@phila/sso-react 0.0.2 → 0.0.3

package/dist/index.js

@@ -1,2 +1,116 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const f=require("react/jsx-runtime"),r=require("react"),C=require("@phila/sso-core"),y={isAuthenticated:!1,isLoading:!0,user:null,token:null,error:null,activePolicy:null,authReady:!1},l=r.createContext(null);function m({config:s,children:n}){const e=r.useRef(null),[c,i]=r.useState(y);e.current||(e.current=new C.SSOClient(s));const o=e.current;return r.useEffect(()=>{const d=o.events.on("auth:stateChanged",S=>{i(S)});return o.initialize(),()=>{d(),o.destroy()}},[o]),f.jsx(l.Provider,{value:{client:o,state:c},children:n})}function O(){const s=r.useContext(l);if(!s)throw new Error("useAuth must be used within an SSOProvider");const{client:n,state:e}=s,c=r.useCallback(t=>n.signIn(t),[n]),i=r.useCallback(t=>n.signInCityEmployee(t),[n]),o=r.useCallback(t=>n.signOut(t),[n]),d=r.useCallback(()=>n.forgotPassword(),[n]),S=r.useCallback(t=>n.acquireToken(t),[n]),g=r.useCallback(t=>{const u=e.user?.idTokenClaims;if(!u)return!1;const a=u.roles??u.extension_Roles??[];return Array.isArray(a)&&a.includes(t)},[e.user]),v=r.useMemo(()=>{const t=e.user?.idTokenClaims;if(!t)return null;const u=t.given_name??t.name??"",a=t.family_name??"";return a?`${u} ${a}`.trim():u},[e.user]);return{isAuthenticated:e.isAuthenticated,isLoading:e.isLoading,user:e.user,token:e.token,error:e.error,activePolicy:e.activePolicy,authReady:e.authReady,userName:v,signIn:c,signInCityEmployee:i,signOut:o,forgotPassword:d,acquireToken:S,hasRole:g}}function h(){const s=r.useContext(l);if(!s)throw new Error("useSSOClient must be used within an SSOProvider");return s.client}function P({children:s,signInPolicy:n="B2C_1A_AD_SIGNIN_ONLY",resetPasswordPolicy:e="B2C_1A_PASSWORDRESET",debug:c=!1}){const i=r.useRef(null);return i.current||(i.current=new C.B2CProvider({clientId:void 0,b2cEnvironment:void 0,authorityDomain:void 0,redirectUri:void 0,policies:{signUpSignIn:n,signInOnly:n,resetPassword:e}})),f.jsx(m,{config:{provider:i.current,debug:c},children:s})}exports.B2CSSOProvider=P;exports.SSOContext=l;exports.SSOProvider=m;exports.useAuth=O;exports.useSSOClient=h;
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const jsxRuntime = require("react/jsx-runtime");
+const react = require("react");
+const ssoCore = require("@phila/sso-core");
+const INITIAL_STATE = {
+  isAuthenticated: false,
+  isLoading: true,
+  user: null,
+  token: null,
+  error: null,
+  activePolicy: null,
+  authReady: false
+};
+const SSOContext = react.createContext(null);
+function SSOProvider({ config, children }) {
+  const clientRef = react.useRef(null);
+  const [state, setState] = react.useState(INITIAL_STATE);
+  if (!clientRef.current) {
+    clientRef.current = new ssoCore.SSOClient(config);
+  }
+  const client = clientRef.current;
+  react.useEffect(() => {
+    const unsubscribe = client.events.on("auth:stateChanged", (newState) => {
+      setState(newState);
+    });
+    client.initialize();
+    return () => {
+      unsubscribe();
+      client.destroy();
+    };
+  }, [client]);
+  return /* @__PURE__ */ jsxRuntime.jsx(SSOContext.Provider, { value: { client, state }, children });
+}
+function useAuth() {
+  const context = react.useContext(SSOContext);
+  if (!context) {
+    throw new Error("useAuth must be used within an SSOProvider");
+  }
+  const { client, state } = context;
+  const signIn = react.useCallback((options) => client.signIn(options), [client]);
+  const signInCityEmployee = react.useCallback((options) => client.signInCityEmployee(options), [client]);
+  const signOut = react.useCallback((options) => client.signOut(options), [client]);
+  const forgotPassword = react.useCallback(() => client.forgotPassword(), [client]);
+  const acquireToken = react.useCallback((options) => client.acquireToken(options), [client]);
+  const hasRole = react.useCallback(
+    (role) => {
+      const claims = state.user?.idTokenClaims;
+      if (!claims) return false;
+      const roles = claims.roles ?? claims.extension_Roles ?? [];
+      return Array.isArray(roles) && roles.includes(role);
+    },
+    [state.user]
+  );
+  const userName = react.useMemo(() => {
+    const claims = state.user?.idTokenClaims;
+    if (!claims) return null;
+    const given = claims.given_name ?? claims.name ?? "";
+    const family = claims.family_name ?? "";
+    return family ? `${given} ${family}`.trim() : given;
+  }, [state.user]);
+  return {
+    // State
+    isAuthenticated: state.isAuthenticated,
+    isLoading: state.isLoading,
+    user: state.user,
+    token: state.token,
+    error: state.error,
+    activePolicy: state.activePolicy,
+    authReady: state.authReady,
+    userName,
+    // Actions
+    signIn,
+    signInCityEmployee,
+    signOut,
+    forgotPassword,
+    acquireToken,
+    // Utilities
+    hasRole
+  };
+}
+function useSSOClient() {
+  const context = react.useContext(SSOContext);
+  if (!context) {
+    throw new Error("useSSOClient must be used within an SSOProvider");
+  }
+  return context.client;
+}
+function B2CSSOProvider({
+  children,
+  signInPolicy = "B2C_1A_AD_SIGNIN_ONLY",
+  resetPasswordPolicy = "B2C_1A_PASSWORDRESET",
+  debug = false
+}) {
+  const providerRef = react.useRef(null);
+  if (!providerRef.current) {
+    providerRef.current = new ssoCore.B2CProvider({
+      clientId: void 0,
+      b2cEnvironment: void 0,
+      authorityDomain: void 0,
+      redirectUri: void 0,
+      policies: {
+        signUpSignIn: signInPolicy,
+        signInOnly: signInPolicy,
+        resetPassword: resetPasswordPolicy
+      }
+    });
+  }
+  return /* @__PURE__ */ jsxRuntime.jsx(SSOProvider, { config: { provider: providerRef.current, debug }, children });
+}
+exports.B2CSSOProvider = B2CSSOProvider;
+exports.SSOContext = SSOContext;
