@thunderid/browser 1.0.7 → 1.2.0

package/dist/models/BrowserConfig.d.ts

@@ -9,12 +9,6 @@ export interface BrowserClientConfig {
      * @default BrowserStorage.SessionStorage
      */
     storage?: BrowserStorage | 'sessionStorage' | 'localStorage' | 'browserMemory';
-    /** Enable OIDC Session Management via RP Iframe. Requires same-domain or third-party cookies. */
-    syncSession?: boolean;
-    /** Interval in seconds between session-check polls. @default 3 */
-    checkSessionInterval?: number;
-    /** Interval in seconds for silent token refresh. @default 300 */
-    sessionRefreshInterval?: number;
     /** Allowed external URL prefixes for `httpRequest` calls. */
     allowedExternalUrls?: string[];
     /** Additional query params to append to every authorize request. */

package/dist/models/BrowserConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BrowserConfig.d.ts","sourceRoot":"","sources":["../../src/models/BrowserConfig.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,gBAAgB,EAAC,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAC,cAAc,EAAC,MAAM,kBAAkB,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,OAAO,CAAC,EAAE,cAAc,GAAG,gBAAgB,GAAG,cAAc,GAAG,eAAe,CAAC;IAC/E,iGAAiG;IACjG,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,gEAAgE;IAChE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,2EAA2E;IAC3E,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,+FAA+F;AAC/F,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"BrowserConfig.d.ts","sourceRoot":"","sources":["../../src/models/BrowserConfig.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,gBAAgB,EAAC,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAC,cAAc,EAAC,MAAM,kBAAkB,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,OAAO,CAAC,EAAE,cAAc,GAAG,gBAAgB,GAAG,cAAc,GAAG,eAAe,CAAC;IAC/E,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,gEAAgE;IAChE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,2EAA2E;IAC3E,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,+FAA+F;AAC/F,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC"}

