@feelflow/ffid-sdk 10.0.0 → 11.0.0

package/dist/agency/index.d.cts

@@ -124,6 +124,20 @@ interface FFIDProvisionOrganizationRequest {
     slug?: string;
     /** 請求先メールアドレス */
     billingEmail?: string;
+    /**
+     * 冪等キー（1〜255 文字の表示可能な ASCII。空白不可）。
+     *
+     * 指定すると、同じ代理店・同じキーの再送（24 時間以内）は**組織を作らずに**
+     * 初回の結果を返す。タイムアウトや `PARSE_ERROR` で応答を受け取れなかったときは、
+     * **同じキーのまま**再送すれば二重作成にならない。申込番号など、作りたい組織 1 つに
+     * 1 つ対応する値を使う。
+     *
+     * - 同じキーで内容（`name` / `ownerEmail` / `slug` / `billingEmail`）が違うと 422
+     *   `IDEMPOTENCY_KEY_REUSED`（別の組織を作るなら別のキーを使う）
+     * - 省略すると従来どおり毎回作成する
+     * - HTTP では `Idempotency-Key` ヘッダーでも渡せる（本文と両方に入れる場合は同じ値）
+     */
+    idempotencyKey?: string;
 }
 /** 案内メールの送信結果。組織作成の成否とは独立している。 */
 type FFIDWelcomeEmailOutcome = 'sent' | 'failed';
@@ -453,9 +467,17 @@ interface FFIDAgencyServerClient {
      *   そのほか:
      *   - スコープ不足 / 代理店が停止中 → `FORBIDDEN`（403）
      *   - slug が既存組織と衝突 → `ORGANIZATION_SLUG_CONFLICT`（409、組織は作成されない）
+     *   - slug が予約語（`admin` / `api` / `login` など）→ `ORGANIZATION_SLUG_RESERVED`
+     *     （400、組織は作成されない。別の値を指定する）
+     *   - `ownerEmail` の既存アカウントが停止・削除済み → `OWNER_ACCOUNT_UNAVAILABLE`
+     *     （422、**組織は作成されない**。別のメールアドレスを指定する）
      *   - 認証段階の一時障害 → `SERVICE_UNAVAILABLE`（503、**安全に再試行できる**）
      *   - `PARSE_ERROR` / `NETWORK_ERROR` — **組織が作成された可能性がある**。
-     *     再試行の前に組織一覧を確認すること（#5165 で冪等キーを導入予定）
+     *     `idempotencyKey` を付けていれば**同じキーで**再送してよい（作成済みなら
+     *     初回の結果が返り、組織は増えない。#5165）。付けていない場合は再試行の前に
+     *     組織一覧を確認すること
+     *   - 同じ `idempotencyKey` で内容が違う → `IDEMPOTENCY_KEY_REUSED`（422）
+     *   - `idempotencyKey` の形式不正 → `INVALID_IDEMPOTENCY_KEY`（400）
      */
     provisionCustomerOrganization(data: FFIDProvisionOrganizationRequest): Promise<FFIDAgencyServerClientResponse<FFIDProvisionedOrganization>>;
 }

package/dist/agency/index.d.ts

@@ -124,6 +124,20 @@ interface FFIDProvisionOrganizationRequest {
     slug?: string;
     /** 請求先メールアドレス */
     billingEmail?: string;
+    /**
+     * 冪等キー（1〜255 文字の表示可能な ASCII。空白不可）。
+     *
+     * 指定すると、同じ代理店・同じキーの再送（24 時間以内）は**組織を作らずに**
+     * 初回の結果を返す。タイムアウトや `PARSE_ERROR` で応答を受け取れなかったときは、
+     * **同じキーのまま**再送すれば二重作成にならない。申込番号など、作りたい組織 1 つに
+     * 1 つ対応する値を使う。
+     *
+     * - 同じキーで内容（`name` / `ownerEmail` / `slug` / `billingEmail`）が違うと 422
+     *   `IDEMPOTENCY_KEY_REUSED`（別の組織を作るなら別のキーを使う）
+     * - 省略すると従来どおり毎回作成する
+     * - HTTP では `Idempotency-Key` ヘッダーでも渡せる（本文と両方に入れる場合は同じ値）
+     */
+    idempotencyKey?: string;
 }
 /** 案内メールの送信結果。組織作成の成否とは独立している。 */
 type FFIDWelcomeEmailOutcome = 'sent' | 'failed';
@@ -453,9 +467,17 @@ interface FFIDAgencyServerClient {
      *   そのほか:
      *   - スコープ不足 / 代理店が停止中 → `FORBIDDEN`（403）
      *   - slug が既存組織と衝突 → `ORGANIZATION_SLUG_CONFLICT`（409、組織は作成されない）
+     *   - slug が予約語（`admin` / `api` / `login` など）→ `ORGANIZATION_SLUG_RESERVED`
+     *     （400、組織は作成されない。別の値を指定する）
+     *   - `ownerEmail` の既存アカウントが停止・削除済み → `OWNER_ACCOUNT_UNAVAILABLE`
+     *     （422、**組織は作成されない**。別のメールアドレスを指定する）
      *   - 認証段階の一時障害 → `SERVICE_UNAVAILABLE`（503、**安全に再試行できる**）