+exports.SSOProvider = SSOProvider;
+exports.useAuth = useAuth;
+exports.useSSOClient = useSSOClient;
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/context.tsx","../src/hooks/useAuth.ts","../src/hooks/useSSOClient.ts","../src/B2CSSOProvider.tsx"],"sourcesContent":["import { createContext, useRef, useState, useEffect } from \"react\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport type { SSOClientConfig, SSOClientState } from \"@phila/sso-core\";\nimport type { ReactNode } from \"react\";\n\nconst INITIAL_STATE: SSOClientState = {\n  isAuthenticated: false,\n  isLoading: true,\n  user: null,\n  token: null,\n  error: null,\n  activePolicy: null,\n  authReady: false,\n};\n\nexport interface SSOContextValue {\n  client: SSOClient;\n  state: SSOClientState;\n}\n\nexport const SSOContext = createContext<SSOContextValue | null>(null);\n\nexport interface SSOProviderProps {\n  config: SSOClientConfig;\n  children: ReactNode;\n}\n\nexport function SSOProvider({ config, children }: SSOProviderProps) {\n  const clientRef = useRef<SSOClient | null>(null);\n  const [state, setState] = useState<SSOClientState>(INITIAL_STATE);\n\n  // Create client once (stable across renders)\n  if (!clientRef.current) {\n    clientRef.current = new SSOClient(config);\n  }\n\n  const client = clientRef.current;\n\n  useEffect(() => {\n    // Subscribe to state changes\n    const unsubscribe = client.events.on(\"auth:stateChanged\", (newState: SSOClientState) => {\n      setState(newState);\n    });\n\n    // Initialize\n    client.initialize();\n\n    return () => {\n      unsubscribe();\n      client.destroy();\n    };\n  }, [client]);\n\n  return <SSOContext.Provider value={{ client, state }}>{children}</SSOContext.Provider>;\n}\n","import { useContext, useCallback, useMemo } from \"react\";\nimport { SSOContext } from \"../context\";\nimport type { SignInOptions, SignOutOptions, TokenOptions } from \"@phila/sso-core\";\n\n/**\n * Primary hook for SSO authentication in React apps.\n * Same API shape as the Vue composable for consistency.\n */\nexport function useAuth() {\n  const context = useContext(SSOContext);\n  if (!context) {\n    throw new Error(\"useAuth must be used within an SSOProvider\");\n  }\n\n  const { client, state } = context;\n\n  // Stable action references\n  const signIn = useCallback((options?: SignInOptions) => client.signIn(options), [client]);\n\n  const signInCityEmployee = useCallback((options?: SignInOptions) => client.signInCityEmployee(options), [client]);\n\n  const signOut = useCallback((options?: SignOutOptions) => client.signOut(options), [client]);\n\n  const forgotPassword = useCallback(() => client.forgotPassword(), [client]);\n\n  const acquireToken = useCallback((options?: TokenOptions) => client.acquireToken(options), [client]);\n\n  const hasRole = useCallback(\n    (role: string): boolean => {\n      const claims = state.user?.idTokenClaims as Record<string, unknown> | undefined;\n      if (!claims) return false;\n      const roles = (claims.roles ?? claims.extension_Roles ?? []) as string[];\n      return Array.isArray(roles) && roles.includes(role);\n    },\n    [state.user],\n  );\n\n  const userName = useMemo(() => {\n    const claims = state.user?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return null;\n    const given = (claims.given_name ?? claims.name ?? \"\") as string;\n    const family = (claims.family_name ?? \"\") as string;\n    return family ? `${given} ${family}`.trim() : given;\n  }, [state.user]);\n\n  return {\n    // State\n    isAuthenticated: state.isAuthenticated,\n    isLoading: state.isLoading,\n    user: state.user,\n    token: state.token,\n    error: state.error,\n    activePolicy: state.activePolicy,\n    authReady: state.authReady,\n    userName,\n\n    // Actions\n    signIn,\n    signInCityEmployee,\n    signOut,\n    forgotPassword,\n    acquireToken,\n\n    // Utilities\n    hasRole,\n  };\n}\n","import { useContext } from \"react\";\nimport { SSOContext } from \"../context\";\nimport type { SSOClient } from \"@phila/sso-core\";\n\n/**\n * Access the raw SSOClient instance.\n * Must be called within an SSOProvider.\n */\nexport function useSSOClient(): SSOClient {\n  const context = useContext(SSOContext);\n  if (!context) {\n    throw new Error(\"useSSOClient must be used within an SSOProvider\");\n  }\n  return context.client;\n}\n","// ABOUTME: Convenience provider component for React/Vite apps using Azure AD B2C\n// ABOUTME: Reads VITE_SSO_* env vars by convention so apps need zero B2CProvider boilerplate\nimport { useRef } from \"react\";\nimport { B2CProvider } from \"@phila/sso-core\";\nimport { SSOProvider } from \"./context\";\nimport type { ReactNode } from \"react\";\n\nexport interface B2CSSOProviderProps {\n  children: ReactNode;\n  signInPolicy?: string;\n  resetPasswordPolicy?: string;\n  debug?: boolean;\n}\n\n/**\n * Drop-in provider for Azure AD B2C authentication.\n * Reads connection details from VITE_SSO_* environment variables:\n *   VITE_SSO_CLIENT_ID, VITE_SSO_TENANT, VITE_SSO_AUTHORITY_DOMAIN, VITE_SSO_REDIRECT_URI\n */\nexport function B2CSSOProvider({\n  children,\n  signInPolicy = \"B2C_1A_AD_SIGNIN_ONLY\",\n  resetPasswordPolicy = \"B2C_1A_PASSWORDRESET\",\n  debug = import.meta.env.DEV,\n}: B2CSSOProviderProps) {\n  const providerRef = useRef<B2CProvider | null>(null);\n\n  // Create once — props that affect provider construction are treated as initializers\n  if (!providerRef.current) {\n    providerRef.current = new B2CProvider({\n      clientId: import.meta.env.VITE_SSO_CLIENT_ID,\n      b2cEnvironment: import.meta.env.VITE_SSO_TENANT,\n      authorityDomain: import.meta.env.VITE_SSO_AUTHORITY_DOMAIN,\n      redirectUri: import.meta.env.VITE_SSO_REDIRECT_URI,\n      policies: {\n        signUpSignIn: signInPolicy,\n        