@insforge/react 0.2.2 → 0.2.4

package/dist/hooks.js

@@ -27,42 +27,23 @@ function useUser() {
   return { user, isLoaded, updateUser, setUser };
 }
 function usePublicAuthConfig() {
-  const { baseUrl } = useInsforge();
-  const [oauthProviders, setOAuthProviders] = react.useState([]);
+  const { getPublicAuthConfig } = useInsforge();
   const [emailConfig, setEmailConfig] = react.useState(null);
   const [isLoaded, setIsLoaded] = react.useState(false);
   react.useEffect(() => {
-    let mounted = true;
     async function fetchConfig() {
-      try {
-        const response = await fetch(`${baseUrl}/api/auth/public-config`);
-        if (!mounted) return;
-        if (!response.ok) {
-          console.warn("[usePublicAuthConfig] Failed to fetch public auth config:", response.statusText);
-          setOAuthProviders([]);
-          setEmailConfig(null);
-        } else {
-          const data = await response.json();
-          const providerNames = data.providers?.map((p) => p.provider) || [];
-          setOAuthProviders(providerNames);
-          setEmailConfig(data.email || null);
-        }
-        setIsLoaded(true);
-      } catch (error) {
-        console.warn("[usePublicAuthConfig] Unexpected error:", error);
-        if (mounted) {
-          setOAuthProviders([]);
-          setEmailConfig(null);
-          setIsLoaded(true);
-        }
+      const result = await getPublicAuthConfig();
+      if (result) {
+        setEmailConfig(result);
+      } else {
+        console.error("[usePublicAuthConfig] Failed to get public auth config");
+        setEmailConfig(null);
       }
+      setIsLoaded(true);
     }
     fetchConfig();
-    return () => {
-      mounted = false;
-    };
-  }, [baseUrl]);
-  return { oauthProviders, emailConfig, isLoaded };
+  }, [getPublicAuthConfig]);
+  return { emailConfig, isLoaded };
 }
 
 exports.useAuth = useAuth;

package/dist/hooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/provider/InsforgeProvider.tsx","../src/hooks/useAuth.ts","../src/hooks/useUser.ts","../src/hooks/usePublicAuthConfig.ts"],"names":["createContext","useContext","useState","useEffect"],"mappings":";;;;;;AAuDA,IAAM,eAAA,GAAkBA,mBAAA;AAAA,EACtB;AACF,CAAA;AAsYO,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAUC,iBAAW,eAAe,CAAA;AAC1C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,OAAA;AACT;;;ACjaO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,QAAA,EAAU,UAAA,KAAe,WAAA,EAAY;AACtE,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,UAAU,UAAA,EAAW;AACzD;;;ACNO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,KAAY,WAAA,EAAY;AAC5D,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,EAAQ;AAC/C;ACEO,SAAS,mBAAA,GAId;AACA,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,WAAA,EAAY;AAChC,EAAA,MAAM,CAAC,cAAA,EAAgB,iBAAiB,CAAA,GAAIC,cAAAA,CAAiC,EAAE,CAAA;AAC/E,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIA,eAAuC,IAAI,CAAA;AACjF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,eAAS,KAAK,CAAA;AAE9C,EAAAC,gBAAU,MAAM;AACd,IAAA,IAAI,OAAA,GAAU,IAAA;AAEd,IAAA,eAAe,WAAA,GAAc;AAC3B,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,uBAAA,CAAyB,CAAA;AAEhE,QAAA,IAAI,CAAC,OAAA,EAAS;AAEd,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,OAAA,CAAQ,IAAA,CAAK,2DAAA,EAA6D,QAAA,CAAS,UAAU,CAAA;AAC7F,UAAA,iBAAA,CAAkB,EAAE,CAAA;AACpB,UAAA,cAAA,CAAe,IAAI,CAAA;AAAA,QACrB,CAAA,MAAO;AACL,UAAA,MAAM,IAAA,GAA2E,MAAM,QAAA,CAAS,IAAA,EAAK;AACrG,UAAA,MAAM,aAAA,GAAgB,KAAK,SAAA,EAAW,GAAA,CAAI,CAAC,CAAA,KAA2B,CAAA,CAAE,QAAQ,CAAA,IAAK,EAAC;AACtF,UAAA,iBAAA,CAAkB,aAAa,CAAA;AAC/B,UAAA,cAAA,CAAe,IAAA,CAAK,SAAS,IAAI,CAAA;AAAA,QACnC;AAEA,QAAA,WAAA,CAAY,IAAI,CAAA;AAAA,MAClB,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,2CAA2C,KAAK,CAAA;AAC7D,QAAA,IAAI,OAAA,EAAS;AACX,UAAA,iBAAA,CAAkB,EAAE,CAAA;AACpB,UAAA,cAAA,CAAe,IAAI,CAAA;AACnB,UAAA,WAAA,CAAY,IAAI,CAAA;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAEA,IAAA,WAAA,EAAY;AAEZ,IAAA,OAAO,MAAM;AACX,MAAA,OAAA,GAAU,KAAA;AAAA,IACZ,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,OAAO,CAAC,CAAA;AAEZ,EAAA,OAAO,EAAE,cAAA,EAAgB,WAAA,EAAa,QAAA,EAAS;AACjD","file":"hooks.js","sourcesContent":["\"use client\";\r\n\r\nimport {\r\n  createContext,\r\n  useContext,\r\n  useEffect,\r\n  useState,\r\n  useCallback,\r\n  useRef,\r\n  type ReactNode,\r\n} from \"react\";\r\nimport { createClient } from \"@insforge/sdk\";\r\nimport type { InsforgeUser } from \"../types\";\r\n\r\ninterface InsforgeContextValue {\r\n  // Auth state\r\n  user: InsforgeUser | null;\r\n  isLoaded: boolean;\r\n  isSignedIn: boolean;\r\n\r\n  // Auth methods\r\n  setUser: (user: InsforgeUser | null) => void;\r\n  signIn: (\r\n    email: string,\r\n    password: string\r\n  ) => Promise<\r\n    | {\r\n        user?: { id: string; email: string; name: string };\r\n        accessToken: string | null;\r\n      }\r\n    | { error: string }\r\n  >;\r\n  signUp: (\r\n    email: string,\r\n    password: string\r\n  ) => Promise<\r\n    | {\r\n        user?: { id: string; email: string; name: string };\r\n        accessToken: string | null;\r\n      }\r\n    | { error: string }\r\n  >;\r\n  signOut: () => Promise<void>;\r\n  updateUser: (data: Partial<InsforgeUser>) => Promise<void>;\r\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\r\n\r\n  // Email verification methods\r\n  sendPasswordResetCode: (email: string) => Promise<{ success: boolean; message: string } | null>;\r\n  resetPassword: (token: string, newPassword: string) => Promise<{ message: string; redirectTo?: string } | null>;\r\n  verifyEmail: (token: string) => Promise<{ accessToken: string; user?: any } | null>;\r\n\r\n  // Base config\r\n  baseUrl: string;\r\n}\r\n\r\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(\r\n  undefined\r\n);\r\n\r\nexport interface InsforgeProviderProps {\r\n  children: ReactNode;\r\n  baseUrl: string;\r\n  onAuthChange?: (user: InsforgeUser | null) => void;\r\n  // Optional: custom token sync functions (e.g., for Next.js cookie sync)\r\n  syncTokenToCookie?: (token: string) => Promise<boolean>;\r\n  clearCookie?: () => Promise<void>;\r\n}\r\n\r\n/**\r\n * Unified Insforge Provider - manages authentication state and configuration\r\n *\r\n * Manages user authentication state and provides all necessary context to child components.\r\n * Works with any React framework (Next.js, Vite, Remix, etc.).\r\n *\r\n * @example\r\n * ```tsx\r\n * // Basic usage (React/Vite)\r\n * import { InsforgeProvider } from '@insforge/react';\r\n *\r\n * export default function App() {\r\n *   return (\r\n *     <InsforgeProvider baseUrl={process.env.VITE_INSFORGE_BASE_URL}>\r\n *       {children}\r\n *     </InsforgeProvider>\r\n *   );\r\n * }\r\n * ```\r\n *\r\n * @example\r\n * ```tsx\r\n * // With cookie sync (Next.js optimization)\r\n * <InsforgeProvider\r\n *   baseUrl={baseUrl}\r\n *   syncTokenToCookie={async (token) => {\r\n *     await fetch('/api/auth', {\r\n *       method: 'POST',\r\n *       body: JSON.stringify({ token })\r\n *     });\r\n *     return true;\r\n *   }}\r\n *   clearCookie={async () => {\r\n *     await fetch('/api/auth', { method: 'DELETE' });\r\n *   }}\r\n * >\r\n *   {children}\r\n * </InsforgeProvider>\r\n * ```\r\n */\r\nexport function InsforgeProvider({\r\n  children,\r\n  baseUrl,\r\n  onAuthChange,\r\n  syncTokenToCookie,\r\n  clearCookie,\r\n}: InsforgeProviderProps) {\r\n  // Auth state\r\n  const [user, setUser] = useState<InsforgeUser | null>(null);\r\n  const [isLoaded, setIsLoaded] = useState(false);\r\n\r\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\r\n\r\n  // Initialize SDK client with lazy initialization - only runs once\r\n  const [insforge] = useState(() => createClient({ baseUrl }));\r\n\r\n  // Load auth state - returns explicit success/error status\r\n  const loadAuthState = useCallback(async (): Promise<{\r\n    success: boolean;\r\n    error?: string;\r\n  }> => {\r\n    try {\r\n      // Use SDK's getCurrentSession() to check for existing session\r\n      const sessionResult = insforge.auth.getCurrentSession();\r\n      const session = sessionResult.data?.session;\r\n      const token = session?.accessToken || null;\r\n\r\n      if (!token) {\r\n        // No token, user is not authenticated\r\n        setUser(null);\r\n        if (onAuthChange) {\r\n          onAuthChange(null);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: false, error: \"no_session\" };\r\n      }\r\n\r\n      const userResult = await insforge.auth.getCurrentUser();\r\n\r\n      if (userResult.data) {\r\n        // Token is valid, update user state with fresh data\r\n        const profile = userResult.data.profile;\r\n        const userData: InsforgeUser = {\r\n          id: userResult.data.user.id,\r\n          email: userResult.data.user.email,\r\n          name: (profile?.nickname as string | undefined) || \"\",\r\n          avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: true };\r\n      } else {\r\n        // Token invalid or expired\r\n        await insforge.auth.signOut();\r\n\r\n        // Clear cookie if function provided\r\n        if (clearCookie) {\r\n          try {\r\n            await clearCookie();\r\n          } catch (error) {\r\n            // Ignore errors\r\n          }\r\n        }\r\n\r\n        setUser(null);\r\n        if (onAuthChange) {\r\n          onAuthChange(null);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: false, error: \"invalid_token\" };\r\n      }\r\n    } catch (error) {\r\n      // Token validation failed\r\n      console.error(\"[InsforgeProvider] Token validation failed:\", error);\r\n\r\n      await insforge.auth.signOut();\r\n\r\n      // Clear cookie if function provided\r\n      if (clearCookie) {\r\n        try {\r\n          await clearCookie();\r\n        } catch (error) {\r\n          // Ignore errors\r\n        }\r\n      }\r\n\r\n      setUser(null);\r\n      if (onAuthChange) {\r\n        onAuthChange(null);\r\n      }\r\n      setIsLoaded(true);\r\n\r\n      return {\r\n        success: false,\r\n        error: error instanceof Error ? error.message : \"authentication_failed\",\r\n      };\r\n    }\r\n  }, [insforge, onAuthChange, syncTokenToCookie, clearCookie]);\r\n\r\n  useEffect(() => {\r\n    // Run loadAuthState only once on mount\r\n    loadAuthState();\r\n\r\n    return () => {\r\n      if (refreshIntervalRef.current) {\r\n        clearInterval(refreshIntervalRef.current);\r\n      }\r\n    };\r\n  }, []); // Empty deps - run only on mount\r\n\r\n  /**\r\n   * Helper function to handle successful authentication\r\n   */\r\n  const handleAuthSuccess = useCallback(\r\n    async (\r\n      authToken: string,\r\n      fallbackUser?: { id?: string; email?: string; name?: string }\r\n    ) => {\r\n      const userResult = await insforge.auth.getCurrentUser();\r\n\r\n      if (userResult.data) {\r\n        const profile = userResult.data.profile;\r\n        const userData: InsforgeUser = {\r\n          id: userResult.data.user.id,\r\n          email: userResult.data.user.email,\r\n          name: (profile?.nickname as string | undefined) || \"\",\r\n          avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n\r\n        // Try to sync token to cookie if function provided\r\n        if (syncTokenToCookie) {\r\n          try {\r\n            await syncTokenToCookie(authToken);\r\n          } catch (error) {\r\n            // Cookie sync failed - that's okay\r\n          }\r\n        }\r\n      } else if (fallbackUser) {\r\n        // Fallback to basic user data if getCurrentUser fails\r\n        const userData: InsforgeUser = {\r\n          id: fallbackUser.id || \"\",\r\n          email: fallbackUser.email || \"\",\r\n          