      *   - `PARSE_ERROR` / `NETWORK_ERROR` — **組織が作成された可能性がある**。
-     *     再試行の前に組織一覧を確認すること（#5165 で冪等キーを導入予定）
+     *     `idempotencyKey` を付けていれば**同じキーで**再送してよい（作成済みなら
+     *     初回の結果が返り、組織は増えない。#5165）。付けていない場合は再試行の前に
+     *     組織一覧を確認すること
+     *   - 同じ `idempotencyKey` で内容が違う → `IDEMPOTENCY_KEY_REUSED`（422）
+     *   - `idempotencyKey` の形式不正 → `INVALID_IDEMPOTENCY_KEY`（400）
      */
     provisionCustomerOrganization(data: FFIDProvisionOrganizationRequest): Promise<FFIDAgencyServerClientResponse<FFIDProvisionedOrganization>>;
 }

package/dist/{chunk-OXW6QSTO.js → chunk-QORWLPWG.js}

@@ -308,6 +308,9 @@ var OAUTH_INTROSPECT_ENDPOINT = "/api/v1/oauth/introspect";
 var CACHE_KEY_PREFIX = "ffid:introspect:";
 var HEX_BASE = 16;
 var HEX_BYTE_WIDTH = 2;
+var HTTP_TOO_MANY_REQUESTS = 429;
+var HTTP_SERVER_ERROR_MIN = 500;
+var HTTP_SERVER_ERROR_LIMIT = 600;
 function createVerifyAccessToken(deps) {
   const { authMode, baseUrl, serviceCode, serviceApiKey, verifyStrategy, logger, createError, errorCodes, cache, timeout } = deps;
   let jwtVerify2 = null;
@@ -362,6 +365,16 @@ function createVerifyAccessToken(deps) {
     }
     return verifyViaIntrospect(accessToken);
   }
+  function introspectionUnavailable(status) {
+    logger.error("Token introspection unavailable", { status });
+    return {
+      error: {
+        code: errorCodes.NETWORK_ERROR,
+        message: `\u30C8\u30FC\u30AF\u30F3\u691C\u8A3C\u30B5\u30FC\u30D3\u30B9\u304C\u4E00\u6642\u7684\u306B\u5229\u7528\u3067\u304D\u307E\u305B\u3093 (status: ${status})`,
+        details: { status }
+      }
+    };
+  }
   async function verifyViaIntrospect(accessToken, cacheKeySuffix) {
     if (!serviceApiKey) {
       return {
@@ -419,10 +432,12 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    const upstreamUnavailable = response.status === HTTP_TOO_MANY_REQUESTS || response.status >= HTTP_SERVER_ERROR_MIN && response.status < HTTP_SERVER_ERROR_LIMIT;
     let introspectResponse;
     try {
       introspectResponse = await response.json();
     } catch (parseError) {
+      if (upstreamUnavailable) return introspectionUnavailable(response.status);
       logger.error("Parse error during token verification:", parseError);
       return {
         error: {
@@ -431,6 +446,7 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    if (upstreamUnavailable) return introspectionUnavailable(response.status);
     if (!response.ok) {
       const errorBody = introspectResponse;
       return {
@@ -1374,7 +1390,7 @@ var FFID_ORGANIZATION_PROFILE_ERROR_CODES = {
 };
 
 // src/client/version-check.ts
-var SDK_VERSION = "10.0.0";
+var SDK_VERSION = "11.0.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1942,7 +1958,7 @@ function createInviteMethods(deps) {
     }).toString();
     return fetchWithAuth(`${EXT_INVITE_ENDPOINT}?${query}`, {
       method: "POST",
-      body: JSON.stringify({ email: params.email, role: params.role })
+      body: JSON.stringify({ email: params.email, role: params.role, inviterUserId: params.inviterUserId })
     });
   }
   return { inviteMember };
@@ -2245,6 +2261,25 @@ function createOAuthTokenMethods(deps) {
