@thunderid/nextjs 0.10.1 → 0.10.3

package/dist/ThunderIDNextClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDNextClient.d.ts","sourceRoot":"","sources":["../src/ThunderIDNextClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,mBAAmB,EAInB,iCAAiC,EACjC,OAAO,EACP,aAAa,EACb,aAAa,EACb,OAAO,EACP,0BAA0B,EAC1B,aAAa,EACb,IAAI,EACJ,WAAW,EAMZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAC,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AAKpD,cAAM,mBAAmB,CAAC,CAAC,SAAS,mBAAmB,GAAG,mBAAmB,CAAE,SAAQ,mBAAmB,CAAC,CAAC,CAAC;IACpG,aAAa,UAAS;;YAMf,iBAAiB;IAehB,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAwC1D,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAclD,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBvC,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IA0BrD,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBrE,SAAS,IAAI,OAAO;IAIpB,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIhD,aAAa,CAAC,MAAM,EAAE,0BAA0B,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC;IAKlG,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBpD,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzE,MAAM,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IA6BpC,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IA4BxC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrD,cAAc,CAAC,QAAQ,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;IAS7D,sBAAsB,CACjC,YAAY,EAAE,iCAAiC,EAC/C,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC;IAKF,iBAAiB,IAAI,GAAG;IAIlB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IASpC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzF,cAAc,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAGhF;AAED,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"ThunderIDNextClient.d.ts","sourceRoot":"","sources":["../src/ThunderIDNextClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,mBAAmB,EAInB,iCAAiC,EACjC,OAAO,EACP,aAAa,EACb,aAAa,EACb,OAAO,EACP,0BAA0B,EAC1B,aAAa,EACb,IAAI,EACJ,WAAW,EAOZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAC,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AAKpD,cAAM,mBAAmB,CAAC,CAAC,SAAS,mBAAmB,GAAG,mBAAmB,CAAE,SAAQ,mBAAmB,CAAC,CAAC,CAAC;IACpG,aAAa,UAAS;;YAMf,iBAAiB;IAehB,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAwC1D,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAclD,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBvC,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IA2BrD,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBrE,SAAS,IAAI,OAAO;IAIpB,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIhD,aAAa,CAAC,MAAM,EAAE,0BAA0B,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC;IAKlG,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBpD,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzE,MAAM,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IA6BpC,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IA4BxC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrD,cAAc,CAAC,QAAQ,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;IAS7D,sBAAsB,CACjC,YAAY,EAAE,iCAAiC,EAC/C,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC;IAKF,iBAAiB,IAAI,GAAG;IAIlB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IASpC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzF,cAAc,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAGhF;AAED,eAAe,mBAAmB,CAAC"}

package/dist/ThunderIDNextClient.js

@@ -1,7 +1,7 @@
 import getClientOrigin_default from "./server/actions/getClientOrigin.js";
 import getSessionId_default from "./server/actions/getSessionId.js";
 import decorateConfigWithNextEnv_default from "./utils/decorateConfigWithNextEnv.js";
-import { ThunderIDNodeClient, ThunderIDRuntimeError, executeEmbeddedSignInFlow, extractUserClaimsFromIdToken, generateFlattenedUserProfile, getUsersMe, updateMeProfile } from "@thunderid/node";
+import { ThunderIDNodeClient, ThunderIDRuntimeError, executeEmbeddedSignInFlow, extractUserClaimsFromIdToken, generateFlattenedUserProfile, getUsersMe, resolveResourceEndpoint, updateMeProfile } from "@thunderid/node";
 
 //#region src/ThunderIDNextClient.ts
 var ThunderIDNextClient = class extends ThunderIDNodeClient {
@@ -44,9 +44,11 @@ var ThunderIDNextClient = class extends ThunderIDNodeClient {
 		await this.ensureInitialized();
 		const resolvedSessionId = userId || await getSessionId_default();
 		try {
-			const baseUrl = (await this.getStorageManager().getConfigData())?.baseUrl;
+			const configData = await this.getStorageManager().getConfigData();
+			const baseUrl = configData?.baseUrl;
 			return await getUsersMe({
 				baseUrl,
+				url: resolveResourceEndpoint("usersMe", configData),
 				headers: { Authorization: `Bearer ${await this.getAccessToken(userId)}` }
 			});
 		} catch (error) {
@@ -56,9 +58,11 @@ var ThunderIDNextClient = class extends ThunderIDNodeClient {
 	async getUserProfile(userId) {
 		await this.ensureInitialized();
 		try {
-			const baseUrl = (await this.getStorageManager().getConfigData())?.baseUrl;
+			const configData = await this.getStorageManager().getConfigData();
+			const baseUrl = configData?.baseUrl;
 			const profile = await getUsersMe({
 				baseUrl,
+				url: resolveResourceEndpoint("usersMe", configData),
 				headers: { Authorization: `Bearer ${await this.getAccessToken(userId)}` }
 			});
 			return {
@@ -75,9 +79,11 @@ var ThunderIDNextClient = class extends ThunderIDNodeClient {
 	async updateUserProfile(payload, userId) {
 		await this.ensureInitialized();
 		try {
-			const baseUrl = (await this.getStorageManager().getConfigData())?.baseUrl;
+			const configData = await this.getStorageManager().getConfigData();
+			const baseUrl = configData?.baseUrl;
 			return updateMeProfile({
 				baseUrl,
+				url: resolveResourceEndpoint("usersMe", configData),
 				headers: { Authorization: `Bearer ${await this.getAccessToken(userId)}` },
 				payload: payload?.payload ?? payload
 			});
@@ -111,11 +117,12 @@ var ThunderIDNextClient = class extends ThunderIDNodeClient {
 		const arg4 = args[3];
 		if (typeof arg1 === "object" && arg1 !== null && ("executionId" in arg1 || "applicationId" in arg1)) {
 			await this.ensureInitialized();
+			const configData = await this.getStorageManager().getConfigData();
 			return executeEmbeddedSignInFlow({
-				baseUrl: (await this.getStorageManager().getConfigData())?.baseUrl,
+				baseUrl: configData?.baseUrl,
 				flowSecret: arg2?.flowSecret,
 				payload: arg1,
-				url: arg2?.url
+				url: resolveResourceEndpoint("flowExecute", configData, arg2?.url)
 			});
 		}
 		return super.signIn(arg4, arg3, arg1?.code, arg1?.session_state, arg1?.state, arg1);