signInOnly: signInPolicy,\n        resetPassword: resetPasswordPolicy,\n      },\n    });\n  }\n\n  return <SSOProvider config={{ provider: providerRef.current, debug }}>{children}</SSOProvider>;\n}\n"],"names":["INITIAL_STATE","SSOContext","createContext","SSOProvider","config","children","clientRef","useRef","state","setState","useState","SSOClient","client","useEffect","unsubscribe","newState","jsx","useAuth","context","useContext","signIn","useCallback","options","signInCityEmployee","signOut","forgotPassword","acquireToken","hasRole","role","claims","roles","userName","useMemo","given","family","useSSOClient","B2CSSOProvider","signInPolicy","resetPasswordPolicy","debug","providerRef","B2CProvider"],"mappings":"qKAKMA,EAAgC,CACpC,gBAAiB,GACjB,UAAW,GACX,KAAM,KACN,MAAO,KACP,MAAO,KACP,aAAc,KACd,UAAW,EACb,EAOaC,EAAaC,EAAAA,cAAsC,IAAI,EAO7D,SAASC,EAAY,CAAE,OAAAC,EAAQ,SAAAC,GAA8B,CAClE,MAAMC,EAAYC,EAAAA,OAAyB,IAAI,EACzC,CAACC,EAAOC,CAAQ,EAAIC,EAAAA,SAAyBV,CAAa,EAG3DM,EAAU,UACbA,EAAU,QAAU,IAAIK,EAAAA,UAAUP,CAAM,GAG1C,MAAMQ,EAASN,EAAU,QAEzBO,OAAAA,EAAAA,UAAU,IAAM,CAEd,MAAMC,EAAcF,EAAO,OAAO,GAAG,oBAAsBG,GAA6B,CACtFN,EAASM,CAAQ,CACnB,CAAC,EAGD,OAAAH,EAAO,WAAA,EAEA,IAAM,CACXE,EAAA,EACAF,EAAO,QAAA,CACT,CACF,EAAG,CAACA,CAAM,CAAC,EAEJI,EAAAA,IAACf,EAAW,SAAX,CAAoB,MAAO,CAAE,OAAAW,EAAQ,MAAAJ,GAAU,SAAAH,EAAS,CAClE,CC9CO,SAASY,GAAU,CACxB,MAAMC,EAAUC,EAAAA,WAAWlB,CAAU,EACrC,GAAI,CAACiB,EACH,MAAM,IAAI,MAAM,4CAA4C,EAG9D,KAAM,CAAE,OAAAN,EAAQ,MAAAJ,CAAA,EAAUU,EAGpBE,EAASC,cAAaC,GAA4BV,EAAO,OAAOU,CAAO,EAAG,CAACV,CAAM,CAAC,EAElFW,EAAqBF,cAAaC,GAA4BV,EAAO,mBAAmBU,CAAO,EAAG,CAACV,CAAM,CAAC,EAE1GY,EAAUH,cAAaC,GAA6BV,EAAO,QAAQU,CAAO,EAAG,CAACV,CAAM,CAAC,EAErFa,EAAiBJ,EAAAA,YAAY,IAAMT,EAAO,iBAAkB,CAACA,CAAM,CAAC,EAEpEc,EAAeL,cAAaC,GAA2BV,EAAO,aAAaU,CAAO,EAAG,CAACV,CAAM,CAAC,EAE7Fe,EAAUN,EAAAA,YACbO,GAA0B,CACzB,MAAMC,EAASrB,EAAM,MAAM,cAC3B,GAAI,CAACqB,EAAQ,MAAO,GACpB,MAAMC,EAASD,EAAO,OAASA,EAAO,iBAAmB,CAAA,EACzD,OAAO,MAAM,QAAQC,CAAK,GAAKA,EAAM,SAASF,CAAI,CACpD,EACA,CAACpB,EAAM,IAAI,CAAA,EAGPuB,EAAWC,EAAAA,QAAQ,IAAM,CAC7B,MAAMH,EAASrB,EAAM,MAAM,cAC3B,GAAI,CAACqB,EAAQ,OAAO,KACpB,MAAMI,EAASJ,EAAO,YAAcA,EAAO,MAAQ,GAC7CK,EAAUL,EAAO,aAAe,GACtC,OAAOK,EAAS,GAAGD,CAAK,IAAIC,CAAM,GAAG,OAASD,CAChD,EAAG,CAACzB,EAAM,IAAI,CAAC,EAEf,MAAO,CAEL,gBAAiBA,EAAM,gBACvB,UAAWA,EAAM,UACjB,KAAMA,EAAM,KACZ,MAAOA,EAAM,MACb,MAAOA,EAAM,MACb,aAAcA,EAAM,aACpB,UAAWA,EAAM,UACjB,SAAAuB,EAGA,OAAAX,EACA,mBAAAG,EACA,QAAAC,EACA,eAAAC,EACA,aAAAC,EAGA,QAAAC,CAAA,CAEJ,CC1DO,SAASQ,GAA0B,CACxC,MAAMjB,EAAUC,EAAAA,WAAWlB,CAAU,EACrC,GAAI,CAACiB,EACH,MAAM,IAAI,MAAM,iDAAiD,EAEnE,OAAOA,EAAQ,MACjB,CCKO,SAASkB,EAAe,CAC7B,SAAA/B,EACA,aAAAgC,EAAe,wBACf,oBAAAC,EAAsB,uBACtB,MAAAC,EAAQ,EACV,EAAwB,CACtB,MAAMC,EAAcjC,EAAAA,OAA2B,IAAI,EAGnD,OAAKiC,EAAY,UACfA,EAAY,QAAU,IAAIC,cAAY,CACpC,SAAU,OACV,eAAgB,OAChB,gBAAiB,OACjB,YAAa,OACb,SAAU,CACR,aAAcJ,EACd,WAAYA,EACZ,cAAeC,CAAA,CACjB,CACD,GAGItB,MAACb,GAAY,OAAQ,CAAE,SAAUqC,EAAY,QAAS,MAAAD,GAAU,SAAAlC,EAAS,CAClF"}
+{"version":3,"file":"index.js","sources":["../src/context.tsx","../src/hooks/useAuth.ts","../src/hooks/useSSOClient.ts","../src/B2CSSOProvider.tsx"],"sourcesContent":["import { createContext, useRef, useState, useEffect } from \"react\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport type { SSOClientConfig, SSOClientState } from \"@phila/sso-core\";\nimport type { ReactNode } from \"react\";\n\nconst INITIAL_STATE: SSOClientState = {\n  isAuthenticated: false,\n  isLoading: true,\n  user: null,\n  token: null,\n  error: null,\n  activePolicy: null,\n  authReady: false,\n};\n\nexport interface SSOContextValue {\n  client: SSOClient;\n  state: SSOClientState;\n}\n\nexport const SSOContext = createContext<SSOContextValue | null>(null);\n\nexport interface SSOProviderProps {\n  config: SSOClientConfig;\n  children: ReactNode;\n}\n\nexport function SSOProvider({ config, children }: SSOProviderProps) {\n  const clientRef = useRef<SSOClient | null>(null);\n  const [state, setState] = useState<SSOClientState>(INITIAL_STATE);\n\n  // Create client once (stable across renders)\n  if (!clientRef.current) {\n    clientRef.current = new SSOClient(config);\n  }\n\n  const client = clientRef.current;\n\n  useEffect(() => {\n    // Subscribe to state changes\n    const unsubscribe = client.events.on(\"auth:stateChanged\", (newState: SSOClientState) => {\n      setState(newState);\n    });\n\n    // Initialize\n    client.initialize();\n\n    return () => {\n      unsubscribe();\n      client.destroy();\n    };\n  }, [client]);\n\n  return <SSOContext.Provider value={{ client, state }}>{children}</SSOContext.Provider>;\n}\n","import { useContext, useCallback, useMemo } from \"react\";\nimport { SSOContext } from \"../context\";\nimport type { SignInOptions, SignOutOptions, TokenOptions } from \"@phila/sso-core\";\n\n/**\n * Primary hook for SSO authentication in React apps.\n * Same API shape as the Vue composable for consistency.\n */\nexport function useAuth() {\n  const context = useContext(SSOContext);\n  if (!context) {\n    throw new Error(\"useAuth must be used within an SSOProvider\");\n  }\n\n  const { client, state } = context;\n\n  // Stable action references\n  const signIn = useCallback((options?: SignInOptions) => client.signIn(options), [client]);\n\n  const signInCityEmployee = useCallback((options?: SignInOptions) => client.signInCityEmployee(options), [client]);\n\n  const signOut = useCallback((options?: SignOutOptions) => client.signOut(options), [client]);\n\n  const forgotPassword = useCallback(() => client.forgotPassword(), [client]);\n\n  const acquireToken = useCallback((options?: TokenOptions) => client.acquireToken(options), [client]);\n\n  const hasRole = useCallback(\n    (role: string): boolean => {\n      const claims = state.user?.idTokenClaims as Record<string, unknown> | undefined;\n      if (!claims) return false;\n      const roles = (claims.roles ?? claims.extension_Roles ?? []) as string[];\n      return Array.isArray(roles) && roles.includes(role);\n    },\n    [state.user],\n  );\n\n  const userName = useMemo(() => {\n    const claims = state.user?