@civic/auth 0.0.1-tsc.alpha.3 → 0.1.1-beta.0

package/src/shared/providers/AuthProvider.tsx

@@ -62,6 +62,7 @@ export type InternalAuthProviderProps = AuthProviderProps & {
 function BlockDisplay({ children }: { children: ReactNode }) {
   return (
     <div
+      id="iframe-block-display-wrapper"
       style={{
         position: "relative",
         left: 0,
@@ -76,6 +77,7 @@ function BlockDisplay({ children }: { children: ReactNode }) {
       }}
     >
       <div
+        id="iframe-block-display"
         style={{
           position: "absolute",
           inset: 0,
@@ -235,29 +237,27 @@ const AuthProvider = ({
   const getAuthInitiator = useCallback(
     (overrideDisplayMode?: DisplayMode) => {
       const useDisplayMode = overrideDisplayMode || displayMode;
+
       if (!pkceConsumer || !redirectUrl) {
         return null;
       }
-      return (
-        browserAuthenticationInitiator ||
-        new BrowserAuthenticationInitiator({
-          pkceConsumer, // generate and retrieve the challenge client-side
-          clientId,
-          redirectUrl,
-          state: generateState(useDisplayMode, serverTokenExchange),
-          scopes: DEFAULT_SCOPES,
-          displayMode: useDisplayMode,
-          oauthServer: config.oauthServer,
-          // the endpoints to use for the login (if not obtained from the auth server
-          endpointOverrides: config.endpoints,
-          nonce,
-        })
-      );
+
+      return new BrowserAuthenticationInitiator({
+        pkceConsumer, // generate and retrieve the challenge client-side
+        clientId,
+        redirectUrl,
+        state: generateState(useDisplayMode, serverTokenExchange),
+        scopes: DEFAULT_SCOPES,
+        displayMode: useDisplayMode,
+        oauthServer: config.oauthServer,
+        // the endpoints to use for the login (if not obtained from the auth server
+        endpointOverrides: config.endpoints,
+        nonce,
+      });
     },
     [
       serverTokenExchange,
       displayMode,
-      browserAuthenticationInitiator,
       clientId,
       redirectUrl,
       config.oauthServer,
@@ -277,7 +277,12 @@ const AuthProvider = ({
       } else if (overrideDisplayMode === "redirect") {
         setIsRedirecting(true);
       }
-      authInitiator?.signIn(iframeRef.current).catch((error) => {
+
+      if (!authInitiator) {
+        throw new Error("Failed to get auth initiator");
+      }
+
+      authInitiator.signIn(iframeRef.current).catch((error) => {
         console.log("signIn error", {
           error,
           isPopupError: error instanceof PopupError,
@@ -336,6 +341,10 @@ const AuthProvider = ({
 
   if (!redirectUrl) return null;
 
+  const showIframeLoadingOverlay =
+    modalIframe &&
+    (isInIframe || isRedirecting || (isLoading && !serverTokenExchange));
+  const showErrorOverlay = tokenExchangeError || error;
   return (
     <AuthContext.Provider value={value}>
       <ConfigProvider
@@ -362,22 +371,20 @@ const AuthProvider = ({
                 </div>
               )}
 
-              {modalIframe &&
-                (isInIframe ||
-                  isRedirecting ||
-                  (isLoading && !serverTokenExchange)) && (
-                  <BlockDisplay>
-                    <LoadingIcon />
-                  </BlockDisplay>
-                )}
-
-              {(tokenExchangeError || error) && (
+              {showErrorOverlay && (
                 <BlockDisplay>
                   <div>
                     Error: {(tokenExchangeError || (error as Error)).message}
                   </div>
                 </BlockDisplay>
               )}
+
+              {showIframeLoadingOverlay && !showErrorOverlay && (
+                <BlockDisplay>
+                  <LoadingIcon />
+                </BlockDisplay>
+              )}
+
               {children}
             </TokenProvider>
           </SessionProvider>

package/src/types.ts

@@ -222,6 +222,6 @@ export type {
 };
 
 export interface AuthStorage {
-  get(key: string): string | null;
-  set(key: string, value: string): void;
+  get(key: string): Promise<string | null>;
+  set(key: string, value: string): Promise<void>;
 }