package/dist/ThunderIDNextClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDNextClient.js","names":["decorateConfigWithNextEnv","origin: string","getClientOrigin","initialized: boolean","resolvedSessionId: string","getSessionId","baseUrl: string | undefined","profile: User","token: string | undefined","arg1: any","arg2: any","arg3: any","arg4: any","afterSignOutUrl: string","message: string"],"sources":["../src/ThunderIDNextClient.ts"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  ThunderIDNodeClient,\n  ThunderIDRuntimeError,\n  AuthClientConfig,\n  EmbeddedSignInFlowResponse,\n  ExtendedAuthorizeRequestUrlParams,\n  IdToken,\n  SignInOptions,\n  SignUpOptions,\n  Storage,\n  TokenExchangeRequestConfig,\n  TokenResponse,\n  User,\n  UserProfile,\n  executeEmbeddedSignInFlow,\n  extractUserClaimsFromIdToken,\n  generateFlattenedUserProfile,\n  getUsersMe,\n  updateMeProfile,\n} from '@thunderid/node';\nimport {ThunderIDNextConfig} from './models/config';\nimport getClientOrigin from './server/actions/getClientOrigin';\nimport getSessionId from './server/actions/getSessionId';\nimport decorateConfigWithNextEnv from './utils/decorateConfigWithNextEnv';\n\nclass ThunderIDNextClient<T extends ThunderIDNextConfig = ThunderIDNextConfig> extends ThunderIDNodeClient<T> {\n  public isInitialized = false;\n\n  public constructor() {\n    super();\n  }\n\n  private async ensureInitialized(): Promise<void> {\n    if (!this.isInitialized) {\n      // Server actions may run in a module context that hasn't been through\n      // ThunderIDServerProvider (e.g. a different worker). Try to initialize\n      // from environment variables before giving up.\n      await this.initialize({} as T);\n    }\n\n    if (!this.isInitialized) {\n      throw new Error(\n        '[ThunderIDNextClient] Client is not initialized. Make sure you have wrapped your app with ThunderIDProvider and provided the required configuration (baseUrl, clientId, etc.).',\n      );\n    }\n  }\n\n  override async initialize(config: T, storage?: Storage): Promise<boolean> {\n    if (this.isInitialized) {\n      return Promise.resolve(true);\n    }\n\n    const {\n      baseUrl,\n      organizationHandle,\n      clientId,\n      clientSecret,\n      signInUrl,\n      afterSignInUrl,\n      afterSignOutUrl,\n      signUpUrl,\n      ...rest\n    } = decorateConfigWithNextEnv(config);\n\n    const origin: string = await getClientOrigin();\n\n    const initialized: boolean = await super.initialize(\n      {\n        ...rest,\n        afterSignInUrl: afterSignInUrl ?? origin,\n        afterSignOutUrl: afterSignOutUrl ?? origin,\n        baseUrl,\n        clientId,\n        clientSecret,\n        enablePKCE: (rest as any).enablePKCE ?? true,\n        organizationHandle,\n        signInUrl,\n        signUpUrl,\n      } as any,\n      storage,\n    );\n\n    this.isInitialized = initialized;\n\n    return initialized;\n  }\n\n  override async reInitialize(config: Partial<T>): Promise<boolean> {\n    try {\n      await super.reInitialize(config);\n      return true;\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Failed to re-initialize the client: ${error instanceof Error ? error.message : String(error)}`,\n        'ThunderIDNextClient-reInitialize-RuntimeError-001',\n        'nextjs',\n        'An error occurred while re-initializing the client. Please check your configuration and network connection.',\n      );\n    }\n  }\n\n  override async getUser(userId?: string): Promise<User> {\n    await this.ensureInitialized();\n    const resolvedSessionId: string = userId || (await getSessionId())!;\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      const profile: User = await getUsersMe({\n        baseUrl,\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n      });\n\n      return profile;\n    } catch (error) {\n      return await super.getUser(resolvedSessionId);\n    }\n  }\n\n  override async getUserProfile(userId?: string): Promise<UserProfile> {\n    await this.ensureInitialized();\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      const profile: User = await getUsersMe({\n        baseUrl,\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n      });\n\n      return {\n        flattenedProfile: generateFlattenedUserProfile(profile),\n        profile,\n      };\n    } catch (error) {\n      return {\n        flattenedProfile: extractUserClaimsFromIdToken(await super.getDecodedIdToken(userId)),\n        profile: extractUserClaimsFromIdToken(await super.getDecodedIdToken(userId)),\n      };\n    }\n  }\n\n  override async updateUserProfile(payload: any, userId?: string): Promise<User> {\n    await this.ensureInitialized();\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      return updateMeProfile({\n        baseUrl,\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n        payload: payload?.payload ?? payload,\n      });\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Failed to update user profile: ${error instanceof Error ? error.message : String(error)}`,\n        'ThunderIDNextClient-UpdateProfileError-001',\n        'react',\n        'An error occurred while updating the user profile. Please check your configuration and network connection.',\n      );\n    }\n  }\n\n  override isLoading(): boolean {\n    return false;\n  }\n\n  override isSignedIn(sessionId?: string): Promise<boolean> {\n    return super.isSignedIn(sessionId);\n  }\n\n  override exchangeToken(config: TokenExchangeRequestConfig, sessionId?: string): Promise<TokenResponse | Response> {\n    return super.exchangeToken(config, sessionId) as unknown as Promise<TokenResponse | Response>;\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  override async getAccessToken(_sessionId?: string): Promise<string> {\n    const {default: getAccessToken} = await import('./server/actions/getAccessToken');\n    const token: string | undefined = await getAccessToken();\n\n    if (typeof token !== 'string' || !token) {\n      throw new ThunderIDRuntimeError(\n        'Failed to get access token.',\n        'ThunderIDNextClient-getAccessToken-RuntimeError-003',\n        'nextjs',\n        'An error occurred while obtaining the access token. Please check your configuration and network connection.',\n      );\n    }\n\n    return token;\n  }\n\n  override async getDecodedIdToken(sessionId?: string, idToken?: string): Promise<IdToken> {\n    await this.ensureInitialized();\n    return await super.getDecodedIdToken(sessionId, idToken);\n  }\n\n  override async signIn(...args: any[]): Promise<any> {\n    const arg1: any = args[0];\n    const arg2: any = args[1];\n    const arg3: any = args[2];\n    const arg4: any = args[3];\n\n    // An embedded sign-in flow payload initiates or continues a `POST /flow/execute` step\n    // (identified by `applicationId` for a new flow or `executionId` to continue one). This is\n    // distinct from the OAuth authorization_code exchange handled by `super.signIn` below, which\n    // is used once the embedded flow completes and returns an authorization code.\n    const isEmbeddedFlowPayload: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    if (isEmbeddedFlowPayload) {\n      await this.ensureInitialized();\n\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n\n      return executeEmbeddedSignInFlow({\n        baseUrl: configData?.baseUrl,\n        flowSecret: arg2?.flowSecret,\n        payload: arg1,\n        url: arg2?.url,\n      }) as unknown as Promise<EmbeddedSignInFlowResponse>;\n    }\n\n    return super.signIn(arg4, arg3, arg1?.code, arg1?.session_state, arg1?.state, arg1) as unknown as Promise<User>;\n  }\n\n  override async signOut(...args: any[]): Promise<string> {\n    if (args[1] && typeof args[1] !== 'string') {\n      throw new Error('The second argument must be a string.');\n    }\n\n    const config: T = this.getConfiguration();\n    const afterSignOutUrl: string = config?.afterSignOutUrl || '/';\n\n    const resolvedSessionId: string = args[1] || (await getSessionId())!;\n\n    try {\n      await (super.signOut as (...a: any[]) => Promise<string>)(resolvedSessionId);\n    } catch (error) {\n      const message: string = error instanceof Error ? error.message : String(error);\n\n      if (\n        !message.includes('end_session_endpoint') &&\n        !message.includes('sign-out endpoint') &&\n        !message.includes('Sign-out endpoint') &&\n        !message.includes('Sign-out redirect URL')\n      ) {\n        throw error;\n      }\n    }\n\n    return afterSignOutUrl;\n  }\n\n  override async signUp(_options?: SignUpOptions): Promise<void> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-ValidationError-002',\n      'nextjs',\n      'The signUp method is not implemented in the Next.js client.',\n    );\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  override signInSilently(_options?: SignInOptions): Promise<User | boolean> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-signInSilently-NotImplementedError-001',\n      'nextjs',\n      'The signInSilently method is not implemented in the Next.js client.',\n    );\n  }\n\n  public async getAuthorizeRequestUrl(\n    customParams: ExtendedAuthorizeRequestUrlParams,\n    userId?: string,\n  ): Promise<string> {\n    await this.ensureInitialized();\n    return this.getSignInUrl(customParams, userId);\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  public override async clearSession(): Promise<void> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-clearSession-NotImplementedError-001',\n      'nextjs',\n      'The clearSession method is not implemented in the Next.js client.',\n    );\n  }\n\n  override async setSession(sessionData: Record<string, unknown>, sessionId?: string): Promise<void> {\n    return this.getStorageManager().setSessionData(sessionData, sessionId);\n  }\n\n  override decodeJwtToken<R = Record<string, unknown>>(token: string): Promise<R> {\n    return super.decodeJwtToken<R>(token);\n  }\n}\n\nexport default ThunderIDNextClient;\n"],"mappings":";;;;;;AA2CA,IAAM,sBAAN,cAAuF,oBAAuB;CAC5G,AAAO,gBAAgB;CAEvB,AAAO,cAAc;AACnB,SAAO;;CAGT,MAAc,oBAAmC;AAC/C,MAAI,CAAC,KAAK,cAIR,OAAM,KAAK,WAAW,EAAE,CAAM;AAGhC,MAAI,CAAC,KAAK,cACR,OAAM,IAAI,MACR,iLACD;;CAIL,MAAe,WAAW,QAAW,SAAqC;AACxE,MAAI,KAAK,cACP,QAAO,QAAQ,QAAQ,KAAK;EAG9B,MAAM,EACJ,SACA,oBACA,UACA,cACA,WACA,gBACA,iBACA,UACA,GAAG,SACDA,kCAA0B,OAAO;EAErC,MAAMC,SAAiB,MAAMC,yBAAiB;EAE9C,MAAMC,cAAuB,MAAM,MAAM,WACvC;GACE,GAAG;GACH,gBAAgB,kBAAkB;GAClC,iBAAiB,mBAAmB;GACpC;GACA;GACA;GACA,YAAa,KAAa,cAAc;GACxC;GACA;GACA;GACD,EACD,QACD;AAED,OAAK,gBAAgB;AAErB,SAAO;;CAGT,MAAe,aAAa,QAAsC;AAChE,MAAI;AACF,SAAM,MAAM,aAAa,OAAO;AAChC,UAAO;WACA,OAAO;AACd,SAAM,IAAI,sBACR,uCAAuC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IAC7F,qDACA,UACA,8GACD;;;CAIL,MAAe,QAAQ,QAAgC;AACrD,QAAM,KAAK,mBAAmB;EAC9B,MAAMC,oBAA4B,UAAW,MAAMC,sBAAc;AAEjE,MAAI;GAEF,MAAMC,WADkC,MAAM,KAAK,mBAAmB,CAAC,eAAe,GACtC;AAShD,UAPsB,MAAM,WAAW;IACrC;IACA,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACF,CAAC;WAGK,OAAO;AACd,UAAO,MAAM,MAAM,QAAQ,kBAAkB;;;CAIjD,MAAe,eAAe,QAAuC;AACnE,QAAM,KAAK,mBAAmB;AAE9B,MAAI;GAEF,MAAMA,WADkC,MAAM,KAAK,mBAAmB,CAAC,eAAe,GACtC;GAEhD,MAAMC,UAAgB,MAAM,WAAW;IACrC;IACA,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACF,CAAC;AAEF,UAAO;IACL,kBAAkB,6BAA6B,QAAQ;IACvD;IACD;WACM,OAAO;AACd,UAAO;IACL,kBAAkB,6BAA6B,MAAM,MAAM,kBAAkB,OAAO,CAAC;IACrF,SAAS,6BAA6B,MAAM,MAAM,kBAAkB,OAAO,CAAC;IAC7E;;;CAIL,MAAe,kBAAkB,SAAc,QAAgC;AAC7E,QAAM,KAAK,mBAAmB;AAE9B,MAAI;GAEF,MAAMD,WADkC,MAAM,KAAK,mBAAmB,CAAC,eAAe,GACtC;AAEhD,UAAO,gBAAgB;IACrB;IACA,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACD,SAAS,SAAS,WAAW;IAC9B,CAAC;WACK,OAAO;AACd,SAAM,IAAI,sBACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACxF,8CACA,SACA,6GACD;;;CAIL,AAAS,YAAqB;AAC5B,SAAO;;CAGT,AAAS,WAAW,WAAsC;AACxD,SAAO,MAAM,WAAW,UAAU;;CAGpC,AAAS,cAAc,QAAoC,WAAuD;AAChH,SAAO,MAAM,cAAc,QAAQ,UAAU;;CAI/C,MAAe,eAAe,YAAsC;EAClE,MAAM,EAAC,SAAS,mBAAkB,MAAM,OAAO;EAC/C,MAAME,QAA4B,MAAM,gBAAgB;AAExD,MAAI,OAAO,UAAU,YAAY,CAAC,MAChC,OAAM,IAAI,sBACR,+BACA,uDACA,UACA,8GACD;AAGH,SAAO;;CAGT,MAAe,kBAAkB,WAAoB,SAAoC;AACvF,QAAM,KAAK,mBAAmB;AAC9B,SAAO,MAAM,MAAM,kBAAkB,WAAW,QAAQ;;CAG1D,MAAe,OAAO,GAAG,MAA2B;EAClD,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;AASvB,MAFE,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB,OAEjE;AACzB,SAAM,KAAK,mBAAmB;AAI9B,UAAO,0BAA0B;IAC/B,UAHsC,MAAM,KAAK,mBAAmB,CAAC,eAAe,GAG/D;IACrB,YAAY,MAAM;IAClB,SAAS;IACT,KAAK,MAAM;IACZ,CAAC;;AAGJ,SAAO,MAAM,OAAO,MAAM,MAAM,MAAM,MAAM,MAAM,eAAe,MAAM,OAAO,KAAK;;CAGrF,MAAe,QAAQ,GAAG,MAA8B;AACtD,MAAI,KAAK,MAAM,OAAO,KAAK,OAAO,SAChC,OAAM,IAAI,MAAM,wCAAwC;EAI1D,MAAMC,kBADY,KAAK,kBAAkB,EACD,mBAAmB;EAE3D,MAAMT,oBAA4B,KAAK,MAAO,MAAMC,sBAAc;AAElE,MAAI;AACF,SAAO,MAAM,QAA6C,kBAAkB;WACrE,OAAO;GACd,MAAMS,UAAkB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAE9E,OACE,CAAC,QAAQ,SAAS,uBAAuB,IACzC,CAAC,QAAQ,SAAS,oBAAoB,IACtC,CAAC,QAAQ,SAAS,oBAAoB,IACtC,CAAC,QAAQ,SAAS,wBAAwB,CAE1C,OAAM;;AAIV,SAAO;;CAGT,MAAe,OAAO,UAAyC;AAC7D,QAAM,IAAI,sBACR,mBACA,2CACA,UACA,8DACD;;CAIH,AAAS,eAAe,UAAmD;AACzE,QAAM,IAAI,sBACR,mBACA,8DACA,UACA,sEACD;;CAGH,MAAa,uBACX,cACA,QACiB;AACjB,QAAM,KAAK,mBAAmB;AAC9B,SAAO,KAAK,aAAa,cAAc,OAAO;;CAGhD,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAsB,eAA8B;AAClD,QAAM,IAAI,sBACR,mBACA,4DACA,UACA,oEACD;;CAGH,MAAe,WAAW,aAAsC,WAAmC;AACjG,SAAO,KAAK,mBAAmB,CAAC,eAAe,aAAa,UAAU;;CAGxE,AAAS,eAA4C,OAA2B;AAC9E,SAAO,MAAM,eAAkB,MAAM;;;AAIzC,kCAAe"}
