@civic/auth 0.0.1-beta.19 → 0.0.1-beta.2

package/dist/react.js

@@ -1,51 +1,651 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
+var _chunkKS7ERXGZjs = require('./chunk-KS7ERXGZ.js');
 
 
 
+var _chunkWZLC5B4Cjs = require('./chunk-WZLC5B4C.js');
 
 
+var _chunkNINRO7GSjs = require('./chunk-NINRO7GS.js');
 
 
-var _chunkVJVRFKDHjs = require('./chunk-VJVRFKDH.js');
 
 
-var _chunkCZ3AVCKDjs = require('./chunk-CZ3AVCKD.js');
 
+var _chunkCRTRMMJ7js = require('./chunk-CRTRMMJ7.js');
 
+// src/react/hooks/useUser.tsx
+var _react = require('react');
 
+// src/react/providers/UserProvider.tsx
 
-var _chunkO2SODTR3js = require('./chunk-O2SODTR3.js');
+var _reactquery = require('@tanstack/react-query');
 
+// src/react/hooks/useAuth.tsx
 
 
+// src/shared/AuthContext.tsx
 
+var AuthContext = _react.createContext.call(void 0, null);
 
-var _chunkCRTRMMJ7js = require('./chunk-CRTRMMJ7.js');
+// src/react/hooks/useAuth.tsx
+var useAuth = () => {
+  const context = _react.useContext.call(void 0, AuthContext);
+  if (!context) {
+    throw new Error("useAuth must be used within an AuthProvider");
+  }
+  return context;
+};
 