name: fallbackUser.name || \"\",\r\n          avatarUrl: \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n      }\r\n    },\r\n    [insforge, onAuthChange, syncTokenToCookie]\r\n  );\r\n\r\n  const signIn = useCallback(\r\n    async (email: string, password: string) => {\r\n      const sdkResult = await insforge.auth.signInWithPassword({\r\n        email,\r\n        password,\r\n      });\r\n\r\n      if (sdkResult.data) {\r\n        await handleAuthSuccess(\r\n          sdkResult.data.accessToken || \"\",\r\n          sdkResult.data.user\r\n            ? {\r\n                id: sdkResult.data.user.id,\r\n                email: sdkResult.data.user.email,\r\n                name: sdkResult.data.user.name,\r\n              }\r\n            : undefined\r\n        );\r\n        return sdkResult.data;\r\n      } else {\r\n        const errorMessage =\r\n          sdkResult.error?.message || \"Invalid email or password\";\r\n        return { error: errorMessage };\r\n      }\r\n    },\r\n    [insforge, handleAuthSuccess]\r\n  );\r\n\r\n  const signUp = useCallback(\r\n    async (email: string, password: string) => {\r\n      const sdkResult = await insforge.auth.signUp({ email, password });\r\n\r\n      if (sdkResult.data) {\r\n        await handleAuthSuccess(\r\n          sdkResult.data.accessToken || \"\",\r\n          sdkResult.data.user\r\n            ? {\r\n                id: sdkResult.data.user.id,\r\n                email: sdkResult.data.user.email,\r\n                name: sdkResult.data.user.name,\r\n              }\r\n            : undefined\r\n        );\r\n        return sdkResult.data;\r\n      } else {\r\n        const errorMessage = sdkResult.error?.message || \"Sign up failed\";\r\n        return { error: errorMessage };\r\n      }\r\n    },\r\n    [insforge, handleAuthSuccess]\r\n  );\r\n\r\n  const signOut = useCallback(async () => {\r\n    await insforge.auth.signOut();\r\n\r\n    // Clear cookie if function provided\r\n    if (clearCookie) {\r\n      try {\r\n        await clearCookie();\r\n      } catch (error) {\r\n        // Ignore errors\r\n      }\r\n    }\r\n\r\n    // Clear refresh interval if exists\r\n    if (refreshIntervalRef.current) {\r\n      clearInterval(refreshIntervalRef.current);\r\n    }\r\n\r\n    setUser(null);\r\n    if (onAuthChange) {\r\n      onAuthChange(null);\r\n    }\r\n  }, [insforge, onAuthChange, clearCookie]);\r\n\r\n  const updateUser = useCallback(\r\n    async (data: Partial<InsforgeUser>) => {\r\n      if (!user) throw new Error(\"No user signed in\");\r\n\r\n      const profileUpdate: Record<string, any> = {\r\n        nickname: data.name,\r\n        avatarUrl: data.avatarUrl,\r\n      };\r\n\r\n      const result = await insforge.auth.setProfile(profileUpdate);\r\n\r\n      if (result.data) {\r\n        const userResult = await insforge.auth.getCurrentUser();\r\n        if (userResult.data) {\r\n          const profile = userResult.data.profile;\r\n          const updatedUser: InsforgeUser = {\r\n            id: userResult.data.user.id,\r\n            email: userResult.data.user.email,\r\n            name: (profile?.nickname as string | undefined) || \"\",\r\n            avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n          };\r\n          setUser(updatedUser);\r\n          if (onAuthChange) {\r\n            onAuthChange(updatedUser);\r\n          }\r\n        }\r\n      }\r\n    },\r\n    [user, onAuthChange, insforge]\r\n  );\r\n\r\n  const  sendPasswordResetCode = useCallback(\r\n    async (email: string) => {\r\n      const sdkResult = await insforge.auth.sendPasswordResetCode({ email });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  const resetPassword = useCallback(\r\n    async (token: string, newPassword: string) => {\r\n      const sdkResult = await insforge.auth.resetPassword({ newPassword, otp: token });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  const verifyEmail = useCallback(\r\n    async (token: string) => {\r\n      const sdkResult = await insforge.auth.verifyEmail({ otp: token });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  return (\r\n    <InsforgeContext.Provider\r\n      value={{\r\n        user,\r\n        isLoaded,\r\n        isSignedIn: !!user,\r\n        setUser,\r\n        signIn,\r\n        signUp,\r\n        signOut,\r\n        updateUser,\r\n        reloadAuth: loadAuthState,\r\n        baseUrl,\r\n        sendPasswordResetCode,\r\n        resetPassword,\r\n        verifyEmail,\r\n      }}\r\n    >\r\n      {children}\r\n    </InsforgeContext.Provider>\r\n  );\r\n}\r\n\r\n/**\r\n * Hook to access Insforge context\r\n *\r\n * @example\r\n * ```tsx\r\n * function MyComponent() {\r\n *   const { user, isSignedIn, signOut } = useInsforge();\r\n *\r\n *   if (!isSignedIn) return <SignIn />;\r\n *\r\n *   return (\r\n *     <div>\r\n *       <p>Welcome {user.email}</p>\r\n *       <button onClick={signOut}>Sign Out</button>\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useInsforge(): InsforgeContextValue {\r\n  const context = useContext(InsforgeContext);\r\n  if (!context) {\r\n    throw new Error(\"useInsforge must be used within InsforgeProvider\");\r\n  }\r\n  return context;\r\n}\r\n","import { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to access authentication methods\r\n * \r\n * @returns Object containing:\r\n *   - `signIn`: Function to sign in with email and password\r\n *   - `signUp`: Function to sign up with email and password\r\n *   - `signOut`: Function to sign out the current user\r\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\r\n *   - `isSignedIn`: Boolean indicating if user is currently signed in\r\n * \r\n * @example\r\n * ```tsx\r\n * function LoginForm() {\r\n *   const { signIn, signUp, signOut, isLoaded, isSignedIn } = useAuth();\r\n *   \r\n *   async function handleLogin(email: string, password: string) {\r\n *     try {\r\n *       await signIn(email, password);\r\n *       // User is now signed in\r\n *     } catch (error) {\r\n *       console.error('Sign in failed:', error);\r\n *     }\r\n *   }\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   \r\n *   return (\r\n *     <form onSubmit={(e) => { e.preventDefault(); handleLogin(email, password); }}>\r\n *       {/* form fields *\\/}\r\n *     </form>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useAuth() {\r\n  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();\r\n  return { signIn, signUp, signOut, isLoaded, isSignedIn };\r\n}\r\n\r\n","import { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to access current user data\r\n * \r\n * @returns Object containing:\r\n *   - `user`: Current user object (InsforgeUser | null)\r\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\r\n *   - `updateUser`: Function to update user profile data\r\n *   - `setUser`: Internal function to manually set user state\r\n * \r\n * @example\r\n * ```tsx\r\n * function UserProfile() {\r\n *   const { user, isLoaded, updateUser } = useUser();\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   if (!user) return <div>Not signed in</div>;\r\n *   \r\n *   async function handleUpdate(name: string) {\r\n *     await updateUser({ name });\r\n *   }\r\n *   \r\n *   return (\r\n *     <div>\r\n *       <p>Email: {user.email}</p>\r\n *       {user.name && <p>Name: {user.name}</p>}\r\n *       {user.avatarUrl && <img src={user.avatarUrl} alt=\"Avatar\" />}\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useUser() {\r\n  const { user, isLoaded, updateUser, setUser } = useInsforge();\r\n  return { user, isLoaded, updateUser, setUser };\r\n}\r\n\r\n","import { useState, useEffect } from 'react';\r\nimport type { \r\n  OAuthProvidersSchema,\r\n  PublicEmailAuthConfig,\r\n  PublicOAuthProvider \r\n} from '@insforge/shared-schemas';\r\nimport { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to get all public authentication configuration (OAuth + Email) from Insforge backend\r\n *\r\n * **IMPORTANT: This hook should ONLY be used in SignIn and SignUp components.**\r\n *\r\n * This hook lazily fetches all public authentication configuration from the backend\r\n * only when the component mounts. Using it in other components will cause unnecessary\r\n * API calls on every page load.\r\n *\r\n * @returns Object containing OAuth providers, email auth config, and loading state\r\n *\r\n * @example\r\n * ```tsx\r\n * // ✅ Correct usage - only in SignIn/SignUp components\r\n * function SignUp() {\r\n *   const { oauthProviders, emailConfig, isLoaded } = usePublicAuthConfig();\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   \r\n *   return (\r\n *     <div>\r\n *       <p>OAuth providers: {oauthProviders.length}</p>\r\n *       <p>Password min length: {emailConfig?.passwordMinLength}</p>\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n *\r\n * @requires Must be used within InsforgeProvider\r\n */\r\nexport function usePublicAuthConfig(): { \r\n  oauthProviders: OAuthProvidersSchema[];\r\n  emailConfig: PublicEmailAuthConfig | null;\r\n  isLoaded: boolean;\r\n} {\r\n  const { baseUrl } = useInsforge();\r\n  const [oauthProviders, setOAuthProviders] = useState<OAuthProvidersSchema[]>([]);\r\n  const [emailConfig, setEmailConfig] = useState<PublicEmailAuthConfig | null>(null);\r\n  const [isLoaded, setIsLoaded] = useState(false);\r\n\r\n  useEffect(() => {\r\n    let mounted = true;\r\n\r\n    async function fetchConfig() {\r\n      try {\r\n        const response = await fetch(`${baseUrl}/api/auth/public-config`);\r\n        \r\n        if (!mounted) return;\r\n\r\n        if (!response.ok) {\r\n          console.warn('[usePublicAuthConfig] Failed to fetch public auth config:', response.statusText);\r\n          setOAuthProviders([]);\r\n          setEmailConfig(null);\r\n        } else {\r\n          const data: { providers: PublicOAuthProvider[], email: PublicEmailAuthConfig } = await response.json();\r\n          const providerNames = data.providers?.map((p: PublicOAuthProvider) => p.provider) || [];\r\n          setOAuthProviders(providerNames);\r\n          setEmailConfig(data.email || null);\r\n        }\r\n        \r\n        setIsLoaded(true);\r\n      } catch (error) {\r\n        console.warn('[usePublicAuthConfig] Unexpected error:', error);\r\n        if (mounted) {\r\n          setOAuthProviders([]);\r\n          setEmailConfig(null);\r\n          setIsLoaded(true);\r\n        }\r\n      }\r\n    }\r\n\r\n    fetchConfig();\r\n\r\n    return () => {\r\n      mounted = false;\r\n    };\r\n  }, [baseUrl]);\r\n\r\n  return { oauthProviders, emailConfig, isLoaded };\r\n}\r\n\r\n"]}