   return { exchangeCodeForTokens, refreshAccessToken, signOutToken };
 }
 
+// src/client/request-timeout.ts
+function withRequestTimeout(options, timeout) {
+  if (timeout === void 0 || options.signal?.aborted) return options;
+  const deadline = AbortSignal.timeout(timeout);
+  if (!options.signal) return { ...options, signal: deadline };
+  const callerSignal = options.signal;
+  const controller = new AbortController();
+  const abortFromCaller = () => abort(callerSignal.reason);
+  const abortFromDeadline = () => abort(deadline.reason);
+  function abort(reason) {
+    callerSignal.removeEventListener("abort", abortFromCaller);
+    deadline.removeEventListener("abort", abortFromDeadline);
+    controller.abort(reason);
+  }
+  callerSignal.addEventListener("abort", abortFromCaller, { once: true });
+  deadline.addEventListener("abort", abortFromDeadline, { once: true });
+  return { ...options, signal: controller.signal };
+}
+
 // src/client/session.ts
 var SESSION_ENDPOINT = "/api/v1/auth/session";
 var LOGOUT_ENDPOINT = "/api/v1/auth/signout";
@@ -3979,6 +4014,7 @@ function toServiceAccessDecision(response, allowGrace) {
   const isBlocked = response.isBlocked ?? (effectiveStatus === null || effectiveStatus !== null && BLOCKING_EFFECTIVE_STATUSES.includes(effectiveStatus));
   return {
     hasAccess,
+    ...response.seatAssigned !== void 0 ? { seatAssigned: response.seatAssigned } : {},
     effectiveStatus,
     isGrace,
     isBlocked: isBlocked || !hasAccess,
@@ -4046,6 +4082,7 @@ var FFID_SUBSCRIPTION_ERROR_CODES = {
 var FFID_CREDITS_ERROR_CODES = {
   CREDITS_INSUFFICIENT: "CREDITS_INSUFFICIENT",
   CREDITS_IDEMPOTENCY_CONFLICT: "CREDITS_IDEMPOTENCY_CONFLICT",
+  CREDITS_TURN_CANCELLED: "CREDITS_TURN_CANCELLED",
   CREDITS_NOT_APPLICABLE: "CREDITS_NOT_APPLICABLE",
   CREDITS_BALANCE_CAP_EXCEEDED: "CREDITS_BALANCE_CAP_EXCEEDED",
   SEAT_BILLING_NOT_APPLICABLE: "SEAT_BILLING_NOT_APPLICABLE",
@@ -4210,9 +4247,10 @@ function createFFIDClient(config) {
   async function fetchWithAuth(endpoint, options = {}, authOverride) {
     const url = `${baseUrl}${endpoint}`;
     logger.debug("Fetching:", url);
-    const fetchOptions = buildFetchOptions(options, authOverride);
+    let fetchOptions = buildFetchOptions(options, authOverride);
     let response;
     try {
+      fetchOptions = withRequestTimeout(fetchOptions, timeout);
       response = await fetch(url, fetchOptions);
     } catch (error) {
       logger.error("Network error:", error);
@@ -4227,9 +4265,9 @@ function createFFIDClient(config) {
       const refreshResult = await refreshAccessToken();
       if (!refreshResult.error) {
         logger.debug("Token refreshed, retrying request");
-        const retryOptions = buildFetchOptions(options);
         try {
-          response = await fetch(url, retryOptions);
+          fetchOptions = withRequestTimeout(buildFetchOptions(options), timeout);
+          response = await fetch(url, fetchOptions);
         } catch (retryError) {
           logger.error("Network error on retry:", retryError);
           return {
@@ -4248,6 +4286,15 @@ function createFFIDClient(config) {
