@nibssplc/cams-sdk-react 0.0.1-beta.75 → 0.0.1-beta.77

package/dist/index.esm.js

@@ -2,8 +2,8 @@ import * as React from 'react';
 import React__default, { useState, useRef, useEffect, useCallback, createContext, useContext, useMemo } from 'react';
 import { isPopupWindow, initializePopupAuth, CAMSSessionManager, CAMSMFAAuthenticator, Logger, CAMSError, CAMSErrorType } from '@nibssplc/cams-sdk';
 export * from '@nibssplc/cams-sdk';
-import { useMsal, useAccount, MsalProvider } from '@azure/msal-react';
-import { InteractionStatus, PublicClientApplication } from '@azure/msal-browser';
+import { MsalProvider, useMsal, useAccount } from '@azure/msal-react';
+import { PublicClientApplication, InteractionStatus } from '@azure/msal-browser';
 import z$1, { z } from 'zod';
 import { OTPInput, OTPInputContext, REGEXP_ONLY_DIGITS } from 'input-otp';
 import { RectangleEllipsis, XIcon, CheckCircle, Mail, Shield, ShieldCheck, ShieldClose } from 'lucide-react';
@@ -236,322 +236,18 @@ function useCAMSAuth(options) {
     };
 }
 
-function useCAMSMSALAuth(options) {
-    var _this = this;
-    var storageKey = options.storageKey || "CAMS-MSAL-AUTH-SDK";
-    var _a = useMsal(), instance = _a.instance, inProgress = _a.inProgress, accounts = _a.accounts;
-    var account = useAccount(accounts[0] || {});
-    var _b = useState(null), error = _b[0], setError = _b[1];
-    var _c = useState(""), idToken = _c[0], setIdToken = _c[1];
-    var _d = useState(""), accessToken = _d[0], setAccessToken = _d[1];
-    var _e = useState(null), mfaAuthenticator = _e[0], setMfaAuthenticator = _e[1];
-    var _f = useState(false), requiresMFA = _f[0], setRequiresMFA = _f[1];
-    var isLoading = inProgress !== InteractionStatus.None;
-    var isAuthenticated = !!account && !!accessToken && !requiresMFA;
-    var scopes = options.scopes || ["openid", "profile", "email"];
-    var isTokenValid = function (token) {
-        try {
-            var payload = JSON.parse(atob(token.split(".")[1]));
-            return payload.exp * 1000 > Date.now();
-        }
-        catch (_a) {
-            return false;
-        }
-    };
-    useEffect(function () {
-        if (typeof window !== "undefined" && !accessToken) {
-            var stored = localStorage.getItem(storageKey);
-            if (stored) {
-                try {
-                    var _a = JSON.parse(stored), accessToken_1 = _a.accessToken, idToken_1 = _a.idToken, storedRequiresMFA = _a.requiresMFA, storedIsAuthenticated = _a.isAuthenticated;
-                    if (accessToken_1 && isTokenValid(accessToken_1)) {
-                        setAccessToken(accessToken_1);
-                        setIdToken(idToken_1);
-                        // Restore MFA state
-                        if (storedRequiresMFA && !storedIsAuthenticated) {
-                            var mfaConfig = {
-                                accessToken: accessToken_1,
-                                idToken: idToken_1,
-                                appCode: options.appCode,
-                                provider: "MSAL",
-                                apiEndpoint: options.MFAEndpoint,
-                            };
-                            var authenticator = new CAMSMFAAuthenticator(mfaConfig);
-                            setMfaAuthenticator(authenticator);
-                            setRequiresMFA(true);
-                        }
-                        Logger.debug("App Code", { ">>>": options.appCode });
-                    }
-                    else {
-                        localStorage.removeItem(storageKey);
-                    }
-                }
-                catch (_b) { }
-            }
-            else if (account) {
-                // Storage cleared but MSAL account exists - clear MSAL state
-                instance.logoutRedirect().catch(function () { });
-            }
-        }
-    }, [accessToken, account, instance, options.storageKey]);
-    // useEffect(() => {
-    //   const handleRedirect = async () => {
-    //     try {
-    //       const response = await instance.handleRedirectPromise();
-    //       if (response) {
-    //         const account = response.account;
-    //         instance.setActiveA ccount(account);
-    //         const tokenResponse = await instance.acq uireTokenSilent({
-    //           scopes,
-    //           account,
-    //         });
-    //         setToken(tokenResponse.accessToken);
-    //         setAccessToken(tokenResponse.accessToken);
-    //         setIdToken(tokenResponse.idTo ken);
-    //         options.onAuthSuccess?.(tokenR esponse.accessToken);
-    //         if (
-    //           typeof window !== "undefined" &&
-    //           process.env.NODE_ENV !== "test"
-    //         ) {
-    //           window.location.href = options.mfaUrl!;
-    //         }
-    //       }
-    //     } catch (err) {
-    //       console.error("Redirect handling failed:", err);
-    //     }
-    //   };
-    //   handleRedirect();
-    // }, []);
-    var login = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
-        var response, mfaConfig, authenticator, err_1, camsError_1, camsError;
-        var _a, _b, _c, _d;
-        return __generator(this, function (_e) {
-            switch (_e.label) {
-                case 0:
-                    setError(null);
-                    _e.label = 1;
-                case 1:
-                    _e.trys.push([1, 3, , 4]);
-                    return [4 /*yield*/, instance.loginPopup({
-                            scopes: scopes,
-                            prompt: options.prompt || "login",
-                        })];
-                case 2:
-                    response = _e.sent();
-                    console.log("Login Token response:", {
-                        accessToken: response.accessToken,
-                        idToken: response.idToken,
-                    });
-                    setAccessToken(response.accessToken);
-                    setIdToken(response.idToken);
-                    mfaConfig = {
-                        accessToken: response.accessToken,
-                        idToken: response.idToken,
-                        appCode: options.appCode,
-                        provider: "MSAL",
-                        apiEndpoint: options.MFAEndpoint,
-                    };
-                    authenticator = new CAMSMFAAuthenticator(mfaConfig);
-                    setMfaAuthenticator(authenticator);
-                    setRequiresMFA(true);
-                    // Don't persist as authenticated until MFA is complete
-                    if (typeof window !== "undefined") {
-                        localStorage.setItem(storageKey, JSON.stringify({
-                            isAuthenticated: false,
