@nibssplc/cams-sdk-react 1.0.0-rc.5 → 1.0.0-rc.50

package/dist/index.esm.js

@@ -18,6 +18,7 @@ import * as DialogPrimitive from '@radix-ui/react-dialog';
 import { toast } from 'sonner';
 import { motion } from 'framer-motion';
 import axios from 'axios';
+import https from 'https';
 
 /******************************************************************************
 Copyright (c) Microsoft Corporation.
@@ -59,7 +60,7 @@ function __rest(s, e) {
     return t;
 }
 
-function __awaiter(thisArg, _arguments, P, generator) {
+function __awaiter$1(thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
         function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
@@ -69,7 +70,7 @@ function __awaiter(thisArg, _arguments, P, generator) {
     });
 }
 
-function __generator(thisArg, body) {
+function __generator$1(thisArg, body) {
     var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
     return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
     function verb(n) { return function (v) { return step([n, v]); }; }
@@ -166,10 +167,10 @@ function useCAMSAuth(options) {
             }
         }
     }, [options.storageKey]);
-    var login = useCallback(function (config) { return __awaiter(_this, void 0, void 0, function () {
+    var login = useCallback(function (config) { return __awaiter$1(_this, void 0, void 0, function () {
         var loginConfig, userProfile, err_1, e, isPopupClosedError, restoredToken, userProfile;
         var _a, _b, _c;
-        return __generator(this, function (_d) {
+        return __generator$1(this, function (_d) {
             switch (_d.label) {
                 case 0:
                     if (!sessionManagerRef.current)
@@ -217,8 +218,8 @@ function useCAMSAuth(options) {
             }
         });
     }); }, [options.idleTimeout]);
-    var logout = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var logout = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     if (!sessionManagerRef.current)
@@ -248,11 +249,154 @@ function useCAMSAuth(options) {
     };
 }
 
-var setCookie$1 = function (name, value, days) {
+var _a;
+// Crypto polyfill for MSAL browser compatibility
+// Only apply if crypto.subtle is completely missing
+if (typeof window !== "undefined" && !((_a = window.crypto) === null || _a === void 0 ? void 0 : _a.subtle)) {
+    // Ensure crypto object exists
+    if (!window.crypto) {
+        window.crypto = {};
+    }
+    // Polyfill getRandomValues
+    if (!window.crypto.getRandomValues) {
+        window.crypto.getRandomValues = function (array) {
+            var bytes = new Uint8Array(array.buffer, array.byteOffset, array.byteLength);
+            for (var i = 0; i < bytes.length; i++) {
+                bytes[i] = Math.floor(Math.random() * 256);
+            }
+            return array;
+        };
+    }
+    var sha256_1 = function (data) { return __awaiter(void 0, void 0, void 0, function () {
+        var toUint8, bytes, hash, k, ml, msg, dv, high, low, i, w, j, j, s0, s1, a, b, c, d, e, f, g, h, j, S1, ch, temp1, S0, maj, temp2, result, i;
+        return __generator(this, function (_a) {
+            toUint8 = function (src) {
+                if (src instanceof ArrayBuffer)
+                    return new Uint8Array(src);
+                if (ArrayBuffer.isView(src)) {
+                    var view = src;
+                    return new Uint8Array(view.buffer, view.byteOffset || 0, view.byteLength);
+                }
+                throw new TypeError("Unsupported BufferSource");
+            };
+            bytes = toUint8(data);
+            hash = new Uint32Array(8);
+            k = new Uint32Array([
+                0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1,
+                0x923f82a4, 0xab1c5ed5, 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3,
+                0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, 0xe49b69c1, 0xefbe4786,
+                0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+                0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147,
+                0x06ca6351, 0x14292967, 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13,
+                0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, 0xa2bfe8a1, 0xa81a664b,
+                0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+                0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a,
+                0x5b9cca4f, 0x682e6ff3, 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208,
+                0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+            ]);
+            hash[0] = 0x6a09e667;
+            hash[1] = 0xbb67ae85;
+            hash[2] = 0x3c6ef372;
+            hash[3] = 0xa54ff53a;
+            hash[4] = 0x510e527f;
+            hash[5] = 0x9b05688c;
+            hash[6] = 0x1f83d9ab;
+            hash[7] = 0x5be0cd19;
+            ml = bytes.length * 8;
+            msg = new Uint8Array(bytes.length + 64 + ((64 - ((bytes.length + 9) % 64)) % 64));
+            msg.set(bytes);
+            msg[bytes.length] = 0x80;
+            dv = new DataView(msg.buffer);
+            high = Math.floor(ml / 0x100000000);
+            low = ml >>> 0;
+            dv.setUint32(msg.length - 8, high, false);
+            dv.setUint32(msg.length - 4, low, false);
+            for (i = 0; i < msg.length; i += 64) {
+                w = new Uint32Array(64);
+                for (j = 0; j < 16; j++)
+                    w[j] = new DataView(msg.buffer).getUint32(i + j * 4, false);
+                for (j = 16; j < 64; j++) {
+                    s0 = ((w[j - 15] >>> 7) | (w[j - 15] << 25)) ^
+                        ((w[j - 15] >>> 18) | (w[j - 15] << 14)) ^
+                        (w[j - 15] >>> 3);
+                    s1 = ((w[j - 2] >>> 17) | (w[j - 2] << 15)) ^
+                        ((w[j - 2] >>> 19) | (w[j - 2] << 13)) ^
+                        (w[j - 2] >>> 10);
+                    w[j] = (w[j - 16] + s0 + w[j - 7] + s1) >>> 0;
+                }
+                a = hash[0], b = hash[1], c = hash[2], d = hash[3], e = hash[4], f = hash[5], g = hash[6], h = hash[7];
+                for (j = 0; j < 64; j++) {
+                    S1 = ((e >>> 6) | (e << 26)) ^
+                        ((e >>> 11) | (e << 21)) ^
+                        ((e >>> 25) | (e << 7));
+                    ch = (e & f) ^ (~e & g);
+                    temp1 = (h + S1 + ch + k[j] + w[j]) >>> 0;
+                    S0 = ((a >>> 2) | (a << 30)) ^
+                        ((a >>> 13) | (a << 19)) ^
+                        ((a >>> 22) | (a << 10));
+                    maj = (a & b) ^ (a & c) ^ (b & c);
+                    temp2 = (S0 + maj) >>> 0;
+                    h = g;
+                    g = f;
+                    f = e;
+                    e = (d + temp1) >>> 0;
+                    d = c;
+                    c = b;
+                    b = a;
+                    a = (temp1 + temp2) >>> 0;
+                }
+                hash[0] = (hash[0] + a) >>> 0;
+                hash[1] = (hash[1] + b) >>> 0;
+                hash[2] = (hash[2] + c) >>> 0;
+                hash[3] = (hash[3] + d) >>> 0;
+                hash[4] = (hash[4] + e) >>> 0;
+                hash[5] = (hash[5] + f) >>> 0;
+                hash[6] = (hash[6] + g) >>> 0;
+                hash[7] = (hash[7] + h) >>> 0;
+            }
+            result = new Uint8Array(32);
+            for (i = 0; i < 8; i++)
