@ionite/react 0.0.24-beta.20260928.17 → 0.0.24-beta.20260930.19

package/dist/index.js

@@ -1 +1,728 @@
-import{defaultLogger as Ht,silentLogger as Xt}from"@ionite/core";import{silentLogger as me}from"@ionite/core";import{createContext as ve,useContext as X,useMemo as ye}from"react";import{JSON_MEDIA_TYPE as B,readJsonResponse as z,silentLogger as b}from"@ionite/core";import{useCallback as P,useEffect as q,useRef as J,useState as k}from"react";var ge=/^[a-zA-Z0-9._-]{1,1024}$/;function pe(e,t){if(!e.trim())throw Error(`${t} storageKey must be a non-empty string.`);if(!ge.test(e))throw Error(`${t} storageKey must be 1-1024 characters and contain only letters, numbers, dots, underscores, and hyphens.`)}function A(e,t,r){if(t===void 0||t==="")return e;return pe(t,r),t}function G(e,t,r,o=b){if(typeof window>"u")return null;try{let n=e==="local"?localStorage:sessionStorage,s=n.getItem(t);if(!s)return null;let a=JSON.parse(s),c=r.validate(a);if(!c)return n.removeItem(t),null;let i=r.revive(c);if(r.isExpired(i))return n.removeItem(t),null;return i}catch(n){return o.error("Error loading auth record from storage:",n),null}}async function Y(e,t,r,o=b){try{let n=new Headers(r?.headers);if(!n.has("Accept"))n.set("Accept",B);let s=await fetch(e,{...r,headers:n});if(s.status===401)return{kind:"unauthenticated"};if(!s.ok){let i=Error(`Failed to fetch auth record: ${s.status} ${s.statusText}`);return o.error("Error fetching auth record from URL:",i),{kind:"error",error:i}}let a=await z(s,{log:o,operation:"react.auth_resource.fetch"}),c=t.validate(a);if(!c){let i=Error("Auth record from server failed validation.");return o.error("Error validating auth record from URL:",i),{kind:"error",error:i}}return{kind:"ok",value:t.revive(c)}}catch(n){let s=n instanceof Error?n:Error(String(n));return o.error("Error fetching auth record from URL:",s),{kind:"error",error:s}}}function R(e){let{url:t,storage:r,storageKey:o,disableListener:n,logoutEventName:s,codec:a}=e,[c,i]=k(null),[f,u]=k(!!t),[d,m]=k(null),x=J(e.fetchInit);x.current=e.fetchInit;let y=J(e.log);y.current=e.log;let p=P((l)=>{if(r==="memory"||typeof window>"u")return;try{let v=r==="local"?localStorage:sessionStorage;if(l===null)v.removeItem(o);else v.setItem(o,JSON.stringify(l))}catch(v){y.current.error("Error saving auth record to storage:",v)}},[r,o]),T=P((l)=>{i(l),p(l)},[p]),h=P(()=>{if(r==="memory")return null;return G(r,o,a,y.current)},[r,o,a]),g=P(async()=>{if(!t)return;u(!0);try{let l=await Y(t,a,x.current,y.current);if(l.kind==="ok")i(l.value),m(null),p(l.value);else if(l.kind==="unauthenticated")i(null),m(null),p(null);else m(l.error)}finally{u(!1)}},[t,a,p]);return q(()=>{let l=h();if(l)i(l);if(t)g();else u(!1)},[h,t,g]),q(()=>{if(n||r==="memory")return;let l=(I)=>{if(I.key!==o)return;if(I.newValue===null){i(null);return}try{let L=JSON.parse(I.newValue),F=a.validate(L);if(!F)return;let W=a.revive(F);if(a.isExpired(W)){i(null);return}i(W)}catch(L){y.current.error("Error parsing auth record from storage event:",L)}},v=()=>{i(null),m(null)};return window.addEventListener("storage",l),window.addEventListener(s,v),()=>{window.removeEventListener("storage",l),window.removeEventListener(s,v)}},[n,r,o,s,a]),{value:c,setValue:T,isLoading:f,error:d}}async function H(e,t,r){let{storageKey:o,storage:n,fetchInit:s,log:a=b}=r;if(n==="local"||n==="session"){let c=G(n,o,t,a);if(c)return c}if(e){let c=await Y(e,t,s,a);if(c.kind==="ok")return c.value}return}async function w(e,t,r){try{let o=new Headers(r?.fetchInit?.headers);if(!o.has("Accept"))o.set("Accept",B);let n=await fetch(e,{...r?.fetchInit,headers:o});if(!n.ok)return{success:!1,error:`HTTP ${n.status}`};let s=await z(n);if(!s.success)return{success:!1,error:s.message||"Logout failed"};let a=typeof s.redirect==="string"?s.redirect:void 0;if(typeof window<"u"){let c=A(t.defaultStorageKey,r?.storageKey,t.providerLabel);if(localStorage.removeItem(c),sessionStorage.removeItem(c),window.dispatchEvent(new CustomEvent(t.logoutEventName)),a&&r?.navigate!==!1)window.location.assign(a)}return{success:!0,redirect:a}}catch(o){return{success:!1,error:o instanceof Error?o.message:"Network error"}}}import{jsx as Te}from"react/jsx-runtime";var O="ion.ciam.customer",Z="ion-ciam-logout",M="CIAMProvider",Q={validate(e){if(!e||typeof e!=="object")return null;let t=e;if(typeof t.userName!=="string"||typeof t.name!=="string"||typeof t.email!