package/dist/utils/AuthenticationHelper.d.ts

@@ -1,14 +1,9 @@
-import { User, IsomorphicCrypto, StorageManager, IdToken, ExtendedAuthorizeRequestUrlParams, OIDCEndpoints, TokenResponse, HttpClient, HttpError, HttpRequestConfig, HttpResponse } from '@thunderid/javascript';
+import { User, IsomorphicCrypto, StorageManager, IdToken, OIDCEndpoints, TokenResponse, HttpClient, HttpError, HttpRequestConfig, HttpResponse } from '@thunderid/javascript';
 import SPAHelper from './SPAHelper';
 import { SPATokenExchangeConfig } from '../models/TokenExchangeConfig';
-interface SessionManagementHelperInterface {
-    initialize(clientId: string, checkSessionEndpoint: string, getSessionState: () => Promise<string>, interval: number, sessionRefreshInterval: number, redirectURL: string, getSignInUrl: (params?: ExtendedAuthorizeRequestUrlParams) => Promise<string>): void;
-    receivePromptNoneResponse(setSessionState?: (sessionState: string | null) => Promise<void>): Promise<boolean>;
-    reset(): void;
-}
 /**
  * Browser-level authentication helper that orchestrates HTTP requests with token attachment,
- * automatic token refresh, session management, and the silent sign-in flow.
+ * automatic token refresh, and the silent sign-in flow.
  *
  * @typeParam T - The browser client config extension type.
  */
@@ -59,16 +54,6 @@ declare class AuthenticationHelper<T> {
      * @param httpClient - The HTTP client to disable.
      */
     disableHttpHandler(httpClient: HttpClient): void;
-    /**
-     * Initializes OIDC Session Management via an RP iframe.
-     *
-     * @param config - The current auth config.
-     * @param oidcEndpoints - Resolved OIDC provider endpoints.
-     * @param getSessionState - Returns the current session state from storage.
-     * @param getAuthzURL - Builds an authorization URL with optional params.
-     * @param sessionManagementHelper - The session management helper instance.
-     */
-    initializeSessionManger(config: any, oidcEndpoints: OIDCEndpoints, getSessionState: () => Promise<string>, getAuthzURL: (params?: ExtendedAuthorizeRequestUrlParams) => Promise<string>, sessionManagementHelper: SessionManagementHelperInterface): void;
     /**
      * Executes a custom token exchange grant, enforcing `allowedExternalUrls` rules when applicable.
      *
@@ -115,29 +100,33 @@ declare class AuthenticationHelper<T> {
      */
     httpRequestAll(requestConfigs: HttpRequestConfig[], httpClient: HttpClient, isHttpHandlerEnabled?: boolean, httpErrorCallback?: (error: HttpError) => void | Promise<void>, httpFinishCallback?: () => void): Promise<HttpResponse[] | undefined>;
     /**
-     * Executes the silent sign-in flow using a prompt-none request via an iFrame.
+     * Executes the silent sign-in flow by loading a `prompt=none` authorize request in a hidden iframe.
      *
      * @param constructSilentSignInUrl - Builds the prompt-none authorize URL.
      * @param requestAccessToken - Exchanges the returned code for tokens.
-     * @param sessionManagementHelper - Handles the iFrame prompt-none response.
      * @param additionalParams - Extra authorize request params.
      * @param tokenRequestConfig - Additional params for the token request.
      * @returns The user session, or `false` if the user is not signed in.
      */
-    signInSilently(constructSilentSignInUrl: (additionalParams?: Record<string, string | boolean>) => Promise<string>, requestAccessToken: (authzCode: string, sessionState: string, state: string, tokenRequestConfig?: {
+    signInSilently(constructSilentSignInUrl: (additionalParams?: Record<string, string | boolean>) => Promise<string>, requestAccessToken: (authzCode: string, state: string, tokenRequestConfig?: {
         params: Record<string, unknown>;
-    }) => Promise<User>, sessionManagementHelper: SessionManagementHelperInterface, additionalParams?: Record<string, string | boolean>, tokenRequestConfig?: {
+    }) => Promise<User>, additionalParams?: Record<string, string | boolean>, tokenRequestConfig?: {
         params: Record<string, unknown>;
     }): Promise<User | boolean>;
+    /**
+     * Handles the page load inside the silent sign-in iframe: relays the authorization response to the
+     * parent window and blanks the iframe.
+     *
+     * @returns `true` if the current page load was a silent sign-in response.
+     */
+    handleSilentSignInResponse(): Promise<boolean>;
     /**
      * Handles the early-return path of `signIn()` when a session already exists
-     * or the page is handling a prompt-none response.
+     * or the page is handling a silent sign-in response.
      *
-     * @param shouldStopAuthn - Returns `true` if we should short-circuit and return early.
-     * @param checkSession - Callback to initialize OIDC session management.
      * @returns The current user if already signed in, or `undefined` to continue normal sign-in.
      */
-    handleSignIn(shouldStopAuthn: () => Promise<boolean>, checkSession: () => Promise<void>): Promise<User | undefined>;
+    handleSignIn(): Promise<User | undefined>;
     /**
      * Attaches the access token (or IDP token) to an HTTP request config's `Authorization` header.
      *

