@fluoce/auth-react 0.1.0

package/README.md

@@ -0,0 +1,94 @@
+# @fluoce/auth-react
+
+React SDK for Fluoce Auth. Wraps the exchange / me / refresh flow, stores
+tokens in cookies, and gives you `AuthGuard` + `useFluoceAuth()`.
+
+## Setup
+
+```tsx
+// App.tsx
+import { FluoceAuthProvider } from '@fluoce/auth-react';
+
+export function App() {
+  return (
+    <FluoceAuthProvider
+      authUrl="https://auth.fluoce.com"
+      apiUrl="https://api.fluoce.com"      // your auth backend
+      appUrl="https://myapp.com/auth"      // this app's callback url (the `ref`)
+    >
+      <Routes />
+    </FluoceAuthProvider>
+  );
+}
+```
+
+`appUrl` must be a route in your app that stays mounted under `FluoceAuthProvider`
+(e.g. `/auth`) — auth.fluoce.com redirects back to `${appUrl}?code=...`, and the
+provider picks the `code` param up automatically wherever it appears, exchanges
+it, sets cookies, and strips it from the URL.
+
+## Protecting a route
+
+```tsx
+import { AuthGuard } from '@fluoce/auth-react';
+
+function DashboardPage() {
+  return (
+    <AuthGuard fallback={<Spinner />}>
+      <Dashboard />
+    </AuthGuard>
+  );
+}
+```
+
+If there's no valid session, `AuthGuard` redirects to
+`${authUrl}/auth?ref=${appUrl}` for you — nothing else to wire up.
+
+## Reading the user / calling other endpoints
+
+```tsx
+import { useFluoceAuth } from '@fluoce/auth-react';
+
+function Profile() {
+  const { user, loading, logout, authFetch } = useFluoceAuth();
+
+  if (loading) return <Spinner />;
+
+  const updateName = (name: string) =>
+    authFetch('/me', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ name }),
+    });
+
+  return (
+    <div>
+      <p>{user?.name ?? user?.email}</p>
+      <button onClick={() => logout()}>Log out</button>
+    </div>
+  );
+}
+```
+
+`authFetch` is the same authenticated-fetch helper the SDK uses internally for
+`/me` — it auto-refreshes on 401 and redirects to login if the refresh also
+fails. Use it for any endpoint, including ones not wrapped yet
+(`/me/add/email`, `/me/add/phone`, etc.) until they get first-class methods.
+
+## Cookies
+
+Access/refresh tokens are stored as regular (non-httpOnly — this is
+client-side JS) cookies:
+
+- `fluoce_access_token`
+- `fluoce_refresh_token`
+
+Override names/expiry via provider props: `accessTokenCookie`,
+`refreshTokenCookie`, `accessTokenExpiryDays`, `refreshTokenExpiryDays`.
+
+## Not yet wrapped
+
+`/email`, `/phone`, `/google`, `/github`, `/me/add/email`, `/me/add/phone`,
+`/logout/all` (client method exists, no dedicated hook) — call these directly
+via `authFetch` (or plain `fetch` for the pre-login ones like `/email`,
+`/phone`, `/google`, `/github`) until added.

package/dist/index.cjs

@@ -0,0 +1,300 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  AuthGuard: () => AuthGuard,
+  FluoceApiClient: () => FluoceApiClient,
+  FluoceAuthProvider: () => FluoceAuthProvider,
+  useFluoceAuth: () => useFluoceAuth
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/FluoceAuthProvider.tsx
+var import_react2 = require("react");
+
+// src/AuthContext.tsx
+var import_react = require("react");
+var FluoceAuthContext = (0, import_react.createContext)(
+  null
+);
+function useFluoceAuth() {
+  const ctx = (0, import_react.useContext)(FluoceAuthContext);
+  if (!ctx)
+    throw new Error("useFluoceAuth must be used within <FluoceAuthProvider>");
+  return ctx;
+}
+
+// src/cookies.ts
+function setCookie(name, value, days) {
+  const expires = new Date(Date.now() + days * 864e5).toUTCString();
+  document.cookie = `${name}=${encodeURIComponent(value)}; expires=${expires}; path=/; SameSite=Lax`;
+}
+function getCookie(name) {
+  const escaped = name.replace(/([.$?*|{}()[\]\\/+^])/g, "\\$1");
+  const match = document.cookie.match(new RegExp("(?:^|; )" + escaped + "=([^;]*)"));
+  return match ? decodeURIComponent(match[1]) : null;
+}
+function deleteCookie(name) {
+  document.cookie = `${name}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`;
+}
+
+// src/apiClient.ts
+var FluoceApiClient = class {
+  constructor(config) {
+    this.refreshPromise = null;
+    /** set by the Provider — called once refresh fails and there's no session left */
+    this.onAuthFailure = () => {
+    };
+    this.config = {
+      accessTokenCookie: "fluoce_access_token",
+      refreshTokenCookie: "fluoce_refresh_token",
+      accessTokenExpiryDays: 1,
+      refreshTokenExpiryDays: 30,
+      ...config
+    };
+  }
+  getAccessToken() {
+    return getCookie(this.config.accessTokenCookie);
+  }
+  getRefreshToken() {
+    return getCookie(this.config.refreshTokenCookie);
+  }
+  setTokens(tokens) {
+    setCookie(
+      this.config.accessTokenCookie,
+      tokens.accessToken,
+      this.config.accessTokenExpiryDays
+    );
+    setCookie(
+      this.config.refreshTokenCookie,
+      tokens.refreshToken,
+      this.config.refreshTokenExpiryDays
+    );
+  }
+  clearTokens() {
+    deleteCookie(this.config.accessTokenCookie);
+    deleteCookie(this.config.refreshTokenCookie);
+  }
+  buildLoginUrl() {
+    const ref = encodeURIComponent(this.config.appUrl);
+    return `${this.config.authUrl}/auth?ref=${ref}`;
+  }
+  async exchangeCode(code) {
+    const res = await fetch(`${this.config.apiUrl}/exchange`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ code })
+    });
+    if (!res.ok) throw new Error(`exchange failed: ${res.status}`);
+    const data = await res.json();
+    this.setTokens(data);
+    return data;
+  }
+  async getMe() {
+    return this.authFetch("/me");
+  }
+  async updateMe(payload) {
+    return this.authFetch("/me", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(payload)
+    });
+  }
+  async refresh() {
+    if (this.refreshPromise) return this.refreshPromise;
+    const refreshToken = this.getRefreshToken();
+    if (!refreshToken) return null;
+    this.refreshPromise = (async () => {
+      try {
+        const res = await fetch(`${this.config.apiUrl}/refresh`, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${refreshToken}`
+          }
+        });
+        if (!res.ok) {
+          this.clearTokens();
+          return null;
+        }
+        const data = await res.json();
+        this.setTokens(data);
+        return data;
+      } catch {
+        this.clearTokens();
+        return null;
+      } finally {
+        this.refreshPromise = null;
+      }
+    })();
+    return this.refreshPromise;
+  }
+  async logout(allDevices = false) {
+    const refreshToken = this.getRefreshToken();
+    if (refreshToken) {
+      try {
+        await fetch(
+          `${this.config.apiUrl}${allDevices ? "/logout/all" : "/logout"}`,
+          {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              Authorization: `Bearer ${refreshToken}`
+            }
+          }
+        );
+      } catch {
+      }
+    }
+    this.clearTokens();
+  }
+  /**
+   * Authenticated fetch. Attaches access token, retries once through /refresh
+   * on 401, and calls onAuthFailure (-> redirect to auth frontend) if that
+   * fails too. Use this for /me, /me updates, and any endpoint you add later.