=="string")return null;return e},revive(e){if(e.ciam?.expires)e.ciam.expires=new Date(e.ciam.expires);return e},isExpired(e){let t=e.ciam?.expires;if(!t)return!1;let r=t instanceof Date?t.getTime():new Date(t).getTime();return Number.isFinite(r)&&r<=Date.now()}},N=ve(void 0);function he({storageKey:e,customerUrl:t,storage:r="memory",disableListener:o=!1,fetchInit:n,log:s=me,children:a}){let c=A(O,e,M),{value:i,setValue:f,isLoading:u,error:d}=R({url:t,storage:r,storageKey:c,disableListener:o,logoutEventName:Z,codec:Q,fetchInit:n,log:s}),m=ye(()=>({customer:i,setCustomer:f,isLoading:u,error:d}),[i,f,u,d]);return Te(N.Provider,{value:m,children:a})}function Ce(){let e=X(N);if(e===void 0)throw Error("useCIAMContext must be used within a CIAMProvider");return e}function C(){return X(N)}async function Se(e,t){return H(e,Q,{storageKey:A(O,t?.storageKey,M),storage:t?.storage??"memory",fetchInit:t?.fetchInit,log:t?.log})}async function xe(e,t){return w(e,{defaultStorageKey:O,logoutEventName:Z,providerLabel:M},t)}import{ACCEPT_JSON as Ie,readJsonResponse as Ae,silentLogger as j}from"@ionite/core";import{useCallback as Pe,useEffect as Re,useState as E}from"react";import{jsx as D,jsxs as U}from"react/jsx-runtime";function ee(e,t=j){let[r,o]=E([]),[n,s]=E(Boolean(e)),[a,c]=E(null),i=Pe(()=>{if(!e)return;let f=!1;return s(!0),c(null),fetch(e,{headers:Ie}).then(async(u)=>{if(!u.ok)throw Error(`Failed to fetch CIAM providers: ${u.status} ${u.statusText}`);let d=await Ae(u,{log:t,operation:"react.ciam.providers"});if(!f)o(Array.isArray(d.providers)?d.providers:[])}).catch((u)=>{let d=u instanceof Error?u:Error(String(u));if(t.error("Error fetching CIAM providers:",d),!f)o([]),c(d)}).finally(()=>{if(!f)s(!1)}),()=>{f=!0}},[e,t]);return Re(()=>i(),[i]),{providers:r,isLoading:n,error:a,refresh:i}}function we(e,t){return{display:"flex",alignItems:"center",gap:"0.5rem",width:"100%",padding:"0.625rem 0.875rem",border:"1px solid rgba(0,0,0,0.15)",borderRadius:"0.5rem",background:(t==="dark"?e.colors?.dark:e.colors?.light)??(t==="dark"?"#1f1f1f":"#ffffff"),color:t==="dark"?"#ffffff":"#111111",textDecoration:"none",font:"inherit",cursor:"pointer"}}function Ee({providersUrl:e,limit:t,theme:r="light",renderProvider:o,loadingFallback:n,emptyFallback:s,errorFallback:a,moreLabel:c="Show more",className:i,log:f=j}){let{providers:u,isLoading:d,error:m,refresh:x}=ee(e,f),[y,p]=E(!1);if(d)return n??null;if(m)return a?a(m,x):s??null;if(u.length===0)return s??null;let T=!y&&typeof t==="number"&&t>0?u.slice(0,t):u,h=T.length<u.length;return U("div",{className:i,style:{display:"flex",flexDirection:"column",gap:"0.5rem"},"data-ion-ciam-providers":"",children:[T.map((g)=>o?D("span",{children:o(g)},g.name):U("a",{href:g.loginUrl,style:we(g,r),"data-ion-ciam-provider":g.name,children:[g.iconUrl?D("img",{src:g.iconUrl,alt:"",width:20,height:20,"aria-hidden":"true"}):null,U("span",{children:["Continue with ",g.displayName]})]},g.name)),h?D("button",{type:"button",onClick:()=>p(!0),"data-ion-ciam-show-more":"",children:c}):null]})}import{compareDisplayExpiryDesc as Ne,JSON_MEDIA_TYPE as De,readDisplayCookies as Ue,readJsonResponse as Ve}from"@ionite/core";import{createContext as Ke,useCallback as se,useContext as _e,useEffect as Fe,useMemo as We,useState as ie}from"react";import{buildTenantUrl as te,normalizeTenantRoutingStrategy as re}from"@ionite/core";import{createContext as Le,useContext as oe,useMemo as ke}from"react";import{jsx as Me}from"react/jsx-runtime";var V=Le(null);function ne(e,t){let r=re(t);return{ui:(o="/")=>te(e,o,r,"ui"),api:(o="/")=>te(e,o,r,"api")}}function be({id:e,strategy:t,children:r}){let o=ke(()=>{let n=re(t);return{id:e,strategy:n,urls:ne(e,n)}},[t,e]);return Me(V.Provider,{value:o,children:r})}function Oe(){let e=oe(V);if(!e)throw Error("useTenant() must be used within a TenantProvider");return e}function K(){return oe(V)??void 0}import{jsx as Be}from"react/jsx-runtime";var ae=Ke(void 0);function qe(){if(typeof document>"u")return[];return Ue(document.cookie).filter(({envelope:e})=>Date.parse(e.expiresAt)>Date.now()).sort((e,t)=>{let r=e.envelope.kind==="discovered",o=t.envelope.kind==="discovered";if(r!==o)return r?1:-1;return Ne(e.envelope.expiresAt,t.envelope.expiresAt)}).flatMap(({envelope:e})=>e.tenantId?[{tenantId:e.tenantId,authType:e.authType,source:e.kind==="discovered"?"discovered":"session",user:e.user,expiresAt:e.expiresAt,...e.tenantName?