-// src/react/hooks/useUser.tsx
-var _react = require('react');
+// src/react/hooks/useToken.tsx
+
+
+// src/react/providers/TokenProvider.tsx
+
+
+
+// src/react/hooks/useSession.tsx
+
+
+// src/react/providers/SessionProvider.tsx
+
+var _jsxruntime = require('react/jsx-runtime');
+var defaultSession = {
+  authenticated: false,
+  idToken: void 0,
+  accessToken: void 0,
+  displayMode: "iframe"
+};
+var SessionContext = _react.createContext.call(void 0, defaultSession);
+var SessionProvider = ({ children, session }) => /* @__PURE__ */ _jsxruntime.jsx.call(void 0, SessionContext.Provider, { value: session || defaultSession, children });
+
+// src/react/hooks/useSession.tsx
+var useSession = () => {
+  const context = _react.useContext.call(void 0, SessionContext);
+  if (!context) {
+    throw new Error("useSession must be used within an SessionProvider");
+  }
+  return context;
+};
+
+// src/react/providers/TokenProvider.tsx
+var _jwt = require('oslo/jwt');
+
+// src/lib/jwt.ts
+var convertForwardedTokenFormat = (inputTokens) => Object.fromEntries(
+  Object.entries(inputTokens).map(([source, tokens]) => [
+    source,
+    {
+      idToken: tokens == null ? void 0 : tokens.id_token,
+      accessToken: tokens == null ? void 0 : tokens.access_token,
+      refreshToken: tokens == null ? void 0 : tokens.refresh_token
+    }
+  ])
+);
+
+// src/react/providers/TokenProvider.tsx
+
+var TokenContext = _react.createContext.call(void 0, void 0);
+var TokenProvider = ({ children }) => {
+  const { isLoading, error: authError } = useAuth();
+  const session = useSession();
+  const queryClient3 = _reactquery.useQueryClient.call(void 0, );
+  const refreshTokenMutation = _reactquery.useMutation.call(void 0, {
+    mutationFn: () => _chunkCRTRMMJ7js.__async.call(void 0, void 0, null, function* () {
+      throw new Error("Method not implemented.");
+    }),
+    onSuccess: () => {
+      queryClient3.invalidateQueries({ queryKey: ["session"] });
+    }
+  });
+  const decodeTokens = _react.useMemo.call(void 0, () => {
+    if (!(session == null ? void 0 : session.idToken)) return null;
+    const parsedJWT = _jwt.parseJWT.call(void 0, session.idToken);
+    if (!parsedJWT) return null;
+    const { forwardedTokens } = parsedJWT.payload;
+    return forwardedTokens ? convertForwardedTokenFormat(forwardedTokens) : null;
+  }, [session == null ? void 0 : session.idToken]);
+  const value = _react.useMemo.call(void 0, 
+    () => ({
+      accessToken: session.accessToken || null,
+      idToken: session.idToken || null,
+      forwardedTokens: decodeTokens || {},
+      refreshToken: refreshTokenMutation.mutateAsync,
+      isLoading,
+      error: authError || refreshTokenMutation.error
+    }),
+    [
+      session.accessToken,
+      session.idToken,
+      decodeTokens,
+      refreshTokenMutation.mutateAsync,
+      refreshTokenMutation.error,
+      isLoading,
+      authError
+    ]
+  );
+  return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, TokenContext.Provider, { value, children });
+};
+
+// src/react/hooks/useToken.tsx
+var useToken = () => {
+  const context = _react.useContext.call(void 0, TokenContext);
+  if (!context) {
+    throw new Error("useToken must be used within a TokenProvider");
+  }
+  return context;
+};
+
+// src/react/providers/UserProvider.tsx
+
+var UserContext = _react.createContext.call(void 0, null);
+var UserProvider = ({
+  children,
+  userInfoService
+}) => {
+  const { isLoading: authLoading, error: authError } = useAuth();
+  const session = useSession();
+  const { forwardedTokens, idToken, accessToken, refreshToken } = useToken();
+  const { signIn, signOut } = useAuth();
+  const fetchUser = () => _chunkCRTRMMJ7js.__async.call(void 0, void 0, null, function* () {
+    if (!accessToken || !userInfoService) {
+      return null;
+    }
+    const user2 = yield userInfoService == null ? void 0 : userInfoService.getUserInfo(accessToken, idToken);
+    if (!user2) {
+      return null;
+    }
+    return _chunkCRTRMMJ7js.__spreadProps.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, {}, user2), {
+      forwardedTokens,
+      idToken,
+      accessToken,
+      refreshToken
+    });
+  });
+  const {
+    data: user,
+    isLoading: userLoading,
+    error: userError
+  } = _reactquery.useQuery.call(void 0, {
+    queryKey: ["user", session == null ? void 0 : session.idToken],
+    queryFn: fetchUser,
+    enabled: !!(session == null ? void 0 : session.idToken)
