@nibssplc/cams-sdk-react 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/index.esm.js

@@ -18,6 +18,119 @@ import * as DialogPrimitive from '@radix-ui/react-dialog';
 import { toast } from 'sonner';
 import { motion } from 'framer-motion';
 import axios from 'axios';
+import https from 'https';
+
+// Crypto polyfill for MSAL browser compatibility
+if (typeof window !== 'undefined') {
+    // Ensure crypto object exists
+    if (!window.crypto) {
+        window.crypto = {};
+    }
+    // Polyfill getRandomValues
+    if (!window.crypto.getRandomValues) {
+        window.crypto.getRandomValues = function (array) {
+            var bytes = new Uint8Array(array.buffer, array.byteOffset, array.byteLength);
+            for (var i = 0; i < bytes.length; i++) {
+                bytes[i] = Math.floor(Math.random() * 256);
+            }
+            return array;
+        };
+    }
+    // Polyfill crypto.subtle with SHA-256 (handles both undefined and null in non-HTTPS contexts)
+    if (!window.crypto.subtle || window.location.protocol === 'http:') {
+        var sha256_1 = function (data) { return __awaiter(void 0, void 0, void 0, function () {
+            var bytes, hash, k, ml, msg, i, w, j, j, s0, s1, a, b, c, d, e, f, g, h, j, S1, ch, temp1, S0, maj, temp2, result, i;
+            return __generator(this, function (_a) {
+                bytes = new Uint8Array(data);
+                hash = new Uint32Array(8);
+                k = new Uint32Array([
+                    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+                    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+                    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+                    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+                    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+                    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+                    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+                    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
+                ]);
+                hash[0] = 0x6a09e667;
+                hash[1] = 0xbb67ae85;
+                hash[2] = 0x3c6ef372;
+                hash[3] = 0xa54ff53a;
+                hash[4] = 0x510e527f;
+                hash[5] = 0x9b05688c;
+                hash[6] = 0x1f83d9ab;
+                hash[7] = 0x5be0cd19;
+                ml = bytes.length * 8;
+                msg = new Uint8Array(bytes.length + 64 + ((64 - ((bytes.length + 9) % 64)) % 64));
+                msg.set(bytes);
+                msg[bytes.length] = 0x80;
+                new DataView(msg.buffer).setUint32(msg.length - 4, ml, false);
+                for (i = 0; i < msg.length; i += 64) {
+                    w = new Uint32Array(64);
+                    for (j = 0; j < 16; j++)
+                        w[j] = new DataView(msg.buffer).getUint32(i + j * 4, false);
+                    for (j = 16; j < 64; j++) {
+                        s0 = ((w[j - 15] >>> 7) | (w[j - 15] << 25)) ^ ((w[j - 15] >>> 18) | (w[j - 15] << 14)) ^ (w[j - 15] >>> 3);
+                        s1 = ((w[j - 2] >>> 17) | (w[j - 2] << 15)) ^ ((w[j - 2] >>> 19) | (w[j - 2] << 13)) ^ (w[j - 2] >>> 10);
+                        w[j] = (w[j - 16] + s0 + w[j - 7] + s1) >>> 0;
+                    }
+                    a = hash[0], b = hash[1], c = hash[2], d = hash[3], e = hash[4], f = hash[5], g = hash[6], h = hash[7];
+                    for (j = 0; j < 64; j++) {
+                        S1 = ((e >>> 6) | (e << 26)) ^ ((e >>> 11) | (e << 21)) ^ ((e >>> 25) | (e << 7));
+                        ch = (e & f) ^ (~e & g);
+                        temp1 = (h + S1 + ch + k[j] + w[j]) >>> 0;
+                        S0 = ((a >>> 2) | (a << 30)) ^ ((a >>> 13) | (a << 19)) ^ ((a >>> 22) | (a << 10));
+                        maj = (a & b) ^ (a & c) ^ (b & c);
+                        temp2 = (S0 + maj) >>> 0;
+                        h = g;
+                        g = f;
+                        f = e;
+                        e = (d + temp1) >>> 0;
+                        d = c;
+                        c = b;
+                        b = a;
+                        a = (temp1 + temp2) >>> 0;
+                    }
+                    hash[0] = (hash[0] + a) >>> 0;
+                    hash[1] = (hash[1] + b) >>> 0;
+                    hash[2] = (hash[2] + c) >>> 0;
+                    hash[3] = (hash[3] + d) >>> 0;
+                    hash[4] = (hash[4] + e) >>> 0;
+                    hash[5] = (hash[5] + f) >>> 0;
+                    hash[6] = (hash[6] + g) >>> 0;
+                    hash[7] = (hash[7] + h) >>> 0;
+                }
+                result = new Uint8Array(32);
+                for (i = 0; i < 8; i++)
+                    new DataView(result.buffer).setUint32(i * 4, hash[i], false);
+                return [2 /*return*/, result.buffer];
+            });
+        }); };
+        window.crypto.subtle = {
+            digest: function (algorithm, data) { return __awaiter(void 0, void 0, void 0, function () {
+                var alg;
+                return __generator(this, function (_a) {
+                    alg = typeof algorithm === 'string' ? algorithm : algorithm.name;
+                    if (alg === 'SHA-256')
+                        return [2 /*return*/, sha256_1(data)];
+                    console.error("Unsupported crypto algorithm: ".concat(alg));
+                    throw new Error("Unsupported algorithm: ".concat(alg));
+                });
+            }); }
+        };
+    }
+    // Polyfill randomUUID
+    if (!window.crypto.randomUUID) {
+        window.crypto.randomUUID = function () {
+            return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function (c) {
+                var r = (Math.random() * 16) | 0;
+                var v = c === 'x' ? r : (r & 0x3) | 0x8;
+                return v.toString(16);
+            });
+        };
+    }
+}
 
 /******************************************************************************
 Copyright (c) Microsoft Corporation.