{tenantName:e.tenantName}:{}}]:[]).filter((e,t,r)=>r.findIndex((o)=>o.tenantId===e.tenantId)===t)}function Je({sessionsUrl:e,verify:t="auto",currentTenantId:r,fetchInit:o,children:n}){let s=K(),a=r??s?.id,[c,i]=ie("loading"),[f,u]=ie([]),d=se(async(y)=>{let p=qe(),T=Boolean(a)&&!p.some((g)=>g.tenantId===a),h=y||t==="always"||t==="auto"&&(p.length===0||T);if(p.length>0)u(p),i("cookies");else if(!h){u([]),i("unauthenticated");return}if(!h)return;try{let g=new Headers(o?.headers);if(!g.has("Accept"))g.set("Accept",De);let l=await fetch(e,{credentials:"same-origin",...o,headers:g});if(l.status===404){if(p.length===0)u([]),i("unavailable");return}if(l.status===401){if(p.length===0)u([]),i("unauthenticated");return}if(!l.ok){if(p.length===0)u([]),i("unavailable");return}let v=await Ve(l),I=Array.isArray(v.tenants)?v.tenants:[];u(I),i(I.length>0?"verified":"unauthenticated")}catch{if(p.length===0)u([]),i("unavailable")}},[a,o,e,t]);Fe(()=>{if(typeof document>"u")return;d(!1)},[d]);let m=se(()=>d(!0),[d]),x=We(()=>({status:c,tenants:f,refresh:m}),[c,f,m]);return Be(ae.Provider,{value:x,children:n})}function ue(){let e=_e(ae);if(!e)throw Error("useTenants() must be used within a SessionsProvider");return e}function $e(){return ue()}import{silentLogger as ze}from"@ionite/core";import{createContext as Ge,useContext as ce,useMemo as Ye}from"react";import{jsx as je}from"react/jsx-runtime";var le="ion.sso.user",de="ion-sso-logout",fe="SSOProvider",He={validate(e){if(!e||typeof e!=="object")return null;let t=e;if(typeof t.userName!=="string"||typeof t.name!=="string"||typeof t.email!=="string")return null;return e},revive(e){if(e.sso?.expires)e.sso.expires=new Date(e.sso.expires);return e},isExpired(e){let t=e.sso?.expires;if(!t)return!1;let r=t instanceof Date?t.getTime():new Date(t).getTime();return Number.isFinite(r)&&r<=Date.now()}},_=Ge(void 0);function Xe({storageKey:e,userUrl:t,storage:r="memory",disableListener:o=!1,fetchInit:n,log:s=ze,children:a}){let c=A(le,e,fe),{value:i,setValue:f,isLoading:u,error:d}=R({url:t,storage:r,storageKey:c,disableListener:o,logoutEventName:de,codec:He,fetchInit:n,log:s}),m=Ye(()=>({user:i,setUser:f,isLoading:u,error:d}),[i,f,u,d]);return je(_.Provider,{value:m,children:a})}function Ze(){let e=ce(_);if(e===void 0)throw Error("useSSOContext must be used within a SSOProvider");return e}function S(){return ce(_)}async function Qe(e,t){return w(e,{defaultStorageKey:le,logoutEventName:de,providerLabel:fe},t)}import{jsx as rt,Fragment as tt}from"react/jsx-runtime";function et({complete:e=!1,audience:t="workforce",children:r}){let o=S(),n=C();if((t==="customer"?!!n?.isLoading:!!o?.isLoading)&&!e)return rt(tt,{children:r});return null}import{jsx as st,Fragment as nt}from"react/jsx-runtime";function ot({audience:e="workforce",children:t}){let r=S(),o=C();if(e==="customer"?!!o?.customer:!!r?.user)return st(nt,{children:t});return null}import{jsx as ut,Fragment as at}from"react/jsx-runtime";function it({audience:e="workforce",children:t}){let r=S(),o=C(),n=e==="customer"?!!o?.customer:!!r?.user,s=e==="customer"?!!o?.isLoading:!!r?.isLoading;if(n||s)return null;return ut(at,{children:t})}export{he as CIAMProvider,Ee as CIAMProviderList,Xe as SSOProvider,Je as SessionsProvider,et as SignInLoading,ot as SignedIn,it as SignedOut,be as TenantProvider,ne as createTenantUrls,Ht as defaultLogger,Se as getCustomer,Qe as logout,xe as logoutCustomer,Xt as silentLogger,Ce as useCIAMContext,ee as useCIAMProviders,C as useOptionalCIAMContext,S as useOptionalSSOContext,K as useOptionalTenant,Ze as useSSOContext,$e as useSessions,Oe as useTenant,ue as useTenants};
+// packages/react/src/index.ts
+import { defaultLogger, silentLogger as silentLogger5 } from "@ionite/core";
+
+// packages/react/src/ciam-provider.tsx
+import { silentLogger as silentLogger2 } from "@ionite/core";
+import { createContext, useContext, useMemo } from "react";
+
+// packages/react/src/auth-resource.tsx
+import { JSON_MEDIA_TYPE, readJsonResponse, silentLogger } from "@ionite/core";
+import { useCallback, useEffect, useRef, useState } from "react";
+var VALID_STORAGE_KEY = /^[a-zA-Z0-9._-]{1,1024}$/;
+function validateStorageKey(key, providerLabel) {
+  if (!key.trim()) {
+    throw new Error(`${providerLabel} storageKey must be a non-empty string.`);
+  }
+  if (!VALID_STORAGE_KEY.test(key)) {
+    throw new Error(`${providerLabel} storageKey must be 1-1024 characters and contain only letters, numbers, dots, underscores, and hyphens.`);
+  }
+}
+function resolveStorageKey(defaultKey, storageKey, providerLabel) {
+  if (storageKey === undefined || storageKey === "") {
+    return defaultKey;
+  }
+  validateStorageKey(storageKey, providerLabel);
+  return storageKey;
+}
+function loadFromStorageForKey(storage, storageKey, codec, log = silentLogger) {
+  if (typeof window === "undefined")
+    return null;
+  try {
+    const store = storage === "local" ? localStorage : sessionStorage;
+    const raw = store.getItem(storageKey);
+    if (!raw)
+      return null;
+    const parsed = JSON.parse(raw);
+    const validated = codec.validate(parsed);
+    if (!validated) {
+      store.removeItem(storageKey);
+      return null;
+    }
+    const revived = codec.revive(validated);
+    if (codec.isExpired(revived)) {