+                new DataView(result.buffer).setUint32(i * 4, hash[i], false);
+            return [2 /*return*/, result.buffer];
+        });
+    }); };
+    // Create the polyfilled subtle object
+    var polyfillSubtle = {
+        digest: function (algorithm, data) { return __awaiter(void 0, void 0, void 0, function () {
+            var alg;
+            return __generator(this, function (_a) {
+                alg = typeof algorithm === "string"
+                    ? algorithm
+                    : algorithm.name;
+                if (alg === "SHA-256")
+                    return [2 /*return*/, sha256_1(data)];
+                throw new Error("Unsupported algorithm: ".concat(alg));
+            });
+        }); },
+    };
+    // Set the polyfilled subtle object
+    window.crypto.subtle = polyfillSubtle;
+    // Polyfill randomUUID
+    if (!window.crypto.randomUUID) {
+        window.crypto.randomUUID =
+            function () {
+                return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, function (c) {
+                    var r = (Math.random() * 16) | 0;
+                    var v = c === "x" ? r : (r & 0x3) | 0x8;
+                    return v.toString(16);
+                });
+            };
+    }
+    console.log("Crypto polyfill applied (native crypto.subtle not available)");
+}
+
+var setCookie = function (name, value, days) {
+    if (days === void 0) { days = 1; }
     var expires = new Date(Date.now() + days * 24 * 60 * 60 * 1000).toUTCString();
+    console.log("Auth Cookie Expires >>>", { name: name, value: value, expires: expires });
     document.cookie = "".concat(name, "=").concat(encodeURIComponent(value), "; expires=").concat(expires, "; path=/; samesite=Lax");
 };
-var getCookie$1 = function (name) {
+var getCookie = function (name) {
     var _a;
     return ((_a = document.cookie
         .split("; ")
@@ -263,23 +407,24 @@ var getCookie$1 = function (name) {
             .split("=")[1])
         : null;
 };
-var deleteCookie$1 = function (name) {
+var deleteCookie = function (name) {
     document.cookie = name + "=; Max-Age=-99999999; path=/";
 };
 
 function useCAMSMSALAuth(options) {
     var _this = this;
-    var storageKey = options.storageKey || "CAMS-MSAL-AUTH-SDK";
-    var _a = useMsal(), instance = _a.instance, inProgress = _a.inProgress, accounts = _a.accounts;
+    var optStorageKey = options.storageKey, optScopes = options.scopes, prompt = options.prompt, appCode = options.appCode, MFAEndpoint = options.MFAEndpoint, _a = options.activeCookiePeriod, activeCookiePeriod = _a === void 0 ? 1 : _a;
+    var storageKey = optStorageKey || "CAMS-MSAL-AUTH-SDK";
+    var _b = useMsal(), instance = _b.instance, inProgress = _b.inProgress, accounts = _b.accounts;
     var account = useAccount(accounts[0] || {});
-    var _b = useState(null), error = _b[0], setError = _b[1];
-    var _c = useState(""), idToken = _c[0], setIdToken = _c[1];
-    var _d = useState(""), accessToken = _d[0], setAccessToken = _d[1];
-    var _e = useState(null), mfaAuthenticator = _e[0], setMfaAuthenticator = _e[1];
-    var _f = useState(false), requiresMFA = _f[0], setRequiresMFA = _f[1];
+    var _c = useState(null), error = _c[0], setError = _c[1];
+    var _d = useState(""), idToken = _d[0], setIdToken = _d[1];
+    var _e = useState(""), accessToken = _e[0], setAccessToken = _e[1];
+    var _f = useState(null), mfaAuthenticator = _f[0], setMfaAuthenticator = _f[1];
+    var _g = useState(false), requiresMFA = _g[0], setRequiresMFA = _g[1];
     var isLoading = inProgress !== InteractionStatus.None;
     var isAuthenticated = !!account && !!accessToken && !requiresMFA;
-    var scopes = options.scopes || ["openid", "profile", "email"];
+    var scopes = optScopes || ["openid", "profile", "email"];
     var isTokenValid = function (token) {
         try {
             var payload = JSON.parse(atob(token.split(".")[1]));
@@ -303,15 +448,14 @@ function useCAMSMSALAuth(options) {
                             var mfaConfig = {
                                 accessToken: accessToken_1,
                                 idToken: idToken_1,
-                                appCode: options.appCode,
+                                appCode: appCode,
                                 provider: "MSAL",
-                                apiEndpoint: options.MFAEndpoint,
+                                apiEndpoint: MFAEndpoint,
                             };
                             var authenticator = new CAMSMFAAuthenticator(mfaConfig);
                             setMfaAuthenticator(authenticator);
                             setRequiresMFA(true);
                         }
-                        Logger.debug("App Code", { ">>>": options.appCode });
                     }
                     else {
                         localStorage.removeItem(storageKey);
@@ -353,22 +497,26 @@ function useCAMSMSALAuth(options) {
     //   };
     //   handleRedirect();
     // }, []);
-    var login = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
+    var login = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
         var response, mfaConfig, authenticator, err_1, camsError_1, camsError;
-        var _a, _b, _c, _d;
-        return __generator(this, function (_e) {
-            switch (_e.label) {
+        var _a;
+        return __generator$1(this, function (_b) {
+            switch (_b.label) {
                 case 0:
+                    if (inProgress !== InteractionStatus.None) {
+                        Logger.warn("Authentication already in progress, ignoring duplicate call");
+                        return [2 /*return*/];
+                    }
                     setError(null);
-                    _e.label = 1;
+                    _b.label = 1;
                 case 1:
-                    _e.trys.push([1, 3, , 4]);
+                    _b.trys.push([1, 3, , 4]);
                     return [4 /*yield*/, instance.loginPopup({
                             scopes: scopes,
-                            prompt: options.prompt || "login",
+                            prompt: prompt || "login",
                         })];
                 case 2:
-                    response = _e.sent();
+                    response = _b.sent();
                     console.log("Login Token response:", {
                         accessToken: response.accessToken,
                         idToken: response.idToken,
@@ -378,9 +526,9 @@ function useCAMSMSALAuth(options) {
                     mfaConfig = {
                         accessToken: response.accessToken,
                         idToken: response.idToken,
-                        appCode: options.appCode,
+                        appCode: appCode,
                         provider: "MSAL",
-                        apiEndpoint: options.MFAEndpoint,
+                        apiEndpoint: MFAEndpoint,
                     };
                     authenticator = new CAMSMFAAuthenticator(mfaConfig);
                     setMfaAuthenticator(authenticator);
@@ -394,10 +542,14 @@ function useCAMSMSALAuth(options) {
                             idToken: response.idToken,
                         }));
                     }
-                    (_a = options.onAuthSuccess) === null || _a === void 0 ? void 0 : _a.call(options, response.accessToken);
                     return [3 /*break*/, 4];
                 case 3:
