@thunderid/browser 0.1.0 → 0.2.0

package/dist/index.js

@@ -32,6 +32,43 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 
+//#endregion
+//#region src/constants/SPAConstants.ts
+/**
+* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+*
+* WSO2 LLC. licenses this file to you under the Apache License,
+* Version 2.0 (the "License"); you may not use this file except
+* in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing,
+* software distributed under the License is distributed on an
+* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+* KIND, either express or implied. See the License for the
+* specific language governing permissions and limitations
+* under the License.
+*/
+const ERROR = "error";
+const ERROR_DESCRIPTION = "error_description";
+const CUSTOM_GRANT_CONFIG = "custom_grant_config";
+const STATE_QUERY = "state";
+const OP_IFRAME = "opIFrame";
+const RP_IFRAME = "rpIFrame";
+const PROMPT_NONE_IFRAME = "promptNoneIFrame";
+const STATE = "Y2hlY2tTZXNzaW9u";
+const SILENT_SIGN_IN_STATE = "sign-in-silently";
+const INITIALIZED_SILENT_SIGN_IN = "initialized-silent-sign-in";
+const PROMPT_NONE_REQUEST_SENT = "promptNoneRequestSent";
+const ACCESS_TOKEN_INVALID = "Access token is invalid";
+const REFRESH_ACCESS_TOKEN_ERR0R = "refresh-access-token-error";
+const TOKEN_REQUEST_CONFIG_KEY = "token_request_config";
+const CHECK_SESSION_SIGNED_IN = "check_session_signed_in";
+const CHECK_SESSION_SIGNED_OUT = "check_session_signed_out";
+const SET_SESSION_STATE_FROM_IFRAME = "set_session_state_from_iframe";
+
 //#endregion
 //#region src/FetchHttpClient.ts
 /**
@@ -105,98 +142,6 @@ var FetchHttpClient = class FetchHttpClient extends HttpClient {
 };
 var FetchHttpClient_default = FetchHttpClient;
 
-//#endregion
-//#region src/constants/SPAConstants.ts
-/**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-const ERROR = "error";
-const ERROR_DESCRIPTION = "error_description";
-const CUSTOM_GRANT_CONFIG = "custom_grant_config";
-const STATE_QUERY = "state";
-const OP_IFRAME = "opIFrame";
-const RP_IFRAME = "rpIFrame";
-const PROMPT_NONE_IFRAME = "promptNoneIFrame";
-const STATE = "Y2hlY2tTZXNzaW9u";
-const SILENT_SIGN_IN_STATE = "sign-in-silently";
-const INITIALIZED_SILENT_SIGN_IN = "initialized-silent-sign-in";
-const PROMPT_NONE_REQUEST_SENT = "promptNoneRequestSent";
-const ACCESS_TOKEN_INVALID = "Access token is invalid";
-const REFRESH_ACCESS_TOKEN_ERR0R = "refresh-access-token-error";
-const TOKEN_REQUEST_CONFIG_KEY = "token_request_config";
-const CHECK_SESSION_SIGNED_IN = "check_session_signed_in";
-const CHECK_SESSION_SIGNED_OUT = "check_session_signed_out";
-const SET_SESSION_STATE_FROM_IFRAME = "set_session_state_from_iframe";
-
-//#endregion
-//#region src/utils/navigate.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Navigates to a new URL within the browser.
-*
-* - For same-origin URLs (relative paths or absolute URLs with the same origin),
-*   uses the History API and dispatches a `popstate` event (SPA navigation).
-* - For cross-origin URLs, performs a full page load using `window.location.assign`.
-*
-* This allows seamless navigation for both SPA routes and external links.
-*
-* @param url - The target URL to navigate to. Can be a path, query, or absolute URL.
-*
-* @example
-* ```typescript
-* // SPA navigation (same origin)
-* navigate('/dashboard');
-*
-* // SPA navigation with query
-* navigate('/search?q=thunderid');
-*
-* // Cross-origin navigation (full page load)
-* navigate('https://accounts.asgardeo.io/t/dxlab/accountrecoveryendpoint/register.do');
-* ```
-*/
-const navigate = (url) => {
-	try {
-		const targetUrl = new URL(url, window.location.origin);
-		if (targetUrl.origin === window.location.origin) {
-			window.history.pushState(null, "", targetUrl.pathname + targetUrl.search + targetUrl.hash);
-			window.dispatchEvent(new PopStateEvent("popstate", { state: null }));
-		} else window.location.assign(targetUrl.href);
-	} catch {
-		window.location.assign(url);
-	}
-};
-var navigate_default = navigate;
-
 //#endregion
 //#region src/models/BrowserStorage.ts
 /**
@@ -304,22 +249,22 @@ var SPAUtils = class SPAUtils {
 		history.pushState({}, document.title, url.replace(/\?code=.*$/, ""));
 	}
 	/**
-	* Retrieves a PKCE verifier from sessionStorage.
+	* Retrieves a PKCE verifier from storage.
 	*
 	* @param pkceKey - The storage key for the PKCE verifier.
 	* @returns The stored verifier string, or an empty string if not found.
 	*/
 	static getPKCE(pkceKey) {
-		return sessionStorage.getItem(pkceKey) ?? "";
+		return localStorage.getItem(pkceKey) ?? "";
 	}
 	/**
-	* Persists a PKCE verifier in sessionStorage.
+	* Persists a PKCE verifier in storage.
 	*
 	* @param pkceKey - The storage key.
 	* @param pkce - The PKCE verifier value.
 	*/
 	static setPKCE(pkceKey, pkce) {
-		sessionStorage.setItem(pkceKey, pkce);
+		localStorage.setItem(pkceKey, pkce);
 	}
 	/**
 	* Persists the post-sign-out redirect URL for the given client and instance.
@@ -342,12 +287,12 @@ var SPAUtils = class SPAUtils {
 		return sessionStorage.getItem(`${OIDCRequestConstants.SignOut.Storage.StorageKeys.SIGN_OUT_URL}-instance_${instanceId}-${clientId}`) ?? "";
 	}
 	/**
-	* Removes a PKCE verifier from sessionStorage.
+	* Removes a PKCE verifier from storage.
 	*
 	* @param pkceKey - The storage key to remove.
 	*/
 	static removePKCE(pkceKey) {
-		sessionStorage.removeItem(pkceKey);
+		localStorage.removeItem(pkceKey);
 	}
 	/**
 	* Determines whether the `signIn` method should continue based on the `callOnlyOnRedirect` flag.
@@ -887,6 +832,61 @@ var AuthenticationHelper = class {
 };
 var AuthenticationHelper_default = AuthenticationHelper;
 
