@thunderid/javascript 1.4.0 → 1.5.0

package/dist/utils/AuthenticationHelper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthenticationHelper.d.ts","sourceRoot":"","sources":["../../src/utils/AuthenticationHelper.ts"],"names":[],"mappings":"AAYA,OAAO,EAAC,gBAAgB,EAAC,MAAM,qBAAqB,CAAC;AAGrD,OAAO,EAAC,iBAAiB,EAAC,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAC,iCAAiC,EAAE,wBAAwB,EAAC,MAAM,0BAA0B,CAAC;AAErG,OAAO,EAAU,aAAa,EAAyB,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAC,IAAI,EAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,cAAc,MAAM,mBAAmB,CAAC;AAE/C;;;;;GAKG;AACH,cAAM,oBAAoB,CAAC,CAAC;IAC1B,OAAO,CAAC,cAAc,CAAoB;IAE1C,OAAO,CAAC,MAAM,CAAqC;IAEnD,OAAO,CAAC,oBAAoB,CAA0C;IAEtE,OAAO,CAAC,YAAY,CAAmB;IAEvC,OAAO,CAAC,SAAS,CAAwD;IAIzE,OAAO,CAAC,SAAS,CAAsC;IAEvD,OAAO,CAAC,kBAAkB,CAAK;IAE/B;;;;;OAKG;gBACgB,sBAAsB,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,gBAAgB;IAQpG;;;;;;;;;OASG;IACH,OAAO,CAAC,0BAA0B;IAkBlC;;;;;;OAMG;IACU,gBAAgB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAMpG;;;;;;OAMG;IACU,0BAA0B,IAAI,OAAO,CAAC,iCAAiC,CAAC;IAwCrF;;;;;;;OAOG;IACU,yBAAyB,IAAI,OAAO,CAAC,iCAAiC,CAAC;IAkCpF;;;;;;OAMG;IACU,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiB/D;;;;;;;;OAQG;IACU,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA2CjF;;;;;OAKG;YACW,YAAY;IAiC1B;;OAEG;IACH,OAAO,CAAC,aAAa;IAiBrB;;;;OAIG;YACW,SAAS;IA0CvB;;;;;OAKG;IACI,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAetD;;;;;;;OAOG;IACU,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA6C3F;;;;OAIG;IACU,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzD;;;;;;;;OAQG;IACU,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CA2C9F;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"AuthenticationHelper.d.ts","sourceRoot":"","sources":["../../src/utils/AuthenticationHelper.ts"],"names":[],"mappings":"AAYA,OAAO,EAAC,gBAAgB,EAAC,MAAM,qBAAqB,CAAC;AAGrD,OAAO,EAAC,iBAAiB,EAAC,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAC,iCAAiC,EAAE,wBAAwB,EAAC,MAAM,0BAA0B,CAAC;AAErG,OAAO,EAAU,aAAa,EAAyB,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAC,IAAI,EAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,cAAc,MAAM,mBAAmB,CAAC;AAE/C;;;;;GAKG;AACH,cAAM,oBAAoB,CAAC,CAAC;IAC1B,OAAO,CAAC,cAAc,CAAoB;IAE1C,OAAO,CAAC,MAAM,CAAqC;IAEnD,OAAO,CAAC,oBAAoB,CAA0C;IAEtE,OAAO,CAAC,YAAY,CAAmB;IAEvC,OAAO,CAAC,SAAS,CAAwD;IAIzE,OAAO,CAAC,SAAS,CAAsC;IAEvD,OAAO,CAAC,kBAAkB,CAAK;IAE/B;;;;;OAKG;gBACgB,sBAAsB,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,gBAAgB;IAQpG;;;;;;;;;OASG;IACH,OAAO,CAAC,0BAA0B;IAoBlC;;;;;;OAMG;IACU,gBAAgB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAMpG;;;;;;OAMG;IACU,0BAA0B,IAAI,OAAO,CAAC,iCAAiC,CAAC;IAwCrF;;;;;;;OAOG;IACU,yBAAyB,IAAI,OAAO,CAAC,iCAAiC,CAAC;IAkCpF;;;;;;OAMG;IACU,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiB/D;;;;;;;;OAQG;IACU,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA2CjF;;;;;OAKG;YACW,YAAY;IAiC1B;;OAEG;IACH,OAAO,CAAC,aAAa;IAiBrB;;;;OAIG;YACW,SAAS;IA0CvB;;;;;OAKG;IACI,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAetD;;;;;;;OAOG;IACU,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA8C3F;;;;OAIG;IACU,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzD;;;;;;;;OAQG;IACU,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CA2C9F;AAED,eAAe,oBAAoB,CAAC"}

package/dist/utils/base64Encode.d.ts

@@ -1,7 +1,7 @@
 /**
  * Encodes a string to standard base64 using `jose` (already a package dependency).
  *
- * `jose.base64url.encode` is environment-agnostic (browser, Node.js, Deno, Bun,
+ * jose's `base64url.encode` is environment-agnostic (browser, Node.js, Deno, Bun,
  * edge/service-worker runtimes). It produces base64url output, which is then
  * converted to standard base64 by restoring the `+`/`/` characters and adding
  * `=` padding.

package/dist/utils/base64Encode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base64Encode.d.ts","sourceRoot":"","sources":["../../src/utils/base64Encode.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,MAMrC,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"base64Encode.d.ts","sourceRoot":"","sources":["../../src/utils/base64Encode.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,MAMrC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/utils/getAuthorizeRequestUrlParams.d.ts