package/test/unit/nextjs/getUser.test.ts

@@ -17,25 +17,25 @@ const mockUser: User = {
 describe("getUser", () => {
   beforeEach(() => {
     vi.clearAllMocks();
-    vi.spyOn(GenericUserSession.prototype, "get").mockReturnValue(mockUser);
+    vi.spyOn(GenericUserSession.prototype, "get").mockResolvedValue(mockUser);
     vi.spyOn(NextjsClientStorage.prototype, "get").mockImplementation(
-      (cookieName: string) => {
+      async (cookieName: string) => {
         switch (cookieName) {
           case "access_token":
-            return "test-access-token";
+            return Promise.resolve("test-access-token");
           case "id_token":
-            return "test-id-token";
+            return Promise.resolve("test-id-token");
           case "refresh_token":
-            return "test-refresh-token";
+            return Promise.resolve("test-refresh-token");
           default:
-            return null;
+            return Promise.resolve(null);
         }
       },
     );
   });
 
-  it("should get the user from session", () => {
-    const user = getUser();
+  it("should get the user from session", async () => {
+    const user = await getUser();
     expect(user).toEqual(mockUser);
   });
 });

package/test/unit/publicApi/__snapshots__/apiSnapshot.test.ts.snap

@@ -12,7 +12,6 @@ exports[`Auth Client Public API Snapshot > should match the previous API snapsho
   "useIframe": [Function],
   "useSession": [Function],
   "useToken": [Function],
-  "useTokenCookie": [Function],
   "useUser": [Function],
 }
 `;

package/test/unit/server/login.test.ts

@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
+import { describe, it, expect, vi } from "vitest";
 import {
   resolveOAuthAccessCode,
   isLoggedIn,
@@ -8,13 +8,13 @@ import { ServerAuthenticationResolver } from "@/server/ServerAuthenticationResol
 import { GenericAuthenticationInitiator } from "@/services/AuthenticationService.js";
 import { GenericPublicClientPKCEProducer } from "@/services/PKCE.js";
 import { DEFAULT_AUTH_SERVER, DEFAULT_SCOPES } from "@/constants.js";
-import type { OIDCTokenResponseBody, AuthStorage } from "@/types.js";
-import type { AuthConfig } from "@/server/config.js";
-import type { PKCEProducer } from "@/services/types.js";
+import type { AuthStorage, OIDCTokenResponseBody } from "@/types.js";
+import type { AuthConfig } from "@/server/config.ts";
+import type { PKCEProducer } from "@/services/types.ts";
 
 vi.mock("@/server/ServerAuthenticationResolver");
 vi.mock("@/services/AuthenticationService");
-vi.mock("@/services/PKCE");
+vi.mock("@/services/PKCE.js");
 
 class StubPKCEProducer implements PKCEProducer {
   constructor() {}
@@ -70,18 +70,18 @@ describe("Login Utilities", () => {
   });
 
   describe("isLoggedIn", () => {
-    it("should return true if id_token is in storage", () => {
-      vi.mocked(mockStorage.get).mockReturnValue("mockIdToken");
+    it("should return true if id_token is in storage", async () => {
+      vi.mocked(mockStorage.get).mockResolvedValue("mockIdToken");
 
-      const result = isLoggedIn(mockStorage);
+      const result = await isLoggedIn(mockStorage);
 
       expect(result).toBe(true);
     });
 
-    it("should return false if id_token is not in storage", () => {
-      vi.mocked(mockStorage.get).mockReturnValue(null);
+    it("should return false if id_token is not in storage", async () => {
+      vi.mocked(mockStorage.get).mockResolvedValue(null);
 
-      const result = isLoggedIn(mockStorage);
+      const result = await isLoggedIn(mockStorage);
 
       expect(result).toBe(false);
     });
@@ -171,9 +171,11 @@ describe("Login Utilities", () => {
         mockStorage,
       );
 
-      expect(GenericAuthenticationInitiator).toHaveBeenCalledWith(expect.objectContaining({
-        nonce,
-      }));
+      expect(GenericAuthenticationInitiator).toHaveBeenCalledWith(
+        expect.objectContaining({
+          nonce,
+        }),
+      );
     });
   });
 });

package/test/unit/server/session.test.ts

@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
+import { describe, it, expect, vi } from "vitest";
 import type { JWT } from "oslo/jwt";
 import { parseJWT } from "oslo/jwt";
 import { getUser } from "@/shared/lib/session.js";
@@ -20,7 +20,7 @@ describe("getUser", () => {
   });
 