+      store.removeItem(storageKey);
+      return null;
+    }
+    return revived;
+  } catch (error) {
+    log.error("Error loading auth record from storage:", error);
+    return null;
+  }
+}
+async function fetchResourceFromServer(url, codec, fetchInit, log = silentLogger) {
+  try {
+    const headers = new Headers(fetchInit?.headers);
+    if (!headers.has("Accept"))
+      headers.set("Accept", JSON_MEDIA_TYPE);
+    const response = await fetch(url, { ...fetchInit, headers });
+    if (response.status === 401) {
+      return { kind: "unauthenticated" };
+    }
+    if (!response.ok) {
+      const error = new Error(`Failed to fetch auth record: ${response.status} ${response.statusText}`);
+      log.error("Error fetching auth record from URL:", error);
+      return { kind: "error", error };
+    }
+    const data = await readJsonResponse(response, {
+      log,
+      operation: "react.auth_resource.fetch"
+    });
+    const validated = codec.validate(data);
+    if (!validated) {
+      const error = new Error("Auth record from server failed validation.");
+      log.error("Error validating auth record from URL:", error);
+      return { kind: "error", error };
+    }
+    return { kind: "ok", value: codec.revive(validated) };
+  } catch (err) {
+    const error = err instanceof Error ? err : new Error(String(err));
+    log.error("Error fetching auth record from URL:", error);
+    return { kind: "error", error };
+  }
+}
+function useAuthResource(options) {
+  const { url, storage, storageKey, disableListener, logoutEventName, codec } = options;
+  const [value, setValueState] = useState(null);
+  const [isLoading, setIsLoading] = useState(!!url);
+  const [error, setError] = useState(null);
+  const fetchInitRef = useRef(options.fetchInit);
+  fetchInitRef.current = options.fetchInit;
+  const logRef = useRef(options.log);
+  logRef.current = options.log;
+  const saveToStorage = useCallback((next) => {
+    if (storage === "memory" || typeof window === "undefined")
+      return;
+    try {
+      const store = storage === "local" ? localStorage : sessionStorage;
+      if (next === null) {
+        store.removeItem(storageKey);
+      } else {
+        store.setItem(storageKey, JSON.stringify(next));
+      }
+    } catch (err) {
+      logRef.current.error("Error saving auth record to storage:", err);
+    }
+  }, [storage, storageKey]);
+  const setValue = useCallback((next) => {
+    setValueState(next);
+    saveToStorage(next);
+  }, [saveToStorage]);
+  const loadFromStorage = useCallback(() => {
+    if (storage === "memory")
+      return null;
+    return loadFromStorageForKey(storage, storageKey, codec, logRef.current);
+  }, [storage, storageKey, codec]);
+  const refresh = useCallback(async () => {
+    if (!url)
+      return;
+    setIsLoading(true);
+    try {
+      const outcome = await fetchResourceFromServer(url, codec, fetchInitRef.current, logRef.current);
+      if (outcome.kind === "ok") {
+        setValueState(outcome.value);
+        setError(null);
+        saveToStorage(outcome.value);
+      } else if (outcome.kind === "unauthenticated") {
+        setValueState(null);
+        setError(null);
+        saveToStorage(null);
+      } else {
+        setError(outcome.error);
+      }
+    } finally {
+      setIsLoading(false);
+    }
+  }, [url, codec, saveToStorage]);
+  useEffect(() => {
+    const stored = loadFromStorage();
+    if (stored)
+      setValueState(stored);
+    if (url) {
+      refresh();
+    } else {
+      setIsLoading(false);
+    }
+  }, [loadFromStorage, url, refresh]);
+  useEffect(() => {
+    if (disableListener || storage === "memory")
+      return;
+    const handleStorageChange = (event) => {
+      if (event.key !== storageKey)
+        return;
+      if (event.newValue === null) {
+        setValueState(null);
+        return;
+      }
+      try {
+        const parsed = JSON.parse(event.newValue);
+        const validated = codec.validate(parsed);
+        if (!validated)
+          return;
+        const revived = codec.revive(validated);
+        if (codec.isExpired(revived)) {
+          setValueState(null);
+          return;
+        }
+        setValueState(revived);
+      } catch (err) {
+        logRef.current.error("Error parsing auth record from storage event:", err);
+      }
+    };
+    const handleLogout = () => {
+      setValueState(null);
+      setError(null);
+    };
+    window.addEventListener("storage", handleStorageChange);
+    window.addEventListener(logoutEventName, handleLogout);
+    return () => {
+      window.removeEventListener("storage", handleStorageChange);
