@tern-secure/types 1.1.0-canary.v20251030165007 → 1.1.0-canary.v20251125170702

package/dist/index.d.mts

@@ -175,6 +175,11 @@ interface ServerConfigValidationResult {
     config: TernSecureServerConfig;
 }
 type InstanceType = 'production' | 'development';
+interface AppCheckConfig {
+    provider: 'reCaptchaV3' | 'reCaptchaEnterprise';
+    siteKey: string;
+    isTokenAutoRefreshEnabled?: boolean;
+}
 
 interface TernSecureAPIError {
     code: string;
@@ -247,9 +252,10 @@ declare const ERRORS: {
     readonly REDIRECT_LOOP: "Redirect loop detected.";
 };
 
-type AuthEndpoint = 'cookies' | 'sessions' | 'users';
+type AuthEndpoint = 'cookies' | 'sessions' | 'users' | 'sign_ins';
 type CookieSubEndpoint = 'get' | 'set' | 'delete' | 'clear' | 'list';
 type SessionSubEndpoint = 'verify' | 'createsession' | 'refresh' | 'revoke';
+type SignInSubEndpoint = 'create' | 'resetPasswordEmail';
 interface CorsOptions {
     allowedOrigins: string[] | '*';
     allowedMethods?: string[];
@@ -278,7 +284,6 @@ interface TokenCookieConfig {
 interface CookieOpts extends CookieOptions {
     domain?: string;
     namePrefix?: string;
-    session?: SessionCookieConfig;
 }
 interface RateLimitOptions {
     windowMs?: number;
@@ -314,6 +319,11 @@ interface SessionEndpointConfig extends EndpointConfig {
         [K in SessionSubEndpoint]?: Partial<EndpointConfig>;
     };
 }
+interface SignInEndpointConfig extends EndpointConfig {
+    subEndpoints?: {
+        [K in SignInSubEndpoint]?: Partial<EndpointConfig>;
+    };
+}
 interface TernSecureHandlerOptions {
     cors?: CorsOptions;
     cookies?: CookieOpts;
@@ -322,6 +332,7 @@ interface TernSecureHandlerOptions {
     endpoints?: {
         cookies?: CookieEndpointConfig;
         sessions?: SessionEndpointConfig;
+        signIns?: SignInEndpointConfig;
     };
     tenantId?: string | null;
     revokeRefreshTokensOnSignOut?: boolean;
@@ -379,10 +390,32 @@ interface SessionResource extends IdTokenResult {
     getIdAndRefreshToken: (idToken: string, csrfToken: string) => Promise<void>;
 }
 
+interface TernSecureApiErrorJSON {
+    code: string;
+    message: string;
+}
+interface TernSecureFireRestErrorJSON extends TernSecureApiErrorJSON {
+    domain: string;
+    reason: string;
+}
+interface SessionJson extends IdTokenResult {
+    status: SessionStatus;
+    user?: TernSecureUser;
+}
+/**
+ * Currently representing API DTOs in their JSON form.
+*/
+interface TernSecureResourceJSON {
+    id: string;
+    object: string;
+}
+
+type UnverifiedField = 'email_address' | 'phone_number';
 interface BaseSignUpResponse {
     status?: SignUpStatus;
     message?: string;
-    error?: any | undefined;
+    error?: any;
+    unverifiedFields?: UnverifiedField[];
 }
 interface SignUpSuccessResponse extends BaseSignUpResponse, UserCredential {
     status: 'complete';
@@ -390,24 +423,23 @@ interface SignUpSuccessResponse extends BaseSignUpResponse, UserCredential {
 interface SignUpErrorResponse extends BaseSignUpResponse {
     status: 'error';
 }
-type SignUpResponse = SignUpSuccessResponse | SignUpErrorResponse;
+interface SignUpMissingRequirementsResponse extends BaseSignUpResponse, UserCredential {
+    status: 'missing_requirements';
+    unverifiedFields: UnverifiedField[];
+}
+type SignUpResponse = SignUpSuccessResponse | SignUpErrorResponse | SignUpMissingRequirementsResponse;
 type SignUpFormValues = {
     email: string;
     password: string;
 };
-type SignUpInitialValue = {
-    email: string;
-    password: string;
-};
+type SignUpInitialValue = Partial<SignUpFormValues>;
 interface SignUpResource {
     status: SignUpStatus | null;
-    username: string | null;
-    firstName: string | null;
-    lastName: string | null;
-    displayName: string | null;
-    email: string | null;
-    phoneNumber: string | null;
-    withEmailAndPassword: (params: SignUpInitialValue) => Promise<SignUpResponse>;
+    user: TernSecureUser | null;
+    unverifiedFields?: UnverifiedField[];
+    message?: string;
+    error?: any;
+    withEmailAndPassword: (params: SignUpFormValues) => Promise<SignUpResource>;
     /**
      * @param provider - The identifier of the social provider (e.g., 'google', 'microsoft', 'github').
      * @param options - Optional configuration for the social sign-in flow.
@@ -416,8 +448,22 @@ interface SignUpResource {
     withSocialProvider: (provider: string, options?: {
         mode?: 'popup' | 'redirect';
     }) => Promise<SignUpResponse | void>;
+    /**
+     * Sends an email verification link to the user's email address.
+     * @param options - Optional configuration for the verification email.
+     * @returns A promise that resolves with the updated SignUpResource.