@@ -59,7 +172,7 @@ function __rest(s, e) {
     return t;
 }
 
-function __awaiter(thisArg, _arguments, P, generator) {
+function __awaiter$1(thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
         function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
@@ -69,7 +182,7 @@ function __awaiter(thisArg, _arguments, P, generator) {
     });
 }
 
-function __generator(thisArg, body) {
+function __generator$1(thisArg, body) {
     var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
     return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
     function verb(n) { return function (v) { return step([n, v]); }; }
@@ -166,10 +279,10 @@ function useCAMSAuth(options) {
             }
         }
     }, [options.storageKey]);
-    var login = useCallback(function (config) { return __awaiter(_this, void 0, void 0, function () {
+    var login = useCallback(function (config) { return __awaiter$1(_this, void 0, void 0, function () {
         var loginConfig, userProfile, err_1, e, isPopupClosedError, restoredToken, userProfile;
         var _a, _b, _c;
-        return __generator(this, function (_d) {
+        return __generator$1(this, function (_d) {
             switch (_d.label) {
                 case 0:
                     if (!sessionManagerRef.current)
@@ -217,8 +330,8 @@ function useCAMSAuth(options) {
             }
         });
     }); }, [options.idleTimeout]);
-    var logout = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var logout = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     if (!sessionManagerRef.current)
@@ -249,6 +362,7 @@ function useCAMSAuth(options) {
 }
 
 var setCookie$1 = function (name, value, days) {
+    if (days === void 0) { days = 1; }
     var expires = new Date(Date.now() + days * 24 * 60 * 60 * 1000).toUTCString();
     document.cookie = "".concat(name, "=").concat(encodeURIComponent(value), "; expires=").concat(expires, "; path=/; samesite=Lax");
 };
@@ -269,17 +383,18 @@ var deleteCookie$1 = function (name) {
 
 function useCAMSMSALAuth(options) {
     var _this = this;
-    var storageKey = options.storageKey || "CAMS-MSAL-AUTH-SDK";
-    var _a = useMsal(), instance = _a.instance, inProgress = _a.inProgress, accounts = _a.accounts;
+    var optStorageKey = options.storageKey, optScopes = options.scopes, prompt = options.prompt, appCode = options.appCode, MFAEndpoint = options.MFAEndpoint, onAuthSuccess = options.onAuthSuccess, onAuthError = options.onAuthError, _a = options.activeCookiePeriod, activeCookiePeriod = _a === void 0 ? 1 : _a;
+    var storageKey = optStorageKey || "CAMS-MSAL-AUTH-SDK";
+    var _b = useMsal(), instance = _b.instance, inProgress = _b.inProgress, accounts = _b.accounts;
     var account = useAccount(accounts[0] || {});
-    var _b = useState(null), error = _b[0], setError = _b[1];
-    var _c = useState(""), idToken = _c[0], setIdToken = _c[1];
-    var _d = useState(""), accessToken = _d[0], setAccessToken = _d[1];
-    var _e = useState(null), mfaAuthenticator = _e[0], setMfaAuthenticator = _e[1];
-    var _f = useState(false), requiresMFA = _f[0], setRequiresMFA = _f[1];
+    var _c = useState(null), error = _c[0], setError = _c[1];
+    var _d = useState(""), idToken = _d[0], setIdToken = _d[1];
+    var _e = useState(""), accessToken = _e[0], setAccessToken = _e[1];
+    var _f = useState(null), mfaAuthenticator = _f[0], setMfaAuthenticator = _f[1];
+    var _g = useState(false), requiresMFA = _g[0], setRequiresMFA = _g[1];
     var isLoading = inProgress !== InteractionStatus.None;
     var isAuthenticated = !!account && !!accessToken && !requiresMFA;
-    var scopes = options.scopes || ["openid", "profile", "email"];
+    var scopes = optScopes || ["openid", "profile", "email"];
     var isTokenValid = function (token) {
         try {
             var payload = JSON.parse(atob(token.split(".")[1]));
@@ -303,15 +418,14 @@ function useCAMSMSALAuth(options) {
                             var mfaConfig = {
                                 accessToken: accessToken_1,
                                 idToken: idToken_1,
-                                appCode: options.appCode,
+                                appCode: appCode,
                                 provider: "MSAL",
-                                apiEndpoint: options.MFAEndpoint,
+                                apiEndpoint: MFAEndpoint,
                             };
                             var authenticator = new CAMSMFAAuthenticator(mfaConfig);
                             setMfaAuthenticator(authenticator);
                             setRequiresMFA(true);
                         }
-                        Logger.debug("App Code", { ">>>": options.appCode });
                     }
                     else {
                         localStorage.removeItem(storageKey);
@@ -353,22 +467,26 @@ function useCAMSMSALAuth(options) {
     //   };
     //   handleRedirect();
     // }, []);
-    var login = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
+    var login = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
         var response, mfaConfig, authenticator, err_1, camsError_1, camsError;
-        var _a, _b, _c, _d;
-        return __generator(this, function (_e) {
-            switch (_e.label) {
+        var _a;
+        return __generator$1(this, function (_b) {
+            switch (_b.label) {
                 case 0:
+                    if (inProgress !== InteractionStatus.None) {
+                        Logger.warn("Authentication already in progress, ignoring duplicate call");
+                        return [2 /*return*/];
+                    }
                     setError(null);
-                    _e.label = 1;
+                    _b.label = 1;
                 case 1:
-                    _e.trys.push([1, 3, , 4]);
+                    _b.trys.push([1, 3, , 4]);
                     return [4 /*yield*/, instance.loginPopup({
                             scopes: scopes,
-                            prompt: options.prompt || "login",
+                            prompt: prompt || "login",
                         })];
                 case 2:
-                    response = _e.sent();
+                    response = _b.sent();
                     console.log("Login Token response:", {
                         accessToken: response.accessToken,
                         idToken: response.idToken,
