAAG,GAAG,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,KAAK,GAAG,GAAG,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACrC,CAAC;CACF;AAEM,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAU,EAAE,CACxD,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;AADhB,QAAA,YAAY,gBACI;AAE7B,6DAA6D;AAChD,QAAA,OAAO,GAAG;IACrB,2BAA2B;IAC3B,MAAM,EAAE;QACN,MAAM,EAAE,IAAA,oBAAY,EAAC,YAAY,CAAC;QAClC,UAAU,EAAE,IAAA,oBAAY,EAAC,gBAAgB,CAAC;QAC1C,QAAQ,EAAE;YACR,IAAI,EAAE,IAAA,oBAAY,EAAC,mBAAmB,CAAC;SACxC;KACF;IACD,yBAAyB;IACzB,KAAK,EAAE;QACL,UAAU,EAAE,IAAA,oBAAY,EAAC,kBAAkB,CAAC;QAC5C,KAAK,EAAE,IAAA,oBAAY,EAAC,aAAa,CAAC;QAClC,OAAO,EAAE,IAAA,oBAAY,EAAC,eAAe,CAAC;KACvC;IACD,2BAA2B;IAC3B,QAAQ,EAAE;QACR,UAAU,EAAE,IAAA,oBAAY,EAAC,kBAAkB,CAAC;QAC5C,OAAO,EAAE,IAAA,oBAAY,EAAC,eAAe,CAAC;KACvC;CACO,CAAC","sourcesContent":["import debug from \"debug\";\n\nconst PACKAGE_NAME = \"@civic/auth\";\n\nexport interface Logger {\n  debug(message: string, ...args: unknown[]): void;\n  info(message: string, ...args: unknown[]): void;\n  warn(message: string, ...args: unknown[]): void;\n  error(message: string, ...args: unknown[]): void;\n}\n\nclass DebugLogger implements Logger {\n  private debugLogger: debug.Debugger;\n  private infoLogger: debug.Debugger;\n  private warnLogger: debug.Debugger;\n  private errorLogger: debug.Debugger;\n\n  constructor(namespace: string) {\n    // Format: @org/package:library:component:level\n    this.debugLogger = debug(`${PACKAGE_NAME}:${namespace}:debug`);\n    this.infoLogger = debug(`${PACKAGE_NAME}:${namespace}:info`);\n    this.warnLogger = debug(`${PACKAGE_NAME}:${namespace}:warn`);\n    this.errorLogger = debug(`${PACKAGE_NAME}:${namespace}:error`);\n\n    this.debugLogger.color = \"4\";\n    this.infoLogger.color = \"2\";\n    this.warnLogger.color = \"3\";\n    this.errorLogger.color = \"1\";\n  }\n\n  debug(message: string, ...args: unknown[]): void {\n    this.debugLogger(message, ...args);\n  }\n\n  info(message: string, ...args: unknown[]): void {\n    this.infoLogger(message, ...args);\n  }\n\n  warn(message: string, ...args: unknown[]): void {\n    this.warnLogger(message, ...args);\n  }\n\n  error(message: string, ...args: unknown[]): void {\n    this.errorLogger(message, ...args);\n  }\n}\n\nexport const createLogger = (namespace: string): Logger =>\n  new DebugLogger(namespace);\n\n// Pre-configured loggers for different parts of your package\nexport const loggers = {\n  // Next.js specific loggers\n  nextjs: {\n    routes: createLogger(\"api:routes\"),\n    middleware: createLogger(\"api:middleware\"),\n    handlers: {\n      auth: createLogger(\"api:handlers:auth\"),\n    },\n  },\n  // React specific loggers\n  react: {\n    components: createLogger(\"react:components\"),\n    hooks: createLogger(\"react:hooks\"),\n    context: createLogger(\"react:context\"),\n  },\n  // Shared utilities loggers\n  services: {\n    validation: createLogger(\"utils:validation\"),\n    network: createLogger(\"utils:network\"),\n  },\n} as const;\n"]}

package/dist/cjs/src/lib/oauth.d.ts

@@ -0,0 +1,19 @@
+import type { DisplayMode, Endpoints } from "../types.js";
+declare const getIssuerVariations: (issuer: string) => string[];
+declare const getOauthEndpoints: (oauthServer: string) => Promise<Endpoints>;
+/**
+ * creates a state string for the OAuth2 flow, encoding the display mode too for future use
+ * @param {DisplayMode} displayMode
+ * @returns {string}
+ */
+declare const generateState: (displayMode: DisplayMode, serverTokenExchange?: boolean) => string;
+/**
+ * parses the state string from the OAuth2 flow, decoding the display mode too
+ * @param state
+ * @param sessionDisplayMode
+ * @returns { uuid: string, displayMode: DisplayMode }
+ */
+declare const displayModeFromState: (state: string, sessionDisplayMode: DisplayMode | undefined) => DisplayMode | undefined;
+declare const serverTokenExchangeFromState: (state: string) => boolean | undefined;
+export { serverTokenExchangeFromState, getIssuerVariations, getOauthEndpoints, displayModeFromState, generateState, };
+//# sourceMappingURL=oauth.d.ts.map