   it("should return null if no tokens are retrieved", async () => {
-    vi.mocked(retrieveTokens).mockReturnValue(null);
+    vi.mocked(retrieveTokens).mockResolvedValue(null);
 
     const result = await getUser(mockStorage);
     expect(result).toBeNull();
@@ -29,7 +29,7 @@ describe("getUser", () => {
 
   it("should return a User if tokens are retrieved and parsed successfully", async () => {
     const mockTokens = { id_token: "mockIdToken" } as OIDCTokenResponseBody;
-    vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+    vi.mocked(retrieveTokens).mockResolvedValue(mockTokens);
     vi.mocked(parseJWT).mockReturnValue({ payload: mockUser } as JWT);
 
     const result = await getUser(mockStorage);
@@ -40,7 +40,7 @@ describe("getUser", () => {
 
   it("should return null if parsing the ID token fails", async () => {
     const mockTokens = { id_token: "mockIdToken" } as OIDCTokenResponseBody;
-    vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+    vi.mocked(retrieveTokens).mockResolvedValue(mockTokens);
     vi.mocked(parseJWT).mockReturnValue(null); // Simulate parse failure
 
     const result = await getUser(mockStorage);

package/test/unit/services/AuthenticationService.test.ts

@@ -29,7 +29,7 @@ vi.mock("@/shared/lib/util.js", () => ({
   clearUser: vi.fn(),
 }));
 vi.mock("@/browser/storage");
-vi.mock("@/services/PKCE");
+vi.mock("@/services/PKCE.js");
 
 describe("Authentication Services", () => {
   const mockConfig = {
@@ -51,7 +51,7 @@ describe("Authentication Services", () => {
         new URL("http://mockLoginUrl"),
       );
 
-      const url = await initiator.signIn(null);
+      const url = await initiator.signIn({} as HTMLIFrameElement);
 
       expect(url.toString()).toBe("http://mockloginurl/");
     });
@@ -114,7 +114,7 @@ describe("Authentication Services", () => {
         ...mockConfig,
       });
       vi.mocked(exchangeTokens).mockResolvedValue(mockTokens);
-      vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+      vi.mocked(retrieveTokens).mockResolvedValue(mockTokens);
     });
 
     it("should exchange auth code for tokens and store them", async () => {

package/test/unit/services/ServerAuthenticationResolver.test.ts

@@ -6,13 +6,18 @@ import {
   retrieveTokens,
   storeTokens,
 } from "@/shared/lib/util.js";
-import type { Endpoints, OIDCTokenResponseBody, SessionData, AuthStorage } from "@/types.js";
-import type { AuthConfig } from "@/server/config.js";
+import type {
+  AuthStorage,
+  Endpoints,
+  OIDCTokenResponseBody,
+  SessionData,
+} from "@/types.js";
+import type { AuthConfig } from "@/server/config.ts";
 import { GenericPublicClientPKCEProducer } from "@/services/PKCE.js";
-import type { AuthenticationResolver } from '@/services/types.js';
+import type { AuthenticationResolver } from "@/services/types.ts";
 
 vi.mock("oslo/oauth2");
-vi.mock("@/services/PKCE");
+vi.mock("@/services/PKCE.js");
 vi.mock("@/shared/lib/util.js");
 
 describe("ServerAuthenticationResolver", () => {
@@ -84,7 +89,7 @@ describe("ServerAuthenticationResolver", () => {
 
   describe("getSessionData", () => {
     it("should retrieve session data from storage", async () => {
-      vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+      vi.mocked(retrieveTokens).mockResolvedValue(mockTokens);
 
       const sessionData: SessionData = {
         authenticated: true,
@@ -100,7 +105,7 @@ describe("ServerAuthenticationResolver", () => {
     });
 
     it("should return null if no tokens are found in storage", async () => {
-      vi.mocked(retrieveTokens).mockReturnValue(null);
+      vi.mocked(retrieveTokens).mockResolvedValue(null);
 
       const result = await resolver.getSessionData();
 

package/test/unit/shared/GenericAuthenticationRefresher.test.ts

@@ -5,9 +5,9 @@ import {
   retrieveTokens,
   storeTokens,
 } from "@/shared/lib/util.js";
-import type { Endpoints, OIDCTokenResponseBody, AuthStorage} from "@/types.js";
+import type { AuthStorage, Endpoints, OIDCTokenResponseBody } from "@/types.js";
 import { OAuth2Client } from "oslo/oauth2";
-import type { AuthConfig } from "@/server/config.js";
+import type { AuthConfig } from "@/server/config.ts";
 