+{"version":3,"sources":["../src/provider/InsforgeProvider.tsx","../src/hooks/useAuth.ts","../src/hooks/useUser.ts","../src/hooks/usePublicAuthConfig.ts"],"names":["createContext","useContext","useState","useEffect"],"mappings":";;;;;;AAiEA,IAAM,eAAA,GAAkBA,mBAAA;AAAA,EACtB;AACF,CAAA;AA4ZO,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAUC,iBAAW,eAAe,CAAA;AAC1C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,OAAA;AACT;;;ACjcO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,QAAA,EAAU,UAAA,KAAe,WAAA,EAAY;AACtE,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,UAAU,UAAA,EAAW;AACzD;;;ACNO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,KAAY,WAAA,EAAY;AAC5D,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,EAAQ;AAC/C;ACGO,SAAS,mBAAA,GAGd;AACA,EAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,WAAA,EAAY;AAC5C,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIC,eAA6C,IAAI,CAAA;AACvF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,eAAS,KAAK,CAAA;AAE9C,EAAAC,gBAAU,MAAM;AACd,IAAA,eAAe,WAAA,GAAc;AAC3B,MAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,EAAoB;AACzC,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,cAAA,CAAe,MAAM,CAAA;AAAA,MACvB,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,MAAM,wDAAwD,CAAA;AACtE,QAAA,cAAA,CAAe,IAAI,CAAA;AAAA,MACrB;AACA,MAAA,WAAA,CAAY,IAAI,CAAA;AAAA,IAClB;AAEA,IAAA,WAAA,EAAY;AAAA,EACd,CAAA,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAExB,EAAA,OAAO,EAAE,aAAa,QAAA,EAAS;AACjC","file":"hooks.js","sourcesContent":["\"use client\";\r\n\r\nimport {\r\n  createContext,\r\n  useContext,\r\n  useEffect,\r\n  useState,\r\n  useCallback,\r\n  useRef,\r\n  type ReactNode,\r\n} from \"react\";\r\nimport { createClient } from \"@insforge/sdk\";\r\nimport type { InsforgeUser } from \"../types\";\r\nimport { GetPublicAuthConfigResponse } from \"@insforge/shared-schemas\";\r\n\r\ninterface InsforgeContextValue {\r\n  // Auth state\r\n  user: InsforgeUser | null;\r\n  isLoaded: boolean;\r\n  isSignedIn: boolean;\r\n\r\n  // Auth methods\r\n  setUser: (user: InsforgeUser | null) => void;\r\n  signIn: (\r\n    email: string,\r\n    password: string\r\n  ) => Promise<\r\n    | {\r\n        user?: { id: string; email: string; name: string };\r\n        accessToken: string | null;\r\n      }\r\n    | { error: string }\r\n  >;\r\n  signUp: (\r\n    email: string,\r\n    password: string\r\n  ) => Promise<\r\n    | {\r\n        user?: { id: string; email: string; name: string };\r\n        accessToken: string | null;\r\n      }\r\n    | { error: string }\r\n  >;\r\n  signOut: () => Promise<void>;\r\n  updateUser: (data: Partial<InsforgeUser>) => Promise<void>;\r\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\r\n\r\n  // Email verification methods\r\n  sendPasswordResetCode: (\r\n    email: string\r\n  ) => Promise<{ success: boolean; message: string } | null>;\r\n  resetPassword: (\r\n    token: string,\r\n    newPassword: string\r\n  ) => Promise<{ message: string; redirectTo?: string } | null>;\r\n  verifyEmail: (\r\n    token: string\r\n  ) => Promise<{ accessToken: string; user?: any } | null>;\r\n\r\n  // Public auth config\r\n  getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;\r\n  // Base config\r\n  baseUrl: string;\r\n}\r\n\r\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(\r\n  undefined\r\n);\r\n\r\nexport interface InsforgeProviderProps {\r\n  children: ReactNode;\r\n  baseUrl: string;\r\n  onAuthChange?: (user: InsforgeUser | null) => void;\r\n  // Optional: custom token sync functions (e.g., for Next.js cookie sync)\r\n  syncTokenToCookie?: (token: string) => Promise<boolean>;\r\n  clearCookie?: () => Promise<void>;\r\n}\r\n\r\n/**\r\n * Unified Insforge Provider - manages authentication state and configuration\r\n *\r\n * Manages user authentication state and provides all necessary context to child components.\r\n * Works with any React framework (Next.js, Vite, Remix, etc.).\r\n *\r\n * @example\r\n * ```tsx\r\n * // Basic usage (React/Vite)\r\n * import { InsforgeProvider } from '@insforge/react';\r\n *\r\n * export default function App() {\r\n *   return (\r\n *     <InsforgeProvider baseUrl={process.env.VITE_INSFORGE_BASE_URL}>\r\n *       {children}\r\n *     </InsforgeProvider>\r\n *   );\r\n * }\r\n * ```\r\n *\r\n * @example\r\n * ```tsx\r\n * // With cookie sync (Next.js optimization)\r\n * <InsforgeProvider\r\n *   baseUrl={baseUrl}\r\n *   syncTokenToCookie={async (token) => {\r\n *     await fetch('/api/auth', {\r\n *       method: 'POST',\r\n *       body: JSON.stringify({ token })\r\n *     });\r\n *     return true;\r\n *   }}\r\n *   clearCookie={async () => {\r\n *     await fetch('/api/auth', { method: 'DELETE' });\r\n *   }}\r\n * >\r\n *   {children}\r\n * </InsforgeProvider>\r\n * ```\r\n */\r\nexport function InsforgeProvider({\r\n  children,\r\n  baseUrl,\r\n  onAuthChange,\r\n  syncTokenToCookie,\r\n  clearCookie,\r\n}: InsforgeProviderProps) {\r\n  // Auth state\r\n  const [user, setUser] = useState<InsforgeUser | null>(null);\r\n  const [isLoaded, setIsLoaded] = useState(false);\r\n\r\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\r\n\r\n  // Initialize SDK client with lazy initialization - only runs once\r\n  const [insforge] = useState(() => createClient({ baseUrl }));\r\n\r\n  // Load auth state - returns explicit success/error status\r\n  const loadAuthState = useCallback(async (): Promise<{\r\n    success: boolean;\r\n    error?: string;\r\n  }> => {\r\n    try {\r\n      // Use SDK's getCurrentSession() to check for existing session\r\n      const sessionResult = insforge.auth.getCurrentSession();\r\n      const session = sessionResult.data?.session;\r\n      const token = session?.accessToken || null;\r\n\r\n      if (!token) {\r\n        // No token, user is not authenticated\r\n        setUser(null);\r\n        if (onAuthChange) {\r\n          onAuthChange(null);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: false, error: \"no_session\" };\r\n      }\r\n\r\n      const userResult = await insforge.auth.getCurrentUser();\r\n\r\n      if (userResult.data) {\r\n        // Token is valid, update user state with fresh data\r\n        const profile = userResult.data.profile;\r\n        const userData: InsforgeUser = {\r\n          id: userResult.data.user.id,\r\n          email: userResult.data.user.email,\r\n          name: (profile?.nickname as string | undefined) || \"\",\r\n          avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: true };\r\n      } else {\r\n        // Token invalid or expired\r\n        await insforge.auth.signOut();\r\n\r\n        // Clear cookie if function provided\r\n        if (clearCookie) {\r\n          try {\r\n            await clearCookie();\r\n          } catch (error) {\r\n            // Ignore errors\r\n          }\r\n        }\r\n\r\n        setUser(null);\r\n        if (onAuthChange) {\r\n          onAuthChange(null);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: false, error: \"invalid_token\" };\r\n      }\r\n    } catch (error) {\r\n      // Token validation failed\r\n      console.error(\"[InsforgeProvider] Token validation failed:\", error);\r\n\r\n      await insforge.auth.signOut();\r\n\r\n      // Clear cookie if function provided\r\n      if (clearCookie) {\r\n        try {\r\n          await clearCookie();\r\n        } catch (error) {\r\n          // Ignore errors\r\n        }\r\n      }\r\n\r\n      setUser(null);\r\n      if (onAuthChange) {\r\n        onAuthChange(null);\r\n      }\r\n      setIsLoaded(true);\r\n\r\n      return {\r\n        success: false,\r\n        error: error instanceof Error ? error.message : \"authentication_failed\",\r\n      };\r\n    }\r\n  }, [insforge, onAuthChange, syncTokenToCookie, clearCookie]);\r\n\r\n  useEffect(() => {\r\n    // Run loadAuthState only once on mount\r\n    loadAuthState();\r\n\r\n    return () => {\r\n      if (refreshIntervalRef.current) {\r\n        clearInterval(refreshIntervalRef.current);\r\n      }\r\n    };\r\n  }, []); // Empty deps - run only on mount\r\n\r\n  const getPublicAuthConfig = useCallback(async () => {\r\n    try {\r\n      const result = await insforge.auth.getPublicAuthConfig();\r\n      if (result.data) {\r\n        return result.data;\r\n      } else {\r\n        console.error('[InsforgeProvider] Failed to get public auth config:', result.error);\r\n        return null;\r\n      }\r\n    } catch (error) {\r\n      console.error(\r\n        \"[InsforgeProvider] Failed to get public auth config:\",\r\n        error\r\n      );\r\n      return null;\r\n    }\r\n  }, [insforge]);\r\n\r\n  /**\r\n   * Helper function to handle successful authentication\r\n   */\r\n  const handleAuthSuccess = useCallback(\r\n    async (\r\n      authToken: string,\r\n      fallbackUser?: { id?: string; email?: string; name?: string }\r\n    ) => {\r\n      const userResult = await insforge.auth.getCurrentUser();\r\n\r\n      if (userResult.data) {\r\n        const profile = userResult.data.profile;\r\n        const userData: InsforgeUser = {\r\n          id: userResult.data.user.id,\r\n          email: userResult.data.user.email,\r\n          name: (profile?.nickname as string | undefined) || \"\",\r\n          avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n\r\n        // Try to sync token to cookie if function provided\r\n        if (syncTokenToCookie) {\r\n          try {\r\n            await syncTokenToCookie(authToken);\r\n          } catch (error) {\r\n            // Cookie sync failed - that's okay\r\n          }\r\n        }\r\n      } else if (fallbackUser) {\r\n        // Fallback to basic user data if getCurrentUser fails\r\n        const userData: InsforgeUser = {\r\n          id: fallbackUser.id || \"\",\r\n          email: fallbackUser.email || \"\",\r\n          name: fallbackUser.name || \"\",\r\n          avatarUrl: \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n      }\r\n    },\r\n    [insforge, onAuthChange, syncTokenToCookie]\r\n  );\r\n\r\n  const signIn = useCallback(\r\n    async (email: string, password: string) => {\r\n      const sdkResult = await insforge.auth.signInWithPassword({\r\n        email,\r\n        password,\r\n      });\r\n\r\n      if (sdkResult.data) {\r\n        await handleAuthSuccess(\r\n          sdkResult.data.accessToken || \"\",\r\n          sdkResult.data.user\r\n            ? {\r\n                id: sdkResult.data.user.id,\r\n                email: sdkResult.data.user.email,\r\n                name: sdkResult.data.user.name,\r\n              }\r\n            : undefined\r\n        );\r\n        return sdkResult.data;\r\n      } else {\r\n        const errorMessage =\r\n          sdkResult.error?.message || \"Invalid email or password\";\r\n        return { error: errorMessage };\r\n      }\r\n    },\r\n    [insforge, handleAuthSuccess]\r\n  );\r\n\r\n  const signUp = useCallback(\r\n    async (email: string, password: string) => {\r\n      const sdkResult = await insforge.auth.signUp({ email, password });\r\n\r\n      if (sdkResult.data) {\r\n        await handleAuthSuccess(\r\n          sdkResult.data.accessToken || \"\",\r\n          sdkResult.data.user\r\n            ? {\r\n                id: sdkResult.data.user.id,\r\n                email: sdkResult.data.user.email,\r\n                name: sdkResult.data.user.name,\r\n              }\r\n            : undefined\r\n        );\r\n        return sdkResult.data;\r\n      } else {\r\n        const errorMessage = sdkResult.error?.message || \"Sign up failed\";\r\n        return { error: errorMessage };\r\n      }\r\n    },\r\n    [insforge, handleAuthSuccess]\r\n  );\r\n\r\n  const signOut = useCallback(async () => {\r\n    await insforge.auth.signOut();\r\n\r\n    // Clear cookie if function provided\r\n    if (clearCookie) {\r\n      try {\r\n        await clearCookie();\r\n      } catch (error) {\r\n        // Ignore errors\r\n      }\r\n    }\r\n\r\n    // Clear refresh interval if exists\r\n    if (refreshIntervalRef.current) {\r\n      clearInterval(refreshIntervalRef.current);\r\n    }\r\n\r\n    setUser(null);\r\n    if (onAuthChange) {\r\n      onAuthChange(null);\r\n    }\r\n  }, [insforge, onAuthChange, clearCookie]);\r\n\r\n  const updateUser = useCallback(\r\n    async (data: Partial<InsforgeUser>) => {\r\n      if (!user) throw new Error(\"No user signed in\");\r\n\r\n      const profileUpdate: Record<string, any> = {\r\n        nickname: data.name,\r\n        avatarUrl: data.avatarUrl,\r\n      };\r\n\r\n      const result = await insforge.auth.setProfile(profileUpdate);\r\n\r\n      if (result.data) {\r\n        const userResult = await insforge.auth.getCurrentUser();\r\n        if (userResult.data) {\r\n          const profile = userResult.data.profile;\r\n          const updatedUser: InsforgeUser = {\r\n            id: userResult.data.user.id,\r\n            email: userResult.data.user.email,\r\n            name: (profile?.nickname as string | undefined) || \"\",\r\n            avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n          };\r\n          setUser(updatedUser);\r\n          if (onAuthChange) {\r\n            onAuthChange(updatedUser);\r\n          }\r\n        }\r\n      }\r\n    },\r\n    [user, onAuthChange, insforge]\r\n  );\r\n\r\n  const sendPasswordResetCode = useCallback(\r\n    async (email: string) => {\r\n      const sdkResult = await insforge.auth.sendPasswordResetCode({ email });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  const resetPassword = useCallback(\r\n    async (token: string, newPassword: string) => {\r\n      const sdkResult = await insforge.auth.resetPassword({\r\n        newPassword,\r\n        otp: token,\r\n      });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  const verifyEmail = useCallback(\r\n    async (token: string) => {\r\n      const sdkResult = await insforge.auth.verifyEmail({ otp: token });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  return (\r\n    <InsforgeContext.Provider\r\n      value={{\r\n        user,\r\n        isLoaded,\r\n        isSignedIn: !!user,\r\n        setUser,\r\n        signIn,\r\n        signUp,\r\n        signOut,\r\n        updateUser,\r\n        reloadAuth: loadAuthState,\r\n        baseUrl,\r\n        sendPasswordResetCode,\r\n        resetPassword,\r\n        verifyEmail,\r\n        getPublicAuthConfig,\r\n      }}\r\n    >\r\n      {children}\r\n    </InsforgeContext.Provider>\r\n  );\r\n}\r\n\r\n/**\r\n * Hook to access Insforge context\r\n *\r\n * @example\r\n * ```tsx\r\n * function MyComponent() {\r\n *   const { user, isSignedIn, signOut } = useInsforge();\r\n *\r\n *   if (!isSignedIn) return <SignIn />;\r\n *\r\n *   return (\r\n *     <div>\r\n *       <p>Welcome {user.email}</p>\r\n *       <button onClick={signOut}>Sign Out</button>\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useInsforge(): InsforgeContextValue {\r\n  const context = useContext(InsforgeContext);\r\n  if (!context) {\r\n    throw new Error(\"useInsforge must be used within InsforgeProvider\");\r\n  }\r\n  return context;\r\n}\r\n","import { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to access authentication methods\r\n * \r\n * @returns Object containing:\r\n *   - `signIn`: Function to sign in with email and password\r\n *   - `signUp`: Function to sign up with email and password\r\n *   - `signOut`: Function to sign out the current user\r\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\r\n *   - `isSignedIn`: Boolean indicating if user is currently signed in\r\n * \r\n * @example\r\n * ```tsx\r\n * function LoginForm() {\r\n *   const { signIn, signUp, signOut, isLoaded, isSignedIn } = useAuth();\r\n *   \r\n *   async function handleLogin(email: string, password: string) {\r\n *     try {\r\n *       await signIn(email, password);\r\n *       // User is now signed in\r\n *     } catch (error) {\r\n *       console.error('Sign in failed:', error);\r\n *     }\r\n *   }\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   \r\n *   return (\r\n *     <form onSubmit={(e) => { e.preventDefault(); handleLogin(email, password); }}>\r\n *       {/* form fields *\\/}\r\n *     </form>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useAuth() {\r\n  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();\r\n  return { signIn, signUp, signOut, isLoaded, isSignedIn };\r\n}\r\n\r\n","import { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to access current user data\r\n * \r\n * @returns Object containing:\r\n *   - `user`: Current user object (InsforgeUser | null)\r\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\r\n *   - `updateUser`: Function to update user profile data\r\n *   - `setUser`: Internal function to manually set user state\r\n * \r\n * @example\r\n * ```tsx\r\n * function UserProfile() {\r\n *   const { user, isLoaded, updateUser } = useUser();\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   if (!user) return <div>Not signed in</div>;\r\n *   \r\n *   async function handleUpdate(name: string) {\r\n *     await updateUser({ name });\r\n *   }\r\n *   \r\n *   return (\r\n *     <div>\r\n *       <p>Email: {user.email}</p>\r\n *       {user.name && <p>Name: {user.name}</p>}\r\n *       {user.avatarUrl && <img src={user.avatarUrl} alt=\"Avatar\" />}\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useUser() {\r\n  const { user, isLoaded, updateUser, setUser } = useInsforge();\r\n  return { user, isLoaded, updateUser, setUser };\r\n}\r\n\r\n","import { useState, useEffect } from 'react';\r\nimport type {\r\n  GetPublicAuthConfigResponse\r\n} from '@insforge/shared-schemas';\r\nimport { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to get all public authentication configuration (OAuth + Email) from Insforge backend\r\n *\r\n * **IMPORTANT: This hook should ONLY be used in SignIn and SignUp components.**\r\n *\r\n * This hook lazily fetches all public authentication configuration from the backend\r\n * only when the component mounts. Using it in other components will cause unnecessary\r\n * API calls on every page load.\r\n *\r\n * @returns Object containing OAuth providers, email auth config, and loading state\r\n * - `oauthProviders`: Array of enabled OAuth provider names (e.g., ['google', 'github'])\r\n * - `emailConfig`: Email authentication configuration object with password rules\r\n * - `isLoaded`: Boolean indicating if the config has been fetched\r\n *\r\n * @example\r\n * ```tsx\r\n * // ✅ Correct usage - only in SignIn/SignUp components\r\n * function SignUp() {\r\n *   const { oauthProviders, emailConfig, isLoaded } = usePublicAuthConfig();\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   \r\n *   return (\r\n *     <div>\r\n *       <p>OAuth providers: {oauthProviders.length}</p>\r\n *       <p>Password min length: {emailConfig?.passwordMinLength}</p>\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n *\r\n * @requires Must be used within InsforgeProvider\r\n */\r\nexport function usePublicAuthConfig(): {\r\n  emailConfig: GetPublicAuthConfigResponse | null;\r\n  isLoaded: boolean;\r\n} {\r\n  const { getPublicAuthConfig } = useInsforge();\r\n  const [emailConfig, setEmailConfig] = useState<GetPublicAuthConfigResponse | null>(null);\r\n  const [isLoaded, setIsLoaded] = useState(false);\r\n\r\n  useEffect(() => {\r\n    async function fetchConfig() {\r\n      const result = await getPublicAuthConfig();\r\n      if (result) {\r\n        setEmailConfig(result);\r\n      } else {\r\n        console.error('[usePublicAuthConfig] Failed to get public auth config');\r\n        setEmailConfig(null);\r\n      }\r\n      setIsLoaded(true);\r\n    }\r\n\r\n    fetchConfig();\r\n  }, [getPublicAuthConfig]);\r\n\r\n  return { emailConfig, isLoaded };\r\n}\r\n\r\n"]}

package/dist/hooks.mjs

@@ -25,42 +25,23 @@ function useUser() {
   return { user, isLoaded, updateUser, setUser };
 }
 function usePublicAuthConfig() {
-  const { baseUrl } = useInsforge();
-  const [oauthProviders, setOAuthProviders] = useState([]);
+  const { getPublicAuthConfig } = useInsforge();
   const [emailConfig, setEmailConfig] = useState(null);
   const [isLoaded, setIsLoaded] = useState(false);
   useEffect(() => {
-    let mounted = true;
     async function fetchConfig() {
-      try {
-        const response = await fetch(`${baseUrl}/api/auth/public-config`);
-        if (!mounted) return;
-        if (!response.ok) {
-          console.warn("[usePublicAuthConfig] Failed to fetch public auth config:", response.statusText);
-          setOAuthProviders([]);
-          setEmailConfig(null);
-        } else {
-          const data = await response.json();
-          const providerNames = data.providers?.map((p) => p.provider) || [];
-          setOAuthProviders(providerNames);
-          setEmailConfig(data.email || null);
-        }
-        setIsLoaded(true);
-      } catch (error) {
-        console.warn("[usePublicAuthConfig] Unexpected error:", error);
-        if (mounted) {
-          setOAuthProviders([]);
-          setEmailConfig(null);
-          setIsLoaded(true);
-        }
+      const result = await getPublicAuthConfig();
+      if (result) {
+        setEmailConfig(result);
+      } else {
+        console.error("[usePublicAuthConfig] Failed to get public auth config");
+        setEmailConfig(null);
       }
+      setIsLoaded(true);
     }
     fetchConfig();
-    return () => {
-      mounted = false;
-    };
-  }, [baseUrl]);
-  return { oauthProviders, emailConfig, isLoaded };
+  }, [getPublicAuthConfig]);
+  return { emailConfig, isLoaded };
 }
 
 export { useAuth, usePublicAuthConfig, useUser };

package/dist/hooks.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/provider/InsforgeProvider.tsx","../src/hooks/useAuth.ts","../src/hooks/useUser.ts","../src/hooks/usePublicAuthConfig.ts"],"names":["useState","useEffect"],"mappings":";;;;AAuDA,IAAM,eAAA,GAAkB,aAAA;AAAA,EACtB;AACF,CAAA;AAsYO,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAU,WAAW,eAAe,CAAA;AAC1C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,OAAA;AACT;;;ACjaO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,QAAA,EAAU,UAAA,KAAe,WAAA,EAAY;AACtE,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,UAAU,UAAA,EAAW;AACzD;;;ACNO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,KAAY,WAAA,EAAY;AAC5D,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,EAAQ;AAC/C;ACEO,SAAS,mBAAA,GAId;AACA,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,WAAA,EAAY;AAChC,EAAA,MAAM,CAAC,cAAA,EAAgB,iBAAiB,CAAA,GAAIA,QAAAA,CAAiC,EAAE,CAAA;AAC/E,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIA,SAAuC,IAAI,CAAA;AACjF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,SAAS,KAAK,CAAA;AAE9C,EAAAC,UAAU,MAAM;AACd,IAAA,IAAI,OAAA,GAAU,IAAA;AAEd,IAAA,eAAe,WAAA,GAAc;AAC3B,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,uBAAA,CAAyB,CAAA;AAEhE,QAAA,IAAI,CAAC,OAAA,EAAS;AAEd,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,OAAA,CAAQ,IAAA,CAAK,2DAAA,EAA6D,QAAA,CAAS,UAAU,CAAA;AAC7F,UAAA,iBAAA,CAAkB,EAAE,CAAA;AACpB,UAAA,cAAA,CAAe,IAAI,CAAA;AAAA,QACrB,CAAA,MAAO;AACL,UAAA,MAAM,IAAA,GAA2E,MAAM,QAAA,CAAS,IAAA,EAAK;AACrG,UAAA,MAAM,aAAA,GAAgB,KAAK,SAAA,EAAW,GAAA,CAAI,CAAC,CAAA,KAA2B,CAAA,CAAE,QAAQ,CAAA,IAAK,EAAC;AACtF,UAAA,iBAAA,CAAkB,aAAa,CAAA;AAC/B,UAAA,cAAA,CAAe,IAAA,CAAK,SAAS,IAAI,CAAA;AAAA,QACnC;AAEA,QAAA,WAAA,CAAY,IAAI,CAAA;AAAA,MAClB,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,2CAA2C,KAAK,CAAA;AAC7D,QAAA,IAAI,OAAA,EAAS;AACX,UAAA,iBAAA,CAAkB,EAAE,CAAA;AACpB,UAAA,cAAA,CAAe,IAAI,CAAA;AACnB,UAAA,WAAA,CAAY,IAAI,CAAA;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAEA,IAAA,WAAA,EAAY;AAEZ,IAAA,OAAO,MAAM;AACX,MAAA,OAAA,GAAU,KAAA;AAAA,IACZ,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,OAAO,CAAC,CAAA;AAEZ,EAAA,OAAO,EAAE,cAAA,EAAgB,WAAA,EAAa,QAAA,EAAS;AACjD","file":"hooks.mjs","sourcesContent":["\"use client\";\r\n\r\nimport {\r\n  createContext,\r\n  useContext,\r\n  useEffect,\r\n  useState,\r\n  useCallback,\r\n  useRef,\r\n  type ReactNode,\r\n} from \"react\";\r\nimport { createClient } from \"@insforge/sdk\";\r\nimport type { InsforgeUser } from \"../types\";\r\n\r\ninterface InsforgeContextValue {\r\n  // Auth state\r\n  user: InsforgeUser | null;\r\n  isLoaded: boolean;\r\n  isSignedIn: boolean;\r\n\r\n  // Auth methods\r\n  setUser: (user: InsforgeUser | null) => void;\r\n  signIn: (\r\n    email: string,\r\n    password: string\r\n  ) => Promise<\r\n    | {\r\n        user?: { id: string; email: string; name: string };\r\n        accessToken: string | null;\r\n      }\r\n    | { error: string }\r\n  >;\r\n  signUp: (\r\n    email: string,\r\n    password: string\r\n  ) => Promise<\r\n    | {\r\n        user?: { id: string; email: string; name: string };\r\n        accessToken: string | null;\r\n      }\r\n    | { error: string }\r\n  >;\r\n  signOut: () => Promise<void>;\r\n  updateUser: (data: Partial<InsforgeUser>) => Promise<void>;\r\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\r\n\r\n  // Email verification methods\r\n  sendPasswordResetCode: (email: string) => Promise<{ success: boolean; message: string } | null>;\r\n  resetPassword: (token: string, newPassword: string) => Promise<{ message: string; redirectTo?: string } | null>;\r\n  verifyEmail: (token: string) => Promise<{ accessToken: string; user?: any } | null>;\r\n\r\n  // Base config\r\n  baseUrl: string;\r\n}\r\n\r\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(\r\n  undefined\r\n);\r\n\r\nexport interface InsforgeProviderProps {\r\n  children: ReactNode;\r\n  baseUrl: string;\r\n  onAuthChange?: (user: InsforgeUser | null) => void;\r\n  // Optional: custom token sync functions (e.g., for Next.js cookie sync)\r\n  syncTokenToCookie?: (token: string) => Promise<boolean>;\r\n  clearCookie?: () => Promise<void>;\r\n}\r\n\r\n/**\r\n * Unified Insforge Provider - manages authentication state and configuration\r\n *\r\n * Manages user authentication state and provides all necessary context to child components.