@thunderid/javascript 0.1.0 → 0.2.0

package/dist/edge/index.js

@@ -256,7 +256,7 @@ var ThunderIDError = class ThunderIDError extends Error {
 * The backend returns errors in the following form:
 * {"code":"...","message":{"key":"...","defaultValue":"..."},"description":{"key":"...","defaultValue":"..."}}
 *
-* Returns `description.defaultValue` if present, then `message.defaultValue`, and falls back
+* Returns `message.defaultValue` if present, then `description.defaultValue`, and falls back
 * to the raw `errorText` when the response is not a recognised structured error.
 */
 const parseApiErrorMessage = (errorText) => {
@@ -264,8 +264,10 @@ const parseApiErrorMessage = (errorText) => {
 		const parsed = JSON.parse(errorText);
 		const description = parsed["description"];
 		const message = parsed["message"];
-		if (description?.defaultValue) return description.defaultValue;
-		if (message?.defaultValue) return message.defaultValue;
+		const descFallback = description?.defaultValue;
+		const msgFallback = message?.defaultValue;
+		if (msgFallback) return msgFallback;
+		if (descFallback) return descFallback;
 	} catch {}
 	return errorText;
 };
@@ -339,7 +341,7 @@ var ThunderIDAPIError = class extends ThunderIDError {
 * ```typescript
 * try {
 *   const authResponse = await initializeEmbeddedSignInFlow({
-*     url: "https://api.asgardeo.io/t/<ORGANIZATION>/oauth2/authorize",
+*     url: "https://localhost:8090/oauth2/authorize",
 *     payload: {
 *       response_type: "code",
 *       client_id: "your-client-id",
@@ -480,7 +482,7 @@ let EmbeddedFlowComponentType = /* @__PURE__ */ function(EmbeddedFlowComponentTy
 * ```typescript
 * try {
 *   const embeddedSignUpResponse = await executeEmbeddedSignUpFlow({
-*     url: "https://api.asgardeo.io/t/<ORGANIZATION>/api/server/v1/flow/execute",
+*     url: "https://localhost:8090/api/server/v1/flow/execute",
 *     payload: {
 *       flowType: "REGISTRATION"
 *     }
@@ -532,7 +534,7 @@ var executeEmbeddedSignUpFlow_default = executeEmbeddedSignUpFlow;
 * @returns A promise that resolves with the user information.
 * @throw
 *   const userInfo = await getUserInfo({
-*     url: "https://api.asgardeo.io/t/<ORGANIZATION>/oauth2/userinfo",
+*     url: "https://localhost:8090/oauth2/userinfo",
 *   });
 *   console.log(userInfo);
 * } catch (error) {
@@ -667,7 +669,7 @@ var processUsername_default = processUsername;
 * // Using default fetch
 * try {
 *   const userProfile = await getScim2Me({
-*     url: "https://api.asgardeo.io/t/<ORGANIZATION>/scim2/Me",
+*     url: "https://localhost:8090/scim2/Me",
 *   });
 *   console.log(userProfile);
 * } catch (error) {
@@ -682,7 +684,7 @@ var processUsername_default = processUsername;
 * // Using custom fetcher (e.g., axios-based httpClient)
 * try {
 *   const userProfile = await getScim2Me({
-*     url: "https://api.asgardeo.io/t/<ORGANIZATION>/scim2/Me",
+*     url: "https://localhost:8090/scim2/Me",
 *     fetcher: async (url, config) => {
 *       const response = await httpClient({
 *         url,
@@ -748,7 +750,7 @@ var getScim2Me_default = getScim2Me;
 * // Using default fetch
 * try {
 *   const schemas = await getSchemas({
-*     url: "https://api.asgardeo.io/t/<ORGANIZATION>/scim2/Schemas",
+*     url: "https://localhost:8090/scim2/Schemas",
 *   });
 *   console.log(schemas);
 * } catch (error) {
@@ -763,7 +765,7 @@ var getScim2Me_default = getScim2Me;
 * // Using custom fetcher (e.g., axios-based httpClient)
 * try {
 *   const schemas = await getSchemas({
-*     url: "https://api.asgardeo.io/t/<ORGANIZATION>/scim2/Schemas",
+*     url: "https://localhost:8090/scim2/Schemas",
 *     fetcher: async (url, config) => {
 *       const response = await httpClient({
 *         url,
@@ -829,7 +831,7 @@ var getSchemas_default = getSchemas;
 * // Using default fetch
 * try {
 *   const response = await getAllOrganizations({
-*     baseUrl: "https://api.asgardeo.io/t/<ORGANIZATION>",
+*     baseUrl: "https://localhost:8090",
 *     filter: "",
 *     limit: 10,
 *     recursive: false
@@ -847,7 +849,7 @@ var getSchemas_default = getSchemas;
 * // Using custom fetcher (e.g., axios-based httpClient)
 * try {
 *   const response = await getAllOrganizations({
-*     baseUrl: "https://api.asgardeo.io/t/<ORGANIZATION>",
+*     baseUrl: "https://localhost:8090",
 *     filter: "",
 *     limit: 10,
 *     recursive: false,
@@ -927,7 +929,7 @@ var getAllOrganizations_default = getAllOrganizations;
 * // Using default fetch
 * try {
 *   const organization = await createOrganization({
-*     baseUrl: "https://api.asgardeo.io/t/<ORGANIZATION>",
+*     baseUrl: "https://localhost:8090",
 *     payload: {
 *       description: "Share your screens",
 *       name: "Team Viewer",
@@ -949,7 +951,7 @@ var getAllOrganizations_default = getAllOrganizations;
 * // Using custom fetcher (e.g., axios-based httpClient)
 * try {
 *   const organization = await createOrganization({
-*     baseUrl: "https://api.asgardeo.io/t/<ORGANIZATION>",
+*     baseUrl: "https://localhost:8090",
 *     payload: {
 *       description: "Share your screens",
 *       name: "Team Viewer",
@@ -1029,7 +1031,7 @@ var createOrganization_default = createOrganization;
 * // Using default fetch
 * try {
