@civic/auth 0.7.0 → 0.7.1-beta.2

package/dist/reactjs/providers/CivicAuthContext.js

@@ -0,0 +1,303 @@
+"use client";
+import { jsx as _jsx } from "@emotion/react/jsx-runtime";
+import React, { createContext, useContext, useEffect, useState, useCallback, useMemo, useRef, } from "react";
+import { CivicAuth, AuthEvent, } from "../../vanillajs/index.js";
+import { AuthenticationEvents } from "../../vanillajs/auth/AuthenticationEvents.js";
+import { extractTokensFromSession } from "../../vanillajs/utils/auth-utils.js";
+const CivicAuthContext = createContext(null);
+export const CivicAuthContextProvider = ({ children, clientId, redirectUrl, oauthServerBaseUrl = "https://auth.civic.com/oauth/", scopes = ["openid", "profile", "email", "offline_access"], displayMode = "iframe", iframeDisplayMode = "modal", onSignIn, onSignOut, nonce, authProcessTimeout = 120000, }) => {
+    const [auth, setAuth] = useState(null);
+    const [user, setUser] = useState(null);
+    const [session, setSession] = useState(null);
+    const [isLoading, setIsLoading] = useState(true);
+    const [authStatus, setAuthStatus] = useState("unauthenticated");
+    const [error, setError] = useState(null);
+    // Track initialization to prevent double-execution in React StrictMode
+    const initializationRef = useRef({
+        isInitializing: false,
+        isInitialized: false,
+    });
+    useEffect(() => {
+        let isMounted = true;
+        // Prevent double initialization in React StrictMode
+        if (initializationRef.current.isInitializing ||
+            initializationRef.current.isInitialized) {
+            // `[CivicAuthContext] Skipping initialization ${initId} - already initializing/initialized`,
+            return;
+        }
+        // Capture ref value at effect setup time for cleanup
+        const initializationState = initializationRef.current;
+        initializationRef.current.isInitializing = true;
+        const refreshUserAndSession = async () => {
+            if (!auth)
+                return;
+            try {
+                const currentSession = await auth.getCurrentSession();
+                const currentUser = await auth.getCurrentUser();
+                if (isMounted) {
+                    setSession(currentSession);
+                    setUser(currentUser);
+                }
+            }
+            catch (err) {
+                if (isMounted) {
+                    const sessionError = err instanceof Error ? err : new Error("Failed to get session");
+                    setError(sessionError);
+                }
+            }
+        };
+        const initializeAuth = async () => {
+            try {
+                const events = new AuthenticationEvents();
+                // Set up event listeners
+                events.on(AuthEvent.SIGN_IN_STARTED, () => {
+                    if (isMounted) {
+                        setIsLoading(true);
+                        setAuthStatus("authenticating");
+                        setError(null);
+                    }
+                });
+                events.on(AuthEvent.SIGN_IN_COMPLETE, () => {
+                    if (isMounted) {
+                        setIsLoading(false);
+                        setAuthStatus("authenticated");
+                        setError(null);
+                        onSignIn?.();
+                    }
+                });
+                events.on(AuthEvent.SIGN_IN_ERROR, (event) => {
+                    if (isMounted) {
+                        setIsLoading(false);
+                        setAuthStatus("error");
+                        const errorDetail = event?.detail || "Authentication failed";
+                        const authError = new Error(errorDetail);
+                        setError(authError);
+                        onSignIn?.(authError);
+                    }
+                });
+                events.on(AuthEvent.SIGN_OUT_STARTED, () => {
+                    if (isMounted) {
+                        setIsLoading(true);
+                        setAuthStatus("signing_out");
+                        setError(null);
+                    }
+                });
+                events.on(AuthEvent.SIGN_OUT_COMPLETE, () => {
+                    if (isMounted) {
+                        setIsLoading(false);
+                        setAuthStatus("unauthenticated");
+                        setUser(null);
+                        setSession(null);
+                        setError(null);
+                        onSignOut?.();
+                    }
+                });
+                events.on(AuthEvent.USER_SESSION_CHANGED, () => {
+                    if (isMounted) {
+                        refreshUserAndSession();
+                    }
+                });
+                const authInstance = await CivicAuth.create({
+                    clientId,
+                    redirectUrl: redirectUrl ||
+                        `${window.location.origin}${window.location.pathname}`,
+                    oauthServerBaseUrl,
+                    scopes,
+                    displayMode,
+                    iframeDisplayMode,
+                    nonce,
+                    authProcessTimeout,
+                    events,
+                });
+                if (isMounted) {
+                    setAuth(authInstance);
+                    // Mark initialization as complete
+                    initializationRef.current.isInitializing = false;
+                    initializationRef.current.isInitialized = true;
+                    // Check initial auth state
+                    const isAuthenticated = await authInstance.isAuthenticated();
+                    if (isAuthenticated) {
+                        setAuthStatus("authenticated");
+                        await refreshUserAndSession();
+                    }
+                    else {
+                        setAuthStatus("unauthenticated");
+                        // Pre-load iframe for iframe display mode to match old behavior
+                        // This prepares the iframe in the background so it's ready to be shown
+                        if (displayMode === "iframe") {
+                            try {
+                                // Pre-load by setting iframe display mode - this doesn't show it but prepares it
+                                authInstance.setIframeDisplayMode(iframeDisplayMode);
+                            }
+                            catch (err) {
+                                // Don't fail initialization if iframe pre-loading fails
+                                console.warn("Iframe pre-loading failed:", err);
+                            }
+                        }
+                    }
+                    // Mark initialization as complete
+                    setIsLoading(false);
+                }
+            }
+            catch (err) {
+                console.error(err);
+                if (isMounted) {
+                    const initError = err instanceof Error ? err : new Error("Failed to initialize auth");
+                    setError(initError);
+                    setAuthStatus("error");
+                    setIsLoading(false); // Stop loading even on error
+                    // Mark initialization as failed
+                    initializationRef.current.isInitializing = false;
+                    // Don't mark as initialized on error so it can be retried
+                }
+            }
+        };
+        initializeAuth();
+        return () => {
+            isMounted = false;
+            // Reset initialization guards to allow remount to reinitialize
+            // This is necessary for React StrictMode compatibility
+            if (initializationState.isInitializing) {
+                initializationState.isInitializing = false;
+                initializationState.isInitialized = false;
+            }
+            if (auth) {
+                auth.destroy();
+            }
+        };
+        // Refresh user and session when auth instance changes
+        /*
+         * Intentionally omitting dependencies to prevent infinite loops.
+         * Adding auth, onSignIn, onSignOut, and scopes to the dependency array would cause
+         * the effect to re-run whenever these values change, which could lead to unnecessary
+         * re-renders and potential infinite loops since the effect updates state that might
+         * trigger re-renders of parent components.
+         *
+         * IMPORTANT: redirectUrl is intentionally omitted to prevent re-initialization
+         * during OAuth callback when URL parameters change, which would cause
+         * "invalid_grant" errors due to authorization code reuse.
+         */
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [
+        clientId,
+        oauthServerBaseUrl,
+        displayMode,
+        iframeDisplayMode,
+        nonce,
+        authProcessTimeout,
+    ]);
+    // This is on load to get the user and session
+    useEffect(() => {
+        if (auth && authStatus === "authenticated") {
+            const refreshUserAndSession = async () => {
+                try {
+                    const currentSession = await auth.getCurrentSession();
+                    const currentUser = await auth.getCurrentUser();
+                    setSession(currentSession);
+                    setUser(currentUser);
+                }
+                catch (err) {
+                    const sessionError = err instanceof Error ? err : new Error("Failed to get session");
+                    setError(sessionError);
+                }
+            };
+            refreshUserAndSession();
+        }
+    }, [auth, authStatus]);
+    const signIn = useCallback(async () => {
+        if (!auth) {
+            // If auth is still loading, provide a more helpful error
+            if (isLoading) {
+                throw new Error("Authentication is still initializing, please wait...");
+            }
+            throw new Error("Auth not initialized");
+        }
+        try {
+            const { user } = await auth.startAuthentication();
+            // Refresh user and session after successful authentication
+            const currentSession = await auth.getCurrentSession();
+            setSession(currentSession);
+            setUser(user ?? null);
+            // Ensure we have a user to return
+            if (!user) {
+                throw new Error("Authentication succeeded but no user was returned");
+            }
+            // Return the user object
+            return { user };
+        }
+        catch (err) {
+            const signInError = err instanceof Error ? err : new Error("Sign in failed");
+            setError(signInError);
+            throw signInError;
+        }
+    }, [auth, isLoading]);
+    const signOut = useCallback(async () => {
+        if (!auth) {
+            // If auth is still loading, provide a more helpful error
+            if (isLoading) {
+                throw new Error("Authentication is still initializing, please wait...");
+            }
+            throw new Error("Auth not initialized");
+        }
+        try {
+            await auth.logout();
+            setUser(null);
+            setSession(null);
+        }
+        catch (err) {
+            const signOutError = err instanceof Error ? err : new Error("Sign out failed");
+            setError(signOutError);
+            throw signOutError;
+        }
+    }, [auth, isLoading]);
+    // Extract tokens from session
+    const idToken = session?.idToken;
+    const accessToken = session?.accessToken;
+    const refreshToken = session?.refreshToken;
+    // Extract forwardedTokens from session's ID token
+    const forwardedTokens = useMemo(() => {
+        if (!session)
+            return undefined;
+        const tokens = extractTokensFromSession(session);
+        return tokens.forwardedTokens;
+    }, [session]);
+    const contextValue = useMemo(() => ({
+        auth,
+        user,
+        session,
+        isLoading,
+        authStatus,
+        error,
+        idToken,
+        accessToken,
+        refreshToken,
+        forwardedTokens,
+        signIn,
+        signOut,
+        displayMode,
+    }), [
+        auth,
+        user,
+        session,
+        isLoading,
+        authStatus,
+        error,
+        idToken,
+        accessToken,
+        refreshToken,
+        forwardedTokens,
+        signIn,
+        signOut,
+        displayMode,
+    ]);
+    return (_jsx(CivicAuthContext.Provider, { value: contextValue, children: children }));
+};
+export const useCivicAuthContext = () => {
+    const context = useContext(CivicAuthContext);
+    if (!context) {
+        throw new Error("useCivicAuthContext must be used within a CivicAuthContextProvider");
+    }
+    return context;
+};
+export { CivicAuthContext };
+//# sourceMappingURL=CivicAuthContext.js.map