+{"version":3,"file":"ThunderIDNextClient.js","names":["decorateConfigWithNextEnv","origin: string","getClientOrigin","initialized: boolean","resolvedSessionId: string","getSessionId","configData: AuthClientConfig<T>","baseUrl: string | undefined","profile: User","token: string | undefined","arg1: any","arg2: any","arg3: any","arg4: any","afterSignOutUrl: string","message: string"],"sources":["../src/ThunderIDNextClient.ts"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  ThunderIDNodeClient,\n  ThunderIDRuntimeError,\n  AuthClientConfig,\n  EmbeddedSignInFlowResponse,\n  ExtendedAuthorizeRequestUrlParams,\n  IdToken,\n  SignInOptions,\n  SignUpOptions,\n  Storage,\n  TokenExchangeRequestConfig,\n  TokenResponse,\n  User,\n  UserProfile,\n  executeEmbeddedSignInFlow,\n  extractUserClaimsFromIdToken,\n  generateFlattenedUserProfile,\n  getUsersMe,\n  updateMeProfile,\n  resolveResourceEndpoint,\n} from '@thunderid/node';\nimport {ThunderIDNextConfig} from './models/config';\nimport getClientOrigin from './server/actions/getClientOrigin';\nimport getSessionId from './server/actions/getSessionId';\nimport decorateConfigWithNextEnv from './utils/decorateConfigWithNextEnv';\n\nclass ThunderIDNextClient<T extends ThunderIDNextConfig = ThunderIDNextConfig> extends ThunderIDNodeClient<T> {\n  public isInitialized = false;\n\n  public constructor() {\n    super();\n  }\n\n  private async ensureInitialized(): Promise<void> {\n    if (!this.isInitialized) {\n      // Server actions may run in a module context that hasn't been through\n      // ThunderIDServerProvider (e.g. a different worker). Try to initialize\n      // from environment variables before giving up.\n      await this.initialize({} as T);\n    }\n\n    if (!this.isInitialized) {\n      throw new Error(\n        '[ThunderIDNextClient] Client is not initialized. Make sure you have wrapped your app with ThunderIDProvider and provided the required configuration (baseUrl, clientId, etc.).',\n      );\n    }\n  }\n\n  override async initialize(config: T, storage?: Storage): Promise<boolean> {\n    if (this.isInitialized) {\n      return Promise.resolve(true);\n    }\n\n    const {\n      baseUrl,\n      organizationHandle,\n      clientId,\n      clientSecret,\n      signInUrl,\n      afterSignInUrl,\n      afterSignOutUrl,\n      signUpUrl,\n      ...rest\n    } = decorateConfigWithNextEnv(config);\n\n    const origin: string = await getClientOrigin();\n\n    const initialized: boolean = await super.initialize(\n      {\n        ...rest,\n        afterSignInUrl: afterSignInUrl ?? origin,\n        afterSignOutUrl: afterSignOutUrl ?? origin,\n        baseUrl,\n        clientId,\n        clientSecret,\n        enablePKCE: (rest as any).enablePKCE ?? true,\n        organizationHandle,\n        signInUrl,\n        signUpUrl,\n      } as any,\n      storage,\n    );\n\n    this.isInitialized = initialized;\n\n    return initialized;\n  }\n\n  override async reInitialize(config: Partial<T>): Promise<boolean> {\n    try {\n      await super.reInitialize(config);\n      return true;\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Failed to re-initialize the client: ${error instanceof Error ? error.message : String(error)}`,\n        'ThunderIDNextClient-reInitialize-RuntimeError-001',\n        'nextjs',\n        'An error occurred while re-initializing the client. Please check your configuration and network connection.',\n      );\n    }\n  }\n\n  override async getUser(userId?: string): Promise<User> {\n    await this.ensureInitialized();\n    const resolvedSessionId: string = userId || (await getSessionId())!;\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      const profile: User = await getUsersMe({\n        baseUrl,\n        url: resolveResourceEndpoint('usersMe', configData),\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n      });\n\n      return profile;\n    } catch (error) {\n      return await super.getUser(resolvedSessionId);\n    }\n  }\n\n  override async getUserProfile(userId?: string): Promise<UserProfile> {\n    await this.ensureInitialized();\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      const profile: User = await getUsersMe({\n        baseUrl,\n        url: resolveResourceEndpoint('usersMe', configData),\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n      });\n\n      return {\n        flattenedProfile: generateFlattenedUserProfile(profile),\n        profile,\n      };\n    } catch (error) {\n      return {\n        flattenedProfile: extractUserClaimsFromIdToken(await super.getDecodedIdToken(userId)),\n        profile: extractUserClaimsFromIdToken(await super.getDecodedIdToken(userId)),\n      };\n    }\n  }\n\n  override async updateUserProfile(payload: any, userId?: string): Promise<User> {\n    await this.ensureInitialized();\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      return updateMeProfile({\n        baseUrl,\n        url: resolveResourceEndpoint('usersMe', configData),\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n        payload: payload?.payload ?? payload,\n      });\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Failed to update user profile: ${error instanceof Error ? error.message : String(error)}`,\n        'ThunderIDNextClient-UpdateProfileError-001',\n        'react',\n        'An error occurred while updating the user profile. Please check your configuration and network connection.',\n      );\n    }\n  }\n\n  override isLoading(): boolean {\n    return false;\n  }\n\n  override isSignedIn(sessionId?: string): Promise<boolean> {\n    return super.isSignedIn(sessionId);\n  }\n\n  override exchangeToken(config: TokenExchangeRequestConfig, sessionId?: string): Promise<TokenResponse | Response> {\n    return super.exchangeToken(config, sessionId) as unknown as Promise<TokenResponse | Response>;\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  override async getAccessToken(_sessionId?: string): Promise<string> {\n    const {default: getAccessToken} = await import('./server/actions/getAccessToken');\n    const token: string | undefined = await getAccessToken();\n\n    if (typeof token !== 'string' || !token) {\n      throw new ThunderIDRuntimeError(\n        'Failed to get access token.',\n        'ThunderIDNextClient-getAccessToken-RuntimeError-003',\n        'nextjs',\n        'An error occurred while obtaining the access token. Please check your configuration and network connection.',\n      );\n    }\n\n    return token;\n  }\n\n  override async getDecodedIdToken(sessionId?: string, idToken?: string): Promise<IdToken> {\n    await this.ensureInitialized();\n    return await super.getDecodedIdToken(sessionId, idToken);\n  }\n\n  override async signIn(...args: any[]): Promise<any> {\n    const arg1: any = args[0];\n    const arg2: any = args[1];\n    const arg3: any = args[2];\n    const arg4: any = args[3];\n\n    // An embedded sign-in flow payload initiates or continues a `POST /flow/execute` step\n    // (identified by `applicationId` for a new flow or `executionId` to continue one). This is\n    // distinct from the OAuth authorization_code exchange handled by `super.signIn` below, which\n    // is used once the embedded flow completes and returns an authorization code.\n    const isEmbeddedFlowPayload: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    if (isEmbeddedFlowPayload) {\n      await this.ensureInitialized();\n\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n\n      return executeEmbeddedSignInFlow({\n        baseUrl: configData?.baseUrl,\n        flowSecret: arg2?.flowSecret,\n        payload: arg1,\n        url: resolveResourceEndpoint('flowExecute', configData, arg2?.url),\n      }) as unknown as Promise<EmbeddedSignInFlowResponse>;\n    }\n\n    return super.signIn(arg4, arg3, arg1?.code, arg1?.session_state, arg1?.state, arg1) as unknown as Promise<User>;\n  }\n\n  override async signOut(...args: any[]): Promise<string> {\n    if (args[1] && typeof args[1] !== 'string') {\n      throw new Error('The second argument must be a string.');\n    }\n\n    const config: T = this.getConfiguration();\n    const afterSignOutUrl: string = config?.afterSignOutUrl || '/';\n\n    const resolvedSessionId: string = args[1] || (await getSessionId())!;\n\n    try {\n      await (super.signOut as (...a: any[]) => Promise<string>)(resolvedSessionId);\n    } catch (error) {\n      const message: string = error instanceof Error ? error.message : String(error);\n\n      if (\n        !message.includes('end_session_endpoint') &&\n        !message.includes('sign-out endpoint') &&\n        !message.includes('Sign-out endpoint') &&\n        !message.includes('Sign-out redirect URL')\n      ) {\n        throw error;\n      }\n    }\n\n    return afterSignOutUrl;\n  }\n\n  override async signUp(_options?: SignUpOptions): Promise<void> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-ValidationError-002',\n      'nextjs',\n      'The signUp method is not implemented in the Next.js client.',\n    );\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  override signInSilently(_options?: SignInOptions): Promise<User | boolean> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-signInSilently-NotImplementedError-001',\n      'nextjs',\n      'The signInSilently method is not implemented in the Next.js client.',\n    );\n  }\n\n  public async getAuthorizeRequestUrl(\n    customParams: ExtendedAuthorizeRequestUrlParams,\n    userId?: string,\n  ): Promise<string> {\n    await this.ensureInitialized();\n    return this.getSignInUrl(customParams, userId);\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  public override async clearSession(): Promise<void> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-clearSession-NotImplementedError-001',\n      'nextjs',\n      'The clearSession method is not implemented in the Next.js client.',\n    );\n  }\n\n  override async setSession(sessionData: Record<string, unknown>, sessionId?: string): Promise<void> {\n    return this.getStorageManager().setSessionData(sessionData, sessionId);\n  }\n\n  override decodeJwtToken<R = Record<string, unknown>>(token: string): Promise<R> {\n    return super.decodeJwtToken<R>(token);\n  }\n}\n\nexport default ThunderIDNextClient;\n"],"mappings":";;;;;;AA4CA,IAAM,sBAAN,cAAuF,oBAAuB;CAC5G,AAAO,gBAAgB;CAEvB,AAAO,cAAc;AACnB,SAAO;;CAGT,MAAc,oBAAmC;AAC/C,MAAI,CAAC,KAAK,cAIR,OAAM,KAAK,WAAW,EAAE,CAAM;AAGhC,MAAI,CAAC,KAAK,cACR,OAAM,IAAI,MACR,iLACD;;CAIL,MAAe,WAAW,QAAW,SAAqC;AACxE,MAAI,KAAK,cACP,QAAO,QAAQ,QAAQ,KAAK;EAG9B,MAAM,EACJ,SACA,oBACA,UACA,cACA,WACA,gBACA,iBACA,UACA,GAAG,SACDA,kCAA0B,OAAO;EAErC,MAAMC,SAAiB,MAAMC,yBAAiB;EAE9C,MAAMC,cAAuB,MAAM,MAAM,WACvC;GACE,GAAG;GACH,gBAAgB,kBAAkB;GAClC,iBAAiB,mBAAmB;GACpC;GACA;GACA;GACA,YAAa,KAAa,cAAc;GACxC;GACA;GACA;GACD,EACD,QACD;AAED,OAAK,gBAAgB;AAErB,SAAO;;CAGT,MAAe,aAAa,QAAsC;AAChE,MAAI;AACF,SAAM,MAAM,aAAa,OAAO;AAChC,UAAO;WACA,OAAO;AACd,SAAM,IAAI,sBACR,uCAAuC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IAC7F,qDACA,UACA,8GACD;;;CAIL,MAAe,QAAQ,QAAgC;AACrD,QAAM,KAAK,mBAAmB;EAC9B,MAAMC,oBAA4B,UAAW,MAAMC,sBAAc;AAEjE,MAAI;GACF,MAAMC,aAAkC,MAAM,KAAK,mBAAmB,CAAC,eAAe;GACtF,MAAMC,UAA8B,YAAY;AAUhD,UARsB,MAAM,WAAW;IACrC;IACA,KAAK,wBAAwB,WAAW,WAAW;IACnD,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACF,CAAC;WAGK,OAAO;AACd,UAAO,MAAM,MAAM,QAAQ,kBAAkB;;;CAIjD,MAAe,eAAe,QAAuC;AACnE,QAAM,KAAK,mBAAmB;AAE9B,MAAI;GACF,MAAMD,aAAkC,MAAM,KAAK,mBAAmB,CAAC,eAAe;GACtF,MAAMC,UAA8B,YAAY;GAEhD,MAAMC,UAAgB,MAAM,WAAW;IACrC;IACA,KAAK,wBAAwB,WAAW,WAAW;IACnD,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACF,CAAC;AAEF,UAAO;IACL,kBAAkB,6BAA6B,QAAQ;IACvD;IACD;WACM,OAAO;AACd,UAAO;IACL,kBAAkB,6BAA6B,MAAM,MAAM,kBAAkB,OAAO,CAAC;IACrF,SAAS,6BAA6B,MAAM,MAAM,kBAAkB,OAAO,CAAC;IAC7E;;;CAIL,MAAe,kBAAkB,SAAc,QAAgC;AAC7E,QAAM,KAAK,mBAAmB;AAE9B,MAAI;GACF,MAAMF,aAAkC,MAAM,KAAK,mBAAmB,CAAC,eAAe;GACtF,MAAMC,UAA8B,YAAY;AAEhD,UAAO,gBAAgB;IACrB;IACA,KAAK,wBAAwB,WAAW,WAAW;IACnD,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACD,SAAS,SAAS,WAAW;IAC9B,CAAC;WACK,OAAO;AACd,SAAM,IAAI,sBACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACxF,8CACA,SACA,6GACD;;;CAIL,AAAS,YAAqB;AAC5B,SAAO;;CAGT,AAAS,WAAW,WAAsC;AACxD,SAAO,MAAM,WAAW,UAAU;;CAGpC,AAAS,cAAc,QAAoC,WAAuD;AAChH,SAAO,MAAM,cAAc,QAAQ,UAAU;;CAI/C,MAAe,eAAe,YAAsC;EAClE,MAAM,EAAC,SAAS,mBAAkB,MAAM,OAAO;EAC/C,MAAME,QAA4B,MAAM,gBAAgB;AAExD,MAAI,OAAO,UAAU,YAAY,CAAC,MAChC,OAAM,IAAI,sBACR,+BACA,uDACA,UACA,8GACD;AAGH,SAAO;;CAGT,MAAe,kBAAkB,WAAoB,SAAoC;AACvF,QAAM,KAAK,mBAAmB;AAC9B,SAAO,MAAM,MAAM,kBAAkB,WAAW,QAAQ;;CAG1D,MAAe,OAAO,GAAG,MAA2B;EAClD,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;AASvB,MAFE,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB,OAEjE;AACzB,SAAM,KAAK,mBAAmB;GAE9B,MAAMP,aAAkC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEtF,UAAO,0BAA0B;IAC/B,SAAS,YAAY;IACrB,YAAY,MAAM;IAClB,SAAS;IACT,KAAK,wBAAwB,eAAe,YAAY,MAAM,IAAI;IACnE,CAAC;;AAGJ,SAAO,MAAM,OAAO,MAAM,MAAM,MAAM,MAAM,MAAM,eAAe,MAAM,OAAO,KAAK;;CAGrF,MAAe,QAAQ,GAAG,MAA8B;AACtD,MAAI,KAAK,MAAM,OAAO,KAAK,OAAO,SAChC,OAAM,IAAI,MAAM,wCAAwC;EAI1D,MAAMQ,kBADY,KAAK,kBAAkB,EACD,mBAAmB;EAE3D,MAAMV,oBAA4B,KAAK,MAAO,MAAMC,sBAAc;AAElE,MAAI;AACF,SAAO,MAAM,QAA6C,kBAAkB;WACrE,OAAO;GACd,MAAMU,UAAkB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAE9E,OACE,CAAC,QAAQ,SAAS,uBAAuB,IACzC,CAAC,QAAQ,SAAS,oBAAoB,IACtC,CAAC,QAAQ,SAAS,oBAAoB,IACtC,CAAC,QAAQ,SAAS,wBAAwB,CAE1C,OAAM;;AAIV,SAAO;;CAGT,MAAe,OAAO,UAAyC;AAC7D,QAAM,IAAI,sBACR,mBACA,2CACA,UACA,8DACD;;CAIH,AAAS,eAAe,UAAmD;AACzE,QAAM,IAAI,sBACR,mBACA,8DACA,UACA,sEACD;;CAGH,MAAa,uBACX,cACA,QACiB;AACjB,QAAM,KAAK,mBAAmB;AAC9B,SAAO,KAAK,aAAa,cAAc,OAAO;;CAGhD,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAsB,eAA8B;AAClD,QAAM,IAAI,sBACR,mBACA,4DACA,UACA,oEACD;;CAGH,MAAe,WAAW,aAAsC,WAAmC;AACjG,SAAO,KAAK,mBAAmB,CAAC,eAAe,aAAa,UAAU;;CAGxE,AAAS,eAA4C,OAA2B;AAC9E,SAAO,MAAM,eAAkB,MAAM;;;AAIzC,kCAAe"}