 *   const organizations = await getMeOrganizations({
-*     baseUrl: "https://api.asgardeo.io/t/<ORGANIZATION>",
+*     baseUrl: "https://localhost:8090",
 *     after: "",
 *     before: "",
 *     filter: "",
@@ -1049,7 +1051,7 @@ var createOrganization_default = createOrganization;
 * // Using custom fetcher (e.g., axios-based httpClient)
 * try {
 *   const organizations = await getMeOrganizations({
-*     baseUrl: "https://api.asgardeo.io/t/<ORGANIZATION>",
+*     baseUrl: "https://localhost:8090",
 *     after: "",
 *     before: "",
 *     filter: "",
@@ -1128,7 +1130,7 @@ var getMeOrganizations_default = getMeOrganizations;
 * // Using default fetch
 * try {
 *   const organization = await getOrganization({
-*     baseUrl: "https://api.asgardeo.io/t/dxlab",
+*     baseUrl: "https://localhost:8090",
 *     organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1"
 *   });
 *   console.log(organization);
@@ -1144,7 +1146,7 @@ var getMeOrganizations_default = getMeOrganizations;
 * // Using custom fetcher (e.g., axios-based httpClient)
 * try {
 *   const organization = await getOrganization({
-*     baseUrl: "https://api.asgardeo.io/t/dxlab",
+*     baseUrl: "https://localhost:8090",
 *     organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1",
 *     fetcher: async (url, config) => {
 *       const response = await httpClient({
@@ -1274,14 +1276,14 @@ var isEmpty_default = isEmpty;
 * });
 *
 * await updateOrganization({
-*   baseUrl: "https://api.asgardeo.io/t/<ORG>",
+*   baseUrl: "https://localhost:8090",
 *   organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1",
 *   operations
 * });
 *
 * // Or manually specify operations
 * await updateOrganization({
-*   baseUrl: "https://api.asgardeo.io/t/<ORG>",
+*   baseUrl: "https://localhost:8090",
 *   organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1",
 *   operations: [
 *     { operation: "REPLACE", path: "/name", value: "Updated Organization Name" },
@@ -1294,7 +1296,7 @@ var isEmpty_default = isEmpty;
 * ```typescript
 * // Using custom fetcher (e.g., axios-based httpClient)
 * await updateOrganization({
-*   baseUrl: "https://api.asgardeo.io/t/<ORG>",
+*   baseUrl: "https://localhost:8090",
 *   organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1",
 *   operations: [
 *     { operation: "REPLACE", path: "/name", value: "Updated Organization Name" }
@@ -1379,7 +1381,7 @@ var updateOrganization_default = updateOrganization;
 * ```typescript
 * // Using default fetch
 * await updateMeProfile({
-*   url: "https://api.asgardeo.io/t/<ORG>/scim2/Me",
+*   url: "https://localhost:8090/scim2/Me",
 *   payload: { "urn:scim:wso2:schema": { mobileNumbers: ["0777933830"] } }
 * });
 * ```
@@ -1388,7 +1390,7 @@ var updateOrganization_default = updateOrganization;
 * ```typescript
 * // Using custom fetcher (e.g., axios-based httpClient)
 * await updateMeProfile({
-*   url: "https://api.asgardeo.io/t/<ORG>/scim2/Me",
+*   url: "https://localhost:8090/scim2/Me",
 *   payload: { "urn:scim:wso2:schema": { mobileNumbers: ["0777933830"] } },
 *   fetcher: async (url, config) => {
 *     const response = await httpClient({
@@ -1845,7 +1847,7 @@ var ThunderIDRuntimeError = class extends ThunderIDError {
 * @returns boolean - true if sensible fallbacks can be used, false otherwise
 *
 * @example
-* isRecognizedBaseUrlPattern('https://dev.asgardeo.io/t/dxlab'); // true
+* isRecognizedBaseUrlPattern('https://localhost:8090/t/dxlab'); // true
 * isRecognizedBaseUrlPattern('https://custom.example.com/auth'); // false
 */
 const isRecognizedBaseUrlPattern = (baseUrl) => {
@@ -1908,7 +1910,7 @@ var identifyPlatform_default = identifyPlatform;
 * // Using default fetch
 * try {
 *   const response = await getBrandingPreference({
-*     baseUrl: "https://api.asgardeo.io/t/<ORGANIZATION>",
+*     baseUrl: "https://localhost:8090",
 *     locale: "en-US",
 *     name: "my-branding",
 *     type: "org"
@@ -1926,7 +1928,7 @@ var identifyPlatform_default = identifyPlatform;
 * // Using custom fetcher (e.g., axios-based httpClient)
 * try {
 *   const response = await getBrandingPreference({
-*     baseUrl: "https://api.asgardeo.io/t/<ORGANIZATION>",
+*     baseUrl: "https://localhost:8090",
 *     locale: "en-US",
 *     name: "my-branding",
 *     type: "org",
@@ -2086,18 +2088,59 @@ let EmbeddedSignInFlowType$1 = /* @__PURE__ */ function(EmbeddedSignInFlowType$2
 	return EmbeddedSignInFlowType$2;
 }({});
 
+//#endregion
+//#region src/utils/v2/injectRequestedPermissions.ts
+/**
+* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+*
+* WSO2 LLC. licenses this file to you under the Apache License,
+* Version 2.0 (the "License"); you may not use this file except
+* in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing,
+* software distributed under the License is distributed on an
+* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+* KIND, either express or implied. See the License for the
+* specific language governing permissions and limitations
+* under the License.
+*/
+/**
+* Strips the top-level `scopes` field from a payload and injects it as
+* `inputs.requested_permissions` (space-separated string).
+*
+* The backend reads requested_permissions from UserInputs (the `inputs` map), not a top-level field.