@@ -5,7 +5,7 @@ import { ExtendedAuthorizeRequestUrlParams } from '../models/oauth-request';
  * This utility ensures the `openid` scope is always included, handles both string and array forms of the `scope` parameter,
  * and supports PKCE and custom parameters. Throws if a code challenge is provided without a code challenge method.
  *
- * @param options - The main options for the authorization request, including redirectUri, clientId, scope, responseMode, codeChallenge, codeChallengeMethod, and prompt.
+ * @param options - The main options for the authorization request, including redirectUri, clientId, scope, responseMode, codeChallenge, codeChallengeMethod, prompt, and randomState (a value generated from random bytes that makes the `state` unique to this request).
  * @param pkceOptions - PKCE options, including the PKCE key for state correlation.
  * @param customParams - Optional custom parameters to include in the request (excluding the `state` param, which is handled separately).
  * @returns A Map of key-value pairs representing the authorization request URL parameters.
@@ -34,6 +34,7 @@ declare const getAuthorizeRequestUrlParams: (options: {
     codeChallengeMethod?: string;
     instanceId?: string;
     prompt?: string;
+    randomState?: string;
     redirectUri: string;
     responseMode?: string;
     scopes?: string;

package/dist/utils/getAuthorizeRequestUrlParams.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getAuthorizeRequestUrlParams.d.ts","sourceRoot":"","sources":["../../src/utils/getAuthorizeRequestUrlParams.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,iCAAiC,EAAC,MAAM,yBAAyB,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,QAAA,MAAM,4BAA4B,GAChC,SAAS;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,iCAAiC,EACrC,aAAa;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,EAC1B,cAAc,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,KACtD,GAAG,CAAC,MAAM,EAAE,MAAM,CA8DpB,CAAC;AAEF,eAAe,4BAA4B,CAAC"}
+{"version":3,"file":"getAuthorizeRequestUrlParams.d.ts","sourceRoot":"","sources":["../../src/utils/getAuthorizeRequestUrlParams.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,iCAAiC,EAAC,MAAM,yBAAyB,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,QAAA,MAAM,4BAA4B,GAChC,SAAS;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,iCAAiC,EACrC,aAAa;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,EAC1B,cAAc,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,KACtD,GAAG,CAAC,MAAM,EAAE,MAAM,CAoEpB,CAAC;AAEF,eAAe,4BAA4B,CAAC"}

package/dist/utils/getOAuthErrorMessage.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Builds a readable message from the body of an OAuth 2.0 error response (RFC 6749 section 5.2).
+ *
+ * Only the `error` and `error_description` members are read, so nothing else in the body, such as
+ * a token, can end up in the message.
+ *
+ * @param body - The parsed response body, or its raw text.
+ * @param fallback - The message to use when the body carries neither member.
+ * @returns `"<error>: <error_description>"`, whichever of the two is present, or `fallback`.
+ *
+ * @example
+ * getOAuthErrorMessage({error: 'invalid_grant', error_description: 'The code has expired.'}, 'Failed');
+ * // Returns: "invalid_grant: The code has expired."
+ */
+declare const getOAuthErrorMessage: (body: unknown, fallback: string) => string;
+export default getOAuthErrorMessage;
+//# sourceMappingURL=getOAuthErrorMessage.d.ts.map

package/dist/utils/getOAuthErrorMessage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getOAuthErrorMessage.d.ts","sourceRoot":"","sources":["../../src/utils/getOAuthErrorMessage.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,oBAAoB,GAAI,MAAM,OAAO,EAAE,UAAU,MAAM,KAAG,MAqB/D,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/dist/utils/resolveBackendEndpoints.d.ts

@@ -0,0 +1,27 @@
+import { BackendEndpoints, ResolvedBackendEndpoints } from '../models/backend';
+/**
+ * Minimal shape of the config needed to resolve the backend endpoints.
+ */
+export interface BackendEndpointConfig {
+    baseUrl?: string;
+    endpoints?: {
+        backend?: BackendEndpoints;
+    };
+}
+/**
+ * Resolves the backend endpoints from `endpoints.backend`, or returns `undefined` when it is not set
+ * and sign-in does not run on a backend.
+ *
+ * @param config - The client config.
+ * @param origin - The app's origin, used as the API base when `baseUrl` is not set.
+ * @returns The resolved endpoints, or `undefined` when `endpoints.backend` is not set.
+ *
+ * @example
+ * ```typescript
+ * resolveBackendEndpoints({endpoints: {backend: {signIn: '/auth/signin'}}}, window.location.origin);
+ * // {signIn: '/auth/signin', session: '/api/auth/session', ..., apiBaseUrl: 'https://...'}
+ * ```
+ */
+declare const resolveBackendEndpoints: (config: BackendEndpointConfig | undefined, origin: string) => ResolvedBackendEndpoints | undefined;
+export default resolveBackendEndpoints;
+//# sourceMappingURL=resolveBackendEndpoints.d.ts.map

package/dist/utils/resolveBackendEndpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveBackendEndpoints.d.ts","sourceRoot":"","sources":["../../src/utils/resolveBackendEndpoints.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,gBAAgB,EAAE,wBAAwB,EAAC,MAAM,mBAAmB,CAAC;AAI7E;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE;QAAC,OAAO,CAAC,EAAE,gBAAgB,CAAA;KAAC,CAAC;CAC1C;AAED;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,uBAAuB,GAC3B,QAAQ,qBAAqB,GAAG,SAAS,EACzC,QAAQ,MAAM,KACb,wBAAwB,GAAG,SAuB7B,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/javascript",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "JavaScript Ecosystem SDK for ThunderID",
   "keywords": [
     "thunderid",