-                            requiresMFA: true,
-                            accessToken: response.accessToken,
-                            idToken: response.idToken,
-                        }));
-                    }
-                    (_a = options.onAuthSuccess) === null || _a === void 0 ? void 0 : _a.call(options, response.accessToken);
-                    return [3 /*break*/, 4];
-                case 3:
-                    err_1 = _e.sent();
-                    // Handle user cancellation gracefully
-                    if (err_1.errorCode === "user_cancelled") {
-                        Logger.error("User cancelled login");
-                        setError(null); // Don't treat cancellation as an error
-                        return [2 /*return*/];
-                    }
-                    // If popup is blocked
-                    if (err_1.errorCode === "popup_window_error" ||
-                        ((_b = err_1.message) === null || _b === void 0 ? void 0 : _b.includes("popup"))) {
-                        camsError_1 = new CAMSError(CAMSErrorType.POPUP_BLOCKED, "Popup blocked by browser. Please allow popups and try again.");
-                        setError(camsError_1);
-                        (_c = options.onAuthError) === null || _c === void 0 ? void 0 : _c.call(options, camsError_1);
-                        return [2 /*return*/];
-                    }
-                    camsError = new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "Login failed: " + err_1.message || err_1);
-                    setError(camsError);
-                    (_d = options.onAuthError) === null || _d === void 0 ? void 0 : _d.call(options, camsError);
-                    return [3 /*break*/, 4];
-                case 4: return [2 /*return*/];
-            }
-        });
-    }); }, [instance, scopes, options]);
-    var completeMFA = useCallback(function (code, type) { return __awaiter(_this, void 0, void 0, function () {
-        var mfaResponse, error_1;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0:
-                    if (!mfaAuthenticator) {
-                        throw new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "MFA Authenticator not initialized");
-                    }
-                    _a.label = 1;
-                case 1:
-                    _a.trys.push([1, 3, , 4]);
-                    return [4 /*yield*/, mfaAuthenticator.verifyOTP(code, type)];
-                case 2:
-                    mfaResponse = _a.sent();
-                    if (mfaResponse.isAuthenticated) {
-                        // Update storage with complete authentication BEFORE setting state
-                        if (typeof window !== "undefined") {
-                            localStorage.setItem(storageKey, JSON.stringify({
-                                isAuthenticated: true,
-                                requiresMFA: false,
-                                accessToken: accessToken,
-                                idToken: idToken,
-                                userProfile: mfaResponse,
-                            }));
-                            Logger.info("MFA completed successfully, storage updated", {
-                                accessToken: accessToken,
-                                idToken: idToken,
-                                isAuthenticated: isAuthenticated,
-                                requiresMFA: requiresMFA,
-                            });
-                        }
-                        // Set requiresMFA to false after storage update
-                        setRequiresMFA(false);
-                        Logger.debug("MFA completed successfully, requiresMFA set to false");
-                    }
-                    return [2 /*return*/, mfaResponse];
-                case 3:
-                    error_1 = _a.sent();
-                    setError(error_1);
-                    throw error_1;
-                case 4: return [2 /*return*/];
-            }
-        });
-    }); }, [mfaAuthenticator, accessToken, idToken, storageKey, requiresMFA]);
-    var sendEmailOTP = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0:
-                    if (!mfaAuthenticator) {
-                        return [2 /*return*/, false];
-                    }
-                    return [4 /*yield*/, mfaAuthenticator.sendEmailOTP()];
-                case 1: return [2 /*return*/, _a.sent()];
-            }
-        });
-    }); }, [mfaAuthenticator]);
-    var logout = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
-        var err_2, camsError;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0:
-                    _a.trys.push([0, 2, , 3]);
-                    Logger.info("Logging User Out");
-                    return [4 /*yield*/, instance.logoutRedirect()];
-                case 1:
-                    _a.sent();
-                    setAccessToken("");
-                    setIdToken("");
-                    setError(null);
-                    setMfaAuthenticator(null);
-                    setRequiresMFA(false);
-                    if (typeof window !== "undefined") {
-                        localStorage.removeItem(storageKey);
-                    }
-                    return [3 /*break*/, 3];
-                case 2:
-                    err_2 = _a.sent();
-                    camsError = new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "Logout failed: " + err_2);
-                    setError(camsError);
-                    return [3 /*break*/, 3];
-                case 3: return [2 /*return*/];
-            }
-        });
-    }); }, [instance, storageKey]);
-    return {
-        login: login,
-        logout: logout,
-        storageKey: storageKey,
-        isAuthenticated: isAuthenticated,
-        isLoading: isLoading,
-        error: error,
-        idToken: idToken,
-        accessToken: accessToken,
-        appCode: options.appCode,
-        mfaAuthenticator: mfaAuthenticator,
-        requiresMFA: requiresMFA,
-        completeMFA: completeMFA,
-        sendEmailOTP: sendEmailOTP,
-    };
-}
+var jsxRuntime = {exports: {}};
+
+var reactJsxRuntime_production = {};
 
 /**
- * Hook for handling authentication in popup windows
- * This should be used by the popup app to complete authentication
- */
-function useCAMSPopupAuth(options) {
-    if (options === void 0) { options = {}; }
-    var _a = options.storageKey, storageKey = _a === void 0 ? "CAMS-SDK" : _a, targetOrigin = options.targetOrigin, onAuthComplete = options.onAuthComplete, onAuthError = options.onAuthError;
-    useEffect(function () {
-        if (typeof window === "undefined" || !isPopupWindow())
-            return;
-        // Initialize popup auth handler
-        initializePopupAuth(targetOrigin);
-        // Set up global handlers for the popup app