package/dist/reactjs/providers/CivicAuthContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CivicAuthContext.js","sourceRoot":"","sources":["../../../src/reactjs/providers/CivicAuthContext.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,OAAO,KAAK,EAAE,EACZ,aAAa,EACb,UAAU,EACV,SAAS,EACT,QAAQ,EACR,WAAW,EACX,OAAO,EACP,MAAM,GACP,MAAM,OAAO,CAAC;AAEf,OAAO,EACL,SAAS,EACT,SAAS,GAGV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAEpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAyC/E,MAAM,gBAAgB,GAAG,aAAa,CAA8B,IAAI,CAAC,CAAC;AAgB1E,MAAM,CAAC,MAAM,wBAAwB,GAEjC,CAAC,EACH,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,kBAAkB,GAAG,+BAA+B,EACpD,MAAM,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,EACzD,WAAW,GAAG,QAAQ,EACtB,iBAAiB,GAAG,OAAO,EAC3B,QAAQ,EACR,SAAS,EACT,KAAK,EACL,kBAAkB,GAAG,MAAM,GAC5B,EAAE,EAAE;IACH,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAmB,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAc,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAiB,IAAI,CAAC,CAAC;IAC7D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAC/B,QAAQ,CAAiB,iBAAiB,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,MAAM,CAG7B;QACD,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;KACrB,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,IAAI,CAAC;QAErB,oDAAoD;QACpD,IACE,iBAAiB,CAAC,OAAO,CAAC,cAAc;YACxC,iBAAiB,CAAC,OAAO,CAAC,aAAa,EACvC,CAAC;YACD,6FAA6F;YAE7F,OAAO;QACT,CAAC;QAED,qDAAqD;QACrD,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,OAAO,CAAC;QAEtD,iBAAiB,CAAC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;QAEhD,MAAM,qBAAqB,GAAG,KAAK,IAAI,EAAE;YACvC,IAAI,CAAC,IAAI;gBAAE,OAAO;YAElB,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACtD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAEhD,IAAI,SAAS,EAAE,CAAC;oBACd,UAAU,CAAC,cAAc,CAAC,CAAC;oBAC3B,OAAO,CAAC,WAAW,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,YAAY,GAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBAClE,QAAQ,CAAC,YAAY,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;gBAE1C,yBAAyB;gBACzB,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE;oBACxC,IAAI,SAAS,EAAE,CAAC;wBACd,YAAY,CAAC,IAAI,CAAC,CAAC;wBACnB,aAAa,CAAC,gBAAgB,CAAC,CAAC;wBAChC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,GAAG,EAAE;oBACzC,IAAI,SAAS,EAAE,CAAC;wBACd,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,aAAa,CAAC,eAAe,CAAC,CAAC;wBAC/B,QAAQ,CAAC,IAAI,CAAC,CAAC;wBACf,QAAQ,EAAE,EAAE,CAAC;oBACf,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,KAAwB,EAAE,EAAE;oBAC9D,IAAI,SAAS,EAAE,CAAC;wBACd,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,aAAa,CAAC,OAAO,CAAC,CAAC;wBACvB,MAAM,WAAW,GAAG,KAAK,EAAE,MAAM,IAAI,uBAAuB,CAAC;wBAC7D,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;wBACzC,QAAQ,CAAC,SAAS,CAAC,CAAC;wBACpB,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,GAAG,EAAE;oBACzC,IAAI,SAAS,EAAE,CAAC;wBACd,YAAY,CAAC,IAAI,CAAC,CAAC;wBACnB,aAAa,CAAC,aAAa,CAAC,CAAC;wBAC7B,QAAQ,CAAC,IAAI,CAAC,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,GAAG,EAAE;oBAC1C,IAAI,SAAS,EAAE,CAAC;wBACd,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,aAAa,CAAC,iBAAiB,CAAC,CAAC;wBACjC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACd,UAAU,CAAC,IAAI,CAAC,CAAC;wBACjB,QAAQ,CAAC,IAAI,CAAC,CAAC;wBACf,SAAS,EAAE,EAAE,CAAC;oBAChB,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,oBAAoB,EAAE,GAAG,EAAE;oBAC7C,IAAI,SAAS,EAAE,CAAC;wBACd,qBAAqB,EAAE,CAAC;oBAC1B,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;oBAC1C,QAAQ;oBACR,WAAW,EACT,WAAW;wBACX,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE;oBACxD,kBAAkB;oBAClB,MAAM;oBACN,WAAW;oBACX,iBAAiB;oBACjB,KAAK;oBACL,kBAAkB;oBAClB,MAAM;iBACP,CAAC,CAAC;gBAEH,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,CAAC,YAAY,CAAC,CAAC;oBAEtB,kCAAkC;oBAClC,iBAAiB,CAAC,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC;oBACjD,iBAAiB,CAAC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;oBAE/C,2BAA2B;oBAC3B,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE,CAAC;oBAC7D,IAAI,eAAe,EAAE,CAAC;wBACpB,aAAa,CAAC,eAAe,CAAC,CAAC;wBAC/B,MAAM,qBAAqB,EAAE,CAAC;oBAChC,CAAC;yBAAM,CAAC;wBACN,aAAa,CAAC,iBAAiB,CAAC,CAAC;wBAEjC,gEAAgE;wBAChE,uEAAuE;wBACvE,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;4BAC7B,IAAI,CAAC;gCACH,iFAAiF;gCACjF,YAAY,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;4BACvD,CAAC;4BAAC,OAAO,GAAG,EAAE,CAAC;gCACb,wDAAwD;gCACxD,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;4BAClD,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,kCAAkC;oBAClC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACnB,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,SAAS,GACb,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;oBACtE,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACpB,aAAa,CAAC,OAAO,CAAC,CAAC;oBACvB,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,6BAA6B;oBAElD,gCAAgC;oBAChC,iBAAiB,CAAC,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC;oBACjD,0DAA0D;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,cAAc,EAAE,CAAC;QAEjB,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,KAAK,CAAC;YAElB,+DAA+D;YAC/D,uDAAuD;YACvD,IAAI,mBAAmB,CAAC,cAAc,EAAE,CAAC;gBACvC,mBAAmB,CAAC,cAAc,GAAG,KAAK,CAAC;gBAC3C,mBAAmB,CAAC,aAAa,GAAG,KAAK,CAAC;YAC5C,CAAC;YAED,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;QACH,CAAC,CAAC;QACF,sDAAsD;QACtD;;;;;;;;;;WAUG;QACH,uDAAuD;IACzD,CAAC,EAAE;QACD,QAAQ;QACR,kBAAkB;QAClB,WAAW;QACX,iBAAiB;QACjB,KAAK;QACL,kBAAkB;KACnB,CAAC,CAAC;IAEH,8CAA8C;IAC9C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,IAAI,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YAC3C,MAAM,qBAAqB,GAAG,KAAK,IAAI,EAAE;gBACvC,IAAI,CAAC;oBACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACtD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;oBAChD,UAAU,CAAC,cAAc,CAAC,CAAC;oBAC3B,OAAO,CAAC,WAAW,CAAC,CAAC;gBACvB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,YAAY,GAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBAClE,QAAQ,CAAC,YAAY,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC;YAEF,qBAAqB,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAEvB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,yDAAyD;YACzD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAElD,2DAA2D;YAC3D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAEtD,UAAU,CAAC,cAAc,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;YAEtB,kCAAkC;YAClC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YAED,yBAAyB;YACzB,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,WAAW,GACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC3D,QAAQ,CAAC,WAAW,CAAC,CAAC;YACtB,MAAM,WAAW,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtB,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,yDAAyD;YACzD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,YAAY,GAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC5D,QAAQ,CAAC,YAAY,CAAC,CAAC;YACvB,MAAM,YAAY,CAAC;QACrB,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtB,8BAA8B;IAC9B,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;IACjC,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAE3C,kDAAkD;IAClD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,eAAe,CAAC;IAChC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,MAAM,YAAY,GAAyB,OAAO,CAChD,GAAG,EAAE,CAAC,CAAC;QACL,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,SAAS;QACT,UAAU;QACV,KAAK;QACL,OAAO;QACP,WAAW;QACX,YAAY;QACZ,eAAe;QACf,MAAM;QACN,OAAO;QACP,WAAW;KACZ,CAAC,EACF;QACE,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,SAAS;QACT,UAAU;QACV,KAAK;QACL,OAAO;QACP,WAAW;QACX,YAAY;QACZ,eAAe;QACf,MAAM;QACN,OAAO;QACP,WAAW;KACZ,CACF,CAAC;IAEF,OAAO,CACL,KAAC,gBAAgB,CAAC,QAAQ,IAAC,KAAK,EAAE,YAAY,YAC3C,QAAQ,GACiB,CAC7B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAyB,EAAE;IAC5D,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,CAAC","sourcesContent":["\"use