-                    err_1 = _e.sent();
+                    err_1 = _b.sent();
+                    // Handle interaction_in_progress error
+                    if (err_1.errorCode === "interaction_in_progress") {
+                        Logger.warn("Interaction already in progress, please wait");
+                        return [2 /*return*/];
+                    }
                     // Handle user cancellation gracefully
                     if (err_1.errorCode === "user_cancelled") {
                         Logger.error("User cancelled login");
@@ -406,22 +558,28 @@ function useCAMSMSALAuth(options) {
                     }
                     // If popup is blocked
                     if (err_1.errorCode === "popup_window_error" ||
-                        ((_b = err_1.message) === null || _b === void 0 ? void 0 : _b.includes("popup"))) {
+                        ((_a = err_1.message) === null || _a === void 0 ? void 0 : _a.includes("popup"))) {
                         camsError_1 = new CAMSError(CAMSErrorType.POPUP_BLOCKED, "Popup blocked by browser. Please allow popups and try again.");
                         setError(camsError_1);
-                        (_c = options.onAuthError) === null || _c === void 0 ? void 0 : _c.call(options, camsError_1);
                         return [2 /*return*/];
                     }
                     camsError = new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "Login failed: " + err_1.message || err_1);
                     setError(camsError);
-                    (_d = options.onAuthError) === null || _d === void 0 ? void 0 : _d.call(options, camsError);
                     return [3 /*break*/, 4];
                 case 4: return [2 /*return*/];
             }
         });
-    }); }, [instance, scopes, options]);
-    var completeMFA = useCallback(function (data) { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    }); }, [
+        instance,
+        scopes,
+        prompt,
+        appCode,
+        MFAEndpoint,
+        storageKey,
+        inProgress,
+    ]);
+    var completeMFA = useCallback(function (data) { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             if (!mfaAuthenticator) {
                 throw new CAMSError(CAMSErrorType.API_VALIDATION_ERROR, "MFA Authenticator not initialized");
             }
@@ -435,7 +593,7 @@ function useCAMSMSALAuth(options) {
                         accessToken: accessToken,
                         idToken: idToken,
                     }));
-                    setCookie$1("CAMS-MSAL-AUTH-SDK-PROFILE", JSON.stringify({ type: "AUTH_SUCCESS", userProfile: __assign({}, data) }), 1);
+                    setCookie("CAMS-MSAL-AUTH-SDK-PROFILE", JSON.stringify({ type: "AUTH_SUCCESS", userProfile: __assign({}, data) }), activeCookiePeriod);
                     setRequiresMFA(false);
                     // Set requiresMFA to false after storage update
                     Logger.debug("MFA completed successfully, storage updated", {
@@ -454,9 +612,9 @@ function useCAMSMSALAuth(options) {
             }
             return [2 /*return*/];
         });
-    }); }, [mfaAuthenticator, accessToken, idToken, storageKey]);
-    var sendEmailOTP = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    }); }, [mfaAuthenticator, accessToken, idToken, storageKey, activeCookiePeriod]);
+    var sendEmailOTP = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     if (!mfaAuthenticator) {
@@ -467,9 +625,9 @@ function useCAMSMSALAuth(options) {
             }
         });
     }); }, [mfaAuthenticator]);
-    var logout = useCallback(function () { return __awaiter(_this, void 0, void 0, function () {
+    var logout = useCallback(function () { return __awaiter$1(_this, void 0, void 0, function () {
         var err_2, camsError;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 2, , 3]);
@@ -505,12 +663,13 @@ function useCAMSMSALAuth(options) {
         error: error,
         idToken: idToken,
         accessToken: accessToken,
-        appCode: options.appCode,
+        appCode: appCode,
         mfaAuthenticator: mfaAuthenticator,
         requiresMFA: requiresMFA,
         completeMFA: completeMFA,
         sendEmailOTP: sendEmailOTP,
         setRequiresMFA: setRequiresMFA,
+        activeCookiePeriod: activeCookiePeriod,
     };
 }
 
@@ -553,10 +712,10 @@ function arrayBufferToBase64url(buffer) {
  * @returns A promise that resolves to a JSON-serializable representation of the PublicKeyCredential.
  */
 function register(options) {
-    return __awaiter(this, void 0, void 0, function () {
+    return __awaiter$1(this, void 0, void 0, function () {
         var createOptions, credential, publicKeyCredential, attestationResponse, transports, err_1;
         var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-        return __generator(this, function (_k) {
+        return __generator$1(this, function (_k) {
             switch (_k.label) {
                 case 0:
                     _k.trys.push([0, 2, , 3]);
@@ -614,10 +773,10 @@ function register(options) {
  * @returns A promise that resolves to a JSON-serializable representation of the PublicKeyCredential.
  */
 function authenticate(options) {
-    return __awaiter(this, void 0, void 0, function () {
+    return __awaiter$1(this, void 0, void 0, function () {
         var getOptions, credential, publicKeyCredential, assertionResponse;
         var _a;
-        return __generator(this, function (_b) {
+        return __generator$1(this, function (_b) {
             switch (_b.label) {
                 case 0:
                     getOptions = __assign(__assign({}, options), { challenge: base64urlToArrayBuffer(options.challenge), allowCredentials: (_a = options.allowCredentials) === null || _a === void 0 ? void 0 : _a.map(function (cred) { return (__assign(__assign({}, cred), { id: base64urlToArrayBuffer(cred.id) })); }) });
@@ -1090,7 +1249,7 @@ function ProtectedRoute(_a) {
     var children = _a.children, fallback = _a.fallback, redirectTo = _a.redirectTo;
     var _b = useCAMSContext$1(), isAuthenticated = _b.isAuthenticated, isLoading = _b.isLoading;
     if (isLoading) {
-        return fallback || jsxRuntimeExports.jsx("div", { children: "Loading..." });
+        return fallback || jsxRuntimeExports.jsx("div", { className: 'h-screen flex items-center justify-center', children: "Loading..." });
     }
     if (!isAuthenticated) {
         if (redirectTo && typeof window !== 'undefined') {
@@ -1103,24 +1262,6 @@ function ProtectedRoute(_a) {
 }
 
 var CAMSMSALContext = createContext(null);
-var setCookie = function (name, value, days) {
-    var expires = new Date(Date.now() + days * 864e5).toUTCString();
-    document.cookie = "".concat(name, "=").concat(encodeURIComponent(value), "; expires=").concat(expires, "; path=/; samesite=Lax");
-};
-var getCookie = function (name) {
-    var _a;
-    return ((_a = document.cookie
-        .split("; ")
-        .find(function (row) { return row.startsWith(name + "="); })) === null || _a === void 0 ? void 0 : _a.split("=")[1])
-        ? decodeURIComponent(document.cookie
-            .split("; ")
-            .find(function (row) { return row.startsWith(name + "="); })
-            .split("=")[1])
-        : null;
-};
-var deleteCookie = function (name) {
-    document.cookie = name + "=; Max-Age=-99999999; path=/";
-};
 var isTokenValid = function (token) {
     try {