\r\n * Works with any React framework (Next.js, Vite, Remix, etc.).\r\n *\r\n * @example\r\n * ```tsx\r\n * // Basic usage (React/Vite)\r\n * import { InsforgeProvider } from '@insforge/react';\r\n *\r\n * export default function App() {\r\n *   return (\r\n *     <InsforgeProvider baseUrl={process.env.VITE_INSFORGE_BASE_URL}>\r\n *       {children}\r\n *     </InsforgeProvider>\r\n *   );\r\n * }\r\n * ```\r\n *\r\n * @example\r\n * ```tsx\r\n * // With cookie sync (Next.js optimization)\r\n * <InsforgeProvider\r\n *   baseUrl={baseUrl}\r\n *   syncTokenToCookie={async (token) => {\r\n *     await fetch('/api/auth', {\r\n *       method: 'POST',\r\n *       body: JSON.stringify({ token })\r\n *     });\r\n *     return true;\r\n *   }}\r\n *   clearCookie={async () => {\r\n *     await fetch('/api/auth', { method: 'DELETE' });\r\n *   }}\r\n * >\r\n *   {children}\r\n * </InsforgeProvider>\r\n * ```\r\n */\r\nexport function InsforgeProvider({\r\n  children,\r\n  baseUrl,\r\n  onAuthChange,\r\n  syncTokenToCookie,\r\n  clearCookie,\r\n}: InsforgeProviderProps) {\r\n  // Auth state\r\n  const [user, setUser] = useState<InsforgeUser | null>(null);\r\n  const [isLoaded, setIsLoaded] = useState(false);\r\n\r\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\r\n\r\n  // Initialize SDK client with lazy initialization - only runs once\r\n  const [insforge] = useState(() => createClient({ baseUrl }));\r\n\r\n  // Load auth state - returns explicit success/error status\r\n  const loadAuthState = useCallback(async (): Promise<{\r\n    success: boolean;\r\n    error?: string;\r\n  }> => {\r\n    try {\r\n      // Use SDK's getCurrentSession() to check for existing session\r\n      const sessionResult = insforge.auth.getCurrentSession();\r\n      const session = sessionResult.data?.session;\r\n      const token = session?.accessToken || null;\r\n\r\n      if (!token) {\r\n        // No token, user is not authenticated\r\n        setUser(null);\r\n        if (onAuthChange) {\r\n          onAuthChange(null);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: false, error: \"no_session\" };\r\n      }\r\n\r\n      const userResult = await insforge.auth.getCurrentUser();\r\n\r\n      if (userResult.data) {\r\n        // Token is valid, update user state with fresh data\r\n        const profile = userResult.data.profile;\r\n        const userData: InsforgeUser = {\r\n          id: userResult.data.user.id,\r\n          email: userResult.data.user.email,\r\n          name: (profile?.nickname as string | undefined) || \"\",\r\n          avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: true };\r\n      } else {\r\n        // Token invalid or expired\r\n        await insforge.auth.signOut();\r\n\r\n        // Clear cookie if function provided\r\n        if (clearCookie) {\r\n          try {\r\n            await clearCookie();\r\n          } catch (error) {\r\n            // Ignore errors\r\n          }\r\n        }\r\n\r\n        setUser(null);\r\n        if (onAuthChange) {\r\n          onAuthChange(null);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: false, error: \"invalid_token\" };\r\n      }\r\n    } catch (error) {\r\n      // Token validation failed\r\n      console.error(\"[InsforgeProvider] Token validation failed:\", error);\r\n\r\n      await insforge.auth.signOut();\r\n\r\n      // Clear cookie if function provided\r\n      if (clearCookie) {\r\n        try {\r\n          await clearCookie();\r\n        } catch (error) {\r\n          // Ignore errors\r\n        }\r\n      }\r\n\r\n      setUser(null);\r\n      if (onAuthChange) {\r\n        onAuthChange(null);\r\n      }\r\n      setIsLoaded(true);\r\n\r\n      return {\r\n        success: false,\r\n        error: error instanceof Error ? error.message : \"authentication_failed\",\r\n      };\r\n    }\r\n  }, [insforge, onAuthChange, syncTokenToCookie, clearCookie]);\r\n\r\n  useEffect(() => {\r\n    // Run loadAuthState only once on mount\r\n    loadAuthState();\r\n\r\n    return () => {\r\n      if (refreshIntervalRef.current) {\r\n        clearInterval(refreshIntervalRef.current);\r\n      }\r\n    };\r\n  }, []); // Empty deps - run only on mount\r\n\r\n  /**\r\n   * Helper function to handle successful authentication\r\n   */\r\n  const handleAuthSuccess = useCallback(\r\n    async (\r\n      authToken: string,\r\n      fallbackUser?: { id?: string; email?: string; name?: string }\r\n    ) => {\r\n      const userResult = await insforge.auth.getCurrentUser();\r\n\r\n      if (userResult.data) {\r\n        const profile = userResult.data.profile;\r\n        const userData: InsforgeUser = {\r\n          id: userResult.data.user.id,\r\n          email: userResult.data.user.email,\r\n          name: (profile?.nickname as string | undefined) || \"\",\r\n          avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n\r\n        // Try to sync token to cookie if function provided\r\n        if (syncTokenToCookie) {\r\n          try {\r\n            await syncTokenToCookie(authToken);\r\n          } catch (error) {\r\n            // Cookie sync failed - that's okay\r\n          }\r\n        }\r\n      } else if (fallbackUser) {\r\n        // Fallback to basic user data if getCurrentUser fails\r\n        const userData: InsforgeUser = {\r\n          id: fallbackUser.id || \"\",\r\n          email: fallbackUser.email || \"\",\r\n          name: fallbackUser.name || \"\",\r\n          avatarUrl: \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n      }\r\n    },\r\n    [insforge, onAuthChange, syncTokenToCookie]\r\n  );\r\n\r\n  const signIn = useCallback(\r\n    async (email: string, password: string) => {\r\n      const sdkResult = await insforge.auth.signInWithPassword({\r\n        email,\r\n        password,\r\n      });\r\n\r\n      if (sdkResult.data) {\r\n        await handleAuthSuccess(\r\n          sdkResult.data.accessToken || \"\",\r\n          sdkResult.data.user\r\n            ? {\r\n                id: sdkResult.data.user.id,\r\n                email: sdkResult.data.user.email,\r\n                name: sdkResult.data.user.name,\r\n              }\r\n            : undefined\r\n        );\r\n        return sdkResult.data;\r\n      } else {\r\n        const errorMessage =\r\n          sdkResult.error?.message || \"Invalid email or password\";\r\n        return { error: errorMessage };\r\n      }\r\n    },\r\n    [insforge, handleAuthSuccess]\r\n  );\r\n\r\n  const signUp = useCallback(\r\n    async (email: string, password: string) => {\r\n      const sdkResult = await insforge.auth.signUp({ email, password });\r\n\r\n      if (sdkResult.data) {\r\n        await handleAuthSuccess(\r\n          sdkResult.data.accessToken || \"\",\r\n          sdkResult.data.user\r\n            ? {\r\n                id: sdkResult.data.user.id,\r\n                email: sdkResult.data.user.email,\r\n                name: sdkResult.data.user.name,\r\n              }\r\n            : undefined\r\n        );\r\n        return sdkResult.data;\r\n      } else {\r\n        const errorMessage = sdkResult.error?.message || \"Sign up failed\";\r\n        return { error: errorMessage };\r\n      }\r\n    },\r\n    [insforge, handleAuthSuccess]\r\n  );\r\n\r\n  const signOut = useCallback(async () => {\r\n    await insforge.auth.signOut();\r\n\r\n    // Clear cookie if function provided\r\n    if (clearCookie) {\r\n      try {\r\n        await clearCookie();\r\n      } catch (error) {\r\n        // Ignore errors\r\n      }\r\n    }\r\n\r\n    // Clear refresh interval if exists\r\n    if (refreshIntervalRef.current) {\r\n      clearInterval(refreshIntervalRef.current);\r\n    }\r\n\r\n    setUser(null);\r\n    if (onAuthChange) {\r\n      onAuthChange(null);\r\n    }\r\n  }, [insforge, onAuthChange, clearCookie]);\r\n\r\n  const updateUser = useCallback(\r\n    async (data: Partial<InsforgeUser>) => {\r\n      if (!user) throw new Error(\"No user signed in\");\r\n\r\n      const profileUpdate: Record<string, any> = {\r\n        nickname: data.name,\r\n        avatarUrl: data.avatarUrl,\r\n      };\r\n\r\n      const result = await insforge.auth.setProfile(profileUpdate);\r\n\r\n      if (result.data) {\r\n        const userResult = await insforge.auth.getCurrentUser();\r\n        if (userResult.data) {\r\n          const profile = userResult.data.profile;\r\n          const updatedUser: InsforgeUser = {\r\n            id: userResult.data.user.id,\r\n            email: userResult.data.user.email,\r\n            name: (profile?.nickname as string | undefined) || \"\",\r\n            avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n          };\r\n          setUser(updatedUser);\r\n          if (onAuthChange) {\r\n            onAuthChange(updatedUser);\r\n          }\r\n        }\r\n      }\r\n    },\r\n    [user, onAuthChange, insforge]\r\n  );\r\n\r\n  const  sendPasswordResetCode = useCallback(\r\n    async (email: string) => {\r\n      const sdkResult = await insforge.auth.sendPasswordResetCode({ email });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  const resetPassword = useCallback(\r\n    async (token: string, newPassword: string) => {\r\n      const sdkResult = await insforge.auth.resetPassword({ newPassword, otp: token });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  const verifyEmail = useCallback(\r\n    async (token: string) => {\r\n      const sdkResult = await insforge.auth.verifyEmail({ otp: token });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  return (\r\n    <InsforgeContext.Provider\r\n      value={{\r\n        user,\r\n        isLoaded,\r\n        isSignedIn: !!user,\r\n        setUser,\r\n        signIn,\r\n        signUp,\r\n        signOut,\r\n        updateUser,\r\n        reloadAuth: loadAuthState,\r\n        baseUrl,\r\n        sendPasswordResetCode,\r\n        resetPassword,\r\n        verifyEmail,\r\n      }}\r\n    >\r\n      {children}\r\n    </InsforgeContext.Provider>\r\n  );\r\n}\r\n\r\n/**\r\n * Hook to access Insforge context\r\n *\r\n * @example\r\n * ```tsx\r\n * function MyComponent() {\r\n *   const { user, isSignedIn, signOut } = useInsforge();\r\n *\r\n *   if (!isSignedIn) return <SignIn />;\r\n *\r\n *   return (\r\n *     <div>\r\n *       <p>Welcome {user.email}</p>\r\n *       <button onClick={signOut}>Sign Out</button>\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useInsforge(): InsforgeContextValue {\r\n  const context = useContext(InsforgeContext);\r\n  if (!context) {\r\n    throw new Error(\"useInsforge must be used within InsforgeProvider\");\r\n  }\r\n  return context;\r\n}\r\n","import { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to access authentication methods\r\n * \r\n * @returns Object containing:\r\n *   - `signIn`: Function to sign in with email and password\r\n *   - `signUp`: Function to sign up with email and password\r\n *   - `signOut`: Function to sign out the current user\r\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\r\n *   - `isSignedIn`: Boolean indicating if user is currently signed in\r\n * \r\n * @example\r\n * ```tsx\r\n * function LoginForm() {\r\n *   const { signIn, signUp, signOut, isLoaded, isSignedIn } = useAuth();\r\n *   \r\n *   async function handleLogin(email: string, password: string) {\r\n *     try {\r\n *       await signIn(email, password);\r\n *       // User is now signed in\r\n *     } catch (error) {\r\n *       console.error('Sign in failed:', error);\r\n *     }\r\n *   }\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   \r\n *   return (\r\n *     <form onSubmit={(e) => { e.preventDefault(); handleLogin(email, password); }}>\r\n *       {/* form fields *\\/}\r\n *     </form>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useAuth() {\r\n  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();\r\n  return { signIn, signUp, signOut, isLoaded, isSignedIn };\r\n}\r\n\r\n","import { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to access current user data\r\n * \r\n * @returns Object containing:\r\n *   - `user`: Current user object (InsforgeUser | null)\r\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\r\n *   - `updateUser`: Function to update user profile data\r\n *   - `setUser`: Internal function to manually set user state\r\n * \r\n * @example\r\n * ```tsx\r\n * function UserProfile() {\r\n *   const { user, isLoaded, updateUser } = useUser();\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   if (!user) return <div>Not signed in</div>;\r\n *   \r\n *   async function handleUpdate(name: string) {\r\n *     await updateUser({ name });\r\n *   }\r\n *   \r\n *   return (\r\n *     <div>\r\n *       <p>Email: {user.email}</p>\r\n *       {user.name && <p>Name: {user.name}</p>}\r\n *       {user.avatarUrl && <img src={user.avatarUrl} alt=\"Avatar\" />}\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useUser() {\r\n  const { user, isLoaded, updateUser, setUser } = useInsforge();\r\n  return { user, isLoaded, updateUser, setUser };\r\n}\r\n\r\n","import { useState, useEffect } from 'react';\r\nimport type { \r\n  OAuthProvidersSchema,\r\n  PublicEmailAuthConfig,\r\n  PublicOAuthProvider \r\n} from '@insforge/shared-schemas';\r\nimport { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to get all public authentication configuration (OAuth + Email) from Insforge backend\r\n *\r\n * **IMPORTANT: This hook should ONLY be used in SignIn and SignUp components.**\r\n *\r\n * This hook lazily fetches all public authentication configuration from the backend\r\n * only when the component mounts. Using it in other components will cause unnecessary\r\n * API calls on every page load.\r\n *\r\n * @returns Object containing OAuth providers, email auth config, and loading state\r\n *\r\n * @example\r\n * ```tsx\r\n * // ✅ Correct usage - only in SignIn/SignUp components\r\n * function SignUp() {\r\n *   const { oauthProviders, emailConfig, isLoaded } = usePublicAuthConfig();\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   \r\n *   return (\r\n *     <div>\r\n *       <p>OAuth providers: {oauthProviders.length}</p>\r\n *       <p>Password min length: {emailConfig?.passwordMinLength}</p>\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n *\r\n * @requires Must be used within InsforgeProvider\r\n */\r\nexport function usePublicAuthConfig(): { \r\n  oauthProviders: OAuthProvidersSchema[];\r\n  emailConfig: PublicEmailAuthConfig | null;\r\n  isLoaded: boolean;\r\n} {\r\n  const { baseUrl } = useInsforge();\r\n  const [oauthProviders, setOAuthProviders] = useState<OAuthProvidersSchema[]>([]);\r\n  const [emailConfig, setEmailConfig] = useState<PublicEmailAuthConfig | null>(null);\r\n  const [isLoaded, setIsLoaded] = useState(false);\r\n\r\n  useEffect(() => {\r\n    let mounted = true;\r\n\r\n    async function fetchConfig() {\r\n      try {\r\n        const response = await fetch(`${baseUrl}/api/auth/public-config`);\r\n        \r\n        if (!mounted) return;\r\n\r\n        if (!response.ok) {\r\n          console.warn('[usePublicAuthConfig] Failed to fetch public auth config:', response.statusText);\r\n          setOAuthProviders([]);\r\n          setEmailConfig(null);\r\n        } else {\r\n          const data: { providers: PublicOAuthProvider[], email: PublicEmailAuthConfig } = await response.json();\r\n          const providerNames = data.providers?.map((p: PublicOAuthProvider) => p.provider) || [];\r\n          setOAuthProviders(providerNames);\r\n          setEmailConfig(data.email || null);\r\n        }\r\n        \r\n        setIsLoaded(true);\r\n      } catch (error) {\r\n        console.warn('[usePublicAuthConfig] Unexpected error:', error);\r\n        if (mounted) {\r\n          setOAuthProviders([]);\r\n          setEmailConfig(null);\r\n          setIsLoaded(true);\r\n        }\r\n      }\r\n    }\r\n\r\n    fetchConfig();\r\n\r\n    return () => {\r\n      mounted = false;\r\n    };\r\n  }, [baseUrl]);\r\n\r\n  return { oauthProviders, emailConfig, isLoaded };\r\n}\r\n\r\n"]}
+{"version":3,"sources":["../src/provider/InsforgeProvider.tsx","../src/hooks/useAuth.ts","../src/hooks/useUser.ts","../src/hooks/usePublicAuthConfig.ts"],"names":["useState","useEffect"],"mappings":";;;;AAiEA,IAAM,eAAA,GAAkB,aAAA;AAAA,EACtB;AACF,CAAA;AA4ZO,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAU,WAAW,eAAe,CAAA;AAC1C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,OAAA;AACT;;;ACjcO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,QAAA,EAAU,UAAA,KAAe,WAAA,EAAY;AACtE,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,UAAU,UAAA,EAAW;AACzD;;;ACNO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,KAAY,WAAA,EAAY;AAC5D,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,EAAQ;AAC/C;ACGO,SAAS,mBAAA,GAGd;AACA,EAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,WAAA,EAAY;AAC5C,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIA,SAA6C,IAAI,CAAA;AACvF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,SAAS,KAAK,CAAA;AAE9C,EAAAC,UAAU,MAAM;AACd,IAAA,eAAe,WAAA,GAAc;AAC3B,MAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,EAAoB;AACzC,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,cAAA,CAAe,MAAM,CAAA;AAAA,MACvB,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,MAAM,wDAAwD,CAAA;AACtE,QAAA,cAAA,CAAe,IAAI,CAAA;AAAA,MACrB;AACA,MAAA,WAAA,CAAY,IAAI,CAAA;AAAA,IAClB;AAEA,IAAA,WAAA,EAAY;AAAA,EACd,CAAA,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAExB,EAAA,OAAO,EAAE,aAAa,QAAA,EAAS;AACjC","file":"hooks.mjs","sourcesContent":["\"use client\";\r\n\r\nimport {\r\n  createContext,\r\n  useContext,\r\n  useEffect,\r\n  useState,\r\n  useCallback,\r\n  useRef,\r\n  type ReactNode,\r\n} from \"react\";\r\nimport { createClient } from \"@insforge/sdk\";\r\nimport type { InsforgeUser } from \"../types\";\r\nimport { GetPublicAuthConfigResponse } from \"@insforge/shared-schemas\";\r\n\r\ninterface InsforgeContextValue {\r\n  // Auth state\r\n  user: InsforgeUser | null;\r\n  isLoaded: boolean;\r\n  isSignedIn: boolean;\r\n\r\n  // Auth methods\r\n  setUser: (user: InsforgeUser | null) => void;\r\n  signIn: (\r\n    email: string,\r\n    password: string\r\n  ) => Promise<\r\n    | {\r\n        user?: { id: string; email: string; name: string };\r\n        accessToken: string | null;\r\n      }\r\n    | { error: string }\r\n  >;\r\n  signUp: (\r\n    email: string,\r\n    password: string\r\n  ) => Promise<\r\n    | {\r\n        user?: { id: string; email: string; name: string };\r\n        accessToken: string | null;\r\n      }\r\n    | { error: string }\r\n  >;\r\n  signOut: () => Promise<void>;\r\n  updateUser: (data: Partial<InsforgeUser>) => Promise<void>;\r\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\r\n\r\n  // Email verification methods\r\n  sendPasswordResetCode: (\r\n    email: string\r\n  ) => Promise<{ success: boolean; message: string } | null>;\r\n  resetPassword: (\r\n    token: string,\r\n    newPassword: string\r\n  ) => Promise<{ message: string; redirectTo?: string } | null>;\r\n  verifyEmail: (\r\n    token: string\r\n  ) => Promise<{ accessToken: string; user?: any } | null>;\r\n\r\n  // Public auth config\r\n  getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;\r\n  // Base config\r\n  baseUrl: string;\r\n}\r\n\r\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(\r\n  undefined\r\n);\r\n\r\nexport interface InsforgeProviderProps {\r\n  children: ReactNode;\r\n  baseUrl: string;\r\n  onAuthChange?: (user: InsforgeUser | null) => void;\r\n  // Optional: custom token sync functions (e.g., for Next.js cookie sync)\r\n  syncTokenToCookie?: (token: string) => Promise<boolean>;\r\n  clearCookie?: () => Promise<void>;\r\n}\r\n\r\n/**\r\n * Unified Insforge Provider - manages authentication state and configuration\r\n *\r\n * Manages user authentication state and provides all necessary context to child components.\r\n * Works with any React framework (Next.js, Vite, Remix, etc.).\r\n *\r\n * @example\r\n * ```tsx\r\n * // Basic usage (React/Vite)\r\n * import { InsforgeProvider } from '@insforge/react';\r\n *\r\n * export default function App() {\r\n *   return (\r\n *     <InsforgeProvider baseUrl={process.env.VITE_INSFORGE_BASE_URL}>\r\n *       {children}\r\n *     </InsforgeProvider>\r\n *   );\r\n * }\r\n * ```\r\n *\r\n * @example\r\n * ```tsx\r\n * // With cookie sync (Next.js optimization)\r\n * <InsforgeProvider\r\n *   baseUrl={baseUrl}\r\n *   syncTokenToCookie={async (token) => {\r\n *     await fetch('/api/auth', {\r\n *       method: 'POST',\r\n *       body: JSON.stringify({ token })\r\n *     });\r\n *     return true;\r\n *   }}\r\n *   clearCookie={async () => {\r\n *     await fetch('/api/auth', { method: 'DELETE' });\r\n *   }}\r\n * >\r\n *   {children}\r\n * </InsforgeProvider>\r\n * ```\r\n */\r\nexport function InsforgeProvider({\r\n  children,\r\n  baseUrl,\r\n  onAuthChange,\r\n  syncTokenToCookie,\r\n  clearCookie,\r\n}: InsforgeProviderProps) {\r\n  // Auth state\r\n  const [user, setUser] = useState<InsforgeUser | null>(null);\r\n  const [isLoaded, setIsLoaded] = useState(false);\r\n\r\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\r\n\r\n  // Initialize SDK client with lazy initialization - only runs once\r\n  const [insforge] = useState(() => createClient({ baseUrl }));\r\n\r\n  // Load auth state - returns explicit success/error status\r\n  const loadAuthState = useCallback(async (): Promise<{\r\n    success: boolean;\r\n    error?: string;\r\n  }> => {\r\n    try {\r\n      // Use SDK's getCurrentSession() to check for existing session\r\n      const sessionResult = insforge.auth.getCurrentSession();\r\n      const session = sessionResult.data?.session;\r\n      const token = session?.accessToken || null;\r\n\r\n      