+      window.removeEventListener(logoutEventName, handleLogout);
+    };
+  }, [disableListener, storage, storageKey, logoutEventName, codec]);
+  return { value, setValue, isLoading, error };
+}
+async function getResource(url, codec, options) {
+  const { storageKey, storage, fetchInit, log = silentLogger } = options;
+  if (storage === "local" || storage === "session") {
+    const fromStorage = loadFromStorageForKey(storage, storageKey, codec, log);
+    if (fromStorage)
+      return fromStorage;
+  }
+  if (url) {
+    const outcome = await fetchResourceFromServer(url, codec, fetchInit, log);
+    if (outcome.kind === "ok")
+      return outcome.value;
+  }
+  return;
+}
+async function logoutResource(logoutUrl, config, options) {
+  try {
+    const headers = new Headers(options?.fetchInit?.headers);
+    if (!headers.has("Accept"))
+      headers.set("Accept", JSON_MEDIA_TYPE);
+    const response = await fetch(logoutUrl, {
+      ...options?.fetchInit,
+      headers
+    });
+    if (!response.ok) {
+      return { success: false, error: `HTTP ${response.status}` };
+    }
+    const data = await readJsonResponse(response);
+    if (!data.success) {
+      return { success: false, error: data.message || "Logout failed" };
+    }
+    const redirect = typeof data.redirect === "string" ? data.redirect : undefined;
+    if (typeof window !== "undefined") {
+      const key = resolveStorageKey(config.defaultStorageKey, options?.storageKey, config.providerLabel);
+      localStorage.removeItem(key);
+      sessionStorage.removeItem(key);
+      window.dispatchEvent(new CustomEvent(config.logoutEventName));
+      if (redirect && options?.navigate !== false) {
+        window.location.assign(redirect);
+      }
+    }
+    return { success: true, redirect };
+  } catch (error) {
+    return {
+      success: false,
+      error: error instanceof Error ? error.message : "Network error"
+    };
+  }
+}
+
+// packages/react/src/ciam-provider.tsx
+import { jsx } from "react/jsx-runtime";
+var DEFAULT_STORAGE_KEY = "ion.ciam.customer";
+var LOGOUT_EVENT = "ion-ciam-logout";
+var PROVIDER_LABEL = "CIAMProvider";
+var customerCodec = {
+  validate(raw) {
+    if (!raw || typeof raw !== "object")
+      return null;
+    const candidate = raw;
+    if (typeof candidate.userName !== "string" || typeof candidate.name !== "string" || typeof candidate.email !== "string") {
+      return null;
+    }
+    return raw;
+  },
+  revive(customer) {
+    if (customer.ciam?.expires) {
+      customer.ciam.expires = new Date(customer.ciam.expires);
+    }
+    return customer;
+  },
+  isExpired(customer) {
+    const expires = customer.ciam?.expires;
+    if (!expires)
+      return false;
+    const time = expires instanceof Date ? expires.getTime() : new Date(expires).getTime();
+    return Number.isFinite(time) && time <= Date.now();
+  }
+};
+var CTX = createContext(undefined);
+function CIAMProvider({
+  storageKey: storageKeyProp,
+  customerUrl,
+  storage = "memory",
+  disableListener = false,
+  fetchInit,
+  log = silentLogger2,
+  children
+}) {
+  const storageKey = resolveStorageKey(DEFAULT_STORAGE_KEY, storageKeyProp, PROVIDER_LABEL);
+  const { value, setValue, isLoading, error } = useAuthResource({
+    url: customerUrl,
+    storage,
+    storageKey,
+    disableListener,
+    logoutEventName: LOGOUT_EVENT,
+    codec: customerCodec,
+    fetchInit,
+    log
+  });
+  const contextValue = useMemo(() => ({ customer: value, setCustomer: setValue, isLoading, error }), [value, setValue, isLoading, error]);
+  return /* @__PURE__ */ jsx(CTX.Provider, {
+    value: contextValue,
+    children
+  });
+}
+function useCIAMContext() {
+  const context = useContext(CTX);
+  if (context === undefined) {
+    throw new Error("useCIAMContext must be used within a CIAMProvider");
+  }
+  return context;
+}
+function useOptionalCIAMContext() {
+  return useContext(CTX);
+}
+async function getCustomer(customerUrl, options) {
+  return getResource(customerUrl, customerCodec, {
+    storageKey: resolveStorageKey(DEFAULT_STORAGE_KEY, options?.storageKey, PROVIDER_LABEL),
+    storage: options?.storage ?? "memory",
+    fetchInit: options?.fetchInit,
+    log: options?.log
+  });
+}
+async function logoutCustomer(logoutUrl, options) {
+  return logoutResource(logoutUrl, { defaultStorageKey: DEFAULT_STORAGE_KEY, logoutEventName: LOGOUT_EVENT, providerLabel: PROVIDER_LABEL }, options);
+}
+// packages/react/src/ciam-providers.tsx
+import { ACCEPT_JSON, readJsonResponse as readJsonResponse2, silentLogger as silentLogger3 } from "@ionite/core";
+import { useCallback as useCallback2, useEffect as useEffect2, useState as useState2 } from "react";
