@descope/react-sdk 2.4.0 → 2.5.0

package/README.md

@@ -370,6 +370,9 @@ Note:
 The session token cookie is set as a [`Secure`](https://datatracker.ietf.org/doc/html/rfc6265#section-5.2.5) cookie. It will be sent only over HTTPS connections.
 In addition, some browsers (e.g. Safari) may not store `Secure` cookie if the hosted page is running on an HTTP protocol.
 
+The session token cookie is set to [`SameSite=Strict`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value) by default.
+If you need to customize this, you can set `sessionTokenViaCookie={sameSite: 'Lax'}`
+
 ### Helper Functions
 
 You can also use the following functions to assist with various actions managing your JWT.

package/dist/cjs/components/AuthProvider/AuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthProvider.js","sources":["../../../../src/components/AuthProvider/AuthProvider.tsx"],"sourcesContent":["import React, {\n  FC,\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from 'react';\nimport Context from '../../hooks/Context';\nimport { IContext, User } from '../../types';\nimport { withValidation } from '../../utils';\nimport useSdk from './useSdk';\n\ninterface IAuthProviderProps {\n  projectId: string;\n  baseUrl?: string;\n  // allows to override the base URL that is used to fetch static files\n  baseStaticUrl?: string;\n  // If true, tokens will be stored on local storage and can accessed with getToken function\n  persistTokens?: boolean;\n  // If true, session token (jwt) will be stored on cookie. Otherwise, the session token will be\n  // stored on local storage and can accessed with getSessionToken function\n  // Use this option if session token will stay small (less than 1k)\n  // NOTE: Session token can grow, especially in cases of using authorization, or adding custom claims\n  sessionTokenViaCookie?: boolean;\n  // If true, last authenticated user will be stored on local storage and can accessed with getUser function\n  storeLastAuthenticatedUser?: boolean;\n  // If true, last authenticated user will not be removed after logout\n  keepLastAuthenticatedUserAfterLogout?: boolean;\n  children?: React.ReactNode;\n}\n\nconst AuthProvider: FC<IAuthProviderProps> = ({\n  projectId,\n  baseUrl = '',\n  baseStaticUrl = '',\n  sessionTokenViaCookie = false,\n  persistTokens = true,\n  storeLastAuthenticatedUser = true,\n  keepLastAuthenticatedUserAfterLogout = false,\n  children = undefined,\n}) => {\n  const [user, setUser] = useState<User>();\n  const [session, setSession] = useState<string>();\n\n  const [isUserLoading, setIsUserLoading] = useState(false);\n  const [isSessionLoading, setIsSessionLoading] = useState(false);\n\n  const sdk = useSdk({\n    projectId,\n    baseUrl,\n    persistTokens,\n    sessionTokenViaCookie,\n    storeLastAuthenticatedUser,\n    keepLastAuthenticatedUserAfterLogout,\n  });\n\n  useEffect(() => {\n    if (sdk) {\n      const unsubscribeSessionToken = sdk.onSessionTokenChange(setSession);\n      const unsubscribeUser = sdk.onUserChange(setUser);\n\n      return () => {\n        unsubscribeSessionToken();\n        unsubscribeUser();\n      };\n    }\n    return undefined;\n  }, [sdk]);\n\n  const isSessionFetched = useRef(false);\n  