+*/
+const injectRequestedPermissions = (payload) => {
+	const { scopes,...rest } = payload;
+	const normalizedScopes = Array.isArray(scopes) ? scopes.map((s) => String(s).trim()).filter(Boolean).join(" ") : typeof scopes === "string" ? scopes.trim() : "";
+	if (!normalizedScopes) return rest;
+	const existingInputs = rest["inputs"] != null && typeof rest["inputs"] === "object" && !Array.isArray(rest["inputs"]) ? rest["inputs"] : {};
+	return {
+		...rest,
+		inputs: {
+			...existingInputs,
+			requested_permissions: normalizedScopes
+		}
+	};
+};
+var injectRequestedPermissions_default = injectRequestedPermissions;
+
 //#endregion
 //#region src/api/v2/executeEmbeddedSignInFlowV2.ts
 const executeEmbeddedSignInFlowV2 = async ({ url, baseUrl, payload, authId,...requestConfig }) => {
 	if (!payload) throw new ThunderIDAPIError("Authorization payload is required", "executeEmbeddedSignInFlow-ValidationError-002", "javascript", 400, "If an authorization payload is not provided, the request cannot be constructed correctly.");
 	const endpoint = url ?? `${baseUrl}/flow/execute`;
 	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const hasOnlyAppIdAndFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 2;
+	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
 	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const requestPayload = hasOnlyAppIdAndFlowType || hasOnlyFlowId ? {
-		...cleanPayload,
+	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
+	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
+		...basePayload,
 		verbose: true
-	} : cleanPayload;
+	} : basePayload;
 	const response = await fetch(endpoint, {
 		...requestConfig,
 		body: JSON.stringify(requestPayload),
@@ -2124,14 +2167,15 @@ const executeEmbeddedSignInFlowV2 = async ({ url, baseUrl, payload, authId,...re
 			},
 			method: "POST"
 		});
-		if (!oauth2Response.ok) throw new ThunderIDAPIError(`OAuth2 authorization failed: ${await oauth2Response.text()}`, "executeEmbeddedSignInFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText);
+		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignInFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
 		const oauth2Result = await oauth2Response.json();
 		return {
 			flowStatus: flowResponse.flowStatus,
 			redirectUrl: oauth2Result["redirect_uri"]
 		};
 	} catch (authError) {
-		throw new ThunderIDAPIError(`OAuth2 authorization failed: ${authError instanceof Error ? authError.message : "Unknown error"}`, "executeEmbeddedSignInFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-in flow.");
+		if (authError instanceof ThunderIDAPIError) throw authError;
+		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignInFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-in flow.", "OAuth2 authorization failed");
 	}
 	return flowResponse;
 };
@@ -2156,9 +2200,9 @@ var executeEmbeddedSignInFlowV2_default = executeEmbeddedSignInFlowV2;
 *     // Registration successful - handle completion
 *     break;
 *   case EmbeddedSignUpFlowStatus.Error:
-*     // Registration failed - show detailed error message
+*     // Registration failed - show error details
 *     const errorResponse = response as EmbeddedSignUpFlowErrorResponse;
-*     showError(errorResponse.failureReason);
+*     showError(errorResponse.error.description.defaultValue);
 *     break;
 * }
 * ```
@@ -2230,12 +2274,13 @@ const executeEmbeddedSignUpFlowV2 = async ({ url, baseUrl, payload, authId,...re
 	if (!payload) throw new ThunderIDAPIError("Registration payload is required", "executeEmbeddedSignUpFlow-ValidationError-002", "javascript", 400, "If a registration payload is not provided, the request cannot be constructed correctly.");
 	const endpoint = url ?? `${baseUrl}/flow/execute`;
 	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const hasOnlyAppIdAndFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 2;
+	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
 	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const requestPayload = hasOnlyAppIdAndFlowType || hasOnlyFlowId ? {
-		...cleanPayload,
+	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
+	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
+		...basePayload,
 		verbose: true
-	} : cleanPayload;
+	} : basePayload;
 	const response = await fetch(endpoint, {
 		...requestConfig,
 		body: JSON.stringify(requestPayload),
@@ -2262,14 +2307,15 @@ const executeEmbeddedSignUpFlowV2 = async ({ url, baseUrl, payload, authId,...re
 			},
 			method: "POST"
 		});
-		if (!oauth2Response.ok) throw new ThunderIDAPIError(`OAuth2 authorization failed: ${await oauth2Response.text()}`, "executeEmbeddedSignUpFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText);
+		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignUpFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
 		const oauth2Result = await oauth2Response.json();
 		return {
 			flowStatus: flowResponse.flowStatus,
 			redirectUrl: oauth2Result["redirect_uri"]
 		};
 	} catch (authError) {
-		throw new ThunderIDAPIError(`OAuth2 authorization failed: ${authError instanceof Error ? authError.message : "Unknown error"}`, "executeEmbeddedSignUpFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-up flow.");
+		if (authError instanceof ThunderIDAPIError) throw authError;
+		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignUpFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-up flow.", "OAuth2 authorization failed");
 	}
 	return flowResponse;
 };
@@ -2293,7 +2339,7 @@ var executeEmbeddedSignUpFlowV2_default = executeEmbeddedSignUpFlowV2;
 * ```typescript
 * // Initiate recovery flow
 * const response = await executeEmbeddedRecoveryFlowV2({
-*   baseUrl: 'https://api.asgardeo.io/t/myorg',
+*   baseUrl: 'https://localhost:8090',
 *   payload: {
 *     flowType: 'RECOVERY',
 *     applicationId: 'my-app-id',
@@ -2302,7 +2348,7 @@ var executeEmbeddedSignUpFlowV2_default = executeEmbeddedSignUpFlowV2;
 *
 * // Continue recovery flow with user input
 * const nextResponse = await executeEmbeddedRecoveryFlowV2({
-*   baseUrl: 'https://api.asgardeo.io/t/myorg',
+*   baseUrl: 'https://localhost:8090',
 *   payload: {
 *     executionId: response.executionId,
 *     action: 'submit',
@@ -2332,7 +2378,7 @@ const executeEmbeddedRecoveryFlowV2 = async ({ url, baseUrl, payload,...requestC
 		},
 		method: requestConfig.method || "POST"
 	});
-	if (!response.ok) throw new ThunderIDAPIError(`Recovery request failed: ${await response.text()}`, "executeEmbeddedRecoveryFlow-ResponseError-001", "javascript", response.status, response.statusText);
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedRecoveryFlow-ResponseError-001", "javascript", response.status, response.statusText, "Recovery request failed");
 	return await response.json();
 };
 var executeEmbeddedRecoveryFlowV2_default = executeEmbeddedRecoveryFlowV2;
@@ -2747,6 +2793,8 @@ let EmbeddedFlowComponentType$1 = /* @__PURE__ */ function(EmbeddedFlowComponent
 	EmbeddedFlowComponentType$2["TextInput"] = "TEXT_INPUT";
 	/** Timer component for displaying a countdown */
 	EmbeddedFlowComponentType$2["Timer"] = "TIMER";
+	/** QR code display component for wallet-based flows (e.g. OpenID4VP) */
+	EmbeddedFlowComponentType$2["QrCode"] = "QR_CODE";
 	return EmbeddedFlowComponentType$2;
 }({});
 /**
@@ -3231,6 +3279,10 @@ let Stores = /* @__PURE__ */ function(Stores$1) {
 	* Store for temporary data that needs to persist only for a short duration.