if (!token) {\r\n        // No token, user is not authenticated\r\n        setUser(null);\r\n        if (onAuthChange) {\r\n          onAuthChange(null);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: false, error: \"no_session\" };\r\n      }\r\n\r\n      const userResult = await insforge.auth.getCurrentUser();\r\n\r\n      if (userResult.data) {\r\n        // Token is valid, update user state with fresh data\r\n        const profile = userResult.data.profile;\r\n        const userData: InsforgeUser = {\r\n          id: userResult.data.user.id,\r\n          email: userResult.data.user.email,\r\n          name: (profile?.nickname as string | undefined) || \"\",\r\n          avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: true };\r\n      } else {\r\n        // Token invalid or expired\r\n        await insforge.auth.signOut();\r\n\r\n        // Clear cookie if function provided\r\n        if (clearCookie) {\r\n          try {\r\n            await clearCookie();\r\n          } catch (error) {\r\n            // Ignore errors\r\n          }\r\n        }\r\n\r\n        setUser(null);\r\n        if (onAuthChange) {\r\n          onAuthChange(null);\r\n        }\r\n        setIsLoaded(true);\r\n        return { success: false, error: \"invalid_token\" };\r\n      }\r\n    } catch (error) {\r\n      // Token validation failed\r\n      console.error(\"[InsforgeProvider] Token validation failed:\", error);\r\n\r\n      await insforge.auth.signOut();\r\n\r\n      // Clear cookie if function provided\r\n      if (clearCookie) {\r\n        try {\r\n          await clearCookie();\r\n        } catch (error) {\r\n          // Ignore errors\r\n        }\r\n      }\r\n\r\n      setUser(null);\r\n      if (onAuthChange) {\r\n        onAuthChange(null);\r\n      }\r\n      setIsLoaded(true);\r\n\r\n      return {\r\n        success: false,\r\n        error: error instanceof Error ? error.message : \"authentication_failed\",\r\n      };\r\n    }\r\n  }, [insforge, onAuthChange, syncTokenToCookie, clearCookie]);\r\n\r\n  useEffect(() => {\r\n    // Run loadAuthState only once on mount\r\n    loadAuthState();\r\n\r\n    return () => {\r\n      if (refreshIntervalRef.current) {\r\n        clearInterval(refreshIntervalRef.current);\r\n      }\r\n    };\r\n  }, []); // Empty deps - run only on mount\r\n\r\n  const getPublicAuthConfig = useCallback(async () => {\r\n    try {\r\n      const result = await insforge.auth.getPublicAuthConfig();\r\n      if (result.data) {\r\n        return result.data;\r\n      } else {\r\n        console.error('[InsforgeProvider] Failed to get public auth config:', result.error);\r\n        return null;\r\n      }\r\n    } catch (error) {\r\n      console.error(\r\n        \"[InsforgeProvider] Failed to get public auth config:\",\r\n        error\r\n      );\r\n      return null;\r\n    }\r\n  }, [insforge]);\r\n\r\n  /**\r\n   * Helper function to handle successful authentication\r\n   */\r\n  const handleAuthSuccess = useCallback(\r\n    async (\r\n      authToken: string,\r\n      fallbackUser?: { id?: string; email?: string; name?: string }\r\n    ) => {\r\n      const userResult = await insforge.auth.getCurrentUser();\r\n\r\n      if (userResult.data) {\r\n        const profile = userResult.data.profile;\r\n        const userData: InsforgeUser = {\r\n          id: userResult.data.user.id,\r\n          email: userResult.data.user.email,\r\n          name: (profile?.nickname as string | undefined) || \"\",\r\n          avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n\r\n        // Try to sync token to cookie if function provided\r\n        if (syncTokenToCookie) {\r\n          try {\r\n            await syncTokenToCookie(authToken);\r\n          } catch (error) {\r\n            // Cookie sync failed - that's okay\r\n          }\r\n        }\r\n      } else if (fallbackUser) {\r\n        // Fallback to basic user data if getCurrentUser fails\r\n        const userData: InsforgeUser = {\r\n          id: fallbackUser.id || \"\",\r\n          email: fallbackUser.email || \"\",\r\n          name: fallbackUser.name || \"\",\r\n          avatarUrl: \"\",\r\n        };\r\n\r\n        setUser(userData);\r\n\r\n        if (onAuthChange) {\r\n          onAuthChange(userData);\r\n        }\r\n      }\r\n    },\r\n    [insforge, onAuthChange, syncTokenToCookie]\r\n  );\r\n\r\n  const signIn = useCallback(\r\n    async (email: string, password: string) => {\r\n      const sdkResult = await insforge.auth.signInWithPassword({\r\n        email,\r\n        password,\r\n      });\r\n\r\n      if (sdkResult.data) {\r\n        await handleAuthSuccess(\r\n          sdkResult.data.accessToken || \"\",\r\n          sdkResult.data.user\r\n            ? {\r\n                id: sdkResult.data.user.id,\r\n                email: sdkResult.data.user.email,\r\n                name: sdkResult.data.user.name,\r\n              }\r\n            : undefined\r\n        );\r\n        return sdkResult.data;\r\n      } else {\r\n        const errorMessage =\r\n          sdkResult.error?.message || \"Invalid email or password\";\r\n        return { error: errorMessage };\r\n      }\r\n    },\r\n    [insforge, handleAuthSuccess]\r\n  );\r\n\r\n  const signUp = useCallback(\r\n    async (email: string, password: string) => {\r\n      const sdkResult = await insforge.auth.signUp({ email, password });\r\n\r\n      if (sdkResult.data) {\r\n        await handleAuthSuccess(\r\n          sdkResult.data.accessToken || \"\",\r\n          sdkResult.data.user\r\n            ? {\r\n                id: sdkResult.data.user.id,\r\n                email: sdkResult.data.user.email,\r\n                name: sdkResult.data.user.name,\r\n              }\r\n            : undefined\r\n        );\r\n        return sdkResult.data;\r\n      } else {\r\n        const errorMessage = sdkResult.error?.message || \"Sign up failed\";\r\n        return { error: errorMessage };\r\n      }\r\n    },\r\n    [insforge, handleAuthSuccess]\r\n  );\r\n\r\n  const signOut = useCallback(async () => {\r\n    await insforge.auth.signOut();\r\n\r\n    // Clear cookie if function provided\r\n    if (clearCookie) {\r\n      try {\r\n        await clearCookie();\r\n      } catch (error) {\r\n        // Ignore errors\r\n      }\r\n    }\r\n\r\n    // Clear refresh interval if exists\r\n    if (refreshIntervalRef.current) {\r\n      clearInterval(refreshIntervalRef.current);\r\n    }\r\n\r\n    setUser(null);\r\n    if (onAuthChange) {\r\n      onAuthChange(null);\r\n    }\r\n  }, [insforge, onAuthChange, clearCookie]);\r\n\r\n  const updateUser = useCallback(\r\n    async (data: Partial<InsforgeUser>) => {\r\n      if (!user) throw new Error(\"No user signed in\");\r\n\r\n      const profileUpdate: Record<string, any> = {\r\n        nickname: data.name,\r\n        avatarUrl: data.avatarUrl,\r\n      };\r\n\r\n      const result = await insforge.auth.setProfile(profileUpdate);\r\n\r\n      if (result.data) {\r\n        const userResult = await insforge.auth.getCurrentUser();\r\n        if (userResult.data) {\r\n          const profile = userResult.data.profile;\r\n          const updatedUser: InsforgeUser = {\r\n            id: userResult.data.user.id,\r\n            email: userResult.data.user.email,\r\n            name: (profile?.nickname as string | undefined) || \"\",\r\n            avatarUrl: (profile?.avatarUrl as string | undefined) || \"\",\r\n          };\r\n          setUser(updatedUser);\r\n          if (onAuthChange) {\r\n            onAuthChange(updatedUser);\r\n          }\r\n        }\r\n      }\r\n    },\r\n    [user, onAuthChange, insforge]\r\n  );\r\n\r\n  const sendPasswordResetCode = useCallback(\r\n    async (email: string) => {\r\n      const sdkResult = await insforge.auth.sendPasswordResetCode({ email });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  const resetPassword = useCallback(\r\n    async (token: string, newPassword: string) => {\r\n      const sdkResult = await insforge.auth.resetPassword({\r\n        newPassword,\r\n        otp: token,\r\n      });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  const verifyEmail = useCallback(\r\n    async (token: string) => {\r\n      const sdkResult = await insforge.auth.verifyEmail({ otp: token });\r\n      return sdkResult.data;\r\n    },\r\n    [insforge]\r\n  );\r\n\r\n  return (\r\n    <InsforgeContext.Provider\r\n      value={{\r\n        user,\r\n        isLoaded,\r\n        isSignedIn: !!user,\r\n        setUser,\r\n        signIn,\r\n        signUp,\r\n        signOut,\r\n        updateUser,\r\n        reloadAuth: loadAuthState,\r\n        baseUrl,\r\n        sendPasswordResetCode,\r\n        resetPassword,\r\n        verifyEmail,\r\n        getPublicAuthConfig,\r\n      }}\r\n    >\r\n      {children}\r\n    </InsforgeContext.Provider>\r\n  );\r\n}\r\n\r\n/**\r\n * Hook to access Insforge context\r\n *\r\n * @example\r\n * ```tsx\r\n * function MyComponent() {\r\n *   const { user, isSignedIn, signOut } = useInsforge();\r\n *\r\n *   if (!isSignedIn) return <SignIn />;\r\n *\r\n *   return (\r\n *     <div>\r\n *       <p>Welcome {user.email}</p>\r\n *       <button onClick={signOut}>Sign Out</button>\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useInsforge(): InsforgeContextValue {\r\n  const context = useContext(InsforgeContext);\r\n  if (!context) {\r\n    throw new Error(\"useInsforge must be used within InsforgeProvider\");\r\n  }\r\n  return context;\r\n}\r\n","import { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to access authentication methods\r\n * \r\n * @returns Object containing:\r\n *   - `signIn`: Function to sign in with email and password\r\n *   - `signUp`: Function to sign up with email and password\r\n *   - `signOut`: Function to sign out the current user\r\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\r\n *   - `isSignedIn`: Boolean indicating if user is currently signed in\r\n * \r\n * @example\r\n * ```tsx\r\n * function LoginForm() {\r\n *   const { signIn, signUp, signOut, isLoaded, isSignedIn } = useAuth();\r\n *   \r\n *   async function handleLogin(email: string, password: string) {\r\n *     try {\r\n *       await signIn(email, password);\r\n *       // User is now signed in\r\n *     } catch (error) {\r\n *       console.error('Sign in failed:', error);\r\n *     }\r\n *   }\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   \r\n *   return (\r\n *     <form onSubmit={(e) => { e.preventDefault(); handleLogin(email, password); }}>\r\n *       {/* form fields *\\/}\r\n *     </form>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useAuth() {\r\n  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();\r\n  return { signIn, signUp, signOut, isLoaded, isSignedIn };\r\n}\r\n\r\n","import { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to access current user data\r\n * \r\n * @returns Object containing:\r\n *   - `user`: Current user object (InsforgeUser | null)\r\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\r\n *   - `updateUser`: Function to update user profile data\r\n *   - `setUser`: Internal function to manually set user state\r\n * \r\n * @example\r\n * ```tsx\r\n * function UserProfile() {\r\n *   const { user, isLoaded, updateUser } = useUser();\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   if (!user) return <div>Not signed in</div>;\r\n *   \r\n *   async function handleUpdate(name: string) {\r\n *     await updateUser({ name });\r\n *   }\r\n *   \r\n *   return (\r\n *     <div>\r\n *       <p>Email: {user.email}</p>\r\n *       {user.name && <p>Name: {user.name}</p>}\r\n *       {user.avatarUrl && <img src={user.avatarUrl} alt=\"Avatar\" />}\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function useUser() {\r\n  const { user, isLoaded, updateUser, setUser } = useInsforge();\r\n  return { user, isLoaded, updateUser, setUser };\r\n}\r\n\r\n","import { useState, useEffect } from 'react';\r\nimport type {\r\n  GetPublicAuthConfigResponse\r\n} from '@insforge/shared-schemas';\r\nimport { useInsforge } from '../provider/InsforgeProvider';\r\n\r\n/**\r\n * Hook to get all public authentication configuration (OAuth + Email) from Insforge backend\r\n *\r\n * **IMPORTANT: This hook should ONLY be used in SignIn and SignUp components.