+   */
+  async authFetch(path, init = {}) {
+    const doFetch = (token) => fetch(`${this.config.apiUrl}${path}`, {
+      ...init,
+      headers: {
+        ...init.headers || {},
+        ...token ? { Authorization: `Bearer ${token}` } : {}
+      }
+    });
+    let res = await doFetch(this.getAccessToken());
+    if (res.status === 401) {
+      const refreshed = await this.refresh();
+      if (!refreshed) {
+        this.onAuthFailure();
+        throw new Error("unauthenticated");
+      }
+      res = await doFetch(refreshed.accessToken);
+      if (res.status === 401) {
+        this.clearTokens();
+        this.onAuthFailure();
+        throw new Error("unauthenticated");
+      }
+    }
+    if (!res.ok) throw new Error(`request failed: ${res.status}`);
+    return res.json();
+  }
+};
+
+// src/FluoceAuthProvider.tsx
+var import_jsx_runtime = require("react/jsx-runtime");
+function FluoceAuthProvider({
+  children,
+  ...config
+}) {
+  const clientRef = (0, import_react2.useRef)();
+  if (!clientRef.current) clientRef.current = new FluoceApiClient(config);
+  const client = clientRef.current;
+  const [user, setUser] = (0, import_react2.useState)(null);
+  const [loading, setLoading] = (0, import_react2.useState)(true);
+  const [error, setError] = (0, import_react2.useState)(null);
+  const redirectToLogin = (0, import_react2.useCallback)(() => {
+    window.location.href = client.buildLoginUrl();
+  }, [client]);
+  client.onAuthFailure = redirectToLogin;
+  const refreshUser = (0, import_react2.useCallback)(async () => {
+    try {
+      const me = await client.getMe();
+      setUser(me);
+      setError(null);
+    } catch (e) {
+      setUser(null);
+      setError(e);
+    }
+  }, [client]);
+  const logout = (0, import_react2.useCallback)(
+    async (allDevices = false) => {
+      await client.logout(allDevices);
+      setUser(null);
+      redirectToLogin();
+    },
+    [client, redirectToLogin]
+  );
+  (0, import_react2.useEffect)(() => {
+    let cancelled = false;
+    async function init() {
+      const params = new URLSearchParams(window.location.search);
+      const code = params.get("code");
+      try {
+        if (code) {
+          await client.exchangeCode(code);
+          params.delete("code");
+          const query = params.toString();
+          const cleanUrl = window.location.pathname + (query ? `?${query}` : "") + window.location.hash;
+          window.history.replaceState({}, "", cleanUrl);
+        }
+        if (client.getAccessToken() || client.getRefreshToken()) {
+          const me = await client.getMe();
+          if (!cancelled) setUser(me);
+        }
+      } catch (e) {
+        if (!cancelled) setError(e);
+      } finally {
+        if (!cancelled) setLoading(false);
+      }
+    }
+    init();
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+  const value = (0, import_react2.useMemo)(
+    () => ({
+      user,
+      loading,
+      isAuthenticated: !!user,
+      error,
+      refreshUser,
+      logout,
+      redirectToLogin
+    }),
+    [user, loading, error, refreshUser, logout, redirectToLogin]
+  );
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(FluoceAuthContext.Provider, { value, children });
+}
+
+// src/AuthGuard.tsx
+var import_react3 = require("react");
+var import_jsx_runtime2 = require("react/jsx-runtime");
+function AuthGuard({ children, fallback = null }) {
+  const { loading, isAuthenticated, redirectToLogin } = useFluoceAuth();
+  (0, import_react3.useEffect)(() => {
+    if (!loading && !isAuthenticated) {
+      redirectToLogin();
+    }
+  }, [loading, isAuthenticated, redirectToLogin]);
+  if (loading || !isAuthenticated) {
+    return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_jsx_runtime2.Fragment, { children: fallback });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_jsx_runtime2.Fragment, { children });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AuthGuard,
+  FluoceApiClient,
+  FluoceAuthProvider,
+  useFluoceAuth
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/FluoceAuthProvider.tsx","../src/AuthContext.tsx","../src/cookies.ts","../src/apiClient.ts","../src/AuthGuard.tsx"],"sourcesContent":["export { FluoceAuthProvider } from './FluoceAuthProvider';\nexport type { FluoceAuthProviderProps } from './FluoceAuthProvider';\nexport { AuthGuard } from './AuthGuard';\nexport type { AuthGuardProps } from './AuthGuard';\nexport { useFluoceAuth } from './AuthContext';\nexport { FluoceApiClient } from './apiClient';\nexport type {\n  FluoceUser,\n  TokenPair,\n  FluoceAuthConfig,\n  FluoceAuthContextValue,\n} from './types';\n","import {\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n  type ReactNode,\n} from \"react\";\nimport { FluoceAuthContext } from \"./AuthContext\";\nimport { FluoceApiClient } from \"./apiClient\";\nimport type { FluoceAuthConfig, FluoceUser } from \"./types\";\n\nexport interface FluoceAuthProviderProps extends FluoceAuthConfig {\n  children: ReactNode;\n}\n\nexport function FluoceAuthProvider({\n  children,\n  ...config\n}: FluoceAuthProviderProps) {\n  const clientRef = useRef<FluoceApiClient>();\n  if (!clientRef.current) clientRef.current = new FluoceApiClient(config);\n  const client = clientRef.current;\n\n  const [user, setUser] = useState<FluoceUser | null>(null);\n  const [loading, setLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  const redirectToLogin = useCallback(() => {\n    window.location.href = client.buildLoginUrl();\n  }, [client]);\n\n  // keep the client's failure hook pointed at the latest redirect fn\n  client.onAuthFailure = redirectToLogin;\n\n  const refreshUser = useCallback(async () => {\n    try {\n      const me = await client.getMe();\n      setUser(me);\n      setError(null);\n    } catch (e) {\n      setUser(null);\n      setError(e as Error);\n    }\n  }, [client]);\n\n  const logout = useCallback(\n    async (allDevices = false) => {\n      await client.logout(allDevices);\n      setUser(null);\n      redirectToLogin();\n    },\n    [client, redirectToLogin],\n  );\n\n  useEffect(() => {\n    let cancelled = false;\n\n    async function init() {\n      const params = new URLSearchParams(window.location.search);\n      const code = params.get(\"code\");\n\n      try {\n        if (code) {\n          await client.exchangeCode(code);\n          params.delete(\"code\");\n          const query = params.toString();\n          const cleanUrl =\n            window.location.pathname +\n            (query ? `?${query}` : \"\") +\n            window.location.hash;\n          window.history.replaceState({}, \"\", cleanUrl);\n        }\n\n        if (client.getAccessToken() || client.getRefreshToken()) {\n          const me = await client.getMe();\n          if (!cancelled) setUser(me);\n        }\n      } catch (e) {\n        if (!cancelled) setError(e as Error);\n      } finally {\n        if (!cancelled) setLoading(false);\n      }\n    }\n\n    init();\n    return () => {\n      cancelled = true;\n    };\n    // run once on mount only\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  // const authFetch = useCallback(\n  //   <T,>(path: string, init?: RequestInit) => client.authFetch<T>(path, init),\n  //   [client],\n  // );\n\n  const value = useMemo(\n    () => ({\n      user,\n      loading,\n      isAuthenticated: !!user,\n      error,\n      refreshUser,\n      logout,\n      redirectToLogin,\n    }),\n    [user, loading, error, refreshUser, logout, redirectToLogin],\n  );\n\n  return (\n    <FluoceAuthContext.Provider value={value}>\n      {children}\n    </FluoceAuthContext.Provider>\n  );\n}\n","import { createContext, useContext } from \"react\";\nimport type { FluoceAuthContextValue } from \"./types\";\n\nexport const FluoceAuthContext = createContext<FluoceAuthContextValue | null>(\n  null,\n);\n\nexport function useFluoceAuth(): FluoceAuthContextValue {\n  const ctx = useContext(FluoceAuthContext);\n  if (!ctx)\n    throw new Error(\"useFluoceAuth must be used within <FluoceAuthProvider>\");\n  return ctx;\n}\n","export function setCookie(name: string, value: string, days: number): void {\n  const expires = new Date(Date.now() + days * 864e5).toUTCString();\n  document.cookie = `${name}=${encodeURIComponent(value)}; expires=${expires}; path=/; SameSite=Lax`;\n}\n\nexport function getCookie(name: string): string | null {\n  const escaped = name.replace(/([.