-        var globalHandlers = window.__CAMS_POPUP_AUTH__;
-        if (globalHandlers) {
-            var originalCompleteAuth_1 = globalHandlers.completeAuth;
-            var originalErrorAuth_1 = globalHandlers.errorAuth;
-            globalHandlers.completeAuth = function (profile) {
-                onAuthComplete === null || onAuthComplete === void 0 ? void 0 : onAuthComplete(profile);
-                originalCompleteAuth_1(profile);
-            };
-            globalHandlers.errorAuth = function (error) {
-                onAuthError === null || onAuthError === void 0 ? void 0 : onAuthError(error);
-                originalErrorAuth_1(error);
-            };
-        }
-    }, [targetOrigin, onAuthComplete, onAuthError]);
-    var completeAuth = useCallback(function (profile) {
-        if (!isPopupWindow()) {
-            console.warn("completeAuth called outside of popup window");
-            return;
-        }
-        var sessionManager = new CAMSSessionManager(localStorage, storageKey);
-        sessionManager.completePopupAuth(profile, targetOrigin);
-    }, [storageKey, targetOrigin]);
-    var errorAuth = useCallback(function (error) {
-        if (!isPopupWindow()) {
-            console.warn("errorAuth called outside of popup window");
-            return;
-        }
-        var sessionManager = new CAMSSessionManager(localStorage, storageKey);
-        sessionManager.errorPopupAuth(error, targetOrigin);
-    }, [storageKey, targetOrigin]);
-    return {
-        completeAuth: completeAuth,
-        errorAuth: errorAuth,
-        isPopup: isPopupWindow(),
-    };
-}
-
-var jsxRuntime = {exports: {}};
-
-var reactJsxRuntime_production = {};
-
-/**
- * @license React
- * react-jsx-runtime.production.js
- *
- * Copyright (c) Meta Platforms, Inc. and affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
+ * @license React
+ * react-jsx-runtime.production.js
+ *
+ * Copyright (c) Meta Platforms, Inc. and affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
  */
 
 var hasRequiredReactJsxRuntime_production;
@@ -951,17 +647,464 @@ function requireReactJsxRuntime_development () {
 	return reactJsxRuntime_development;
 }
 
-if (process.env.NODE_ENV === 'production') {
-  jsxRuntime.exports = requireReactJsxRuntime_production();
-} else {
-  jsxRuntime.exports = requireReactJsxRuntime_development();
+if (process.env.NODE_ENV === 'production') {
+  jsxRuntime.exports = requireReactJsxRuntime_production();
+} else {
+  jsxRuntime.exports = requireReactJsxRuntime_development();
+}
+
+var jsxRuntimeExports = jsxRuntime.exports;
+
+var CAMSContext$1 = createContext(null);
+function useCAMSContext$1() {
+    var context = useContext(CAMSContext$1);
+    if (!context) {
+        throw new Error("useCAMSContext must be used within a UnifiedCAMSProvider");
+    }
+    return context;
+}
+
+var ClientOnly = function (_a) {
+    var children = _a.children, _b = _a.fallback, fallback = _b === void 0 ? null : _b;
+    var _c = useState(false), hasMounted = _c[0], setHasMounted = _c[1];
+    useEffect(function () {
+        setHasMounted(true);
+    }, []);
+    if (!hasMounted) {
+        return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: fallback });
+    }
+    return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: children });
+};
+
+var GuidSchema = z.uuid("appCode must be a valid GUID");
+var setCookie$1 = function (name, value, days) {
+    if (days === void 0) { days = 1; }
+    var expires = new Date(Date.now() + days * 24 * 60 * 60 * 1000).toUTCString();
+    document.cookie = "".concat(name, "=").concat(encodeURIComponent(value), "; expires=").concat(expires, "; path=/; samesite=Lax");
+};
+var getCookie$1 = function (name) {
+    var _a;
+    return ((_a = document.cookie
+        .split("; ")
+        .find(function (row) { return row.startsWith(name + "="); })) === null || _a === void 0 ? void 0 : _a.split("=")[1])
+        ? decodeURIComponent(document.cookie
+            .split("; ")
+            .find(function (row) { return row.startsWith(name + "="); })
+            .split("=")[1])
+        : null;
+};
+var deleteCookie$1 = function (name) {
+    document.cookie = name + "=; Max-Age=-99999999; path=/";
+};
+function CAMSProviderCore(props) {
+    var _this = this;
+    var children = props.children, mode = props.mode, appCode = props.appCode;
+    // Always call both hooks to satisfy Rules of Hooks
+    var regularAuth = useCAMSAuth(mode === "REGULAR"
+        ? __assign(__assign({}, props), { appCode: appCode })
+        : { appCode: "" });
+    var msalAuth = useCAMSMSALAuth(mode === "MSAL"
+        ? __assign(__assign({}, props), { appCode: appCode })
+        : { appCode: "" });
+    var auth = mode === "REGULAR" ? regularAuth : msalAuth;
+    var profileStorageKey = "".concat(auth.storageKey, "-PROFILE");
+    var getInitialProfile = function () {
+        if (typeof window === "undefined")
+            return null;
+        try {
+            var storedProfile = getCookie$1(profileStorageKey);
+            return storedProfile ? JSON.parse(storedProfile) : null;
+        }
+        catch (_a) {
+            return null;
+        }
+    };
+    var _a = useState(getInitialProfile), userProfile = _a[0], setUserProfile = _a[1];
+    useEffect(function () {
+        if (typeof window !== "undefined") {
+            var storedProfile = getCookie$1(profileStorageKey);
+            if (storedProfile) {
+                try {
+                    setUserProfile(JSON.parse(storedProfile));
+                }
+                catch (_a) { }
+            }
+        }
+    }, [profileStorageKey]);
+    useEffect(function () {
+        if (typeof window !== "undefined") {
+            if (userProfile) {
+                setCookie$1(profileStorageKey, JSON.stringify(userProfile), 1);
+            }
+            else {
+                deleteCookie$1(profileStorageKey);
+            }
+        }
+    }, [userProfile, profileStorageKey]);
+    var enhancedLogout = function () { return __awaiter(_this, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, auth.logout()];
+                case 1:
+                    _a.sent();
+                    setUserProfile(null);
+                    if (typeof window !== "undefined") {
+                        deleteCookie$1(profileStorageKey);
+                    }
+                    return [2 /*return*/];
+            }
+        });
+    }); };
+    // Handle MFA completion for MSAL mode
+    useEffect(function () {
+        if (mode === "MSAL" &&
+            "requiresMFA" in auth &&
+            !auth.requiresMFA &&
+            auth.isAuthenticated) {
+            // MFA completed, extract profile from localStorage
+            var storedData = localStorage.getItem(auth.storageKey);