+import { jsx as jsx2, jsxs } from "react/jsx-runtime";
+function useCIAMProviders(providersUrl, log = silentLogger3) {
+  const [providers, setProviders] = useState2([]);
+  const [isLoading, setIsLoading] = useState2(Boolean(providersUrl));
+  const [error, setError] = useState2(null);
+  const refresh = useCallback2(() => {
+    if (!providersUrl)
+      return;
+    let cancelled = false;
+    setIsLoading(true);
+    setError(null);
+    fetch(providersUrl, { headers: ACCEPT_JSON }).then(async (response) => {
+      if (!response.ok) {
+        throw new Error(`Failed to fetch CIAM providers: ${response.status} ${response.statusText}`);
+      }
+      const data = await readJsonResponse2(response, {
+        log,
+        operation: "react.ciam.providers"
+      });
+      if (!cancelled)
+        setProviders(Array.isArray(data.providers) ? data.providers : []);
+    }).catch((err) => {
+      const normalized = err instanceof Error ? err : new Error(String(err));
+      log.error("Error fetching CIAM providers:", normalized);
+      if (!cancelled) {
+        setProviders([]);
+        setError(normalized);
+      }
+    }).finally(() => {
+      if (!cancelled)
+        setIsLoading(false);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [providersUrl, log]);
+  useEffect2(() => {
+    const cleanup = refresh();
+    return cleanup;
+  }, [refresh]);
+  return { providers, isLoading, error, refresh };
+}
+function providerButtonStyle(provider, theme) {
+  const background = theme === "dark" ? provider.colors?.dark : provider.colors?.light;
+  return {
+    display: "flex",
+    alignItems: "center",
+    gap: "0.5rem",
+    width: "100%",
+    padding: "0.625rem 0.875rem",
+    border: "1px solid rgba(0,0,0,0.15)",
+    borderRadius: "0.5rem",
+    background: background ?? (theme === "dark" ? "#1f1f1f" : "#ffffff"),
+    color: theme === "dark" ? "#ffffff" : "#111111",
+    textDecoration: "none",
+    font: "inherit",
+    cursor: "pointer"
+  };
+}
+function CIAMProviderList({
+  providersUrl,
+  limit,
+  theme = "light",
+  renderProvider,
+  loadingFallback,
+  emptyFallback,
+  errorFallback,
+  moreLabel = "Show more",
+  className,
+  log = silentLogger3
+}) {
+  const { providers, isLoading, error, refresh } = useCIAMProviders(providersUrl, log);
+  const [expanded, setExpanded] = useState2(false);
+  if (isLoading) {
+    return loadingFallback ?? null;
+  }
+  if (error) {
+    return errorFallback ? errorFallback(error, refresh) : emptyFallback ?? null;
+  }
+  if (providers.length === 0) {
+    return emptyFallback ?? null;
+  }
+  const visible = !expanded && typeof limit === "number" && limit > 0 ? providers.slice(0, limit) : providers;
+  const hasMore = visible.length < providers.length;
+  return /* @__PURE__ */ jsxs("div", {
+    className,
+    style: { display: "flex", flexDirection: "column", gap: "0.5rem" },
+    "data-ion-ciam-providers": "",
+    children: [
+      visible.map((provider) => renderProvider ? /* @__PURE__ */ jsx2("span", {
+        children: renderProvider(provider)
+      }, provider.name) : /* @__PURE__ */ jsxs("a", {
+        href: provider.loginUrl,
+        style: providerButtonStyle(provider, theme),
+        "data-ion-ciam-provider": provider.name,
+        children: [
+          provider.iconUrl ? /* @__PURE__ */ jsx2("img", {
+            src: provider.iconUrl,
+            alt: "",
+            width: 20,
+            height: 20,
+            "aria-hidden": "true"
+          }) : null,
+          /* @__PURE__ */ jsxs("span", {
+            children: [
+              "Continue with ",
+              provider.displayName
+            ]
+          })
+        ]
+      }, provider.name)),
+      hasMore ? /* @__PURE__ */ jsx2("button", {
+        type: "button",
+        onClick: () => setExpanded(true),
+        "data-ion-ciam-show-more": "",
+        children: moreLabel
+      }) : null
+    ]
+  });
+}
+// packages/react/src/sessions-context.tsx
+import {
+  compareDisplayExpiryDesc,
+  JSON_MEDIA_TYPE as JSON_MEDIA_TYPE2,
+  readDisplayCookies,
+  readJsonResponse as readJsonResponse3
+} from "@ionite/core";
+import { createContext as createContext3, useCallback as useCallback3, useContext as useContext3, useEffect as useEffect3, useMemo as useMemo3, useState as useState3 } from "react";
+
+// packages/react/src/tenant-context.tsx
+import { buildTenantUrl, normalizeTenantRoutingStrategy } from "@ionite/core";
+import { createContext as createContext2, useContext as useContext2, useMemo as useMemo2 } from "react";
+import { jsx as jsx3 } from "react/jsx-runtime";
+var TenantContext = createContext2(null);
+function createTenantUrls(id, strategy) {