     try {
       raw = await response.json();
     } catch (parseError) {
+      if (fetchOptions.signal?.aborted) {
+        logger.error("Response body aborted:", parseError);
+        return {
+          error: {
+            code: FFID_ERROR_CODES.NETWORK_ERROR,
+            message: "\u30EC\u30B9\u30DD\u30F3\u30B9\u306E\u53D7\u4FE1\u304C\u4E2D\u65AD\u3055\u308C\u307E\u3057\u305F"
+          }
+        };
+      }
       logger.error("Parse error:", parseError, "Status:", response.status);
       return {
         error: {
@@ -4609,6 +4656,50 @@ function createFFIDClient(config) {
   };
 }
 
+// src/client/authorization-error.ts
+var FFID_OAUTH_DENIAL_REASONS = [
+  /** The user is not a member of the organization */
+  "no_membership",
+  /** The organization has no usable subscription for the service */
+  "no_active_subscription",
+  /** The organization has a subscription, but the user has no seat in it */
+  "no_seat_assignment",
+  /** The subscription has expired (canceled / past due beyond grace) */
+  "subscription_expired",
+  /** The flat plan's member limit is full, so no seat could be given */
+  "member_limit_reached"
+];
+function isFFIDOAuthDenialReason(value) {
+  return typeof value === "string" && FFID_OAUTH_DENIAL_REASONS.includes(value);
+}
+var DEFAULT_AUTHORIZATION_ERROR_MESSAGE = "\u8A8D\u53EF\u30B5\u30FC\u30D0\u30FC\u304C\u30A8\u30E9\u30FC\u3092\u8FD4\u3057\u307E\u3057\u305F";
+function buildAuthorizationError(params) {
+  const oauthError = params.get("error");
+  if (!oauthError) return null;
+  const rawReason = params.get("denial_reason");
+  const errorDescription = params.get("error_description");
+  const details = {
+    source: "authorization",
+    denialReason: isFFIDOAuthDenialReason(rawReason) ? rawReason : null,
+    errorDescription
+  };
+  return {
+    code: oauthError,
+    message: errorDescription ?? DEFAULT_AUTHORIZATION_ERROR_MESSAGE,
+    details: { ...details }
+  };
+}
+function getFFIDAuthorizationError(error) {
+  const details = error?.details;
+  if (!error || !details || details.source !== "authorization") return null;
+  const description = details.errorDescription;
+  return {
+    oauthError: error.code,
+    denialReason: isFFIDOAuthDenialReason(details.denialReason) ? details.denialReason : null,
+    errorDescription: typeof description === "string" ? description : null
+  };
+}
+
 // src/client/callback.ts
 var CALLBACK_ERROR_CODES = {
   /** Stored state missing or did not match the callback `state` (CSRF guard) */
@@ -4633,16 +4724,43 @@ function extractSearchParams(source) {
     return new URLSearchParams(query);
   }
 }
-function cleanCallbackUrlParams(logger) {
+var CODE_CALLBACK_PARAMS = ["code", "state"];
+var ERROR_CALLBACK_CONSUMED_PARAMS = ["state"];
+function cleanCallbackUrlParams(logger, names) {
   try {
     const cleanUrl = new URL(window.location.href);
-    cleanUrl.searchParams.delete("code");
-    cleanUrl.searchParams.delete("state");
+    for (const name of names) cleanUrl.searchParams.delete(name);
     window.history.replaceState({}, "", cleanUrl.toString());