+     */
+    attemptEmailVerification: (options?: {
+        url?: string;
+        handleCodeInApp?: boolean;
+    }) => Promise<SignUpResource>;
 }
 type SignUpStatus = 'missing_requirements' | 'complete' | 'abandoned' | 'error';
+interface SignUpJson extends TernSecureResourceJSON {
+    object: 'sign_up';
+    id: string;
+    status: SignUpStatus;
+}
 
 interface FirebaseClaims {
     identities: {
@@ -535,11 +581,129 @@ type AfterSignOutUrl = {
     afterSignOutUrl?: string | null;
 };
 
-type SignInStatus = 'idle' | 'pending_email_password' | 'pending_social' | 'pending_mfa' | 'redirecting' | 'success' | 'error';
+type PasskeyStrategy = 'passkey';
+type PasswordStrategy = 'password';
+type PhoneCodeStrategy = 'phone_code';
+type EmailCodeStrategy = 'email_code';
+type EmailLinkStrategy = 'email_link';
+type TOTPStrategy = 'totp';
+type BackupCodeStrategy = 'backup_code';
+type ResetPasswordPhoneCodeStrategy = 'reset_password_phone_code';
+type ResetPasswordEmailCodeStrategy = 'reset_password_email_code';
+type EnterpriseSSOStrategy = 'enterprise_sso';
+
+type EmailCodeFactor = {
+    strategy: EmailCodeStrategy;
+    emailAddressId: string;
+    safeIdentifier: string;
+    primary?: boolean;
+};
+type EmailLinkFactor = {
+    strategy: EmailLinkStrategy;
+    emailAddressId: string;
+    safeIdentifier: string;
+    primary?: boolean;
+};
+type PhoneCodeFactor = {
+    strategy: PhoneCodeStrategy;
+    phoneNumberId: string;
+    safeIdentifier: string;
+    primary?: boolean;
+    default?: boolean;
+};
+type PasswordFactor = {
+    strategy: PasswordStrategy;
+};
+type PasskeyFactor = {
+    strategy: PasskeyStrategy;
+};
+type EnterpriseSSOFactor = {
+    strategy: EnterpriseSSOStrategy;
+};
+type TOTPFactor = {
+    strategy: TOTPStrategy;
+};
+type BackupCodeFactor = {
+    strategy: BackupCodeStrategy;
+};
+type ResetPasswordPhoneCodeFactor = {
+    strategy: ResetPasswordPhoneCodeStrategy;
+    phoneNumberId: string;
+    safeIdentifier: string;
+    primary?: boolean;
+};
+type ResetPasswordEmailCodeFactor = {
+    strategy: ResetPasswordEmailCodeStrategy;
+    emailAddressId: string;
+    safeIdentifier: string;
+    primary?: boolean;
+};
+type ResetPasswordCodeFactor = ResetPasswordEmailCodeFactor | ResetPasswordPhoneCodeFactor;
+type ResetPasswordPhoneCodeFactorConfig = Omit<ResetPasswordPhoneCodeFactor, 'safeIdentifier'>;
+type ResetPasswordEmailCodeFactorConfig = Omit<ResetPasswordEmailCodeFactor, 'safeIdentifier'>;
+type EmailCodeConfig = Omit<EmailCodeFactor, 'safeIdentifier'>;
+type EmailLinkConfig = Omit<EmailLinkFactor, 'safeIdentifier'> & {
+    redirectUrl: string;
+};
+type PhoneCodeConfig = Omit<PhoneCodeFactor, 'safeIdentifier'>;
+type PassKeyConfig = PasskeyFactor;
+type EnterpriseSSOConfig = EnterpriseSSOFactor & {
+    redirectUrl: string;
+    actionCompleteRedirectUrl: string;
+    oidcPrompt?: string;
+};
+type PhoneCodeSecondFactorConfig = {
+    strategy: PhoneCodeStrategy;
+    phoneNumberId?: string;
+};
+type EmailCodeAttempt = {
+    strategy: EmailCodeStrategy;
+    code: string;
+};
+type PhoneCodeAttempt = {
+    strategy: PhoneCodeStrategy;
+    code: string;
+};
+type PasswordAttempt = {
+    strategy: PasswordStrategy;
+    password: string;
+};
+type TOTPAttempt = {
+    strategy: TOTPStrategy;
+    code: string;
+};
+type BackupCodeAttempt = {
+    strategy: BackupCodeStrategy;
+    code: string;
+};
+type ResetPasswordPhoneCodeAttempt = {
+    strategy: ResetPasswordPhoneCodeStrategy;
+    code: string;
+    password?: string;
+};
+type ResetPasswordEmailCodeAttempt = {
+    strategy: ResetPasswordEmailCodeStrategy;
+    code: string;
+    password?: string;
+};
+
+type SignInStatus = 'needs_identifier' | 'needs_first_factor' | 'needs_second_factor' | 'needs_new_password' | 'needs_email_verification' | 'idle' | 'pending_email_password' | 'pending_social' | 'pending_mfa' | 'redirecting' | 'success' | 'error';
 type SignInFormValues = {
+    email?: string;
+    password?: string;
+    phoneNumber?: string;
+};
+/**
+ * @deprecated
+ */
+type SignInInitialValue = Partial<SignInFormValues>;
+type SignInPasswordParams = {
     email: string;
     password: string;
-    phoneNumber?: string;
+};
+type SignInPhoneParams = {
+    phoneNumber: string;
+    appVerifier?: any;
 };
 interface AuthErrorResponse {
     success: false;
@@ -566,7 +730,6 @@ interface SignInPendingResponse extends BaseSignInResponse {
     status: 'redirecting' | 'pending_social' | 'pending_email_password';
 }
 type SignInResponse = SignInSuccessResponse | SignInErrorResponse | SignInPendingResponse;
-type SignInInitialValue = Partial<SignInFormValues>;
 interface ResendEmailVerification {
     isVerified?: boolean;
 }
@@ -582,46 +745,227 @@ interface SocialProviderOptions {
     /** OAuth scopes to request from the provider */
     scopes?: string[];
 }
+interface SignInVerificationResponse {
+    status: SignInStatus;
+    message?: string;
+    error?: any;
+}
 interface SignInResource {
+    status: SignInStatus | null;
+    supportedFirstFactors: SignInFirstFactor[] | null;
+    identifier: string | null;
+    user?: TernSecureUser | null;
     /**
-     * The current status of the sign-in process.