 	*/
 	Stores$1["TemporaryData"] = "temporary_data";
+	/**
+	* Store for data that leverages local storage if available, falling back to the configured storage.
+	*/
+	Stores$1["HybridData"] = "hybrid_data";
 	return Stores$1;
 }({});
 
@@ -3292,7 +3344,18 @@ var StorageManager = class StorageManager {
 		this.setDataInBulk(this.resolveKey(Stores.OIDCProviderMetaData), oidcProviderMetaData);
 	}
 	async setTemporaryData(temporaryData, userId) {
-		this.setDataInBulk(this.resolveKey(Stores.TemporaryData, userId), temporaryData);
+		await this.setDataInBulk(this.resolveKey(Stores.TemporaryData, userId), temporaryData);
+	}
+	async setHybridData(hybridData, userId) {
+		const resolvedKey = this.resolveKey(Stores.HybridData, userId);
+		if (StorageManager.isLocalStorageAvailable()) {
+			const existingDataJSON = localStorage.getItem(resolvedKey);
+			const dataToBeSaved = {
+				...existingDataJSON ? JSON.parse(existingDataJSON) : {},
+				...hybridData
+			};
+			localStorage.setItem(resolvedKey, JSON.stringify(dataToBeSaved));
+		} else await this.setDataInBulk(resolvedKey, hybridData);
 	}
 	async setSessionData(sessionData, userId) {
 		this.setDataInBulk(this.resolveKey(Stores.SessionData, userId), sessionData);
@@ -3307,7 +3370,35 @@ var StorageManager = class StorageManager {
 		return JSON.parse(await this.store.getData(this.resolveKey(Stores.OIDCProviderMetaData)) ?? null);
 	}
 	async getTemporaryData(userId) {
-		return JSON.parse(await this.store.getData(this.resolveKey(Stores.TemporaryData, userId)) ?? null);
+		const data = await this.store.getData(this.resolveKey(Stores.TemporaryData, userId));
+		if (data) try {
+			return JSON.parse(data);
+		} catch (error$1) {
+			logger_default.error(`StorageManager: Failed to parse temporary data for key ${this.resolveKey(Stores.TemporaryData, userId)}`, error$1);
+			return {};
+		}
+		return {};
+	}
+	async getHybridData(userId) {
+		const resolvedKey = this.resolveKey(Stores.HybridData, userId);
+		if (StorageManager.isLocalStorageAvailable()) {
+			const storeDataJSON$1 = localStorage.getItem(resolvedKey);
+			if (storeDataJSON$1) try {
+				return JSON.parse(storeDataJSON$1);
+			} catch (error$1) {
+				logger_default.error(`StorageManager: Failed to parse hybrid data from local storage for key ${resolvedKey}`, error$1);
+				return {};
+			}
+			return {};
+		}
+		const storeDataJSON = await this.store.getData(resolvedKey) ?? null;
+		if (storeDataJSON) try {
+			return JSON.parse(storeDataJSON);
+		} catch (error$1) {
+			logger_default.error(`StorageManager: Failed to parse hybrid data from store for key ${resolvedKey}`, error$1);
+			return {};
+		}
+		return {};
 	}
 	async getPersistedData(userId) {
 		return JSON.parse(await this.store.getData(this.resolveKey(Stores.PersistedData, userId)) ?? null);
@@ -3339,6 +3430,11 @@ var StorageManager = class StorageManager {
 	async removeTemporaryData(userId) {
 		await this.store.removeData(this.resolveKey(Stores.TemporaryData, userId));
 	}
+	async removeHybridData(userId) {
+		const resolvedKey = this.resolveKey(Stores.HybridData, userId);
+		if (StorageManager.isLocalStorageAvailable()) localStorage.removeItem(resolvedKey);
+		else await this.store.removeData(resolvedKey);
+	}
 	async removeSessionData(userId) {
 		await this.store.removeData(this.resolveKey(Stores.SessionData, userId));
 	}
@@ -3354,6 +3450,15 @@ var StorageManager = class StorageManager {
 		const data = await this.store.getData(this.resolveKey(Stores.TemporaryData, userId));
 		return data && JSON.parse(data)[key];
 	}
+	async getHybridDataParameter(key, userId) {
+		const resolvedKey = this.resolveKey(Stores.HybridData, userId);
+		if (StorageManager.isLocalStorageAvailable()) {
+			const existingDataJSON = localStorage.getItem(resolvedKey);
+			return (existingDataJSON ? JSON.parse(existingDataJSON) : {})[key];
+		}
+		const data = await this.store.getData(resolvedKey);
+		return data && JSON.parse(data)[key];
+	}
 	async getSessionDataParameter(key, userId) {
 		const data = await this.store.getData(this.resolveKey(Stores.SessionData, userId));
 		return data && JSON.parse(data)[key];
@@ -3367,6 +3472,17 @@ var StorageManager = class StorageManager {
 	async setTemporaryDataParameter(key, value, userId) {
 		await this.setValue(this.resolveKey(Stores.TemporaryData, userId), key, value);
 	}
+	async setHybridDataParameter(key, value, userId) {
+		const resolvedKey = this.resolveKey(Stores.HybridData, userId);
+		if (StorageManager.isLocalStorageAvailable()) {
+			const existingDataJSON = localStorage.getItem(resolvedKey);
+			const dataToBeSaved = {
+				...existingDataJSON ? JSON.parse(existingDataJSON) : {},
+				[key]: value
+			};
+			localStorage.setItem(resolvedKey, JSON.stringify(dataToBeSaved));