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return null;\n    const given = (claims.given_name ?? claims.name ?? \"\") as string;\n    const family = (claims.family_name ?? \"\") as string;\n    return family ? `${given} ${family}`.trim() : given;\n  }, [state.user]);\n\n  return {\n    // State\n    isAuthenticated: state.isAuthenticated,\n    isLoading: state.isLoading,\n    user: state.user,\n    token: state.token,\n    error: state.error,\n    activePolicy: state.activePolicy,\n    authReady: state.authReady,\n    userName,\n\n    // Actions\n    signIn,\n    signInCityEmployee,\n    signOut,\n    forgotPassword,\n    acquireToken,\n\n    // Utilities\n    hasRole,\n  };\n}\n","import { useContext } from \"react\";\nimport { SSOContext } from \"../context\";\nimport type { SSOClient } from \"@phila/sso-core\";\n\n/**\n * Access the raw SSOClient instance.\n * Must be called within an SSOProvider.\n */\nexport function useSSOClient(): SSOClient {\n  const context = useContext(SSOContext);\n  if (!context) {\n    throw new Error(\"useSSOClient must be used within an SSOProvider\");\n  }\n  return context.client;\n}\n","// ABOUTME: Convenience provider component for React/Vite apps using Azure AD B2C\n// ABOUTME: Reads VITE_SSO_* env vars by convention so apps need zero B2CProvider boilerplate\nimport { useRef } from \"react\";\nimport { B2CProvider } from \"@phila/sso-core\";\nimport { SSOProvider } from \"./context\";\nimport type { ReactNode } from \"react\";\n\nexport interface B2CSSOProviderProps {\n  children: ReactNode;\n  signInPolicy?: string;\n  resetPasswordPolicy?: string;\n  debug?: boolean;\n}\n\n/**\n * Drop-in provider for Azure AD B2C authentication.\n * Reads connection details from VITE_SSO_* environment variables:\n *   VITE_SSO_CLIENT_ID, VITE_SSO_TENANT, VITE_SSO_AUTHORITY_DOMAIN, VITE_SSO_REDIRECT_URI\n */\nexport function B2CSSOProvider({\n  children,\n  signInPolicy = \"B2C_1A_AD_SIGNIN_ONLY\",\n  resetPasswordPolicy = \"B2C_1A_PASSWORDRESET\",\n  debug = import.meta.env.DEV,\n}: B2CSSOProviderProps) {\n  const providerRef = useRef<B2CProvider | null>(null);\n\n  // Create once — props that affect provider construction are treated as initializers\n  if (!providerRef.current) {\n    providerRef.current = new B2CProvider({\n      clientId: import.meta.env.VITE_SSO_CLIENT_ID,\n      b2cEnvironment: import.meta.env.VITE_SSO_TENANT,\n      authorityDomain: import.meta.env.VITE_SSO_AUTHORITY_DOMAIN,\n      redirectUri: import.meta.env.VITE_SSO_REDIRECT_URI,\n      policies: {\n        signUpSignIn: signInPolicy,\n        signInOnly: signInPolicy,\n        resetPassword: resetPasswordPolicy,\n      },\n    });\n  }\n\n  return <SSOProvider config={{ provider: providerRef.current, debug }}>{children}</SSOProvider>;\n}\n"],"names":["createContext","useRef","useState","SSOClient","useEffect","jsx","useContext","useCallback","useMemo","B2CProvider"],"mappings":";;;;;AAKA,MAAM,gBAAgC;AAAA,EACpC,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,cAAc;AAAA,EACd,WAAW;AACb;AAOO,MAAM,aAAaA,MAAAA,cAAsC,IAAI;AAO7D,SAAS,YAAY,EAAE,QAAQ,YAA8B;AAClE,QAAM,YAAYC,MAAAA,OAAyB,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAIC,MAAAA,SAAyB,aAAa;AAGhE,MAAI,CAAC,UAAU,SAAS;AACtB,cAAU,UAAU,IAAIC,QAAAA,UAAU,MAAM;AAAA,EAC1C;AAEA,QAAM,SAAS,UAAU;AAEzBC,QAAAA,UAAU,MAAM;AAEd,UAAM,cAAc,OAAO,OAAO,GAAG,qBAAqB,CAAC,aAA6B;AACtF,eAAS,QAAQ;AAAA,IACnB,CAAC;AAGD,WAAO,WAAA;AAEP,WAAO,MAAM;AACX,kBAAA;AACA,aAAO,QAAA;AAAA,IACT;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAEX,SAAOC,2BAAAA,IAAC,WAAW,UAAX,EAAoB,OAAO,EAAE,QAAQ,SAAU,UAAS;AAClE;AC9CO,SAAS,UAAU;AACxB,QAAM,UAAUC,MAAAA,WAAW,UAAU;AACrC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,QAAM,EAAE,QAAQ,MAAA,IAAU;AAG1B,QAAM,SAASC,kBAAY,CAAC,YAA4B,OAAO,OAAO,OAAO,GAAG,CAAC,MAAM,CAAC;AAExF,QAAM,qBAAqBA,kBAAY,CAAC,YAA4B,OAAO,mBAAmB,OAAO,GAAG,CAAC,MAAM,CAAC;AAEhH,QAAM,UAAUA,kBAAY,CAAC,YAA6B,OAAO,QAAQ,OAAO,GAAG,CAAC,MAAM,CAAC;AAE3F,QAAM,iBAAiBA,MAAAA,YAAY,MAAM,OAAO,kBAAkB,CAAC,MAAM,CAAC;AAE1E,QAAM,eAAeA,kBAAY,CAAC,YAA2B,OAAO,aAAa,OAAO,GAAG,CAAC,MAAM,CAAC;AAEnG,QAAM,UAAUA,MAAAA;AAAAA,IACd,CAAC,SAA0B;AACzB,YAAM,SAAS,MAAM,MAAM;AAC3B,UAAI,CAAC,OAAQ,QAAO;AACpB,YAAM,QAAS,OAAO,SAAS,OAAO,mBAAmB,CAAA;AACzD,aAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,IAAI;AAAA,IACpD;AAAA,IACA,CAAC,MAAM,IAAI;AAAA,EAAA;AAGb,QAAM,WAAWC,MAAAA,QAAQ,MAAM;AAC7B,UAAM,SAAS,MAAM,MAAM;AAC3B,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,QAAS,OAAO,cAAc,OAAO,QAAQ;AACnD,UAAM,SAAU,OAAO,eAAe;AACtC,WAAO,SAAS,GAAG,KAAK,IAAI,MAAM,GAAG,SAAS;AAAA,EAChD,GAAG,CAAC,MAAM,IAAI,CAAC;AAEf,SAAO;AAAA;AAAA,IAEL,iBAAiB,MAAM;AAAA,IACvB,WAAW,MAAM;AAAA,IACjB,MAAM,MAAM;AAAA,IACZ,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,IACb,cAAc,MAAM;AAAA,IACpB,WAAW,MAAM;AAAA,IACjB;AAAA;AAAA,IAGA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGA;AAAA,EAAA;AAEJ;AC1DO,SAAS,eAA0B;AACxC,QAAM,UAAUF,MAAAA,WAAW,UAAU;AACrC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,SAAO,QAAQ;AACjB;ACKO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA,eAAe;AAAA,EACf,sBAAsB;AAAA,EACtB,QAAQ;AACV,GAAwB;AACtB,QAAM,cAAcL,MAAAA,OAA2B,IAAI;AAGnD,MAAI,CAAC,YAAY,SAAS;AACxB,gBAAY,UAAU,IAAIQ,oBAAY;AAAA,MACpC,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,eAAe;AAAA,MAAA;AAAA,IACjB,CACD;AAAA,EACH;AAEA,SAAOJ,+BAAC,eAAY,QAAQ,EAAE,UAAU,YAAY,SAAS,SAAU,UAAS;AAClF;;;;;;"}

package/dist/index.mjs

@@ -1,96 +1,116 @@
-import { jsx as m } from "react/jsx-runtime";
-import { createContext as y, useRef as S, useState as C, useEffect as A, useContext as g, useCallback as u, useMemo as O } from "react";