@@ -378,9 +496,9 @@ function useCAMSMSALAuth(options) {
                     mfaConfig = {
                         accessToken: response.accessToken,
                         idToken: response.idToken,
-                        appCode: options.appCode,
+                        appCode: appCode,
                         provider: "MSAL",
-                        apiEndpoint: options.MFAEndpoint,
+                        apiEndpoint: MFAEndpoint,
                     };
                     authenticator = new CAMSMFAAuthenticator(mfaConfig);
                     setMfaAuthenticator(authenticator);
@@ -394,10 +512,15 @@ function useCAMSMSALAuth(options) {
                             idToken: response.idToken,
                         }));
                     }
-                    (_a = options.onAuthSuccess) === null || _a === void 0 ? void 0 : _a.call(options, response.accessToken);
+                    onAuthSuccess === null || onAuthSuccess === void 0 ? void 0 : onAuthSuccess(response.accessToken);
                     return [3 /*break*/, 4];
                 case 3:
-                    err_1 = _e.sent();
+                    err_1 = _b.sent();
+                    // Handle interaction_in_progress error
+                    if (err_1.errorCode === "interaction_in_progress") {
+                        Logger.warn("Interaction already in progress, please wait");
+                        return [2 /*return*/];
+                    }
                     // Handle user cancellation gracefully
                     if (err_1.errorCode === "user_cancelled") {
                         Logger.error("User cancelled login");
@@ -406,22 +529,22 @@ function useCAMSMSALAuth(options) {
                     }
                     // If popup is blocked
                     if (err_1.errorCode === "popup_window_error" ||
-                        ((_b = err_1.message) === null || _b === void 0 ? void 0 : _b.includes("popup"))) {
+                        ((_a = err_1.message) === null || _a === void 0 ? void 0 : _a.includes("popup"))) {
                         camsError_1 = new CAMSError(CAMSErrorType.POPUP_BLOCKED, "Popup blocked by browser. Please allow popups and try again.");
                         setError(camsError_1);
-                        (_c = options.onAuthError) === null || _c === void 0 ? void 0 : _c.call(options, camsError_1);
+                        onAuthError === null || onAuthError === void 0 ? void 0 : onAuthError(camsError_1);
                         return [2 /*return*/];
                     }
                     camsError = new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "Login failed: " + err_1.message || err_1);
                     setError(camsError);
-                    (_d = options.onAuthError) === null || _d === void 0 ? void 0 : _d.call(options, camsError);
+                    onAuthError === null || onAuthError === void 0 ? void 0 : onAuthError(camsError);
                     return [3 /*break*/, 4];
                 case 4: return [2 /*return*/];
             }
         });
-    }); }, [instance, scopes, options]);
-    var completeMFA = useCallback(function (data) { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    }); }, [instance, scopes, prompt, appCode, MFAEndpoint, onAuthSuccess, onAuthError, storageKey, inProgress]);
+    var completeMFA = useCallback(function (data) { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             if (!mfaAuthenticator) {
                 throw new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "MFA Authenticator not initialized");
             }
@@ -435,7 +558,7 @@ function useCAMSMSALAuth(options) {
                         accessToken: accessToken,
                         idToken: idToken,
                     }));
-                    setCookie$1("CAMS-MSAL-AUTH-SDK-PROFILE", JSON.stringify({ type: "AUTH_SUCCESS", userProfile: __assign({}, data) }), 1);
+                    setCookie$1("CAMS-MSAL-AUTH-SDK-PROFILE", JSON.stringify({ type: "AUTH_SUCCESS", userProfile: __assign({}, data) }), activeCookiePeriod);
                     setRequiresMFA(false);
                     // Set requiresMFA to false after storage update
                     Logger.debug("MFA completed successfully, storage updated", {
@@ -454,9 +577,9 @@ function useCAMSMSALAuth(options) {
             }
             return [2 /*return*/];
         });
-    }); }, [mfaAuthenticator, accessToken, idToken, storageKey]);
-    var sendEmailOTP = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    }); }, [mfaAuthenticator, accessToken, idToken, storageKey, activeCookiePeriod]);
+    var sendEmailOTP = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     if (!mfaAuthenticator) {
@@ -467,9 +590,9 @@ function useCAMSMSALAuth(options) {
             }
         });
     }); }, [mfaAuthenticator]);
-    var logout = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
+    var logout = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
         var err_2, camsError;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 2, , 3]);
@@ -505,12 +628,13 @@ function useCAMSMSALAuth(options) {
         error: error,
         idToken: idToken,
         accessToken: accessToken,
-        appCode: options.appCode,
+        appCode: appCode,
         mfaAuthenticator: mfaAuthenticator,
         requiresMFA: requiresMFA,
         completeMFA: completeMFA,
         sendEmailOTP: sendEmailOTP,
         setRequiresMFA: setRequiresMFA,
+        activeCookiePeriod: activeCookiePeriod,
     };
 }
 
@@ -553,10 +677,10 @@ function arrayBufferToBase64url(buffer) {
  * @returns A promise that resolves to a JSON-serializable representation of the PublicKeyCredential.
  */
 function register(options) {
-    return __awaiter(this, void 0, void 0, function () {
+    return __awaiter$1(this, void 0, void 0, function () {
         var createOptions, credential, publicKeyCredential, attestationResponse, transports, err_1;
         var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-        return __generator(this, function (_k) {
+        return __generator$1(this, function (_k) {
             switch (_k.label) {
                 case 0:
                     _k.trys.push([0, 2, , 3]);
@@ -614,10 +738,10 @@ function register(options) {
  * @returns A promise that resolves to a JSON-serializable representation of the PublicKeyCredential.