+		} else await this.setValue(resolvedKey, key, value);
+	}
 	async setSessionDataParameter(key, value, userId) {
 		await this.setValue(this.resolveKey(Stores.SessionData, userId), key, value);
 	}
@@ -3379,56 +3495,21 @@ var StorageManager = class StorageManager {
 	async removeTemporaryDataParameter(key, userId) {
 		await this.removeValue(this.resolveKey(Stores.TemporaryData, userId), key);
 	}
+	async removeHybridDataParameter(key, userId) {
+		const resolvedKey = this.resolveKey(Stores.HybridData, userId);
+		if (StorageManager.isLocalStorageAvailable()) {
+			const existingDataJSON = localStorage.getItem(resolvedKey);
+			const existingData = existingDataJSON ? JSON.parse(existingDataJSON) : {};
+			delete existingData[key];
+			localStorage.setItem(resolvedKey, JSON.stringify(existingData));
+		} else await this.removeValue(resolvedKey, key);
+	}
 	async removeSessionDataParameter(key, userId) {
 		await this.removeValue(this.resolveKey(Stores.SessionData, userId), key);
 	}
 };
 var StorageManager_default = StorageManager;
 
-//#endregion
-//#region src/constants/TokenExchangeConstants.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Constants for OAuth 2.0 Token Exchange operations.
-* This object contains placeholders used in token exchange requests
-* and responses for dynamic value substitution.
-*
-* @remarks
-* These placeholders are used in token exchange templates and are replaced
-* with actual values during request processing. They help in creating
-* flexible and reusable token exchange configurations.
-*
-* @example
-* ```typescript
-* // Using placeholders in a token exchange template
-* const template = `grant_type=urn:ietf:params:oauth:grant-type:token-exchange&subject_token=${TokenExchangeConstants.Placeholders.TOKEN}`;
-* ```
-*/
-const TokenExchangeConstants = { Placeholders: {
-	ACCESS_TOKEN: "{{accessToken}}",
-	CLIENT_ID: "{{clientId}}",
-	CLIENT_SECRET: "{{clientSecret}}",
-	SCOPES: "{{scopes}}",
-	USERNAME: "{{username}}"
-} };
-var TokenExchangeConstants_default = TokenExchangeConstants;
-
 //#endregion
 //#region src/utils/extractUserClaimsFromIdToken.ts
 /**
@@ -3524,6 +3605,50 @@ const processOpenIDScopes = (scopes) => {
 };
 var processOpenIDScopes_default = processOpenIDScopes;
 
+//#endregion
+//#region src/constants/TokenExchangeConstants.ts
+/**
+* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+*
+* WSO2 LLC. licenses this file to you under the Apache License,
+* Version 2.0 (the "License"); you may not use this file except
+* in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing,
+* software distributed under the License is distributed on an
+* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+* KIND, either express or implied. See the License for the
+* specific language governing permissions and limitations
+* under the License.
+*/
+/**
+* Constants for OAuth 2.0 Token Exchange operations.
+* This object contains placeholders used in token exchange requests
+* and responses for dynamic value substitution.
+*
+* @remarks
+* These placeholders are used in token exchange templates and are replaced
+* with actual values during request processing. They help in creating
+* flexible and reusable token exchange configurations.
+*
+* @example
+* ```typescript
+* // Using placeholders in a token exchange template
+* const template = `grant_type=urn:ietf:params:oauth:grant-type:token-exchange&subject_token=${TokenExchangeConstants.Placeholders.TOKEN}`;
+* ```
+*/
+const TokenExchangeConstants = { Placeholders: {
+	ACCESS_TOKEN: "{{accessToken}}",
+	CLIENT_ID: "{{clientId}}",
+	CLIENT_SECRET: "{{clientSecret}}",
+	SCOPES: "{{scopes}}",
+	USERNAME: "{{username}}"
+} };
+var TokenExchangeConstants_default = TokenExchangeConstants;
+
 //#endregion
 //#region src/utils/AuthenticationHelper.ts
 /**
@@ -3649,7 +3774,7 @@ var AuthenticationHelper = class {
 		const { issuer } = await this.oidcProviderMetaData();
 		const { keys } = await response.json();
 		const jwk = await this.cryptoHelper.getJWKForTheIdToken(idToken.split(".")[0], keys);
-		return this.cryptoHelper.isValidIdToken(idToken, jwk, (await this.config()).clientId, issuer ?? "", this.cryptoHelper.decodeJwtToken(idToken).sub, (await this.config()).tokenValidation?.idToken?.clockTolerance, (await this.config()).tokenValidation?.idToken?.validateIssuer ?? true);
+		return this.cryptoHelper.isValidIdToken(idToken, jwk, (await this.config()).clientId ?? "", issuer ?? "", this.cryptoHelper.decodeJwtToken(idToken).sub, (await this.config()).tokenValidation?.idToken?.clockTolerance, (await this.config()).tokenValidation?.idToken?.validateIssuer ?? true);
 	}
 	/**
 	* Extracts user information from a decoded ID token payload.