client\";\nimport React, {\n  createContext,\n  useContext,\n  useEffect,\n  useState,\n  useCallback,\n  useMemo,\n  useRef,\n} from \"react\";\nimport type { ReactNode } from \"react\";\nimport {\n  CivicAuth,\n  AuthEvent,\n  type Session,\n  type User,\n} from \"../../vanillajs/index.js\";\nimport { AuthenticationEvents } from \"../../vanillajs/auth/AuthenticationEvents.js\";\nimport type { DisplayMode, ForwardedTokens } from \"../../types.js\";\nimport { extractTokensFromSession } from \"../../vanillajs/utils/auth-utils.js\";\n\n// Event payload interfaces\ninterface SignInErrorEvent {\n  detail: string;\n}\n\nexport type AuthStatusEnum =\n  | \"authenticated\"\n  | \"unauthenticated\"\n  | \"authenticating\"\n  | \"error\"\n  | \"signing_out\";\n\nexport interface CivicAuthContextType {\n  // Core auth instance\n  auth: CivicAuth | null;\n\n  // User and session state\n  user: User | null;\n  session: Session | null;\n\n  // Auth state\n  isLoading: boolean;\n  authStatus: AuthStatusEnum;\n  error: Error | null;\n\n  // Tokens\n  idToken?: string;\n  accessToken?: string;\n  refreshToken?: string;\n  forwardedTokens?: ForwardedTokens;\n\n  // Auth methods\n  signIn: () => Promise<{ user: User }>;\n  signOut: () => Promise<void>;\n\n  // Config\n  displayMode?: DisplayMode;\n}\n\nconst CivicAuthContext = createContext<CivicAuthContextType | null>(null);\n\nexport interface CivicAuthContextProviderProps {\n  children: ReactNode;\n  clientId: string;\n  redirectUrl?: string;\n  oauthServerBaseUrl?: string;\n  scopes?: string[];\n  displayMode?: DisplayMode;\n  iframeDisplayMode?: \"modal\" | \"embedded\";\n  onSignIn?: (error?: Error) => void;\n  onSignOut?: () => void;\n  nonce?: string;\n  authProcessTimeout?: number;\n}\n\nexport const CivicAuthContextProvider: React.FC<\n  CivicAuthContextProviderProps\n> = ({\n  children,\n  clientId,\n  redirectUrl,\n  oauthServerBaseUrl = \"https://auth.civic.com/oauth/\",\n  scopes = [\"openid\", \"profile\", \"email\", \"offline_access\"],\n  displayMode = \"iframe\",\n  iframeDisplayMode = \"modal\",\n  onSignIn,\n  onSignOut,\n  nonce,\n  authProcessTimeout = 120000,\n}) => {\n  const [auth, setAuth] = useState<CivicAuth | null>(null);\n  const [user, setUser] = useState<User | null>(null);\n  const [session, setSession] = useState<Session | null>(null);\n  const [isLoading, setIsLoading] = useState(true);\n  const [authStatus, setAuthStatus] =\n    useState<AuthStatusEnum>(\"unauthenticated\");\n  const [error, setError] = useState<Error | null>(null);\n\n  // Track initialization to prevent double-execution in React StrictMode\n  const initializationRef = useRef<{\n    isInitializing: boolean;\n    isInitialized: boolean;\n  }>({\n    isInitializing: false,\n    isInitialized: false,\n  });\n\n  useEffect(() => {\n    let isMounted = true;\n\n    // Prevent double initialization in React StrictMode\n    if (\n      initializationRef.current.isInitializing ||\n      initializationRef.current.isInitialized\n    ) {\n      // `[CivicAuthContext] Skipping initialization ${initId} - already initializing/initialized`,\n\n      return;\n    }\n\n    // Capture ref value at effect setup time for cleanup\n    const initializationState = initializationRef.current;\n\n    initializationRef.current.isInitializing = true;\n\n    const refreshUserAndSession = async () => {\n      if (!auth) return;\n\n      try {\n        const currentSession = await auth.getCurrentSession();\n        const currentUser = await auth.getCurrentUser();\n\n        if (isMounted) {\n          setSession(currentSession);\n          setUser(currentUser);\n        }\n      } catch (err) {\n        if (isMounted) {\n          const sessionError =\n            err instanceof Error ? err : new Error(\"Failed to get session\");\n          setError(sessionError);\n        }\n      }\n    };\n\n    const initializeAuth = async () => {\n      try {\n        const events = new AuthenticationEvents();\n\n        // Set up event listeners\n        events.on(AuthEvent.SIGN_IN_STARTED, () => {\n          if (isMounted) {\n            setIsLoading(true);\n            setAuthStatus(\"authenticating\");\n            setError(null);\n          }\n        });\n\n        events.on(AuthEvent.SIGN_IN_COMPLETE, () => {\n          if (isMounted) {\n            setIsLoading(false);\n            setAuthStatus(\"authenticated\");\n            setError(null);\n            onSignIn?.();\n          }\n        });\n\n        events.on(AuthEvent.SIGN_IN_ERROR, (event?: SignInErrorEvent) => {\n          if (isMounted) {\n            setIsLoading(false);\n            setAuthStatus(\"error\");\n            const errorDetail = event?.detail || \"Authentication failed\";\n            const authError = new Error(errorDetail);\n            setError(authError);\n            onSignIn?.(authError);\n          }\n        });\n\n        events.on(AuthEvent.SIGN_OUT_STARTED, () => {\n          if (isMounted) {\n            setIsLoading(true);\n            setAuthStatus(\"signing_out\");\n            setError(null);\n          }\n        });\n\n        events.on(AuthEvent.SIGN_OUT_COMPLETE, () => {\n          if (isMounted) {\n            setIsLoading(false);\n            setAuthStatus(\"unauthenticated\");\n            setUser(null);\n            setSession(null);\n            setError(null);\n            onSignOut?.