 vi.mock("@/shared/lib/util.js");
 vi.mock("oslo/oauth2");
@@ -55,7 +55,7 @@ describe("GenericAuthenticationRefresher", () => {
 
   describe("refreshTokens", () => {
     it("should refresh tokens and store them", async () => {
-      vi.mocked(retrieveTokens).mockReturnValue(mockTokens);
+      vi.mocked(retrieveTokens).mockResolvedValue(mockTokens);
       const refreshedTokens: OIDCTokenResponseBody = {
         id_token: "newIdToken",
         access_token: "newAccessToken",
@@ -76,7 +76,7 @@ describe("GenericAuthenticationRefresher", () => {
     });
 
     it("should throw an error if no refresh token is available", async () => {
-      vi.mocked(retrieveTokens).mockReturnValue({
+      vi.mocked(retrieveTokens).mockResolvedValue({
         ...mockTokens,
         refresh_token: undefined,
       });

package/test/unit/shared/UserSession.test.ts

@@ -12,10 +12,10 @@ const mockUser: User = {
 
 let storage: Record<string, string> = {};
 class TestStorage implements AuthStorage {
-  get(key: string): string | null {
+  async get(key: string): Promise<string | null> {
     return storage[key] ?? null;
   }
-  set(key: string, value: string): void {
+  async set(key: string, value: string): Promise<void> {
     storage[key] = value;
   }
 }
@@ -26,16 +26,16 @@ describe("UserSession", () => {
   });
 
   describe("GenericUserSession", () => {
-    it("should get the user from session", () => {
+    it("should get the user from session", async () => {
       const userSession = new GenericUserSession(new TestStorage());
       userSession.set(mockUser);
-      const user = userSession.get();
+      const user = await userSession.get();
       expect(user).toEqual(mockUser);
     });
 
-    it("should return null if user it not found", () => {
+    it("should return null if user it not found", async () => {
       const userSession = new GenericUserSession(new TestStorage());
-      const user = userSession.get();
+      const user = await userSession.get();
       expect(user).toBeNull();
     });
   });

package/test/unit/shared/storage.test.ts

@@ -13,10 +13,10 @@ describe("CookieStorage", () => {
       super(settings);
     }
 
-    get(key: string): string | null {
+    async get(key: string): Promise<string | null> {
       return this.storage[key] ?? null;
     }
-    set(key: string, value: string): void {
+    async set(key: string, value: string): Promise<void> {
       this.storage[key] = value;
     }
   }
@@ -57,11 +57,11 @@ describe("CookieStorage", () => {
     expect(storage["settings"]).toMatchObject(customSettings);
   });
 
-  it("should set and get values correctly", () => {
+  it("should set and get values correctly", async () => {
     const storage = new MockCookieStorage({});
 
-    storage.set("testKey", "testValue");
-    expect(storage.get("testKey")).toBe("testValue");
-    expect(storage.get("nonExistentKey")).toBe(null);
+    await storage.set("testKey", "testValue");
+    expect(await storage.get("testKey")).toBe("testValue");
+    expect(await storage.get("nonExistentKey")).toBe(null);
   });
 });

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/browser/storage.d.ts

@@ -1,6 +0,0 @@
-import type { AuthStorage } from "@/types.js";
-export declare class LocalStorageAdapter implements AuthStorage {
-    get(key: string): string;
-    set(key: string, value: string): void;
-}
-//# sourceMappingURL=storage.d.ts.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/browser/storage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../src/browser/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,qBAAa,mBAAoB,YAAW,WAAW;IACrD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAIxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;CAGtC"}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/browser/storage.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LocalStorageAdapter = void 0;
-class LocalStorageAdapter {
-    get(key) {
-        return localStorage.getItem(key) || "";
-    }
-    set(key, value) {
-        localStorage.setItem(key, value);
-    }
-}
-exports.LocalStorageAdapter = LocalStorageAdapter;
-//# sourceMappingURL=storage.js.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/browser/storage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../../src/browser/storage.ts"],"names":[],"mappings":";;;AAEA,MAAa,mBAAmB;IAC9B,GAAG,CAAC,GAAW;QACb,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;CACF;AARD,kDAQC","sourcesContent":["import type { AuthStorage } from \"@/types.js\";\n\nexport class LocalStorageAdapter implements AuthStorage {\n  get(key: string): string {\n    return localStorage.getItem(key) || \"\";\n  }\n\n  set(key: string, value: string): void {\n    localStorage.setItem(key, value);\n  }\n}\n"]}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/config.d.ts