+            console.log("MFA Complete - Checking for profile:", storedData);
+            if (storedData) {
+                try {
+                    var parsed = JSON.parse(storedData);
+                    console.log("Parsed storage data:", parsed);
+                    if (parsed.userProfile) {
+                        console.log("Setting user profile:", parsed.userProfile);
+                        setUserProfile(parsed.userProfile);
+                    }
+                }
+                catch (e) {
+                    console.error("Error parsing stored data:", e);
+                }
+            }
+        }
+    }, [
+        mode,
+        "requiresMFA" in auth ? auth.requiresMFA : false,
+        auth.isAuthenticated,
+        auth.storageKey,
+        userProfile,
+    ]);
+    var value = useMemo(function () {
+        return (__assign(__assign({}, auth), { logout: enhancedLogout, userProfile: userProfile, setUserProfile: setUserProfile, authMode: mode }));
+    }, [auth, userProfile, mode]);
+    return jsxRuntimeExports.jsx(CAMSContext$1.Provider, { value: value, children: children });
+}
+function UnifiedCAMSProvider(props) {
+    // Validate appCode is a valid GUID
+    var appCodeValidation = GuidSchema.safeParse(props.appCode);
+    if (!appCodeValidation.success) {
+        throw new Error("Invalid appCode: ".concat(appCodeValidation.error.issues[0].message));
+    }
+    if (props.mode === "MSAL") {
+        var msalConfig = props.msalConfig, msalInstance = props.msalInstance;
+        var instance = msalInstance || new PublicClientApplication(msalConfig);
+        return (jsxRuntimeExports.jsx(MsalProvider, { instance: instance, children: jsxRuntimeExports.jsx(CAMSProviderCore, __assign({}, props)) }));
+    }
+    return (jsxRuntimeExports.jsx(ClientOnly, { fallback: jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: jsxRuntimeExports.jsx(CAMSProviderCore, __assign({}, props)) }));
+}
+// Backward compatibility exports
+var CAMSProvider = function (props) { return (jsxRuntimeExports.jsx(UnifiedCAMSProvider, __assign({}, props, { mode: "REGULAR" }))); };
+
+function useCAMSMSALAuth(options) {
+    var _this = this;
+    var storageKey = options.storageKey || "CAMS-MSAL-AUTH-SDK";
+    var _a = useMsal(), instance = _a.instance, inProgress = _a.inProgress, accounts = _a.accounts;
+    var account = useAccount(accounts[0] || {});
+    var _b = useState(null), error = _b[0], setError = _b[1];
+    var _c = useState(""), idToken = _c[0], setIdToken = _c[1];
+    var _d = useState(""), accessToken = _d[0], setAccessToken = _d[1];
+    var _e = useState(null), mfaAuthenticator = _e[0], setMfaAuthenticator = _e[1];
+    var _f = useState(false), requiresMFA = _f[0], setRequiresMFA = _f[1];
+    var isLoading = inProgress !== InteractionStatus.None;
+    var isAuthenticated = !!account && !!accessToken && !requiresMFA;
+    var scopes = options.scopes || ["openid", "profile", "email"];
+    var isTokenValid = function (token) {
+        try {
+            var payload = JSON.parse(atob(token.split(".")[1]));
+            return payload.exp * 1000 > Date.now();
+        }
+        catch (_a) {
+            return false;
+        }
+    };
+    useEffect(function () {
+        if (typeof window !== "undefined" && !accessToken) {
+            var stored = localStorage.getItem(storageKey);
+            if (stored) {
+                try {
+                    var _a = JSON.parse(stored), accessToken_1 = _a.accessToken, idToken_1 = _a.idToken, storedRequiresMFA = _a.requiresMFA, storedIsAuthenticated = _a.isAuthenticated;
+                    if (accessToken_1 && isTokenValid(accessToken_1)) {
+                        setAccessToken(accessToken_1);
+                        setIdToken(idToken_1);
+                        // Restore MFA state
+                        if (storedRequiresMFA && !storedIsAuthenticated) {
+                            var mfaConfig = {
+                                accessToken: accessToken_1,
+                                idToken: idToken_1,
+                                appCode: options.appCode,
+                                provider: "MSAL",
+                                apiEndpoint: options.MFAEndpoint,
+                            };
+                            var authenticator = new CAMSMFAAuthenticator(mfaConfig);
+                            setMfaAuthenticator(authenticator);
+                            setRequiresMFA(true);
+                        }
+                        Logger.debug("App Code", { ">>>": options.appCode });
+                    }
+                    else {
+                        localStorage.removeItem(storageKey);
+                    }
+                }
+                catch (_b) { }
+            }
+            else if (account) {
+                // Storage cleared but MSAL account exists - clear MSAL state
+                instance.logoutRedirect().catch(function () { });
+            }
+        }
+    }, [accessToken, account, instance, options.storageKey]);
+    // useEffect(() => {
+    //   const handleRedirect = async () => {
+    //     try {
+    //       const response = await instance.handleRedirectPromise();
+    //       if (response) {
+    //         const account = response.account;
+    //         instance.setActiveA ccount(account);
+    //         const tokenResponse = await instance.acq uireTokenSilent({
+    //           scopes,
+    //           account,
+    //         });
+    //         setToken(tokenResponse.accessToken);
+    //         setAccessToken(tokenResponse.accessToken);
+    //         setIdToken(tokenResponse.idTo ken);
+    //         options.onAuthSuccess?.(tokenR esponse.accessToken);
+    //         if (
+    //           typeof window !== "undefined" &&
+    //           process.env.NODE_ENV !== "test"
+    //         ) {
+    //           window.location.href = options.mfaUrl!;
+    //         }
+    //       }
+    //     } catch (err) {
+    //       console.error("Redirect handling failed:", err);
+    //     }
+    //   };
+    //   handleRedirect();
+    // }, []);
+    var login = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
+        var response, mfaConfig, authenticator, err_1, camsError_1, camsError;
+        var _a, _b, _c, _d;
+        return __generator(this, function (_e) {
+            switch (_e.label) {
+                case 0:
+                    setError(null);
+                    _e.label = 1;
+                case 1:
+                    _e.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, instance.loginPopup({
+                            scopes: scopes,
+                            prompt: options.prompt || "login",
+                        })];
+                case 2:
+                    response = _e.sent();