();\n          }\n        });\n\n        events.on(AuthEvent.USER_SESSION_CHANGED, () => {\n          if (isMounted) {\n            refreshUserAndSession();\n          }\n        });\n\n        const authInstance = await CivicAuth.create({\n          clientId,\n          redirectUrl:\n            redirectUrl ||\n            `${window.location.origin}${window.location.pathname}`,\n          oauthServerBaseUrl,\n          scopes,\n          displayMode,\n          iframeDisplayMode,\n          nonce,\n          authProcessTimeout,\n          events,\n        });\n\n        if (isMounted) {\n          setAuth(authInstance);\n\n          // Mark initialization as complete\n          initializationRef.current.isInitializing = false;\n          initializationRef.current.isInitialized = true;\n\n          // Check initial auth state\n          const isAuthenticated = await authInstance.isAuthenticated();\n          if (isAuthenticated) {\n            setAuthStatus(\"authenticated\");\n            await refreshUserAndSession();\n          } else {\n            setAuthStatus(\"unauthenticated\");\n\n            // Pre-load iframe for iframe display mode to match old behavior\n            // This prepares the iframe in the background so it's ready to be shown\n            if (displayMode === \"iframe\") {\n              try {\n                // Pre-load by setting iframe display mode - this doesn't show it but prepares it\n                authInstance.setIframeDisplayMode(iframeDisplayMode);\n              } catch (err) {\n                // Don't fail initialization if iframe pre-loading fails\n                console.warn(\"Iframe pre-loading failed:\", err);\n              }\n            }\n          }\n\n          // Mark initialization as complete\n          setIsLoading(false);\n        }\n      } catch (err) {\n        console.error(err);\n        if (isMounted) {\n          const initError =\n            err instanceof Error ? err : new Error(\"Failed to initialize auth\");\n          setError(initError);\n          setAuthStatus(\"error\");\n          setIsLoading(false); // Stop loading even on error\n\n          // Mark initialization as failed\n          initializationRef.current.isInitializing = false;\n          // Don't mark as initialized on error so it can be retried\n        }\n      }\n    };\n\n    initializeAuth();\n\n    return () => {\n      isMounted = false;\n\n      // Reset initialization guards to allow remount to reinitialize\n      // This is necessary for React StrictMode compatibility\n      if (initializationState.isInitializing) {\n        initializationState.isInitializing = false;\n        initializationState.isInitialized = false;\n      }\n\n      if (auth) {\n        auth.destroy();\n      }\n    };\n    // Refresh user and session when auth instance changes\n    /*\n     * Intentionally omitting dependencies to prevent infinite loops.\n     * Adding auth, onSignIn, onSignOut, and scopes to the dependency array would cause\n     * the effect to re-run whenever these values change, which could lead to unnecessary\n     * re-renders and potential infinite loops since the effect updates state that might\n     * trigger re-renders of parent components.\n     *\n     * IMPORTANT: redirectUrl is intentionally omitted to prevent re-initialization\n     * during OAuth callback when URL parameters change, which would cause\n     * \"invalid_grant\" errors due to authorization code reuse.\n     */\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [\n    clientId,\n    oauthServerBaseUrl,\n    displayMode,\n    iframeDisplayMode,\n    nonce,\n    authProcessTimeout,\n  ]);\n\n  // This is on load to get the user and session\n  useEffect(() => {\n    if (auth && authStatus === \"authenticated\") {\n      const refreshUserAndSession = async () => {\n        try {\n          const currentSession = await auth.getCurrentSession();\n          const currentUser = await auth.getCurrentUser();\n          setSession(currentSession);\n          setUser(currentUser);\n        } catch (err) {\n          const sessionError =\n            err instanceof Error ? err : new Error(\"Failed to get session\");\n          setError(sessionError);\n        }\n      };\n\n      refreshUserAndSession();\n    }\n  }, [auth, authStatus]);\n\n  const signIn = useCallback(async () => {\n    if (!auth) {\n      // If auth is still loading, provide a more helpful error\n      if (isLoading) {\n        throw new Error(\"Authentication is still initializing, please wait...\");\n      }\n      throw new Error(\"Auth not initialized\");\n    }\n\n    try {\n      const { user } = await auth.startAuthentication();\n\n      // Refresh user and session after successful authentication\n      const currentSession = await auth.getCurrentSession();\n\n      setSession(currentSession);\n      setUser(user ?? null);\n\n      // Ensure we have a user to return\n      if (!user) {\n        throw new Error(\"Authentication succeeded but no user was returned\");\n      }\n\n      // Return the user object\n      return { user };\n    } catch (err) {\n      const signInError =\n        err instanceof Error ? err : new Error(\"Sign in failed\");\n      setError(signInError);\n      throw signInError;\n    }\n  }, [auth, isLoading]);\n\n  const signOut = useCallback(async () => {\n    if (!auth) {\n      // If auth is still loading, provide a more helpful error\n      if (isLoading) {\n        throw new Error(\"Authentication is still initializing, please wait...\");\n      }\n      throw new Error(\"Auth not initialized\");\n    }\n\n    try {\n      await auth.logout();\n      setUser(null);\n      setSession(null);\n    } catch (err) {\n      const signOutError =\n        err instanceof Error ? err : new Error(\"Sign out failed\");\n      setError(signOutError);\n      throw signOutError;\n    }\n  }, [auth, isLoading]);\n\n  // Extract tokens from session\n  const idToken = session?.idToken;\n  const accessToken = session?.accessToken;\n  const refreshToken = session?.refreshToken;\n\n  // Extract forwardedTokens from session's ID token\n  const forwardedTokens = useMemo(() => {\n    if (!session) return undefined;\n    const tokens = extractTokensFromSession(session);\n    return tokens.forwardedTokens;\n  }, [session]);\n\n  const contextValue: CivicAuthContextType = useMemo(\n    () => ({\n      auth,\n      user,\n      session,\n      isLoading,\n      authStatus,\n      error,\n      idToken,\n      accessToken,\n      refreshToken,\n      forwardedTokens,\n      signIn,\n      signOut,\n      displayMode,\n    }),\n    [\n      auth,\n      user,\n      session,\n      isLoading,\n      authStatus,\n      error,\n      idToken,\n      accessToken,\n      refreshToken,\n      forwardedTokens,\n      signIn,\n      signOut,\n      displayMode,\n    ],\n  );\n\n  return (\n    <CivicAuthContext.Provider value={contextValue}>\n      {children}\n    </CivicAuthContext.Provider>\n  );\n};\n\nexport const useCivicAuthContext = (): CivicAuthContextType => {\n  const context = useContext(CivicAuthContext);\n  if (!context) {\n    throw new Error(\n      \"useCivicAuthContext must be used within a CivicAuthContextProvider\",\n    );\n  }\n  return context;\n};\n\nexport { CivicAuthContext };\n"]}