         var payload = JSON.parse(atob(token.split(".")[1]));
@@ -1169,7 +1310,7 @@ function CAMSMSALProviderInner(_a) {
             localStorage.setItem(auth.storageKey, JSON.stringify({
                 accessToken: auth.accessToken,
                 idToken: auth.idToken,
-                appCode: auth.appCode
+                appCode: auth.appCode,
             }));
         }
     }, [auth.accessToken, auth.idToken, auth.storageKey]);
@@ -1185,8 +1326,8 @@ function CAMSMSALProviderInner(_a) {
         }
     }, [userProfile, profileStorageKey]);
     // Enhanced logout that also clears profile
-    var enhancedLogout = function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var enhancedLogout = function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0: return [4 /*yield*/, auth.logout()];
                 case 1:
@@ -1203,7 +1344,12 @@ function CAMSMSALProviderInner(_a) {
     return (jsxRuntimeExports.jsx(CAMSMSALContext.Provider, { value: value, children: children }));
 }
 function CAMSMSALProvider(props) {
+    var _a;
     var msalConfig = props.msalConfig, msalInstance = props.msalInstance;
+    // Ensure crypto is available before creating MSAL instance
+    if (typeof window !== "undefined" && !((_a = window.crypto) === null || _a === void 0 ? void 0 : _a.subtle)) {
+        throw new Error("Crypto API not available. Polyfill failed to load.");
+    }
     var instance = msalInstance || new PublicClientApplication(msalConfig);
     return (jsxRuntimeExports.jsx(MsalProvider, { instance: instance, children: jsxRuntimeExports.jsx(CAMSMSALProviderInner, __assign({}, props)) }));
 }
@@ -1253,7 +1399,7 @@ function CAMSProviderCore(props) {
         if (typeof window === "undefined")
             return null;
         try {
-            var storedProfile = getCookie$1(profileStorageKey);
+            var storedProfile = getCookie(profileStorageKey);
             return storedProfile ? JSON.parse(storedProfile) : null;
         }
         catch (_a) {
@@ -1263,7 +1409,7 @@ function CAMSProviderCore(props) {
     var _a = useState(getInitialProfile), userProfile = _a[0], setUserProfile = _a[1];
     useEffect(function () {
         if (typeof window !== "undefined") {
-            var storedProfile = getCookie$1(profileStorageKey);
+            var storedProfile = getCookie(profileStorageKey);
             if (storedProfile) {
                 try {
                     setUserProfile(JSON.parse(storedProfile));
@@ -1275,47 +1421,41 @@ function CAMSProviderCore(props) {
     useEffect(function () {
         if (typeof window !== "undefined") {
             if (userProfile) {
-                setCookie$1(profileStorageKey, JSON.stringify(userProfile), 1);
+                setCookie(profileStorageKey, JSON.stringify(userProfile), 1);
             }
             else {
-                deleteCookie$1(profileStorageKey);
+                deleteCookie(profileStorageKey);
             }
         }
     }, [userProfile, profileStorageKey]);
-    var enhancedLogout = function () { return __awaiter(_this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var enhancedLogout = function () { return __awaiter$1(_this, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0: return [4 /*yield*/, auth.logout()];
                 case 1:
                     _a.sent();
                     setUserProfile(null);
                     if (typeof window !== "undefined") {
-                        deleteCookie$1(profileStorageKey);
+                        deleteCookie(profileStorageKey);
                     }
                     return [2 /*return*/];
             }
         });
     }); };
-    // Handle MFA completion for MSAL mode
     useEffect(function () {
         if (mode === "MSAL" &&
             "requiresMFA" in auth &&
             !auth.requiresMFA &&
             auth.isAuthenticated) {
-            // MFA completed, extract profile from localStorage
             var storedData = localStorage.getItem(auth.storageKey);
             if (storedData) {
                 try {
                     var parsed = JSON.parse(storedData);
-                    console.log("Parsed storage data:", parsed);
                     if (parsed.userProfile) {
-                        console.log("Setting user profile:", parsed.userProfile);
                         setUserProfile(parsed.userProfile);
                     }
                 }
-                catch (e) {
-                    console.error("Error parsing stored data:", e);
-                }
+                catch (_a) { }
             }
         }
     }, [
@@ -1326,22 +1466,27 @@ function CAMSProviderCore(props) {
         userProfile,
     ]);
     var value = useMemo(function () {
-        return (__assign(__assign({}, auth), { logout: enhancedLogout, userProfile: userProfile, setUserProfile: setUserProfile, authMode: mode }));
-    }, [auth, userProfile, mode]);
+        auth.logout; var authRest = __rest(auth, ["logout"]);
+        return __assign(__assign({}, authRest), { logout: enhancedLogout, userProfile: userProfile, setUserProfile: setUserProfile, authMode: mode, onAuthSuccess: mode === "MSAL" ? props.onAuthSuccess : undefined, onAuthError: mode === "MSAL" ? props.onAuthError : undefined });
+    }, [auth, userProfile, mode, props]);
     return jsxRuntimeExports.jsx(CAMSContext.Provider, { value: value, children: children });
 }
 function UnifiedCAMSProvider(props) {
+    var _a;
     // Validate appCode is a valid GUID
     var appCodeValidation = GuidSchema.safeParse(props.appCode);
     if (!appCodeValidation.success) {
-        throw new Error("Invalid appCode: ".concat(appCodeValidation.error.issues[0].message));
+        throw new Error("Invalid CAS APP CODE: ".concat(appCodeValidation.error.issues[0].message));
     }
     if (props.mode === "MSAL") {
         var msalConfig = props.msalConfig, msalInstance = props.msalInstance;
+        if (typeof window !== "undefined" && !((_a = window.crypto) === null || _a === void 0 ? void 0 : _a.subtle)) {
+            throw new Error("Crypto API not available. Polyfill failed to load.");
+        }
         var instance = msalInstance || new PublicClientApplication(msalConfig);
         return (jsxRuntimeExports.jsx(MsalProvider, { instance: instance, children: jsxRuntimeExports.jsx(CAMSProviderCore, __assign({}, props)) }));
     }
-    return (jsxRuntimeExports.jsx(ClientOnly, { fallback: jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: jsxRuntimeExports.jsx(CAMSProviderCore, __assign({}, props)) }));
+    return (jsxRuntimeExports.jsx(ClientOnly, { fallback: jsxRuntimeExports.jsx("div", { className: 'h-screen flex items-center justify-center', children: "Loading..." }), children: jsxRuntimeExports.jsx(CAMSProviderCore, __assign({}, props)) }));
 }
 // Backward compatibility exports
 var CAMSProvider = function (props) { return (jsxRuntimeExports.jsx(UnifiedCAMSProvider, __assign({}, props, { mode: "REGULAR" }))); };
@@ -1670,39 +1815,9 @@ function DialogTitle(_a) {
 
 var a="container_f782f4",i="inner_37f4c9",c="bar_409d0f";const r=({size:r=35,color:l="black",speed:d=1,stroke:o=3.5})=>jsxRuntimeExports.jsx("div",{className:a,style:{"--uib-size":r+"px","--uib-color":l,"--uib-speed":d+"s","--uib-stroke":o+"px"},children:jsxRuntimeExports.jsxs("div",{className:i,children:[jsxRuntimeExports.jsx("div",{className:c}),jsxRuntimeExports.jsx("div",{className:c}),jsxRuntimeExports.jsx("div",{className:c}),jsxRuntimeExports.jsx("div",{className:c})]})});
 