package/dist/cjs/src/lib/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/lib/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAuB,MAAM,YAAY,CAAC;AAG9E,QAAA,MAAM,mBAAmB,WAAY,MAAM,KAAG,MAAM,EAQnD,CAAC;AAKF,QAAA,MAAM,iBAAiB,gBAAuB,MAAM,KAAG,OAAO,CAAC,SAAS,CAYvE,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,aAAa,gBACJ,WAAW,wBACF,OAAO,KAC5B,MAOF,CAAC;AAEF;;;;;GAKG;AACH,QAAA,MAAM,oBAAoB,UACjB,MAAM,sBACO,WAAW,GAAG,SAAS,KAC1C,WAAW,GAAG,SAQhB,CAAC;AAEF,QAAA,MAAM,4BAA4B,UAAW,MAAM,KAAG,OAAO,GAAG,SAQ/D,CAAC;AAEF,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,GACd,CAAC"}

package/dist/cjs/src/lib/oauth.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateState = exports.displayModeFromState = exports.getOauthEndpoints = exports.getIssuerVariations = exports.serverTokenExchangeFromState = void 0;
+const uuid_1 = require("uuid");
+const getIssuerVariations = (issuer) => {
+    const issuerWithoutSlash = issuer.endsWith("/")
+        ? issuer.slice(0, issuer.length - 1)
+        : issuer;
+    const issuerWithSlash = `${issuerWithoutSlash}/`;
+    return [issuerWithoutSlash, issuerWithSlash];
+};
+exports.getIssuerVariations = getIssuerVariations;
+const addSlashIfNeeded = (url) => url.endsWith("/") ? url : `${url}/`;
+const getOauthEndpoints = async (oauthServer) => {
+    const openIdConfigResponse = await fetch(`${addSlashIfNeeded(oauthServer)}.well-known/openid-configuration`);
+    const openIdConfig = (await openIdConfigResponse.json());
+    return {
+        jwks: openIdConfig.jwks_uri,
+        auth: openIdConfig.authorization_endpoint,
+        token: openIdConfig.token_endpoint,
+        userinfo: openIdConfig.userinfo_endpoint,
+    };
+};
+exports.getOauthEndpoints = getOauthEndpoints;
+/**
+ * creates a state string for the OAuth2 flow, encoding the display mode too for future use
+ * @param {DisplayMode} displayMode
+ * @returns {string}
+ */
+const generateState = (displayMode, serverTokenExchange) => {
+    const jsonString = JSON.stringify({
+        uuid: (0, uuid_1.v4)(),
+        displayMode,
+        ...(serverTokenExchange ? { serverTokenExchange } : {}),
+    });
+    return btoa(jsonString);
+};
+exports.generateState = generateState;
+/**
+ * parses the state string from the OAuth2 flow, decoding the display mode too
+ * @param state
+ * @param sessionDisplayMode
+ * @returns { uuid: string, displayMode: DisplayMode }
+ */
+const displayModeFromState = (state, sessionDisplayMode) => {
+    try {
+        const jsonString = atob(state);
+        return JSON.parse(jsonString).displayMode;
+    }
+    catch (e) {
+        console.error("Failed to parse displayMode from state:", state, e);
+        return sessionDisplayMode;
+    }
+};
+exports.displayModeFromState = displayModeFromState;
+const serverTokenExchangeFromState = (state) => {
+    try {
+        const jsonString = atob(state);
+        return JSON.parse(jsonString).serverTokenExchange;
+    }
+    catch {
+        console.error("Failed to parse serverTokenExchange from state:", state);
+        return undefined;
+    }
+};
+exports.serverTokenExchangeFromState = serverTokenExchangeFromState;
+//# sourceMappingURL=oauth.js.map