@@ -3691,7 +3816,7 @@ var AuthenticationHelper = class {
 		} else sessionData = await this.storageManager.getSessionData(userId);
 		const scope = processOpenIDScopes_default(configData.scopes);
 		if (typeof text !== "string") return text;
-		return text.replace(TokenExchangeConstants_default.Placeholders.ACCESS_TOKEN, sessionData.access_token).replace(TokenExchangeConstants_default.Placeholders.USERNAME, this.getAuthenticatedUserInfo(sessionData.id_token).username).replace(TokenExchangeConstants_default.Placeholders.SCOPES, scope).replace(TokenExchangeConstants_default.Placeholders.CLIENT_ID, configData.clientId).replace(TokenExchangeConstants_default.Placeholders.CLIENT_SECRET, configData.clientSecret ?? "");
+		return text.replace(TokenExchangeConstants_default.Placeholders.ACCESS_TOKEN, sessionData.access_token).replace(TokenExchangeConstants_default.Placeholders.USERNAME, this.getAuthenticatedUserInfo(sessionData.id_token).username ?? "").replace(TokenExchangeConstants_default.Placeholders.SCOPES, scope).replace(TokenExchangeConstants_default.Placeholders.CLIENT_ID, configData.clientId ?? "").replace(TokenExchangeConstants_default.Placeholders.CLIENT_SECRET, configData.clientSecret ?? "");
 	}
 	/**
 	* Clears all temporary and session data for the given user.
@@ -3940,7 +4065,7 @@ const getAuthorizeRequestUrlParams = (options, pkceOptions, customParams) => {
 	const authorizeRequestParams = /* @__PURE__ */ new Map();
 	authorizeRequestParams.set("response_type", "code");
 	authorizeRequestParams.set("client_id", clientId);
-	authorizeRequestParams.set("scope", scopes);
+	authorizeRequestParams.set("scope", scopes ?? "");
 	authorizeRequestParams.set("redirect_uri", redirectUri);
 	if (responseMode) authorizeRequestParams.set("response_mode", responseMode);
 	const pkceKey = pkceOptions?.key;
@@ -4007,13 +4132,11 @@ var ThunderIDJavaScriptClient = class {
 			if (persistedData?.["applicationId"]) resolvedApplicationId = persistedData["applicationId"];
 		}
 		const resolvedEndpoints = endpoints ? { ...endpoints } : {};
-		await this.storageManager.setConfigData({
-			...DEFAULT_CONFIG,
-			...fullConfig,
+		await this.storageManager.setConfigData(deepMerge_default({}, DEFAULT_CONFIG, fullConfig, {
 			applicationId: resolvedApplicationId,
 			endpoints: resolvedEndpoints,
 			scope: processOpenIDScopes_default(fullConfig.scopes)
-		});
+		}));
 		this.baseURL = fullConfig.baseUrl ?? "";
 		return true;
 	}
@@ -4161,19 +4284,19 @@ var ThunderIDJavaScriptClient = class {
 			if (configData.enablePKCE) {
 				codeVerifier = this.cryptoHelper?.getCodeVerifier();
 				codeChallenge = await this.cryptoHelper?.getCodeChallenge(codeVerifier);
-				await this.storageManager.setTemporaryDataParameter(pkceKey, codeVerifier, userId);
+				await this.storageManager.setHybridDataParameter(pkceKey, codeVerifier, userId);
 			}
-			if (authRequestConfig["client_secret"]) authRequestConfig["client_secret"] = configData.clientSecret;
-			const authorizeRequestParams = getAuthorizeRequestUrlParams_default({
-				clientId: configData.clientId,
+			if (authRequestConfig["client_secret"]) authRequestConfig["client_secret"] = configData.clientSecret ?? "";
+			const authorizeRequestParams = getAuthorizeRequestUrlParams_default(Object.fromEntries(Object.entries({
+				clientId: configData.clientId ?? "",
 				codeChallenge,
 				codeChallengeMethod: PKCEConstants_default.DEFAULT_CODE_CHALLENGE_METHOD,
 				instanceId: this.getInstanceId().toString(),
 				prompt: configData.prompt,
-				redirectUri: configData.afterSignInUrl,
+				redirectUri: configData.afterSignInUrl ?? "",
 				responseMode: configData.responseMode,
 				scopes: processOpenIDScopes_default(configData.scopes)
-			}, { key: pkceKey }, authRequestConfig);
+			}).filter(([, v]) => v !== void 0)), { key: pkceKey }, authRequestConfig);
 			Array.from(authorizeRequestParams.entries()).forEach(([paramKey, paramValue]) => {
 				authorizeRequest.searchParams.append(paramKey, paramValue);
 			});
@@ -4189,19 +4312,19 @@ var ThunderIDJavaScriptClient = class {
 		if (!tokenEndpoint || tokenEndpoint.trim().length === 0) throw new ThunderIDAuthException("JS-AUTH_CORE-RAT1-NF01", "Token endpoint not found.", "No token endpoint was found in the OIDC provider meta data returned by the well-known endpoint or the token endpoint passed to the SDK is empty.");
 		if (sessionState) await this.storageManager.setSessionDataParameter(OIDCRequestConstants_default.Params.SESSION_STATE, sessionState, userId);
 		const body = new URLSearchParams();
-		body.set("client_id", configData.clientId);
+		body.set("client_id", configData.clientId ?? "");
 		const hasSecret = Boolean(configData.clientSecret && configData.clientSecret.trim().length > 0);
 		const tokenEndpointAuthMethod = configData.tokenRequest?.authMethod ?? "client_secret_basic";
 		if (hasSecret && tokenEndpointAuthMethod === "client_secret_post") body.set("client_secret", configData.clientSecret);