   } catch (error) {
     logger.warn("handleRedirectCallback: URL \u306E\u30AF\u30EA\u30FC\u30F3\u30A2\u30C3\u30D7\u306B\u5931\u6557\u3057\u307E\u3057\u305F:", error);
   }
 }
+function validateCallbackState(client, urlState) {
+  const { logger } = client;
+  const storedState = retrieveState(logger);
+  if (storedState === null && urlState === null) return null;
+  if (storedState !== null && storedState === urlState) return null;
+  if (storedState === null && !isStateStorageAvailable()) {
+    logger.error(
+      "handleRedirectCallback: OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081 CSRF \u691C\u8A3C\u304C\u3067\u304D\u307E\u305B\u3093\uFF08iOS private mode \u7B49\uFF09"
+    );
+    return {
+      error: client.createError(
+        CALLBACK_ERROR_CODES.STATE_UNAVAILABLE,
+        "OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081\u8A8D\u8A3C\u3092\u5B8C\u4E86\u3067\u304D\u307E\u305B\u3093\u3002\u30D6\u30E9\u30A6\u30B6\u306E\u30D7\u30E9\u30A4\u30D9\u30FC\u30C8\u30E2\u30FC\u30C9\u3084\u30B9\u30C8\u30EC\u30FC\u30B8\u8A2D\u5B9A\u3092\u3054\u78BA\u8A8D\u304F\u3060\u3055\u3044"
+      )
+    };
+  }
+  logger.error(
+    "handleRedirectCallback: OAuth state mismatch or omitted (possible CSRF) \u2014 \u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F\u3002\u6D88\u8CBB\u6E08\u307F callback \u30D1\u30E9\u30E1\u30FC\u30BF\u306E\u518D\u51E6\u7406\uFF08`cleanUrl: false` \u5229\u7528\u6642\u306E cleanup \u6F0F\u308C\u3084 reload \u7B49\uFF09\u3067\u3082\u767A\u751F\u3057\u307E\u3059"
+  );
+  return {
+    error: client.createError(
+      CALLBACK_ERROR_CODES.STATE_MISMATCH,
+      "OAuth state \u304C\u4E00\u81F4\u3057\u307E\u305B\u3093\u3002CSRF \u306E\u53EF\u80FD\u6027\u304C\u3042\u308B\u305F\u3081\u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F"
+    )
+  };
+}
 async function handleRedirectCallback(client, options) {
   const { logger } = client;
   const hasWindow = typeof window !== "undefined";
@@ -4659,6 +4777,24 @@ async function handleRedirectCallback(client, options) {
   const params = extractSearchParams(source);
   const code = params.get("code");
   const urlState = params.get("state");
+  const authorizationError = buildAuthorizationError(params);
+  if (authorizationError && urlState !== null) {
+    const stateError2 = validateCallbackState(client, urlState);
+    if (stateError2) return stateError2;
+    retrieveCodeVerifier(logger);
+    logger.warn("handleRedirectCallback: \u8A8D\u53EF\u30B5\u30FC\u30D0\u30FC\u304C\u30A8\u30E9\u30FC\u3092\u8FD4\u3057\u307E\u3057\u305F:", {
+      error: authorizationError.code,
+      denialReason: params.get("denial_reason")
+    });
+    if (hasWindow) {
+      if (options?.cleanUrl !== false) {
+        cleanCallbackUrlParams(logger, ERROR_CALLBACK_CONSUMED_PARAMS);
+      } else {
+        logger.debug("handleRedirectCallback: cleanUrl=false \u306E\u305F\u3081 URL cleanup \u3092 consumer \u306B\u59D4\u8B72\u3057\u307E\u3057\u305F");
+      }
+    }
+    return { error: authorizationError };
+  }
   if (!code) {
     logger.warn("handleRedirectCallback: \u8A8D\u53EF\u30B3\u30FC\u30C9\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093");