const isUserFetched = useRef(false);\n\n  const fetchSession = useCallback(() => {\n    // We want that the session will fetched only once\n    if (isSessionFetched.current) return;\n    isSessionFetched.current = true;\n\n    setIsSessionLoading(true);\n    withValidation(sdk?.refresh)().then(() => {\n      setIsSessionLoading(false);\n    });\n  }, [sdk]);\n\n  const fetchUser = useCallback(() => {\n    // We want that the user will fetched only once\n    if (isUserFetched.current) return;\n    isUserFetched.current = true;\n\n    setIsUserLoading(true);\n    withValidation(sdk.me)().then(() => {\n      setIsUserLoading(false);\n    });\n  }, [sdk]);\n\n  const value = useMemo<IContext>(\n    () => ({\n      fetchUser,\n      user,\n      isUserLoading,\n      isUserFetched: isUserFetched.current,\n      fetchSession,\n      session,\n      isSessionLoading,\n      isSessionFetched: isSessionFetched.current,\n      projectId,\n      baseUrl,\n      baseStaticUrl,\n      storeLastAuthenticatedUser,\n      keepLastAuthenticatedUserAfterLogout,\n      setUser,\n      setSession,\n      sdk,\n    }),\n    [\n      fetchUser,\n      user,\n      isUserLoading,\n      isUserFetched.current,\n      fetchSession,\n      session,\n      isSessionLoading,\n      isSessionFetched.current,\n      projectId,\n      baseUrl,\n      baseStaticUrl,\n      setUser,\n      setSession,\n      sdk,\n    ],\n  );\n  return <Context.Provider value={value}>{children}</Context.Provider>;\n};\n\nexport default AuthProvider;\n"],"names":["projectId","baseUrl","baseStaticUrl","sessionTokenViaCookie","persistTokens","storeLastAuthenticatedUser","keepLastAuthenticatedUserAfterLogout","children","user","setUser","useState","session","setSession","isUserLoading","setIsUserLoading","isSessionLoading","setIsSessionLoading","sdk","useSdk","useEffect","unsubscribeSessionToken","onSessionTokenChange","unsubscribeUser","onUserChange","isSessionFetched","useRef","isUserFetched","fetchSession","useCallback","current","withValidation","refresh","then","fetchUser","me","value","useMemo","React","default","createElement","Context","Provider"],"mappings":"kQAgC6C,EAC3CA,YACAC,UAAU,GACVC,gBAAgB,GAChBC,yBAAwB,EACxBC,iBAAgB,EAChBC,8BAA6B,EAC7BC,wCAAuC,EACvCC,eAEA,MAAOC,EAAMC,GAAWC,EAAQA,YACzBC,EAASC,GAAcF,EAAQA,YAE/BG,EAAeC,GAAoBJ,EAAQA,UAAC,IAC5CK,EAAkBC,GAAuBN,EAAQA,UAAC,GAEnDO,EAAMC,EAAAA,QAAO,CACjBlB,YACAC,UACAG,gBACAD,wBACAE,6BACAC,yCAGFa,EAAAA,WAAU,KACR,GAAIF,EAAK,CACP,MAAMG,EAA0BH,EAAII,qBAAqBT,GACnDU,EAAkBL,EAAIM,aAAad,GAEzC,MAAO,KACLW,IACAE,GAAiB,CAEpB,CACe,GACf,CAACL,IAEJ,MAAMO,EAAmBC,UAAO,GAC1BC,EAAgBD,UAAO,GAEvBE,EAAeC,EAAAA,aAAY,KAE3BJ,EAAiBK,UACrBL,EAAiBK,SAAU,EAE3Bb,GAAoB,GACpBc,EAAAA,eAAeb,eAAAA,EAAKc,QAApBD,GAA+BE,MAAK,KAClChB,GAAoB,EAAM,IAC1B,GACD,CAACC,IAEEgB,EAAYL,EAAAA,aAAY,KAExBF,EAAcG,UAClBH,EAAcG,SAAU,EAExBf,GAAiB,GACjBgB,EAAAA,eAAeb,EAAIiB,GAAnBJ,GAAyBE,MAAK,KAC5BlB,GAAiB,EAAM,IACvB,GACD,CAACG,IAEEkB,EAAQC,EAAAA,SACZ,KAAO,CACLH,YACAzB,OACAK,gBACAa,cAAeA,EAAcG,QAC7BF,eACAhB,UACAI,mBACAS,iBAAkBA,EAAiBK,QACnC7B,YACAC,UACAC,gBACAG,6BACAC,uCACAG,UACAG,aACAK,SAEF,CACEgB,EACAzB,EACAK,EACAa,EAAcG,QACdF,EACAhB,EACAI,EACAS,EAAiBK,QACjB7B,EACAC,EACAC,EACAO,EACAG,EACAK,IAGJ,OAAOoB,EAAAC,QAAAC,cAACC,UAAQC,SAAQ,CAACN,MAAOA,GAAQ5B,EAA4B"}