package/dist/reactjs/providers/CivicAuthProvider.d.ts

@@ -1,5 +1,21 @@
-import type { AuthProviderProps } from "../../shared/providers/types.js";
-type CivicAuthProviderProps = Omit<AuthProviderProps, "pkceConsumer">;
-declare const CivicAuthProvider: ({ children, ...props }: CivicAuthProviderProps) => import("@emotion/react/jsx-runtime").JSX.Element;
-export { CivicAuthProvider, type CivicAuthProviderProps };
+import React from "react";
+import type { DisplayMode } from "../../types.js";
+export interface CivicAuthProviderProps {
+    children: React.ReactNode;
+    clientId: string;
+    redirectUrl?: string;
+    config?: {
+        oauthServer?: string;
+    };
+    scopes?: string[];
+    displayMode?: DisplayMode;
+    iframeMode?: "modal" | "embedded";
+    onSignIn?: (error?: Error) => void;
+    onSignOut?: () => void;
+    nonce?: string;
+    logoutRedirectUrl?: string;
+    authProcessTimeout?: number;
+}
+declare const CivicAuthProvider: React.FC<CivicAuthProviderProps>;
+export { CivicAuthProvider };
 //# sourceMappingURL=CivicAuthProvider.d.ts.map

package/dist/reactjs/providers/CivicAuthProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CivicAuthProvider.d.ts","sourceRoot":"","sources":["../../../src/reactjs/providers/CivicAuthProvider.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,KAAK,sBAAsB,GAAG,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAsCtE,QAAA,MAAM,iBAAiB,2BAA4B,sBAAsB,qDAqBxE,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,CAAC"}
+{"version":3,"file":"CivicAuthProvider.d.ts","sourceRoot":"","sources":["../../../src/reactjs/providers/CivicAuthProvider.tsx"],"names":[],"mappings":"AACA,OAAO,KAAoB,MAAM,OAAO,CAAC;AAKzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE;QACP,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAClC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,sBAAsB,CA2DvD,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/reactjs/providers/CivicAuthProvider.js

@@ -1,29 +1,50 @@
 "use client";
-import { jsx as _jsx } from "@emotion/react/jsx-runtime";
-import React, { useMemo } from "react";
-import { AuthProvider } from "../../reactjs/providers/AuthProvider.js";
-import { BrowserPublicClientPKCEProducer } from "../../services/PKCE.js";
-import { UserProvider } from "../../shared/providers/UserProvider.js";
-import { LocalStorageAdapter } from "../../browser/storage.js";
-import { CivicAuthConfigProvider } from "../../shared/providers/CivicAuthConfigContext.js";
-import { IframeProvider } from "../../shared/providers/IframeProvider.js";
-import { ClientTokenExchangeSessionProvider } from "../../reactjs/providers/ClientTokenExchangeSessionProvider.js";
-import { SessionProvider } from "../../shared/providers/SessionProvider.js";
-import { useClientTokenExchangeSession } from "../../reactjs/hooks/useClientTokenExchangeSession.js";
-import { TokenProvider } from "../../shared/providers/TokenProvider.js";
-import { useAuth } from "../../shared/hooks/useAuth.js";
-import { AuthStatusProvider } from "../../shared/providers/AuthStatusContext.js";
-const WrapperUserProvider = ({ children }) => {
-    const { signIn, signOut, displayMode, authStatus } = useAuth();
-    const storage = useMemo(() => new LocalStorageAdapter(), []);
-    return (_jsx(UserProvider, { storage: storage, signIn: signIn, signOut: signOut, user: null, authStatus: authStatus, displayMode: displayMode, children: children }));
-};
-const WrapperSessionAuthProvider = ({ children, ...props }) => {
-    const sessionData = useClientTokenExchangeSession();
-    return (_jsx(SessionProvider, { ...sessionData, children: _jsx(AuthProvider, { ...props, pkceConsumer: new BrowserPublicClientPKCEProducer(), children: _jsx(TokenProvider, { children: _jsx(WrapperUserProvider, { children: children }) }) }) }));
-};
-const CivicAuthProvider = ({ children, ...props }) => {
-    return (_jsx(CivicAuthConfigProvider, { oauthServer: props?.config?.oauthServer, clientId: props?.clientId, redirectUrl: props?.redirectUrl, nonce: props?.nonce, logoutRedirectUrl: props?.logoutRedirectUrl, displayMode: props?.displayMode, children: _jsx(AuthStatusProvider, { children: _jsx(IframeProvider, { iframeMode: props.iframeMode, children: _jsx(ClientTokenExchangeSessionProvider, { children: _jsx(WrapperSessionAuthProvider, { ...props, children: children }) }) }) }) }));
+import { Fragment as _Fragment, jsx as _jsx } from "@emotion/react/jsx-runtime";
+import React, { useEffect } from "react";
+import { GlobalAuthManager, } from "../core/GlobalAuthManager.js";
+const CivicAuthProvider = ({ children, clientId, redirectUrl, config, scopes, displayMode = "iframe", iframeMode = "modal", onSignIn, onSignOut, nonce, logoutRedirectUrl, authProcessTimeout, }) => {
+    // Initialize GlobalAuthManager with the provider config
+    useEffect(() => {
+        const globalConfig = {
+            clientId,
+            redirectUrl,
+            config: {
+                oauthServer: config?.oauthServer,
+            },
+            scopes,
+            displayMode,
+            iframeMode,
+            nonce,
+            logoutRedirectUrl,
+            authProcessTimeout,
+            onSignIn,
+            onSignOut,
+        };
+        const manager = GlobalAuthManager.getInstance();
+        const initializeAuth = async () => {
+            try {
+                await manager.initialize(globalConfig);
+            }
+            catch (error) {
+                console.error("Failed to initialize auth in CivicAuthProvider:", error);
+            }
+        };
+        initializeAuth();
+    }, [
+        clientId,
+        redirectUrl,
+        config?.oauthServer,
+        scopes,
+        displayMode,
+        iframeMode,
+        nonce,
+        logoutRedirectUrl,
+        authProcessTimeout,
+        onSignIn,
+        onSignOut,
+    ]);
+    // Just render children - no context provider needed
+    return _jsx(_Fragment, { children: children });
 };
 export { CivicAuthProvider };
 //# sourceMappingURL=CivicAuthProvider.js.map