     return {
@@ -4668,37 +4804,13 @@ async function handleRedirectCallback(client, options) {
       )
     };
   }
-  const storedState = retrieveState(logger);
-  if (storedState !== null || urlState !== null) {
-    const stateMatches = storedState !== null && storedState === urlState;
-    if (!stateMatches) {
-      if (storedState === null && !isStateStorageAvailable()) {
-        logger.error(
-          "handleRedirectCallback: OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081 CSRF \u691C\u8A3C\u304C\u3067\u304D\u307E\u305B\u3093\uFF08iOS private mode \u7B49\uFF09"
-        );
-        return {
-          error: client.createError(
-            CALLBACK_ERROR_CODES.STATE_UNAVAILABLE,
-            "OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081\u8A8D\u8A3C\u3092\u5B8C\u4E86\u3067\u304D\u307E\u305B\u3093\u3002\u30D6\u30E9\u30A6\u30B6\u306E\u30D7\u30E9\u30A4\u30D9\u30FC\u30C8\u30E2\u30FC\u30C9\u3084\u30B9\u30C8\u30EC\u30FC\u30B8\u8A2D\u5B9A\u3092\u3054\u78BA\u8A8D\u304F\u3060\u3055\u3044"
-          )
-        };
-      }
-      logger.error(
-        "handleRedirectCallback: OAuth state mismatch or omitted (possible CSRF) \u2014 \u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F\u3002\u6D88\u8CBB\u6E08\u307F callback \u30D1\u30E9\u30E1\u30FC\u30BF\u306E\u518D\u51E6\u7406\uFF08`cleanUrl: false` \u5229\u7528\u6642\u306E cleanup \u6F0F\u308C\u3084 reload \u7B49\uFF09\u3067\u3082\u767A\u751F\u3057\u307E\u3059"
-      );
-      return {
-        error: client.createError(
-          CALLBACK_ERROR_CODES.STATE_MISMATCH,
-          "OAuth state \u304C\u4E00\u81F4\u3057\u307E\u305B\u3093\u3002CSRF \u306E\u53EF\u80FD\u6027\u304C\u3042\u308B\u305F\u3081\u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F"
-        )
-      };
-    }
-  }
+  const stateError = validateCallbackState(client, urlState);
+  if (stateError) return stateError;
   const verifier = retrieveCodeVerifier(logger);
   const result = await client.exchangeCodeForTokens(code, verifier ?? void 0);
   if (!result.error && hasWindow) {
     if (options?.cleanUrl !== false) {
-      cleanCallbackUrlParams(logger);
+      cleanCallbackUrlParams(logger, CODE_CALLBACK_PARAMS);
     } else {
       logger.debug("handleRedirectCallback: cleanUrl=false \u306E\u305F\u3081 URL cleanup \u3092 consumer \u306B\u59D4\u8B72\u3057\u307E\u3057\u305F");
     }
@@ -4707,6 +4819,13 @@ async function handleRedirectCallback(client, options) {
 }
 var DEFAULT_REFRESH_INTERVAL_MS = 5 * 60 * 1e3;
 var TOKEN_REFRESH_RATIO = 0.8;
+function resolveCallbackKey(params) {
+  const code = params.get("code");
+  if (code) return code;
+  const error = params.get("error");
+  const state = params.get("state");
+  return error && state ? `error:${error}:${state}` : null;
+}
 var FFIDContext = createContext(null);
 var FFIDClientContext = createContext(null);
 function FFIDProvider({
@@ -4886,19 +5005,26 @@ function FFIDProvider({
     },
     [organizations, client]
   );
-  const handledCodeRef = useRef(null);
+  const handledCallbackRef = useRef(null);