  */
 function authenticate(options) {
-    return __awaiter(this, void 0, void 0, function () {
+    return __awaiter$1(this, void 0, void 0, function () {
         var getOptions, credential, publicKeyCredential, assertionResponse;
         var _a;
-        return __generator(this, function (_b) {
+        return __generator$1(this, function (_b) {
             switch (_b.label) {
                 case 0:
                     getOptions = __assign(__assign({}, options), { challenge: base64urlToArrayBuffer(options.challenge), allowCredentials: (_a = options.allowCredentials) === null || _a === void 0 ? void 0 : _a.map(function (cred) { return (__assign(__assign({}, cred), { id: base64urlToArrayBuffer(cred.id) })); }) });
@@ -1104,7 +1228,9 @@ function ProtectedRoute(_a) {
 
 var CAMSMSALContext = createContext(null);
 var setCookie = function (name, value, days) {
+    if (days === void 0) { days = 1; }
     var expires = new Date(Date.now() + days * 864e5).toUTCString();
+    Logger.debug("Auth Cookie Expires >>>", { name: name, value: value, expires: expires });
     document.cookie = "".concat(name, "=").concat(encodeURIComponent(value), "; expires=").concat(expires, "; path=/; samesite=Lax");
 };
 var getCookie = function (name) {
@@ -1169,7 +1295,7 @@ function CAMSMSALProviderInner(_a) {
             localStorage.setItem(auth.storageKey, JSON.stringify({
                 accessToken: auth.accessToken,
                 idToken: auth.idToken,
-                appCode: auth.appCode
+                appCode: auth.appCode,
             }));
         }
     }, [auth.accessToken, auth.idToken, auth.storageKey]);
@@ -1177,7 +1303,7 @@ function CAMSMSALProviderInner(_a) {
     useEffect(function () {
         if (typeof window !== "undefined") {
             if (userProfile) {
-                setCookie(profileStorageKey, JSON.stringify(userProfile), 1); // Store for 1 day
+                setCookie(profileStorageKey, JSON.stringify(userProfile), auth.activeCookiePeriod); // Store for 1 day
             }
             else {
                 deleteCookie(profileStorageKey);
@@ -1185,8 +1311,8 @@ function CAMSMSALProviderInner(_a) {
         }
     }, [userProfile, profileStorageKey]);
     // Enhanced logout that also clears profile
-    var enhancedLogout = function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var enhancedLogout = function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0: return [4 /*yield*/, auth.logout()];
                 case 1:
@@ -1204,7 +1330,9 @@ function CAMSMSALProviderInner(_a) {
 }
 function CAMSMSALProvider(props) {
     var msalConfig = props.msalConfig, msalInstance = props.msalInstance;
-    var instance = msalInstance || new PublicClientApplication(msalConfig);
+    var instance = typeof window !== "undefined"
+        ? msalInstance || new PublicClientApplication(msalConfig)
+        : null;
     return (jsxRuntimeExports.jsx(MsalProvider, { instance: instance, children: jsxRuntimeExports.jsx(CAMSMSALProviderInner, __assign({}, props)) }));
 }
 function useCAMSMSALContext() {
@@ -1282,8 +1410,8 @@ function CAMSProviderCore(props) {
             }
         }
     }, [userProfile, profileStorageKey]);
-    var enhancedLogout = function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var enhancedLogout = function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0: return [4 /*yield*/, auth.logout()];
                 case 1:
@@ -1326,7 +1454,8 @@ function CAMSProviderCore(props) {
         userProfile,
     ]);
     var value = useMemo(function () {
-        return (__assign(__assign({}, auth), { logout: enhancedLogout, userProfile: userProfile, setUserProfile: setUserProfile, authMode: mode }));
+        auth.logout; var authRest = __rest(auth, ["logout"]);
+        return __assign(__assign({}, authRest), { logout: enhancedLogout, userProfile: userProfile, setUserProfile: setUserProfile, authMode: mode });
     }, [auth, userProfile, mode]);
     return jsxRuntimeExports.jsx(CAMSContext.Provider, { value: value, children: children });
 }
@@ -1338,7 +1467,9 @@ function UnifiedCAMSProvider(props) {
     }
     if (props.mode === "MSAL") {
         var msalConfig = props.msalConfig, msalInstance = props.msalInstance;
-        var instance = msalInstance || new PublicClientApplication(msalConfig);
+        var instance = typeof window !== "undefined"
+            ? msalInstance || new PublicClientApplication(msalConfig)
+            : null;
         return (jsxRuntimeExports.jsx(MsalProvider, { instance: instance, children: jsxRuntimeExports.jsx(CAMSProviderCore, __assign({}, props)) }));
     }
     return (jsxRuntimeExports.jsx(ClientOnly, { fallback: jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: jsxRuntimeExports.jsx(CAMSProviderCore, __assign({}, props)) }));
@@ -1702,7 +1833,7 @@ styleInject(css_248z);
 
 var LoadingSpinner = function (_a) {
     var loadingText = _a.loadingText;
-    return (jsxRuntimeExports.jsxs("div", { className: "flex flex-col justify-center items-center", children: [jsxRuntimeExports.jsx("script", { type: "module", defer: true, src: "https://cdn.jsdelivr.net/npm/ldrs/dist/auto/waveform.js" }), jsxRuntimeExports.jsx(r, { size: "35", stroke: "3.5", speed: "1", color: "green" }), loadingText && (jsxRuntimeExports.jsx("p", { className: "text-center font-semibold mt-3", children: "Loading..." }))] }));
+    return (jsxRuntimeExports.jsxs("div", { className: "flex flex-col justify-center items-center h-full w-full py-10", children: [jsxRuntimeExports.jsx("script", { type: "module", defer: true, src: "https://cdn.jsdelivr.net/npm/ldrs/dist/auto/waveform.js" }), jsxRuntimeExports.jsx(r, { size: "35", stroke: "3.5", speed: "1", color: "green" }), loadingText && (jsxRuntimeExports.jsx("p", { className: "text-center font-semibold mt-3", children: "Loading..." }))] }));
 };
 
 var AuthSuccessAnimation = function (_a) {
@@ -1754,15 +1885,36 @@ var APIHeaders = {
     "X-API-VERSION": "1.0",
 };
 
+// Creates an Axios instance with a base URL determined by the environment (production or development).