+                    console.log("Login Token response:", {
+                        accessToken: response.accessToken,
+                        idToken: response.idToken,
+                    });
+                    setAccessToken(response.accessToken);
+                    setIdToken(response.idToken);
+                    mfaConfig = {
+                        accessToken: response.accessToken,
+                        idToken: response.idToken,
+                        appCode: options.appCode,
+                        provider: "MSAL",
+                        apiEndpoint: options.MFAEndpoint,
+                    };
+                    authenticator = new CAMSMFAAuthenticator(mfaConfig);
+                    setMfaAuthenticator(authenticator);
+                    setRequiresMFA(true);
+                    // Don't persist as authenticated until MFA is complete
+                    if (typeof window !== "undefined") {
+                        localStorage.setItem(storageKey, JSON.stringify({
+                            isAuthenticated: false,
+                            requiresMFA: true,
+                            accessToken: response.accessToken,
+                            idToken: response.idToken,
+                        }));
+                    }
+                    (_a = options.onAuthSuccess) === null || _a === void 0 ? void 0 : _a.call(options, response.accessToken);
+                    return [3 /*break*/, 4];
+                case 3:
+                    err_1 = _e.sent();
+                    // Handle user cancellation gracefully
+                    if (err_1.errorCode === "user_cancelled") {
+                        Logger.error("User cancelled login");
+                        setError(null); // Don't treat cancellation as an error
+                        return [2 /*return*/];
+                    }
+                    // If popup is blocked
+                    if (err_1.errorCode === "popup_window_error" ||
+                        ((_b = err_1.message) === null || _b === void 0 ? void 0 : _b.includes("popup"))) {
+                        camsError_1 = new CAMSError(CAMSErrorType.POPUP_BLOCKED, "Popup blocked by browser. Please allow popups and try again.");
+                        setError(camsError_1);
+                        (_c = options.onAuthError) === null || _c === void 0 ? void 0 : _c.call(options, camsError_1);
+                        return [2 /*return*/];
+                    }
+                    camsError = new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "Login failed: " + err_1.message || err_1);
+                    setError(camsError);
+                    (_d = options.onAuthError) === null || _d === void 0 ? void 0 : _d.call(options, camsError);
+                    return [3 /*break*/, 4];
+                case 4: return [2 /*return*/];
+            }
+        });
+    }); }, [instance, scopes, options]);
+    var completeMFA = useCallback(function (data) { return __awaiter(_this, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            if (!mfaAuthenticator) {
+                throw new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "MFA Authenticator not initialized");
+            }
+            Logger.info("Completed MFA.. Setting State");
+            try {
+                // Update storage with complete authentication BEFORE setting state
+                if (typeof window !== "undefined") {
+                    localStorage.setItem(storageKey, JSON.stringify({
+                        isAuthenticated: true,
+                        requiresMFA: false,
+                        accessToken: accessToken,
+                        idToken: idToken,
+                    }));
+                    setCookie$1("CAMS-MSAL-AUTH-SDK-PROFILE", JSON.stringify({ type: "AUTH_SUCCESS", userProfile: __assign({}, data) }), 1);
+                    setRequiresMFA(false);
+                    // Set requiresMFA to false after storage update
+                    Logger.debug("MFA completed successfully, storage updated", {
+                        accessToken: accessToken,
+                        idToken: idToken,
+                        isAuthenticated: true,
+                        requiresMFA: false,
+                    });
+                }
+                Logger.debug("MFA completed successfully, requiresMFA set to false");
+                return [2 /*return*/, data];
+            }
+            catch (error) {
+                setError(error);
+                throw error;
+            }
+            return [2 /*return*/];
+        });
+    }); }, [mfaAuthenticator, accessToken, idToken, storageKey]);
+    var sendEmailOTP = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    if (!mfaAuthenticator) {
+                        return [2 /*return*/, false];
+                    }
+                    return [4 /*yield*/, mfaAuthenticator.sendEmailOTP()];
+                case 1: return [2 /*return*/, _a.sent()];
+            }
+        });
+    }); }, [mfaAuthenticator]);
+    var logout = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
+        var err_2, camsError;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    _a.trys.push([0, 2, , 3]);
+                    Logger.info("Logging User Out");
+                    return [4 /*yield*/, instance.logoutRedirect()];
+                case 1:
+                    _a.sent();
+                    setAccessToken("");
+                    setIdToken("");
+                    setError(null);
+                    setMfaAuthenticator(null);
+                    setRequiresMFA(false);
+                    if (typeof window !== "undefined") {
+                        localStorage.removeItem(storageKey);
+                    }
+                    return [3 /*break*/, 3];
+                case 2:
+                    err_2 = _a.sent();
+                    camsError = new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "Logout failed: " + err_2);
+                    setError(camsError);
+                    return [3 /*break*/, 3];
+                case 3: return [2 /*return*/];
+            }
+        });
+    }); }, [instance, storageKey]);
+    return {
+        login: login,
+        logout: logout,
+        storageKey: storageKey,
+        isAuthenticated: isAuthenticated,
+        isLoading: isLoading,
+        error: error,
+        idToken: idToken,
+        accessToken: accessToken,
+        appCode: options.appCode,
+        mfaAuthenticator: mfaAuthenticator,
+        requiresMFA: requiresMFA,
+        completeMFA: completeMFA,
+        sendEmailOTP: sendEmailOTP,
+        setRequiresMFA: setRequiresMFA,
+    };
+}
+
+/**
+ * Hook for handling authentication in popup windows
+ * This should be used by the popup app to complete authentication
+ */