+     * Create combine email and phone sign in method
      */
-    status: SignInStatus | null;
+    create: (params: SignInCreateParams) => Promise<SignInResource>;
+    authenticateWithPassword: (params: SignInPasswordParams) => Promise<SignInResponse>;
+    createRecaptchaVerifier: (containerOrId: string | HTMLElement, parameters?: any) => any;
+    authenticateWithPhoneNumber: (params: SignInPhoneParams) => Promise<SignInResponse>;
+    authenticateWithSocialProvider: (provider: string, options: SocialProviderOptions) => Promise<SignInResponse>;
+    completeMfaSignIn: (mfaToken: string, mfaContext?: any) => Promise<SignInResponse>;
+    sendPasswordResetEmail: (email: string) => Promise<{
+        response: {
+            email: string;
+        };
+    } | null>;
+    attemptEmailVerification: (options?: {
+        url?: string;
+        handleCodeInApp?: boolean;
+    }) => Promise<SignInVerificationResponse>;
+    attemptFirstFactor: (params: AttemptFirstFactorParams) => Promise<SignInResource>;
+    checkRedirectResult: () => Promise<SignInResponse | null>;
+}
+type SignInFirstFactor = EmailCodeFactor | PasswordFactor;
+type SignInSecondFactor = PhoneCodeFactor | TOTPFactor | BackupCodeFactor;
+type SignInFactor = SignInFirstFactor | SignInSecondFactor;
+type SignInCreateParams = ({
+    strategy: PasswordStrategy;
+    password?: string;
+    identifier: string;
+} | {
+    strategy: PhoneCodeStrategy | EmailCodeStrategy | ResetPasswordEmailCodeStrategy | ResetPasswordPhoneCodeStrategy;
+    identifier: string;
+});
+type AttemptFirstFactorParams = EmailCodeAttempt | PhoneCodeAttempt | PasswordAttempt | ResetPasswordPhoneCodeAttempt | ResetPasswordEmailCodeAttempt;
+interface SignInJson extends TernSecureResourceJSON {
+    object: 'sign_in';
+    id: string;
+    status: SignInStatus;
+    supportedFirstFactors: SignInFirstFactor[];
+    firstFactorVerification?: SignInFirstFactor;
+    secondFactorVerification?: SignInSecondFactor;
+    identifier: string | null;
+}
+
+/**
+ * Defines the basic structure for color theming.
+ */
+interface ThemeColors {
+    primary?: string;
+    secondary?: string;
+    accent?: string;
+    background?: string;
+    text?: string;
+    error?: string;
+    success?: string;
+}
+/**
+ * Defines the basic structure for font theming.
+ */
+interface ThemeFonts {
+    primary?: string;
+    secondary?: string;
+}
+/**
+ * Defines the basic structure for spacing and layout theming.
+ */
+interface ThemeSpacing {
+    small?: string | number;
+    medium?: string | number;
+    large?: string | number;
+}
+/**
+ * Defines the basic structure for border radius theming.
+ */
+interface ThemeBorderRadius {
+    small?: string | number;
+    medium?: string | number;
+    large?: string | number;
+}
+/**
+ * Allows for overriding styles of specific UI components.
+ * Properties can be CSS-in-JS objects or class names, depending on implementation.
+ */
+interface ThemeComponentStyles {
+    button?: Record<string, any> | string;
+    input?: Record<string, any> | string;
+    card?: Record<string, any> | string;
+    label?: Record<string, any> | string;
+}
+/**
+ * Defines the overall appearance/theme configuration.
+ * This allows for broad customization of the UI components.
+ */
+interface Appearance {
+    colors?: ThemeColors;
+    fonts?: ThemeFonts;
+    spacing?: ThemeSpacing;
+    borderRadius?: ThemeBorderRadius;
+    componentStyles?: ThemeComponentStyles;
+    variables?: Record<string, string | number>;
+}
+type Layout = {
     /**
-     * Signs in a user with their email and password.
-     * @param params - The sign-in form values.
-     * @returns A promise that resolves with the sign-in response.
+     * @default inside
      */
-    withEmailAndPassword: (params: SignInFormValues) => Promise<SignInResponse>;
+    logoPlacement?: 'inside' | 'outside' | 'none';
     /**
-     * @param provider - The identifier of the social provider (e.g., 'google', 'microsoft', 'github').
-     * @param options - Optional configuration for the social sign-in flow.
-     * @returns A promise that resolves with the sign-in response.