package/dist/reactjs/providers/CivicAuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"CivicAuthProvider.js","sourceRoot":"","sources":["../../../src/reactjs/providers/CivicAuthProvider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAEpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAI7E,MAAM,mBAAmB,GAAG,CAAC,EAAE,QAAQ,EAAiC,EAAE,EAAE;IAC1E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,mBAAmB,EAAE,EAAE,EAAE,CAAC,CAAC;IAE7D,OAAO,CACL,KAAC,YAAY,IACX,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,IAAI,EACV,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,WAAW,YAEvB,QAAQ,GACI,CAChB,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,0BAA0B,GAAG,CAAC,EAClC,QAAQ,EACR,GAAG,KAAK,EACe,EAAE,EAAE;IAC3B,MAAM,WAAW,GAAG,6BAA6B,EAAE,CAAC;IACpD,OAAO,CACL,KAAC,eAAe,OAAK,WAAW,YAC9B,KAAC,YAAY,OACP,KAAK,EACT,YAAY,EAAE,IAAI,+BAA+B,EAAE,YAEnD,KAAC,aAAa,cACZ,KAAC,mBAAmB,cAAE,QAAQ,GAAuB,GACvC,GACH,GACC,CACnB,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,iBAAiB,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,KAAK,EAA0B,EAAE,EAAE;IAC3E,OAAO,CACL,KAAC,uBAAuB,IACtB,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EACvC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EACzB,WAAW,EAAE,KAAK,EAAE,WAAW,EAC/B,KAAK,EAAE,KAAK,EAAE,KAAK,EACnB,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAC3C,WAAW,EAAE,KAAK,EAAE,WAAW,YAE/B,KAAC,kBAAkB,cACjB,KAAC,cAAc,IAAC,UAAU,EAAE,KAAK,CAAC,UAAU,YAC1C,KAAC,kCAAkC,cACjC,KAAC,0BAA0B,OAAK,KAAK,YAClC,QAAQ,GACkB,GACM,GACtB,GACE,GACG,CAC3B,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAA+B,CAAC","sourcesContent":["\"use client\";\nimport React, { useMemo } from \"react\";\nimport { AuthProvider } from \"@/reactjs/providers/AuthProvider.js\";\nimport { BrowserPublicClientPKCEProducer } from \"@/services/PKCE.js\";\nimport { UserProvider } from \"@/shared/providers/UserProvider.js\";\nimport { LocalStorageAdapter } from \"@/browser/storage.js\";\nimport { CivicAuthConfigProvider } from \"@/shared/providers/CivicAuthConfigContext.js\";\nimport { IframeProvider } from \"@/shared/providers/IframeProvider.js\";\nimport { ClientTokenExchangeSessionProvider } from \"@/reactjs/providers/ClientTokenExchangeSessionProvider.js\";\nimport { SessionProvider } from \"@/shared/providers/SessionProvider.js\";\nimport { useClientTokenExchangeSession } from \"@/reactjs/hooks/useClientTokenExchangeSession.js\";\nimport { TokenProvider } from \"@/shared/providers/TokenProvider.js\";\nimport { useAuth } from \"@/shared/hooks/useAuth.js\";\nimport type { AuthProviderProps } from \"@/shared/providers/types.js\";\nimport { AuthStatusProvider } from \"@/shared/providers/AuthStatusContext.js\";\n\ntype CivicAuthProviderProps = Omit<AuthProviderProps, \"pkceConsumer\">;\n\nconst WrapperUserProvider = ({ children }: { children: React.ReactNode }) => {\n  const { signIn, signOut, displayMode, authStatus } = useAuth();\n\n  const storage = useMemo(() => new LocalStorageAdapter(), []);\n\n  return (\n    <UserProvider\n      storage={storage}\n      signIn={signIn}\n      signOut={signOut}\n      user={null}\n      authStatus={authStatus}\n      displayMode={displayMode}\n    >\n      {children}\n    </UserProvider>\n  );\n};\nconst WrapperSessionAuthProvider = ({\n  children,\n  ...props\n}: CivicAuthProviderProps) => {\n  const sessionData = useClientTokenExchangeSession();\n  return (\n    <SessionProvider {...sessionData}>\n      <AuthProvider\n        {...props}\n        pkceConsumer={new BrowserPublicClientPKCEProducer()}\n      >\n        <TokenProvider>\n          <WrapperUserProvider>{children}</WrapperUserProvider>\n        </TokenProvider>\n      </AuthProvider>\n    </SessionProvider>\n  );\n};\nconst CivicAuthProvider = ({ children, ...props }: CivicAuthProviderProps) => {\n  return (\n    <CivicAuthConfigProvider\n      oauthServer={props?.config?.oauthServer}\n      clientId={props?.clientId}\n      redirectUrl={props?.redirectUrl}\n      nonce={props?.nonce}\n      logoutRedirectUrl={props?.logoutRedirectUrl}\n      displayMode={props?.displayMode}\n    >\n      <AuthStatusProvider>\n        <IframeProvider iframeMode={props.iframeMode}>\n          <ClientTokenExchangeSessionProvider>\n            <WrapperSessionAuthProvider {...props}>\n              {children}\n            </WrapperSessionAuthProvider>\n          </ClientTokenExchangeSessionProvider>\n        </IframeProvider>\n      </AuthStatusProvider>\n    </CivicAuthConfigProvider>\n  );\n};\n\nexport { CivicAuthProvider, type CivicAuthProviderProps };\n"]}
+{"version":3,"file":"CivicAuthProvider.js","sourceRoot":"","sources":["../../../src/reactjs/providers/CivicAuthProvider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,OAAO,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACzC,OAAO,EACL,iBAAiB,GAElB,MAAM,8BAA8B,CAAC;AAoBtC,MAAM,iBAAiB,GAAqC,CAAC,EAC3D,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,MAAM,EACN,MAAM,EACN,WAAW,GAAG,QAAQ,EACtB,UAAU,GAAG,OAAO,EACpB,QAAQ,EACR,SAAS,EACT,KAAK,EACL,iBAAiB,EACjB,kBAAkB,GACnB,EAAE,EAAE;IACH,wDAAwD;IACxD,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,YAAY,GAAqB;YACrC,QAAQ;YACR,WAAW;YACX,MAAM,EAAE;gBACN,WAAW,EAAE,MAAM,EAAE,WAAW;aACjC;YACD,MAAM;YACN,WAAW;YACX,UAAU;YACV,KAAK;YACL,iBAAiB;YACjB,kBAAkB;YAClB,QAAQ;YACR,SAAS;SACV,CAAC;QAEF,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;QAEhD,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC,CAAC;QAEF,cAAc,EAAE,CAAC;IACnB,CAAC,EAAE;QACD,QAAQ;QACR,WAAW;QACX,MAAM,EAAE,WAAW;QACnB,MAAM;QACN,WAAW;QACX,UAAU;QACV,KAAK;QACL,iBAAiB;QACjB,kBAAkB;QAClB,QAAQ;QACR,SAAS;KACV,CAAC,CAAC;IAEH,oDAAoD;IACpD,OAAO,4BAAG,QAAQ,GAAI,CAAC;AACzB,CAAC,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC","sourcesContent":["\"use client\";\nimport React, { useEffect } from \"react\";\nimport {\n  GlobalAuthManager,\n  type GlobalAuthConfig,\n} from \"../core/GlobalAuthManager.js\";\nimport type { DisplayMode } from \"@/types.js\";\n\nexport interface CivicAuthProviderProps {\n  children: React.ReactNode;\n  clientId: string;\n  redirectUrl?: string;\n  config?: {\n    oauthServer?: string;\n  };\n  scopes?: string[];\n  displayMode?: DisplayMode;\n  iframeMode?: \"modal\" | \"embedded\";\n  onSignIn?: (error?: Error) => void;\n  onSignOut?: () => void;\n  nonce?: string;\n  logoutRedirectUrl?: string;\n  authProcessTimeout?: number;\n}\n\nconst CivicAuthProvider: React.FC<CivicAuthProviderProps> = ({\n  children,\n  clientId,\n  redirectUrl,\n  config,\n  scopes,\n  displayMode = \"iframe\",\n  iframeMode = \"modal\",\n  onSignIn,\n  onSignOut,\n  nonce,\n  logoutRedirectUrl,\n  authProcessTimeout,\n}) => {\n  // Initialize GlobalAuthManager with the provider config\n  useEffect(() => {\n    const globalConfig: GlobalAuthConfig = {\n      clientId,\n      redirectUrl,\n      config: {\n        oauthServer: config?.oauthServer,\n      },\n      scopes,\n      displayMode,\n      iframeMode,\n      nonce,\n      logoutRedirectUrl,\n      authProcessTimeout,\n      onSignIn,\n      onSignOut,\n    };\n\n    const manager = GlobalAuthManager.getInstance();\n\n    const initializeAuth = async () => {\n      try {\n        await manager.initialize(globalConfig);\n      } catch (error) {\n        console.error(\"Failed to initialize auth in CivicAuthProvider:\", error);\n      }\n    };\n\n    initializeAuth();\n  }, [\n    clientId,\n    redirectUrl,\n    config?.oauthServer,\n    scopes,\n    displayMode,\n    iframeMode,\n    nonce,\n    logoutRedirectUrl,\n    authProcessTimeout,\n    onSignIn,\n    onSignOut,\n  ]);\n\n  // Just render children - no context provider needed\n  return <>{children}</>;\n};\n\nexport { CivicAuthProvider };\n"]}