**\r\n *\r\n * This hook lazily fetches all public authentication configuration from the backend\r\n * only when the component mounts. Using it in other components will cause unnecessary\r\n * API calls on every page load.\r\n *\r\n * @returns Object containing OAuth providers, email auth config, and loading state\r\n * - `oauthProviders`: Array of enabled OAuth provider names (e.g., ['google', 'github'])\r\n * - `emailConfig`: Email authentication configuration object with password rules\r\n * - `isLoaded`: Boolean indicating if the config has been fetched\r\n *\r\n * @example\r\n * ```tsx\r\n * // ✅ Correct usage - only in SignIn/SignUp components\r\n * function SignUp() {\r\n *   const { oauthProviders, emailConfig, isLoaded } = usePublicAuthConfig();\r\n *   \r\n *   if (!isLoaded) return <div>Loading...</div>;\r\n *   \r\n *   return (\r\n *     <div>\r\n *       <p>OAuth providers: {oauthProviders.length}</p>\r\n *       <p>Password min length: {emailConfig?.passwordMinLength}</p>\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n *\r\n * @requires Must be used within InsforgeProvider\r\n */\r\nexport function usePublicAuthConfig(): {\r\n  emailConfig: GetPublicAuthConfigResponse | null;\r\n  isLoaded: boolean;\r\n} {\r\n  const { getPublicAuthConfig } = useInsforge();\r\n  const [emailConfig, setEmailConfig] = useState<GetPublicAuthConfigResponse | null>(null);\r\n  const [isLoaded, setIsLoaded] = useState(false);\r\n\r\n  useEffect(() => {\r\n    async function fetchConfig() {\r\n      const result = await getPublicAuthConfig();\r\n      if (result) {\r\n        setEmailConfig(result);\r\n      } else {\r\n        console.error('[usePublicAuthConfig] Failed to get public auth config');\r\n        setEmailConfig(null);\r\n      }\r\n      setIsLoaded(true);\r\n    }\r\n\r\n    fetchConfig();\r\n  }, [getPublicAuthConfig]);\r\n\r\n  return { emailConfig, isLoaded };\r\n}\r\n\r\n"]}

package/dist/index.d.mts

@@ -5,10 +5,10 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
 import { InsforgeUser, OAuthProvider, OAuthProviderConfig } from './types.mjs';
 export { AuthConfig, AuthContainerProps, AuthDividerProps, AuthErrorBannerProps, AuthFormFieldProps, AuthHeaderProps, AuthLinkProps, AuthOAuthButtonProps, AuthOAuthProvidersProps, AuthPasswordFieldProps, AuthPasswordStrengthIndicatorProps, AuthSubmitButtonProps, AuthVerificationCodeInputProps, BaseAppearance, ConditionalProps, ForgotPasswordAppearance, ForgotPasswordFormProps, ProtectProps, ResetPasswordAppearance, ResetPasswordFormProps, SignInAppearance, SignInFormProps, SignInProps, SignUpAppearance, SignUpFormProps, SignUpProps, UserButtonProps, VerifyEmailStatusProps } from './types.mjs';
+import { GetPublicAuthConfigResponse } from '@insforge/shared-schemas';
 export { useAuth, usePublicAuthConfig, useUser } from './hooks.mjs';
 export { checkPasswordStrength, cn, createPasswordSchema, emailSchema, passwordSchema, validateEmail, validatePassword } from './lib.mjs';
 export { getInsforgeRoutes } from './router.mjs';
-import '@insforge/shared-schemas';
 import 'clsx';
 import 'zod';
 import 'react-router-dom';
@@ -56,6 +56,7 @@ interface InsforgeContextValue {
         accessToken: string;
         user?: any;
     } | null>;
+    getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;
     baseUrl: string;
 }
 interface InsforgeProviderProps {

package/dist/index.d.ts

@@ -5,10 +5,10 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
 import { InsforgeUser, OAuthProvider, OAuthProviderConfig } from './types.js';
 export { AuthConfig, AuthContainerProps, AuthDividerProps, AuthErrorBannerProps, AuthFormFieldProps, AuthHeaderProps, AuthLinkProps, AuthOAuthButtonProps, AuthOAuthProvidersProps, AuthPasswordFieldProps, AuthPasswordStrengthIndicatorProps, AuthSubmitButtonProps, AuthVerificationCodeInputProps, BaseAppearance, ConditionalProps, ForgotPasswordAppearance, ForgotPasswordFormProps, ProtectProps, ResetPasswordAppearance, ResetPasswordFormProps, SignInAppearance, SignInFormProps, SignInProps, SignUpAppearance, SignUpFormProps, SignUpProps, UserButtonProps, VerifyEmailStatusProps } from './types.js';
+import { GetPublicAuthConfigResponse } from '@insforge/shared-schemas';
 export { useAuth, usePublicAuthConfig, useUser } from './hooks.js';
 export { checkPasswordStrength, cn, createPasswordSchema, emailSchema, passwordSchema, validateEmail, validatePassword } from './lib.js';
 export { getInsforgeRoutes } from './router.js';
-import '@insforge/shared-schemas';
 import 'clsx';
 import 'zod';
 import 'react-router-dom';
@@ -56,6 +56,7 @@ interface InsforgeContextValue {
         accessToken: string;
         user?: any;
     } | null>;
+    getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;
     baseUrl: string;
 }
 interface InsforgeProviderProps {

package/dist/index.js

@@ -107,6 +107,23 @@ function InsforgeProvider({
       }
     };
   }, []);
+  const getPublicAuthConfig = react.useCallback(async () => {
+    try {
+      const result = await insforge.auth.getPublicAuthConfig();
+      if (result.data) {
+        return result.data;
+      } else {
+        console.error("[InsforgeProvider] Failed to get public auth config:", result.error);
+        return null;
+      }
+    } catch (error) {
+      console.error(
+        "[InsforgeProvider] Failed to get public auth config:",
+        error
+      );
+      return null;
+    }
+  }, [insforge]);
   const handleAuthSuccess = react.useCallback(
     async (authToken, fallbackUser) => {
       const userResult = await insforge.auth.getCurrentUser();
@@ -238,7 +255,10 @@ function InsforgeProvider({
   );
   const resetPassword = react.useCallback(
     async (token, newPassword) => {
-      const sdkResult = await insforge.auth.resetPassword({ newPassword, otp: token });
+      const sdkResult = await insforge.auth.resetPassword({
+        newPassword,
+        otp: token
+      });
       return sdkResult.data;
     },
     [insforge]
@@ -266,7 +286,8 @@ function InsforgeProvider({
         baseUrl,
         sendPasswordResetCode,
         resetPassword,
-        verifyEmail
+        verifyEmail,
+        getPublicAuthConfig
       },
       children
     }
@@ -280,42 +301,23 @@ function useInsforge() {
   return context;
 }
 function usePublicAuthConfig() {
-  const { baseUrl } = useInsforge();
-  const [oauthProviders, setOAuthProviders] = react.useState([]);
+  const { getPublicAuthConfig } = useInsforge();
   const [emailConfig, setEmailConfig] = react.useState(null);
   const [isLoaded, setIsLoaded] = react.useState(false);
   react.useEffect(() => {
-    let mounted = true;
     async function fetchConfig() {
-      try {
-        const response = await fetch(`${baseUrl}/api/auth/public-config`);
-        if (!mounted) return;
-        if (!response.ok) {
-          console.warn("[usePublicAuthConfig] Failed to fetch public auth config:", response.statusText);
-          setOAuthProviders([]);
-          setEmailConfig(null);
-        } else {
-          const data = await response.json();
-          const providerNames = data.providers?.map((p) => p.provider) || [];
-          setOAuthProviders(providerNames);
-          setEmailConfig(data.email || null);
-        }
-        setIsLoaded(true);
-      } catch (error) {
-        console.warn("[usePublicAuthConfig] Unexpected error:", error);
-        if (mounted) {
-          setOAuthProviders([]);
-          setEmailConfig(null);
-          setIsLoaded(true);
-        }
+      const result = await getPublicAuthConfig();
+      if (result) {
+        setEmailConfig(result);
+      } else {
+        console.error("[usePublicAuthConfig] Failed to get public auth config");
+        setEmailConfig(null);
       }
+      setIsLoaded(true);
     }
     fetchConfig();
-    return () => {
-      mounted = false;
-    };
-  }, [baseUrl]);
-  return { oauthProviders, emailConfig, isLoaded };
+  }, [getPublicAuthConfig]);
+  return { emailConfig, isLoaded };
 }
 function AuthBranding() {
   return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "bg-[#FAFAFA] px-2 py-4 flex flex-row justify-center items-center gap-1", children: [
@@ -667,6 +669,22 @@ function AuthSubmitButton({
   );
 }
 function AuthLink({ text, linkText, href, appearance = {} }) {
+  const currentSearch = typeof window !== "undefined" ? window.location.search : "";
+  const finalHref = (() => {
+    if (!currentSearch) return href;
+    try {
+      const url = new URL(href, window.location.origin);
+      const currentParams = new URLSearchParams(currentSearch);
+      currentParams.forEach((value, key) => {
+        if (!url.searchParams.has(key)) {
+          url.searchParams.set(key, value);
+        }
+      });
+      return url.pathname + url.search;
+    } catch {
+      return href;
+    }
+  })();
   return /* @__PURE__ */ jsxRuntime.jsxs("p", { className: cn(
     "text-center text-sm font-normal text-[#828282] leading-6",
     appearance.containerClassName
@@ -676,7 +694,7 @@ function AuthLink({ text, linkText, href, appearance = {} }) {
     /* @__PURE__ */ jsxRuntime.jsx(
       "a",
       {
-        href,
+        href: finalHref,
         className: cn(
           "text-sm font-medium text-black leading-6",
           appearance.linkClassName
@@ -1186,7 +1204,7 @@ function SignIn({
   ...uiProps
 }) {
   const { signIn, baseUrl } = useInsforge();
-  const { oauthProviders, emailConfig } = usePublicAuthConfig();
+  const { emailConfig } = usePublicAuthConfig();
   const [email, setEmail] = react.useState("");
   const [password, setPassword] = react.useState("");
   const [error, setError] = react.useState("");
@@ -1238,7 +1256,9 @@ function SignIn({
       setOauthLoading(null);
     }
   }
-  if (!emailConfig) return null;
+  if (!emailConfig) {
+    return null;
+  }
   return /* @__PURE__ */ jsxRuntime.jsx(
     SignInForm,
     {
@@ -1250,7 +1270,7 @@ function SignIn({
       error,
       loading,
       oauthLoading,
-      availableProviders: oauthProviders,
+      availableProviders: emailConfig?.oAuthProviders || [],
       onOAuthClick: handleOAuth,
       emailAuthConfig: emailConfig,
       ...uiProps
@@ -1413,7 +1433,7 @@ function SignUp({
   ...uiProps
 }) {
   const { signUp, baseUrl } = useInsforge();
-  const { oauthProviders, emailConfig } = usePublicAuthConfig();
+  const { emailConfig } = usePublicAuthConfig();
   const [email, setEmail] = react.useState("");
   const [password, setPassword] = react.useState("");
   const [error, setError] = react.useState("");
@@ -1470,7 +1490,9 @@ function SignUp({
       setOauthLoading(null);
     }
   }
-  if (!emailConfig) return null;
+  if (!emailConfig) {
+    return null;
+  }
   return /* @__PURE__ */ jsxRuntime.jsx(
     SignUpForm,
     {
@@ -1482,7 +1504,7 @@ function SignUp({
       error,
       loading,
       oauthLoading,
-      availableProviders: oauthProviders,
+      availableProviders: emailConfig?.oAuthProviders || [],
       onOAuthClick: handleOAuth,
       emailAuthConfig: emailConfig,
       ...uiProps