-function styleInject(css, ref) {
-  if ( ref === void 0 ) ref = {};
-  var insertAt = ref.insertAt;
-
-  if (typeof document === 'undefined') { return; }
-
-  var head = document.head || document.getElementsByTagName('head')[0];
-  var style = document.createElement('style');
-  style.type = 'text/css';
-
-  if (insertAt === 'top') {
-    if (head.firstChild) {
-      head.insertBefore(style, head.firstChild);
-    } else {
-      head.appendChild(style);
-    }
-  } else {
-    head.appendChild(style);
-  }
-
-  if (style.styleSheet) {
-    style.styleSheet.cssText = css;
-  } else {
-    style.appendChild(document.createTextNode(css));
-  }
-}
-
-var css_248z = ".container_f782f4 {\n  flex-shrink: 0;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  height: calc(var(--uib-size) * 0.9);\n  width: var(--uib-size);\n}\n\n.inner_37f4c9 {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  width: var(--uib-size);\n  height: calc(var(--uib-size) * 0.9);\n}\n\n.bar_409d0f {\n  width: var(--uib-stroke);\n  height: 100%;\n  background-color: var(--uib-color);\n  transition: background-color 0.3s ease;\n}\n\n.bar_409d0f:nth-child(1) {\n  animation: grow_ca6a4e var(--uib-speed) ease-in-out calc(var(--uib-speed) * -0.45) infinite;\n}\n\n.bar_409d0f:nth-child(2) {\n  animation: grow_ca6a4e var(--uib-speed) ease-in-out calc(var(--uib-speed) * -0.3) infinite;\n}\n\n.bar_409d0f:nth-child(3) {\n  animation: grow_ca6a4e var(--uib-speed) ease-in-out calc(var(--uib-speed) * -0.15) infinite;\n}\n\n.bar_409d0f:nth-child(4) {\n  animation: grow_ca6a4e var(--uib-speed) ease-in-out infinite;\n}\n\n@keyframes grow_ca6a4e {\n  0%, 100% {\n    transform: scaleY(0.3);\n  }\n  50% {\n    transform: scaleY(1);\n  }\n}";
-styleInject(css_248z);
-
 var LoadingSpinner = function (_a) {
     var loadingText = _a.loadingText;
-    return (jsxRuntimeExports.jsxs("div", { className: "flex flex-col justify-center items-center", children: [jsxRuntimeExports.jsx("script", { type: "module", defer: true, src: "https://cdn.jsdelivr.net/npm/ldrs/dist/auto/waveform.js" }), jsxRuntimeExports.jsx(r, { size: "35", stroke: "3.5", speed: "1", color: "green" }), loadingText && (jsxRuntimeExports.jsx("p", { className: "text-center font-semibold mt-3", children: "Loading..." }))] }));
+    return (jsxRuntimeExports.jsxs("div", { className: "flex flex-col justify-center items-center h-full w-full py-10", children: [jsxRuntimeExports.jsx("script", { type: "module", defer: true, src: "https://cdn.jsdelivr.net/npm/ldrs/dist/auto/waveform.js" }), jsxRuntimeExports.jsx(r, { size: "35", stroke: "3.5", speed: "1", color: "green" }), loadingText && (jsxRuntimeExports.jsx("p", { className: "text-center font-semibold mt-3", children: "Loading..." }))] }));
 };
 
 var AuthSuccessAnimation = function (_a) {
@@ -1754,15 +1869,36 @@ var APIHeaders = {
     "X-API-VERSION": "1.0",
 };
 
+// Creates an Axios instance with a base URL determined by the environment (production or development).
+var axiosInstance = axios.create({
+    httpsAgent: new https.Agent({ rejectUnauthorized: false }),
+    headers: __assign({ "Content-Type": "application/json" }, APIHeaders),
+});
+// Intercepts outgoing requests to add authorization token, version header, and timeout settings.
+axiosInstance.interceptors.request.use(function (config) {
+    var _a;
+    config.timeout = Number((_a = process.env.NEXT_PUBLIC_API_TIMEOUT) !== null && _a !== void 0 ? _a : 605000);
+    config.timeoutErrorMessage = "Operation Timed Out"; // Custom error message for timeouts.
+    return config; // Returns the modified request configuration.
+}, function (axiosError) {
+    var _a, _b;
+    // Handles request errors.
+    return {
+        status: (_a = axiosError.response) === null || _a === void 0 ? void 0 : _a.status, // Extracts HTTP status from the error response.
+        message: axiosError.message, // Extracts the error message.
+        data: (_b = axiosError.response) === null || _b === void 0 ? void 0 : _b.data, // Extracts response data from the error.
+    };
+});
+
 var MAX_ATTEMPTS = 3;
 var useOTPHandler = function (_a) {
     var provider = _a.provider, accessToken = _a.accessToken, idToken = _a.idToken, appCode = _a.appCode, authenticationType = _a.authenticationType, MFAEndpoint = _a.MFAEndpoint, onAuthComplete = _a.onAuthComplete;
     var _b = useState(false), loading = _b[0], setLoading = _b[1];
     var _c = useState(0), attemptCount = _c[0], setAttemptCount = _c[1];
     var _d = useState(false), isMaxAttemptsReached = _d[0], setIsMaxAttemptsReached = _d[1];
-    var handleSubmitOTP = useMemo(function () { return function (authenticationValue) { return __awaiter(void 0, void 0, void 0, function () {
+    var handleSubmitOTP = useMemo(function () { return function (authenticationValue) { return __awaiter$1(void 0, void 0, void 0, function () {
         var currentAttempt, response, error_1, currentAttempt;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     if (isMaxAttemptsReached) {
@@ -1779,16 +1915,13 @@ var useOTPHandler = function (_a) {
                     setAttemptCount(currentAttempt);
                     if (authenticationType === null)
                         return [2 /*return*/, false];
-                    return [4 /*yield*/, axios.post(MFAEndpoint || "/api/auth/verify-mfa", {
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoint || "/api/auth/verify-mfa", {
                             provider: provider,
                             accessToken: accessToken,
                             idToken: idToken,
                             authenticationType: authenticationType,
                             MFACode: authenticationValue,
                             appCode: appCode,
-                        }, {
-                            headers: APIHeaders,
-                            timeout: 605000,
                         })];
                 case 2:
                     response = (_a.sent()).data;
@@ -1855,23 +1988,20 @@ var useCredentialsHandler = function (onAuthComplete) {
     var _b = useState(0), attemptCount = _b[0], setAttemptCount = _b[1];
     var _c = useState(false), isMaxAttemptsReached = _c[0], setIsMaxAttemptsReached = _c[1];
     var handleSubmitCredentials = useMemo(function () {
-        return function (CredAuthEndpoint, credentials, appCode) { return __awaiter(void 0, void 0, void 0, function () {
+        return function (CredAuthEndpoint, credentials, appCode) { return __awaiter$1(void 0, void 0, void 0, function () {
             var currentAttempt, response, error_2, currentAttempt;
-            return __generator(this, function (_a) {
+            return __generator$1(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         _a.trys.push([0, 2, 3, 4]);
                         setLoading(true);
                         currentAttempt = attemptCount + 1;
                         setAttemptCount(currentAttempt);
-                        return [4 /*yield*/, axios.post(CredAuthEndpoint, {
+                        return [4 /*yield*/, axiosInstance.post(CredAuthEndpoint, {
                                 username: credentials.username,
                                 password: credentials.password,
                                 MFACode: credentials.MFACode,
                                 appCode: appCode,
-                            }, {