+     * @default undefined
      */
-    withSocialProvider: (provider: string, options: SocialProviderOptions) => Promise<SignInResponse>;
+    logoImageUrl?: string;
     /**
-     * Completes an MFA (Multi-Factor Authentication) step after a primary authentication attempt.
-     * @param mfaToken - The MFA token or code submitted by the user.
-     * @param mfaContext - Optional context or session data from the MFA initiation step.
-     * @returns A promise that resolves with the sign-in response upon successful MFA verification.
+     * @default undefined
      */
-    completeMfaSignIn: (mfaToken: string, mfaContext?: any) => Promise<SignInResponse>;
+    logoLinkUrl?: string;
     /**
-     * Sends a password reset email to the given email address.
-     * @param email - The user's email address.
-     * @returns A promise that resolves when the email is sent.
+     * @default auto
      */
-    sendPasswordResetEmail: (email: string) => Promise<void>;
+    socialButtonsVariant?: 'auto' | 'iconButton' | 'blockButton';
     /**
-     * Resends the email verification link to the user's email address.
-     * @returns A promise that resolves with the sign-in response.
+     * @default bottom
      */
-    resendEmailVerification: () => Promise<ResendEmailVerification>;
+    socialButtonsPlacement?: 'top' | 'bottom';
     /**
-     * Checks the result of a redirect-based sign-in flow, typically used in OAuth or SSO scenarios.
-     * @returns A promise that resolves with the sign-in response or null if no result is available.
+     * enables "Terms" link
      */
-    checkRedirectResult: () => Promise<SignInResponse | null>;
+    termsPageUrl?: string;
+    /**
+     * enables "Help" link
+     */
+    helpPageUrl?: string;
+    /**
+     * enables "Privacy Policy" link
+     */
+    privacyPageUrl?: string;
+};
+type TernSecureTheme = {
+    appearance?: Appearance;
+    layout?: Layout;
+};
+type SignInTheme = TernSecureTheme;
+type SignUpTheme = TernSecureTheme;
+/**
+ * Base UI configuration shared between SignIn and SignUp
+ * @deprecated Use TernSecureTheme instead.
+ */
+interface BaseAuthUIConfig {
+    /** Visual appearance configuration */
+    appearance?: Appearance;
+    /** Application logo URL or SVG string */
+    logo?: string;
+    /** Application name for display */
+    appName?: string;
+    /** Render mode for cross-platform support */
+    renderMode?: 'modal' | 'page' | 'embedded';
+    /** Layout direction */
+    layout?: 'vertical' | 'horizontal';
+    /** Custom loading message */
+    loadingMessage?: string;
+    /** Loading spinner variant */
+    loadingSpinnerVariant?: 'circular' | 'linear' | 'dots';
+    /** Accessibility configuration */
+    a11y?: {
+        /** ARIA labels and descriptions */
+        labels?: Record<string, string>;
+        /** Element to receive initial focus */
+        initialFocus?: string;
+        /** Whether to trap focus within the auth UI */
+        trapFocus?: boolean;
+    };
+}
+/**
+ * Sign-in specific UI configuration
+ * @deprecated Use SignInTheme instead.
+ */
+interface SignInUIConfig extends BaseAuthUIConfig {
+    /** Social sign-in buttons configuration */
+    socialButtons?: {
+        google?: boolean;
+        microsoft?: boolean;
+        github?: boolean;
+        facebook?: boolean;
+        twitter?: boolean;
+        apple?: boolean;
+        linkedin?: boolean;
+        layout?: 'vertical' | 'horizontal';
+        size?: 'small' | 'medium' | 'large';
+    };
+    /** "Remember me" checkbox configuration */
+    rememberMe?: {
+        enabled?: boolean;
+        defaultChecked?: boolean;
+    };
+}
+/**
+ * Sign-up specific UI configuration
+ * @deprecated Use SignUpTheme instead.
+ */
+interface SignUpUIConfig extends BaseAuthUIConfig {
+    /** Password requirements display configuration */
+    passwordRequirements?: {
+        show?: boolean;
+        rules?: Array<{
+            rule: string;
+            description: string;
+        }>;
+    };
+    /** Terms and conditions configuration */
+    terms?: {
+        enabled?: boolean;
+        text?: string;
+        link?: string;
+    };
 }
 
 /**
@@ -741,8 +1085,13 @@ type TernSecureAuthOptions = TernSecureOptionsNavigation & SignInForceRedirectUr
     sdkMetadata?: TernAuthSDK;
     signInUrl?: string;
     signUpUrl?: string;
+    signUpMode?: 'public' | 'restricted' | 'waitlist';
+    passwordAuthentication?: boolean;
     mode?: Mode$1;
     requiresVerification?: boolean;
+    /**
+     * @deprecated will be removed in future releases. please use  ternUIUrl
+     */
     isTernSecureDev?: boolean;
     ternSecureConfig?: TernSecureConfig;
     persistence?: Persistence;
@@ -759,6 +1108,10 @@ type TernSecureAuthOptions = TernSecureOptionsNavigation & SignInForceRedirectUr
         /** rethrow network errors that occur while the offline */
         rethrowOfflineNetworkErrors?: boolean;
     };
+    /**
+     * ReCaptcha V3 Site Key for Firebase App Check
+     */
+    appCheck?: AppCheckConfig;
 };
 /**
  * @deprecated will be removed in future releases.