package/dist/utils/AuthenticationHelper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthenticationHelper.d.ts","sourceRoot":"","sources":["../../src/utils/AuthenticationHelper.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,IAAI,EACJ,gBAAgB,EAChB,cAAc,EACd,OAAO,EACP,iCAAiC,EACjC,aAAa,EACb,aAAa,EAEb,UAAU,EACV,SAAS,EACT,iBAAiB,EACjB,YAAY,EACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,SAAS,MAAM,aAAa,CAAC;AAapC,OAAO,EAAC,sBAAsB,EAAC,MAAM,+BAA+B,CAAC;AAwBrE,UAAU,gCAAgC;IACxC,UAAU,CACR,QAAQ,EAAE,MAAM,EAChB,oBAAoB,EAAE,MAAM,EAC5B,eAAe,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EACtC,QAAQ,EAAE,MAAM,EAChB,sBAAsB,EAAE,MAAM,EAC9B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,iCAAiC,KAAK,OAAO,CAAC,MAAM,CAAC,GAC5E,IAAI,CAAC;IACR,yBAAyB,CAAC,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9G,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;GAKG;AACH,cAAM,oBAAoB,CAAC,CAAC;IAC1B,OAAO,CAAC,eAAe,CAAoB;IAC3C,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,kBAAkB,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,mBAAmB,CAAsC;IACjE,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,kBAAkB,CAAwB;IAClD,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,kBAAkB,CAA2C;IACrE,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,WAAW,CAAwB;IAC3C,OAAO,CAAC,2BAA2B,CAA+B;IAClE,OAAO,CAAC,cAAc,CAA+E;IACrG,OAAO,CAAC,YAAY,CAAoD;IAExE;;;;;OAKG;gBAED,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,EACjC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,kBAAkB,EAAE,MAAM,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;QACxD,cAAc,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,UAAU,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,iBAAiB,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,SAAS,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,UAAU,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,0BAA0B,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;QACzD,aAAa,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,OAAO,CAAC,QAAQ,GAAG,aAAa,GAAG,IAAI,CAAC,CAAC;QAC5F,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAChE;IAmBH;;;;OAIG;IACI,iBAAiB,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAItD;;;;OAIG;IACI,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAIvD;;;;;;;;OAQG;IACI,uBAAuB,CAC5B,MAAM,EAAE,GAAG,EACX,aAAa,EAAE,aAAa,EAC5B,eAAe,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EACtC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,iCAAiC,KAAK,OAAO,CAAC,MAAM,CAAC,EAC5E,uBAAuB,EAAE,gCAAgC,GACxD,IAAI;IAYP;;;;;;OAMG;IACU,aAAa,CACxB,MAAM,EAAE,sBAAsB,EAC9B,qCAAqC,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,GAC/E,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IA4C3B;;OAEG;IACU,wBAAwB,IAAI,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAU/E;;;;;OAKG;IACU,kBAAkB,CAC7B,qCAAqC,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,GAC/E,OAAO,CAAC,IAAI,CAAC;YAoBF,mBAAmB;IAqBjC;;;;;;;;;;;OAWG;IACU,WAAW,CACtB,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,iBAAiB,EAChC,oBAAoB,CAAC,EAAE,OAAO,EAC9B,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC9D,kBAAkB,CAAC,EAAE,MAAM,IAAI,EAC/B,qCAAqC,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,GAC/E,OAAO,CAAC,YAAY,CAAC;IAyExB;;;;;;;;;;OAUG;IACU,cAAc,CACzB,cAAc,EAAE,iBAAiB,EAAE,EACnC,UAAU,EAAE,UAAU,EACtB,oBAAoB,CAAC,EAAE,OAAO,EAC9B,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC9D,kBAAkB,CAAC,EAAE,MAAM,IAAI,GAC9B,OAAO,CAAC,YAAY,EAAE,GAAG,SAAS,CAAC;IAgEtC;;;;;;;;;OASG;IACU,cAAc,CACzB,wBAAwB,EAAE,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,EAClG,kBAAkB,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,kBAAkB,CAAC,EAAE;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAC,KACnD,OAAO,CAAC,IAAI,CAAC,EAClB,uBAAuB,EAAE,gCAAgC,EACzD,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACnD,kBAAkB,CAAC,EAAE;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAC,GACrD,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;IA8D1B;;;;;;;OAOG;IACU,YAAY,CACvB,eAAe,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EACvC,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IA2C5B;;;;OAIG;IACU,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBlF,gEAAgE;IACnD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrC;;;;OAIG;IACU,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIpE,gEAAgE;IACnD,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAInD,uCAAuC;IAC1B,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAI1C,oDAAoD;IACvC,0BAA0B,IAAI,OAAO,CAAC,aAAa,CAAC;IAIjE;;;;OAIG;IACU,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIhE,qDAAqD;IACxC,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;IAIjD,mCAAmC;IAC5B,iBAAiB,IAAI,cAAc,CAAC,CAAC,CAAC;IAI7C,uDAAuD;IAC1C,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;CAG5C;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"AuthenticationHelper.d.ts","sourceRoot":"","sources":["../../src/utils/AuthenticationHelper.