$?*|{}()[\\]\\\\/+^])/g, '\\\\$1');\n  const match = document.cookie.match(new RegExp('(?:^|; )' + escaped + '=([^;]*)'));\n  return match ? decodeURIComponent(match[1]) : null;\n}\n\nexport function deleteCookie(name: string): void {\n  document.cookie = `${name}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`;\n}\n","import { getCookie, setCookie, deleteCookie } from \"./cookies\";\nimport type { FluoceAuthConfig, FluoceUser, TokenPair } from \"./types\";\n\ntype ResolvedConfig = Required<FluoceAuthConfig>;\n\nexport class FluoceApiClient {\n  private config: ResolvedConfig;\n  private refreshPromise: Promise<TokenPair | null> | null = null;\n\n  /** set by the Provider — called once refresh fails and there's no session left */\n  onAuthFailure: () => void = () => {};\n\n  constructor(config: FluoceAuthConfig) {\n    this.config = {\n      accessTokenCookie: \"fluoce_access_token\",\n      refreshTokenCookie: \"fluoce_refresh_token\",\n      accessTokenExpiryDays: 1,\n      refreshTokenExpiryDays: 30,\n      ...config,\n    };\n  }\n\n  getAccessToken(): string | null {\n    return getCookie(this.config.accessTokenCookie);\n  }\n\n  getRefreshToken(): string | null {\n    return getCookie(this.config.refreshTokenCookie);\n  }\n\n  setTokens(tokens: TokenPair): void {\n    setCookie(\n      this.config.accessTokenCookie,\n      tokens.accessToken,\n      this.config.accessTokenExpiryDays,\n    );\n    setCookie(\n      this.config.refreshTokenCookie,\n      tokens.refreshToken,\n      this.config.refreshTokenExpiryDays,\n    );\n  }\n\n  clearTokens(): void {\n    deleteCookie(this.config.accessTokenCookie);\n    deleteCookie(this.config.refreshTokenCookie);\n  }\n\n  buildLoginUrl(): string {\n    const ref = encodeURIComponent(this.config.appUrl);\n    return `${this.config.authUrl}/auth?ref=${ref}`;\n  }\n\n  async exchangeCode(code: string): Promise<TokenPair> {\n    const res = await fetch(`${this.config.apiUrl}/exchange`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ code }),\n    });\n    if (!res.ok) throw new Error(`exchange failed: ${res.status}`);\n    const data = (await res.json()) as TokenPair;\n    this.setTokens(data);\n    return data;\n  }\n\n  async getMe(): Promise<FluoceUser> {\n    return this.authFetch<FluoceUser>(\"/me\");\n  }\n\n  async updateMe(payload: {\n    name?: string;\n    photo?: string;\n  }): Promise<FluoceUser> {\n    return this.authFetch<FluoceUser>(\"/me\", {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify(payload),\n    });\n  }\n\n  async refresh(): Promise<TokenPair | null> {\n    // dedupe concurrent refresh calls triggered by parallel 401s\n    if (this.refreshPromise) return this.refreshPromise;\n\n    const refreshToken = this.getRefreshToken();\n    if (!refreshToken) return null;\n\n    this.refreshPromise = (async () => {\n      try {\n        const res = await fetch(`${this.config.apiUrl}/refresh`, {\n          method: \"POST\",\n          headers: {\n            \"Content-Type\": \"application/json\",\n            Authorization: `Bearer ${refreshToken}`,\n          },\n        });\n        if (!res.ok) {\n          this.clearTokens();\n          return null;\n        }\n        const data = (await res.json()) as TokenPair;\n        this.setTokens(data);\n        return data;\n      } catch {\n        this.clearTokens();\n        return null;\n      } finally {\n        this.refreshPromise = null;\n      }\n    })();\n\n    return this.refreshPromise;\n  }\n\n  async logout(allDevices = false): Promise<void> {\n    const refreshToken = this.getRefreshToken();\n    if (refreshToken) {\n      try {\n        await fetch(\n          `${this.config.apiUrl}${allDevices ? \"/logout/all\" : \"/logout\"}`,\n          {\n            method: \"POST\",\n            headers: {\n              \"Content-Type\": \"application/json\",\n              Authorization: `Bearer ${refreshToken}`,\n            },\n          },\n        );\n      } catch {\n        // best-effort — clear local session regardless\n      }\n    }\n    this.clearTokens();\n  }\n\n  /**\n   * Authenticated fetch. Attaches access token, retries once through /refresh\n   * on 401, and calls onAuthFailure (-> redirect to auth frontend) if that\n   * fails too. Use this for /me, /me updates, and any endpoint you add later.\n   */\n  async authFetch<T = unknown>(\n    path: string,\n    init: RequestInit = {},\n  ): Promise<T> {\n    const doFetch = (token: string | null) =>\n      fetch(`${this.config.apiUrl}${path}`, {\n        ...init,\n        headers: {\n          ...(init.headers || {}),\n          ...(token ? { Authorization: `Bearer ${token}` } : {}),\n        },\n      });\n\n    let res = await doFetch(this.getAccessToken());\n\n    if (res.status === 401) {\n      const refreshed = await this.refresh();\n      if (!refreshed) {\n        this.onAuthFailure();\n        throw new Error(\"unauthenticated\");\n      }\n      res = await doFetch(refreshed.accessToken);\n      if (res.status === 401) {\n        this.clearTokens();\n        this.onAuthFailure();\n        throw new Error(\"unauthenticated\");\n      }\n    }\n\n    if (!res.ok) throw new Error(`request failed: ${res.status}`);\n\n    return res.json() as Promise<T>;\n  }\n}\n","import { useEffect, type ReactNode } from \"react\";\nimport { useFluoceAuth } from \"./AuthContext\";\n\nexport interface AuthGuardProps {\n  children: ReactNode;\n  /** shown while loading or right before the redirect fires */\n  fallback?: ReactNode;\n}\n\nexport function AuthGuard({ children, fallback = null }: AuthGuardProps) {\n  const { loading, isAuthenticated, redirectToLogin } = useFluoceAuth();\n\n  useEffect(() => {\n    if (!loading && !isAuthenticated) {\n      redirectToLogin();\n    }\n  }, [loading, isAuthenticated, redirectToLogin]);\n\n  if (loading || !isAuthenticated) {\n    return <>{fallback}</>;\n  }\n\n  return <>{children}</>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,gBAOO;;;ACPP,mBAA0C;AAGnC,IAAM,wBAAoB;AAAA,EAC/B;AACF;AAEO,SAAS,gBAAwC;AACtD,QAAM,UAAM,yBAAW,iBAAiB;AACxC,MAAI,CAAC;AACH,UAAM,IAAI,MAAM,wDAAwD;AAC1E,SAAO;AACT;;;ACZO,SAAS,UAAU,MAAc,OAAe,MAAoB;AACzE,QAAM,UAAU,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,YAAY;AAChE,WAAS,SAAS,GAAG,IAAI,IAAI,mBAAmB,KAAK,CAAC,aAAa,OAAO;AAC5E;AAEO,SAAS,UAAU,MAA6B;AACrD,QAAM,UAAU,KAAK,QAAQ,0BAA0B,MAAM;AAC7D,QAAM,QAAQ,SAAS,OAAO,MAAM,IAAI,OAAO,aAAa,UAAU,UAAU,CAAC;AACjF,SAAO,QAAQ,mBAAmB,MAAM,CAAC,CAAC,IAAI;AAChD;AAEO,SAAS,aAAa,MAAoB;AAC/C,WAAS,SAAS,GAAG,IAAI;AAC3B;;;ACRO,IAAM,kBAAN,MAAsB;AAAA,EAO3B,YAAY,QAA0B;AALtC,SAAQ,iBAAmD;AAG3D;AAAA,yBAA4B,MAAM;AAAA,IAAC;AAGjC,SAAK,SAAS;AAAA,MACZ,mBAAmB;AAAA,MACnB,oBAAoB;AAAA,MACpB,uBAAuB;AAAA,MACvB,wBAAwB;AAAA,MACxB,GAAG;AAAA,IACL;AAAA,EACF;AAAA,EAEA,iBAAgC;AAC9B,WAAO,UAAU,KAAK,OAAO,iBAAiB;AAAA,EAChD;AAAA,EAEA,kBAAiC;AAC/B,WAAO,UAAU,KAAK,OAAO,kBAAkB;AAAA,EACjD;AAAA,EAEA,UAAU,QAAyB;AACjC;AAAA,MACE,KAAK,OAAO;AAAA,MACZ,OAAO;AAAA,MACP,KAAK,OAAO;AAAA,IACd;AACA;AAAA,MACE,KAAK,OAAO;AAAA,MACZ,OAAO;AAAA,MACP,KAAK,OAAO;AAAA,IACd;AAAA,EACF;AAAA,EAEA,cAAoB;AAClB,iBAAa,KAAK,OAAO,iBAAiB;AAC1C,iBAAa,KAAK,OAAO,kBAAkB;AAAA,EAC7C;AAAA,EAEA,gBAAwB;AACtB,UAAM,MAAM,mBAAmB,KAAK,OAAO,MAAM;AACjD,WAAO,GAAG,KAAK,OAAO,OAAO,aAAa,GAAG;AAAA,EAC/C;AAAA,EAEA,MAAM,aAAa,MAAkC;AACnD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,MAAM,aAAa;AAAA,MACxD,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,IAC/B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,oBAAoB,IAAI,MAAM,EAAE;AAC7D,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,SAAK,UAAU,IAAI;AACnB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QAA6B;AACjC,WAAO,KAAK,UAAsB,KAAK;AAAA,EACzC;AAAA,EAEA,MAAM,SAAS,SAGS;AACtB,WAAO,KAAK,UAAsB,OAAO;AAAA,MACvC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,IAC9B,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAAqC;AAEzC,QAAI,KAAK,eAAgB,QAAO,KAAK;AAErC,UAAM,eAAe,KAAK,gBAAgB;AAC1C,QAAI,CAAC,aAAc,QAAO;AAE1B,SAAK,kBAAkB,YAAY;AACjC,UAAI;AACF,cAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,MAAM,YAAY;AAAA,UACvD,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,eAAe,UAAU,YAAY;AAAA,UACvC;AAAA,QACF,CAAC;AACD,YAAI,CAAC,IAAI,IAAI;AACX,eAAK,YAAY;AACjB,iBAAO;AAAA,QACT;AACA,cAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,aAAK,UAAU,IAAI;AACnB,eAAO;AAAA,MACT,QAAQ;AACN,aAAK,YAAY;AACjB,eAAO;AAAA,MACT,UAAE;AACA,aAAK,iBAAiB;AAAA,MACxB;AAAA,IACF,GAAG;AAEH,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,OAAO,aAAa,OAAsB;AAC9C,UAAM,eAAe,KAAK,gBAAgB;AAC1C,QAAI,cAAc;AAChB,UAAI;AACF,cAAM;AAAA,UACJ,GAAG,KAAK,OAAO,MAAM,GAAG,aAAa,gBAAgB,SAAS;AAAA,UAC9D;AAAA,YACE,QAAQ;AAAA,YACR,SAAS;AAAA,cACP,gBAAgB;AAAA,cAChB,eAAe,UAAU,YAAY;AAAA,YACvC;AAAA,UACF;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AACA,SAAK,YAAY;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UACJ,MACA,OAAoB,CAAC,GACT;AACZ,UAAM,UAAU,CAAC,UACf,MAAM,GAAG,KAAK,OAAO,MAAM,GAAG,IAAI,IAAI;AAAA,MACpC,GAAG;AAAA,MACH,SAAS;AAAA,QACP,GAAI,KAAK,WAAW,CAAC;AAAA,QACrB,GAAI,QAAQ,EAAE,eAAe,UAAU,KAAK,GAAG,IAAI,CAAC;AAAA,MACtD;AAAA,IACF,CAAC;AAEH,QAAI,MAAM,MAAM,QAAQ,KAAK,eAAe,CAAC;AAE7C,QAAI,IAAI,WAAW,KAAK;AACtB,YAAM,YAAY,MAAM,KAAK,QAAQ;AACrC,UAAI,CAAC,WAAW;AACd,aAAK,cAAc;AACnB,cAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC;AACA,YAAM,MAAM,QAAQ,UAAU,WAAW;AACzC,UAAI,IAAI,WAAW,KAAK;AACtB,aAAK,YAAY;AACjB,aAAK,cAAc;AACnB,cAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC;AAAA,IACF;AAEA,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,mBAAmB,IAAI,MAAM,EAAE;AAE5D,WAAO,IAAI,KAAK;AAAA,EAClB;AACF;;;AH7DI;AAhGG,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,gBAAY,sBAAwB;AAC1C,MAAI,CAAC,UAAU,QAAS,WAAU,UAAU,IAAI,gBAAgB,MAAM;AACtE,QAAM,SAAS,UAAU;AAEzB,QAAM,CAAC,MAAM,OAAO,QAAI,wBAA4B,IAAI;AACxD,QAAM,CAAC,SAAS,UAAU,QAAI,wBAAS,IAAI;AAC3C,QAAM,CAAC,OAAO,QAAQ,QAAI,wBAAuB,IAAI;AAErD,QAAM,sBAAkB,2BAAY,MAAM;AACxC,WAAO,SAAS,OAAO,OAAO,cAAc;AAAA,EAC9C,GAAG,CAAC,MAAM,CAAC;AAGX,SAAO,gBAAgB;AAEvB,QAAM,kBAAc,2BAAY,YAAY;AAC1C,QAAI;AACF,YAAM,KAAK,MAAM,OAAO,MAAM;AAC9B,cAAQ,EAAE;AACV,eAAS,IAAI;AAAA,IACf,SAAS,GAAG;AACV,cAAQ,IAAI;AACZ,eAAS,CAAU;AAAA,IACrB;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,aAAS;AAAA,IACb,OAAO,aAAa,UAAU;AAC5B,YAAM,OAAO,OAAO,UAAU;AAC9B,cAAQ,IAAI;AACZ,sBAAgB;AAAA,IAClB;AAAA,IACA,CAAC,QAAQ,eAAe;AAAA,EAC1B;AAEA,+BAAU,MAAM;AACd,QAAI,YAAY;AAEhB,mBAAe,OAAO;AACpB,YAAM,SAAS,IAAI,gBAAgB,OAAO,SAAS,MAAM;AACzD,YAAM,OAAO,OAAO,IAAI,MAAM;AAE9B,UAAI;AACF,YAAI,MAAM;AACR,gBAAM,OAAO,aAAa,IAAI;AAC9B,iBAAO,OAAO,MAAM;AACpB,gBAAM,QAAQ,OAAO,SAAS;AAC9B,gBAAM,WACJ,OAAO,SAAS,YACf,QAAQ,IAAI,KAAK,KAAK,MACvB,OAAO,SAAS;AAClB,iBAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,QAAQ;AAAA,QAC9C;AAEA,YAAI,OAAO,eAAe,KAAK,OAAO,gBAAgB,GAAG;AACvD,gBAAM,KAAK,MAAM,OAAO,MAAM;AAC9B,cAAI,CAAC,UAAW,SAAQ,EAAE;AAAA,QAC5B;AAAA,MACF,SAAS,GAAG;AACV,YAAI,CAAC,UAAW,UAAS,CAAU;AAAA,MACrC,UAAE;AACA,YAAI,CAAC,UAAW,YAAW,KAAK;AAAA,MAClC;AAAA,IACF;AAEA,SAAK;AACL,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EAGF,GAAG,CAAC,CAAC;AAOL,QAAM,YAAQ;AAAA,IACZ,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,iBAAiB,CAAC,CAAC;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,MAAM,SAAS,OAAO,aAAa,QAAQ,eAAe;AAAA,EAC7D;AAEA,SACE,4CAAC,kBAAkB,UAAlB,EAA2B,OACzB,UACH;AAEJ;;;AIpHA,IAAAC,gBAA0C;AAmB/B,IAAAC,sBAAA;AAVJ,SAAS,UAAU,EAAE,UAAU,WAAW,KAAK,GAAmB;AACvE,QAAM,EAAE,SAAS,iBAAiB,gBAAgB,IAAI,cAAc;AAEpE,+BAAU,MAAM;AACd,QAAI,CAAC,WAAW,CAAC,iBAAiB;AAChC,sBAAgB;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,iBAAiB,eAAe,CAAC;AAE9C,MAAI,WAAW,CAAC,iBAAiB;AAC/B,WAAO,6EAAG,oBAAS;AAAA,EACrB;AAEA,SAAO,6EAAG,UAAS;AACrB;","names":["import_react","import_react","import_jsx_runtime"]}

package/dist/index.d.cts

@@ -0,0 +1,82 @@
+import * as react from 'react';
+import { ReactNode } from 'react';
+
+interface FluoceUser {
+    id: string;
+    name?: string;
+    email?: string;
+    phone?: string;
+    photo?: string;
+    [key: string]: unknown;
+}
+interface TokenPair {
+    accessToken: string;
+    refreshToken: string;
+}
+interface FluoceAuthConfig {
+    /** Auth frontend base url, e.g. "https://auth.fluoce.com" */
+    authUrl: string;
+    /** Auth backend api base url, e.g. "http://localhost:3001" */
+    apiUrl: string;
+    /**
+     * This app's own callback url, sent as `ref` and where auth.fluoce.com
+     * redirects back with `?code=`. e.g. "https://myapp.com/auth"
+     */
+    appUrl: string;
+    accessTokenCookie?: string;
+    refreshTokenCookie?: string;
+    accessTokenExpiryDays?: number;
+    refreshTokenExpiryDays?: number;
+}
+interface FluoceAuthContextValue {
+    user: FluoceUser | null;
+    loading: boolean;
+    isAuthenticated: boolean;
+    error: Error | null;
+    refreshUser: () => Promise<void>;
+    logout: (allDevices?: boolean) => Promise<void>;
+    redirectToLogin: () => void;
+}
+
+interface FluoceAuthProviderProps extends FluoceAuthConfig {
+    children: ReactNode;
+}
+declare function FluoceAuthProvider({ children, ...config }: FluoceAuthProviderProps): react.JSX.Element;
+
+interface AuthGuardProps {
+    children: ReactNode;
+    /** shown while loading or right before the redirect fires */
+    fallback?: ReactNode;
+}
+declare function AuthGuard({ children, fallback }: AuthGuardProps): react.JSX.Element;
+
+declare function useFluoceAuth(): FluoceAuthContextValue;
+
+declare class FluoceApiClient {
+    private config;
+    private refreshPromise;
+    /** set by the Provider — called once refresh fails and there's no session left */
+    onAuthFailure: () => void;
+    constructor(config: FluoceAuthConfig);
+    getAccessToken(): string | null;
+    getRefreshToken(): string | null;
+    setTokens(tokens: TokenPair): void;
+    clearTokens(): void;
+    buildLoginUrl(): string;
+    exchangeCode(code: string): Promise<TokenPair>;
+    getMe(): Promise<FluoceUser>;
+    updateMe(payload: {
+        name?: string;
+        photo?: string;
+    }): Promise<FluoceUser>;
+    refresh(): Promise<TokenPair | null>;
+    logout(allDevices?: boolean): Promise<void>;
+    /**
+     * Authenticated fetch. Attaches access token, retries once through /refresh
+     * on 401, and calls onAuthFailure (-> redirect to auth frontend) if that
+     * fails too. Use this for /me, /me updates, and any endpoint you add later.