@@ -812,7 +1165,9 @@ interface TernSecureAuth {
     /** TernSecure API URL */
     apiUrl: string;
     /** TernSecure domain for API string */
-    domain: string;
+    authDomain: string;
+    /** TernSecure Frontend domain for TernSecure UI */
+    frontEndDomain?: string;
     /** TernSecure Proxy url */
     proxyUrl?: string;
     /** TernSecure Instance type */
@@ -845,6 +1200,32 @@ interface TernSecureAuth {
     onAuthStateChanged(callback: (cb: any) => void): () => void;
     /** Sign out the current user */
     signOut: SignOut;
+    /** Mounts a sign-in component
+     * @param targetNode HTMLDivElement where the component will be mounted
+     * @param signInProps Configuration options for the sign-in component
+     */
+    showSignIn: (targetNode: HTMLDivElement, config?: SignInProps) => void;
+    /** Unmount sign-in component
+     * @param targetNode HTMLDivElement where the component is mounted
+    */
+    hideSignIn: (targetNode: HTMLDivElement) => void;
+    /** Mounts a sign-up component
+     * @param targetNode HTMLDivElement where the component will be mounted
+     * @param signUpProps Configuration options for the sign-up component
+    */
+    showSignUp: (targetNode: HTMLDivElement, config?: SignUpProps) => void;
+    /** Unmount sign-up component
+     * @param targetNode HTMLDivElement where the component is mounted
+    */
+    hideSignUp: (targetNode: HTMLDivElement) => void;
+    /** Mounts a user button component
+     * @param targetNode HTMLDivElement where the component will be mounted
+    */
+    showUserButton: (targetNode: HTMLDivElement) => void;
+    /** Unmount user button component
+     * @param targetNode HTMLDivElement where the component is mounted
+    */
+    hideUserButton: (targetNode: HTMLDivElement) => void;
     /** Subscribe to a single event */
     on: onEventListener;
     /** Remove event listener */
@@ -861,6 +1242,7 @@ interface TernSecureAuth {
      * @param {string} to
      */
     constructUrlWithAuthRedirect(to: string): string;
+    constructAfterSignOutUrl(): string;
     /** Navigate to SignIn page */
     redirectToSignIn(options?: SignInRedirectOptions): Promise<unknown>;
     /** Navigate to SignUp page */
@@ -889,12 +1271,18 @@ type TernVerificationResult = (DecodedIdToken & {
     valid: false;
     error: AuthErrorResponse;
 };
+type RoutingOptions = {
+    path: string | undefined;
+    routing?: Extract<RoutingStrategy, 'path'>;
+} | {
+    path?: never;
+    routing?: Extract<RoutingStrategy, 'hash' | 'virtual'>;
+};
+type WithoutRouting<T> = Omit<T, 'path' | 'routing'>;
 /**
  * Props for SignIn component focusing on UI concerns
  */
-type SignInProps = {
-    /** Routing Path */
-    path?: string;
+type SignInProps = RoutingOptions & {
     /** URL to navigate to after successfully sign-in
      * Use this prop to override the redirect URL when needed.
      * @default undefined
@@ -906,18 +1294,40 @@ type SignInProps = {
      * @default undefined
      */
     fallbackRedirectUrl?: string | null;
+    /**
+     * Full URL or path to for the sign in process.
+     * Used to fill the "Sign in" link in the SignUp component.
+     */
+    signInUrl?: string;
+    /**
+     * Full URL or path to for the sign up process.
+     * Used to fill the "Sign up" link in the SignUp component.
+     */
+    signUpUrl?: string;
+    /**
+     * Preferred strategy for sign-in when using email identifier.
+     * Options: 'password' | 'email_code'
+     * @default 'password'
+     */
+    preferredEmailStrategy?: 'password' | 'email_code';
+    /**
+     * Customize UI
+     */
+    appearance?: SignInTheme;
     /** Initial form values */
-    initialValue?: SignInInitialValue;
+    initialValues?: SignInInitialValues & SignUpInitialValues;
     /**
-     * @deprecated this prop will be removed in future releases. Use UI configuration options instead. use onSignInSuccess
-     *
+     * Whether to show the combined email and password form.
+     * If true, the email and password fields will be shown together.
+     * If false, the email field will be shown first, followed by the password field.
+     * @default true
      */
-    onSuccess?: (user: TernSecureUser | null) => void;
+    showCombinedForm?: boolean;
 } & SignUpForceRedirectUrl & SignUpFallbackRedirectUrl & AfterSignOutUrl;
 /**
  * Props for SignUp component focusing on UI concerns
  */
-type SignUpProps = {
+type SignUpProps = RoutingOptions & {
     /** URL to navigate to after successfully sign-up
      * Use this prop to override the redirect URL when needed.
      * @default undefined
@@ -929,15 +1339,60 @@ type SignUpProps = {
      * @default undefined
      */
     fallbackRedirectUrl?: string | null;
+    /**
+     * Full URL or path to for the sign in process.
+     * Used to fill the "Sign in" link in the SignUp component.
+     */
+    signInUrl?: string;
+    /**
+     * Customize UI
+     */
+    appearance?: SignUpTheme;
+    /**
+     * Whether to show the sign up form.