-                                headers: APIHeaders,
-                                timeout: 605000,
                             })];
                     case 1:
                         response = (_a.sent()).data;
@@ -1932,23 +2062,21 @@ var MFAOptions = function (_a) {
     var context = useCAMSContext();
     var _f = context.authMode === "MSAL" && "sendEmailOTP" in context
         ? context
-        : { sendEmailOTP: null, completeMFA: null, logout: function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+        : { sendEmailOTP: null, completeMFA: null, logout: function () { return __awaiter$1(void 0, void 0, void 0, function () { return __generator$1(this, function (_a) {
                 return [2 /*return*/];
             }); }); } }, sendEmailOTP = _f.sendEmailOTP, completeMFA = _f.completeMFA, logout = _f.logout;
     var accessToken = context.authMode === "MSAL" ? context.accessToken : "";
     var idToken = context.authMode === "MSAL" ? context.idToken : "";
     var authenticate = useWebAuthn().authenticate;
-    var handleFIDOLogin = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var handleFIDOLogin = function () { return __awaiter$1(void 0, void 0, void 0, function () {
         var options, assertionResponse, error_1;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 4, , 5]);
                     // 1. Fetch authentication challenge from your server
                     console.log("Requesting authentication challenge from server...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.RetrieveAuthChallenge, {}, {
-                            headers: APIHeaders,
-                        })];
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoints.RetrieveAuthChallenge, {})];
                 case 1:
                     options = (_a.sent()).data;
                     console.log("Received challenge:", options);
@@ -1960,9 +2088,7 @@ var MFAOptions = function (_a) {
                     console.log("Authentication assertion received from client:", assertionResponse);
                     // 3. Send the assertion back to the server for verification
                     console.log("Sending assertion to server for verification...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.AuthChallengeVerify, assertionResponse, {
-                            headers: APIHeaders
-                        })];
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoints.AuthChallengeVerify, assertionResponse)];
                 case 3:
                     _a.sent();
                     toast.success("🔑 Sign-in successful!");
@@ -2024,12 +2150,12 @@ var MFAOptions = function (_a) {
     }
     var content = jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, {});
     if (!authType) {
-        content = (jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-600 text-center mb-6", children: "Choose your preferred authentication method:" }), jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3", children: [jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", onClick: function () { return __awaiter(void 0, void 0, void 0, function () {
+        content = (jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-600 text-center mb-6", children: "Choose your preferred authentication method:" }), jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3", children: [jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", onClick: function () { return __awaiter$1(void 0, void 0, void 0, function () {
                                 var success;
-                                return __generator(this, function (_a) {
+                                return __generator$1(this, function (_a) {
                                     switch (_a.label) {
                                         case 0:
-                                            resetAttempts();
+                                            // resetAttempts();
                                             setAuthType("EmailOTP");
                                             setOtpVisible(true);
                                             if (!sendEmailOTP) return [3 /*break*/, 2];
@@ -2046,7 +2172,6 @@ var MFAOptions = function (_a) {
                                     }
                                 });
                             }); }, children: [jsxRuntimeExports.jsx(Mail, { className: "w-5 h-5" }), jsxRuntimeExports.jsxs("div", { className: "text-left", children: [jsxRuntimeExports.jsx("div", { className: "font-medium", children: "Email OTP" }), jsxRuntimeExports.jsx("div", { className: "text-sm text-gray-500", children: "Send code to your email" })] })] }), jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", onClick: function () {
-                                resetAttempts();
                                 setAuthType("AuthenticatorCode");
                                 setOtpVisible(true);
                             }, children: [jsxRuntimeExports.jsx("img", { src: MicrosoftAuthenticatorImg, alt: "Authenticator", className: "rounded-full", width: 24, height: 24, onError: function () { return jsxRuntimeExports.jsx(Shield, {}); } }), jsxRuntimeExports.jsxs("div", { className: "text-left", children: [jsxRuntimeExports.jsx("div", { className: "font-medium", children: "Authenticator App" }), jsxRuntimeExports.jsx("div", { className: "text-sm text-gray-500", children: "Use Authenticator App" })] })] }), usePassKey && (jsxRuntimeExports.jsxs(Button, { variant: "outline", className: "w-full flex items-center justify-start gap-3 p-4 h-auto border-2 hover:border-[#506f4a] hover:bg-[#506f4a]/5 transition-all", 
@@ -2055,7 +2180,7 @@ var MFAOptions = function (_a) {
                             //   setAuthType("AuthenticatorCode");
                             //   setOtpVisible(true);
                             // }}
-                            onClick: handleFIDOLogin, disabled: context.isLoading, children: [jsxRuntimeExports.jsx(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", children: jsxRuntimeExports.jsx("span", { children: "Sign In " }) }), jsxRuntimeExports.jsx(KeyIcon, { className: "w-16 h-16 text-[#506f4a]" }), jsxRuntimeExports.jsxs("div", { className: "text-left", children: [jsxRuntimeExports.jsx("div", { className: "font-medium", children: "Continue with Passkey" }), jsxRuntimeExports.jsx("div", { className: "text-sm text-gray-500", children: "Passkey" })] })] }))] })] }));
+                            onClick: handleFIDOLogin, disabled: context.isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 48 }), jsxRuntimeExports.jsxs("div", { className: "text-left", children: [jsxRuntimeExports.jsx("div", { className: "font-medium", children: "Continue with Passkey" }), jsxRuntimeExports.jsx("div", { className: "text-sm text-gray-500", children: "Passkey" })] })] }))] })] }));
     }
     else if (authType === "EmailOTP") {
         content = (jsxRuntimeExports.jsx(Dialog, { open: otpVisible, onOpenChange: function () {
@@ -2098,16 +2223,16 @@ var ADLoginModal = function (_a) {
         resolver: a$1(credentialsSchema),
         defaultValues: { username: "", password: "" },
     });
-    var handleCredentialsSubmit = function (values) { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var handleCredentialsSubmit = function (values) { return __awaiter$1(void 0, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             setCredentials(values);
             setStep("mfa");