@@ -1,3 +0,0 @@
-import type { Config } from "@/types.js";
-export declare const authConfig: Config;
-//# sourceMappingURL=config.d.ts.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,eAAO,MAAM,UAAU,EAAE,MAExB,CAAC"}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/config.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.authConfig = void 0;
-const constants_js_1 = require("./constants.js");
-exports.authConfig = {
-    oauthServer: constants_js_1.DEFAULT_AUTH_SERVER,
-};
-//# sourceMappingURL=config.js.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":";;;AACA,iDAAqD;AAExC,QAAA,UAAU,GAAW;IAChC,WAAW,EAAE,kCAAmB;CACjC,CAAC","sourcesContent":["import type { Config } from \"@/types.js\";\nimport { DEFAULT_AUTH_SERVER } from \"./constants.js\";\n\nexport const authConfig: Config = {\n  oauthServer: DEFAULT_AUTH_SERVER,\n};\n"]}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/constants.d.ts

@@ -1,9 +0,0 @@
-declare const DEFAULT_SCOPES: string[];
-declare const IFRAME_ID = "civic-auth-iframe";
-declare const DEFAULT_AUTH_SERVER = "https://auth.civic.com/oauth";
-declare const DEFAULT_OAUTH_GET_PARAMS: string[];
-declare const TOKEN_EXCHANGE_TRIGGER_TEXT = "sameDomainCodeExchangeRequired";
-declare const TOKEN_EXCHANGE_SUCCESS_TEXT = "serverSideTokenExchangeSuccess";
-declare const DEFAULT_DISPLAY_MODE = "iframe";
-export { DEFAULT_SCOPES, DEFAULT_OAUTH_GET_PARAMS, DEFAULT_DISPLAY_MODE, IFRAME_ID, DEFAULT_AUTH_SERVER, TOKEN_EXCHANGE_TRIGGER_TEXT, TOKEN_EXCHANGE_SUCCESS_TEXT, };
-//# sourceMappingURL=constants.d.ts.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/constants.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/constants.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,cAAc,UAMnB,CAAC;AACF,QAAA,MAAM,SAAS,sBAAsB,CAAC;AAEtC,QAAA,MAAM,mBAAmB,iCAAiC,CAAC;AAE3D,QAAA,MAAM,wBAAwB,UAA2B,CAAC;AAI1D,QAAA,MAAM,2BAA2B,mCAAmC,CAAC;AAErE,QAAA,MAAM,2BAA2B,mCAAmC,CAAC;AAErE,QAAA,MAAM,oBAAoB,WAAW,CAAC;AACtC,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,SAAS,EACT,mBAAmB,EACnB,2BAA2B,EAC3B,2BAA2B,GAC5B,CAAC"}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/constants.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TOKEN_EXCHANGE_SUCCESS_TEXT = exports.TOKEN_EXCHANGE_TRIGGER_TEXT = exports.DEFAULT_AUTH_SERVER = exports.IFRAME_ID = exports.DEFAULT_DISPLAY_MODE = exports.DEFAULT_OAUTH_GET_PARAMS = exports.DEFAULT_SCOPES = void 0;
-const DEFAULT_SCOPES = [
-    "openid",
-    "profile",
-    "email",
-    "forwardedTokens",
-    "offline_access",
-];
-exports.DEFAULT_SCOPES = DEFAULT_SCOPES;
-const IFRAME_ID = "civic-auth-iframe";
-exports.IFRAME_ID = IFRAME_ID;
-const DEFAULT_AUTH_SERVER = "https://auth.civic.com/oauth";
-exports.DEFAULT_AUTH_SERVER = DEFAULT_AUTH_SERVER;
-const DEFAULT_OAUTH_GET_PARAMS = ["code", "state", "iss"];
-exports.DEFAULT_OAUTH_GET_PARAMS = DEFAULT_OAUTH_GET_PARAMS;
-// The server's callback handler renders this text if it needs the front-end to make an additional token exchange call,
-// for the iframe case where cookies are not sent along with the initial redirect.
-const TOKEN_EXCHANGE_TRIGGER_TEXT = "sameDomainCodeExchangeRequired";
-exports.TOKEN_EXCHANGE_TRIGGER_TEXT = TOKEN_EXCHANGE_TRIGGER_TEXT;
-const TOKEN_EXCHANGE_SUCCESS_TEXT = "serverSideTokenExchangeSuccess";
-exports.TOKEN_EXCHANGE_SUCCESS_TEXT = TOKEN_EXCHANGE_SUCCESS_TEXT;
-const DEFAULT_DISPLAY_MODE = "iframe";
-exports.DEFAULT_DISPLAY_MODE = DEFAULT_DISPLAY_MODE;
-//# sourceMappingURL=constants.js.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/constants.ts"],"names":[],"mappings":";;;AAAA,MAAM,cAAc,GAAG;IACrB,QAAQ;IACR,SAAS;IACT,OAAO;IACP,iBAAiB;IACjB,gBAAgB;CACjB,CAAC;AAeA,wCAAc;AAdhB,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAiBpC,8BAAS;AAfX,MAAM,mBAAmB,GAAG,8BAA8B,CAAC;AAgBzD,kDAAmB;AAdrB,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAWxD,4DAAwB;AAT1B,uHAAuH;AACvH,kFAAkF;AAClF,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AAWnE,kEAA2B;AAT7B,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AAUnE,kEAA2B;AAR7B,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAIpC,oDAAoB","sourcesContent":["const DEFAULT_SCOPES = [\n  \"openid\",\n  \"profile\",\n  \"email\",\n  \"forwardedTokens\",\n  \"offline_access\",\n];\nconst IFRAME_ID = \"civic-auth-iframe\";\n\nconst DEFAULT_AUTH_SERVER = \"https://auth.civic.com/oauth\";\n\nconst DEFAULT_OAUTH_GET_PARAMS = [\"code\", \"state\", \"iss\"];\n\n// The server's callback handler renders this text if it needs the front-end to make an additional token exchange call,\n// for the iframe case where cookies are not sent along with the initial redirect.\nconst TOKEN_EXCHANGE_TRIGGER_TEXT = \"sameDomainCodeExchangeRequired\";\n\nconst TOKEN_EXCHANGE_SUCCESS_TEXT = \"serverSideTokenExchangeSuccess\";\n\nconst DEFAULT_DISPLAY_MODE = \"iframe\";\nexport {\n  DEFAULT_SCOPES,\n  DEFAULT_OAUTH_GET_PARAMS,\n  DEFAULT_DISPLAY_MODE,\n  IFRAME_ID,\n  DEFAULT_AUTH_SERVER,\n  TOKEN_EXCHANGE_TRIGGER_TEXT,\n  TOKEN_EXCHANGE_SUCCESS_TEXT,\n};\n"]}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/index.d.ts