-import { SSOClient as P, B2CProvider as w } from "@phila/sso-core";
-const I = {
-  isAuthenticated: !1,
-  isLoading: !0,
+import { jsx } from "react/jsx-runtime";
+import { createContext, useRef, useState, useEffect, useContext, useCallback, useMemo } from "react";
+import { SSOClient, B2CProvider } from "@phila/sso-core";
+const INITIAL_STATE = {
+  isAuthenticated: false,
+  isLoading: true,
   user: null,
   token: null,
   error: null,
   activePolicy: null,
-  authReady: !1
-}, f = y(null);
-function p({ config: r, children: n }) {
-  const e = S(null), [c, i] = C(I);
-  e.current || (e.current = new P(r));
-  const s = e.current;
-  return A(() => {
-    const l = s.events.on("auth:stateChanged", (d) => {
-      i(d);
+  authReady: false
+};
+const SSOContext = createContext(null);
+function SSOProvider({ config, children }) {
+  const clientRef = useRef(null);
+  const [state, setState] = useState(INITIAL_STATE);
+  if (!clientRef.current) {
+    clientRef.current = new SSOClient(config);
+  }
+  const client = clientRef.current;
+  useEffect(() => {
+    const unsubscribe = client.events.on("auth:stateChanged", (newState) => {
+      setState(newState);
     });
-    return s.initialize(), () => {
-      l(), s.destroy();
+    client.initialize();
+    return () => {
+      unsubscribe();
+      client.destroy();
     };
-  }, [s]), /* @__PURE__ */ m(f.Provider, { value: { client: s, state: c }, children: n });
+  }, [client]);
+  return /* @__PURE__ */ jsx(SSOContext.Provider, { value: { client, state }, children });
 }
-function k() {
-  const r = g(f);
-  if (!r)
+function useAuth() {
+  const context = useContext(SSOContext);
+  if (!context) {
     throw new Error("useAuth must be used within an SSOProvider");
-  const { client: n, state: e } = r, c = u((t) => n.signIn(t), [n]), i = u((t) => n.signInCityEmployee(t), [n]), s = u((t) => n.signOut(t), [n]), l = u(() => n.forgotPassword(), [n]), d = u((t) => n.acquireToken(t), [n]), h = u(
-    (t) => {
-      const o = e.user?.idTokenClaims;
-      if (!o) return !1;
-      const a = o.roles ?? o.extension_Roles ?? [];
-      return Array.isArray(a) && a.includes(t);
+  }
+  const { client, state } = context;
+  const signIn = useCallback((options) => client.signIn(options), [client]);
+  const signInCityEmployee = useCallback((options) => client.signInCityEmployee(options), [client]);
+  const signOut = useCallback((options) => client.signOut(options), [client]);
+  const forgotPassword = useCallback(() => client.forgotPassword(), [client]);
+  const acquireToken = useCallback((options) => client.acquireToken(options), [client]);
+  const hasRole = useCallback(
+    (role) => {
+      const claims = state.user?.idTokenClaims;
+      if (!claims) return false;
+      const roles = claims.roles ?? claims.extension_Roles ?? [];
+      return Array.isArray(roles) && roles.includes(role);
     },
-    [e.user]
-  ), v = O(() => {
-    const t = e.user?.idTokenClaims;
-    if (!t) return null;
-    const o = t.given_name ?? t.name ?? "", a = t.family_name ?? "";
-    return a ? `${o} ${a}`.trim() : o;
-  }, [e.user]);
+    [state.user]
+  );
+  const userName = useMemo(() => {
+    const claims = state.user?.idTokenClaims;
+    if (!claims) return null;
+    const given = claims.given_name ?? claims.name ?? "";
+    const family = claims.family_name ?? "";
+    return family ? `${given} ${family}`.trim() : given;
+  }, [state.user]);
   return {
     // State
-    isAuthenticated: e.isAuthenticated,
-    isLoading: e.isLoading,
-    user: e.user,
-    token: e.token,
-    error: e.error,
-    activePolicy: e.activePolicy,
-    authReady: e.authReady,
-    userName: v,
+    isAuthenticated: state.isAuthenticated,
+    isLoading: state.isLoading,
+    user: state.user,
+    token: state.token,
+    error: state.error,
+    activePolicy: state.activePolicy,
+    authReady: state.authReady,
+    userName,
     // Actions
-    signIn: c,
-    signInCityEmployee: i,
-    signOut: s,
-    forgotPassword: l,
-    acquireToken: d,
+    signIn,
+    signInCityEmployee,
+    signOut,
+    forgotPassword,
+    acquireToken,
     // Utilities
-    hasRole: h
+    hasRole
   };
 }
-function x() {
-  const r = g(f);
-  if (!r)
+function useSSOClient() {
+  const context = useContext(SSOContext);
+  if (!context) {
     throw new Error("useSSOClient must be used within an SSOProvider");
-  return r.client;
+  }
+  return context.client;
 }
-function T({
-  children: r,
-  signInPolicy: n = "B2C_1A_AD_SIGNIN_ONLY",
-  resetPasswordPolicy: e = "B2C_1A_PASSWORDRESET",
-  debug: c = !1
+function B2CSSOProvider({
+  children,
+  signInPolicy = "B2C_1A_AD_SIGNIN_ONLY",
+  resetPasswordPolicy = "B2C_1A_PASSWORDRESET",
+  debug = false
 }) {
-  const i = S(null);
-  return i.current || (i.current = new w({
-    clientId: void 0,
-    b2cEnvironment: void 0,
-    authorityDomain: void 0,
-    redirectUri: void 0,
-    policies: {
-      signUpSignIn: n,
-      signInOnly: n,
-      resetPassword: e
-    }
-  })), /* @__PURE__ */ m(p, { config: { provider: i.current, debug: c }, children: r });
+  const providerRef = useRef(null);
+  if (!providerRef.current) {
+    providerRef.current = new B2CProvider({
+      clientId: void 0,
+      b2cEnvironment: void 0,
+      authorityDomain: void 0,
+      redirectUri: void 0,
+      policies: {
+        signUpSignIn: signInPolicy,
+        signInOnly: signInPolicy,
+        resetPassword: resetPasswordPolicy
+      }
+    });
+  }
+  return /* @__PURE__ */ jsx(SSOProvider, { config: { provider: providerRef.current, debug }, children });
 }
 export {
-  T as B2CSSOProvider,
-  f as SSOContext,
-  p as SSOProvider,
-  k as useAuth,
-  x as useSSOClient
+  B2CSSOProvider,
+  SSOContext,
+  SSOProvider,
+  useAuth,
+  useSSOClient