 		body.set("code", authorizationCode);
 		body.set("grant_type", "authorization_code");
-		body.set("redirect_uri", configData.afterSignInUrl);
+		body.set("redirect_uri", configData.afterSignInUrl ?? "");
 		if (tokenRequestConfig?.params) Object.entries(tokenRequestConfig.params).forEach(([key, value]) => {
 			body.append(key, value);
 		});
 		if (configData.enablePKCE) {
-			body.set("code_verifier", `${await this.storageManager.getTemporaryDataParameter(extractPkceStorageKeyFromState_default(state), userId)}`);
-			await this.storageManager.removeTemporaryDataParameter(extractPkceStorageKeyFromState_default(state), userId);
+			body.set("code_verifier", `${await this.storageManager.getHybridDataParameter(extractPkceStorageKeyFromState_default(state), userId)}`);
+			await this.storageManager.removeHybridDataParameter(extractPkceStorageKeyFromState_default(state), userId);
 		}
 		const tokenRequestHeaders = {
 			Accept: "application/json",
@@ -4234,7 +4357,7 @@ var ThunderIDJavaScriptClient = class {
 			const idToken = (await this.storageManager.getSessionData(userId))?.id_token;
 			if (!idToken || idToken.trim().length === 0) throw new ThunderIDAuthException("JS-AUTH_CORE-GSOU-NF02", "ID token not found.", "No ID token could be found. Either the session information is lost or you have not signed in.");
 			queryParams.set("id_token_hint", idToken);
-		} else queryParams.set("client_id", configData.clientId);
+		} else queryParams.set("client_id", configData.clientId ?? "");
 		queryParams.set("state", OIDCRequestConstants_default.Params.SIGN_OUT_SUCCESS);
 		return `${logoutEndpoint}?${queryParams.toString()}`;
 	}
@@ -4329,10 +4452,10 @@ var ThunderIDJavaScriptClient = class {
 		return response;
 	}
 	async getPKCECode(state, userId) {
-		return await this.storageManager.getTemporaryDataParameter(extractPkceStorageKeyFromState_default(state), userId);
+		return await this.storageManager.getHybridDataParameter(extractPkceStorageKeyFromState_default(state), userId);
 	}
 	async setPKCECode(pkce, state, userId) {
-		return this.storageManager.setTemporaryDataParameter(extractPkceStorageKeyFromState_default(state), pkce, userId);
+		return this.storageManager.setHybridDataParameter(extractPkceStorageKeyFromState_default(state), pkce, userId);
 	}
 	getInstanceId() {
 		return this.instanceIdValue;
@@ -4663,12 +4786,15 @@ const toCssVariables = (theme) => {
 	if (theme.typography?.lineHeights?.tight !== void 0) cssVars[`--${prefix}-typography-lineHeight-tight`] = theme.typography.lineHeights.tight.toString();
 	if (theme.typography?.lineHeights?.normal !== void 0) cssVars[`--${prefix}-typography-lineHeight-normal`] = theme.typography.lineHeights.normal.toString();
 	if (theme.typography?.lineHeights?.relaxed !== void 0) cssVars[`--${prefix}-typography-lineHeight-relaxed`] = theme.typography.lineHeights.relaxed.toString();
-	if (theme.images) Object.keys(theme.images).forEach((imageKey) => {
-		const imageConfig = theme.images[imageKey];
-		if (imageConfig?.url) cssVars[`--${prefix}-image-${imageKey}-url`] = imageConfig.url;
-		if (imageConfig?.title) cssVars[`--${prefix}-image-${imageKey}-title`] = imageConfig.title;
-		if (imageConfig?.alt) cssVars[`--${prefix}-image-${imageKey}-alt`] = imageConfig.alt;
-	});
+	if (theme.images) {
+		const themeImages = theme.images;
+		Object.keys(themeImages).forEach((imageKey) => {
+			const imageConfig = themeImages[imageKey];
+			if (imageConfig?.url) cssVars[`--${prefix}-image-${imageKey}-url`] = imageConfig.url;
+			if (imageConfig?.title) cssVars[`--${prefix}-image-${imageKey}-title`] = imageConfig.title;
+			if (imageConfig?.alt) cssVars[`--${prefix}-image-${imageKey}-alt`] = imageConfig.alt;
+		});
+	}
 	if (theme.components?.Button?.styleOverrides?.root?.borderRadius) cssVars[`--${prefix}-component-button-root-borderRadius`] = theme.components.Button.styleOverrides.root.borderRadius;
 	if (theme.components?.Field?.styleOverrides?.root?.borderRadius) cssVars[`--${prefix}-component-field-root-borderRadius`] = theme.components.Field.styleOverrides.root.borderRadius;
 	return cssVars;
@@ -4765,9 +4891,11 @@ const toThemeVars = (theme) => {
 	};
 	if (theme.images) {
 		themeVars.images = {};
-		Object.keys(theme.images).forEach((imageKey) => {
-			const imageConfig = theme.images[imageKey];
-			themeVars.images[imageKey] = {
+		const themeImages = theme.images;
+		const imageVars = themeVars.images;
+		Object.keys(themeImages).forEach((imageKey) => {
+			const imageConfig = themeImages[imageKey];
+			imageVars[imageKey] = {
 				alt: imageConfig?.alt ? `var(--${prefix}-image-${imageKey}-alt)` : void 0,
 				title: imageConfig?.title ? `var(--${prefix}-image-${imageKey}-title)` : void 0,
 				url: imageConfig?.url ? `var(--${prefix}-image-${imageKey}-url)` : void 0
@@ -5061,13 +5189,9 @@ var formatDate_default = formatDate;
 //#endregion
 //#region src/utils/deriveOrganizationHandleFromBaseUrl.ts
 /**
-* Extracts the organization handle from an ThunderID base URL.