+     */
+    authFetch<T = unknown>(path: string, init?: RequestInit): Promise<T>;
+}
+
+export { AuthGuard, type AuthGuardProps, FluoceApiClient, type FluoceAuthConfig, type FluoceAuthContextValue, FluoceAuthProvider, type FluoceAuthProviderProps, type FluoceUser, type TokenPair, useFluoceAuth };

package/dist/index.d.ts

@@ -0,0 +1,82 @@
+import * as react from 'react';
+import { ReactNode } from 'react';
+
+interface FluoceUser {
+    id: string;
+    name?: string;
+    email?: string;
+    phone?: string;
+    photo?: string;
+    [key: string]: unknown;
+}
+interface TokenPair {
+    accessToken: string;
+    refreshToken: string;
+}
+interface FluoceAuthConfig {
+    /** Auth frontend base url, e.g. "https://auth.fluoce.com" */
+    authUrl: string;
+    /** Auth backend api base url, e.g. "http://localhost:3001" */
+    apiUrl: string;
+    /**
+     * This app's own callback url, sent as `ref` and where auth.fluoce.com
+     * redirects back with `?code=`. e.g. "https://myapp.com/auth"
+     */
+    appUrl: string;
+    accessTokenCookie?: string;
+    refreshTokenCookie?: string;
+    accessTokenExpiryDays?: number;
+    refreshTokenExpiryDays?: number;
+}
+interface FluoceAuthContextValue {
+    user: FluoceUser | null;
+    loading: boolean;
+    isAuthenticated: boolean;
+    error: Error | null;
+    refreshUser: () => Promise<void>;
+    logout: (allDevices?: boolean) => Promise<void>;
+    redirectToLogin: () => void;
+}
+
+interface FluoceAuthProviderProps extends FluoceAuthConfig {
+    children: ReactNode;
+}
+declare function FluoceAuthProvider({ children, ...config }: FluoceAuthProviderProps): react.JSX.Element;
+
+interface AuthGuardProps {
+    children: ReactNode;
+    /** shown while loading or right before the redirect fires */
+    fallback?: ReactNode;
+}
+declare function AuthGuard({ children, fallback }: AuthGuardProps): react.JSX.Element;
+
+declare function useFluoceAuth(): FluoceAuthContextValue;
+
+declare class FluoceApiClient {
+    private config;
+    private refreshPromise;
+    /** set by the Provider — called once refresh fails and there's no session left */
+    onAuthFailure: () => void;
+    constructor(config: FluoceAuthConfig);
+    getAccessToken(): string | null;
+    getRefreshToken(): string | null;
+    setTokens(tokens: TokenPair): void;
+    clearTokens(): void;
+    buildLoginUrl(): string;
+    exchangeCode(code: string): Promise<TokenPair>;
+    getMe(): Promise<FluoceUser>;
+    updateMe(payload: {
+        name?: string;
+        photo?: string;
+    }): Promise<FluoceUser>;
+    refresh(): Promise<TokenPair | null>;
+    logout(allDevices?: boolean): Promise<void>;
+    /**
+     * Authenticated fetch. Attaches access token, retries once through /refresh
+     * on 401, and calls onAuthFailure (-> redirect to auth frontend) if that
+     * fails too. Use this for /me, /me updates, and any endpoint you add later.
+     */
+    authFetch<T = unknown>(path: string, init?: RequestInit): Promise<T>;
+}
+
+export { AuthGuard, type AuthGuardProps, FluoceApiClient, type FluoceAuthConfig, type FluoceAuthContextValue, FluoceAuthProvider, type FluoceAuthProviderProps, type FluoceUser, type TokenPair, useFluoceAuth };

package/dist/index.js

@@ -0,0 +1,276 @@
+// src/FluoceAuthProvider.tsx
+import {
+  useCallback,
+  useEffect,
+  useMemo,
+  useRef,
+  useState
+} from "react";
+
+// src/AuthContext.tsx
+import { createContext, useContext } from "react";
+var FluoceAuthContext = createContext(
+  null
+);
+function useFluoceAuth() {
+  const ctx = useContext(FluoceAuthContext);
+  if (!ctx)
+    throw new Error("useFluoceAuth must be used within <FluoceAuthProvider>");
+  return ctx;
+}
+
+// src/cookies.ts
+function setCookie(name, value, days) {
+  const expires = new Date(Date.now() + days * 864e5).toUTCString();
+  document.cookie = `${name}=${encodeURIComponent(value)}; expires=${expires}; path=/; SameSite=Lax`;
+}
+function getCookie(name) {
+  const escaped = name.replace(/([.$?*|{}()[\]\\/+^])/g, "\\$1");
+  const match = document.cookie.match(new RegExp("(?:^|; )" + escaped + "=([^;]*)"));
+  return match ? decodeURIComponent(match[1]) : null;
+}
+function deleteCookie(name) {
+  document.cookie = `${name}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`;
+}
+
+// src/apiClient.ts
+var FluoceApiClient = class {
+  constructor(config) {
+    this.refreshPromise = null;
+    /** set by the Provider — called once refresh fails and there's no session left */
+    this.onAuthFailure = () => {
+    };
+    this.config = {
+      accessTokenCookie: "fluoce_access_token",
+      refreshTokenCookie: "fluoce_refresh_token",
+      accessTokenExpiryDays: 1,
+      refreshTokenExpiryDays: 30,
+      ...config
+    };
+  }
+  getAccessToken() {
+    return getCookie(this.config.accessTokenCookie);
+  }
+  getRefreshToken() {
+    return getCookie(this.config.refreshTokenCookie);
+  }
+  setTokens(tokens) {
+    setCookie(
+      this.config.accessTokenCookie,
+      tokens.accessToken,
+      this.config.accessTokenExpiryDays
+    );
+    setCookie(
+      this.config.refreshTokenCookie,
+      tokens.refreshToken,
+      this.config.refreshTokenExpiryDays
+    );
+  }
+  clearTokens() {
+    deleteCookie(this.config.accessTokenCookie);
+    deleteCookie(this.config.refreshTokenCookie);
+  }
+  buildLoginUrl() {
+    const ref = encodeURIComponent(this.config.appUrl);
+    return `${this.config.authUrl}/auth?ref=${ref}`;
+  }
+  async exchangeCode(code) {
+    const res = await fetch(`${this.config.apiUrl}/exchange`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ code })
+    });
+    if (!res.ok) throw new Error(`exchange failed: ${res.status}`);
+    const data = await res.json();
+    this.setTokens(data);
+    return data;
+  }
+  async getMe() {
+    return this.authFetch("/me");
+  }
+  async updateMe(payload) {
+    return this.authFetch("/me", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(payload)
+    });
+  }
+  async refresh() {
+    if (this.refreshPromise) return this.refreshPromise;
+    const refreshToken = this.getRefreshToken();
+    if (!refreshToken) return null;
+    this.refreshPromise = (async () => {
+      try {
+        const res = await fetch(`${this.config.apiUrl}/refresh`, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${refreshToken}`
+          }
+        });
+        if (!res.ok) {
+          this.clearTokens();
+          return null;
+        }
+        const data = await res.json();
+        this.setTokens(data);
+        return data;
+      } catch {
+        this.clearTokens();
+        return null;
+      } finally {
+        this.refreshPromise = null;
+      }
+    })();
+    return this.refreshPromise;
+  }
+  async logout(allDevices = false) {
+    const refreshToken = this.getRefreshToken();
+    if (refreshToken) {
+      try {
+        await fetch(
+          `${this.config.apiUrl}${allDevices ? "/logout/all" : "/logout"}`,
+          {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              Authorization: `Bearer ${refreshToken}`
+            }
+          }
+        );
+      } catch {
+      }
+    }
+    this.clearTokens();
+  }
+  /**
+   * Authenticated fetch. Attaches access token, retries once through /refresh
+   * on 401, and calls onAuthFailure (-> redirect to auth frontend) if that
+   * fails too. Use this for /me, /me updates, and any endpoint you add later.