package/dist/cjs/ThunderIDNextClient.cjs

@@ -46,9 +46,11 @@ var ThunderIDNextClient = class extends __thunderid_node.ThunderIDNodeClient {
 		await this.ensureInitialized();
 		const resolvedSessionId = userId || await require_getSessionId.default();
 		try {
-			const baseUrl = (await this.getStorageManager().getConfigData())?.baseUrl;
+			const configData = await this.getStorageManager().getConfigData();
+			const baseUrl = configData?.baseUrl;
 			return await (0, __thunderid_node.getUsersMe)({
 				baseUrl,
+				url: (0, __thunderid_node.resolveResourceEndpoint)("usersMe", configData),
 				headers: { Authorization: `Bearer ${await this.getAccessToken(userId)}` }
 			});
 		} catch (error) {
@@ -58,9 +60,11 @@ var ThunderIDNextClient = class extends __thunderid_node.ThunderIDNodeClient {
 	async getUserProfile(userId) {
 		await this.ensureInitialized();
 		try {
-			const baseUrl = (await this.getStorageManager().getConfigData())?.baseUrl;
+			const configData = await this.getStorageManager().getConfigData();
+			const baseUrl = configData?.baseUrl;
 			const profile = await (0, __thunderid_node.getUsersMe)({
 				baseUrl,
+				url: (0, __thunderid_node.resolveResourceEndpoint)("usersMe", configData),
 				headers: { Authorization: `Bearer ${await this.getAccessToken(userId)}` }
 			});
 			return {
@@ -77,9 +81,11 @@ var ThunderIDNextClient = class extends __thunderid_node.ThunderIDNodeClient {
 	async updateUserProfile(payload, userId) {
 		await this.ensureInitialized();
 		try {
-			const baseUrl = (await this.getStorageManager().getConfigData())?.baseUrl;
+			const configData = await this.getStorageManager().getConfigData();
+			const baseUrl = configData?.baseUrl;
 			return (0, __thunderid_node.updateMeProfile)({
 				baseUrl,
+				url: (0, __thunderid_node.resolveResourceEndpoint)("usersMe", configData),
 				headers: { Authorization: `Bearer ${await this.getAccessToken(userId)}` },
 				payload: payload?.payload ?? payload
 			});
@@ -113,11 +119,12 @@ var ThunderIDNextClient = class extends __thunderid_node.ThunderIDNodeClient {
 		const arg4 = args[3];
 		if (typeof arg1 === "object" && arg1 !== null && ("executionId" in arg1 || "applicationId" in arg1)) {
 			await this.ensureInitialized();
+			const configData = await this.getStorageManager().getConfigData();
 			return (0, __thunderid_node.executeEmbeddedSignInFlow)({
-				baseUrl: (await this.getStorageManager().getConfigData())?.baseUrl,
+				baseUrl: configData?.baseUrl,
 				flowSecret: arg2?.flowSecret,
 				payload: arg1,
-				url: arg2?.url
+				url: (0, __thunderid_node.resolveResourceEndpoint)("flowExecute", configData, arg2?.url)
 			});
 		}
 		return super.signIn(arg4, arg3, arg1?.code, arg1?.session_state, arg1?.state, arg1);