+    // Only run the query if we have an access token
+  });
+  const isLoading = authLoading || userLoading;
+  const error = authError || userError;
+  return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+    UserContext.Provider,
+    {
+      value: {
+        user: user != null ? user : null,
+        isLoading,
+        error,
+        signIn,
+        signOut
+      },
+      children
+    }
+  );
+};
+
+// src/shared/AuthProvider.tsx
+
+
+
+
+
+
+
+
+
+// src/react/components/CivicAuthIframeModal.tsx
+
+
+// src/react/components/LoadingIcon.tsx
+
+var LoadingIcon = () => /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, "div", { role: "status", children: [
+  /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, 
+    "svg",
+    {
+      "aria-hidden": "true",
+      className: "inline h-8 w-8 animate-spin fill-neutral-600 text-neutral-200 dark:fill-neutral-300 dark:text-neutral-600",
+      viewBox: "0 0 100 101",
+      fill: "none",
+      xmlns: "http://www.w3.org/2000/svg",
+      children: [
+        /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+          "path",
+          {
+            d: "M100 50.5908C100 78.2051 77.6142 100.591 50 100.591C22.3858 100.591 0 78.2051 0 50.5908C0 22.9766 22.3858 0.59082 50 0.59082C77.6142 0.59082 100 22.9766 100 50.5908ZM9.08144 50.5908C9.08144 73.1895 27.4013 91.5094 50 91.5094C72.5987 91.5094 90.9186 73.1895 90.9186 50.5908C90.9186 27.9921 72.5987 9.67226 50 9.67226C27.4013 9.67226 9.08144 27.9921 9.08144 50.5908Z",
+            fill: "currentColor"
+          }
+        ),
+        /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+          "path",
+          {
+            d: "M93.9676 39.0409C96.393 38.4038 97.8624 35.9116 97.0079 33.5539C95.2932 28.8227 92.871 24.3692 89.8167 20.348C85.8452 15.1192 80.8826 10.7238 75.2124 7.41289C69.5422 4.10194 63.2754 1.94025 56.7698 1.05124C51.7666 0.367541 46.6976 0.446843 41.7345 1.27873C39.2613 1.69328 37.813 4.19778 38.4501 6.62326C39.0873 9.04874 41.5694 10.4717 44.0505 10.1071C47.8511 9.54855 51.7191 9.52689 55.5402 10.0491C60.8642 10.7766 65.9928 12.5457 70.6331 15.2552C75.2735 17.9648 79.3347 21.5619 82.5849 25.841C84.9175 28.9121 86.7997 32.2913 88.1811 35.8758C89.083 38.2158 91.5421 39.6781 93.9676 39.0409Z",
+            fill: "currentFill"
+          }
+        )
+      ]
+    }
+  ),
+  /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "span", { className: "sr-only", children: "Loading..." })
+] });
+
+// src/react/components/CloseIcon.tsx
+
+var CloseIcon = () => /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, 
+  "svg",
+  {
+    xmlns: "http://www.w3.org/2000/svg",
+    width: "24",
+    height: "24",
+    viewBox: "0 0 24 24",
+    fill: "none",
+    stroke: "currentColor",
+    strokeWidth: "2",
+    strokeLinecap: "round",
+    strokeLinejoin: "round",
+    className: "lucide lucide-x",
+    children: [
+      /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "path", { d: "M18 6 6 18" }),
+      /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "path", { d: "m6 6 12 12" })
+    ]
+  }
+);
+
+// src/react/components/CivicAuthIframe.tsx
+
+
+var CivicAuthIframe = _react.forwardRef.call(void 0, 
+  ({ authUrl, onLoad }, ref) => {
+    return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+      "iframe",
+      {
+        id: _chunkWZLC5B4Cjs.IFRAME_ID,
+        ref,
+        src: authUrl,
+        className: "h-96 w-80 border-none",
+        onLoad
+      }
+    );
+  }
+);
+CivicAuthIframe.displayName = "CivicAuthIframe";
+
+// src/react/components/CivicAuthIframeModal.tsx
+
+var CivicAuthIframeModal = ({
+  authUrl,
+  redirectUri,
+  setAuthResponseUrl,
+  onClose,
+  iframeRef,
+  redirectInProgress = false,
+  closeOnRedirect = true
+}) => {
+  const [isLoading, setIsLoading] = _react.useState.call(void 0, true);
+  const processIframeUrl = _react.useCallback.call(void 0, () => {
+    if (iframeRef.current && iframeRef.current.contentWindow) {
+      try {
+        const iframeUrl = iframeRef.current.contentWindow.location.href;
+        if (iframeUrl.startsWith(redirectUri)) {
+          setAuthResponseUrl(iframeUrl);
+          if (closeOnRedirect) onClose();
+          return true;
+        }
+      } catch (e) {
+        console.log("Waiting for redirect...");
+      }
+    }
+    return false;
+  }, [closeOnRedirect, iframeRef, onClose, redirectUri, setAuthResponseUrl]);
+  const intervalId = _react.useRef.call(void 0, );
+  const handleEscape = _react.useCallback.call(void 0, 