 };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../src/context.tsx","../src/hooks/useAuth.ts","../src/hooks/useSSOClient.ts","../src/B2CSSOProvider.tsx"],"sourcesContent":["import { createContext, useRef, useState, useEffect } from \"react\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport type { SSOClientConfig, SSOClientState } from \"@phila/sso-core\";\nimport type { ReactNode } from \"react\";\n\nconst INITIAL_STATE: SSOClientState = {\n  isAuthenticated: false,\n  isLoading: true,\n  user: null,\n  token: null,\n  error: null,\n  activePolicy: null,\n  authReady: false,\n};\n\nexport interface SSOContextValue {\n  client: SSOClient;\n  state: SSOClientState;\n}\n\nexport const SSOContext = createContext<SSOContextValue | null>(null);\n\nexport interface SSOProviderProps {\n  config: SSOClientConfig;\n  children: ReactNode;\n}\n\nexport function SSOProvider({ config, children }: SSOProviderProps) {\n  const clientRef = useRef<SSOClient | null>(null);\n  const [state, setState] = useState<SSOClientState>(INITIAL_STATE);\n\n  // Create client once (stable across renders)\n  if (!clientRef.current) {\n    clientRef.current = new SSOClient(config);\n  }\n\n  const client = clientRef.current;\n\n  useEffect(() => {\n    // Subscribe to state changes\n    const unsubscribe = client.events.on(\"auth:stateChanged\", (newState: SSOClientState) => {\n      setState(newState);\n    });\n\n    // Initialize\n    client.initialize();\n\n    return () => {\n      unsubscribe();\n      client.destroy();\n    };\n  }, [client]);\n\n  return <SSOContext.Provider value={{ client, state }}>{children}</SSOContext.Provider>;\n}\n","import { useContext, useCallback, useMemo } from \"react\";\nimport { SSOContext } from \"../context\";\nimport type { SignInOptions, SignOutOptions, TokenOptions } from \"@phila/sso-core\";\n\n/**\n * Primary hook for SSO authentication in React apps.\n * Same API shape as the Vue composable for consistency.\n */\nexport function useAuth() {\n  const context = useContext(SSOContext);\n  if (!context) {\n    throw new Error(\"useAuth must be used within an SSOProvider\");\n  }\n\n  const { client, state } = context;\n\n  // Stable action references\n  const signIn = useCallback((options?: SignInOptions) => client.signIn(options), [client]);\n\n  const signInCityEmployee = useCallback((options?: SignInOptions) => client.signInCityEmployee(options), [client]);\n\n  const signOut = useCallback((options?: SignOutOptions) => client.signOut(options), [client]);\n\n  const forgotPassword = useCallback(() => client.forgotPassword(), [client]);\n\n  const acquireToken = useCallback((options?: TokenOptions) => client.acquireToken(options), [client]);\n\n  const hasRole = useCallback(\n    (role: string): boolean => {\n      const claims = state.user?.idTokenClaims as Record<string, unknown> | undefined;\n      if (!claims) return false;\n      const roles = (claims.roles ?? claims.extension_Roles ?? []) as string[];\n      return Array.isArray(roles) && roles.includes(role);\n    },\n    [state.user],\n  );\n\n  const userName = useMemo(() => {\n    const claims = state.user?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return null;\n    const given = (claims.given_name ?? claims.name ?? \"\") as string;\n    const family = (claims.family_name ?? \"\") as string;\n    return family ? `${given} ${family}`.trim() : given;\n  }, [state.user]);\n\n  return {\n    // State\n    isAuthenticated: state.isAuthenticated,\n    isLoading: state.isLoading,\n    user: state.user,\n    token: state.token,\n    error: state.error,\n    activePolicy: state.activePolicy,\n    authReady: state.authReady,\n    userName,\n\n    // Actions\n    signIn,\n    signInCityEmployee,\n    signOut,\n    forgotPassword,\n    acquireToken,\n\n    // Utilities\n    hasRole,\n  };\n}\n","import { useContext } from \"react\";\nimport { SSOContext } from \"../context\";\nimport type { SSOClient } from \"@phila/sso-core\";\n\n/**\n * Access the raw SSOClient instance.\n * Must be called within an SSOProvider.\n */\nexport function useSSOClient(): SSOClient {\n  const context = useContext(SSOContext);\n  if (!context) {\n    throw new Error(\"useSSOClient must be used within an SSOProvider\");\n  }\n  return context.client;\n}\n","// ABOUTME: Convenience provider component for React/Vite apps using Azure AD B2C\n// ABOUTME: Reads VITE_SSO_* env vars by convention so apps need zero B2CProvider boilerplate\nimport { useRef } from \"react\";\nimport { B2CProvider } from \"@phila/sso-core\";\nimport { SSOProvider } from \"./context\";\nimport type { ReactNode } from \"react\";\n\nexport interface B2CSSOProviderProps {\n  children: ReactNode;\n  signInPolicy?: string;\n  resetPasswordPolicy?: string;\n  debug?: boolean;\n}\n\n/**\n * Drop-in provider for Azure AD B2C authentication.\n * Reads connection details from VITE_SSO_* environment variables:\n *   VITE_SSO_CLIENT_ID, VITE_SSO_TENANT, VITE_SSO_AUTHORITY_DOMAIN, VITE_SSO_REDIRECT_URI\n */\nexport function B2CSSOProvider({\n  children,\n  signInPolicy = \"B2C_1A_AD_SIGNIN_ONLY\",\n  resetPasswordPolicy = \"B2C_1A_PASSWORDRESET\",\n  debug = import.meta.env.DEV,\n}: B2CSSOProviderProps) {\n  const providerRef = useRef<B2CProvider | null>(null);\n\n  // Create once — props that affect provider construction are treated as initializers\n  if (!providerRef.current) {\n    providerRef.current = new B2CProvider({\n      clientId: import.meta.env.VITE_SSO_CLIENT_ID,\n      b2cEnvironment: import.meta.env.VITE_SSO_TENANT,\n      authorityDomain: import.meta.env.VITE_SSO_AUTHORITY_DOMAIN,\n      redirectUri: import.meta.env.VITE_SSO_REDIRECT_URI,\n      policies: {\n        signUpSignIn: signInPolicy,\n        signInOnly: signInPolicy,\n        resetPassword: resetPasswordPolicy,\n      },\n    });\n  }\n\n  return <SSOProvider config={{ provider: providerRef.current, debug }}>{children}</SSOProvider>;\n}\n"],"names":["INITIAL_STATE","SSOContext","createContext","SSOProvider","config","children","clientRef","useRef","state","setState","useState","SSOClient","client","useEffect","unsubscribe","newState","jsx","useAuth","context","useContext","signIn","useCallback","options","signInCityEmployee","signOut","forgotPassword","acquireToken","hasRole","role","claims","roles","userName","useMemo","given","family","useSSOClient","B2CSSOProvider","signInPolicy","resetPasswordPolicy","debug","providerRef","B2CProvider"],"mappings":";;;AAKA,MAAMA,IAAgC;AAAA,EACpC,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,cAAc;AAAA,EACd,WAAW;AACb,GAOaC,IAAaC,EAAsC,IAAI;AAO7D,SAASC,EAAY,EAAE,QAAAC,GAAQ,UAAAC,KAA8B;AAClE,QAAMC,IAAYC,EAAyB,IAAI,GACzC,CAACC,GAAOC,CAAQ,IAAIC,EAAyBV,CAAa;AAGhE,EAAKM,EAAU,YACbA,EAAU,UAAU,IAAIK,EAAUP,CAAM;AAG1C,QAAMQ,IAASN,EAAU;AAEzB,SAAAO,EAAU,MAAM;AAEd,UAAMC,IAAcF,EAAO,OAAO,GAAG,qBAAqB,CAACG,MAA6B;AACtF,MAAAN,EAASM,CAAQ;AAAA,IACnB,CAAC;AAGD,WAAAH,EAAO,WAAA,GAEA,MAAM;AACX,MAAAE,EAAA,GACAF,EAAO,QAAA;AAAA,IACT;AAAA,EACF,GAAG,CAACA,CAAM,CAAC,GAEJ,gBAAAI,EAACf,EAAW,UAAX,EAAoB,OAAO,EAAE,QAAAW,GAAQ,OAAAJ,KAAU,UAAAH,GAAS;AAClE;AC9CO,SAASY,IAAU;AACxB,QAAMC,IAAUC,EAAWlB,CAAU;AACrC,MAAI,CAACiB;AACH,UAAM,IAAI,MAAM,4CAA4C;AAG9D,QAAM,EAAE,QAAAN,GAAQ,OAAAJ,EAAA,IAAUU,GAGpBE,IAASC,EAAY,CAACC,MAA4BV,EAAO,OAAOU,CAAO,GAAG,CAACV,CAAM,CAAC,GAElFW,IAAqBF,EAAY,CAACC,MAA4BV,EAAO,mBAAmBU,CAAO,GAAG,CAACV,CAAM,CAAC,GAE1GY,IAAUH,EAAY,CAACC,MAA6BV,EAAO,QAAQU,CAAO,GAAG,CAACV,CAAM,CAAC,GAErFa,IAAiBJ,EAAY,MAAMT,EAAO,kBAAkB,CAACA,CAAM,CAAC,GAEpEc,IAAeL,EAAY,CAACC,MAA2BV,EAAO,aAAaU,CAAO,GAAG,CAACV,CAAM,CAAC,GAE7Fe,IAAUN;AAAA,IACd,CAACO,MAA0B;AACzB,YAAMC,IAASrB,EAAM,MAAM;AAC3B,UAAI,CAACqB,EAAQ,QAAO;AACpB,YAAMC,IAASD,EAAO,SAASA,EAAO,mBAAmB,CAAA;AACzD,aAAO,MAAM,QAAQC,CAAK,KAAKA,EAAM,SAASF,CAAI;AAAA,IACpD;AAAA,IACA,CAACpB,EAAM,IAAI;AAAA,EAAA,GAGPuB,IAAWC,EAAQ,MAAM;AAC7B,UAAMH,IAASrB,EAAM,MAAM;AAC3B,QAAI,CAACqB,EAAQ,QAAO;AACpB,UAAMI,IAASJ,EAAO,cAAcA,EAAO,QAAQ,IAC7CK,IAAUL,EAAO,eAAe;AACtC,WAAOK,IAAS,GAAGD,CAAK,IAAIC,CAAM,GAAG,SAASD;AAAA,EAChD,GAAG,CAACzB,EAAM,IAAI,CAAC;AAEf,SAAO;AAAA;AAAA,IAEL,iBAAiBA,EAAM;AAAA,IACvB,WAAWA,EAAM;AAAA,IACjB,MAAMA,EAAM;AAAA,IACZ,OAAOA,EAAM;AAAA,IACb,OAAOA,EAAM;AAAA,IACb,cAAcA,EAAM;AAAA,IACpB,WAAWA,EAAM;AAAA,IACjB,UAAAuB;AAAA;AAAA,IAGA,QAAAX;AAAA,IACA,oBAAAG;AAAA,IACA,SAAAC;AAAA,IACA,gBAAAC;AAAA,IACA,cAAAC;AAAA;AAAA,IAGA,SAAAC;AAAA,EAAA;AAEJ;AC1DO,SAASQ,IAA0B;AACxC,QAAMjB,IAAUC,EAAWlB,CAAU;AACrC,MAAI,CAACiB;AACH,UAAM,IAAI,MAAM,iDAAiD;AAEnE,SAAOA,EAAQ;AACjB;ACKO,SAASkB,EAAe;AAAA,EAC7B,UAAA/B;AAAA,EACA,cAAAgC,IAAe;AAAA,EACf,qBAAAC,IAAsB;AAAA,EACtB,OAAAC,IAAQ;AACV,GAAwB;AACtB,QAAMC,IAAcjC,EAA2B,IAAI;AAGnD,SAAKiC,EAAY,YACfA,EAAY,UAAU,IAAIC,EAAY;AAAA,IACpC,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,UAAU;AAAA,MACR,cAAcJ;AAAA,MACd,YAAYA;AAAA,MACZ,eAAeC;AAAA,IAAA;AAAA,EACjB,CACD,IAGI,gBAAAtB,EAACb,KAAY,QAAQ,EAAE,UAAUqC,EAAY,SAAS,OAAAD,KAAU,UAAAlC,GAAS;AAClF;"}
+{"version":3,"file":"index.mjs","sources":["../src/context.tsx","../src/hooks/useAuth.ts","../src/hooks/useSSOClient.ts","../src/B2CSSOProvider.tsx"],"sourcesContent":["import { createContext, useRef, useState, useEffect } from \"react\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport type { SSOClientConfig, SSOClientState } from \"@phila/sso-core\";\nimport type { ReactNode } from \"react\";\n\nconst INITIAL_STATE: SSOClientState = {\n  isAuthenticated: false,\n  isLoading: true,\n  user: null,\n  token: null,\n  error: null,\n  activePolicy: null,\n  authReady: false,\n};\n\nexport interface SSOContextValue {\n  client: SSOClient;\n  state: SSOClientState;\n}\n\nexport const SSOContext = createContext<SSOContextValue | null>(null);\n\nexport interface SSOProviderProps {\n  config: SSOClientConfig;\n  children: ReactNode;\n}\n\nexport function SSOProvider({ config, children }: SSOProviderProps) {\n  const clientRef = useRef<SSOClient | null>(null);\n  const [state, setState] = useState<SSOClientState>(INITIAL_STATE);\n\n  // Create client once (stable across renders)\n  if (!clientRef.current) {\n    clientRef.current = new SSOClient(config);\n  }\n\n  const client = clientRef.current;\n\n  useEffect(() => {\n    // Subscribe to state changes\n    const unsubscribe = client.events.on(\"auth:stateChanged\", (newState: SSOClientState) => {\n      setState(newState);\n    });\n\n    // Initialize\n    client.initialize();\n\n    return () => {\n      unsubscribe();\n      client.destroy();\n    };\n  }, [client]);\n\n  return <SSOContext.Provider value={{ client, state }}>{children}</SSOContext.Provider>;\n}\n","import { useContext, useCallback, useMemo } from \"react\";\nimport { SSOContext } from \"../context\";\nimport type { SignInOptions, SignOutOptions, TokenOptions } from \"@phila/sso-core\";\n\n/**\n * Primary hook for SSO authentication in React apps.\n * Same API shape as the Vue composable for consistency.\n */\nexport function useAuth() {\n  const context = useContext(SSOContext);\n  if (!context) {\n    throw new Error(\"useAuth must be used within an SSOProvider\");\n  }\n\n  const { client, state } = context;\n\n  // Stable action references\n  const signIn = useCallback((options?: SignInOptions) => client.signIn(options), [client]);\n\n  const signInCityEmployee = useCallback((options?: SignInOptions) => client.signInCityEmployee(options), [client]);\n\n  const signOut = useCallback((options?: SignOutOptions) => client.signOut(options), [client]);\n\n  const forgotPassword = useCallback(() => client.forgotPassword(), [client]);\n\n  const acquireToken = useCallback((options?: TokenOptions) => client.acquireToken(options), [client]);\n\n  const hasRole = useCallback(\n    (role: string): boolean => {\n      const claims = state.user?.idTokenClaims as Record<string, unknown> | undefined;\n      if (!claims) return false;\n      const roles = (claims.roles ?? claims.extension_Roles ?? []) as string[];\n      return Array.isArray(roles) && roles.includes(role);\n    },\n    [state.user],\n  );\n\n  const userName = useMemo(() => {\n    const claims = state.user?