package/dist/cjs/ThunderIDNextClient.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDNextClient.cjs","names":["ThunderIDNodeClient","decorateConfigWithNextEnv","origin: string","getClientOrigin","initialized: boolean","ThunderIDRuntimeError","resolvedSessionId: string","getSessionId","baseUrl: string | undefined","profile: User","token: string | undefined","arg1: any","arg2: any","arg3: any","arg4: any","afterSignOutUrl: string","message: string"],"sources":["../../src/ThunderIDNextClient.ts"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  ThunderIDNodeClient,\n  ThunderIDRuntimeError,\n  AuthClientConfig,\n  EmbeddedSignInFlowResponse,\n  ExtendedAuthorizeRequestUrlParams,\n  IdToken,\n  SignInOptions,\n  SignUpOptions,\n  Storage,\n  TokenExchangeRequestConfig,\n  TokenResponse,\n  User,\n  UserProfile,\n  executeEmbeddedSignInFlow,\n  extractUserClaimsFromIdToken,\n  generateFlattenedUserProfile,\n  getUsersMe,\n  updateMeProfile,\n} from '@thunderid/node';\nimport {ThunderIDNextConfig} from './models/config';\nimport getClientOrigin from './server/actions/getClientOrigin';\nimport getSessionId from './server/actions/getSessionId';\nimport decorateConfigWithNextEnv from './utils/decorateConfigWithNextEnv';\n\nclass ThunderIDNextClient<T extends ThunderIDNextConfig = ThunderIDNextConfig> extends ThunderIDNodeClient<T> {\n  public isInitialized = false;\n\n  public constructor() {\n    super();\n  }\n\n  private async ensureInitialized(): Promise<void> {\n    if (!this.isInitialized) {\n      // Server actions may run in a module context that hasn't been through\n      // ThunderIDServerProvider (e.g. a different worker). Try to initialize\n      // from environment variables before giving up.\n      await this.initialize({} as T);\n    }\n\n    if (!this.isInitialized) {\n      throw new Error(\n        '[ThunderIDNextClient] Client is not initialized. Make sure you have wrapped your app with ThunderIDProvider and provided the required configuration (baseUrl, clientId, etc.).',\n      );\n    }\n  }\n\n  override async initialize(config: T, storage?: Storage): Promise<boolean> {\n    if (this.isInitialized) {\n      return Promise.resolve(true);\n    }\n\n    const {\n      baseUrl,\n      organizationHandle,\n      clientId,\n      clientSecret,\n      signInUrl,\n      afterSignInUrl,\n      afterSignOutUrl,\n      signUpUrl,\n      ...rest\n    } = decorateConfigWithNextEnv(config);\n\n    const origin: string = await getClientOrigin();\n\n    const initialized: boolean = await super.initialize(\n      {\n        ...rest,\n        afterSignInUrl: afterSignInUrl ?? origin,\n        afterSignOutUrl: afterSignOutUrl ?? origin,\n        baseUrl,\n        clientId,\n        clientSecret,\n        enablePKCE: (rest as any).enablePKCE ?? true,\n        organizationHandle,\n        signInUrl,\n        signUpUrl,\n      } as any,\n      storage,\n    );\n\n    this.isInitialized = initialized;\n\n    return initialized;\n  }\n\n  override async reInitialize(config: Partial<T>): Promise<boolean> {\n    try {\n      await super.reInitialize(config);\n      return true;\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Failed to re-initialize the client: ${error instanceof Error ? error.message : String(error)}`,\n        'ThunderIDNextClient-reInitialize-RuntimeError-001',\n        'nextjs',\n        'An error occurred while re-initializing the client. Please check your configuration and network connection.',\n      );\n    }\n  }\n\n  override async getUser(userId?: string): Promise<User> {\n    await this.ensureInitialized();\n    const resolvedSessionId: string = userId || (await getSessionId())!;\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      const profile: User = await getUsersMe({\n        baseUrl,\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n      });\n\n      return profile;\n    } catch (error) {\n      return await super.getUser(resolvedSessionId);\n    }\n  }\n\n  override async getUserProfile(userId?: string): Promise<UserProfile> {\n    await this.ensureInitialized();\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      const profile: User = await getUsersMe({\n        baseUrl,\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n      });\n\n      return {\n        flattenedProfile: generateFlattenedUserProfile(profile),\n        profile,\n      };\n    } catch (error) {\n      return {\n        flattenedProfile: extractUserClaimsFromIdToken(await super.getDecodedIdToken(userId)),\n        profile: extractUserClaimsFromIdToken(await super.getDecodedIdToken(userId)),\n      };\n    }\n  }\n\n  override async updateUserProfile(payload: any, userId?: string): Promise<User> {\n    await this.ensureInitialized();\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      return updateMeProfile({\n        baseUrl,\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n        payload: payload?.payload ?? payload,\n      });\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Failed to update user profile: ${error instanceof Error ? error.message : String(error)}`,\n        'ThunderIDNextClient-UpdateProfileError-001',\n        'react',\n        'An error occurred while updating the user profile. Please check your configuration and network connection.',\n      );\n    }\n  }\n\n  override isLoading(): boolean {\n    return false;\n  }\n\n  override isSignedIn(sessionId?: string): Promise<boolean> {\n    return super.isSignedIn(sessionId);\n  }\n\n  override exchangeToken(config: TokenExchangeRequestConfig, sessionId?: string): Promise<TokenResponse | Response> {\n    return super.exchangeToken(config, sessionId) as unknown as Promise<TokenResponse | Response>;\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  override async getAccessToken(_sessionId?: string): Promise<string> {\n    const {default: getAccessToken} = await import('./server/actions/getAccessToken');\n    const token: string | undefined = await getAccessToken();\n\n    if (typeof token !== 'string' || !token) {\n      throw new ThunderIDRuntimeError(\n        'Failed to get access token.',\n        'ThunderIDNextClient-getAccessToken-RuntimeError-003',\n        'nextjs',\n        'An error occurred while obtaining the access token. Please check your configuration and network connection.',\n      );\n    }\n\n    return token;\n  }\n\n  override async getDecodedIdToken(sessionId?: string, idToken?: string): Promise<IdToken> {\n    await this.ensureInitialized();\n    return await super.getDecodedIdToken(sessionId, idToken);\n  }\n\n  override async signIn(...args: any[]): Promise<any> {\n    const arg1: any = args[0];\n    const arg2: any = args[1];\n    const arg3: any = args[2];\n    const arg4: any = args[3];\n\n    // An embedded sign-in flow payload initiates or continues a `POST /flow/execute` step\n    // (identified by `applicationId` for a new flow or `executionId` to continue one). This is\n    // distinct from the OAuth authorization_code exchange handled by `super.signIn` below, which\n    // is used once the embedded flow completes and returns an authorization code.\n    const isEmbeddedFlowPayload: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    if (isEmbeddedFlowPayload) {\n      await this.ensureInitialized();\n\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n\n      return executeEmbeddedSignInFlow({\n        baseUrl: configData?.baseUrl,\n        flowSecret: arg2?.flowSecret,\n        payload: arg1,\n        url: arg2?.url,\n      }) as unknown as Promise<EmbeddedSignInFlowResponse>;\n    }\n\n    return super.signIn(arg4, arg3, arg1?.code, arg1?.session_state, arg1?.state, arg1) as unknown as Promise<User>;\n  }\n\n  override async signOut(...args: any[]): Promise<string> {\n    if (args[1] && typeof args[1] !== 'string') {\n      throw new Error('The second argument must be a string.');\n    }\n\n    const config: T = this.getConfiguration();\n    const afterSignOutUrl: string = config?.afterSignOutUrl || '/';\n\n    const resolvedSessionId: string = args[1] || (await getSessionId())!;\n\n    try {\n      await (super.signOut as (...a: any[]) => Promise<string>)(resolvedSessionId);\n    } catch (error) {\n      const message: string = error instanceof Error ? error.message : String(error);\n\n      if (\n        !message.includes('end_session_endpoint') &&\n        !message.includes('sign-out endpoint') &&\n        !message.includes('Sign-out endpoint') &&\n        !message.includes('Sign-out redirect URL')\n      ) {\n        throw error;\n      }\n    }\n\n    return afterSignOutUrl;\n  }\n\n  override async signUp(_options?: SignUpOptions): Promise<void> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-ValidationError-002',\n      'nextjs',\n      'The signUp method is not implemented in the Next.js client.',\n    );\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  override signInSilently(_options?: SignInOptions): Promise<User | boolean> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-signInSilently-NotImplementedError-001',\n      'nextjs',\n      'The signInSilently method is not implemented in the Next.js client.',\n    );\n  }\n\n  public async getAuthorizeRequestUrl(\n    customParams: ExtendedAuthorizeRequestUrlParams,\n    userId?: string,\n  ): Promise<string> {\n    await this.ensureInitialized();\n    return this.getSignInUrl(customParams, userId);\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  public override async clearSession(): Promise<void> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-clearSession-NotImplementedError-001',\n      'nextjs',\n      'The clearSession method is not implemented in the Next.js client.',\n    );\n  }\n\n  override async setSession(sessionData: Record<string, unknown>, sessionId?: string): Promise<void> {\n    return this.getStorageManager().setSessionData(sessionData, sessionId);\n  }\n\n  override decodeJwtToken<R = Record<string, unknown>>(token: string): Promise<R> {\n    return super.decodeJwtToken<R>(token);\n  }\n}\n\nexport default ThunderIDNextClient;\n"],"mappings":";;;;;;;;AA2CA,IAAM,sBAAN,cAAuFA,qCAAuB;CAC5G,AAAO,gBAAgB;CAEvB,AAAO,cAAc;AACnB,SAAO;;CAGT,MAAc,oBAAmC;AAC/C,MAAI,CAAC,KAAK,cAIR,OAAM,KAAK,WAAW,EAAE,CAAM;AAGhC,MAAI,CAAC,KAAK,cACR,OAAM,IAAI,MACR,iLACD;;CAIL,MAAe,WAAW,QAAW,SAAqC;AACxE,MAAI,KAAK,cACP,QAAO,QAAQ,QAAQ,KAAK;EAG9B,MAAM,EACJ,SACA,oBACA,UACA,cACA,WACA,gBACA,iBACA,UACA,GAAG,SACDC,0CAA0B,OAAO;EAErC,MAAMC,SAAiB,MAAMC,iCAAiB;EAE9C,MAAMC,cAAuB,MAAM,MAAM,WACvC;GACE,GAAG;GACH,gBAAgB,kBAAkB;GAClC,iBAAiB,mBAAmB;GACpC;GACA;GACA;GACA,YAAa,KAAa,cAAc;GACxC;GACA;GACA;GACD,EACD,QACD;AAED,OAAK,gBAAgB;AAErB,SAAO;;CAGT,MAAe,aAAa,QAAsC;AAChE,MAAI;AACF,SAAM,MAAM,aAAa,OAAO;AAChC,UAAO;WACA,OAAO;AACd,SAAM,IAAIC,uCACR,uCAAuC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IAC7F,qDACA,UACA,8GACD;;;CAIL,MAAe,QAAQ,QAAgC;AACrD,QAAM,KAAK,mBAAmB;EAC9B,MAAMC,oBAA4B,UAAW,MAAMC,8BAAc;AAEjE,MAAI;GAEF,MAAMC,WADkC,MAAM,KAAK,mBAAmB,CAAC,eAAe,GACtC;AAShD,UAPsB,uCAAiB;IACrC;IACA,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACF,CAAC;WAGK,OAAO;AACd,UAAO,MAAM,MAAM,QAAQ,kBAAkB;;;CAIjD,MAAe,eAAe,QAAuC;AACnE,QAAM,KAAK,mBAAmB;AAE9B,MAAI;GAEF,MAAMA,WADkC,MAAM,KAAK,mBAAmB,CAAC,eAAe,GACtC;GAEhD,MAAMC,UAAgB,uCAAiB;IACrC;IACA,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACF,CAAC;AAEF,UAAO;IACL,qEAA+C,QAAQ;IACvD;IACD;WACM,OAAO;AACd,UAAO;IACL,qEAA+C,MAAM,MAAM,kBAAkB,OAAO,CAAC;IACrF,4DAAsC,MAAM,MAAM,kBAAkB,OAAO,CAAC;IAC7E;;;CAIL,MAAe,kBAAkB,SAAc,QAAgC;AAC7E,QAAM,KAAK,mBAAmB;AAE9B,MAAI;GAEF,MAAMD,WADkC,MAAM,KAAK,mBAAmB,CAAC,eAAe,GACtC;AAEhD,gDAAuB;IACrB;IACA,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACD,SAAS,SAAS,WAAW;IAC9B,CAAC;WACK,OAAO;AACd,SAAM,IAAIH,uCACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACxF,8CACA,SACA,6GACD;;;CAIL,AAAS,YAAqB;AAC5B,SAAO;;CAGT,AAAS,WAAW,WAAsC;AACxD,SAAO,MAAM,WAAW,UAAU;;CAGpC,AAAS,cAAc,QAAoC,WAAuD;AAChH,SAAO,MAAM,cAAc,QAAQ,UAAU;;CAI/C,MAAe,eAAe,YAAsC;EAClE,MAAM,EAAC,SAAS,mBAAkB,2CAAM;EACxC,MAAMK,QAA4B,MAAM,gBAAgB;AAExD,MAAI,OAAO,UAAU,YAAY,CAAC,MAChC,OAAM,IAAIL,uCACR,+BACA,uDACA,UACA,8GACD;AAGH,SAAO;;CAGT,MAAe,kBAAkB,WAAoB,SAAoC;AACvF,QAAM,KAAK,mBAAmB;AAC9B,SAAO,MAAM,MAAM,kBAAkB,WAAW,QAAQ;;CAG1D,MAAe,OAAO,GAAG,MAA2B;EAClD,MAAMM,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;AASvB,MAFE,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB,OAEjE;AACzB,SAAM,KAAK,mBAAmB;AAI9B,0DAAiC;IAC/B,UAHsC,MAAM,KAAK,mBAAmB,CAAC,eAAe,GAG/D;IACrB,YAAY,MAAM;IAClB,SAAS;IACT,KAAK,MAAM;IACZ,CAAC;;AAGJ,SAAO,MAAM,OAAO,MAAM,MAAM,MAAM,MAAM,MAAM,eAAe,MAAM,OAAO,KAAK;;CAGrF,MAAe,QAAQ,GAAG,MAA8B;AACtD,MAAI,KAAK,MAAM,OAAO,KAAK,OAAO,SAChC,OAAM,IAAI,MAAM,wCAAwC;EAI1D,MAAMC,kBADY,KAAK,kBAAkB,EACD,mBAAmB;EAE3D,MAAMT,oBAA4B,KAAK,MAAO,MAAMC,8BAAc;AAElE,MAAI;AACF,SAAO,MAAM,QAA6C,kBAAkB;WACrE,OAAO;GACd,MAAMS,UAAkB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAE9E,OACE,CAAC,QAAQ,SAAS,uBAAuB,IACzC,CAAC,QAAQ,SAAS,oBAAoB,IACtC,CAAC,QAAQ,SAAS,oBAAoB,IACtC,CAAC,QAAQ,SAAS,wBAAwB,CAE1C,OAAM;;AAIV,SAAO;;CAGT,MAAe,OAAO,UAAyC;AAC7D,QAAM,IAAIX,uCACR,mBACA,2CACA,UACA,8DACD;;CAIH,AAAS,eAAe,UAAmD;AACzE,QAAM,IAAIA,uCACR,mBACA,8DACA,UACA,sEACD;;CAGH,MAAa,uBACX,cACA,QACiB;AACjB,QAAM,KAAK,mBAAmB;AAC9B,SAAO,KAAK,aAAa,cAAc,OAAO;;CAGhD,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAsB,eAA8B;AAClD,QAAM,IAAIA,uCACR,mBACA,4DACA,UACA,oEACD;;CAGH,MAAe,WAAW,aAAsC,WAAmC;AACjG,SAAO,KAAK,mBAAmB,CAAC,eAAe,aAAa,UAAU;;CAGxE,AAAS,eAA4C,OAA2B;AAC9E,SAAO,MAAM,eAAkB,MAAM;;;AAIzC,kCAAe"}