+* Extracts the organization handle from a ThunderID base URL.
 *
-* This function parses ThunderID URLs with the standard pattern:
-* - https://dev.asgardeo.io/t/{orgHandle}
-* - https://stage.asgardeo.io/t/{orgHandle}
-* - https://prod.asgardeo.io/t/{orgHandle}
-* - https://{subdomain}.asgardeo.io/t/{orgHandle}
+* Parses URLs following the `/t/{orgHandle}` pattern.
 *
 * @param baseUrl - The base URL of the ThunderID identity server
 * @returns The extracted organization handle
@@ -5076,13 +5200,9 @@ var formatDate_default = formatDate;
 *
 * @example
 * ```typescript
-* // Standard ThunderID URLs
-* const handle1 = deriveOrganizationHandleFromBaseUrl('https://dev.asgardeo.io/t/dxlab');
+* const handle = deriveOrganizationHandleFromBaseUrl('https://localhost:8090/t/dxlab');
 * // Returns: 'dxlab'
 *
-* const handle2 = deriveOrganizationHandleFromBaseUrl('https://stage.asgardeo.io/t/myorg');
-* // Returns: 'myorg'
-*
 * // Custom domain - returns empty string with a warning
 * const handle2 = deriveOrganizationHandleFromBaseUrl('https://custom.example.com/auth');
 * // Returns: '' and logs a warning
@@ -5907,7 +6027,7 @@ var withVendorCSSClassPrefix_default = withVendorCSSClassPrefix;
 //#endregion
 //#region src/utils/transformBrandingPreferenceToTheme.ts
 const extractColorValue = (colorVariant, preferDark = false) => {
-	if (preferDark && colorVariant?.dark && colorVariant.dark.trim()) return colorVariant.dark;
+	if (preferDark && colorVariant?.dark?.trim()) return colorVariant.dark;
 	return colorVariant?.main;
 };
 /**
@@ -5940,47 +6060,47 @@ const transformThemeVariant = (themeVariant, isDark = false) => {
 			background: {
 				body: {
 					dark: (colors?.background?.body)?.dark || (colors?.background?.body)?.main,
-					main: extractColorValue(colors?.background?.body, isDark)
+					main: extractColorValue(colors?.background?.body, isDark) ?? ""
 				},
 				dark: (colors?.background?.surface)?.dark || (colors?.background?.surface)?.main,
-				disabled: extractColorValue(colors?.background?.surface, isDark),
-				surface: extractColorValue(colors?.background?.surface, isDark)
+				disabled: extractColorValue(colors?.background?.surface, isDark) ?? "",
+				surface: extractColorValue(colors?.background?.surface, isDark) ?? ""
 			},
-			border: colors?.outlined?.default,
+			border: colors?.outlined?.default ?? "",
 			error: {
-				contrastText: extractContrastText(colors?.alerts?.error),
+				contrastText: extractContrastText(colors?.alerts?.error) ?? "",
 				dark: (colors?.alerts?.error)?.dark || (colors?.alerts?.error)?.main,
-				main: extractColorValue(colors?.alerts?.error, isDark)
+				main: extractColorValue(colors?.alerts?.error, isDark) ?? ""
 			},
 			info: {
-				contrastText: extractContrastText(colors?.alerts?.info),
+				contrastText: extractContrastText(colors?.alerts?.info) ?? "",
 				dark: (colors?.alerts?.info)?.dark || (colors?.alerts?.info)?.main,
-				main: extractColorValue(colors?.alerts?.info, isDark)
+				main: extractColorValue(colors?.alerts?.info, isDark) ?? ""
 			},
 			primary: {
-				contrastText: extractContrastText(colors?.primary),
+				contrastText: extractContrastText(colors?.primary) ?? "",
 				dark: colors?.primary?.dark || (colors?.primary)?.main,
-				main: extractColorValue(colors?.primary, isDark)
+				main: extractColorValue(colors?.primary, isDark) ?? ""
 			},
 			secondary: {
-				contrastText: extractContrastText(colors?.secondary),
+				contrastText: extractContrastText(colors?.secondary) ?? "",
 				dark: colors?.secondary?.dark || (colors?.secondary)?.main,
-				main: extractColorValue(colors?.secondary, isDark)
+				main: extractColorValue(colors?.secondary, isDark) ?? ""
 			},
 			success: {
-				contrastText: extractContrastText(colors?.alerts?.neutral),
+				contrastText: extractContrastText(colors?.alerts?.neutral) ?? "",
 				dark: (colors?.alerts?.neutral)?.dark || (colors?.alerts?.neutral)?.main,
-				main: extractColorValue(colors?.alerts?.neutral, isDark)
+				main: extractColorValue(colors?.alerts?.neutral, isDark) ?? ""
 			},
 			text: {
 				dark: (colors?.text)?.dark || (colors?.text)?.primary,
-				primary: (colors?.text)?.primary,
-				secondary: (colors?.text)?.secondary
+				primary: (colors?.text)?.primary ?? "",
+				secondary: (colors?.text)?.secondary ?? ""
 			},
 			warning: {
-				contrastText: extractContrastText(colors?.alerts?.warning),
+				contrastText: extractContrastText(colors?.alerts?.warning) ?? "",
 				dark: (colors?.alerts?.warning)?.dark || (colors?.alerts?.warning)?.main,
-				main: extractColorValue(colors?.alerts?.warning, isDark)
+				main: extractColorValue(colors?.alerts?.warning, isDark) ?? ""
 			}
 		},
 		images: {
@@ -6118,7 +6238,7 @@ var HttpClient = class HttpClient {
 		return (array) => callback(...array);
 	}
 	async requestHandler(config) {
-		await this.attachToken(config);
+		if (config.attachToken !== false) await this.attachToken(config);
 		if (config.shouldEncodeToFormData && config.data) {
 			const formData = new FormData();
 			Object.keys(config.data).forEach((key) => formData.append(key, config.data[key]));