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return null;\n    const given = (claims.given_name ?? claims.name ?? \"\") as string;\n    const family = (claims.family_name ?? \"\") as string;\n    return family ? `${given} ${family}`.trim() : given;\n  }, [state.user]);\n\n  return {\n    // State\n    isAuthenticated: state.isAuthenticated,\n    isLoading: state.isLoading,\n    user: state.user,\n    token: state.token,\n    error: state.error,\n    activePolicy: state.activePolicy,\n    authReady: state.authReady,\n    userName,\n\n    // Actions\n    signIn,\n    signInCityEmployee,\n    signOut,\n    forgotPassword,\n    acquireToken,\n\n    // Utilities\n    hasRole,\n  };\n}\n","import { useContext } from \"react\";\nimport { SSOContext } from \"../context\";\nimport type { SSOClient } from \"@phila/sso-core\";\n\n/**\n * Access the raw SSOClient instance.\n * Must be called within an SSOProvider.\n */\nexport function useSSOClient(): SSOClient {\n  const context = useContext(SSOContext);\n  if (!context) {\n    throw new Error(\"useSSOClient must be used within an SSOProvider\");\n  }\n  return context.client;\n}\n","// ABOUTME: Convenience provider component for React/Vite apps using Azure AD B2C\n// ABOUTME: Reads VITE_SSO_* env vars by convention so apps need zero B2CProvider boilerplate\nimport { useRef } from \"react\";\nimport { B2CProvider } from \"@phila/sso-core\";\nimport { SSOProvider } from \"./context\";\nimport type { ReactNode } from \"react\";\n\nexport interface B2CSSOProviderProps {\n  children: ReactNode;\n  signInPolicy?: string;\n  resetPasswordPolicy?: string;\n  debug?: boolean;\n}\n\n/**\n * Drop-in provider for Azure AD B2C authentication.\n * Reads connection details from VITE_SSO_* environment variables:\n *   VITE_SSO_CLIENT_ID, VITE_SSO_TENANT, VITE_SSO_AUTHORITY_DOMAIN, VITE_SSO_REDIRECT_URI\n */\nexport function B2CSSOProvider({\n  children,\n  signInPolicy = \"B2C_1A_AD_SIGNIN_ONLY\",\n  resetPasswordPolicy = \"B2C_1A_PASSWORDRESET\",\n  debug = import.meta.env.DEV,\n}: B2CSSOProviderProps) {\n  const providerRef = useRef<B2CProvider | null>(null);\n\n  // Create once — props that affect provider construction are treated as initializers\n  if (!providerRef.current) {\n    providerRef.current = new B2CProvider({\n      clientId: import.meta.env.VITE_SSO_CLIENT_ID,\n      b2cEnvironment: import.meta.env.VITE_SSO_TENANT,\n      authorityDomain: import.meta.env.VITE_SSO_AUTHORITY_DOMAIN,\n      redirectUri: import.meta.env.VITE_SSO_REDIRECT_URI,\n      policies: {\n        signUpSignIn: signInPolicy,\n        signInOnly: signInPolicy,\n        resetPassword: resetPasswordPolicy,\n      },\n    });\n  }\n\n  return <SSOProvider config={{ provider: providerRef.current, debug }}>{children}</SSOProvider>;\n}\n"],"names":[],"mappings":";;;AAKA,MAAM,gBAAgC;AAAA,EACpC,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,cAAc;AAAA,EACd,WAAW;AACb;AAOO,MAAM,aAAa,cAAsC,IAAI;AAO7D,SAAS,YAAY,EAAE,QAAQ,YAA8B;AAClE,QAAM,YAAY,OAAyB,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAyB,aAAa;AAGhE,MAAI,CAAC,UAAU,SAAS;AACtB,cAAU,UAAU,IAAI,UAAU,MAAM;AAAA,EAC1C;AAEA,QAAM,SAAS,UAAU;AAEzB,YAAU,MAAM;AAEd,UAAM,cAAc,OAAO,OAAO,GAAG,qBAAqB,CAAC,aAA6B;AACtF,eAAS,QAAQ;AAAA,IACnB,CAAC;AAGD,WAAO,WAAA;AAEP,WAAO,MAAM;AACX,kBAAA;AACA,aAAO,QAAA;AAAA,IACT;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAEX,SAAO,oBAAC,WAAW,UAAX,EAAoB,OAAO,EAAE,QAAQ,SAAU,UAAS;AAClE;AC9CO,SAAS,UAAU;AACxB,QAAM,UAAU,WAAW,UAAU;AACrC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,QAAM,EAAE,QAAQ,MAAA,IAAU;AAG1B,QAAM,SAAS,YAAY,CAAC,YAA4B,OAAO,OAAO,OAAO,GAAG,CAAC,MAAM,CAAC;AAExF,QAAM,qBAAqB,YAAY,CAAC,YAA4B,OAAO,mBAAmB,OAAO,GAAG,CAAC,MAAM,CAAC;AAEhH,QAAM,UAAU,YAAY,CAAC,YAA6B,OAAO,QAAQ,OAAO,GAAG,CAAC,MAAM,CAAC;AAE3F,QAAM,iBAAiB,YAAY,MAAM,OAAO,kBAAkB,CAAC,MAAM,CAAC;AAE1E,QAAM,eAAe,YAAY,CAAC,YAA2B,OAAO,aAAa,OAAO,GAAG,CAAC,MAAM,CAAC;AAEnG,QAAM,UAAU;AAAA,IACd,CAAC,SAA0B;AACzB,YAAM,SAAS,MAAM,MAAM;AAC3B,UAAI,CAAC,OAAQ,QAAO;AACpB,YAAM,QAAS,OAAO,SAAS,OAAO,mBAAmB,CAAA;AACzD,aAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,IAAI;AAAA,IACpD;AAAA,IACA,CAAC,MAAM,IAAI;AAAA,EAAA;AAGb,QAAM,WAAW,QAAQ,MAAM;AAC7B,UAAM,SAAS,MAAM,MAAM;AAC3B,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,QAAS,OAAO,cAAc,OAAO,QAAQ;AACnD,UAAM,SAAU,OAAO,eAAe;AACtC,WAAO,SAAS,GAAG,KAAK,IAAI,MAAM,GAAG,SAAS;AAAA,EAChD,GAAG,CAAC,MAAM,IAAI,CAAC;AAEf,SAAO;AAAA;AAAA,IAEL,iBAAiB,MAAM;AAAA,IACvB,WAAW,MAAM;AAAA,IACjB,MAAM,MAAM;AAAA,IACZ,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,IACb,cAAc,MAAM;AAAA,IACpB,WAAW,MAAM;AAAA,IACjB;AAAA;AAAA,IAGA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGA;AAAA,EAAA;AAEJ;AC1DO,SAAS,eAA0B;AACxC,QAAM,UAAU,WAAW,UAAU;AACrC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,SAAO,QAAQ;AACjB;ACKO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA,eAAe;AAAA,EACf,sBAAsB;AAAA,EACtB,QAAQ;AACV,GAAwB;AACtB,QAAM,cAAc,OAA2B,IAAI;AAGnD,MAAI,CAAC,YAAY,SAAS;AACxB,gBAAY,UAAU,IAAI,YAAY;AAAA,MACpC,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,eAAe;AAAA,MAAA;AAAA,IACjB,CACD;AAAA,EACH;AAEA,SAAO,oBAAC,eAAY,QAAQ,EAAE,UAAU,YAAY,SAAS,SAAU,UAAS;AAClF;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phila/sso-react",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "type": "module",
   "description": "React adapter for @phila/sso-core",
   "main": "./dist/index.js",
@@ -25,7 +25,7 @@
   "author": "City of Philadelphia",
   "license": "MIT",
   "dependencies": {
-    "@phila/sso-core": "0.0.2"
+    "@phila/sso-core": "0.0.3"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0"