+    (event) => {
+      if (event.key === "Escape") {
+        onClose();
+      }
+    },
+    [onClose]
+  );
+  _react.useEffect.call(void 0, () => {
+    window.addEventListener("keydown", handleEscape);
+    return () => window.removeEventListener("keydown", handleEscape);
+  });
+  const handleIframeLoad = () => {
+    setIsLoading(false);
+    console.log("handleIframeLoad");
+    if (processIframeUrl() && intervalId.current) {
+      clearInterval(intervalId.current);
+    }
+  };
+  return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+    "div",
+    {
+      className: "absolute left-0 top-0 z-50 flex h-screen w-screen items-center justify-center bg-neutral-950 bg-opacity-50",
+      onClick: onClose,
+      children: /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, 
+        "div",
+        {
+          className: "relative rounded-3xl bg-white p-6 shadow-lg",
+          onClick: (e) => e.stopPropagation(),
+          children: [
+            /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+              "button",
+              {
+                className: "absolute right-4 top-4 flex cursor-pointer items-center justify-center border-none bg-transparent p-1 text-neutral-400",
+                onClick: onClose,
+                children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, CloseIcon, {})
+              }
+            ),
+            (isLoading || redirectInProgress) && /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "div", { className: "absolute inset-0 flex items-center justify-center rounded-3xl bg-neutral-100", children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, LoadingIcon, {}) }),
+            /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+              CivicAuthIframe,
+              {
+                ref: iframeRef,
+                authUrl,
+                onLoad: handleIframeLoad
+              }
+            )
+          ]
+        }
+      )
+    }
+  );
+};
+
+// src/config.ts
+var authConfig = {
+  // TODO change this to the production URL once we're out of beta
+  oauthServer: "https://auth-dev.civic.com/oauth/"
+};
+
+// src/lib/windowUtil.ts
+var isWindowInIframe = (window2) => {
+  var _a;
+  if (typeof window2 !== "undefined") {
+    try {
+      if (((_a = window2 == null ? void 0 : window2.frameElement) == null ? void 0 : _a.id) === "civic-auth-iframe") {
+        return true;
+      }
+    } catch (_e) {
+      return false;
+    }
+  }
+  return false;
+};
+
+// src/shared/AuthProvider.tsx
+
+var globalThisObject;
+if (typeof window !== "undefined") {
+  globalThisObject = window;
+} else if (typeof global !== "undefined") {
+  globalThisObject = global;
+} else {
+  globalThisObject = Function("return this")();
+}
+globalThisObject.globalThis = globalThisObject;
+var AuthProvider = ({
+  children,
+  clientId,
+  redirectUrl: inputRedirectUrl,
+  config = authConfig,
+  nonce,
+  onSignIn,
+  onSignOut,
+  authServiceImpl,
+  serverSideTokenExchange
+}) => {
+  const [iframeUrl, setIframeUrl] = _react.useState.call(void 0, null);
+  const [currentUrl, setCurrentUrl] = _react.useState.call(void 0, null);
+  const [isInIframe, setIsInIframe] = _react.useState.call(void 0, false);
+  const [authResponseUrl, setAuthResponseUrl] = _react.useState.call(void 0, null);
+  const [tokenExchangeError, setTokenExchangeError] = _react.useState.call(void 0, );
+  const queryClient3 = _reactquery.useQueryClient.call(void 0, );
+  const iframeRef = _react.useRef.call(void 0, null);
+  _react.useEffect.call(void 0, () => {
+    if (typeof globalThis.window !== "undefined") {
+      setCurrentUrl(globalThis.window.location.href);
+      const isInIframeVal = isWindowInIframe(globalThis.window);
+      setIsInIframe(isInIframeVal);
+    }
+  }, []);
+  const redirectUrl = _react.useMemo.call(void 0, 
+    () => (inputRedirectUrl || currentUrl || "").split("?")[0],
+    [currentUrl, inputRedirectUrl]
+  );
+  const authService = _react.useMemo.call(void 0, 
+    () => currentUrl ? authServiceImpl || new (0, _chunkKS7ERXGZjs.AuthSessionServiceImpl)(
+      clientId,
+      redirectUrl,
+      config == null ? void 0 : config.oauthServer,
+      config == null ? void 0 : config.endpoints
+    ) : null,
+    [currentUrl, clientId, redirectUrl, config, authServiceImpl]
+  );
+  const [userInfoService, setUserInfoService] = _react.useState.call(void 0, );
+  _react.useEffect.call(void 0, () => {
+    if (!authService) return;