+var axiosInstance = axios.create({
+    httpsAgent: new https.Agent({ rejectUnauthorized: false }),
+    headers: __assign({ "Content-Type": "application/json" }, APIHeaders),
+});
+// Intercepts outgoing requests to add authorization token, version header, and timeout settings.
+axiosInstance.interceptors.request.use(function (config) {
+    var _a;
+    config.timeout = Number((_a = process.env.NEXT_PUBLIC_API_TIMEOUT) !== null && _a !== void 0 ? _a : 605000);
+    config.timeoutErrorMessage = "Operation Timed Out"; // Custom error message for timeouts.
+    return config; // Returns the modified request configuration.
+}, function (axiosError) {
+    var _a, _b;
+    // Handles request errors.
+    return {
+        status: (_a = axiosError.response) === null || _a === void 0 ? void 0 : _a.status, // Extracts HTTP status from the error response.
+        message: axiosError.message, // Extracts the error message.
+        data: (_b = axiosError.response) === null || _b === void 0 ? void 0 : _b.data, // Extracts response data from the error.
+    };
+});
+
 var MAX_ATTEMPTS = 3;
 var useOTPHandler = function (_a) {
     var provider = _a.provider, accessToken = _a.accessToken, idToken = _a.idToken, appCode = _a.appCode, authenticationType = _a.authenticationType, MFAEndpoint = _a.MFAEndpoint, onAuthComplete = _a.onAuthComplete;
     var _b = useState(false), loading = _b[0], setLoading = _b[1];
     var _c = useState(0), attemptCount = _c[0], setAttemptCount = _c[1];
     var _d = useState(false), isMaxAttemptsReached = _d[0], setIsMaxAttemptsReached = _d[1];
-    var handleSubmitOTP = useMemo(function () { return function (authenticationValue) { return __awaiter(void 0, void 0, void 0, function () {
+    var handleSubmitOTP = useMemo(function () { return function (authenticationValue) { return __awaiter$1(void 0, void 0, void 0, function () {
         var currentAttempt, response, error_1, currentAttempt;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     if (isMaxAttemptsReached) {
@@ -1779,16 +1931,13 @@ var useOTPHandler = function (_a) {
                     setAttemptCount(currentAttempt);
                     if (authenticationType === null)
                         return [2 /*return*/, false];
-                    return [4 /*yield*/, axios.post(MFAEndpoint || "/api/auth/verify-mfa", {
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoint || "/api/auth/verify-mfa", {
                             provider: provider,
                             accessToken: accessToken,
                             idToken: idToken,
                             authenticationType: authenticationType,
                             MFACode: authenticationValue,
                             appCode: appCode,
-                        }, {
-                            headers: APIHeaders,
-                            timeout: 605000,
                         })];
                 case 2:
                     response = (_a.sent()).data;
@@ -1855,23 +2004,20 @@ var useCredentialsHandler = function (onAuthComplete) {
     var _b = useState(0), attemptCount = _b[0], setAttemptCount = _b[1];
     var _c = useState(false), isMaxAttemptsReached = _c[0], setIsMaxAttemptsReached = _c[1];
     var handleSubmitCredentials = useMemo(function () {
-        return function (CredAuthEndpoint, credentials, appCode) { return __awaiter(void 0, void 0, void 0, function () {
+        return function (CredAuthEndpoint, credentials, appCode) { return __awaiter$1(void 0, void 0, void 0, function () {
             var currentAttempt, response, error_2, currentAttempt;
-            return __generator(this, function (_a) {
+            return __generator$1(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         _a.trys.push([0, 2, 3, 4]);
                         setLoading(true);
                         currentAttempt = attemptCount + 1;
                         setAttemptCount(currentAttempt);
-                        return [4 /*yield*/, axios.post(CredAuthEndpoint, {
+                        return [4 /*yield*/, axiosInstance.post(CredAuthEndpoint, {
                                 username: credentials.username,
                                 password: credentials.password,
                                 MFACode: credentials.MFACode,
                                 appCode: appCode,
-                            }, {
-                                headers: APIHeaders,
-                                timeout: 605000,
                             })];
                     case 1:
                         response = (_a.sent()).data;
@@ -1932,23 +2078,21 @@ var MFAOptions = function (_a) {
     var context = useCAMSContext();
     var _f = context.authMode === "MSAL" && "sendEmailOTP" in context
         ? context
-        : { sendEmailOTP: null, completeMFA: null, logout: function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+        : { sendEmailOTP: null, completeMFA: null, logout: function () { return __awaiter$1(void 0, void 0, void 0, function () { return __generator$1(this, function (_a) {
                 return [2 /*return*/];
             }); }); } }, sendEmailOTP = _f.sendEmailOTP, completeMFA = _f.completeMFA, logout = _f.logout;
     var accessToken = context.authMode === "MSAL" ? context.accessToken : "";
     var idToken = context.authMode === "MSAL" ? context.idToken : "";
     var authenticate = useWebAuthn().authenticate;
-    var handleFIDOLogin = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var handleFIDOLogin = function () { return __awaiter$1(void 0, void 0, void 0, function () {
         var options, assertionResponse, error_1;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 4, , 5]);
                     // 1. Fetch authentication challenge from your server
                     console.log("Requesting authentication challenge from server...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.RetrieveAuthChallenge, {}, {
-                            headers: APIHeaders,
-                        })];
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoints.RetrieveAuthChallenge, {})];