+function useCAMSPopupAuth(options) {
+    if (options === void 0) { options = {}; }
+    var _a = options.storageKey, storageKey = _a === void 0 ? "CAMS-SDK" : _a, targetOrigin = options.targetOrigin, onAuthComplete = options.onAuthComplete, onAuthError = options.onAuthError;
+    useEffect(function () {
+        if (typeof window === "undefined" || !isPopupWindow())
+            return;
+        // Initialize popup auth handler
+        initializePopupAuth(targetOrigin);
+        // Set up global handlers for the popup app
+        var globalHandlers = window.__CAMS_POPUP_AUTH__;
+        if (globalHandlers) {
+            var originalCompleteAuth_1 = globalHandlers.completeAuth;
+            var originalErrorAuth_1 = globalHandlers.errorAuth;
+            globalHandlers.completeAuth = function (profile) {
+                onAuthComplete === null || onAuthComplete === void 0 ? void 0 : onAuthComplete(profile);
+                originalCompleteAuth_1(profile);
+            };
+            globalHandlers.errorAuth = function (error) {
+                onAuthError === null || onAuthError === void 0 ? void 0 : onAuthError(error);
+                originalErrorAuth_1(error);
+            };
+        }
+    }, [targetOrigin, onAuthComplete, onAuthError]);
+    var completeAuth = useCallback(function (profile) {
+        if (!isPopupWindow()) {
+            console.warn("completeAuth called outside of popup window");
+            return;
+        }
+        var sessionManager = new CAMSSessionManager(localStorage, storageKey);
+        sessionManager.completePopupAuth(profile, targetOrigin);
+    }, [storageKey, targetOrigin]);
+    var errorAuth = useCallback(function (error) {
+        if (!isPopupWindow()) {
+            console.warn("errorAuth called outside of popup window");
+            return;
+        }
+        var sessionManager = new CAMSSessionManager(localStorage, storageKey);
+        sessionManager.errorPopupAuth(error, targetOrigin);
+    }, [storageKey, targetOrigin]);
+    return {
+        completeAuth: completeAuth,
+        errorAuth: errorAuth,
+        isPopup: isPopupWindow(),
+    };
 }
 
-var jsxRuntimeExports = jsxRuntime.exports;
-
-var CAMSContext$1 = createContext(null);
-function useCAMSContext$1() {
-    var context = useContext(CAMSContext$1);
+var CAMSContext = createContext(null);
+function useCAMSContext() {
+    var context = useContext(CAMSContext);
     if (!context) {
         throw new Error('useCAMSContext must be used within a CAMSProvider');
     }
@@ -970,7 +1113,7 @@ function useCAMSContext$1() {
 
 function ProtectedRoute(_a) {
     var children = _a.children, fallback = _a.fallback, redirectTo = _a.redirectTo;
-    var _b = useCAMSContext$1(), isAuthenticated = _b.isAuthenticated, isLoading = _b.isLoading;
+    var _b = useCAMSContext(), isAuthenticated = _b.isAuthenticated, isLoading = _b.isLoading;
     if (isLoading) {
         return fallback || jsxRuntimeExports.jsx("div", { children: "Loading..." });
     }
@@ -985,11 +1128,11 @@ function ProtectedRoute(_a) {
 }
 
 var CAMSMSALContext = createContext(null);
-var setCookie$1 = function (name, value, days) {
+var setCookie = function (name, value, days) {
     var expires = new Date(Date.now() + days * 864e5).toUTCString();
     document.cookie = "".concat(name, "=").concat(encodeURIComponent(value), "; expires=").concat(expires, "; path=/; samesite=Lax");
 };
-var getCookie$1 = function (name) {
+var getCookie = function (name) {
     var _a;
     return ((_a = document.cookie
         .split("; ")
@@ -1000,7 +1143,7 @@ var getCookie$1 = function (name) {
             .split("=")[1])
         : null;
 };
-var deleteCookie$1 = function (name) {
+var deleteCookie = function (name) {
     document.cookie = name + "=; Max-Age=-99999999; path=/";
 };
 var isTokenValid = function (token) {
@@ -1022,7 +1165,7 @@ function CAMSMSALProviderInner(_a) {
             return null;
         }
         try {
-            var storedProfile = getCookie$1(profileStorageKey);
+            var storedProfile = getCookie(profileStorageKey);
             return storedProfile ? JSON.parse(storedProfile) : null;
         }
         catch (_a) {
@@ -1034,7 +1177,7 @@ function CAMSMSALProviderInner(_a) {
     useEffect(function () {
         if (typeof window !== "undefined") {
             // const storedProfile = localStorage.get Item(profileStorageKey);
-            var storedProfile = getCookie$1(profileStorageKey);
+            var storedProfile = getCookie(profileStorageKey);
             if (storedProfile) {
                 try {
                     setUserProfile(JSON.parse(storedProfile));
@@ -1059,10 +1202,10 @@ function CAMSMSALProviderInner(_a) {
     useEffect(function () {
         if (typeof window !== "undefined") {
             if (userProfile) {
-                setCookie$1(profileStorageKey, JSON.stringify(userProfile), 1); // Store for 1 day
+                setCookie(profileStorageKey, JSON.stringify(userProfile), 1); // Store for 1 day
             }
             else {
-                deleteCookie$1(profileStorageKey);
+                deleteCookie(profileStorageKey);
             }
         }
     }, [userProfile, profileStorageKey]);
@@ -1075,7 +1218,7 @@ function CAMSMSALProviderInner(_a) {
                     _a.sent();
                     setUserProfile(null);
                     if (typeof window !== "undefined") {
-                        deleteCookie$1(profileStorageKey);
+                        deleteCookie(profileStorageKey);
                     }
                     return [2 /*return*/];
             }
@@ -1097,156 +1240,6 @@ function useCAMSMSALContext() {
     return context;
 }
 
-var ClientOnly = function (_a) {
-    var children = _a.children, _b = _a.fallback, fallback = _b === void 0 ? null : _b;
-    var _c = useState(false), hasMounted = _c[0], setHasMounted = _c[1];
-    useEffect(function () {
-        setHasMounted(true);
-    }, []);
-    if (!hasMounted) {
-        return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: fallback });
-    }
-    return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: children });
-};
-
-var CAMSContext = createContext(null);
-function useCAMSContext() {
-    var context = useContext(CAMSContext);
-    if (!context) {
-        throw new Error("useCAMSContext must be used within a UnifiedCAMSProvider");
-    }
-    return context;
-}
-
-var GuidSchema = z.uuid("appCode must be a valid GUID");
-var setCookie = function (name, value, days) {
-    var expires = new Date(Date.now() + days * 24 * 60 * 60 * 1000).toUTCString();
-    document.cookie = "".concat(name, "=").concat(encodeURIComponent(value), "; expires=").concat(expires, "; path=/; samesite=Lax");
-};
-var getCookie = function (name) {
-    var _a;
-    return ((_a = document.cookie