             return [2 /*return*/];
         });
     }); };
-    var handleMFASubmit = function (code) { return __awaiter(void 0, void 0, void 0, function () {
+    var handleMFASubmit = function (code) { return __awaiter$1(void 0, void 0, void 0, function () {
         var error_1;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     setIsLoading(true);
@@ -2168,8 +2293,8 @@ var DefaultLoginPage = function (_a) {
     var login = context.login, isLoading = context.isLoading, authMode = context.authMode;
     var _b = useState(false), showADModal = _b[0], setShowADModal = _b[1];
     var register = useWebAuthn().register;
-    var _c = useCredentialsHandler(function (state, data) { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
+    var _c = useCredentialsHandler(function (state, data) { return __awaiter$1(void 0, void 0, void 0, function () {
+        return __generator$1(this, function (_a) {
             console.log(data);
             if (state && data) {
                 context.isAuthenticated = true;
@@ -2183,6 +2308,10 @@ var DefaultLoginPage = function (_a) {
         });
     }); }), handleSubmitCredentials = _c.handleSubmitCredentials, isCredAuthLoading = _c.loading, setIsCredAuthLoading = _c.setLoading;
     var handleMSALLogin = function () {
+        if (typeof window !== "undefined" && !window.crypto) {
+            toast.error("Crypto API not available. Please use a modern browser.");
+            return;
+        }
         if (authMode === "MSAL") {
             login();
         }
@@ -2191,17 +2320,15 @@ var DefaultLoginPage = function (_a) {
             console.warn("Regular CAMS login requires configuration");
         }
     };
-    var handleRegister = function (data) { return __awaiter(void 0, void 0, void 0, function () {
+    var handleRegister = function (data) { return __awaiter$1(void 0, void 0, void 0, function () {
         var options, attestationResponse, error_1;
-        return __generator(this, function (_a) {
+        return __generator$1(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 4, , 5]);
                     // 1. Fetch challenge from your server
                     console.log("Requesting registration challenge from server...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.RegisterNewChallenge, __assign({}, data), {
-                            headers: APIHeaders,
-                        })];
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoints.RegisterNewChallenge, __assign({}, data))];
                 case 1:
                     options = (_a.sent()).data;
                     console.log("Received challenge:", options);
@@ -2213,9 +2340,7 @@ var DefaultLoginPage = function (_a) {
                     console.log("Passkey created on client:", attestationResponse);
                     // 3. Send the response back to the server for verification
                     console.log("Sending attestation to server for verification...");
-                    return [4 /*yield*/, axios.post(MFAEndpoints.RegisterVerify + "?username=".concat(data.username), attestationResponse, {
-                            headers: APIHeaders
-                        })];
+                    return [4 /*yield*/, axiosInstance.post(MFAEndpoints.RegisterVerify + "?username=".concat(data.username), attestationResponse)];
                 case 3:
                     _a.sent();
                     toast.success("✅ Registration successful! Passkey created.");
@@ -2229,15 +2354,15 @@ var DefaultLoginPage = function (_a) {
             }
         });
     }); };
-    return (jsxRuntimeExports.jsxs("main", { className: "min-h-screen bg-gray-50", children: [jsxRuntimeExports.jsx(motion.div, { initial: { opacity: 0 }, animate: { opacity: 1 }, exit: { opacity: 0 }, transition: { duration: 0.5 }, children: jsxRuntimeExports.jsx("div", { className: "flex h-screen items-center justify-center", children: jsxRuntimeExports.jsxs(motion.div, { variants: cardVariants, initial: "hidden", animate: "visible", exit: "exit", className: "w-full max-w-md p-6 space-y-4 bg-gray-50 rounded-2xl shadow-2xl --dark:bg-gray-800", children: [jsxRuntimeExports.jsxs(CardHeader, { className: "text-center space-y-3", children: [jsxRuntimeExports.jsx("div", { className: "w-full flex items-center justify-center", children: jsxRuntimeExports.jsx("img", { src: NIBSSLogo, alt: "NIBSS Logo", width: 265, height: 265 }) }), jsxRuntimeExports.jsx(CardTitle, { className: "text-3xl font-bold --text-gray-900 --dark:text-white", children: "NIBSS CAMS" }), jsxRuntimeExports.jsx(CardTitle, { className: "text-gray-500 dark:text-gray-400 font-bold text-lg", children: "Centralized Authentication" })] }), jsxRuntimeExports.jsxs(CardAction, { className: "w-full flex flex-col items-center justify-center text-center text-gray-500 dark:text-gray-400 mb-6", children: [jsxRuntimeExports.jsx("img", { src: AuthLogo, alt: "Auth Logo", width: 365, height: 365 }), "Kindly use the below identity providers to authenticate"] }), jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsxs(Button
+    return (jsxRuntimeExports.jsxs("main", { className: "min-h-screen bg-gray-50", children: [jsxRuntimeExports.jsx(motion.div, { initial: { opacity: 0 }, animate: { opacity: 1 }, exit: { opacity: 0 }, transition: { duration: 0.5 }, children: jsxRuntimeExports.jsx("div", { className: "flex h-screen items-center justify-center", children: jsxRuntimeExports.jsxs(motion.div, { variants: cardVariants, initial: "hidden", animate: "visible", exit: "exit", className: "w-full max-w-md p-6 space-y-4 bg-gray-50 rounded-2xl shadow-2xl --dark:bg-gray-800", children: [jsxRuntimeExports.jsxs(CardHeader, { className: "text-center space-y-3", children: [jsxRuntimeExports.jsx("div", { className: "w-full flex items-center justify-center", children: jsxRuntimeExports.jsx("img", { src: NIBSSLogo, alt: "NIBSS Logo", width: 265, height: 265 }) }), jsxRuntimeExports.jsx(CardTitle, { className: "text-3xl font-bold --text-gray-900 --dark:text-white", children: "NIBSS CAMS" }), jsxRuntimeExports.jsx(CardTitle, { className: "text-gray-500 dark:text-gray-400 font-bold text-lg", children: "Centralized Authentication" })] }), jsxRuntimeExports.jsxs(CardAction, { className: "w-full flex flex-col items-center justify-center text-center text-gray-500 dark:text-gray-400 mb-8", children: [jsxRuntimeExports.jsx("img", { src: AuthLogo, alt: "Auth Logo", width: 365, height: 365 }), "Use Below Identity Providers To Authenticate"] }), jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [jsxRuntimeExports.jsxs(Button
                                     // variant="outline"
                                     , { 
                                         // variant="outline"
                                         className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: handleMSALLogin, disabled: isLoading, children: [jsxRuntimeExports.jsx("img", { src: MicrosoftLogo, alt: "Microsoft Logo", width: 35, height: 35 }), jsxRuntimeExports.jsx("span", { className: "ml-2", children: isLoading ? "Logging in..." : "Sign in with Microsoft" })] }), useADLogin && (jsxRuntimeExports.jsxs(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: function () { return setShowADModal(true); }, disabled: isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 64 }), jsxRuntimeExports.jsx("span", { children: isLoading
                                                     ? "Logging in..."