+   */
+  async authFetch(path, init = {}) {
+    const doFetch = (token) => fetch(`${this.config.apiUrl}${path}`, {
+      ...init,
+      headers: {
+        ...init.headers || {},
+        ...token ? { Authorization: `Bearer ${token}` } : {}
+      }
+    });
+    let res = await doFetch(this.getAccessToken());
+    if (res.status === 401) {
+      const refreshed = await this.refresh();
+      if (!refreshed) {
+        this.onAuthFailure();
+        throw new Error("unauthenticated");
+      }
+      res = await doFetch(refreshed.accessToken);
+      if (res.status === 401) {
+        this.clearTokens();
+        this.onAuthFailure();
+        throw new Error("unauthenticated");
+      }
+    }
+    if (!res.ok) throw new Error(`request failed: ${res.status}`);
+    return res.json();
+  }
+};
+
+// src/FluoceAuthProvider.tsx
+import { jsx } from "react/jsx-runtime";
+function FluoceAuthProvider({
+  children,
+  ...config
+}) {
+  const clientRef = useRef();
+  if (!clientRef.current) clientRef.current = new FluoceApiClient(config);
+  const client = clientRef.current;
+  const [user, setUser] = useState(null);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState(null);
+  const redirectToLogin = useCallback(() => {
+    window.location.href = client.buildLoginUrl();
+  }, [client]);
+  client.onAuthFailure = redirectToLogin;
+  const refreshUser = useCallback(async () => {
+    try {
+      const me = await client.getMe();
+      setUser(me);
+      setError(null);
+    } catch (e) {
+      setUser(null);
+      setError(e);
+    }
+  }, [client]);
+  const logout = useCallback(
+    async (allDevices = false) => {
+      await client.logout(allDevices);
+      setUser(null);
+      redirectToLogin();
+    },
+    [client, redirectToLogin]
+  );
+  useEffect(() => {
+    let cancelled = false;
+    async function init() {
+      const params = new URLSearchParams(window.location.search);
+      const code = params.get("code");
+      try {
+        if (code) {
+          await client.exchangeCode(code);
+          params.delete("code");
+          const query = params.toString();
+          const cleanUrl = window.location.pathname + (query ? `?${query}` : "") + window.location.hash;
+          window.history.replaceState({}, "", cleanUrl);
+        }
+        if (client.getAccessToken() || client.getRefreshToken()) {
+          const me = await client.getMe();
+          if (!cancelled) setUser(me);
+        }
+      } catch (e) {
+        if (!cancelled) setError(e);
+      } finally {
+        if (!cancelled) setLoading(false);
+      }
+    }
+    init();
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+  const value = useMemo(
+    () => ({
+      user,
+      loading,
+      isAuthenticated: !!user,
+      error,
+      refreshUser,
+      logout,
+      redirectToLogin
+    }),
+    [user, loading, error, refreshUser, logout, redirectToLogin]
+  );
+  return /* @__PURE__ */ jsx(FluoceAuthContext.Provider, { value, children });
+}
+
+// src/AuthGuard.tsx
+import { useEffect as useEffect2 } from "react";
+import { Fragment, jsx as jsx2 } from "react/jsx-runtime";
+function AuthGuard({ children, fallback = null }) {
+  const { loading, isAuthenticated, redirectToLogin } = useFluoceAuth();
+  useEffect2(() => {
+    if (!loading && !isAuthenticated) {
+      redirectToLogin();
+    }
+  }, [loading, isAuthenticated, redirectToLogin]);
+  if (loading || !isAuthenticated) {
+    return /* @__PURE__ */ jsx2(Fragment, { children: fallback });
+  }
+  return /* @__PURE__ */ jsx2(Fragment, { children });
+}
+export {
+  AuthGuard,
+  FluoceApiClient,
+  FluoceAuthProvider,
+  useFluoceAuth
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/FluoceAuthProvider.tsx","../src/AuthContext.tsx","../src/cookies.ts","../src/apiClient.ts","../src/AuthGuard.tsx"],"sourcesContent":["import {\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n  type ReactNode,\n} from \"react\";\nimport { FluoceAuthContext } from \"./AuthContext\";\nimport { FluoceApiClient } from \"./apiClient\";\nimport type { FluoceAuthConfig, FluoceUser } from \"./types\";\n\nexport interface FluoceAuthProviderProps extends FluoceAuthConfig {\n  children: ReactNode;\n}\n\nexport function FluoceAuthProvider({\n  children,\n  ...config\n}: FluoceAuthProviderProps) {\n  const clientRef = useRef<FluoceApiClient>();\n  if (!clientRef.current) clientRef.current = new FluoceApiClient(config);\n  const client = clientRef.current;\n\n  const [user, setUser] = useState<FluoceUser | null>(null);\n  const [loading, setLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  const redirectToLogin = useCallback(() => {\n    window.location.href = client.buildLoginUrl();\n  }, [client]);\n\n  // keep the client's failure hook pointed at the latest redirect fn\n  client.onAuthFailure = redirectToLogin;\n\n  const refreshUser = useCallback(async () => {\n    try {\n      const me = await client.getMe();\n      setUser(me);\n      setError(null);\n    } catch (e) {\n      setUser(null);\n      setError(e as Error);\n    }\n  }, [client]);\n\n  const logout = useCallback(\n    async (allDevices = false) => {\n      await client.logout(allDevices);\n      setUser(null);\n      redirectToLogin();\n    },\n    [client, redirectToLogin],\n  );\n\n  useEffect(() => {\n    let cancelled = false;\n\n    async function init() {\n      const params = new URLSearchParams(window.location.search);\n      const code = params.get(\"code\");\n\n      try {\n        if (code) {\n          await client.exchangeCode(code);\n          params.delete(\"code\");\n          const query = params.toString();\n          const cleanUrl =\n            window.location.pathname +\n            (query ? `?${query}` : \"\") +\n            window.location.hash;\n          window.history.replaceState({}, \"\", cleanUrl);\n        }\n\n        if (client.getAccessToken() || client.getRefreshToken()) {\n          const me = await client.getMe();\n          if (!cancelled) setUser(me);\n        }\n      } catch (e) {\n        if (!cancelled) setError(e as Error);\n      } finally {\n        if (!cancelled) setLoading(false);\n      }\n    }\n\n    init();\n    return () => {\n      cancelled = true;\n    };\n    // run once on mount only\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  // const authFetch = useCallback(\n  //   <T,>(path: string, init?: RequestInit) => client.authFetch<T>(path, init),\n  //   [client],\n  // );\n\n  const value = useMemo(\n    () => ({\n      user,\n      loading,\n      isAuthenticated: !!user,\n      error,\n      refreshUser,\n      logout,\n      redirectToLogin,\n    }),\n    [user, loading, error, refreshUser, logout, redirectToLogin],\n  );\n\n  return (\n    <FluoceAuthContext.Provider value={value}>\n      {children}\n    </FluoceAuthContext.Provider>\n  );\n}\n","import { createContext, useContext } from \"react\";\nimport type { FluoceAuthContextValue } from \"./types\";\n\nexport const FluoceAuthContext = createContext<FluoceAuthContextValue | null>(\n  null,\n);\n\nexport function useFluoceAuth(): FluoceAuthContextValue {\n  const ctx = useContext(FluoceAuthContext);\n  if (!ctx)\n    throw new Error(\"useFluoceAuth must be used within <FluoceAuthProvider>\");\n  return ctx;\n}\n","export function setCookie(name: string, value: string, days: number): void {\n  const expires = new Date(Date.now() + days * 864e5).toUTCString();\n  document.cookie = `${name}=${encodeURIComponent(value)}; expires=${expires}; path=/; SameSite=Lax`;\n}\n\nexport function getCookie(name: string): string | null {\n  const escaped = name.replace(/([.