@iqauth/sdk 2.1.0 → 2.3.0

package/dist/{signIn-CEMdUAwd.d.mts → signIn-Cd0P4y9d.d.mts}

@@ -1,4 +1,4 @@
-import { b as ParsedPublishableKey } from './publishableKey-B5DIK81A.mjs';
+import { c as ParsedPublishableKey } from './publishableKey-BaR0HoAH.mjs';
 import { d as SessionUser, J as JwtClaims } from './types-Cxl3bQHt.mjs';
 
 /**
@@ -216,6 +216,14 @@ interface SignOutOptions {
     logoutPath?: string;
     /** Skip the network call to IQAuth and just clear the local session. */
     localOnly?: boolean;
+    /**
+     * Also clear the IQAuth single-sign-on session (the `iq_sso` cookie on the
+     * issuer host). When `true` (the default), the next visit to `/sign-in`
+     * will show the login form instead of silently resuming the prior session.
+     * Set to `false` to preserve SSO across other apps in the same IQAuth
+     * tenant (e.g. log out of one app but stay signed in to others).
+     */
+    endSsoSession?: boolean;
 }
 interface CallbackResult {
     ok: boolean;

package/dist/{signIn-VRNzlNyG.d.ts → signIn-DKakyzeu.d.ts}

@@ -1,4 +1,4 @@
-import { b as ParsedPublishableKey } from './publishableKey-B5DIK81A.js';
+import { c as ParsedPublishableKey } from './publishableKey-BaR0HoAH.js';
 import { d as SessionUser, J as JwtClaims } from './types-Cxl3bQHt.js';
 
 /**
@@ -216,6 +216,14 @@ interface SignOutOptions {
     logoutPath?: string;
     /** Skip the network call to IQAuth and just clear the local session. */
     localOnly?: boolean;
+    /**
+     * Also clear the IQAuth single-sign-on session (the `iq_sso` cookie on the
+     * issuer host). When `true` (the default), the next visit to `/sign-in`
+     * will show the login form instead of silently resuming the prior session.
+     * Set to `false` to preserve SSO across other apps in the same IQAuth
+     * tenant (e.g. log out of one app but stay signed in to others).
+     */
+    endSsoSession?: boolean;
 }
 interface CallbackResult {
     ok: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iqauth/sdk",
-  "version": "2.1.0",
+  "version": "2.3.0",
   "description": "TypeScript SDK for IQAuth — the canonical way for all IQ projects to integrate with IQAuthService",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -83,7 +83,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "jsonwebtoken": "^9.0.2"
+    "jsonwebtoken": "^9.0.2",
+    "jose": "^4.15.9"
   },
   "peerDependencies": {
     "react": ">=18",

package/dist/chunk-5WFR6Y33.mjs

@@ -1,59 +0,0 @@
-import {
-  __require
-} from "./chunk-Y6FXYEAI.mjs";
-
-// src/publishableKey.ts
-function b64urlEncode(input) {
-  if (typeof btoa === "function") {
-    const bytes = new TextEncoder().encode(input);
-    let bin = "";
-    for (let i = 0; i < bytes.byteLength; i++) bin += String.fromCharCode(bytes[i]);
-    return btoa(bin).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-  }
-  const { Buffer } = __require("buffer");
-  return Buffer.from(input, "utf8").toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function b64urlDecode(input) {
-  const pad = input.length % 4 === 0 ? "" : "=".repeat(4 - input.length % 4);
-  const normalized = input.replace(/-/g, "+").replace(/_/g, "/") + pad;
-  if (typeof atob === "function") {
-    const bin = atob(normalized);
-    const bytes = new Uint8Array(bin.length);
-    for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);
-    return new TextDecoder().decode(bytes);
-  }
-  const { Buffer } = __require("buffer");
-  return Buffer.from(normalized, "base64").toString("utf8");
-}
-function encodePublishableKey(mode, payload) {
-  if (mode !== "test" && mode !== "live") throw new Error(`Invalid mode: ${mode}`);
-  return `pk_${mode}_${b64urlEncode(JSON.stringify(payload))}`;
-}
-function parsePublishableKey(raw) {
-  if (typeof raw !== "string") return null;
-  const m = raw.match(/^pk_(test|live)_([A-Za-z0-9_-]+)$/);
-  if (!m) return null;
-  try {
-    const json = JSON.parse(b64urlDecode(m[2]));
-    if (!json || typeof json !== "object") return null;
-    if (typeof json.iss !== "string" || typeof json.appId !== "string" || typeof json.tenantId !== "string" || typeof json.kid !== "string") {
-      return null;
-    }
-    return { mode: m[1], iss: json.iss, appId: json.appId, tenantId: json.tenantId, kid: json.kid, raw };
-  } catch {
-    return null;
-  }
-}
-function isPublishableKey(raw) {
-  return typeof raw === "string" && /^pk_(test|live)_/.test(raw);
-}
-function isSecretKey(raw) {
-  return typeof raw === "string" && /^sk_(test|live)_/.test(raw);
-}
-
-export {
-  encodePublishableKey,
-  parsePublishableKey,
-  isPublishableKey,
-  isSecretKey
-};