+{"version":3,"file":"AuthProvider.js","sources":["../../../../src/components/AuthProvider/AuthProvider.tsx"],"sourcesContent":["import React, {\n  FC,\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from 'react';\nimport Context from '../../hooks/Context';\nimport { IContext, User } from '../../types';\nimport { withValidation } from '../../utils';\nimport useSdk from './useSdk';\n\ntype SameSite = 'Strict' | 'Lax' | 'None';\ninterface IAuthProviderProps {\n  projectId: string;\n  baseUrl?: string;\n  // allows to override the base URL that is used to fetch static files\n  baseStaticUrl?: string;\n  // If true, tokens will be stored on local storage and can accessed with getToken function\n  persistTokens?: boolean;\n  // If true, session token (jwt) will be stored on cookie. Otherwise, the session token will be\n  // stored on local storage and can accessed with getSessionToken function\n  // Use this option if session token will stay small (less than 1k)\n  // NOTE: Session token can grow, especially in cases of using authorization, or adding custom claims\n  sessionTokenViaCookie?: boolean | { sameSite: SameSite };\n  // If true, last authenticated user will be stored on local storage and can accessed with getUser function\n  storeLastAuthenticatedUser?: boolean;\n  // If true, last authenticated user will not be removed after logout\n  keepLastAuthenticatedUserAfterLogout?: boolean;\n  children?: React.ReactNode;\n}\n\nconst AuthProvider: FC<IAuthProviderProps> = ({\n  projectId,\n  baseUrl = '',\n  baseStaticUrl = '',\n  sessionTokenViaCookie = false,\n  persistTokens = true,\n  storeLastAuthenticatedUser = true,\n  keepLastAuthenticatedUserAfterLogout = false,\n  children = undefined,\n}) => {\n  const [user, setUser] = useState<User>();\n  const [session, setSession] = useState<string>();\n\n  const [isUserLoading, setIsUserLoading] = useState(false);\n  const [isSessionLoading, setIsSessionLoading] = useState(false);\n\n  const sdk = useSdk({\n    projectId,\n    baseUrl,\n    persistTokens,\n    sessionTokenViaCookie,\n    storeLastAuthenticatedUser,\n    keepLastAuthenticatedUserAfterLogout,\n  });\n\n  useEffect(() => {\n    if (sdk) {\n      const unsubscribeSessionToken = sdk.onSessionTokenChange(setSession);\n      const unsubscribeUser = sdk.onUserChange(setUser);\n\n      return () => {\n        unsubscribeSessionToken();\n        unsubscribeUser();\n      };\n    }\n    return undefined;\n  }, [sdk]);\n\n  const isSessionFetched = useRef(false);\n  const isUserFetched = useRef(false);\n\n  const fetchSession = useCallback(() => {\n    // We want that the session will fetched only once\n    if (isSessionFetched.current) return;\n    isSessionFetched.current = true;\n\n    setIsSessionLoading(true);\n    withValidation(sdk?.refresh)().then(() => {\n      setIsSessionLoading(false);\n    });\n  }, [sdk]);\n\n  const fetchUser = useCallback(() => {\n    // We want that the user will fetched only once\n    if (isUserFetched.current) return;\n    isUserFetched.current = true;\n\n    setIsUserLoading(true);\n    withValidation(sdk.me)().then(() => {\n      setIsUserLoading(false);\n    });\n  }, [sdk]);\n\n  const value = useMemo<IContext>(\n    () => ({\n      fetchUser,\n      user,\n      isUserLoading,\n      isUserFetched: isUserFetched.current,\n      fetchSession,\n      session,\n      isSessionLoading,\n      isSessionFetched: isSessionFetched.current,\n      projectId,\n      baseUrl,\n      baseStaticUrl,\n      storeLastAuthenticatedUser,\n      keepLastAuthenticatedUserAfterLogout,\n      setUser,\n      setSession,\n      sdk,\n    }),\n    [\n      fetchUser,\n      user,\n      isUserLoading,\n      isUserFetched.current,\n      fetchSession,\n      session,\n      isSessionLoading,\n      isSessionFetched.current,\n      projectId,\n      baseUrl,\n      baseStaticUrl,\n      setUser,\n      setSession,\n      sdk,\n    ],\n  );\n  return <Context.Provider value={value}>{children}</Context.Provider>;\n};\n\nexport default AuthProvider;\n"],"names":["projectId","baseUrl","baseStaticUrl","sessionTokenViaCookie","persistTokens","storeLastAuthenticatedUser","keepLastAuthenticatedUserAfterLogout","children","user","setUser","useState","session","setSession","isUserLoading","setIsUserLoading","isSessionLoading","setIsSessionLoading","sdk","useSdk","useEffect","unsubscribeSessionToken","onSessionTokenChange","unsubscribeUser","onUserChange","isSessionFetched","useRef","isUserFetched","fetchSession","useCallback","current","withValidation","refresh","then","fetchUser","me","value","useMemo","React","default","createElement","Context","Provider"],"mappings":"kQAiC6C,EAC3CA,YACAC,UAAU,GACVC,gBAAgB,GAChBC,yBAAwB,EACxBC,iBAAgB,EAChBC,8BAA6B,EAC7BC,wCAAuC,EACvCC,eAEA,MAAOC,EAAMC,GAAWC,EAAQA,YACzBC,EAASC,GAAcF,EAAQA,YAE/BG,EAAeC,GAAoBJ,EAAQA,UAAC,IAC5CK,EAAkBC,GAAuBN,EAAQA,UAAC,GAEnDO,EAAMC,EAAAA,QAAO,CACjBlB,YACAC,UACAG,gBACAD,wBACAE,6BACAC,yCAGFa,EAAAA,WAAU,KACR,GAAIF,EAAK,CACP,MAAMG,EAA0BH,EAAII,qBAAqBT,GACnDU,EAAkBL,EAAIM,aAAad,GAEzC,MAAO,KACLW,IACAE,GAAiB,CAEpB,CACe,GACf,CAACL,IAEJ,MAAMO,EAAmBC,UAAO,GAC1BC,EAAgBD,UAAO,GAEvBE,EAAeC,EAAAA,aAAY,KAE3BJ,EAAiBK,UACrBL,EAAiBK,SAAU,EAE3Bb,GAAoB,GACpBc,EAAAA,eAAeb,eAAAA,EAAKc,QAApBD,GAA+BE,MAAK,KAClChB,GAAoB,EAAM,IAC1B,GACD,CAACC,IAEEgB,EAAYL,EAAAA,aAAY,KAExBF,EAAcG,UAClBH,EAAcG,SAAU,EAExBf,GAAiB,GACjBgB,EAAAA,eAAeb,EAAIiB,GAAnBJ,GAAyBE,MAAK,KAC5BlB,GAAiB,EAAM,IACvB,GACD,CAACG,IAEEkB,EAAQC,EAAAA,SACZ,KAAO,CACLH,YACAzB,OACAK,gBACAa,cAAeA,EAAcG,QAC7BF,eACAhB,UACAI,mBACAS,iBAAkBA,EAAiBK,QACnC7B,YACAC,UACAC,gBACAG,6BACAC,uCACAG,UACAG,aACAK,SAEF,CACEgB,EACAzB,EACAK,EACAa,EAAcG,QACdF,EACAhB,EACAI,EACAS,EAAiBK,QACjB7B,EACAC,EACAC,EACAO,EACAG,EACAK,IAGJ,OAAOoB,EAAAC,QAAAC,cAACC,UAAQC,SAAQ,CAACN,MAAOA,GAAQ5B,EAA4B"}

package/dist/cjs/constants.js

@@ -1,2 +1,2 @@
-"use strict";const e="undefined"!=typeof window;exports.IS_BROWSER=e,exports.baseHeaders={"x-descope-sdk-name":"react","x-descope-sdk-version":"2.4.0"};
+"use strict";const e="undefined"!=typeof window;exports.IS_BROWSER=e,exports.baseHeaders={"x-descope-sdk-name":"react","x-descope-sdk-version":"2.5.0"};
 //# sourceMappingURL=constants.js.map