+{"version":3,"file":"ThunderIDNextClient.cjs","names":["ThunderIDNodeClient","decorateConfigWithNextEnv","origin: string","getClientOrigin","initialized: boolean","ThunderIDRuntimeError","resolvedSessionId: string","getSessionId","configData: AuthClientConfig<T>","baseUrl: string | undefined","profile: User","token: string | undefined","arg1: any","arg2: any","arg3: any","arg4: any","afterSignOutUrl: string","message: string"],"sources":["../../src/ThunderIDNextClient.ts"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  ThunderIDNodeClient,\n  ThunderIDRuntimeError,\n  AuthClientConfig,\n  EmbeddedSignInFlowResponse,\n  ExtendedAuthorizeRequestUrlParams,\n  IdToken,\n  SignInOptions,\n  SignUpOptions,\n  Storage,\n  TokenExchangeRequestConfig,\n  TokenResponse,\n  User,\n  UserProfile,\n  executeEmbeddedSignInFlow,\n  extractUserClaimsFromIdToken,\n  generateFlattenedUserProfile,\n  getUsersMe,\n  updateMeProfile,\n  resolveResourceEndpoint,\n} from '@thunderid/node';\nimport {ThunderIDNextConfig} from './models/config';\nimport getClientOrigin from './server/actions/getClientOrigin';\nimport getSessionId from './server/actions/getSessionId';\nimport decorateConfigWithNextEnv from './utils/decorateConfigWithNextEnv';\n\nclass ThunderIDNextClient<T extends ThunderIDNextConfig = ThunderIDNextConfig> extends ThunderIDNodeClient<T> {\n  public isInitialized = false;\n\n  public constructor() {\n    super();\n  }\n\n  private async ensureInitialized(): Promise<void> {\n    if (!this.isInitialized) {\n      // Server actions may run in a module context that hasn't been through\n      // ThunderIDServerProvider (e.g. a different worker). Try to initialize\n      // from environment variables before giving up.\n      await this.initialize({} as T);\n    }\n\n    if (!this.isInitialized) {\n      throw new Error(\n        '[ThunderIDNextClient] Client is not initialized. Make sure you have wrapped your app with ThunderIDProvider and provided the required configuration (baseUrl, clientId, etc.).',\n      );\n    }\n  }\n\n  override async initialize(config: T, storage?: Storage): Promise<boolean> {\n    if (this.isInitialized) {\n      return Promise.resolve(true);\n    }\n\n    const {\n      baseUrl,\n      organizationHandle,\n      clientId,\n      clientSecret,\n      signInUrl,\n      afterSignInUrl,\n      afterSignOutUrl,\n      signUpUrl,\n      ...rest\n    } = decorateConfigWithNextEnv(config);\n\n    const origin: string = await getClientOrigin();\n\n    const initialized: boolean = await super.initialize(\n      {\n        ...rest,\n        afterSignInUrl: afterSignInUrl ?? origin,\n        afterSignOutUrl: afterSignOutUrl ?? origin,\n        baseUrl,\n        clientId,\n        clientSecret,\n        enablePKCE: (rest as any).enablePKCE ?? true,\n        organizationHandle,\n        signInUrl,\n        signUpUrl,\n      } as any,\n      storage,\n    );\n\n    this.isInitialized = initialized;\n\n    return initialized;\n  }\n\n  override async reInitialize(config: Partial<T>): Promise<boolean> {\n    try {\n      await super.reInitialize(config);\n      return true;\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Failed to re-initialize the client: ${error instanceof Error ? error.message : String(error)}`,\n        'ThunderIDNextClient-reInitialize-RuntimeError-001',\n        'nextjs',\n        'An error occurred while re-initializing the client. Please check your configuration and network connection.',\n      );\n    }\n  }\n\n  override async getUser(userId?: string): Promise<User> {\n    await this.ensureInitialized();\n    const resolvedSessionId: string = userId || (await getSessionId())!;\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      const profile: User = await getUsersMe({\n        baseUrl,\n        url: resolveResourceEndpoint('usersMe', configData),\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n      });\n\n      return profile;\n    } catch (error) {\n      return await super.getUser(resolvedSessionId);\n    }\n  }\n\n  override async getUserProfile(userId?: string): Promise<UserProfile> {\n    await this.ensureInitialized();\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      const profile: User = await getUsersMe({\n        baseUrl,\n        url: resolveResourceEndpoint('usersMe', configData),\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n      });\n\n      return {\n        flattenedProfile: generateFlattenedUserProfile(profile),\n        profile,\n      };\n    } catch (error) {\n      return {\n        flattenedProfile: extractUserClaimsFromIdToken(await super.getDecodedIdToken(userId)),\n        profile: extractUserClaimsFromIdToken(await super.getDecodedIdToken(userId)),\n      };\n    }\n  }\n\n  override async updateUserProfile(payload: any, userId?: string): Promise<User> {\n    await this.ensureInitialized();\n\n    try {\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n      const baseUrl: string | undefined = configData?.baseUrl;\n\n      return updateMeProfile({\n        baseUrl,\n        url: resolveResourceEndpoint('usersMe', configData),\n        headers: {\n          Authorization: `Bearer ${await this.getAccessToken(userId)}`,\n        },\n        payload: payload?.payload ?? payload,\n      });\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Failed to update user profile: ${error instanceof Error ? error.message : String(error)}`,\n        'ThunderIDNextClient-UpdateProfileError-001',\n        'react',\n        'An error occurred while updating the user profile. Please check your configuration and network connection.',\n      );\n    }\n  }\n\n  override isLoading(): boolean {\n    return false;\n  }\n\n  override isSignedIn(sessionId?: string): Promise<boolean> {\n    return super.isSignedIn(sessionId);\n  }\n\n  override exchangeToken(config: TokenExchangeRequestConfig, sessionId?: string): Promise<TokenResponse | Response> {\n    return super.exchangeToken(config, sessionId) as unknown as Promise<TokenResponse | Response>;\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  override async getAccessToken(_sessionId?: string): Promise<string> {\n    const {default: getAccessToken} = await import('./server/actions/getAccessToken');\n    const token: string | undefined = await getAccessToken();\n\n    if (typeof token !== 'string' || !token) {\n      throw new ThunderIDRuntimeError(\n        'Failed to get access token.',\n        'ThunderIDNextClient-getAccessToken-RuntimeError-003',\n        'nextjs',\n        'An error occurred while obtaining the access token. Please check your configuration and network connection.',\n      );\n    }\n\n    return token;\n  }\n\n  override async getDecodedIdToken(sessionId?: string, idToken?: string): Promise<IdToken> {\n    await this.ensureInitialized();\n    return await super.getDecodedIdToken(sessionId, idToken);\n  }\n\n  override async signIn(...args: any[]): Promise<any> {\n    const arg1: any = args[0];\n    const arg2: any = args[1];\n    const arg3: any = args[2];\n    const arg4: any = args[3];\n\n    // An embedded sign-in flow payload initiates or continues a `POST /flow/execute` step\n    // (identified by `applicationId` for a new flow or `executionId` to continue one). This is\n    // distinct from the OAuth authorization_code exchange handled by `super.signIn` below, which\n    // is used once the embedded flow completes and returns an authorization code.\n    const isEmbeddedFlowPayload: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    if (isEmbeddedFlowPayload) {\n      await this.ensureInitialized();\n\n      const configData: AuthClientConfig<T> = await this.getStorageManager().getConfigData();\n\n      return executeEmbeddedSignInFlow({\n        baseUrl: configData?.baseUrl,\n        flowSecret: arg2?.flowSecret,\n        payload: arg1,\n        url: resolveResourceEndpoint('flowExecute', configData, arg2?.url),\n      }) as unknown as Promise<EmbeddedSignInFlowResponse>;\n    }\n\n    return super.signIn(arg4, arg3, arg1?.code, arg1?.session_state, arg1?.state, arg1) as unknown as Promise<User>;\n  }\n\n  override async signOut(...args: any[]): Promise<string> {\n    if (args[1] && typeof args[1] !== 'string') {\n      throw new Error('The second argument must be a string.');\n    }\n\n    const config: T = this.getConfiguration();\n    const afterSignOutUrl: string = config?.afterSignOutUrl || '/';\n\n    const resolvedSessionId: string = args[1] || (await getSessionId())!;\n\n    try {\n      await (super.signOut as (...a: any[]) => Promise<string>)(resolvedSessionId);\n    } catch (error) {\n      const message: string = error instanceof Error ? error.message : String(error);\n\n      if (\n        !message.includes('end_session_endpoint') &&\n        !message.includes('sign-out endpoint') &&\n        !message.includes('Sign-out endpoint') &&\n        !message.includes('Sign-out redirect URL')\n      ) {\n        throw error;\n      }\n    }\n\n    return afterSignOutUrl;\n  }\n\n  override async signUp(_options?: SignUpOptions): Promise<void> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-ValidationError-002',\n      'nextjs',\n      'The signUp method is not implemented in the Next.js client.',\n    );\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  override signInSilently(_options?: SignInOptions): Promise<User | boolean> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-signInSilently-NotImplementedError-001',\n      'nextjs',\n      'The signInSilently method is not implemented in the Next.js client.',\n    );\n  }\n\n  public async getAuthorizeRequestUrl(\n    customParams: ExtendedAuthorizeRequestUrlParams,\n    userId?: string,\n  ): Promise<string> {\n    await this.ensureInitialized();\n    return this.getSignInUrl(customParams, userId);\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  public override async clearSession(): Promise<void> {\n    throw new ThunderIDRuntimeError(\n      'Not implemented',\n      'ThunderIDNextClient-clearSession-NotImplementedError-001',\n      'nextjs',\n      'The clearSession method is not implemented in the Next.js client.',\n    );\n  }\n\n  override async setSession(sessionData: Record<string, unknown>, sessionId?: string): Promise<void> {\n    return this.getStorageManager().setSessionData(sessionData, sessionId);\n  }\n\n  override decodeJwtToken<R = Record<string, unknown>>(token: string): Promise<R> {\n    return super.decodeJwtToken<R>(token);\n  }\n}\n\nexport default ThunderIDNextClient;\n"],"mappings":";;;;;;;;AA4CA,IAAM,sBAAN,cAAuFA,qCAAuB;CAC5G,AAAO,gBAAgB;CAEvB,AAAO,cAAc;AACnB,SAAO;;CAGT,MAAc,oBAAmC;AAC/C,MAAI,CAAC,KAAK,cAIR,OAAM,KAAK,WAAW,EAAE,CAAM;AAGhC,MAAI,CAAC,KAAK,cACR,OAAM,IAAI,MACR,iLACD;;CAIL,MAAe,WAAW,QAAW,SAAqC;AACxE,MAAI,KAAK,cACP,QAAO,QAAQ,QAAQ,KAAK;EAG9B,MAAM,EACJ,SACA,oBACA,UACA,cACA,WACA,gBACA,iBACA,UACA,GAAG,SACDC,0CAA0B,OAAO;EAErC,MAAMC,SAAiB,MAAMC,iCAAiB;EAE9C,MAAMC,cAAuB,MAAM,MAAM,WACvC;GACE,GAAG;GACH,gBAAgB,kBAAkB;GAClC,iBAAiB,mBAAmB;GACpC;GACA;GACA;GACA,YAAa,KAAa,cAAc;GACxC;GACA;GACA;GACD,EACD,QACD;AAED,OAAK,gBAAgB;AAErB,SAAO;;CAGT,MAAe,aAAa,QAAsC;AAChE,MAAI;AACF,SAAM,MAAM,aAAa,OAAO;AAChC,UAAO;WACA,OAAO;AACd,SAAM,IAAIC,uCACR,uCAAuC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IAC7F,qDACA,UACA,8GACD;;;CAIL,MAAe,QAAQ,QAAgC;AACrD,QAAM,KAAK,mBAAmB;EAC9B,MAAMC,oBAA4B,UAAW,MAAMC,8BAAc;AAEjE,MAAI;GACF,MAAMC,aAAkC,MAAM,KAAK,mBAAmB,CAAC,eAAe;GACtF,MAAMC,UAA8B,YAAY;AAUhD,UARsB,uCAAiB;IACrC;IACA,mDAA6B,WAAW,WAAW;IACnD,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACF,CAAC;WAGK,OAAO;AACd,UAAO,MAAM,MAAM,QAAQ,kBAAkB;;;CAIjD,MAAe,eAAe,QAAuC;AACnE,QAAM,KAAK,mBAAmB;AAE9B,MAAI;GACF,MAAMD,aAAkC,MAAM,KAAK,mBAAmB,CAAC,eAAe;GACtF,MAAMC,UAA8B,YAAY;GAEhD,MAAMC,UAAgB,uCAAiB;IACrC;IACA,mDAA6B,WAAW,WAAW;IACnD,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACF,CAAC;AAEF,UAAO;IACL,qEAA+C,QAAQ;IACvD;IACD;WACM,OAAO;AACd,UAAO;IACL,qEAA+C,MAAM,MAAM,kBAAkB,OAAO,CAAC;IACrF,4DAAsC,MAAM,MAAM,kBAAkB,OAAO,CAAC;IAC7E;;;CAIL,MAAe,kBAAkB,SAAc,QAAgC;AAC7E,QAAM,KAAK,mBAAmB;AAE9B,MAAI;GACF,MAAMF,aAAkC,MAAM,KAAK,mBAAmB,CAAC,eAAe;GACtF,MAAMC,UAA8B,YAAY;AAEhD,gDAAuB;IACrB;IACA,mDAA6B,WAAW,WAAW;IACnD,SAAS,EACP,eAAe,UAAU,MAAM,KAAK,eAAe,OAAO,IAC3D;IACD,SAAS,SAAS,WAAW;IAC9B,CAAC;WACK,OAAO;AACd,SAAM,IAAIJ,uCACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACxF,8CACA,SACA,6GACD;;;CAIL,AAAS,YAAqB;AAC5B,SAAO;;CAGT,AAAS,WAAW,WAAsC;AACxD,SAAO,MAAM,WAAW,UAAU;;CAGpC,AAAS,cAAc,QAAoC,WAAuD;AAChH,SAAO,MAAM,cAAc,QAAQ,UAAU;;CAI/C,MAAe,eAAe,YAAsC;EAClE,MAAM,EAAC,SAAS,mBAAkB,2CAAM;EACxC,MAAMM,QAA4B,MAAM,gBAAgB;AAExD,MAAI,OAAO,UAAU,YAAY,CAAC,MAChC,OAAM,IAAIN,uCACR,+BACA,uDACA,UACA,8GACD;AAGH,SAAO;;CAGT,MAAe,kBAAkB,WAAoB,SAAoC;AACvF,QAAM,KAAK,mBAAmB;AAC9B,SAAO,MAAM,MAAM,kBAAkB,WAAW,QAAQ;;CAG1D,MAAe,OAAO,GAAG,MAA2B;EAClD,MAAMO,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;EACvB,MAAMC,OAAY,KAAK;AASvB,MAFE,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB,OAEjE;AACzB,SAAM,KAAK,mBAAmB;GAE9B,MAAMP,aAAkC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEtF,0DAAiC;IAC/B,SAAS,YAAY;IACrB,YAAY,MAAM;IAClB,SAAS;IACT,mDAA6B,eAAe,YAAY,MAAM,IAAI;IACnE,CAAC;;AAGJ,SAAO,MAAM,OAAO,MAAM,MAAM,MAAM,MAAM,MAAM,eAAe,MAAM,OAAO,KAAK;;CAGrF,MAAe,QAAQ,GAAG,MAA8B;AACtD,MAAI,KAAK,MAAM,OAAO,KAAK,OAAO,SAChC,OAAM,IAAI,MAAM,wCAAwC;EAI1D,MAAMQ,kBADY,KAAK,kBAAkB,EACD,mBAAmB;EAE3D,MAAMV,oBAA4B,KAAK,MAAO,MAAMC,8BAAc;AAElE,MAAI;AACF,SAAO,MAAM,QAA6C,kBAAkB;WACrE,OAAO;GACd,MAAMU,UAAkB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAE9E,OACE,CAAC,QAAQ,SAAS,uBAAuB,IACzC,CAAC,QAAQ,SAAS,oBAAoB,IACtC,CAAC,QAAQ,SAAS,oBAAoB,IACtC,CAAC,QAAQ,SAAS,wBAAwB,CAE1C,OAAM;;AAIV,SAAO;;CAGT,MAAe,OAAO,UAAyC;AAC7D,QAAM,IAAIZ,uCACR,mBACA,2CACA,UACA,8DACD;;CAIH,AAAS,eAAe,UAAmD;AACzE,QAAM,IAAIA,uCACR,mBACA,8DACA,UACA,sEACD;;CAGH,MAAa,uBACX,cACA,QACiB;AACjB,QAAM,KAAK,mBAAmB;AAC9B,SAAO,KAAK,aAAa,cAAc,OAAO;;CAGhD,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAsB,eAA8B;AAClD,QAAM,IAAIA,uCACR,mBACA,4DACA,UACA,oEACD;;CAGH,MAAe,WAAW,aAAsC,WAAmC;AACjG,SAAO,KAAK,mBAAmB,CAAC,eAAe,aAAa,UAAU;;CAGxE,AAAS,eAA4C,OAA2B;AAC9E,SAAO,MAAM,eAAkB,MAAM;;;AAIzC,kCAAe"}