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,IAAI,EACJ,gBAAgB,EAChB,cAAc,EACd,OAAO,EACP,aAAa,EACb,aAAa,EAEb,UAAU,EACV,SAAS,EACT,iBAAiB,EACjB,YAAY,EACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,SAAS,MAAM,aAAa,CAAC;AAapC,OAAO,EAAC,sBAAsB,EAAC,MAAM,+BAA+B,CAAC;AAqBrE;;;;;GAKG;AACH,cAAM,oBAAoB,CAAC,CAAC;IAC1B,OAAO,CAAC,eAAe,CAAoB;IAC3C,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,kBAAkB,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,mBAAmB,CAAsC;IACjE,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,kBAAkB,CAAwB;IAClD,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,kBAAkB,CAA2C;IACrE,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,WAAW,CAAwB;IAC3C,OAAO,CAAC,2BAA2B,CAA+B;IAClE,OAAO,CAAC,cAAc,CAA+E;IACrG,OAAO,CAAC,YAAY,CAAoD;IAExE;;;;;OAKG;gBAED,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,EACjC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,kBAAkB,EAAE,MAAM,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;QACxD,cAAc,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,UAAU,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,iBAAiB,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,SAAS,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,UAAU,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,0BAA0B,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;QACzD,aAAa,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,OAAO,CAAC,QAAQ,GAAG,aAAa,GAAG,IAAI,CAAC,CAAC;QAC5F,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAChE;IAmBH;;;;OAIG;IACI,iBAAiB,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAItD;;;;OAIG;IACI,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAIvD;;;;;;OAMG;IACU,aAAa,CACxB,MAAM,EAAE,sBAAsB,EAC9B,qCAAqC,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,GAC/E,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IA4C3B;;OAEG;IACU,wBAAwB,IAAI,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAU/E;;;;;OAKG;IACU,kBAAkB,CAC7B,qCAAqC,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,GAC/E,OAAO,CAAC,IAAI,CAAC;YAoBF,mBAAmB;IAqBjC;;;;;;;;;;;OAWG;IACU,WAAW,CACtB,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,iBAAiB,EAChC,oBAAoB,CAAC,EAAE,OAAO,EAC9B,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC9D,kBAAkB,CAAC,EAAE,MAAM,IAAI,EAC/B,qCAAqC,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,GAC/E,OAAO,CAAC,YAAY,CAAC;IAyExB;;;;;;;;;;OAUG;IACU,cAAc,CACzB,cAAc,EAAE,iBAAiB,EAAE,EACnC,UAAU,EAAE,UAAU,EACtB,oBAAoB,CAAC,EAAE,OAAO,EAC9B,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC9D,kBAAkB,CAAC,EAAE,MAAM,IAAI,GAC9B,OAAO,CAAC,YAAY,EAAE,GAAG,SAAS,CAAC;IAgEtC;;;;;;;;OAQG;IACU,cAAc,CACzB,wBAAwB,EAAE,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,EAClG,kBAAkB,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,kBAAkB,CAAC,EAAE;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAC,KACnD,OAAO,CAAC,IAAI,CAAC,EAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACnD,kBAAkB,CAAC,EAAE;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAC,GACrD,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;IAgE1B;;;;;OAKG;IACU,0BAA0B,IAAI,OAAO,CAAC,OAAO,CAAC;IAuB3D;;;;;OAKG;IACU,YAAY,IAAI,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAmCtD;;;;OAIG;IACU,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBlF,gEAAgE;IACnD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrC;;;;OAIG;IACU,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIpE,gEAAgE;IACnD,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAInD,uCAAuC;IAC1B,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAI1C,oDAAoD;IACvC,0BAA0B,IAAI,OAAO,CAAC,aAAa,CAAC;IAIjE;;;;OAIG;IACU,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIhE,qDAAqD;IACxC,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;IAIjD,mCAAmC;IAC5B,iBAAiB,IAAI,cAAc,CAAC,CAAC,CAAC;IAI7C,uDAAuD;IAC1C,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;CAG5C;AAED,eAAe,oBAAoB,CAAC"}