package/dist/esm/components/AuthProvider/AuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthProvider.js","sources":["../../../../src/components/AuthProvider/AuthProvider.tsx"],"sourcesContent":["import React, {\n  FC,\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from 'react';\nimport Context from '../../hooks/Context';\nimport { IContext, User } from '../../types';\nimport { withValidation } from '../../utils';\nimport useSdk from './useSdk';\n\ninterface IAuthProviderProps {\n  projectId: string;\n  baseUrl?: string;\n  // allows to override the base URL that is used to fetch static files\n  baseStaticUrl?: string;\n  // If true, tokens will be stored on local storage and can accessed with getToken function\n  persistTokens?: boolean;\n  // If true, session token (jwt) will be stored on cookie. Otherwise, the session token will be\n  // stored on local storage and can accessed with getSessionToken function\n  // Use this option if session token will stay small (less than 1k)\n  // NOTE: Session token can grow, especially in cases of using authorization, or adding custom claims\n  sessionTokenViaCookie?: boolean;\n  // If true, last authenticated user will be stored on local storage and can accessed with getUser function\n  storeLastAuthenticatedUser?: boolean;\n  // If true, last authenticated user will not be removed after logout\n  keepLastAuthenticatedUserAfterLogout?: boolean;\n  children?: React.ReactNode;\n}\n\nconst AuthProvider: FC<IAuthProviderProps> = ({\n  projectId,\n  baseUrl = '',\n  baseStaticUrl = '',\n  sessionTokenViaCookie = false,\n  persistTokens = true,\n  storeLastAuthenticatedUser = true,\n  keepLastAuthenticatedUserAfterLogout = false,\n  children = undefined,\n}) => {\n  const [user, setUser] = useState<User>();\n  const [session, setSession] = useState<string>();\n\n  const [isUserLoading, setIsUserLoading] = useState(false);\n  const [isSessionLoading, setIsSessionLoading] = useState(false);\n\n  const sdk = useSdk({\n    projectId,\n    baseUrl,\n    persistTokens,\n    sessionTokenViaCookie,\n    storeLastAuthenticatedUser,\n    keepLastAuthenticatedUserAfterLogout,\n  });\n\n  useEffect(() => {\n    if (sdk) {\n      const unsubscribeSessionToken = sdk.onSessionTokenChange(setSession);\n      const unsubscribeUser = sdk.onUserChange(setUser);\n\n      return () => {\n        unsubscribeSessionToken();\n        unsubscribeUser();\n      };\n    }\n    return undefined;\n  }, [sdk]);\n\n  const isSessionFetched = useRef(false);\n  const isUserFetched = useRef(false);\n\n  const fetchSession = useCallback(() => {\n    // We want that the session will fetched only once\n    if (isSessionFetched.current) return;\n    isSessionFetched.current = true;\n\n    setIsSessionLoading(true);\n    withValidation(sdk?.refresh)().then(() => {\n      setIsSessionLoading(false);\n    });\n  }, [sdk]);\n\n  const fetchUser = useCallback(() => {\n    // We want that the user will fetched only once\n    if (isUserFetched.current) return;\n    isUserFetched.current = true;\n\n    setIsUserLoading(true);\n    withValidation(sdk.me)().then(() => {\n      setIsUserLoading(false);\n    });\n  }, [sdk]);\n\n  const value = useMemo<IContext>(\n    () => ({\n      fetchUser,\n      user,\n      isUserLoading,\n      isUserFetched: isUserFetched.current,\n      fetchSession,\n      session,\n      isSessionLoading,\n      isSessionFetched: isSessionFetched.current,\n      projectId,\n      baseUrl,\n      baseStaticUrl,\n      storeLastAuthenticatedUser,\n      keepLastAuthenticatedUserAfterLogout,\n      setUser,\n      setSession,\n      sdk,\n    }),\n    [\n      fetchUser,\n      user,\n      isUserLoading,\n      isUserFetched.current,\n      fetchSession,\n      session,\n      isSessionLoading,\n      isSessionFetched.current,\n      projectId,\n      baseUrl,\n      baseStaticUrl,\n      setUser,\n      setSession,\n      sdk,\n    ],\n  );\n  return <Context.Provider value={value}>{children}</Context.Provider>;\n};\n\nexport default AuthProvider;\n"],"names":["AuthProvider","projectId","baseUrl","baseStaticUrl","sessionTokenViaCookie","persistTokens","storeLastAuthenticatedUser","keepLastAuthenticatedUserAfterLogout","children","user","setUser","useState","session","setSession","isUserLoading","setIsUserLoading","isSessionLoading","setIsSessionLoading","sdk","useSdk","useEffect","unsubscribeSessionToken","onSessionTokenChange","unsubscribeUser","onUserChange","isSessionFetched","useRef","isUserFetched","fetchSession","useCallback","current","withValidation","refresh","then","fetchUser","me","value","useMemo","React","createElement","Context","Provider"],"mappings":"8MAgCA,MAAMA,EAAuC,EAC3CC,YACAC,UAAU,GACVC,gBAAgB,GAChBC,yBAAwB,EACxBC,iBAAgB,EAChBC,8BAA6B,EAC7BC,wCAAuC,EACvCC,eAEA,MAAOC,EAAMC,GAAWC,KACjBC,EAASC,GAAcF,KAEvBG,EAAeC,GAAoBJ,GAAS,IAC5CK,EAAkBC,GAAuBN,GAAS,GAEnDO,EAAMC,EAAO,CACjBlB,YACAC,UACAG,gBACAD,wBACAE,6BACAC,yCAGFa,GAAU,KACR,GAAIF,EAAK,CACP,MAAMG,EAA0BH,EAAII,qBAAqBT,GACnDU,EAAkBL,EAAIM,aAAad,GAEzC,MAAO,KACLW,IACAE,GAAiB,CAEpB,CACe,GACf,CAACL,IAEJ,MAAMO,EAAmBC,GAAO,GAC1BC,EAAgBD,GAAO,GAEvBE,EAAeC,GAAY,KAE3BJ,EAAiBK,UACrBL,EAAiBK,SAAU,EAE3Bb,GAAoB,GACpBc,EAAeb,eAAAA,EAAKc,QAApBD,GAA+BE,MAAK,KAClChB,GAAoB,EAAM,IAC1B,GACD,CAACC,IAEEgB,EAAYL,GAAY,KAExBF,EAAcG,UAClBH,EAAcG,SAAU,EAExBf,GAAiB,GACjBgB,EAAeb,EAAIiB,GAAnBJ,GAAyBE,MAAK,KAC5BlB,GAAiB,EAAM,IACvB,GACD,CAACG,IAEEkB,EAAQC,GACZ,KAAO,CACLH,YACAzB,OACAK,gBACAa,cAAeA,EAAcG,QAC7BF,eACAhB,UACAI,mBACAS,iBAAkBA,EAAiBK,QACnC7B,YACAC,UACAC,gBACAG,6BACAC,uCACAG,UACAG,aACAK,SAEF,CACEgB,EACAzB,EACAK,EACAa,EAAcG,QACdF,EACAhB,EACAI,EACAS,EAAiBK,QACjB7B,EACAC,EACAC,EACAO,EACAG,EACAK,IAGJ,OAAOoB,EAAAC,cAACC,EAAQC,SAAQ,CAACL,MAAOA,GAAQ5B,EAA4B"}
+{"version":3,"file":"AuthProvider.js","sources":["../../../../src/components/AuthProvider/AuthProvider.tsx"],"sourcesContent":["import React, {\n  FC,\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from 'react';\nimport Context from '../../hooks/Context';\nimport { IContext, User } from '../../types';\nimport { withValidation } from '../../utils';\nimport useSdk from './useSdk';\n\ntype SameSite = 'Strict' | 'Lax' | 'None';\ninterface IAuthProviderProps {\n  projectId: string;\n  baseUrl?: string;\n  // allows to override the base URL that is used to fetch static files\n  baseStaticUrl?: string;\n  // If true, tokens will be stored on local storage and can accessed with getToken function\n  persistTokens?: boolean;\n  // If true, session token (jwt) will be stored on cookie. Otherwise, the session token will be\n  // stored on local storage and can accessed with getSessionToken function\n  // Use this option if session token will stay small (less than 1k)\n  // NOTE: Session token can grow, especially in cases of using authorization, or adding custom claims\n  sessionTokenViaCookie?: boolean | { sameSite: SameSite };\n  // If true, last authenticated user will be stored on local storage and can accessed with getUser function\n  storeLastAuthenticatedUser?: boolean;\n  // If true, last authenticated user will not be removed after logout\n  keepLastAuthenticatedUserAfterLogout?: boolean;\n  children?: React.ReactNode;\n}\n\nconst AuthProvider: FC<IAuthProviderProps> = ({\n  projectId,\n  baseUrl = '',\n  baseStaticUrl = '',\n  sessionTokenViaCookie = false,\n  persistTokens = true,\n  storeLastAuthenticatedUser = true,\n  keepLastAuthenticatedUserAfterLogout = false,\n  children = undefined,\n}) => {\n  const [user, setUser] = useState<User>();\n  const [session, setSession] = useState<string>();\n\n  const [isUserLoading, setIsUserLoading] = useState(false);\n  const [isSessionLoading, setIsSessionLoading] = useState(false);\n\n  const sdk = useSdk({\n    projectId,\n    baseUrl,\n    persistTokens,\n    sessionTokenViaCookie,\n    storeLastAuthenticatedUser,\n    keepLastAuthenticatedUserAfterLogout,\n  });\n\n  useEffect(() => {\n    if (sdk) {\n      const unsubscribeSessionToken = sdk.onSessionTokenChange(setSession);\n      const unsubscribeUser = sdk.onUserChange(setUser);\n\n      return () => {\n        unsubscribeSessionToken();\n        unsubscribeUser();\n      };\n    }\n    return undefined;\n  }, [sdk]);\n\n  const isSessionFetched = useRef(false);\n  const isUserFetched = useRef(false);\n\n  const fetchSession = useCallback(() => {\n    // We want that the session will fetched only once\n    if (isSessionFetched.current) return;\n    isSessionFetched.current = true;\n\n    setIsSessionLoading(true);\n    withValidation(sdk?.refresh)().then(() => {\n      setIsSessionLoading(false);\n    });\n  }, [sdk]);\n\n  const fetchUser = useCallback(() => {\n    // We want that the user will fetched only once\n    if (isUserFetched.current) return;\n    isUserFetched.current = true;\n\n    setIsUserLoading(true);\n    withValidation(sdk.me)().then(() => {\n      setIsUserLoading(false);\n    });\n  }, [sdk]);\n\n  const value = useMemo<IContext>(\n    () => ({\n      fetchUser,\n      user,\n      isUserLoading,\n      isUserFetched: isUserFetched.current,\n      fetchSession,\n      session,\n      isSessionLoading,\n      isSessionFetched: isSessionFetched.current,\n      projectId,\n      baseUrl,\n      baseStaticUrl,\n      storeLastAuthenticatedUser,\n      keepLastAuthenticatedUserAfterLogout,\n      setUser,\n      setSession,\n      sdk,\n    }),\n    [\n      fetchUser,\n      user,\n      isUserLoading,\n      isUserFetched.current,\n      fetchSession,\n      session,\n      isSessionLoading,\n      isSessionFetched.current,\n      projectId,\n      baseUrl,\n      baseStaticUrl,\n      setUser,\n      setSession,\n      sdk,\n    ],\n  );\n  return <Context.Provider value={value}>{children}</Context.Provider>;\n};\n\nexport default