+  const normalized = normalizeTenantRoutingStrategy(strategy);
+  return {
+    ui: (restPath = "/") => buildTenantUrl(id, restPath, normalized, "ui"),
+    api: (restPath = "/") => buildTenantUrl(id, restPath, normalized, "api")
+  };
+}
+function TenantProvider({ id, strategy, children }) {
+  const value = useMemo2(() => {
+    const normalized = normalizeTenantRoutingStrategy(strategy);
+    return {
+      id,
+      strategy: normalized,
+      urls: createTenantUrls(id, normalized)
+    };
+  }, [strategy, id]);
+  return /* @__PURE__ */ jsx3(TenantContext.Provider, {
+    value,
+    children
+  });
+}
+function useTenant() {
+  const value = useContext2(TenantContext);
+  if (!value) {
+    throw new Error("useTenant() must be used within a TenantProvider");
+  }
+  return value;
+}
+function useOptionalTenant() {
+  return useContext2(TenantContext) ?? undefined;
+}
+
+// packages/react/src/sessions-context.tsx
+import { jsx as jsx4 } from "react/jsx-runtime";
+var SessionsContext = createContext3(undefined);
+function tenantsFromCookies() {
+  if (typeof document === "undefined")
+    return [];
+  return readDisplayCookies(document.cookie).filter(({ envelope }) => Date.parse(envelope.expiresAt) > Date.now()).sort((a, b) => {
+    const aDiscovered = a.envelope.kind === "discovered";
+    const bDiscovered = b.envelope.kind === "discovered";
+    if (aDiscovered !== bDiscovered)
+      return aDiscovered ? 1 : -1;
+    return compareDisplayExpiryDesc(a.envelope.expiresAt, b.envelope.expiresAt);
+  }).flatMap(({ envelope }) => envelope.tenantId ? [
+    {
+      tenantId: envelope.tenantId,
+      authType: envelope.authType,
+      source: envelope.kind === "discovered" ? "discovered" : "session",
+      user: envelope.user,
+      expiresAt: envelope.expiresAt,
+      ...envelope.tenantName ? { tenantName: envelope.tenantName } : {}
+    }
+  ] : []).filter((entry, index, entries) => entries.findIndex((candidate) => candidate.tenantId === entry.tenantId) === index);
+}
+function SessionsProvider({
+  sessionsUrl,
+  verify = "auto",
+  currentTenantId,
+  fetchInit,
+  children
+}) {
+  const tenant = useOptionalTenant();
+  const current = currentTenantId ?? tenant?.id;
+  const [status, setStatus] = useState3("loading");
+  const [tenants, setTenants] = useState3([]);
+  const load = useCallback3(async (force) => {
+    const fromCookies = tenantsFromCookies();
+    const currentMissing = Boolean(current) && !fromCookies.some((entry) => entry.tenantId === current);
+    const shouldFetch = force || verify === "always" || verify === "auto" && (fromCookies.length === 0 || currentMissing);
+    if (fromCookies.length > 0) {
+      setTenants(fromCookies);
+      setStatus("cookies");
+    } else if (!shouldFetch) {
+      setTenants([]);
+      setStatus("unauthenticated");
+      return;
+    }
+    if (!shouldFetch)
+      return;
+    try {
+      const headers = new Headers(fetchInit?.headers);
+      if (!headers.has("Accept"))
+        headers.set("Accept", JSON_MEDIA_TYPE2);
+      const response = await fetch(sessionsUrl, { credentials: "same-origin", ...fetchInit, headers });
+      if (response.status === 404) {
+        if (fromCookies.length === 0) {
+          setTenants([]);
+          setStatus("unavailable");
+        }
+        return;
+      }
+      if (response.status === 401) {
+        if (fromCookies.length === 0) {
+          setTenants([]);
+          setStatus("unauthenticated");
+        }
+        return;
+      }
+      if (!response.ok) {
+        if (fromCookies.length === 0) {
+          setTenants([]);
+          setStatus("unavailable");
+        }
+        return;
+      }
+      const body = await readJsonResponse3(response);
+      const verified = Array.isArray(body.tenants) ? body.tenants : [];
+      setTenants(verified);
+      setStatus(verified.length > 0 ? "verified" : "unauthenticated");
+    } catch {
+      if (fromCookies.length === 0) {
+        setTenants([]);
+        setStatus("unavailable");
+      }
+    }
+  }, [current, fetchInit, sessionsUrl, verify]);
+  useEffect3(() => {
+    if (typeof document === "undefined")
+      return;
+    load(false);
+  }, [load]);
+  const refresh = useCallback3(() => load(true), [load]);
+  const value = useMemo3(() => ({ status, tenants, refresh }), [status, tenants, refresh]);
+  return /* @__PURE__ */ jsx4(SessionsContext.Provider, {
+    value,
+    children
+  });
+}
+function useTenants() {
+  const value = useContext3(SessionsContext);
+  if (!value)
+    throw new Error("useTenants() must be used within a SessionsProvider");
+  return value;
+}
+function useSessions() {