                 case 1:
                     options = (_a.sent()).data;
                     console.log("Received challenge:", options);
@@ -1960,10 +2104,7 @@ var MFAOptions = function (_a) {
                     console.log("Authentication assertion received from client:", assertionResponse);
                     // 3. Send the assertion back to the server for verification
                     console.log("Sending assertion to server for verification...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.AuthChallengeVerify, assertionResponse, {
-                            headers: APIHeaders,
-                            withCredentials: true, // credentials: 'include'
-                        })];
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoints.AuthChallengeVerify, assertionResponse)];
                 case 3:
                     _a.sent();
                     toast.success("🔑 Sign-in successful!");
@@ -2025,12 +2166,12 @@ var MFAOptions = function (_a) {
     }
     var content = jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, {});
     if (!authType) {
-        content = (jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-600 text-center mb-6", children: "Choose your preferred authentication method:" }), jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3", children: [jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", onClick: function () { return __awaiter(void 0, void 0, void 0, function () {
+        content = (jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-600 text-center mb-6", children: "Choose your preferred authentication method:" }), jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3", children: [jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", onClick: function () { return __awaiter$1(void 0, void 0, void 0, function () {
                                 var success;
-                                return __generator(this, function (_a) {
+                                return __generator$1(this, function (_a) {
                                     switch (_a.label) {
                                         case 0:
-                                            resetAttempts();
+                                            // resetAttempts();
                                             setAuthType("EmailOTP");
                                             setOtpVisible(true);
                                             if (!sendEmailOTP) return [3 /*break*/, 2];
@@ -2047,7 +2188,6 @@ var MFAOptions = function (_a) {
                                     }
                                 });
                             }); }, children: [jsxRuntimeExports.jsx(Mail, { className: "w-5 h-5" }), jsxRuntimeExports.jsxs("div", { className: "text-left", children: [jsxRuntimeExports.jsx("div", { className: "font-medium", children: "Email OTP" }), jsxRuntimeExports.jsx("div", { className: "text-sm text-gray-500", children: "Send code to your email" })] })] }), jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", onClick: function () {
-                                resetAttempts();
                                 setAuthType("AuthenticatorCode");
                                 setOtpVisible(true);
                             }, children: [jsxRuntimeExports.jsx("img", { src: MicrosoftAuthenticatorImg, alt: "Authenticator", className: "rounded-full", width: 24, height: 24, onError: function () { return jsxRuntimeExports.jsx(Shield, {}); } }), jsxRuntimeExports.jsxs("div", { className: "text-left", children: [jsxRuntimeExports.jsx("div", { className: "font-medium", children: "Authenticator App" }), jsxRuntimeExports.jsx("div", { className: "text-sm text-gray-500", children: "Use Authenticator App" })] })] }), usePassKey && (jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", 
@@ -2056,7 +2196,7 @@ var MFAOptions = function (_a) {
                             //   setAuthType("AuthenticatorCode");
                             //   setOtpVisible(true);
                             // }}
-                            onClick: handleFIDOLogin, disabled: context.isLoading, children: [jsxRuntimeExports.jsx(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", children: jsxRuntimeExports.jsx("span", { children: "Sign In " }) }), jsxRuntimeExports.jsx(KeyIcon, { className: "w-16 h-16 text-[#506f4a]" }), jsxRuntimeExports.jsxs("div", { className: "text-left", children: [jsxRuntimeExports.jsx("div", { className: "font-medium", children: "Continue with Passkey" }), jsxRuntimeExports.jsx("div", { className: "text-sm text-gray-500", children: "Passkey" })] })] }))] })] }));
+                            onClick: handleFIDOLogin, disabled: context.isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 48 }), jsxRuntimeExports.jsxs("div", { className: "text-left", children: [jsxRuntimeExports.jsx("div", { className: "font-medium", children: "Continue with Passkey" }), jsxRuntimeExports.jsx("div", { className: "text-sm text-gray-500", children: "Passkey" })] })] }))] })] }));
     }
     else if (authType === "EmailOTP") {
         content = (jsxRuntimeExports.jsx(Dialog, { open: otpVisible, onOpenChange: function () {
@@ -2099,16 +2239,16 @@ var ADLoginModal = function (_a) {
         resolver: a$1(credentialsSchema),
         defaultValues: { username: "", password: "" },
     });
-    var handleCredentialsSubmit = function (values) { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var handleCredentialsSubmit = function (values) { return __awaiter$1(void 0, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             setCredentials(values);
             setStep("mfa");
             return [2 /*return*/];
         });
     }); };
-    var handleMFASubmit = function (code) { return __awaiter(void 0, void 0, void 0, function () {
+    var handleMFASubmit = function (code) { return __awaiter$1(void 0, void 0, void 0, function () {
         var error_1;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     setIsLoading(true);
@@ -2144,7 +2284,7 @@ var ADLoginModal = function (_a) {
         form.reset();
         setMfaCode("");
     };