+    authService.getUserInfoService().then(setUserInfoService);
+  }, [authService]);
+  const {
+    data: session,
+    isLoading,
+    error
+  } = _reactquery.useQuery.call(void 0, {
+    queryKey: ["session", authResponseUrl, iframeUrl, currentUrl, isInIframe],
+    queryFn: () => _chunkCRTRMMJ7js.__async.call(void 0, void 0, null, function* () {
+      if (!authService) {
+        return { authenticated: false };
+      }
+      const url = new URL(
+        authResponseUrl ? authResponseUrl : globalThis.window.location.href || ""
+      );
+      const code = url.searchParams.get("code");
+      if (code && !isInIframe && !serverSideTokenExchange) {
+        try {
+          console.log("AuthProvider useQuery code", { isInIframe, code });
+          const newSession = yield authService.tokenExchange(url.toString());
+          onSignIn == null ? void 0 : onSignIn();
+          return newSession;
+        } catch (error2) {
+          setTokenExchangeError(error2);
+          onSignIn == null ? void 0 : onSignIn(
+            error2 instanceof Error ? error2 : new Error("Failed to sign in")
+          );
+          return { authenticated: false };
+        }
+      }
+      const existingSessionData = yield authService.validateExistingSession();
+      if (existingSessionData.authenticated) {
+        return existingSessionData;
+      }
+      return existingSessionData;
+    })
+  });
+  const signOutMutation = _reactquery.useMutation.call(void 0, {
+    mutationFn: () => _chunkCRTRMMJ7js.__async.call(void 0, void 0, null, function* () {
+      authService == null ? void 0 : authService.updateSessionData({});
+      setIframeUrl(null);
+      setAuthResponseUrl(null);
+      onSignOut == null ? void 0 : onSignOut();
+    }),
+    onSuccess: () => {
+      queryClient3.setQueryData(
+        ["session", authResponseUrl, iframeUrl, currentUrl, isInIframe],
+        null
+      );
+    }
+  });
+  const signIn = _react.useCallback.call(void 0, 
+    (overrideDisplayMode = "iframe") => _chunkCRTRMMJ7js.__async.call(void 0, void 0, null, function* () {
+      if (!authService) return;
+      const url = yield authService.getAuthorizationUrl(
+        // This is the default scope. We will eventually pull this from the partner dashboard
+        _chunkWZLC5B4Cjs.DEFAULT_SCOPES,
+        overrideDisplayMode,
+        nonce
+      );
+      if (overrideDisplayMode === "iframe") {
+        setIframeUrl(url);
+        return;
+      }
+      authService.loadAuthorizationUrl(url, overrideDisplayMode);
+    }),
+    [authService, nonce]
+  );
+  const isAuthenticated = _react.useMemo.call(void 0, 
+    () => session ? session.authenticated : false,
+    [session]
+  );
+  const value = _react.useMemo.call(void 0, 
+    () => ({
+      isLoading,
+      error,
+      signOut: () => _chunkCRTRMMJ7js.__async.call(void 0, void 0, null, function* () {
+        yield signOutMutation.mutateAsync();
+      }),
+      isAuthenticated,
+      signIn
+    }),
+    [isLoading, error, signOutMutation, isAuthenticated, signIn]
+  );
+  return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, AuthContext.Provider, { value, children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, SessionProvider, { session, children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, TokenProvider, { children: /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, UserProvider, { userInfoService, children: [
+    !isInIframe && iframeUrl && !(session == null ? void 0 : session.authenticated) && /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+      CivicAuthIframeModal,
+      {
+        iframeRef,
+        authUrl: iframeUrl,
+        redirectUri: redirectUrl,
+        setAuthResponseUrl,
+        onClose: () => setIframeUrl(null)
+      }
+    ),
+    (tokenExchangeError || isLoading || error || isInIframe && !(tokenExchangeError || error)) && /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "div", { className: "absolute left-0 top-0 z-50 flex h-screen w-screen items-center justify-center bg-white", children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "div", { className: "absolute inset-0 flex items-center justify-center bg-white", children: tokenExchangeError || error ? /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, "div", { children: [
+      "Error: ",
+      (tokenExchangeError || error).message
+    ] }) : /* @__PURE__ */ _jsxruntime.jsx.call(void 0, LoadingIcon, {}) }) }),
+    children
+  ] }) }) }) });
+};
 