+  const callbackPendingRef = useRef(false);
+  const authorizationDeniedRef = useRef(false);
   useEffect(() => {
     if (client.authMode !== "token") return;
     if (typeof window === "undefined") return;
-    const urlParams = new URLSearchParams(window.location.search);
-    const code = urlParams.get("code");
-    if (!code) return;
-    if (handledCodeRef.current === code) return;
-    handledCodeRef.current = code;
-    client.logger.debug("Authorization code detected, exchanging for tokens");
+    const callbackKey = resolveCallbackKey(new URLSearchParams(window.location.search));
+    if (!callbackKey) return;
+    if (handledCallbackRef.current === callbackKey) return;
+    handledCallbackRef.current = callbackKey;
+    callbackPendingRef.current = true;
+    client.logger.debug("OAuth callback detected, handling it");
     handleRedirectCallback(client, { cleanUrl: cleanCallbackUrl }).then((result) => {
       if (result.error) {
-        client.logger.error("Token exchange failed:", result.error);
+        if (getFFIDAuthorizationError(result.error)) {
+          client.logger.warn("FFID \u304C\u30ED\u30B0\u30A4\u30F3\u3092\u62D2\u5426\u3057\u307E\u3057\u305F:", result.error);
+          authorizationDeniedRef.current = true;
+        } else {
+          client.logger.error("Token exchange failed:", result.error);
+        }
         if (result.error.code === FFID_ERROR_CODES.STATE_MISMATCH_ERROR && client.tokenStore.getTokens()) {
           client.logger.debug(
             "Stale callback rejected but stored tokens present, restoring session via refresh"
@@ -4916,13 +5042,15 @@ function FFIDProvider({
     }).catch((err) => {
       client.logger.error("Token exchange error:", err);
       setIsLoading(false);
+    }).finally(() => {
+      callbackPendingRef.current = false;
     });
   }, [client]);
   useEffect(() => {
     if (client.authMode === "token") {
+      if (callbackPendingRef.current || authorizationDeniedRef.current) return;
       if (typeof window !== "undefined") {
-        const urlParams = new URLSearchParams(window.location.search);
-        if (urlParams.has("code")) {
+        if (resolveCallbackKey(new URLSearchParams(window.location.search))) {
           return;
         }
       }
@@ -6737,4 +6865,4 @@ function FFIDInquiryForm({
   );
 }
 
-export { ACCESS_GRANTING_EFFECTIVE_STATUSES, AGENCY_INVITE_COOKIE_MAX_AGE_SEC, AGENCY_INVITE_COOKIE_NAME, AGENCY_INVITE_TOKEN_PARAM, AGENCY_INVITE_TOKEN_REDACTION, BLOCKING_EFFECTIVE_STATUSES, CATALOG_HASH_PATTERN, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EFFECTIVE_SUBSCRIPTION_STATUSES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDCatalogHashError, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_CATALOG_ENVIRONMENTS, FFID_CATALOG_PUBLICATION_STATUSES, FFID_COMPANY_SIZE_CODES, FFID_CREDITS_CONSUME_MAX_AMOUNT, FFID_CREDITS_CONSUME_MIN_AMOUNT, FFID_CREDITS_ERROR_CODES, FFID_CREDITS_FEATURE_PATTERN, FFID_CREDITS_HISTORY_DEFAULT_LIMIT, FFID_CREDITS_HISTORY_MAX_LIMIT, FFID_CREDITS_HISTORY_MIN_LIMIT, FFID_CREDITS_IDEMPOTENCY_KEY_PATTERN, FFID_CREDITS_LOW_THRESHOLD_PERCENT, FFID_CREDITS_METADATA_MAX_BYTES, FFID_CREDIT_GRANT_KINDS, FFID_CREDIT_HISTORY_TYPES, FFID_CREDIT_PACK_MAX_QUANTITY, FFID_CREDIT_PACK_MIN_QUANTITY, FFID_ERROR_CODES, FFID_INDUSTRY_CODES, FFID_INQUIRY_ACQUISITION_SOURCES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB, FFID_ORGANIZATION_PROFILE_ERROR_CODES, FFID_SUBSCRIPTION_ERROR_CODES, canonicalizeCatalogValue, captureAgencyInviteToken, cleanupStateStorage, clearAgencyInviteToken, computeEffectiveStatusFromSession, computeFFIDCheckoutCopyHash, computeLegalDisclosureHash, computePaymentConfigurationHash, computePraxisCopyHash, computeScopeHash, computeTaxConfigurationHash, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, handleRedirectCallback, hasAccessFromUserinfo, hashCanonicalJson, isBlockedFromUserinfo, isFFIDInquiryAcquisitionSource, isFFIDInquiryCategorySite2026, normalizeRedirectUri, readAgencyInviteCookie, readAgencyInviteToken, redactAgencyInviteToken, retrieveCodeVerifier, retrieveState, sha256Hex, storeCodeVerifier, storeState, useFFID, useFFIDAnnouncements, useFFIDContext, useSubscription, validatePublishedCatalog, withSubscription };
+export { ACCESS_GRANTING_EFFECTIVE_STATUSES, AGENCY_INVITE_COOKIE_MAX_AGE_SEC, AGENCY_INVITE_COOKIE_NAME, AGENCY_INVITE_TOKEN_PARAM, AGENCY_INVITE_TOKEN_REDACTION, BLOCKING_EFFECTIVE_STATUSES, CATALOG_HASH_PATTERN, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EFFECTIVE_SUBSCRIPTION_STATUSES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDCatalogHashError, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_CATALOG_ENVIRONMENTS, FFID_CATALOG_PUBLICATION_STATUSES, FFID_COMPANY_SIZE_CODES, FFID_CREDITS_CONSUME_MAX_AMOUNT, FFID_CREDITS_CONSUME_MIN_AMOUNT, FFID_CREDITS_ERROR_CODES, FFID_CREDITS_FEATURE_PATTERN, FFID_CREDITS_HISTORY_DEFAULT_LIMIT, FFID_CREDITS_HISTORY_MAX_LIMIT, FFID_CREDITS_HISTORY_MIN_LIMIT, FFID_CREDITS_IDEMPOTENCY_KEY_PATTERN, FFID_CREDITS_LOW_THRESHOLD_PERCENT, FFID_CREDITS_METADATA_MAX_BYTES, FFID_CREDIT_GRANT_KINDS, FFID_CREDIT_HISTORY_TYPES, FFID_CREDIT_PACK_MAX_QUANTITY, FFID_CREDIT_PACK_MIN_QUANTITY, FFID_ERROR_CODES, FFID_INDUSTRY_CODES, FFID_INQUIRY_ACQUISITION_SOURCES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB, FFID_OAUTH_DENIAL_REASONS, FFID_ORGANIZATION_PROFILE_ERROR_CODES, FFID_SUBSCRIPTION_ERROR_CODES, canonicalizeCatalogValue, captureAgencyInviteToken, cleanupStateStorage, clearAgencyInviteToken, computeEffectiveStatusFromSession, computeFFIDCheckoutCopyHash, computeLegalDisclosureHash, computePaymentConfigurationHash, computePraxisCopyHash, computeScopeHash, computeTaxConfigurationHash, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, getFFIDAuthorizationError, handleRedirectCallback, hasAccessFromUserinfo, hashCanonicalJson, isBlockedFromUserinfo, isFFIDInquiryAcquisitionSource, isFFIDInquiryCategorySite2026, isFFIDOAuthDenialReason, normalizeRedirectUri, readAgencyInviteCookie, readAgencyInviteToken, redactAgencyInviteToken, retrieveCodeVerifier, retrieveState, sha256Hex, storeCodeVerifier, storeState, useFFID, useFFIDAnnouncements, useFFIDContext, useSubscription, validatePublishedCatalog, withSubscription };