+     * @default true
+     */
+    shouldShowForm?: boolean;
     /** Initial form values */
-    initialValue?: SignUpInitialValue;
-    /** Callbacks */
-    onSubmit?: (values: SignUpFormValues) => Promise<void>;
-    onSuccess?: (user: TernSecureUser | null) => void;
+    initialValues?: SignUpInitialValues;
 } & SignInFallbackRedirectUrl & SignInForceRedirectUrl & AfterSignOutUrl;
+type UserButtonProps = {
+    /**
+     * Controls if the username is displayed next to the trigger button
+     */
+    showName?: boolean;
+    /**
+     * Controls the default state of the UserButton
+     */
+    defaultOpen?: boolean;
+    /**
+     * Full URL or path to navigate to on "Add another account" action.
+     * Multi-session mode only.
+     */
+    signInUrl?: string;
+};
+type SignInModalProps = WithoutRouting<SignInProps>;
+type SignUpModalProps = WithoutRouting<SignUpProps>;
 type SignInRedirectOptions = RedirectOptions;
 type SignUpRedirectOptions = RedirectOptions;
 type RoutingStrategy = 'path' | 'hash' | 'virtual';
+type __internal_ComponentNavigationContext = {
+    /**
+     * The `navigate` reference within the component router context
+     */
+    navigate: (to: string, options?: {
+        searchParams?: URLSearchParams;
+    }) => Promise<unknown>;
+    /**
+     * This path represents the root route for a specific component type and is used
+     * for internal routing and navigation.
+     *
+     * @example
+     * indexPath: '/sign-in'  // When <SignIn path='/sign-in' />
+     * indexPath: '/sign-up'  // When <SignUp path='/sign-up' />
+     */
+    indexPath: string;
+};
 /**
  * Internal is a navigation type that affects the component
  *
@@ -987,139 +1442,19 @@ metadata?: {
      */
     windowNavigate: (to: URL | string) => void;
 }) => Promise<unknown> | unknown;
-
-/**
- * Defines the basic structure for color theming.
- */
-interface ThemeColors {
-    primary?: string;
-    secondary?: string;
-    accent?: string;
-    background?: string;
-    text?: string;
-    error?: string;
-    success?: string;
-}
-/**
- * Defines the basic structure for font theming.
- */
-interface ThemeFonts {
-    primary?: string;
-    secondary?: string;
-}
-/**
- * Defines the basic structure for spacing and layout theming.
- */
-interface ThemeSpacing {
-    small?: string | number;
-    medium?: string | number;
-    large?: string | number;
-}
-/**
- * Defines the basic structure for border radius theming.
- */
-interface ThemeBorderRadius {
-    small?: string | number;
-    medium?: string | number;
-    large?: string | number;
-}
-/**
- * Allows for overriding styles of specific UI components.
- * Properties can be CSS-in-JS objects or class names, depending on implementation.
- */
-interface ThemeComponentStyles {
-    button?: Record<string, any> | string;
-    input?: Record<string, any> | string;
-    card?: Record<string, any> | string;
-    label?: Record<string, any> | string;
-}
-/**
- * Defines the overall appearance/theme configuration.
- * This allows for broad customization of the UI components.
- */
-interface Appearance {
-    colors?: ThemeColors;
-    fonts?: ThemeFonts;
-    spacing?: ThemeSpacing;
-    borderRadius?: ThemeBorderRadius;
-    componentStyles?: ThemeComponentStyles;
-    variables?: Record<string, string | number>;
-}
-/**
- * Base UI configuration shared between SignIn and SignUp
- */
-interface BaseAuthUIConfig {
-    /** Visual appearance configuration */
-    appearance?: Appearance;
-    /** Application logo URL or SVG string */
-    logo?: string;
-    /** Application name for display */
-    appName?: string;
-    /** Render mode for cross-platform support */
-    renderMode?: 'modal' | 'page' | 'embedded';
-    /** Layout direction */
-    layout?: 'vertical' | 'horizontal';
-    /** Custom loading message */
-    loadingMessage?: string;
-    /** Loading spinner variant */
-    loadingSpinnerVariant?: 'circular' | 'linear' | 'dots';
-    /** Accessibility configuration */
-    a11y?: {
-        /** ARIA labels and descriptions */
-        labels?: Record<string, string>;
-        /** Element to receive initial focus */
-        initialFocus?: string;
-        /** Whether to trap focus within the auth UI */
-        trapFocus?: boolean;
-    };
-}
-/**
- * Sign-in specific UI configuration
- */
-interface SignInUIConfig extends BaseAuthUIConfig {
-    /** Social sign-in buttons configuration */
-    socialButtons?: {
-        google?: boolean;
-        microsoft?: boolean;
-        github?: boolean;
-        facebook?: boolean;
-        twitter?: boolean;
-        apple?: boolean;
-        linkedin?: boolean;
-        layout?: 'vertical' | 'horizontal';
-        size?: 'small' | 'medium' | 'large';
-    };
-    /** "Remember me" checkbox configuration */
-    rememberMe?: {
-        enabled?: boolean;
-        defaultChecked?: boolean;
-    };
-    /** Sign-up link configuration */
-    signUpLink?: {
-        enabled?: boolean;
-        text?: string;
-        href?: string;