package/dist/reactjs/providers/index.d.ts

@@ -1,8 +1,8 @@
 export { UserProvider, UserContext, type UserContextType, } from "../../shared/providers/UserProvider.js";
 export { TokenProvider, TokenContext, type TokenContextType, } from "../../shared/providers/TokenProvider.js";
-export { AuthProvider } from "../../reactjs/providers/AuthProvider.js";
 export { SessionProvider, SessionContext, type SessionContextType, } from "../../shared/providers/SessionProvider.js";
-export { CivicAuthProvider, type CivicAuthProviderProps, } from "../../reactjs/providers/CivicAuthProvider.js";
 export { AuthContext } from "../../shared/providers/AuthContext.js";
 export type { AuthContextType } from "../../shared/providers/AuthContext.js";
+export { CivicAuthProvider, type CivicAuthProviderProps, } from "../../reactjs/providers/CivicAuthProvider.js";
+export { CivicAuthContext, CivicAuthContextProvider, useCivicAuthContext, type CivicAuthContextType, type CivicAuthContextProviderProps, type AuthStatusEnum, } from "../../reactjs/providers/CivicAuthContext.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/reactjs/providers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/reactjs/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,WAAW,EACX,KAAK,eAAe,GACrB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,aAAa,EACb,YAAY,EACZ,KAAK,gBAAgB,GACtB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAEnE,OAAO,EACL,eAAe,EACf,cAAc,EACd,KAAK,kBAAkB,GACxB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,iBAAiB,EACjB,KAAK,sBAAsB,GAC5B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,YAAY,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/reactjs/providers/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,WAAW,EACX,KAAK,eAAe,GACrB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,aAAa,EACb,YAAY,EACZ,KAAK,gBAAgB,GACtB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,eAAe,EACf,cAAc,EACd,KAAK,kBAAkB,GACxB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,YAAY,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAGzE,OAAO,EACL,iBAAiB,EACjB,KAAK,sBAAsB,GAC5B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,6BAA6B,EAClC,KAAK,cAAc,GACpB,MAAM,yCAAyC,CAAC"}

package/dist/reactjs/providers/index.js

@@ -1,7 +1,9 @@
+// Legacy exports for backward compatibility
 export { UserProvider, UserContext, } from "../../shared/providers/UserProvider.js";
 export { TokenProvider, TokenContext, } from "../../shared/providers/TokenProvider.js";
-export { AuthProvider } from "../../reactjs/providers/AuthProvider.js";
 export { SessionProvider, SessionContext, } from "../../shared/providers/SessionProvider.js";
-export { CivicAuthProvider, } from "../../reactjs/providers/CivicAuthProvider.js";
 export { AuthContext } from "../../shared/providers/AuthContext.js";
+// Main exports - new VanillaJS-based implementation
+export { CivicAuthProvider, } from "../../reactjs/providers/CivicAuthProvider.js";
+export { CivicAuthContext, CivicAuthContextProvider, useCivicAuthContext, } from "../../reactjs/providers/CivicAuthContext.js";
 //# sourceMappingURL=index.js.map

package/dist/reactjs/providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/reactjs/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,WAAW,GAEZ,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,aAAa,EACb,YAAY,GAEb,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAEnE,OAAO,EACL,eAAe,EACf,cAAc,GAEf,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,iBAAiB,GAElB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC","sourcesContent":["export {\n  UserProvider,\n  UserContext,\n  type UserContextType,\n} from \"@/shared/providers/UserProvider.js\";\n\nexport {\n  TokenProvider,\n  TokenContext,\n  type TokenContextType,\n} from \"@/shared/providers/TokenProvider.js\";\n\nexport { AuthProvider } from \"@/reactjs/providers/AuthProvider.js\";\n\nexport {\n  SessionProvider,\n  SessionContext,\n  type SessionContextType,\n} from \"@/shared/providers/SessionProvider.js\";\n\nexport {\n  CivicAuthProvider,\n  type CivicAuthProviderProps,\n} from \"@/reactjs/providers/CivicAuthProvider.js\";\n\nexport { AuthContext } from \"@/shared/providers/AuthContext.js\";\nexport type { AuthContextType } from \"@/shared/providers/AuthContext.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/reactjs/providers/index.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,OAAO,EACL,YAAY,EACZ,WAAW,GAEZ,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,aAAa,EACb,YAAY,GAEb,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,eAAe,EACf,cAAc,GAEf,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAGhE,oDAAoD;AACpD,OAAO,EACL,iBAAiB,GAElB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,GAIpB,MAAM,yCAAyC,CAAC","sourcesContent":["// Legacy exports for backward compatibility\nexport {\n  UserProvider,\n  UserContext,\n  type UserContextType,\n} from \"@/shared/providers/UserProvider.js\";\n\nexport {\n  TokenProvider,\n  TokenContext,\n  type TokenContextType,\n} from \"@/shared/providers/TokenProvider.js\";\n\nexport {\n  SessionProvider,\n  SessionContext,\n  type SessionContextType,\n} from \"@/shared/providers/SessionProvider.js\";\n\nexport { AuthContext } from \"@/shared/providers/AuthContext.js\";\nexport type { AuthContextType } from \"@/shared/providers/AuthContext.js\";\n\n// Main exports - new VanillaJS-based implementation\nexport {\n  CivicAuthProvider,\n  type CivicAuthProviderProps,\n} from \"@/reactjs/providers/CivicAuthProvider.js\";\n\nexport {\n  CivicAuthContext,\n  CivicAuthContextProvider,\n  useCivicAuthContext,\n  type CivicAuthContextType,\n  type CivicAuthContextProviderProps,\n  type AuthStatusEnum,\n} from \"@/reactjs/providers/CivicAuthContext.js\";\n"]}