package/dist/utils/SPAUtils.d.ts

@@ -62,10 +62,6 @@ declare class SPAUtils {
      * (auth code or error is present in the URL, but not a silent flow).
      */
     static wasSignInCalled(): boolean;
-    /**
-     * Returns `true` if a silent sign-in was previously initialized in this session.
-     */
-    static wasSilentSignInCalled(): boolean;
     /**
      * Checks whether the current URL indicates a successful sign-out redirect.
      * Clears the query string and session data if `true`.
@@ -100,16 +96,6 @@ declare class SPAUtils {
      * @param url - URL to inspect (defaults to `window.location.href`).
      */
     static hasErrorInURL(url?: string): boolean;
-    /**
-     * Returns `true` if no prompt-none request has been sent yet this session.
-     */
-    static canSendPromptNoneRequest(): boolean;
-    /**
-     * Records whether a prompt-none request has been sent.
-     *
-     * @param canSend - `true` marks the request as sent.
-     */
-    static setPromptNoneRequestSent(canSend: boolean): void;
     /**
      * Waits until the browser has redirected (non-blocking delay).
      *

package/dist/utils/SPAUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SPAUtils.d.ts","sourceRoot":"","sources":["../../src/utils/SPAUtils.ts"],"names":[],"mappings":"AAYA,OAAO,EAAC,YAAY,EAAC,MAAM,wBAAwB,CAAC;AAEpD;;;GAGG;AACH,cAAM,QAAQ;IAEZ,OAAO;IAEP;;OAEG;WACW,uBAAuB,IAAI,IAAI;IAM7C;;;;;OAKG;WACW,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAI9C;;;;;OAKG;WACW,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAI1D;;;;;;OAMG;WACW,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAOpF;;;;;;OAMG;WACW,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM;IAQzE;;;;OAIG;WACW,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI/C;;;;;;OAMG;WACW,iBAAiB,CAAC,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO;IAQjG;;OAEG;WACW,yBAAyB,IAAI,OAAO;IAIlD;;;OAGG;WACW,eAAe,IAAI,OAAO;IAUxC;;OAEG;WACW,qBAAqB,IAAI,OAAO;IAM9C;;;;;;;OAOG;WACiB,mBAAmB,CACrC,qBAAqB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,EAC/C,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,OAAO,CAAC,OAAO,CAAC;IAYnB;;;;;;OAMG;WACW,cAAc,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,GAAG,YAAY;IAiBhG;;OAEG;WACW,yBAAyB,IAAI,OAAO;IAMlD;;;;OAIG;WACW,wBAAwB,CAAC,MAAM,GAAE,MAA+B,GAAG,OAAO;IAMxF;;;;;OAKG;WACW,aAAa,CAAC,GAAG,GAAE,MAA6B,GAAG,OAAO;IASxE;;OAEG;WACW,wBAAwB,IAAI,OAAO;IAMjD;;;;OAIG;WACW,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAI9D;;;;OAIG;WACiB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtE;;;;;OAKG;IACH,OAAc,KAAK,GAAI,WAAW,MAAM,OAAO,EAAE,gBAAa,KAAG,OAAO,CAAC,IAAI,CAAC,CAU5E;CACH;AAED,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"SPAUtils.d.ts","sourceRoot":"","sources":["../../src/utils/SPAUtils.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,YAAY,EAAC,MAAM,wBAAwB,CAAC;AAEpD;;;GAGG;AACH,cAAM,QAAQ;IAEZ,OAAO;IAEP;;OAEG;WACW,uBAAuB,IAAI,IAAI;IAM7C;;;;;OAKG;WACW,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAI9C;;;;;OAKG;WACW,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAI1D;;;;;;OAMG;WACW,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAOpF;;;;;;OAMG;WACW,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM;IAQzE;;;;OAIG;WACW,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI/C;;;;;;OAMG;WACW,iBAAiB,CAAC,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO;IAQjG;;OAEG;WACW,yBAAyB,IAAI,OAAO;IAIlD;;;OAGG;WACW,eAAe,IAAI,OAAO;IAUxC;;;;;;;OAOG;WACiB,mBAAmB,CACrC,qBAAqB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,EAC/C,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,OAAO,CAAC,OAAO,CAAC;IAYnB;;;;;;OAMG;WACW,cAAc,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,GAAG,YAAY;IAiBhG;;OAEG;WACW,yBAAyB,IAAI,OAAO;IAMlD;;;;OAIG;WACW,wBAAwB,CAAC,MAAM,GAAE,MAA+B,GAAG,OAAO;IAMxF;;;;;OAKG;WACW,aAAa,CAAC,GAAG,GAAE,MAA6B,GAAG,OAAO;IASxE;;;;OAIG;WACiB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtE;;;;;OAKG;IACH,OAAc,KAAK,GAAI,WAAW,MAAM,OAAO,EAAE,gBAAa,KAAG,OAAO,CAAC,IAAI,CAAC,CAU5E;CACH;AAED,eAAe,QAAQ,CAAC"}