AuthProvider;\n"],"names":["AuthProvider","projectId","baseUrl","baseStaticUrl","sessionTokenViaCookie","persistTokens","storeLastAuthenticatedUser","keepLastAuthenticatedUserAfterLogout","children","user","setUser","useState","session","setSession","isUserLoading","setIsUserLoading","isSessionLoading","setIsSessionLoading","sdk","useSdk","useEffect","unsubscribeSessionToken","onSessionTokenChange","unsubscribeUser","onUserChange","isSessionFetched","useRef","isUserFetched","fetchSession","useCallback","current","withValidation","refresh","then","fetchUser","me","value","useMemo","React","createElement","Context","Provider"],"mappings":"8MAiCA,MAAMA,EAAuC,EAC3CC,YACAC,UAAU,GACVC,gBAAgB,GAChBC,yBAAwB,EACxBC,iBAAgB,EAChBC,8BAA6B,EAC7BC,wCAAuC,EACvCC,eAEA,MAAOC,EAAMC,GAAWC,KACjBC,EAASC,GAAcF,KAEvBG,EAAeC,GAAoBJ,GAAS,IAC5CK,EAAkBC,GAAuBN,GAAS,GAEnDO,EAAMC,EAAO,CACjBlB,YACAC,UACAG,gBACAD,wBACAE,6BACAC,yCAGFa,GAAU,KACR,GAAIF,EAAK,CACP,MAAMG,EAA0BH,EAAII,qBAAqBT,GACnDU,EAAkBL,EAAIM,aAAad,GAEzC,MAAO,KACLW,IACAE,GAAiB,CAEpB,CACe,GACf,CAACL,IAEJ,MAAMO,EAAmBC,GAAO,GAC1BC,EAAgBD,GAAO,GAEvBE,EAAeC,GAAY,KAE3BJ,EAAiBK,UACrBL,EAAiBK,SAAU,EAE3Bb,GAAoB,GACpBc,EAAeb,eAAAA,EAAKc,QAApBD,GAA+BE,MAAK,KAClChB,GAAoB,EAAM,IAC1B,GACD,CAACC,IAEEgB,EAAYL,GAAY,KAExBF,EAAcG,UAClBH,EAAcG,SAAU,EAExBf,GAAiB,GACjBgB,EAAeb,EAAIiB,GAAnBJ,GAAyBE,MAAK,KAC5BlB,GAAiB,EAAM,IACvB,GACD,CAACG,IAEEkB,EAAQC,GACZ,KAAO,CACLH,YACAzB,OACAK,gBACAa,cAAeA,EAAcG,QAC7BF,eACAhB,UACAI,mBACAS,iBAAkBA,EAAiBK,QACnC7B,YACAC,UACAC,gBACAG,6BACAC,uCACAG,UACAG,aACAK,SAEF,CACEgB,EACAzB,EACAK,EACAa,EAAcG,QACdF,EACAhB,EACAI,EACAS,EAAiBK,QACjB7B,EACAC,EACAC,EACAO,EACAG,EACAK,IAGJ,OAAOoB,EAAAC,cAACC,EAAQC,SAAQ,CAACL,MAAOA,GAAQ5B,EAA4B"}

package/dist/esm/constants.js

@@ -1,2 +1,2 @@
-const e={"x-descope-sdk-name":"react","x-descope-sdk-version":"2.4.0"},d="undefined"!=typeof window;export{d as IS_BROWSER,e as baseHeaders};
+const e={"x-descope-sdk-name":"react","x-descope-sdk-version":"2.5.0"},d="undefined"!=typeof window;export{d as IS_BROWSER,e as baseHeaders};
 //# sourceMappingURL=constants.js.map

package/dist/index.d.ts

@@ -11,12 +11,15 @@ import ApplicationsPortalWidget from '@descope/applications-portal-widget';
 import * as _descope_web_js_sdk from '@descope/web-js-sdk';
 import * as _1 from '@descope/core-js-sdk';
 
+type SameSite = 'Strict' | 'Lax' | 'None';
 interface IAuthProviderProps {
     projectId: string;
     baseUrl?: string;
     baseStaticUrl?: string;
     persistTokens?: boolean;
-    sessionTokenViaCookie?: boolean;
+    sessionTokenViaCookie?: boolean | {
+        sameSite: SameSite;
+    };
     storeLastAuthenticatedUser?: boolean;
     keepLastAuthenticatedUserAfterLogout?: boolean;
     children?: React.ReactNode;
@@ -67,10 +70,14 @@ declare const createSdkWrapper: <P extends Omit<{
     storeLastAuthenticatedUser?: boolean;
     keepLastAuthenticatedUserAfterLogout?: boolean;
 } & {
-    persistTokens?: boolean;
+    persistTokens?: boolean | {
+        sameSite: "Strict" | "Lax" | "None";
+    };
     storagePrefix?: string;
     preview?: boolean;
-    sessionTokenViaCookie?: boolean;
+    sessionTokenViaCookie?: boolean | {
+        sameSite: "Strict" | "Lax" | "None";
+    };
 }>(config: P) => ((({
     refresh: (token?: string) => Promise<_1.SdkResponse<_1.JWTResponse>>;
     flow: {