 // src/shared/CivicAuthProvider.tsx
-var _reactquery = require('@tanstack/react-query');
+
 require('@civic/auth/styles.css');
-var _jsxruntime = require('react/jsx-runtime');
+
 var queryClient = new (0, _reactquery.QueryClient)();
 var CivicAuthProvider = (_a) => {
   var _b = _a, { children } = _b, props = _chunkCRTRMMJ7js.__objRest.call(void 0, _b, ["children"]);
-  return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, _reactquery.QueryClientProvider, { client: queryClient, children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
-    _chunkVJVRFKDHjs.AuthProvider,
+  return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, _reactquery.QueryClientProvider, { client: queryClient, children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, AuthProvider, _chunkCRTRMMJ7js.__spreadProps.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, {}, props), { children })) });
+};
+
+// src/react/providers/NextAuthProvider.tsx
+
+
+// src/react/hooks/useUserCookie.ts
+
+var _navigationjs = require('next/navigation.js');
+
+
+// src/lib/cookies.ts
+var getCookieValue = (key, window2) => {
+  const cookie = window2.document.cookie;
+  if (!cookie) return null;
+  const cookies = cookie.split(";");
+  for (const c of cookies) {
+    const [name, value] = c.trim().split("=");
+    if (name === key) {
+      try {
+        return JSON.parse(decodeURIComponent(value));
+      } catch (e) {
+        console.log("Error parsing cookie value", e);
+        return value;
+      }
+    }
+  }
+  return null;
+};
+
+// src/react/hooks/useUserCookie.ts
+var getUserFromCookie = () => {
+  const userCookie = getCookieValue("user", globalThis.window);
+  return userCookie;
+};
+var useUserCookie = () => {
+  const hasRunRef = _react.useRef.call(void 0, false);
+  const router = _navigationjs.useRouter.call(void 0, );
+  const { data: user } = _reactquery.useQuery.call(void 0, {
+    queryKey: ["user"],
+    queryFn: () => getUserFromCookie(),
+    refetchInterval: 2e3,
+    refetchIntervalInBackground: true,
+    enabled: !hasRunRef.current,
+    refetchOnWindowFocus: true
+  });
+  _react.useEffect.call(void 0, () => {
+    if (user) {
+      if (!hasRunRef.current) {
+        hasRunRef.current = true;
+        router.refresh();
+      }
+    } else {
+      hasRunRef.current = false;
+    }
+  }, [user, router]);
+  return user;
+};
+
+// src/react/providers/NextAuthProvider.tsx
+
+
+var queryClient2 = new (0, _reactquery.QueryClient)();
+var defaultUserContext = { user: null };
+var UserContext2 = _react.createContext.call(void 0, defaultUserContext);
+var CivicNextAuthProvider = (_a) => {
+  var _b = _a, {
+    children
+  } = _b, props = _chunkCRTRMMJ7js.__objRest.call(void 0, _b, [
+    "children"
+  ]);
+  const user = useUserCookie();
+  const [redirectUrl, setRedirectUrl] = _react.useState.call(void 0, "");
+  const { clientId, oauthServer, callbackUrl, challengeUrl } = _chunkKS7ERXGZjs.resolveAuthConfig.call(void 0, );
+  _react.useEffect.call(void 0, () => {
+    if (typeof globalThis.window !== "undefined") {
+      const currentUrl = globalThis.window.location.href;
+      setRedirectUrl(new URL(callbackUrl, currentUrl).toString());
+    }
+  }, [callbackUrl]);
+  const authService = _react.useMemo.call(void 0, () => {
+    if (redirectUrl && clientId && oauthServer) {
+      return new (0, _chunkKS7ERXGZjs.AuthSessionServiceImpl)(clientId, redirectUrl, oauthServer, {
+        challenge: challengeUrl
+      });
+    }
+    return void 0;
+  }, [redirectUrl, clientId, oauthServer, challengeUrl]);
+  return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, _reactquery.QueryClientProvider, { client: queryClient2, children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+    AuthProvider,
     _chunkCRTRMMJ7js.__spreadProps.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, {}, props), {
-      pkceConsumer: new (0, _chunkO2SODTR3js.BrowserPublicClientPKCEProducer)(),
-      children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, _chunkVJVRFKDHjs.UserProvider, { storage: new (0, _chunkO2SODTR3js.LocalStorageAdapter)(), children })
+      config: { oauthServer },
+      clientId,
+      authServiceImpl: authService,
+      serverSideTokenExchange: true,
+      children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, UserContext2.Provider, { value: user, children })
     })
   ) });
 };
+var useNextUser = () => _react.useContext.call(void 0, UserContext2);
 