package/dist/utils/createHttpClientFetcher.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Builds a `fetch`-shaped function backed by the shared `FetchHttpClient` singleton, for
+ * framework wrappers (`@thunderid/react`, `@thunderid/vue`) that need to hand a core
+ * `@thunderid/javascript` API function a `fetcher` carrying the access token automatically.
+ *
+ * Unlike a plain `fetch` call, `FetchHttpClient.request` throws on a non-2xx response instead
+ * of resolving it. This adapter catches that and reconstructs a `Response`-shaped object from
+ * the thrown error's `response`, so the core API function sees the real status and body instead
+ * of treating every non-2xx result as a network failure. A genuine network error (no response
+ * attached) still propagates.
+ *
+ * @param instanceId - Which `FetchHttpClient` instance to use, for multi-instance apps. Defaults to `0`.
+ * @returns A function matching the `(url, config) => Promise<Response>` shape core API functions expect.
+ * @example
+ * ```typescript
+ * await updateMeCredentials({
+ *   ...config,
+ *   fetcher: fetcher ?? createHttpClientFetcher(instanceId),
+ * });
+ * ```
+ */
+declare const createHttpClientFetcher: (instanceId?: number) => ((url: string, config: RequestInit) => Promise<Response>);
+export default createHttpClientFetcher;
+//# sourceMappingURL=createHttpClientFetcher.d.ts.map

package/dist/utils/createHttpClientFetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createHttpClientFetcher.d.ts","sourceRoot":"","sources":["../../src/utils/createHttpClientFetcher.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,QAAA,MAAM,uBAAuB,GAAI,mBAAc,KAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CA8BzG,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/utils/hasAuthParamsInUrl.d.ts