package/dist/cjs/src/lib/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../../src/lib/oauth.ts"],"names":[],"mappings":";;;AACA,+BAAkC;AAElC,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAY,EAAE;IACvD,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC7C,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC;IAEX,MAAM,eAAe,GAAG,GAAG,kBAAkB,GAAG,CAAC;IAEjD,OAAO,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC,CAAC;AAmEA,kDAAmB;AAjErB,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAU,EAAE,CAC/C,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AAEtC,MAAM,iBAAiB,GAAG,KAAK,EAAE,WAAmB,EAAsB,EAAE;IAC1E,MAAM,oBAAoB,GAAG,MAAM,KAAK,CACtC,GAAG,gBAAgB,CAAC,WAAW,CAAC,kCAAkC,CACnE,CAAC;IACF,MAAM,YAAY,GAChB,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAwB,CAAC;IAC7D,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,QAAQ;QAC3B,IAAI,EAAE,YAAY,CAAC,sBAAsB;QACzC,KAAK,EAAE,YAAY,CAAC,cAAc;QAClC,QAAQ,EAAE,YAAY,CAAC,iBAAiB;KACzC,CAAC;AACJ,CAAC,CAAC;AAmDA,8CAAiB;AAjDnB;;;;GAIG;AACH,MAAM,aAAa,GAAG,CACpB,WAAwB,EACxB,mBAA6B,EACrB,EAAE;IACV,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,EAAE,IAAA,SAAI,GAAE;QACZ,WAAW;QACX,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;AAC1B,CAAC,CAAC;AAoCA,sCAAa;AAlCf;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAC3B,KAAa,EACb,kBAA2C,EAClB,EAAE;IAC3B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC;IAC5C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACnE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAgBA,oDAAoB;AAdtB,MAAM,4BAA4B,GAAG,CAAC,KAAa,EAAuB,EAAE;IAC1E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,mBAAmB,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAGA,oEAA4B","sourcesContent":["import type { DisplayMode, Endpoints, OpenIdConfiguration } from \"@/types.js\";\nimport { v4 as uuid } from \"uuid\";\n\nconst getIssuerVariations = (issuer: string): string[] => {\n  const issuerWithoutSlash = issuer.endsWith(\"/\")\n    ? issuer.slice(0, issuer.length - 1)\n    : issuer;\n\n  const issuerWithSlash = `${issuerWithoutSlash}/`;\n\n  return [issuerWithoutSlash, issuerWithSlash];\n};\n\nconst addSlashIfNeeded = (url: string): string =>\n  url.endsWith(\"/\") ? url : `${url}/`;\n\nconst getOauthEndpoints = async (oauthServer: string): Promise<Endpoints> => {\n  const openIdConfigResponse = await fetch(\n    `${addSlashIfNeeded(oauthServer)}.well-known/openid-configuration`,\n  );\n  const openIdConfig =\n    (await openIdConfigResponse.json()) as OpenIdConfiguration;\n  return {\n    jwks: openIdConfig.jwks_uri,\n    auth: openIdConfig.authorization_endpoint,\n    token: openIdConfig.token_endpoint,\n    userinfo: openIdConfig.userinfo_endpoint,\n  };\n};\n\n/**\n * creates a state string for the OAuth2 flow, encoding the display mode too for future use\n * @param {DisplayMode} displayMode\n * @returns {string}\n */\nconst generateState = (\n  displayMode: DisplayMode,\n  serverTokenExchange?: boolean,\n): string => {\n  const jsonString = JSON.stringify({\n    uuid: uuid(),\n    displayMode,\n    ...(serverTokenExchange ? { serverTokenExchange } : {}),\n  });\n  return btoa(jsonString);\n};\n\n/**\n * parses the state string from the OAuth2 flow, decoding the display mode too\n * @param state\n * @param sessionDisplayMode\n * @returns { uuid: string, displayMode: DisplayMode }\n */\nconst displayModeFromState = (\n  state: string,\n  sessionDisplayMode: DisplayMode | undefined,\n): DisplayMode | undefined => {\n  try {\n    const jsonString = atob(state);\n    return JSON.parse(jsonString).displayMode;\n  } catch (e) {\n    console.error(\"Failed to parse displayMode from state:\", state, e);\n    return sessionDisplayMode;\n  }\n};\n\nconst serverTokenExchangeFromState = (state: string): boolean | undefined => {\n  try {\n    const jsonString = atob(state);\n    return JSON.parse(jsonString).serverTokenExchange;\n  } catch {\n    console.error(\"Failed to parse serverTokenExchange from state:\", state);\n    return undefined;\n  }\n};\n\nexport {\n  serverTokenExchangeFromState,\n  getIssuerVariations,\n  getOauthEndpoints,\n  displayModeFromState,\n  generateState,\n};\n"]}

package/dist/cjs/src/lib/postMessage.d.ts

@@ -0,0 +1,4 @@
+import type { LoginPostMessage } from "../types.js";
+declare const validateLoginAppPostMessage: (event: LoginPostMessage, clientId: string) => boolean;
+export { validateLoginAppPostMessage };
+//# sourceMappingURL=postMessage.d.ts.map

package/dist/cjs/src/lib/postMessage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postMessage.d.ts","sourceRoot":"","sources":["../../../../src/lib/postMessage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,QAAA,MAAM,2BAA2B,UACxB,gBAAgB,YACb,MAAM,KACf,OAcF,CAAC;AAEF,OAAO,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/cjs/src/lib/postMessage.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateLoginAppPostMessage = void 0;
+const validateLoginAppPostMessage = (event, clientId) => {
+    const caseEvent = event;
+    console.log("caseEvent", caseEvent);
+    if (!caseEvent.clientId ||
+        !caseEvent.data.url ||
+        !caseEvent.source ||
+        !caseEvent.type ||
+        caseEvent.clientId !== clientId ||
+        caseEvent.source !== "civicloginApp") {
+        return false;
+    }
+    return true;
+};
+exports.validateLoginAppPostMessage = validateLoginAppPostMessage;
+//# sourceMappingURL=postMessage.js.map