$?*|{}()[\\]\\\\/+^])/g, '\\\\$1');\n  const match = document.cookie.match(new RegExp('(?:^|; )' + escaped + '=([^;]*)'));\n  return match ? decodeURIComponent(match[1]) : null;\n}\n\nexport function deleteCookie(name: string): void {\n  document.cookie = `${name}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`;\n}\n","import { getCookie, setCookie, deleteCookie } from \"./cookies\";\nimport type { FluoceAuthConfig, FluoceUser, TokenPair } from \"./types\";\n\ntype ResolvedConfig = Required<FluoceAuthConfig>;\n\nexport class FluoceApiClient {\n  private config: ResolvedConfig;\n  private refreshPromise: Promise<TokenPair | null> | null = null;\n\n  /** set by the Provider — called once refresh fails and there's no session left */\n  onAuthFailure: () => void = () => {};\n\n  constructor(config: FluoceAuthConfig) {\n    this.config = {\n      accessTokenCookie: \"fluoce_access_token\",\n      refreshTokenCookie: \"fluoce_refresh_token\",\n      accessTokenExpiryDays: 1,\n      refreshTokenExpiryDays: 30,\n      ...config,\n    };\n  }\n\n  getAccessToken(): string | null {\n    return getCookie(this.config.accessTokenCookie);\n  }\n\n  getRefreshToken(): string | null {\n    return getCookie(this.config.refreshTokenCookie);\n  }\n\n  setTokens(tokens: TokenPair): void {\n    setCookie(\n      this.config.accessTokenCookie,\n      tokens.accessToken,\n      this.config.accessTokenExpiryDays,\n    );\n    setCookie(\n      this.config.refreshTokenCookie,\n      tokens.refreshToken,\n      this.config.refreshTokenExpiryDays,\n    );\n  }\n\n  clearTokens(): void {\n    deleteCookie(this.config.accessTokenCookie);\n    deleteCookie(this.config.refreshTokenCookie);\n  }\n\n  buildLoginUrl(): string {\n    const ref = encodeURIComponent(this.config.appUrl);\n    return `${this.config.authUrl}/auth?ref=${ref}`;\n  }\n\n  async exchangeCode(code: string): Promise<TokenPair> {\n    const res = await fetch(`${this.config.apiUrl}/exchange`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ code }),\n    });\n    if (!res.ok) throw new Error(`exchange failed: ${res.status}`);\n    const data = (await res.json()) as TokenPair;\n    this.setTokens(data);\n    return data;\n  }\n\n  async getMe(): Promise<FluoceUser> {\n    return this.authFetch<FluoceUser>(\"/me\");\n  }\n\n  async updateMe(payload: {\n    name?: string;\n    photo?: string;\n  }): Promise<FluoceUser> {\n    return this.authFetch<FluoceUser>(\"/me\", {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify(payload),\n    });\n  }\n\n  async refresh(): Promise<TokenPair | null> {\n    // dedupe concurrent refresh calls triggered by parallel 401s\n    if (this.refreshPromise) return this.refreshPromise;\n\n    const refreshToken = this.getRefreshToken();\n    if (!refreshToken) return null;\n\n    this.refreshPromise = (async () => {\n      try {\n        const res = await fetch(`${this.config.apiUrl}/refresh`, {\n          method: \"POST\",\n          headers: {\n            \"Content-Type\": \"application/json\",\n            Authorization: `Bearer ${refreshToken}`,\n          },\n        });\n        if (!res.ok) {\n          this.clearTokens();\n          return null;\n        }\n        const data = (await res.json()) as TokenPair;\n        this.setTokens(data);\n        return data;\n      } catch {\n        this.clearTokens();\n        return null;\n      } finally {\n        this.refreshPromise = null;\n      }\n    })();\n\n    return this.refreshPromise;\n  }\n\n  async logout(allDevices = false): Promise<void> {\n    const refreshToken = this.getRefreshToken();\n    if (refreshToken) {\n      try {\n        await fetch(\n          `${this.config.apiUrl}${allDevices ? \"/logout/all\" : \"/logout\"}`,\n          {\n            method: \"POST\",\n            headers: {\n              \"Content-Type\": \"application/json\",\n              Authorization: `Bearer ${refreshToken}`,\n            },\n          },\n        );\n      } catch {\n        // best-effort — clear local session regardless\n      }\n    }\n    this.clearTokens();\n  }\n\n  /**\n   * Authenticated fetch. Attaches access token, retries once through /refresh\n   * on 401, and calls onAuthFailure (-> redirect to auth frontend) if that\n   * fails too. Use this for /me, /me updates, and any endpoint you add later.\n   */\n  async authFetch<T = unknown>(\n    path: string,\n    init: RequestInit = {},\n  ): Promise<T> {\n    const doFetch = (token: string | null) =>\n      fetch(`${this.config.apiUrl}${path}`, {\n        ...init,\n        headers: {\n          ...(init.headers || {}),\n          ...(token ? { Authorization: `Bearer ${token}` } : {}),\n        },\n      });\n\n    let res = await doFetch(this.getAccessToken());\n\n    if (res.status === 401) {\n      const refreshed = await this.refresh();\n      if (!refreshed) {\n        this.onAuthFailure();\n        throw new Error(\"unauthenticated\");\n      }\n      res = await doFetch(refreshed.accessToken);\n      if (res.status === 401) {\n        this.clearTokens();\n        this.onAuthFailure();\n        throw new Error(\"unauthenticated\");\n      }\n    }\n\n    if (!res.ok) throw new Error(`request failed: ${res.status}`);\n\n    return res.json() as Promise<T>;\n  }\n}\n","import { useEffect, type ReactNode } from \"react\";\nimport { useFluoceAuth } from \"./AuthContext\";\n\nexport interface AuthGuardProps {\n  children: ReactNode;\n  /** shown while loading or right before the redirect fires */\n  fallback?: ReactNode;\n}\n\nexport function AuthGuard({ children, fallback = null }: AuthGuardProps) {\n  const { loading, isAuthenticated, redirectToLogin } = useFluoceAuth();\n\n  useEffect(() => {\n    if (!loading && !isAuthenticated) {\n      redirectToLogin();\n    }\n  }, [loading, isAuthenticated, redirectToLogin]);\n\n  if (loading || !isAuthenticated) {\n    return <>{fallback}</>;\n  }\n\n  return <>{children}</>;\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACPP,SAAS,eAAe,kBAAkB;AAGnC,IAAM,oBAAoB;AAAA,EAC/B;AACF;AAEO,SAAS,gBAAwC;AACtD,QAAM,MAAM,WAAW,iBAAiB;AACxC,MAAI,CAAC;AACH,UAAM,IAAI,MAAM,wDAAwD;AAC1E,SAAO;AACT;;;ACZO,SAAS,UAAU,MAAc,OAAe,MAAoB;AACzE,QAAM,UAAU,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,YAAY;AAChE,WAAS,SAAS,GAAG,IAAI,IAAI,mBAAmB,KAAK,CAAC,aAAa,OAAO;AAC5E;AAEO,SAAS,UAAU,MAA6B;AACrD,QAAM,UAAU,KAAK,QAAQ,0BAA0B,MAAM;AAC7D,QAAM,QAAQ,SAAS,OAAO,MAAM,IAAI,OAAO,aAAa,UAAU,UAAU,CAAC;AACjF,SAAO,QAAQ,mBAAmB,MAAM,CAAC,CAAC,IAAI;AAChD;AAEO,SAAS,aAAa,MAAoB;AAC/C,WAAS,SAAS,GAAG,IAAI;AAC3B;;;ACRO,IAAM,kBAAN,MAAsB;AAAA,EAO3B,YAAY,QAA0B;AALtC,SAAQ,iBAAmD;AAG3D;AAAA,yBAA4B,MAAM;AAAA,IAAC;AAGjC,SAAK,SAAS;AAAA,MACZ,mBAAmB;AAAA,MACnB,oBAAoB;AAAA,MACpB,uBAAuB;AAAA,MACvB,wBAAwB;AAAA,MACxB,GAAG;AAAA,IACL;AAAA,EACF;AAAA,EAEA,iBAAgC;AAC9B,WAAO,UAAU,KAAK,OAAO,iBAAiB;AAAA,EAChD;AAAA,EAEA,kBAAiC;AAC/B,WAAO,UAAU,KAAK,OAAO,kBAAkB;AAAA,EACjD;AAAA,EAEA,UAAU,QAAyB;AACjC;AAAA,MACE,KAAK,OAAO;AAAA,MACZ,OAAO;AAAA,MACP,KAAK,OAAO;AAAA,IACd;AACA;AAAA,MACE,KAAK,OAAO;AAAA,MACZ,OAAO;AAAA,MACP,KAAK,OAAO;AAAA,IACd;AAAA,EACF;AAAA,EAEA,cAAoB;AAClB,iBAAa,KAAK,OAAO,iBAAiB;AAC1C,iBAAa,KAAK,OAAO,kBAAkB;AAAA,EAC7C;AAAA,EAEA,gBAAwB;AACtB,UAAM,MAAM,mBAAmB,KAAK,OAAO,MAAM;AACjD,WAAO,GAAG,KAAK,OAAO,OAAO,aAAa,GAAG;AAAA,EAC/C;AAAA,EAEA,MAAM,aAAa,MAAkC;AACnD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,MAAM,aAAa;AAAA,MACxD,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,IAC/B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,oBAAoB,IAAI,MAAM,EAAE;AAC7D,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,SAAK,UAAU,IAAI;AACnB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QAA6B;AACjC,WAAO,KAAK,UAAsB,KAAK;AAAA,EACzC;AAAA,EAEA,MAAM,SAAS,SAGS;AACtB,WAAO,KAAK,UAAsB,OAAO;AAAA,MACvC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,IAC9B,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAAqC;AAEzC,QAAI,KAAK,eAAgB,QAAO,KAAK;AAErC,UAAM,eAAe,KAAK,gBAAgB;AAC1C,QAAI,CAAC,aAAc,QAAO;AAE1B,SAAK,kBAAkB,YAAY;AACjC,UAAI;AACF,cAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,MAAM,YAAY;AAAA,UACvD,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,eAAe,UAAU,YAAY;AAAA,UACvC;AAAA,QACF,CAAC;AACD,YAAI,CAAC,IAAI,IAAI;AACX,eAAK,YAAY;AACjB,iBAAO;AAAA,QACT;AACA,cAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,aAAK,UAAU,IAAI;AACnB,eAAO;AAAA,MACT,QAAQ;AACN,aAAK,YAAY;AACjB,eAAO;AAAA,MACT,UAAE;AACA,aAAK,iBAAiB;AAAA,MACxB;AAAA,IACF,GAAG;AAEH,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,OAAO,aAAa,OAAsB;AAC9C,UAAM,eAAe,KAAK,gBAAgB;AAC1C,QAAI,cAAc;AAChB,UAAI;AACF,cAAM;AAAA,UACJ,GAAG,KAAK,OAAO,MAAM,GAAG,aAAa,gBAAgB,SAAS;AAAA,UAC9D;AAAA,YACE,QAAQ;AAAA,YACR,SAAS;AAAA,cACP,gBAAgB;AAAA,cAChB,eAAe,UAAU,YAAY;AAAA,YACvC;AAAA,UACF;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AACA,SAAK,YAAY;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UACJ,MACA,OAAoB,CAAC,GACT;AACZ,UAAM,UAAU,CAAC,UACf,MAAM,GAAG,KAAK,OAAO,MAAM,GAAG,IAAI,IAAI;AAAA,MACpC,GAAG;AAAA,MACH,SAAS;AAAA,QACP,GAAI,KAAK,WAAW,CAAC;AAAA,QACrB,GAAI,QAAQ,EAAE,eAAe,UAAU,KAAK,GAAG,IAAI,CAAC;AAAA,MACtD;AAAA,IACF,CAAC;AAEH,QAAI,MAAM,MAAM,QAAQ,KAAK,eAAe,CAAC;AAE7C,QAAI,IAAI,WAAW,KAAK;AACtB,YAAM,YAAY,MAAM,KAAK,QAAQ;AACrC,UAAI,CAAC,WAAW;AACd,aAAK,cAAc;AACnB,cAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC;AACA,YAAM,MAAM,QAAQ,UAAU,WAAW;AACzC,UAAI,IAAI,WAAW,KAAK;AACtB,aAAK,YAAY;AACjB,aAAK,cAAc;AACnB,cAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC;AAAA,IACF;AAEA,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,mBAAmB,IAAI,MAAM,EAAE;AAE5D,WAAO,IAAI,KAAK;AAAA,EAClB;AACF;;;AH7DI;AAhGG,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,YAAY,OAAwB;AAC1C,MAAI,CAAC,UAAU,QAAS,WAAU,UAAU,IAAI,gBAAgB,MAAM;AACtE,QAAM,SAAS,UAAU;AAEzB,QAAM,CAAC,MAAM,OAAO,IAAI,SAA4B,IAAI;AACxD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,IAAI;AAC3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAuB,IAAI;AAErD,QAAM,kBAAkB,YAAY,MAAM;AACxC,WAAO,SAAS,OAAO,OAAO,cAAc;AAAA,EAC9C,GAAG,CAAC,MAAM,CAAC;AAGX,SAAO,gBAAgB;AAEvB,QAAM,cAAc,YAAY,YAAY;AAC1C,QAAI;AACF,YAAM,KAAK,MAAM,OAAO,MAAM;AAC9B,cAAQ,EAAE;AACV,eAAS,IAAI;AAAA,IACf,SAAS,GAAG;AACV,cAAQ,IAAI;AACZ,eAAS,CAAU;AAAA,IACrB;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,SAAS;AAAA,IACb,OAAO,aAAa,UAAU;AAC5B,YAAM,OAAO,OAAO,UAAU;AAC9B,cAAQ,IAAI;AACZ,sBAAgB;AAAA,IAClB;AAAA,IACA,CAAC,QAAQ,eAAe;AAAA,EAC1B;AAEA,YAAU,MAAM;AACd,QAAI,YAAY;AAEhB,mBAAe,OAAO;AACpB,YAAM,SAAS,IAAI,gBAAgB,OAAO,SAAS,MAAM;AACzD,YAAM,OAAO,OAAO,IAAI,MAAM;AAE9B,UAAI;AACF,YAAI,MAAM;AACR,gBAAM,OAAO,aAAa,IAAI;AAC9B,iBAAO,OAAO,MAAM;AACpB,gBAAM,QAAQ,OAAO,SAAS;AAC9B,gBAAM,WACJ,OAAO,SAAS,YACf,QAAQ,IAAI,KAAK,KAAK,MACvB,OAAO,SAAS;AAClB,iBAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,QAAQ;AAAA,QAC9C;AAEA,YAAI,OAAO,eAAe,KAAK,OAAO,gBAAgB,GAAG;AACvD,gBAAM,KAAK,MAAM,OAAO,MAAM;AAC9B,cAAI,CAAC,UAAW,SAAQ,EAAE;AAAA,QAC5B;AAAA,MACF,SAAS,GAAG;AACV,YAAI,CAAC,UAAW,UAAS,CAAU;AAAA,MACrC,UAAE;AACA,YAAI,CAAC,UAAW,YAAW,KAAK;AAAA,MAClC;AAAA,IACF;AAEA,SAAK;AACL,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EAGF,GAAG,CAAC,CAAC;AAOL,QAAM,QAAQ;AAAA,IACZ,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,iBAAiB,CAAC,CAAC;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,MAAM,SAAS,OAAO,aAAa,QAAQ,eAAe;AAAA,EAC7D;AAEA,SACE,oBAAC,kBAAkB,UAAlB,EAA2B,OACzB,UACH;AAEJ;;;AIpHA,SAAS,aAAAA,kBAAiC;AAmB/B,0BAAAC,YAAA;AAVJ,SAAS,UAAU,EAAE,UAAU,WAAW,KAAK,GAAmB;AACvE,QAAM,EAAE,SAAS,iBAAiB,gBAAgB,IAAI,cAAc;AAEpE,EAAAC,WAAU,MAAM;AACd,QAAI,CAAC,WAAW,CAAC,iBAAiB;AAChC,sBAAgB;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,iBAAiB,eAAe,CAAC;AAE9C,MAAI,WAAW,CAAC,iBAAiB;AAC/B,WAAO,gBAAAD,KAAA,YAAG,oBAAS;AAAA,EACrB;AAEA,SAAO,gBAAAA,KAAA,YAAG,UAAS;AACrB;","names":["useEffect","jsx","useEffect"]}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@fluoce/auth-react",
+  "version": "0.1.0",
+  "description": "React SDK for Fluoce Auth",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup src/index.ts --format esm,cjs --dts",
+    "dev": "tsup src/index.ts --watch --format esm,cjs --dts",
+    "prepublishOnly": "pnpm build"
+  },
+  "peerDependencies": {
+    "react": ">=18",
+    "react-dom": ">=18"
+  },
+  "devDependencies": {
+    "@types/react": "^18.3.31",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/fluoce/auth"
+  },
+  "homepage": "https://github.com/fluoce/auth",
+  "bugs": {
+    "url": "https://github.com/fluoce/auth/issues"
+  },
+  "keywords": [
+    "react",
+    "auth",
+    "authentication",
+    "oauth",
+    "sdk",
+    "fluoce"
+  ],
+  "engines": {
+    "node": ">=18"
+  }
+}