-    };
-}
-/**
- * Sign-up specific UI configuration
- */
-interface SignUpUIConfig extends BaseAuthUIConfig {
-    /** Password requirements display configuration */
-    passwordRequirements?: {
-        show?: boolean;
-        rules?: Array<{
-            rule: string;
-            description: string;
-        }>;
-    };
-    /** Terms and conditions configuration */
-    terms?: {
-        enabled?: boolean;
-        text?: string;
-        link?: string;
-    };
-}
+type SignInInitialValues = {
+    emailAddress?: string;
+    phoneNumber?: string;
+    username?: string;
+};
+type SignUpInitialValues = {
+    emailAddress?: string;
+    phoneNumber?: string;
+    firstName?: string;
+    lastName?: string;
+    displayName?: string;
+    username?: string;
+};
 
 type Mode = 'browser' | 'server';
 type TernSecureSDK = {
@@ -1283,19 +1618,6 @@ type SignUpPropsTree = {
 type SignInRedirectOptionss = RedirectOptions;
 type SignUpRedirectOptionss = RedirectOptions;
 
-interface TernSecureApiErrorJSON {
-    code: string;
-    message: string;
-}
-interface TernSecureFireRestErrorJSON extends TernSecureApiErrorJSON {
-    domain: string;
-    reason: string;
-}
-interface SessionJson extends IdTokenResult {
-    status: SessionStatus;
-    user?: TernSecureUser;
-}
-
 type UseAuthReturn = {
     userId: string | null | undefined;
     isLoaded: boolean;
@@ -1336,5 +1658,13 @@ type DomainOrProxyUrl = {
  * @internal
  */
 type Autocomplete<U extends T, T = string> = U | (T & Record<never, never>);
+/**
+ * Omit without union flattening
+ * */
+type Without<T, W> = {
+    [P in keyof T as Exclude<P, W>]: T[P];
+};
+
+type Attribute = 'email_address' | 'phone_number' | 'username' | 'first_name' | 'last_name' | 'password' | 'web3_wallet' | 'authenticator_app' | 'backup_code' | 'passkey';
 
-export { type ActiveSession, type AdminConfigValidationResult, type AfterSignOutUrl, type Appearance, type AuthEndpoint, type AuthErrorCode, type AuthErrorResponse, type AuthErrorTree, type AuthProviderStatus, type Autocomplete, type BaseAuthUIConfig, type CheckAuthorizationFromSessionClaims, type CheckCustomClaims, type ConfigValidationResult, type CookieEndpointConfig, type CookieOptions, type CookieOpts, type CookieResource, type CookieStore, type CookieSubEndpoint, type CorsOptions, type CreateActiveSession, type CreateActiveSessionParams, type CustomNavigation, DEFAULT_TERN_SECURE_STATE, type DecodedIdToken, type DomainOrProxyUrl, ERRORS, type EndpointConfig, type ErrorCode, type ExpiredSession, type FirebaseClaims, type FirebaseState, type IdTokenResult, type InitialState, type InstanceType, type JWTPayload, type JWTProtectedHeader, type Jwt, type LegacyRedirectProps, type ListenerCallback, type NavigateOptions, type ParsedToken, type PendingSession, type Persistence, type ProviderUserInfo, type RateLimitOptions, type RedirectOptions, type RedirectUrlProp, type ResendEmailVerification, type RoutingStrategy, type SecurityOptions, type ServerConfigValidationResult, type SessionCookieConfig, type SessionEndpointConfig, type SessionJson, type SessionParams, type SessionResource, type SessionResult, type SessionStatus, type SessionSubEndpoint, type SharedSignInAuthObjectProperties, type SignInErrorResponse, type SignInFallbackRedirectUrl, type SignInForceRedirectUrl, type SignInFormValues, type SignInInitialValue, type SignInPendingResponse, type SignInProps, type SignInPropsTree, type SignInRedirectOptions, type SignInRedirectOptionss, type SignInResource, type SignInResponse, type SignInStatus, type SignInSuccessResponse, type SignInUIConfig, type SignOut, type SignOutOptions, type SignOutOptionsTree, type SignUpErrorResponse, type SignUpFallbackRedirectUrl, type SignUpForceRedirectUrl, type SignUpFormValues, type SignUpFormValuesTree, type SignUpInitialValue, type SignUpInitialValueTree, type SignUpProps, type SignUpPropsTree, type SignUpRedirectOptions, type SignUpRedirectOptionss, type SignUpResource, type SignUpResponse, type SignUpStatus, type SignUpSuccessResponse, type SignUpUIConfig, type SignedInSession, type SocialProviderOptions, type TernAuthEventPayload, type TernAuthListenerEvent, type TernAuthListenerEventPayload, type TernAuthSDK, type TernSecureAPIError, type TernSecureAdminConfig, type TernSecureApiErrorJSON, type TernSecureAuth, type TernSecureAuthFactory, type TernSecureAuthOptions, type TernSecureAuthProvider, type TernSecureAuthStatus, type TernSecureConfig, type TernSecureFireRestError, type TernSecureFireRestErrorJSON, type TernSecureHandlerOptions, type TernSecureInitialState, type TernSecureInstance, type TernSecureInstanceTree, type TernSecureInstanceTreeOptions, type TernSecureInstanceTreeStatus, type TernSecureOptions, type TernSecureResources, type TernSecureSDK, type TernSecureServerConfig, type TernSecureSessionTree, type TernSecureState, type TernSecureStateExtended, type TernSecureUser, type TernSecureUserData, type TernVerificationResult, type ThemeBorderRadius, type ThemeColors, type ThemeComponentStyles, type ThemeFonts, type ThemeSpacing, type TokenCookieConfig, type UnsubscribeCallback, type UseAuthReturn, type UseSignInReturn, type UseSignUpReturn, type UserCredential, type UserInfo, type VerifiedTokens, isSignInResponseTree };