-    return (jsxRuntimeExports.jsx(Dialog, { open: open, onOpenChange: handleClose, children: jsxRuntimeExports.jsxs(DialogContent, { className: "w-[70vw] min-w-[250px] max-w-[350px]", children: [jsxRuntimeExports.jsx(DialogHeader, { children: jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2", children: [jsxRuntimeExports.jsx(KeyIcon, { className: "w-8 h-8 text-[#506f4a]" }), jsxRuntimeExports.jsx(DialogTitle, { className: "text-2xl", children: "Sign in with AD" })] }) }), step === "credentials" ? (jsxRuntimeExports.jsx(Form, __assign({}, form, { children: jsxRuntimeExports.jsxs("form", { onSubmit: form.handleSubmit(handleCredentialsSubmit), className: "space-y-4", children: [jsxRuntimeExports.jsx(FormField, { control: form.control, name: "username", render: function (_a) {
+    return (jsxRuntimeExports.jsx(Dialog, { open: open, onOpenChange: handleClose, children: jsxRuntimeExports.jsxs(DialogContent, { className: "min-w-[50vw] max-w-[70vw]", children: [jsxRuntimeExports.jsx(DialogHeader, { children: jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2", children: [jsxRuntimeExports.jsx(KeyIcon, { className: "w-8 h-8 text-[#506f4a]" }), jsxRuntimeExports.jsx(DialogTitle, { className: "text-2xl", children: "Sign in with AD" })] }) }), step === "credentials" ? (jsxRuntimeExports.jsx(Form, __assign({}, form, { children: jsxRuntimeExports.jsxs("form", { onSubmit: form.handleSubmit(handleCredentialsSubmit), className: "space-y-4", children: [jsxRuntimeExports.jsx(FormField, { control: form.control, name: "username", render: function (_a) {
                                     var field = _a.field;
                                     return (jsxRuntimeExports.jsxs(FormItem, { children: [jsxRuntimeExports.jsx(FormLabel, { children: "Username" }), jsxRuntimeExports.jsx(FormControl, { children: jsxRuntimeExports.jsx(Input, __assign({ className: "h-12", placeholder: "Enter your username" }, field)) }), jsxRuntimeExports.jsx(FormMessage, {})] }));
                                 } }), jsxRuntimeExports.jsx(FormField, { control: form.control, name: "password", render: function (_a) {
@@ -2169,8 +2309,8 @@ var DefaultLoginPage = function (_a) {
     var login = context.login, isLoading = context.isLoading, authMode = context.authMode;
     var _b = useState(false), showADModal = _b[0], setShowADModal = _b[1];
     var register = useWebAuthn().register;
-    var _c = useCredentialsHandler(function (state, data) { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var _c = useCredentialsHandler(function (state, data) { return __awaiter$1(void 0, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             console.log(data);
             if (state && data) {
                 context.isAuthenticated = true;
@@ -2184,6 +2324,10 @@ var DefaultLoginPage = function (_a) {
         });
     }); }), handleSubmitCredentials = _c.handleSubmitCredentials, isCredAuthLoading = _c.loading, setIsCredAuthLoading = _c.setLoading;
     var handleMSALLogin = function () {
+        if (typeof window !== "undefined" && !window.crypto) {
+            toast.error("Crypto API not available. Please use a modern browser.");
+            return;
+        }
         if (authMode === "MSAL") {
             login();
         }
@@ -2192,17 +2336,15 @@ var DefaultLoginPage = function (_a) {
             console.warn("Regular CAMS login requires configuration");
         }
     };
-    var handleRegister = function (data) { return __awaiter(void 0, void 0, void 0, function () {
+    var handleRegister = function (data) { return __awaiter$1(void 0, void 0, void 0, function () {
         var options, attestationResponse, error_1;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 4, , 5]);
                     // 1. Fetch challenge from your server
                     console.log("Requesting registration challenge from server...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.RegisterNewChallenge, __assign({}, data), {
-                            headers: APIHeaders,
-                        })];
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoints.RegisterNewChallenge, __assign({}, data))];
                 case 1:
                     options = (_a.sent()).data;
                     console.log("Received challenge:", options);
@@ -2214,10 +2356,7 @@ var DefaultLoginPage = function (_a) {
                     console.log("Passkey created on client:", attestationResponse);
                     // 3. Send the response back to the server for verification
                     console.log("Sending attestation to server for verification...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.RegisterVerify, attestationResponse, {
-                            headers: APIHeaders,
-                            withCredentials: true, // credentials: 'include'
-                        })];
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoints.RegisterVerify + "?username=".concat(data.username), attestationResponse)];
                 case 3:
                     _a.sent();
                     toast.success("✅ Registration successful! Passkey created.");
@@ -2231,15 +2370,15 @@ var DefaultLoginPage = function (_a) {
             }
         });
     }); };
-    return (jsxRuntimeExports.jsxs("main", { className: "min-h-screen bg-gray-50", children: [jsxRuntimeExports.jsx(motion.div, { initial: { opacity: 0 }, animate: { opacity: 1 }, exit: { opacity: 0 }, transition: { duration: 0.5 }, children: jsxRuntimeExports.jsx("div", { className: "flex h-screen items-center justify-center", children: jsxRuntimeExports.jsxs(motion.div, { variants: cardVariants, initial: "hidden", animate: "visible", exit: "exit", className: "w-full max-w-md p-6 space-y-4 bg-gray-50 rounded-2xl shadow-2xl --dark:bg-gray-800", children: [jsxRuntimeExports.jsxs(CardHeader, { className: "text-center space-y-3", children: [jsxRuntimeExports.jsx("div", { className: "w-full flex items-center justify-center", children: jsxRuntimeExports.jsx("img", { src: NIBSSLogo, alt: "NIBSS Logo", width: 265, height: 265 }) }), jsxRuntimeExports.jsx(CardTitle, { className: "text-3xl font-bold --text-gray-900 --dark:text-white", children: "NIBSS CAMS" }), jsxRuntimeExports.jsx(CardTitle, { className: "text-gray-500 dark:text-gray-400 font-bold text-lg", children: "Centralized Authentication" })] }), jsxRuntimeExports.jsxs(CardAction, { className: "w-full flex flex-col items-center justify-center text-center text-gray-500 dark:text-gray-400 mb-6", children: [jsxRuntimeExports.jsx("img", { src: AuthLogo, alt: "Auth Logo", width: 365, height: 365 }), "Kindly use the below identity providers to authenticate"] }), jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsxs(Button