package/dist/cjs/server/ThunderIDProvider.cjs

@@ -55,6 +55,7 @@ const ThunderIDServerProvider = async ({ children, afterSignInUrl, afterSignOutU
 	try {
 		flowMeta = await (0, __thunderid_node.getFlowMeta)({
 			baseUrl: config?.baseUrl,
+			url: (0, __thunderid_node.resolveResourceEndpoint)("flowMeta", config),
 			...config?.applicationId ? {
 				id: config.applicationId,
 				type: __thunderid_node.FlowMetaType.App

package/dist/cjs/server/ThunderIDProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.cjs","names":["ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>>","getClient","config: Partial<ThunderIDNextConfig>","ThunderIDRuntimeError","flowMeta: FlowMetadataResponse | null","FlowMetaType","sessionPayload: SessionTokenPayload | undefined","getSessionPayload","sessionId: string","getSessionId","signedIn: boolean","isSignedIn","user: User","userProfile: UserProfile","updatedBaseUrl: string | undefined","userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        }","getUserAction","userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        }","getUserProfileAction","ThunderIDClientProvider","signInAction","clearSession","refreshToken","signOutAction","signUpAction","handleOAuthCallbackAction","updateUserProfileAction"],"sources":["../../../src/server/ThunderIDProvider.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n'use server';\n\nimport {\n  ThunderIDRuntimeError,\n  FlowMetadataResponse,\n  FlowMetaType,\n  IdToken,\n  User,\n  UserProfile,\n  getFlowMeta,\n  extractUserClaimsFromIdToken,\n} from '@thunderid/node';\nimport {ThunderIDProviderProps} from '@thunderid/react';\nimport {FC, PropsWithChildren, ReactElement} from 'react';\nimport clearSession from './actions/clearSession';\nimport getSessionId from './actions/getSessionId';\nimport getSessionPayload from './actions/getSessionPayload';\nimport getUserAction from './actions/getUserAction';\nimport getUserProfileAction from './actions/getUserProfileAction';\nimport handleOAuthCallbackAction from './actions/handleOAuthCallbackAction';\nimport isSignedIn from './actions/isSignedIn';\nimport refreshToken from './actions/refreshToken';\nimport signInAction from './actions/signInAction';\nimport signOutAction from './actions/signOutAction';\nimport signUpAction from './actions/signUpAction';\nimport updateUserProfileAction from './actions/updateUserProfileAction';\nimport getClient from './getClient';\nimport ThunderIDClientProvider from '../client/contexts/ThunderID/ThunderIDProvider.js';\nimport {ThunderIDNextConfig} from '../models/config';\nimport logger from '../utils/logger';\nimport {SessionTokenPayload} from '../utils/SessionManager';\n\n/**\n * Props interface of {@link ThunderIDServerProvider}\n */\nexport type ThunderIDServerProviderProps = Partial<ThunderIDProviderProps> & {\n  clientSecret?: string;\n  /**\n   * Session cookie lifetime in seconds. Determines how long the session cookie\n   * remains valid in the browser after sign-in.\n   *\n   * Resolution order (first defined value wins):\n   *   1. This prop — set here when mounting the provider.\n   *   2. `THUNDERID_SESSION_COOKIE_EXPIRY_TIME` environment variable.\n   *   3. Built-in default of 86400 seconds (24 hours).\n   *\n   * @example\n   * // 8-hour session cookie\n   * <ThunderIDServerProvider sessionCookieExpiryTime={28800} ... />\n   */\n  sessionCookieExpiryTime?: number;\n};\n\n/**\n * Server-side provider component for ThunderID authentication.\n * Wraps the client-side provider and handles server-side authentication logic.\n * Uses the singleton ThunderIDNextClient instance for consistent authentication state.\n *\n * @param props - Props injected into the component.\n *\n * @example\n * ```tsx\n * <ThunderIDServerProvider config={thunderidConfig}>\n *   <YourApp />\n * </ThunderIDServerProvider>\n * ```\n *\n * @returns ThunderIDServerProvider component.\n */\nconst ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>> = async ({\n  children,\n  afterSignInUrl,\n  afterSignOutUrl,\n  ..._config\n}: PropsWithChildren<ThunderIDServerProviderProps>): Promise<ReactElement> => {\n  const thunderIDClient = getClient();\n  let config: Partial<ThunderIDNextConfig> = {};\n\n  try {\n    await thunderIDClient.initialize(_config as ThunderIDNextConfig);\n\n    logger.debug('[ThunderIDServerProvider] ThunderID client initialized successfully.');\n\n    config = await thunderIDClient.getConfiguration();\n  } catch (error) {\n    logger.error('[ThunderIDServerProvider] Failed to initialize ThunderID client:', error?.toString());\n\n    throw new ThunderIDRuntimeError(\n      `Failed to initialize ThunderID client: ${error?.toString()}`,\n      'next-ConfigurationError-001',\n      'next',\n      'An error occurred while initializing the ThunderID client. Please check your configuration.',\n    );\n  }\n\n  if (!thunderIDClient.isInitialized) {\n    return <></>;\n  }\n\n  // Fetch flow metadata (design config + i18n bundle) server-side so `FlowMetaProvider` can seed\n  // its state and skip a redundant client-side fetch — avoiding a flash of untranslated i18n keys\n  // (e.g. raw `signin.forms.credentials.title`) while embedded flow components first render.\n  let flowMeta: FlowMetadataResponse | null = null;\n  try {\n    flowMeta = await getFlowMeta({\n      baseUrl: config?.baseUrl,\n      ...(config?.applicationId ? {id: config.applicationId, type: FlowMetaType.App} : {}),\n    });\n  } catch (error) {\n    logger.warn('[ThunderIDServerProvider] Failed to fetch flow metadata:', error?.toString());\n  }\n\n  // Try to get session information from JWT first, then fall back to legacy\n  const sessionPayload: SessionTokenPayload | undefined = await getSessionPayload();\n  const sessionId: string = sessionPayload?.sessionId || (await getSessionId()) || '';\n  const signedIn: boolean = await isSignedIn(sessionId);\n\n  let user: User = {};\n  let userProfile: UserProfile = {\n    flattenedProfile: {},\n    profile: {},\n  };\n\n  const resolvedPreferences = {\n    ...config?.preferences,\n    ..._config.preferences,\n    user: {\n      ...config?.preferences?.user,\n      ..._config.preferences?.user,\n    },\n  };\n\n  if (signedIn) {\n    let updatedBaseUrl: string | undefined = config?.baseUrl;\n\n    if (sessionPayload?.organizationId) {\n      updatedBaseUrl = `${config?.baseUrl}/o`;\n      config = {...config, baseUrl: updatedBaseUrl};\n    } else if (sessionId) {\n      try {\n        const idToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        if (idToken?.['user_org']) {\n          updatedBaseUrl = `${config?.baseUrl}/o`;\n          config = {...config, baseUrl: updatedBaseUrl};\n        }\n      } catch {\n        // Continue without organization info\n      }\n    }\n\n    // Check if user profile fetching is enabled (default: true)\n    const shouldFetchUserProfile: boolean = resolvedPreferences?.user?.fetchUserProfile !== false;\n\n    if (shouldFetchUserProfile) {\n      try {\n        const userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserAction(sessionId);\n        const userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        } = await getUserProfileAction(sessionId);\n\n        user = userResponse.data?.user || {};\n        userProfile = userProfileResponse.data?.userProfile ?? userProfile;\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to fetch user profile from /users/me:', error?.toString());\n      }\n    } else {\n      try {\n        const decodedIdToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        const claims = extractUserClaimsFromIdToken(decodedIdToken);\n        user = claims;\n        userProfile = {\n          flattenedProfile: claims,\n          profile: claims,\n        };\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to extract user claims from ID token:', error?.toString());\n      }\n    }\n  }\n\n  return (\n    <ThunderIDClientProvider\n      organizationHandle={config?.organizationHandle}\n      applicationId={config?.applicationId}\n      baseUrl={config?.baseUrl}\n      initialMeta={flowMeta}\n      signIn={signInAction}\n      clearSession={clearSession}\n      refreshToken={refreshToken}\n      signOut={signOutAction}\n      signUp={signUpAction}\n      handleOAuthCallback={handleOAuthCallbackAction}\n      signInUrl={config?.signInUrl}\n      signUpUrl={config?.signUpUrl}\n      preferences={resolvedPreferences}\n      clientId={config?.clientId}\n      user={user}\n      userProfile={userProfile}\n      updateProfile={updateUserProfileAction}\n      isSignedIn={signedIn}\n    >\n      {children}\n    </ThunderIDClientProvider>\n  );\n};\n\nexport default ThunderIDServerProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuFA,MAAMA,0BAA+E,OAAO,EAC1F,UACA,gBACA,gBACA,GAAG,cACyE;CAC5E,MAAM,kBAAkBC,2BAAW;CACnC,IAAIC,SAAuC,EAAE;AAE7C,KAAI;AACF,QAAM,gBAAgB,WAAW,QAA+B;AAEhE,yBAAO,MAAM,uEAAuE;AAEpF,WAAS,MAAM,gBAAgB,kBAAkB;UAC1C,OAAO;AACd,yBAAO,MAAM,oEAAoE,OAAO,UAAU,CAAC;AAEnG,QAAM,IAAIC,uCACR,0CAA0C,OAAO,UAAU,IAC3D,+BACA,QACA,8FACD;;AAGH,KAAI,CAAC,gBAAgB,cACnB,QAAO,0EAAK;CAMd,IAAIC,WAAwC;AAC5C,KAAI;AACF,aAAW,wCAAkB;GAC3B,SAAS,QAAQ;GACjB,GAAI,QAAQ,gBAAgB;IAAC,IAAI,OAAO;IAAe,MAAMC,8BAAa;IAAI,GAAG,EAAE;GACpF,CAAC;UACK,OAAO;AACd,yBAAO,KAAK,4DAA4D,OAAO,UAAU,CAAC;;CAI5F,MAAMC,iBAAkD,MAAMC,mCAAmB;CACjF,MAAMC,YAAoB,gBAAgB,aAAc,MAAMC,8BAAc,IAAK;CACjF,MAAMC,WAAoB,MAAMC,2BAAW,UAAU;CAErD,IAAIC,OAAa,EAAE;CACnB,IAAIC,cAA2B;EAC7B,kBAAkB,EAAE;EACpB,SAAS,EAAE;EACZ;CAED,MAAM,sBAAsB;EAC1B,GAAG,QAAQ;EACX,GAAG,QAAQ;EACX,MAAM;GACJ,GAAG,QAAQ,aAAa;GACxB,GAAG,QAAQ,aAAa;GACzB;EACF;AAED,KAAI,UAAU;EACZ,IAAIC,iBAAqC,QAAQ;AAEjD,MAAI,gBAAgB,gBAAgB;AAClC,oBAAiB,GAAG,QAAQ,QAAQ;AACpC,YAAS;IAAC,GAAG;IAAQ,SAAS;IAAe;aACpC,UACT,KAAI;AAEF,QADyB,MAAM,gBAAgB,kBAAkB,UAAU,IAC7D,aAAa;AACzB,qBAAiB,GAAG,QAAQ,QAAQ;AACpC,aAAS;KAAC,GAAG;KAAQ,SAAS;KAAe;;UAEzC;AAQV,MAFwC,qBAAqB,MAAM,qBAAqB,MAGtF,KAAI;GACF,MAAMC,eAIF,MAAMC,8BAAc,UAAU;GAClC,MAAMC,sBAIF,MAAMC,qCAAqB,UAAU;AAEzC,UAAO,aAAa,MAAM,QAAQ,EAAE;AACpC,iBAAc,oBAAoB,MAAM,eAAe;WAChD,OAAO;AACd,0BAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;MAG1G,KAAI;GAEF,MAAM,4DAD0B,MAAM,gBAAgB,kBAAkB,UAAU,CACvB;AAC3D,UAAO;AACP,iBAAc;IACZ,kBAAkB;IAClB,SAAS;IACV;WACM,OAAO;AACd,0BAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;;AAK9G,QACE,2CAACC;EACC,oBAAoB,QAAQ;EAC5B,eAAe,QAAQ;EACvB,SAAS,QAAQ;EACjB,aAAa;EACb,QAAQC;EACR,cAAcC;EACd,cAAcC;EACd,SAASC;EACT,QAAQC;EACR,qBAAqBC;EACrB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,aAAa;EACb,UAAU,QAAQ;EACZ;EACO;EACb,eAAeC;EACf,YAAY;EAEX;GACuB;;AAI9B,kCAAe"}
+{"version":3,"file":"ThunderIDProvider.cjs","names":["ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>>","getClient","config: Partial<ThunderIDNextConfig>","ThunderIDRuntimeError","flowMeta: FlowMetadataResponse | null","FlowMetaType","sessionPayload: SessionTokenPayload | undefined","getSessionPayload","sessionId: string","getSessionId","signedIn: boolean","isSignedIn","user: User","userProfile: UserProfile","updatedBaseUrl: string | undefined","userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        }","getUserAction","userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        }","getUserProfileAction","ThunderIDClientProvider","signInAction","clearSession","refreshToken","signOutAction","signUpAction","handleOAuthCallbackAction","updateUserProfileAction"],"sources":["../../../src/server/ThunderIDProvider.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n'use server';\n\nimport {\n  ThunderIDRuntimeError,\n  FlowMetadataResponse,\n  FlowMetaType,\n  IdToken,\n  User,\n  UserProfile,\n  getFlowMeta,\n  extractUserClaimsFromIdToken,\n  resolveResourceEndpoint,\n} from '@thunderid/node';\nimport {ThunderIDProviderProps} from '@thunderid/react';\nimport {FC, PropsWithChildren, ReactElement} from 'react';\nimport clearSession from './actions/clearSession';\nimport getSessionId from './actions/getSessionId';\nimport getSessionPayload from './actions/getSessionPayload';\nimport getUserAction from './actions/getUserAction';\nimport getUserProfileAction from './actions/getUserProfileAction';\nimport handleOAuthCallbackAction from './actions/handleOAuthCallbackAction';\nimport isSignedIn from './actions/isSignedIn';\nimport refreshToken from './actions/refreshToken';\nimport signInAction from './actions/signInAction';\nimport signOutAction from './actions/signOutAction';\nimport signUpAction from './actions/signUpAction';\nimport updateUserProfileAction from './actions/updateUserProfileAction';\nimport getClient from './getClient';\nimport ThunderIDClientProvider from '../client/contexts/ThunderID/ThunderIDProvider.js';\nimport {ThunderIDNextConfig} from '../models/config';\nimport logger from '../utils/logger';\nimport {SessionTokenPayload} from '../utils/SessionManager';\n\n/**\n * Props interface of {@link ThunderIDServerProvider}\n */\nexport type ThunderIDServerProviderProps = Partial<ThunderIDProviderProps> & {\n  clientSecret?: string;\n  /**\n   * Session cookie lifetime in seconds. Determines how long the session cookie\n   * remains valid in the browser after sign-in.\n   *\n   * Resolution order (first defined value wins):\n   *   1. This prop — set here when mounting the provider.\n   *   2. `THUNDERID_SESSION_COOKIE_EXPIRY_TIME` environment variable.\n   *   3. Built-in default of 86400 seconds (24 hours).\n   *\n   * @example\n   * // 8-hour session cookie\n   * <ThunderIDServerProvider sessionCookieExpiryTime={28800} ... />\n   */\n  sessionCookieExpiryTime?: number;\n};\n\n/**\n * Server-side provider component for ThunderID authentication.\n * Wraps the client-side provider and handles server-side authentication logic.\n * Uses the singleton ThunderIDNextClient instance for consistent authentication state.\n *\n * @param props - Props injected into the component.\n *\n * @example\n * ```tsx\n * <ThunderIDServerProvider config={thunderidConfig}>\n *   <YourApp />\n * </ThunderIDServerProvider>\n * ```\n *\n * @returns ThunderIDServerProvider component.\n */\nconst ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>> = async ({\n  children,\n  afterSignInUrl,\n  afterSignOutUrl,\n  ..._config\n}: PropsWithChildren<ThunderIDServerProviderProps>): Promise<ReactElement> => {\n  const thunderIDClient = getClient();\n  let config: Partial<ThunderIDNextConfig> = {};\n\n  try {\n    await thunderIDClient.initialize(_config as ThunderIDNextConfig);\n\n    logger.debug('[ThunderIDServerProvider] ThunderID client initialized successfully.');\n\n    config = await thunderIDClient.getConfiguration();\n  } catch (error) {\n    logger.error('[ThunderIDServerProvider] Failed to initialize ThunderID client:', error?.toString());\n\n    throw new ThunderIDRuntimeError(\n      `Failed to initialize ThunderID client: ${error?.toString()}`,\n      'next-ConfigurationError-001',\n      'next',\n      'An error occurred while initializing the ThunderID client. Please check your configuration.',\n    );\n  }\n\n  if (!thunderIDClient.isInitialized) {\n    return <></>;\n  }\n\n  // Fetch flow metadata (design config + i18n bundle) server-side so `FlowMetaProvider` can seed\n  // its state and skip a redundant client-side fetch — avoiding a flash of untranslated i18n keys\n  // (e.g. raw `signin.forms.credentials.title`) while embedded flow components first render.\n  let flowMeta: FlowMetadataResponse | null = null;\n  try {\n    flowMeta = await getFlowMeta({\n      baseUrl: config?.baseUrl,\n      url: resolveResourceEndpoint('flowMeta', config),\n      ...(config?.applicationId ? {id: config.applicationId, type: FlowMetaType.App} : {}),\n    });\n  } catch (error) {\n    logger.warn('[ThunderIDServerProvider] Failed to fetch flow metadata:', error?.toString());\n  }\n\n  // Try to get session information from JWT first, then fall back to legacy\n  const sessionPayload: SessionTokenPayload | undefined = await getSessionPayload();\n  const sessionId: string = sessionPayload?.sessionId || (await getSessionId()) || '';\n  const signedIn: boolean = await isSignedIn(sessionId);\n\n  let user: User = {};\n  let userProfile: UserProfile = {\n    flattenedProfile: {},\n    profile: {},\n  };\n\n  const resolvedPreferences = {\n    ...config?.preferences,\n    ..._config.preferences,\n    user: {\n      ...config?.preferences?.user,\n      ..._config.preferences?.user,\n    },\n  };\n\n  if (signedIn) {\n    let updatedBaseUrl: string | undefined = config?.baseUrl;\n\n    if (sessionPayload?.organizationId) {\n      updatedBaseUrl = `${config?.baseUrl}/o`;\n      config = {...config, baseUrl: updatedBaseUrl};\n    } else if (sessionId) {\n      try {\n        const idToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        if (idToken?.['user_org']) {\n          updatedBaseUrl = `${config?.baseUrl}/o`;\n          config = {...config, baseUrl: updatedBaseUrl};\n        }\n      } catch {\n        // Continue without organization info\n      }\n    }\n\n    // Check if user profile fetching is enabled (default: true)\n    const shouldFetchUserProfile: boolean = resolvedPreferences?.user?.fetchUserProfile !== false;\n\n    if (shouldFetchUserProfile) {\n      try {\n        const userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserAction(sessionId);\n        const userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        } = await getUserProfileAction(sessionId);\n\n        user = userResponse.data?.user || {};\n        userProfile = userProfileResponse.data?.userProfile ?? userProfile;\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to fetch user profile from /users/me:', error?.toString());\n      }\n    } else {\n      try {\n        const decodedIdToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        const claims = extractUserClaimsFromIdToken(decodedIdToken);\n        user = claims;\n        userProfile = {\n          flattenedProfile: claims,\n          profile: claims,\n        };\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to extract user claims from ID token:', error?.toString());\n      }\n    }\n  }\n\n  return (\n    <ThunderIDClientProvider\n      organizationHandle={config?.organizationHandle}\n      applicationId={config?.applicationId}\n      baseUrl={config?.baseUrl}\n      initialMeta={flowMeta}\n      signIn={signInAction}\n      clearSession={clearSession}\n      refreshToken={refreshToken}\n      signOut={signOutAction}\n      signUp={signUpAction}\n      handleOAuthCallback={handleOAuthCallbackAction}\n      signInUrl={config?.signInUrl}\n      signUpUrl={config?.signUpUrl}\n      preferences={resolvedPreferences}\n      clientId={config?.clientId}\n      user={user}\n      userProfile={userProfile}\n      updateProfile={updateUserProfileAction}\n      isSignedIn={signedIn}\n    >\n      {children}\n    </ThunderIDClientProvider>\n  );\n};\n\nexport default ThunderIDServerProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwFA,MAAMA,0BAA+E,OAAO,EAC1F,UACA,gBACA,gBACA,GAAG,cACyE;CAC5E,MAAM,kBAAkBC,2BAAW;CACnC,IAAIC,SAAuC,EAAE;AAE7C,KAAI;AACF,QAAM,gBAAgB,WAAW,QAA+B;AAEhE,yBAAO,MAAM,uEAAuE;AAEpF,WAAS,MAAM,gBAAgB,kBAAkB;UAC1C,OAAO;AACd,yBAAO,MAAM,oEAAoE,OAAO,UAAU,CAAC;AAEnG,QAAM,IAAIC,uCACR,0CAA0C,OAAO,UAAU,IAC3D,+BACA,QACA,8FACD;;AAGH,KAAI,CAAC,gBAAgB,cACnB,QAAO,0EAAK;CAMd,IAAIC,WAAwC;AAC5C,KAAI;AACF,aAAW,wCAAkB;GAC3B,SAAS,QAAQ;GACjB,mDAA6B,YAAY,OAAO;GAChD,GAAI,QAAQ,gBAAgB;IAAC,IAAI,OAAO;IAAe,MAAMC,8BAAa;IAAI,GAAG,EAAE;GACpF,CAAC;UACK,OAAO;AACd,yBAAO,KAAK,4DAA4D,OAAO,UAAU,CAAC;;CAI5F,MAAMC,iBAAkD,MAAMC,mCAAmB;CACjF,MAAMC,YAAoB,gBAAgB,aAAc,MAAMC,8BAAc,IAAK;CACjF,MAAMC,WAAoB,MAAMC,2BAAW,UAAU;CAErD,IAAIC,OAAa,EAAE;CACnB,IAAIC,cAA2B;EAC7B,kBAAkB,EAAE;EACpB,SAAS,EAAE;EACZ;CAED,MAAM,sBAAsB;EAC1B,GAAG,QAAQ;EACX,GAAG,QAAQ;EACX,MAAM;GACJ,GAAG,QAAQ,aAAa;GACxB,GAAG,QAAQ,aAAa;GACzB;EACF;AAED,KAAI,UAAU;EACZ,IAAIC,iBAAqC,QAAQ;AAEjD,MAAI,gBAAgB,gBAAgB;AAClC,oBAAiB,GAAG,QAAQ,QAAQ;AACpC,YAAS;IAAC,GAAG;IAAQ,SAAS;IAAe;aACpC,UACT,KAAI;AAEF,QADyB,MAAM,gBAAgB,kBAAkB,UAAU,IAC7D,aAAa;AACzB,qBAAiB,GAAG,QAAQ,QAAQ;AACpC,aAAS;KAAC,GAAG;KAAQ,SAAS;KAAe;;UAEzC;AAQV,MAFwC,qBAAqB,MAAM,qBAAqB,MAGtF,KAAI;GACF,MAAMC,eAIF,MAAMC,8BAAc,UAAU;GAClC,MAAMC,sBAIF,MAAMC,qCAAqB,UAAU;AAEzC,UAAO,aAAa,MAAM,QAAQ,EAAE;AACpC,iBAAc,oBAAoB,MAAM,eAAe;WAChD,OAAO;AACd,0BAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;MAG1G,KAAI;GAEF,MAAM,4DAD0B,MAAM,gBAAgB,kBAAkB,UAAU,CACvB;AAC3D,UAAO;AACP,iBAAc;IACZ,kBAAkB;IAClB,SAAS;IACV;WACM,OAAO;AACd,0BAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;;AAK9G,QACE,2CAACC;EACC,oBAAoB,QAAQ;EAC5B,eAAe,QAAQ;EACvB,SAAS,QAAQ;EACjB,aAAa;EACb,QAAQC;EACR,cAAcC;EACd,cAAcC;EACd,SAASC;EACT,QAAQC;EACR,qBAAqBC;EACrB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,aAAa;EACb,UAAU,QAAQ;EACZ;EACO;EACb,eAAeC;EACf,YAAY;EAEX;GACuB;;AAI9B,kCAAe"}