+//#endregion
+//#region src/utils/navigate.ts
+/**
+* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+*
+* WSO2 LLC. licenses this file to you under the Apache License,
+* Version 2.0 (the "License"); you may not use this file except
+* in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing,
+* software distributed under the License is distributed on an
+* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+* KIND, either express or implied. See the License for the
+* specific language governing permissions and limitations
+* under the License.
+*/
+/**
+* Navigates to a new URL within the browser.
+*
+* - For same-origin URLs (relative paths or absolute URLs with the same origin),
+*   uses the History API and dispatches a `popstate` event (SPA navigation).
+* - For cross-origin URLs, performs a full page load using `window.location.assign`.
+*
+* This allows seamless navigation for both SPA routes and external links.
+*
+* @param url - The target URL to navigate to. Can be a path, query, or absolute URL.
+*
+* @example
+* ```typescript
+* // SPA navigation (same origin)
+* navigate('/dashboard');
+*
+* // SPA navigation with query
+* navigate('/search?q=thunderid');
+*
+* // Cross-origin navigation (full page load)
+* navigate('https://localhost:8090/accountrecoveryendpoint/register.do');
+* ```
+*/
+const navigate = (url) => {
+	try {
+		const targetUrl = new URL(url, window.location.origin);
+		if (targetUrl.origin === window.location.origin) {
+			window.history.pushState(null, "", targetUrl.pathname + targetUrl.search + targetUrl.hash);
+			window.dispatchEvent(new PopStateEvent("popstate", { state: null }));
+		} else window.location.assign(targetUrl.href);
+	} catch {
+		window.location.assign(url);
+	}
+};
+var navigate_default = navigate;
+
 //#endregion
 //#region src/utils/SessionManagementHelper.ts
 /**
@@ -2847,7 +2847,7 @@ var ThunderIDBrowserClient = class ThunderIDBrowserClient extends ThunderIDJavaS
 				SPAUtils_default.setPKCE(pkceKey, await this.getPKCECode(resolvedState));
 			}
 			if (tokenRequestConfig) sm.setTemporaryDataParameter(TOKEN_REQUEST_CONFIG_KEY, JSON.stringify(tokenRequestConfig));
-			if (signInConfig?.["response_mode"] === "direct") {
+			if (signInConfig?.response_mode === "direct") {
 				const authorizeUrl = new URL(url);
 				return initializeEmbeddedSignInFlow({
 					url: `${authorizeUrl.origin}${authorizeUrl.pathname}`,
@@ -2969,8 +2969,7 @@ var ThunderIDBrowserClient = class ThunderIDBrowserClient extends ThunderIDJavaS
 		if (config.signInRequired) await this._validateMethod();
 		if (!config.id) return Promise.reject(new ThunderIDAuthException("SPA-AUTH_CLIENT-RCG-NF01", "The custom grant request id not found.", "Set the `id` attribute on the token exchange config."));
 		const response = await this._authHelper.exchangeToken(config, (cfg) => this._enableRetrievingSignOutURLFromSession(cfg));
-		const cb = this._onCustomGrant.get(config.id);
-		cb && cb(response);
+		this._onCustomGrant.get(config.id)?.(response);
 		return response;
 	}
 	async reInitialize(config) {
@@ -3005,8 +3004,7 @@ var ThunderIDBrowserClient = class ThunderIDBrowserClient extends ThunderIDJavaS
 		return true;
 	}
 	async decodeJwtToken(token) {
-		if (!token) return void 0;
-		return this.getCryptoHelper()?.decodeJwtToken(token);
+		return this.getCryptoHelper().decodeJwtToken(token);
 	}
 	async on(hook, callback, id) {
 		await this.isInitialized();
@@ -3032,10 +3030,10 @@ var ThunderIDBrowserClient = class ThunderIDBrowserClient extends ThunderIDJavaS
 				this._httpFinishCallback = callback;
 				break;
 			case "http-request-start":
-				this._httpClient?.setHttpRequestStartCallback && this._httpClient.setHttpRequestStartCallback(callback);
+				this._httpClient?.setHttpRequestStartCallback?.(callback);
 				break;
 			case "http-request-success":
-				this._httpClient?.setHttpRequestSuccessCallback && this._httpClient.setHttpRequestSuccessCallback(callback);
+				this._httpClient?.setHttpRequestSuccessCallback?.(callback);
 				break;
 			case "custom-grant":
 				id && this._onCustomGrant.set(id, callback);