package/dist/server/ServerAuthenticationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ServerAuthenticationResolver.d.ts","sourceRoot":"","sources":["../../src/server/ServerAuthenticationResolver.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,qBAAqB,EACrB,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAUrD,OAAO,KAAK,EAAE,sBAAsB,EAAgB,MAAM,qBAAqB,CAAC;AAOhF,qBAAa,4BAA6B,YAAW,sBAAsB;IAMvE,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,QAAQ,CAAC,OAAO,EAAE,WAAW;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC;IAPjD,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAA2B;IAC/C,OAAO,CAAC,SAAS,CAAwB;IAEzC,OAAO;IAQP;;;;OAIG;IACG,gBAAgB,CACpB,WAAW,EAAE,WAAW,GAAG,IAAI,GAC9B,OAAO,CAAC,WAAW,CAAC;IAwDvB;;;OAGG;IACG,uBAAuB,CAAC,WAAW,UAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAmDvE,IAAI,WAAW,IAAI,MAAM,CAExB;IAEK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBrB,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,qBAAqB,CAAC;IAqB3B,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAc7C,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;WAOxC,KAAK,CAChB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,WAAW,EACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GACrC,OAAO,CAAC,sBAAsB,CAAC;CAUnC"}
+{"version":3,"file":"ServerAuthenticationResolver.d.ts","sourceRoot":"","sources":["../../src/server/ServerAuthenticationResolver.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,qBAAqB,EACrB,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAUrD,OAAO,KAAK,EAAE,sBAAsB,EAAgB,MAAM,qBAAqB,CAAC;AAOhF,qBAAa,4BAA6B,YAAW,sBAAsB;IAMvE,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,QAAQ,CAAC,OAAO,EAAE,WAAW;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC;IAPjD,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,YAAY,CAA2B;IAC/C,OAAO,CAAC,SAAS,CAAwB;IAEzC,OAAO;IAeP;;;;OAIG;IACG,gBAAgB,CACpB,WAAW,EAAE,WAAW,GAAG,IAAI,GAC9B,OAAO,CAAC,WAAW,CAAC;IA+DvB;;;OAGG;IACG,uBAAuB,CAAC,WAAW,UAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAmDvE,IAAI,WAAW,IAAI,MAAM,CAExB;IAEK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBrB,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,qBAAqB,CAAC;IA4B3B,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAc7C,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;WAOxC,KAAK,CAChB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,WAAW,EACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GACrC,OAAO,CAAC,sBAAsB,CAAC;CAUnC"}

package/dist/server/ServerAuthenticationResolver.js

@@ -16,7 +16,13 @@ export class ServerAuthenticationResolver {
         this.authConfig = authConfig;
         this.storage = storage;
         this.endpointOverrides = endpointOverrides;
-        this.pkceProducer = new GenericPublicClientPKCEProducer(storage);
+        // Determine if PKCE should be used based on config
+        // Default to true
+        const usePkce = authConfig.pkce !== false;
+        // Only create PKCE producer if we're using PKCE
+        this.pkceProducer = usePkce
+            ? new GenericPublicClientPKCEProducer(storage)
+            : null;
     }
     /**
      * Attempts to refresh tokens if a refresh token is available
@@ -36,7 +42,12 @@ export class ServerAuthenticationResolver {
                     throw new Error("Failed to initialize OAuth client for token refresh");
                 }
                 // Use the oauth2client to refresh the access token
-                const tokenResponseBody = (await this.oauth2client.refreshAccessToken(sessionData.refreshToken));
+                const refreshOptions = {};
+                if (this.authConfig.clientSecret) {
+                    refreshOptions.credentials = this.authConfig.clientSecret;
+                    refreshOptions.authenticateWith = "request_body";
+                }
+                const tokenResponseBody = (await this.oauth2client.refreshAccessToken(sessionData.refreshToken, refreshOptions));
                 if (!tokenResponseBody) {
                     throw new Error("Failed to get token response from refresh");
                 }
@@ -50,7 +61,7 @@ export class ServerAuthenticationResolver {
                     idToken: tokenResponseBody.id_token,
                     accessToken: tokenResponseBody.access_token,
                     refreshToken: tokenResponseBody.refresh_token,
-                    accessTokenExpiresAt: tokenResponseBody.access_token_expires_at,
+                    oidcSessionExpiresAt: tokenResponseBody.oidc_session_expires_at,
                 };
             }
             catch (error) {
@@ -94,7 +105,7 @@ export class ServerAuthenticationResolver {
                 access_token: sessionData.accessToken, // May be undefined
                 id_token: sessionData.idToken, // Always required
                 refresh_token: sessionData.refreshToken,
-                access_token_expires_at: sessionData.accessTokenExpiresAt,
+                oidc_session_expires_at: sessionData.oidcSessionExpiresAt,
             }, this.endpoints.jwks, this.oauth2client, this.oauthServer);
             return sessionData;
         }
@@ -124,15 +135,21 @@ export class ServerAuthenticationResolver {
     async tokenExchange(code, state) {
         if (!this.oauth2client)
             await this.init();
-        const codeVerifier = await this.pkceProducer.getCodeVerifier();
-        if (!codeVerifier)
-            throw new Error("Code verifier not found in storage");
+        // Check if we're using PKCE and validate code verifier if needed
+        if (this.pkceProducer) {
+            const codeVerifier = await this.pkceProducer.getCodeVerifier();
+            if (!codeVerifier)
+                throw new Error("Code verifier not found in storage");
+        }
         // exchange auth code for tokens
         const tokens = await exchangeTokens(code, state, this.pkceProducer, this.oauth2client, // clean up types here to avoid the ! operator
-        this.oauthServer, this.endpoints);
+        this.oauthServer, this.endpoints, // clean up types here to avoid the ! operator
+        this.authConfig.clientSecret);
         await storeServerTokens(this.storage, tokens);
-        // the code verifier should be single-use, so we delete it
-        await this.storage.delete(CodeVerifier.COOKIE_NAME);
+        // the code verifier should be single-use, so we delete it if using PKCE
+        if (this.pkceProducer) {
+            await this.storage.delete(CodeVerifier.COOKIE_NAME);
+        }
         return tokens;
     }
     async getSessionData() {
@@ -144,7 +161,7 @@ export class ServerAuthenticationResolver {
             idToken: storageData.id_token,
             accessToken: storageData.access_token, // Optional
             refreshToken: storageData.refresh_token,
-            accessTokenExpiresAt: storageData.access_token_expires_at,
+            oidcSessionExpiresAt: storageData.oidc_session_expires_at,
         };
     }
     async getEndSessionEndpoint() {