+export { type ActiveSession, type AdminConfigValidationResult, type AfterSignOutUrl, type AppCheckConfig, type Appearance, type AttemptFirstFactorParams, type Attribute, type AuthEndpoint, type AuthErrorCode, type AuthErrorResponse, type AuthErrorTree, type AuthProviderStatus, type Autocomplete, type BackupCodeAttempt, type BackupCodeFactor, type BaseAuthUIConfig, type CheckAuthorizationFromSessionClaims, type CheckCustomClaims, type ConfigValidationResult, type CookieEndpointConfig, type CookieOptions, type CookieOpts, type CookieResource, type CookieStore, type CookieSubEndpoint, type CorsOptions, type CreateActiveSession, type CreateActiveSessionParams, type CustomNavigation, DEFAULT_TERN_SECURE_STATE, type DecodedIdToken, type DomainOrProxyUrl, ERRORS, type EmailCodeAttempt, type EmailCodeConfig, type EmailCodeFactor, type EmailLinkConfig, type EmailLinkFactor, type EndpointConfig, type EnterpriseSSOConfig, type EnterpriseSSOFactor, type ErrorCode, type ExpiredSession, type FirebaseClaims, type FirebaseState, type IdTokenResult, type InitialState, type InstanceType, type JWTPayload, type JWTProtectedHeader, type Jwt, type Layout, type LegacyRedirectProps, type ListenerCallback, type NavigateOptions, type ParsedToken, type PassKeyConfig, type PasskeyFactor, type PasswordAttempt, type PasswordFactor, type PendingSession, type Persistence, type PhoneCodeAttempt, type PhoneCodeConfig, type PhoneCodeFactor, type PhoneCodeSecondFactorConfig, type ProviderUserInfo, type RateLimitOptions, type RedirectOptions, type RedirectUrlProp, type ResendEmailVerification, type ResetPasswordCodeFactor, type ResetPasswordEmailCodeAttempt, type ResetPasswordEmailCodeFactor, type ResetPasswordEmailCodeFactorConfig, type ResetPasswordPhoneCodeAttempt, type ResetPasswordPhoneCodeFactor, type ResetPasswordPhoneCodeFactorConfig, type RoutingOptions, type RoutingStrategy, type SecurityOptions, type ServerConfigValidationResult, type SessionCookieConfig, type SessionEndpointConfig, type SessionJson, type SessionParams, type SessionResource, type SessionResult, type SessionStatus, type SessionSubEndpoint, type SharedSignInAuthObjectProperties, type SignInCreateParams, type SignInEndpointConfig, type SignInErrorResponse, type SignInFactor, type SignInFallbackRedirectUrl, type SignInFirstFactor, type SignInForceRedirectUrl, type SignInInitialValue, type SignInInitialValues, type SignInJson, type SignInModalProps, type SignInPasswordParams, type SignInPendingResponse, type SignInPhoneParams, type SignInProps, type SignInPropsTree, type SignInRedirectOptions, type SignInRedirectOptionss, type SignInResource, type SignInResponse, type SignInSecondFactor, type SignInStatus, type SignInSubEndpoint, type SignInSuccessResponse, type SignInTheme, type SignInUIConfig, type SignInVerificationResponse, type SignOut, type SignOutOptions, type SignOutOptionsTree, type SignUpErrorResponse, type SignUpFallbackRedirectUrl, type SignUpForceRedirectUrl, type SignUpFormValues, type SignUpFormValuesTree, type SignUpInitialValue, type SignUpInitialValueTree, type SignUpInitialValues, type SignUpJson, type SignUpMissingRequirementsResponse, type SignUpModalProps, type SignUpProps, type SignUpPropsTree, type SignUpRedirectOptions, type SignUpRedirectOptionss, type SignUpResource, type SignUpResponse, type SignUpStatus, type SignUpSuccessResponse, type SignUpTheme, type SignUpUIConfig, type SignedInSession, type SocialProviderOptions, type TOTPAttempt, type TOTPFactor, type TernAuthEventPayload, type TernAuthListenerEvent, type TernAuthListenerEventPayload, type TernAuthSDK, type TernSecureAPIError, type TernSecureAdminConfig, type TernSecureApiErrorJSON, type TernSecureAuth, type TernSecureAuthFactory, type TernSecureAuthOptions, type TernSecureAuthProvider, type TernSecureAuthStatus, type TernSecureConfig, type TernSecureFireRestError, type TernSecureFireRestErrorJSON, type TernSecureHandlerOptions, type TernSecureInitialState, type TernSecureInstance, type TernSecureInstanceTree, type TernSecureInstanceTreeOptions, type TernSecureInstanceTreeStatus, type TernSecureOptions, type TernSecureResourceJSON, type TernSecureResources, type TernSecureSDK, type TernSecureServerConfig, type TernSecureSessionTree, type TernSecureState, type TernSecureStateExtended, type TernSecureTheme, type TernSecureUser, type TernSecureUserData, type TernVerificationResult, type ThemeBorderRadius, type ThemeColors, type ThemeComponentStyles, type ThemeFonts, type ThemeSpacing, type TokenCookieConfig, type UnsubscribeCallback, type UnverifiedField, type UseAuthReturn, type UseSignInReturn, type UseSignUpReturn, type UserButtonProps, type UserCredential, type UserInfo, type VerifiedTokens, type Without, type WithoutRouting, type __internal_ComponentNavigationContext, isSignInResponseTree };