+    return (jsxRuntimeExports.jsxs("main", { className: "min-h-screen bg-gray-50", children: [jsxRuntimeExports.jsx(motion.div, { initial: { opacity: 0 }, animate: { opacity: 1 }, exit: { opacity: 0 }, transition: { duration: 0.5 }, children: jsxRuntimeExports.jsx("div", { className: "flex h-screen items-center justify-center", children: jsxRuntimeExports.jsxs(motion.div, { variants: cardVariants, initial: "hidden", animate: "visible", exit: "exit", className: "w-full max-w-md p-6 space-y-4 bg-gray-50 rounded-2xl shadow-2xl --dark:bg-gray-800", children: [jsxRuntimeExports.jsxs(CardHeader, { className: "text-center space-y-3", children: [jsxRuntimeExports.jsx("div", { className: "w-full flex items-center justify-center", children: jsxRuntimeExports.jsx("img", { src: NIBSSLogo, alt: "NIBSS Logo", width: 265, height: 265 }) }), jsxRuntimeExports.jsx(CardTitle, { className: "text-3xl font-bold --text-gray-900 --dark:text-white", children: "NIBSS CAMS" }), jsxRuntimeExports.jsx(CardTitle, { className: "text-gray-500 dark:text-gray-400 font-bold text-lg", children: "Centralized Authentication" })] }), jsxRuntimeExports.jsxs(CardAction, { className: "w-full flex flex-col items-center justify-center text-center text-gray-500 dark:text-gray-400 mb-8", children: [jsxRuntimeExports.jsx("img", { src: AuthLogo, alt: "Auth Logo", width: 365, height: 365 }), "Use Below Identity Providers To Authenticate"] }), jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsxs(Button
                                     // variant="outline"
                                     , { 
                                         // variant="outline"
                                         className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: handleMSALLogin, disabled: isLoading, children: [jsxRuntimeExports.jsx("img", { src: MicrosoftLogo, alt: "Microsoft Logo", width: 35, height: 35 }), jsxRuntimeExports.jsx("span", { className: "ml-2", children: isLoading ? "Logging in..." : "Sign in with Microsoft" })] }), useADLogin && (jsxRuntimeExports.jsxs(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: function () { return setShowADModal(true); }, disabled: isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 64 }), jsxRuntimeExports.jsx("span", { children: isLoading
                                                     ? "Logging in..."
-                                                    : "Sign in with ActiveDirectory" })] })), usePassKey && (jsxRuntimeExports.jsxs(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: function () { return handleRegister(PassKeysRegisterProps); }, disabled: isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 64 }), jsxRuntimeExports.jsx("span", { children: "Create a Passkey" })] }))] }), jsxRuntimeExports.jsxs(CardFooter, { className: "flex items-center justify-center mt-6 space-x-2 text-gray-400 text-sm", children: [jsxRuntimeExports.jsx(ShieldCheck, { className: "w-4 h-4 text-[#506f4a] pulse-glow" }), jsxRuntimeExports.jsx("span", { children: "Powered By NIBSS" })] })] }) }) }, "landing"), jsxRuntimeExports.jsx(ADLoginModal, { open: showADModal, onOpenChange: setShowADModal, isLoading: isCredAuthLoading, setIsLoading: setIsCredAuthLoading, onLogin: function (_a) { return __awaiter(void 0, [_a], void 0, function (_b) {
+                                                    : "Sign in with ActiveDirectory" })] })), usePassKey && (jsxRuntimeExports.jsxs(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: function () { return handleRegister(PassKeysRegisterProps); }, disabled: isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 64 }), jsxRuntimeExports.jsx("span", { children: "Create a Passkey" })] }))] }), jsxRuntimeExports.jsxs(CardFooter, { className: "flex items-center justify-center mt-6 space-x-2 text-gray-400 text-sm", children: [jsxRuntimeExports.jsx(ShieldCheck, { className: "w-4 h-4 text-[#506f4a] pulse-glow" }), jsxRuntimeExports.jsx("span", { children: "Powered By NIBSS" })] })] }) }) }, "landing"), jsxRuntimeExports.jsx(ADLoginModal, { open: showADModal, onOpenChange: setShowADModal, isLoading: isCredAuthLoading, setIsLoading: setIsCredAuthLoading, onLogin: function (_a) { return __awaiter$1(void 0, [_a], void 0, function (_b) {
                     var username = _b.username, password = _b.password, MFACode = _b.MFACode;
-                    return __generator(this, function (_c) {
+                    return __generator$1(this, function (_c) {
                         // Implement your AD login logic here
                         console.log("AD Login:", { username: username, password: password, MFACode: MFACode });
                         // Example: await adLoginService(username, password, mfaCode);
@@ -2280,8 +2419,8 @@ var MFAGate = function (_a) {
         if (!success)
             Logger.error("MFA authentication failed");
     }, []);
-    var handleAuthFailed = useCallback(function () { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var handleAuthFailed = useCallback(function () { return __awaiter$1(void 0, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0: return [4 /*yield*/, context.logout()];
                 case 1:
@@ -2290,7 +2429,6 @@ var MFAGate = function (_a) {
             }
         });
     }); }, [context.logout]);
-    Logger.debug("MFA Endpoint >>>", { MFAEndpoints: MFAEndpoints });
     if (useADLogin && !CredentialsAuthEndpoint)
         return jsxRuntimeExports.jsx(ErrorFallback, { message: "Invalid AD Login Configuration." });
     if (!validatedMFAEndpoints)