 // src/react/hooks/useUser.tsx
 var useUser = () => {
-  const context = _react.useContext.call(void 0, _chunkVJVRFKDHjs.UserContext);
+  const context = _react.useContext.call(void 0, UserContext);
   if (!context) {
     throw new Error("useUser must be used within a UserProvider");
   }
@@ -92,7 +692,8 @@ var UserButton = ({
   className
 }) => {
   const [isOpen, setIsOpen] = _react.useState.call(void 0, false);
-  const { user, signIn, signOut } = useUser();
+  const { signIn, isAuthenticated, signOut } = useAuth();
+  const { user } = useUser();
   const handleClickOutside = _react.useCallback.call(void 0, (event) => {
     const target = event.target;
     if (!target.closest("#civic-dropdown-container")) {
@@ -100,7 +701,7 @@ var UserButton = ({
     }
   }, []);
   const handleSignOut = _react.useCallback.call(void 0, () => _chunkCRTRMMJ7js.__async.call(void 0, void 0, null, function* () {
-    signOut();
+    yield signOut();
     setIsOpen(false);
   }), [signOut]);
   const handleSignIn = _react.useCallback.call(void 0, () => _chunkCRTRMMJ7js.__async.call(void 0, void 0, null, function* () {
@@ -122,21 +723,21 @@ var UserButton = ({
       window.removeEventListener("keydown", handleEscape);
     };
   }, [handleClickOutside, handleEscape, isOpen]);
-  if (user) {
-    return /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, "div", { className: "cac-relative", id: "civic-dropdown-container", children: [
+  if (isAuthenticated) {
+    return /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, "div", { className: "relative", id: "civic-dropdown-container", children: [
       /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, 
         "button",
         {
-          className: _chunkO2SODTR3js.cn.call(void 0, 
-            "cac-flex cac-w-full cac-items-center cac-justify-between cac-gap-2 cac-rounded-full cac-border cac-border-neutral-500 cac-px-3 cac-py-2 cac-text-neutral-500 cac-transition-colors hover:cac-bg-neutral-200 hover:cac-bg-opacity-50",
+          className: _chunkNINRO7GSjs.cn.call(void 0, 
+            "flex w-full items-center justify-between gap-2 rounded-full border border-neutral-500 px-3 py-2 text-neutral-500 transition-colors hover:bg-neutral-200 hover:bg-opacity-50",
             className
           ),
           onClick: () => setIsOpen((isOpen2) => !isOpen2),
           children: [
-            (user == null ? void 0 : user.picture) ? /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "span", { className: "cac-relative cac-flex cac-h-10 cac-w-10 cac-shrink-0 cac-gap-2 cac-overflow-hidden cac-rounded-full", children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+            (user == null ? void 0 : user.picture) ? /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "span", { className: "relative flex h-10 w-10 shrink-0 gap-2 overflow-hidden rounded-full", children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
               "img",
               {
-                className: "cac-h-full cac-w-full cac-object-cover",
+                className: "h-full w-full object-cover",
                 src: user.picture,
                 alt: (user == null ? void 0 : user.name) || (user == null ? void 0 : user.email)
               }
@@ -149,11 +750,11 @@ var UserButton = ({
       /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
         "div",
         {
-          className: isOpen ? "cac-absolute cac-right-0 cac-mt-2 cac-w-full cac-rounded-lg cac-bg-white cac-py-2 cac-text-neutral-500 cac-shadow-xl" : "cac-hidden",
+          className: isOpen ? "absolute right-0 mt-2 w-full rounded-lg bg-white py-2 text-neutral-500 shadow-xl" : "hidden",
           children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "ul", { children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "li", { children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
             "button",
             {
-              className: "cac-block cac-w-full cac-px-4 cac-py-2 cac-transition-colors hover:cac-bg-neutral-200 hover:cac-bg-opacity-50",
+              className: "block w-full px-4 py-2 transition-colors hover:bg-neutral-200 hover:bg-opacity-50",
               onClick: handleSignOut,
               children: "Logout"
             }
@@ -165,9 +766,8 @@ var UserButton = ({
   return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
     "button",
     {
-      "data-testid": "sign-in-button",
-      className: _chunkO2SODTR3js.cn.call(void 0, 
-        "cac-rounded-full cac-border cac-border-neutral-500 cac-px-3 cac-py-2 cac-transition-colors hover:cac-bg-neutral-200 hover:cac-bg-opacity-50",
+      className: _chunkNINRO7GSjs.cn.call(void 0, 
+        "rounded-full border border-neutral-500 px-3 py-2 transition-colors hover:bg-neutral-200 hover:bg-opacity-50",
         className
       ),
       onClick: handleSignIn,
@@ -182,13 +782,12 @@ var SignInButton = ({
   displayMode,
   className
 }) => {
-  const { signIn } = useUser();
+  const { signIn } = useAuth();
   return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
     "button",
     {
-      "data-testid": "sign-in-button",
-      className: _chunkO2SODTR3js.cn.call(void 0, 
-        "cac-rounded-full cac-border cac-border-neutral-500 cac-px-3 cac-py-2 cac-transition-colors hover:cac-bg-neutral-200 hover:cac-bg-opacity-50",
+      className: _chunkNINRO7GSjs.cn.call(void 0, 
+        "rounded-full border border-neutral-500 px-3 py-2 transition-colors hover:bg-neutral-200 hover:bg-opacity-50",
         className
       ),
       onClick: () => signIn(displayMode),
@@ -200,12 +799,12 @@ var SignInButton = ({
 // src/react/components/SignOutButton.tsx
 