@@ -1,8 +1,8 @@
 /**
- * Utility to check if `code` and `session_state` are available in the URL as search params.
+ * Utility to check if `code` is available in the URL as a search param.
  *
  * @param params - The URL search params to check. Defaults to `window.location.search`.
- * @return `true` if the URL contains `code` and `session_state` search params, otherwise `false`.
+ * @return `true` if the URL contains a `code` search param, otherwise `false`.
  */
 declare const hasAuthParamsInUrl: (params?: string) => boolean;
 export default hasAuthParamsInUrl;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/browser",
-  "version": "1.0.7",
+  "version": "1.2.0",
   "description": "Browser runtime SDK for ThunderID",
   "keywords": [
     "thunderid",
@@ -35,7 +35,7 @@
     "@thunderid/eslint-plugin": "1.0.1",
     "@thunderid/prettier-config": "1.0.1",
     "@types/node": "24.7.2",
-    "@vitest/browser-playwright": "4.1.10",
+    "@vitest/browser-playwright": "4.1.11",
     "eslint": "9.39.4",
     "jsdom": "27.0.1",
     "playwright": "1.60.0",
@@ -43,10 +43,10 @@
     "rimraf": "6.1.3",
     "rolldown": "1.0.0-beta.45",
     "typescript": "5.9.3",
-    "vitest": "4.1.10"
+    "vitest": "4.1.11"
   },
   "dependencies": {
-    "@thunderid/javascript": "^1.0.7",
+    "@thunderid/javascript": "^1.3.0",
     "base64url": "3.0.1",
     "buffer": "6.0.3",
     "core-js": "3.42.0",

package/dist/utils/SessionManagementHelper.d.ts

@@ -1,26 +0,0 @@
-import { ExtendedAuthorizeRequestUrlParams } from '@thunderid/javascript';
-/**
- * Interface for the session management helper returned by {@link createSessionManagementHelper}.
- */
-export interface SessionManagementHelperInterface {
-    /** Starts session polling and sets up the RP iframe. */
-    initialize(clientId: string, checkSessionEndpoint: string, getSessionState: () => Promise<string>, interval: number, sessionRefreshInterval: number, redirectURL: string, getSignInUrl: (params?: ExtendedAuthorizeRequestUrlParams) => Promise<string>): void;
-    /**
-     * Processes a prompt-none response when the page is loaded inside the prompt-none iframe.
-     * Returns `true` if the current page load was a prompt-none response.
-     */
-    receivePromptNoneResponse(setSessionState?: (sessionState: string | null) => Promise<void>): Promise<boolean>;
-    /** Clears the session check and refresh intervals. */
-    reset(): void;
-}
-/**
- * Factory that creates an OIDC Session Management helper using an RP iframe and polling.
- * Appends a hidden RP iframe to the document and returns the helper interface.
- *
- * @param signOut - Returns the sign-out URL for the current session.
- * @param setSessionState - Stores a new session state from a prompt-none response.
- * @returns A `SessionManagementHelperInterface` instance.
- */
-export declare const createSessionManagementHelper: (signOut: () => Promise<string>, setSessionState: (sessionState: string) => void) => Promise<SessionManagementHelperInterface>;
-export default createSessionManagementHelper;
-//# sourceMappingURL=SessionManagementHelper.d.ts.map

package/dist/utils/SessionManagementHelper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SessionManagementHelper.d.ts","sourceRoot":"","sources":["../../src/utils/SessionManagementHelper.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,iCAAiC,EAAuB,MAAM,uBAAuB,CAAC;AA0B9F;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,wDAAwD;IACxD,UAAU,CACR,QAAQ,EAAE,MAAM,EAChB,oBAAoB,EAAE,MAAM,EAC5B,eAAe,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EACtC,QAAQ,EAAE,MAAM,EAChB,sBAAsB,EAAE,MAAM,EAC9B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,iCAAiC,KAAK,OAAO,CAAC,MAAM,CAAC,GAC5E,IAAI,CAAC;IACR;;;OAGG;IACH,yBAAyB,CAAC,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9G,sDAAsD;IACtD,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,GACxC,SAAS,MAAM,OAAO,CAAC,MAAM,CAAC,EAC9B,iBAAiB,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,KAC9C,OAAO,CAAC,gCAAgC,CAuO1C,CAAC;AAEF,eAAe,6BAA6B,CAAC"}