-        .split("; ")
-        .find(function (row) { return row.startsWith(name + "="); })) === null || _a === void 0 ? void 0 : _a.split("=")[1])
-        ? decodeURIComponent(document.cookie
-            .split("; ")
-            .find(function (row) { return row.startsWith(name + "="); })
-            .split("=")[1])
-        : null;
-};
-var deleteCookie = function (name) {
-    document.cookie = name + "=; Max-Age=-99999999; path=/";
-};
-function CAMSProviderCore(props) {
-    var _this = this;
-    var children = props.children, mode = props.mode, appCode = props.appCode;
-    // Always call both hooks to satisfy Rules of Hooks
-    var regularAuth = useCAMSAuth(mode === "REGULAR"
-        ? __assign(__assign({}, props), { appCode: appCode })
-        : { appCode: "" });
-    var msalAuth = useCAMSMSALAuth(mode === "MSAL"
-        ? __assign(__assign({}, props), { appCode: appCode })
-        : { appCode: "" });
-    var auth = mode === "REGULAR" ? regularAuth : msalAuth;
-    var profileStorageKey = "".concat(auth.storageKey, "-PROFILE");
-    var getInitialProfile = function () {
-        if (typeof window === "undefined")
-            return null;
-        try {
-            var storedProfile = getCookie(profileStorageKey);
-            return storedProfile ? JSON.parse(storedProfile) : null;
-        }
-        catch (_a) {
-            return null;
-        }
-    };
-    var _a = useState(getInitialProfile), userProfile = _a[0], setUserProfile = _a[1];
-    useEffect(function () {
-        if (typeof window !== "undefined") {
-            var storedProfile = getCookie(profileStorageKey);
-            if (storedProfile) {
-                try {
-                    setUserProfile(JSON.parse(storedProfile));
-                }
-                catch (_a) { }
-            }
-        }
-    }, [profileStorageKey]);
-    useEffect(function () {
-        if (typeof window !== "undefined") {
-            if (userProfile) {
-                setCookie(profileStorageKey, JSON.stringify(userProfile), 1);
-            }
-            else {
-                deleteCookie(profileStorageKey);
-            }
-        }
-    }, [userProfile, profileStorageKey]);
-    var enhancedLogout = function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, auth.logout()];
-                case 1:
-                    _a.sent();
-                    setUserProfile(null);
-                    if (typeof window !== "undefined") {
-                        deleteCookie(profileStorageKey);
-                    }
-                    return [2 /*return*/];
-            }
-        });
-    }); };
-    // Handle MFA completion for MSAL mode
-    useEffect(function () {
-        if (mode === "MSAL" &&
-            "requiresMFA" in auth &&
-            !auth.requiresMFA &&
-            auth.isAuthenticated) {
-            // MFA completed, extract profile from localStorage
-            var storedData = localStorage.getItem(auth.storageKey);
-            console.log("MFA Complete - Checking for profile:", storedData);
-            if (storedData) {
-                try {
-                    var parsed = JSON.parse(storedData);
-                    console.log("Parsed storage data:", parsed);
-                    if (parsed.userProfile) {
-                        console.log("Setting user profile:", parsed.userProfile);
-                        setUserProfile(parsed.userProfile);
-                    }
-                }
-                catch (e) {
-                    console.error("Error parsing stored data:", e);
-                }
-            }
-        }
-    }, [
-        mode,
-        "requiresMFA" in auth ? auth.requiresMFA : false,
-        auth.isAuthenticated,
-        auth.storageKey,
-        userProfile,
-    ]);
-    var value = useMemo(function () {
-        return (__assign(__assign({}, auth), { logout: enhancedLogout, userProfile: userProfile, setUserProfile: setUserProfile, authMode: mode }));
-    }, [auth, userProfile, mode]);
-    return jsxRuntimeExports.jsx(CAMSContext.Provider, { value: value, children: children });
-}
-function UnifiedCAMSProvider(props) {
-    // Validate appCode is a valid GUID
-    var appCodeValidation = GuidSchema.safeParse(props.appCode);
-    if (!appCodeValidation.success) {
-        throw new Error("Invalid appCode: ".concat(appCodeValidation.error.issues[0].message));
-    }
-    if (props.mode === "MSAL") {
-        var msalConfig = props.msalConfig, msalInstance = props.msalInstance;
-        var instance = msalInstance || new PublicClientApplication(msalConfig);
-        return (jsxRuntimeExports.jsx(MsalProvider, { instance: instance, children: jsxRuntimeExports.jsx(CAMSProviderCore, __assign({}, props)) }));
-    }
-    return (jsxRuntimeExports.jsx(ClientOnly, { fallback: jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: jsxRuntimeExports.jsx(CAMSProviderCore, __assign({}, props)) }));
-}
-// Backward compatibility exports
-var CAMSProvider = function (props) { return (jsxRuntimeExports.jsx(UnifiedCAMSProvider, __assign({}, props, { mode: "REGULAR" }))); };
-
 /** A special constant with type `never` */
 function $constructor(name, initializer, params) {
     function init(inst, def) {
@@ -1746,8 +1739,8 @@ var MFAOptions = function (_a) {
     var _d = useState(false), otpVisible = _d[0], setOtpVisible = _d[1];
     var _e = useState(false), showSuccessAnimation = _e[0], setShowSuccessAnimation = _e[1];
     var _f = useState(null), authType = _f[0], setAuthType = _f[1];
-    var _g = useState(""), lastOTPCode = _g[0], setLastOTPCode = _g[1];
-    var context = useCAMSContext();
+    var _g = useState(""); _g[0]; var setLastOTPCode = _g[1];
+    var context = useCAMSContext$1();
     var _h = context.authMode === "MSAL" && "sendEmailOTP" in context
         ? context
         : { sendEmailOTP: null, completeMFA: null, logout: function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
@@ -1763,10 +1756,12 @@ var MFAOptions = function (_a) {
         authenticationType: authType,
         MFAEndpoint: MFAEndpoint,
         onAuthComplete: function (state, data) {
+            console.log("Completed Auth. Handling MFA", state);
             if (state) {
                 // Call completeMFA to update context state
-                if (completeMFA && authType && lastOTPCode) {
-                    completeMFA(lastOTPCode, authType).catch(function (error) {
+                if (completeMFA && data) {
+                    console.log("IN Complete MFA Block. Handling MFA", data);
+                    completeMFA(data).catch(function (error) {
                         console.error("Failed to complete MFA:", error);
                     });
                 }
@@ -1782,7 +1777,7 @@ var MFAOptions = function (_a) {