 var SignOutButton = ({ className }) => {
-  const { signOut } = useUser();
+  const { signOut } = useAuth();
   return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
     "button",
     {
-      className: _chunkO2SODTR3js.cn.call(void 0, 
-        "cac-rounded-full cac-border cac-border-neutral-500 cac-px-3 cac-py-2 cac-transition-colors hover:cac-bg-neutral-200 hover:cac-bg-opacity-50",
+      className: _chunkNINRO7GSjs.cn.call(void 0, 
+        "rounded-full border border-neutral-500 px-3 py-2 transition-colors hover:bg-neutral-200 hover:bg-opacity-50",
         className
       ),
       onClick: () => signOut(),
@@ -217,7 +816,7 @@ var SignOutButton = ({ className }) => {
 // src/react/components/NextLogOut.tsx
 
 var NextLogOut = ({ children }) => {
-  const config = _chunkCZ3AVCKDjs.resolveAuthConfig.call(void 0, );
+  const config = _chunkKS7ERXGZjs.resolveAuthConfig.call(void 0, );
   const logoutUrl = `${config.logoutUrl}`;
   return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "a", { href: logoutUrl, children });
 };
@@ -234,5 +833,5 @@ var NextLogOut = ({ children }) => {
 
 
 
-exports.CivicAuthIframeContainer = _chunkVJVRFKDHjs.CivicAuthIframeContainer; exports.CivicAuthProvider = CivicAuthProvider; exports.NextLogOut = NextLogOut; exports.SignInButton = SignInButton; exports.SignOutButton = SignOutButton; exports.UserButton = UserButton; exports.useAuth = _chunkVJVRFKDHjs.useAuth; exports.useConfig = _chunkVJVRFKDHjs.useConfig; exports.useIframe = _chunkVJVRFKDHjs.useIframe; exports.useSession = _chunkVJVRFKDHjs.useSession; exports.useToken = _chunkVJVRFKDHjs.useToken; exports.useUser = useUser;
+exports.CivicAuthProvider = CivicAuthProvider; exports.CivicNextAuthProvider = CivicNextAuthProvider; exports.NextLogOut = NextLogOut; exports.SignInButton = SignInButton; exports.SignOutButton = SignOutButton; exports.UserButton = UserButton; exports.useAuth = useAuth; exports.useNextUser = useNextUser; exports.useSession = useSession; exports.useToken = useToken; exports.useUser = useUser; exports.useUserCookie = useUserCookie;
 //# sourceMappingURL=react.js.map