+  return useTenants();
+}
+// packages/react/src/sso-provider.tsx
+import { silentLogger as silentLogger4 } from "@ionite/core";
+import { createContext as createContext4, useContext as useContext4, useMemo as useMemo4 } from "react";
+import { jsx as jsx5 } from "react/jsx-runtime";
+var DEFAULT_STORAGE_KEY2 = "ion.sso.user";
+var LOGOUT_EVENT2 = "ion-sso-logout";
+var PROVIDER_LABEL2 = "SSOProvider";
+var userCodec = {
+  validate(raw) {
+    if (!raw || typeof raw !== "object")
+      return null;
+    const candidate = raw;
+    if (typeof candidate.userName !== "string" || typeof candidate.name !== "string" || typeof candidate.email !== "string") {
+      return null;
+    }
+    return raw;
+  },
+  revive(user) {
+    if (user.sso?.expires) {
+      user.sso.expires = new Date(user.sso.expires);
+    }
+    return user;
+  },
+  isExpired(user) {
+    const expires = user.sso?.expires;
+    if (!expires)
+      return false;
+    const time = expires instanceof Date ? expires.getTime() : new Date(expires).getTime();
+    return Number.isFinite(time) && time <= Date.now();
+  }
+};
+var CTX2 = createContext4(undefined);
+function SSOProvider({
+  storageKey: storageKeyProp,
+  userUrl,
+  storage = "memory",
+  disableListener = false,
+  fetchInit,
+  log = silentLogger4,
+  children
+}) {
+  const storageKey = resolveStorageKey(DEFAULT_STORAGE_KEY2, storageKeyProp, PROVIDER_LABEL2);
+  const { value, setValue, isLoading, error } = useAuthResource({
+    url: userUrl,
+    storage,
+    storageKey,
+    disableListener,
+    logoutEventName: LOGOUT_EVENT2,
+    codec: userCodec,
+    fetchInit,
+    log
+  });
+  const contextValue = useMemo4(() => ({ user: value, setUser: setValue, isLoading, error }), [value, setValue, isLoading, error]);
+  return /* @__PURE__ */ jsx5(CTX2.Provider, {
+    value: contextValue,
+    children
+  });
+}
+function useSSOContext() {
+  const context = useContext4(CTX2);
+  if (context === undefined) {
+    throw new Error("useSSOContext must be used within a SSOProvider");
+  }
+  return context;
+}
+function useOptionalSSOContext() {
+  return useContext4(CTX2);
+}
+async function logout(logoutUrl, options) {
+  return logoutResource(logoutUrl, { defaultStorageKey: DEFAULT_STORAGE_KEY2, logoutEventName: LOGOUT_EVENT2, providerLabel: PROVIDER_LABEL2 }, options);
+}
+
+// packages/react/src/sign-in-loading.tsx
+import { jsx as jsx6, Fragment } from "react/jsx-runtime";
+function SignInLoading({
+  complete = false,
+  audience = "workforce",
+  children
+}) {
+  const sso = useOptionalSSOContext();
+  const ciam = useOptionalCIAMContext();
+  const isLoading = audience === "customer" ? !!ciam?.isLoading : !!sso?.isLoading;
+  if (isLoading && !complete)
+    return /* @__PURE__ */ jsx6(Fragment, {
+      children
+    });
+  return null;
+}
+// packages/react/src/signed-in.tsx
+import { jsx as jsx7, Fragment as Fragment2 } from "react/jsx-runtime";
+function SignedIn({
+  audience = "workforce",
+  children
+}) {
+  const sso = useOptionalSSOContext();
+  const ciam = useOptionalCIAMContext();
+  const present = audience === "customer" ? !!ciam?.customer : !!sso?.user;
+  if (present)
+    return /* @__PURE__ */ jsx7(Fragment2, {
+      children
+    });
+  return null;
+}
+// packages/react/src/signed-out.tsx
+import { jsx as jsx8, Fragment as Fragment3 } from "react/jsx-runtime";
+function SignedOut({
+  audience = "workforce",
+  children
+}) {
+  const sso = useOptionalSSOContext();
+  const ciam = useOptionalCIAMContext();
+  const present = audience === "customer" ? !!ciam?.customer : !!sso?.user;
+  const isLoading = audience === "customer" ? !!ciam?.isLoading : !!sso?.isLoading;
+  if (present || isLoading)
+    return null;
+  return /* @__PURE__ */ jsx8(Fragment3, {
+    children
+  });
+}
+export {
+  CIAMProvider,
+  CIAMProviderList,
+  SSOProvider,
+  SessionsProvider,
+  SignInLoading,
+  SignedIn,
+  SignedOut,
+  TenantProvider,
+  createTenantUrls,
+  defaultLogger,
+  getCustomer,
+  logout,
+  logoutCustomer,
+  silentLogger5 as silentLogger,
+  useCIAMContext,
+  useCIAMProviders,
+  useOptionalCIAMContext,
+  useOptionalSSOContext,
+  useOptionalTenant,
+  useSSOContext,
+  useSessions,
+  useTenant,
+  useTenants
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ionite/react",
-  "version": "0.0.24-beta.20260928.17",
+  "version": "0.0.24-beta.20260930.19",
   "description": "ionite React Components",
   "private": false,
   "author": "ionite",
@@ -24,7 +24,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@ionite/core": "0.0.24-beta.20260928.17"
+    "@ionite/core": "0.0.24-beta.20260930.19"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",