                             onAuthFailed === null || onAuthFailed === void 0 ? void 0 : onAuthFailed();
                             onComplete === null || onComplete === void 0 ? void 0 : onComplete(false);
                         });
-                    }, 1000);
+                    }, 3000);
                 }
             }
         },
@@ -1854,7 +1849,7 @@ var AuthLogo = "data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2
 var MicrosoftLogo = "data:image/svg+xml,%3Csvg%20width%3D%2225%22%20height%3D%2225%22%20viewBox%3D%220%200%2025%2025%22%20fill%3D%22none%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cg%20id%3D%22microsoft_svgrepo.com%22%3E%3Cpath%20id%3D%22Vector%22%20d%3D%22M20.75%2013.25H13.25V20.75H20.75V13.25Z%22%20fill%3D%22%23FEBA08%22%2F%3E%3Cpath%20id%3D%22Vector_2%22%20d%3D%22M11.75%2013.25H4.25V20.75H11.75V13.25Z%22%20fill%3D%22%2305A6F0%22%2F%3E%3Cpath%20id%3D%22Vector_3%22%20d%3D%22M20.75%204.25H13.25V11.75H20.75V4.25Z%22%20fill%3D%22%2380BC06%22%2F%3E%3Cpath%20id%3D%22Vector_4%22%20d%3D%22M11.75%204.25H4.25V11.75H11.75V4.25Z%22%20fill%3D%22%23F25325%22%2F%3E%3C%2Fg%3E%3C%2Fsvg%3E";
 
 var DefaultLoginPage = function () {
-    var context = useCAMSContext();
+    var context = useCAMSContext$1();
     var login = context.login, isLoading = context.isLoading, authMode = context.authMode;
     var handleLogin = function () {
         if (authMode === "MSAL") {
@@ -1882,44 +1877,52 @@ var DefaultLoginPage = function () {
                                 className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: handleLogin, disabled: isLoading, children: [jsxRuntimeExports.jsx("img", { src: MicrosoftLogo, alt: "Microsoft Logo", width: 35, height: 35 }), jsxRuntimeExports.jsx("span", { children: isLoading ? 'Logging in...' : "Sign in with Microsoft" })] }) }), jsxRuntimeExports.jsxs(CardFooter, { className: "flex items-center justify-center mt-6 space-x-2 text-gray-400 text-sm", children: [jsxRuntimeExports.jsx(ShieldCheck, { className: "w-4 h-4 text-[#506f4a] pulse-glow" }), jsxRuntimeExports.jsx("span", { children: "Powered By NIBSS" })] })] }) }) }, "landing") }));
 };
 
+var ErrorFallback = function (_a) {
+    var message = _a.message;
+    return (jsxRuntimeExports.jsx("div", { className: "flex items-center justify-center min-h-screen bg-gray-50", children: jsxRuntimeExports.jsxs("div", { className: "bg-white p-6 rounded-lg shadow-lg border border-red-200 max-w-md", children: [jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-3 mb-2", children: [jsxRuntimeExports.jsx("svg", { className: "w-6 h-6 text-red-500", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: jsxRuntimeExports.jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 8v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" }) }), jsxRuntimeExports.jsx("h2", { className: "text-lg font-semibold text-gray-900", children: "Configuration Error" })] }), jsxRuntimeExports.jsx("p", { className: "text-red-600", children: message })] }) }));
+};
+
 var MFAEndpointUrlSchema = z$1.url("MFAEndpoint must be a valid URL");
 var MFAGate = function (_a) {
-    var children = _a.children, fallback = _a.fallback, LoginComponent = _a.loginComponent, MFAEndpoint = _a.MFAEndpoint;
-    var context = useCAMSContext();
-    var urlValidation = MFAEndpointUrlSchema.safeParse(MFAEndpoint);
-    if (!urlValidation.success) {
-        throw new Error("Invalid MFAEndpoint: ".concat(urlValidation.error.issues[0].message));
-    }
+    var children = _a.children, _b = _a.fallback, fallback = _b === void 0 ? jsxRuntimeExports.jsx(LoadingSpinner, {}) : _b, _c = _a.loginComponent, LoginComponent = _c === void 0 ? DefaultLoginPage : _c, MFAEndpoint = _a.MFAEndpoint;
+    var context = useCAMSContext$1();
+    var validatedMFAEndpoint = useMemo(function () {
+        var parsed = MFAEndpointUrlSchema.safeParse(MFAEndpoint);
+        if (!parsed.success) {
+            Logger.error("Invalid MFAEndpoint", parsed.error);
+            return null;
+        }
+        return parsed.data;
+    }, [MFAEndpoint]);
+    var handleComplete = useCallback(function (success) {
+        if (!success)
+            Logger.error("MFA authentication failed");
+    }, []);
+    var handleAuthFailed = useCallback(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, context.logout()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); }, [context.logout]);
     Logger.debug("MFA Endpoint >>>", { MFAEndpoint: MFAEndpoint });
-    // Only apply MFA gate for MSAL mode
-    if (context.authMode !== "MSAL") {
+    if (!validatedMFAEndpoint)
+        return jsxRuntimeExports.jsx(ErrorFallback, { message: "Invalid MFA configuration." });
+    if (context.authMode !== "MSAL")
         return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: children });
+    if (context.isLoading)
+        return fallback;
+    if (context.requiresMFA) {
+        return (jsxRuntimeExports.jsx(MFAOptions, { MFAEndpoint: validatedMFAEndpoint, onComplete: handleComplete, onAuthFailed: handleAuthFailed }));
     }
-    var requiresMFA = context.requiresMFA, isAuthenticated = context.isAuthenticated, isLoading = context.isLoading;
-    if (isLoading) {
-        return fallback || jsxRuntimeExports.jsx("div", { className: "flex h-dvh items-center justify-center", children: "Loading..." });
-    }
-    if (requiresMFA) {
-        return (jsxRuntimeExports.jsx(MFAOptions, { MFAEndpoint: MFAEndpoint, onComplete: function (success) {
-                if (!success) {
-                    console.error("MFA authentication failed");
-                }
-            }, onAuthFailed: function () { return __awaiter(void 0, void 0, void 0, function () {
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, context.logout()];
-                        case 1:
-                            _a.sent();
-                            return [2 /*return*/];
-                    }
-                });
-            }); } }));
-    }
-    if (!isAuthenticated) {
-        return LoginComponent ? jsxRuntimeExports.jsx(LoginComponent, {}) : jsxRuntimeExports.jsx(DefaultLoginPage, {});
+    if (!context.isAuthenticated) {
+        return jsxRuntimeExports.jsx(LoginComponent, {});
     }
     return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: children });
 };
 
-export { CAMSMSALProvider, CAMSProvider, ClientOnly, DefaultLoginPage as LoginButton, MFAGate, MFAOptions, ProtectedRoute, UnifiedCAMSProvider, useCAMSAuth, useCAMSContext, useCAMSMSALAuth, useCAMSMSALContext, useCAMSPopupAuth };
+export { CAMSMSALProvider, CAMSProvider, ClientOnly, DefaultLoginPage as LoginButton, MFAGate, MFAOptions, ProtectedRoute, UnifiedCAMSProvider, setCookie$1 as setCookie, useCAMSAuth, useCAMSContext$1 as useCAMSContext, useCAMSMSALAuth, useCAMSMSALContext, useCAMSPopupAuth };
 //# sourceMappingURL=index.esm.js.map