-                                                    : "Sign in with ActiveDirectory" })] })), usePassKey && (jsxRuntimeExports.jsxs(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: function () { return handleRegister(PassKeysRegisterProps); }, disabled: isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 64 }), jsxRuntimeExports.jsx("span", { children: "Create a Passkey" })] }))] }), jsxRuntimeExports.jsxs(CardFooter, { className: "flex items-center justify-center mt-6 space-x-2 text-gray-400 text-sm", children: [jsxRuntimeExports.jsx(ShieldCheck, { className: "w-4 h-4 text-[#506f4a] pulse-glow" }), jsxRuntimeExports.jsx("span", { children: "Powered By NIBSS" })] })] }) }) }, "landing"), jsxRuntimeExports.jsx(ADLoginModal, { open: showADModal, onOpenChange: setShowADModal, isLoading: isCredAuthLoading, setIsLoading: setIsCredAuthLoading, onLogin: function (_a) { return __awaiter(void 0, [_a], void 0, function (_b) {
+                                                    : "Sign in with ActiveDirectory" })] })), usePassKey && (jsxRuntimeExports.jsxs(Button, { className: "w-full flex items-center justify-center cursor-pointer bg-[#506f4a] hover:bg-[#506f4a] rounded-lg border border-transparent px-5 py-8 text-base font-medium transition-colors duration-250", onClick: function () { return handleRegister(PassKeysRegisterProps); }, disabled: isLoading, children: [jsxRuntimeExports.jsx(KeyIcon, { className: "text-[#506f4a]", size: 64 }), jsxRuntimeExports.jsx("span", { children: "Create a Passkey" })] }))] }), jsxRuntimeExports.jsxs(CardFooter, { className: "flex items-center justify-center mt-6 space-x-2 text-gray-400 text-sm", children: [jsxRuntimeExports.jsx(ShieldCheck, { className: "w-4 h-4 text-[#506f4a] pulse-glow" }), jsxRuntimeExports.jsx("span", { children: "Powered By NIBSS" })] })] }) }) }, "landing"), jsxRuntimeExports.jsx(ADLoginModal, { open: showADModal, onOpenChange: setShowADModal, isLoading: isCredAuthLoading, setIsLoading: setIsCredAuthLoading, onLogin: function (_a) { return __awaiter$1(void 0, [_a], void 0, function (_b) {
                     var username = _b.username, password = _b.password, MFACode = _b.MFACode;
-                    return __generator(this, function (_c) {
+                    return __generator$1(this, function (_c) {
                         // Implement your AD login logic here
                         console.log("AD Login:", { username: username, password: password, MFACode: MFACode });
                         // Example: await adLoginService(username, password, mfaCode);
@@ -2260,11 +2385,11 @@ var MFAEndpointsSchema = z$1.object({
     AuthChallengeVerify: z$1.url("MFA AuthChallengeVerify must be a valid URL"),
 });
 var MFAGate = function (_a) {
-    var children = _a.children, _b = _a.fallback, fallback = _b === void 0 ? jsxRuntimeExports.jsx(LoadingSpinner, {}) : _b, 
+    var children = _a.children, _b = _a.fallback, fallback = _b === void 0 ? jsxRuntimeExports.jsx("div", { className: 'h-screen flex items-center justify-center', children: jsxRuntimeExports.jsx(LoadingSpinner, {}) }) : _b, 
     // loginComponent: LoginComponent = DefaultLoginPage,
     _c = _a.usePassKey, 
     // loginComponent: LoginComponent = DefaultLoginPage,
-    usePassKey = _c === void 0 ? false : _c, _d = _a.useADLogin, useADLogin = _d === void 0 ? false : _d, CredentialsAuthEndpoint = _a.CredentialsAuthEndpoint, PassKeysRegisterProps = _a.PassKeysRegisterProps, MFAEndpoints = _a.MFAEndpoints;
+    usePassKey = _c === void 0 ? false : _c, _d = _a.useADLogin, useADLogin = _d === void 0 ? false : _d, CredentialsAuthEndpoint = _a.CredentialsAuthEndpoint, PassKeysRegisterProps = _a.PassKeysRegisterProps, MFAEndpoints = _a.MFAEndpoints, requiresMFA = _a.requiresMFA, onAuthSuccess = _a.onAuthSuccess, onAuthError = _a.onAuthError;
     var context = useCAMSContext();
     var validatedMFAEndpoints = useMemo(function () {
         var parsed = MFAEndpointsSchema.safeParse(MFAEndpoints);
@@ -2275,20 +2400,35 @@ var MFAGate = function (_a) {
         return parsed.data;
     }, [MFAEndpoints]);
     var handleComplete = useCallback(function (success) {
-        if (!success)
+        var _a;
+        if (success && context.authMode === "MSAL") {
+            var tokens = {
+                accessToken: context.accessToken,
+                idToken: context.idToken,
+            };
+            onAuthSuccess === null || onAuthSuccess === void 0 ? void 0 : onAuthSuccess(tokens);
+            (_a = context.onAuthSuccess) === null || _a === void 0 ? void 0 : _a.call(context, tokens);
+        }
+        else if (!success) {
             Logger.error("MFA authentication failed");
-    }, []);
-    var handleAuthFailed = useCallback(function () { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, context.logout()];
+        }
+    }, [context, onAuthSuccess]);
+    var handleAuthFailed = useCallback(function () { return __awaiter$1(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator$1(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    if (context.authMode === "MSAL" && context.error) {
+                        onAuthError === null || onAuthError === void 0 ? void 0 : onAuthError(context.error);
+                        (_a = context.onAuthError) === null || _a === void 0 ? void 0 : _a.call(context, context.error);
+                    }
+                    return [4 /*yield*/, context.logout()];
                 case 1:
-                    _a.sent();
+                    _b.sent();
                     return [2 /*return*/];
             }
         });
-    }); }, [context.logout]);
-    Logger.debug("MFA Endpoint >>>", { MFAEndpoints: MFAEndpoints });
+    }); }, [context, onAuthError]);
     if (useADLogin && !CredentialsAuthEndpoint)
         return jsxRuntimeExports.jsx(ErrorFallback, { message: "Invalid AD Login Configuration." });
     if (!validatedMFAEndpoints)
@@ -2297,10 +2437,11 @@ var MFAGate = function (_a) {
         return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: children });
     if (context.isLoading)
         return fallback;
-    if (context.requiresMFA) {
-        return (jsxRuntimeExports.jsx(MFAOptions, { MFAEndpoints: validatedMFAEndpoints, usePassKey: usePassKey, onComplete: handleComplete, onAuthFailed: handleAuthFailed }));
-    }
     if (!context.isAuthenticated) {
+        var shouldRequireMFA = requiresMFA !== null && requiresMFA !== void 0 ? requiresMFA : context.requiresMFA;
+        if (shouldRequireMFA && context.accessToken) {
+            return (jsxRuntimeExports.jsx(MFAOptions, { MFAEndpoints: validatedMFAEndpoints, usePassKey: usePassKey, onComplete: handleComplete, onAuthFailed: handleAuthFailed }));
+        }
         return (jsxRuntimeExports.jsx(DefaultLoginPage, { usePassKey: usePassKey, useADLogin: useADLogin, MFAEndpoints: MFAEndpoints, PassKeysRegisterProps: PassKeysRegisterProps, CredentialsAuthEndpoint: CredentialsAuthEndpoint }));
     }
     return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: children });