@@ -1,5 +0,0 @@
-export type { Tokens, Endpoints, Config, User, DisplayMode, ForwardedTokens, AuthStorage, } from "@/types.js";
-export type * from "@/shared/lib/types.js";
-export type { UserContextType } from "@/shared/providers/UserProvider.js";
-import "./styles.css";
-//# sourceMappingURL=index.d.ts.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,MAAM,EACN,SAAS,EACT,MAAM,EACN,IAAI,EACJ,WAAW,EACX,eAAe,EACf,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,mBAAmB,uBAAuB,CAAC;AAE3C,YAAY,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,cAAc,CAAC"}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/index.js

@@ -1,5 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-// We need this to have the styles exported on the bundle
-require("./styles.css");
-//# sourceMappingURL=index.js.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":";;AAgBA,yDAAyD;AACzD,wBAAsB","sourcesContent":["// These are the default exports of the project.\n// They are limited by design to ensure that the public API does not expose any internal implementation details.\n// Do not change this without thinking carefully about the impact on the client-facing public API.\nexport type {\n  Tokens,\n  Endpoints,\n  Config,\n  User,\n  DisplayMode,\n  ForwardedTokens,\n  AuthStorage,\n} from \"@/types.js\";\n\nexport type * from \"@/shared/lib/types.js\";\n\nexport type { UserContextType } from \"@/shared/providers/UserProvider.js\";\n// We need this to have the styles exported on the bundle\nimport \"./styles.css\";\n"]}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/lib/cookies.d.ts

@@ -1,7 +0,0 @@
-declare const getWindowCookieValue: ({ key, window, parseJson, }: {
-    key: string;
-    window: Window;
-    parseJson?: boolean;
-}) => any;
-export { getWindowCookieValue };
-//# sourceMappingURL=cookies.d.ts.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/lib/cookies.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../../../src/lib/cookies.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,oBAAoB,gCAIvB;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,QAkBA,CAAC;AACF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/lib/cookies.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getWindowCookieValue = void 0;
-const getWindowCookieValue = ({ key, window, parseJson = false, }) => {
-    const cookie = window.document.cookie;
-    if (!cookie)
-        return null;
-    const cookies = cookie.split(";");
-    for (const c of cookies) {
-        const [name, value] = c.trim().split("=");
-        if (value && name === key) {
-            try {
-                const decodeURIComponentValue = decodeURIComponent(value);
-                return parseJson
-                    ? JSON.parse(decodeURIComponentValue)
-                    : decodeURIComponentValue;
-            }
-            catch {
-                return value;
-            }
-        }
-    }
-    return null;
-};
-exports.getWindowCookieValue = getWindowCookieValue;
-//# sourceMappingURL=cookies.js.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/lib/cookies.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../../../src/lib/cookies.ts"],"names":[],"mappings":";;;AAAA,MAAM,oBAAoB,GAAG,CAAC,EAC5B,GAAG,EACH,MAAM,EACN,SAAS,GAAG,KAAK,GAKlB,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,uBAAuB,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC1D,OAAO,SAAS;oBACd,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC;oBACrC,CAAC,CAAC,uBAAuB,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AACO,oDAAoB","sourcesContent":["const getWindowCookieValue = ({\n  key,\n  window,\n  parseJson = false,\n}: {\n  key: string;\n  window: Window;\n  parseJson?: boolean;\n}) => {\n  const cookie = window.document.cookie;\n  if (!cookie) return null;\n  const cookies = cookie.split(\";\");\n  for (const c of cookies) {\n    const [name, value] = c.trim().split(\"=\");\n    if (value && name === key) {\n      try {\n        const decodeURIComponentValue = decodeURIComponent(value);\n        return parseJson\n          ? JSON.parse(decodeURIComponentValue)\n          : decodeURIComponentValue;\n      } catch {\n        return value;\n      }\n    }\n  }\n  return null;\n};\nexport { getWindowCookieValue };\n"]}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/lib/jwt.d.ts

@@ -1,3 +0,0 @@
-import type { ForwardedTokens, ForwardedTokensJWT } from "@/types.js";
-export declare const convertForwardedTokenFormat: (inputTokens: ForwardedTokensJWT) => ForwardedTokens;
-//# sourceMappingURL=jwt.d.ts.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/lib/jwt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../../src/lib/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEtE,eAAO,MAAM,2BAA2B,gBACzB,kBAAkB,KAC9B,eAUA,CAAC"}

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/lib/jwt.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.convertForwardedTokenFormat = void 0;
-const convertForwardedTokenFormat = (inputTokens) => Object.fromEntries(Object.entries(inputTokens).map(([source, tokens]) => [
-    source,
-    {
-        idToken: tokens?.id_token,
-        accessToken: tokens?.access_token,
-        refreshToken: tokens?.refresh_token,
-    },
-]));
-exports.convertForwardedTokenFormat = convertForwardedTokenFormat;
-//# sourceMappingURL=jwt.js.map

package/.rollup.cache/Users/flippie/civic/repos/civic-auth/packages/civic-auth-client/dist/cjs/src/lib/jwt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../../src/lib/jwt.ts"],"names":[],"mappings":";;;AAEO,MAAM,2BAA2B,GAAG,CACzC,WAA+B,EACd,EAAE,CACnB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACpD,MAAM;IACN;QACE,OAAO,EAAE,MAAM,EAAE,QAAQ;QACzB,WAAW,EAAE,MAAM,EAAE,YAAY;QACjC,YAAY,EAAE,MAAM,EAAE,aAAa;KACpC;CACF,CAAC,CACH,CAAC;AAZS,QAAA,2BAA2B,+BAYpC","sourcesContent":["import type { ForwardedTokens, ForwardedTokensJWT } from \"@/types.js\";\n\nexport const convertForwardedTokenFormat = (\n  inputTokens: ForwardedTokensJWT,\n): ForwardedTokens =>\n  Object.fromEntries(\n    Object.entries(inputTokens).map(([source, tokens]) => [\n      source,\n      {\n        idToken: tokens?.id_token,\n        accessToken: tokens?.access_token,\n        refreshToken: tokens?.refresh_token,\n      },\n    ]),\n  );\n"]}