package/dist/server/ThunderIDProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../src/server/ThunderIDProvider.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAcH,OAAO,EAAC,sBAAsB,EAAC,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAC,EAAE,EAAE,iBAAiB,EAAe,MAAM,OAAO,CAAC;AAmB1D;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;OAYG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,uBAAuB,EAAE,EAAE,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CA6IhF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../src/server/ThunderIDProvider.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAeH,OAAO,EAAC,sBAAsB,EAAC,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAC,EAAE,EAAE,iBAAiB,EAAe,MAAM,OAAO,CAAC;AAmB1D;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;OAYG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,uBAAuB,EAAE,EAAE,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CA8IhF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/server/ThunderIDProvider.js

@@ -16,7 +16,7 @@ import signOutAction_default from "./actions/signOutAction.js";
 import signUpAction_default from "./actions/signUpAction.js";
 import updateUserProfileAction_default from "./actions/updateUserProfileAction.js";
 import ThunderIDProvider_default from "../client/contexts/ThunderID/ThunderIDProvider.js";
-import { FlowMetaType, ThunderIDRuntimeError, extractUserClaimsFromIdToken, getFlowMeta } from "@thunderid/node";
+import { FlowMetaType, ThunderIDRuntimeError, extractUserClaimsFromIdToken, getFlowMeta, resolveResourceEndpoint } from "@thunderid/node";
 import { Fragment, jsx } from "react/jsx-runtime";
 
 //#region src/server/ThunderIDProvider.tsx
@@ -52,6 +52,7 @@ const ThunderIDServerProvider = async ({ children, afterSignInUrl, afterSignOutU
 	try {
 		flowMeta = await getFlowMeta({
 			baseUrl: config?.baseUrl,
+			url: resolveResourceEndpoint("flowMeta", config),
 			...config?.applicationId ? {
 				id: config.applicationId,
 				type: FlowMetaType.App

package/dist/server/ThunderIDProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.js","names":["ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>>","getClient","config: Partial<ThunderIDNextConfig>","flowMeta: FlowMetadataResponse | null","sessionPayload: SessionTokenPayload | undefined","getSessionPayload","sessionId: string","getSessionId","signedIn: boolean","isSignedIn","user: User","userProfile: UserProfile","updatedBaseUrl: string | undefined","userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        }","getUserAction","userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        }","getUserProfileAction","ThunderIDClientProvider","signInAction","clearSession","refreshToken","signOutAction","signUpAction","handleOAuthCallbackAction","updateUserProfileAction"],"sources":["../../src/server/ThunderIDProvider.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n'use server';\n\nimport {\n  ThunderIDRuntimeError,\n  FlowMetadataResponse,\n  FlowMetaType,\n  IdToken,\n  User,\n  UserProfile,\n  getFlowMeta,\n  extractUserClaimsFromIdToken,\n} from '@thunderid/node';\nimport {ThunderIDProviderProps} from '@thunderid/react';\nimport {FC, PropsWithChildren, ReactElement} from 'react';\nimport clearSession from './actions/clearSession';\nimport getSessionId from './actions/getSessionId';\nimport getSessionPayload from './actions/getSessionPayload';\nimport getUserAction from './actions/getUserAction';\nimport getUserProfileAction from './actions/getUserProfileAction';\nimport handleOAuthCallbackAction from './actions/handleOAuthCallbackAction';\nimport isSignedIn from './actions/isSignedIn';\nimport refreshToken from './actions/refreshToken';\nimport signInAction from './actions/signInAction';\nimport signOutAction from './actions/signOutAction';\nimport signUpAction from './actions/signUpAction';\nimport updateUserProfileAction from './actions/updateUserProfileAction';\nimport getClient from './getClient';\nimport ThunderIDClientProvider from '../client/contexts/ThunderID/ThunderIDProvider.js';\nimport {ThunderIDNextConfig} from '../models/config';\nimport logger from '../utils/logger';\nimport {SessionTokenPayload} from '../utils/SessionManager';\n\n/**\n * Props interface of {@link ThunderIDServerProvider}\n */\nexport type ThunderIDServerProviderProps = Partial<ThunderIDProviderProps> & {\n  clientSecret?: string;\n  /**\n   * Session cookie lifetime in seconds. Determines how long the session cookie\n   * remains valid in the browser after sign-in.\n   *\n   * Resolution order (first defined value wins):\n   *   1. This prop — set here when mounting the provider.\n   *   2. `THUNDERID_SESSION_COOKIE_EXPIRY_TIME` environment variable.\n   *   3. Built-in default of 86400 seconds (24 hours).\n   *\n   * @example\n   * // 8-hour session cookie\n   * <ThunderIDServerProvider sessionCookieExpiryTime={28800} ... />\n   */\n  sessionCookieExpiryTime?: number;\n};\n\n/**\n * Server-side provider component for ThunderID authentication.\n * Wraps the client-side provider and handles server-side authentication logic.\n * Uses the singleton ThunderIDNextClient instance for consistent authentication state.\n *\n * @param props - Props injected into the component.\n *\n * @example\n * ```tsx\n * <ThunderIDServerProvider config={thunderidConfig}>\n *   <YourApp />\n * </ThunderIDServerProvider>\n * ```\n *\n * @returns ThunderIDServerProvider component.\n */\nconst ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>> = async ({\n  children,\n  afterSignInUrl,\n  afterSignOutUrl,\n  ..._config\n}: PropsWithChildren<ThunderIDServerProviderProps>): Promise<ReactElement> => {\n  const thunderIDClient = getClient();\n  let config: Partial<ThunderIDNextConfig> = {};\n\n  try {\n    await thunderIDClient.initialize(_config as ThunderIDNextConfig);\n\n    logger.debug('[ThunderIDServerProvider] ThunderID client initialized successfully.');\n\n    config = await thunderIDClient.getConfiguration();\n  } catch (error) {\n    logger.error('[ThunderIDServerProvider] Failed to initialize ThunderID client:', error?.toString());\n\n    throw new ThunderIDRuntimeError(\n      `Failed to initialize ThunderID client: ${error?.toString()}`,\n      'next-ConfigurationError-001',\n      'next',\n      'An error occurred while initializing the ThunderID client. Please check your configuration.',\n    );\n  }\n\n  if (!thunderIDClient.isInitialized) {\n    return <></>;\n  }\n\n  // Fetch flow metadata (design config + i18n bundle) server-side so `FlowMetaProvider` can seed\n  // its state and skip a redundant client-side fetch — avoiding a flash of untranslated i18n keys\n  // (e.g. raw `signin.forms.credentials.title`) while embedded flow components first render.\n  let flowMeta: FlowMetadataResponse | null = null;\n  try {\n    flowMeta = await getFlowMeta({\n      baseUrl: config?.baseUrl,\n      ...(config?.applicationId ? {id: config.applicationId, type: FlowMetaType.App} : {}),\n    });\n  } catch (error) {\n    logger.warn('[ThunderIDServerProvider] Failed to fetch flow metadata:', error?.toString());\n  }\n\n  // Try to get session information from JWT first, then fall back to legacy\n  const sessionPayload: SessionTokenPayload | undefined = await getSessionPayload();\n  const sessionId: string = sessionPayload?.sessionId || (await getSessionId()) || '';\n  const signedIn: boolean = await isSignedIn(sessionId);\n\n  let user: User = {};\n  let userProfile: UserProfile = {\n    flattenedProfile: {},\n    profile: {},\n  };\n\n  const resolvedPreferences = {\n    ...config?.preferences,\n    ..._config.preferences,\n    user: {\n      ...config?.preferences?.user,\n      ..._config.preferences?.user,\n    },\n  };\n\n  if (signedIn) {\n    let updatedBaseUrl: string | undefined = config?.baseUrl;\n\n    if (sessionPayload?.organizationId) {\n      updatedBaseUrl = `${config?.baseUrl}/o`;\n      config = {...config, baseUrl: updatedBaseUrl};\n    } else if (sessionId) {\n      try {\n        const idToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        if (idToken?.['user_org']) {\n          updatedBaseUrl = `${config?.baseUrl}/o`;\n          config = {...config, baseUrl: updatedBaseUrl};\n        }\n      } catch {\n        // Continue without organization info\n      }\n    }\n\n    // Check if user profile fetching is enabled (default: true)\n    const shouldFetchUserProfile: boolean = resolvedPreferences?.user?.fetchUserProfile !== false;\n\n    if (shouldFetchUserProfile) {\n      try {\n        const userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserAction(sessionId);\n        const userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        } = await getUserProfileAction(sessionId);\n\n        user = userResponse.data?.user || {};\n        userProfile = userProfileResponse.data?.userProfile ?? userProfile;\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to fetch user profile from /users/me:', error?.toString());\n      }\n    } else {\n      try {\n        const decodedIdToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        const claims = extractUserClaimsFromIdToken(decodedIdToken);\n        user = claims;\n        userProfile = {\n          flattenedProfile: claims,\n          profile: claims,\n        };\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to extract user claims from ID token:', error?.toString());\n      }\n    }\n  }\n\n  return (\n    <ThunderIDClientProvider\n      organizationHandle={config?.organizationHandle}\n      applicationId={config?.applicationId}\n      baseUrl={config?.baseUrl}\n      initialMeta={flowMeta}\n      signIn={signInAction}\n      clearSession={clearSession}\n      refreshToken={refreshToken}\n      signOut={signOutAction}\n      signUp={signUpAction}\n      handleOAuthCallback={handleOAuthCallbackAction}\n      signInUrl={config?.signInUrl}\n      signUpUrl={config?.signUpUrl}\n      preferences={resolvedPreferences}\n      clientId={config?.clientId}\n      user={user}\n      userProfile={userProfile}\n      updateProfile={updateUserProfileAction}\n      isSignedIn={signedIn}\n    >\n      {children}\n    </ThunderIDClientProvider>\n  );\n};\n\nexport default ThunderIDServerProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuFA,MAAMA,0BAA+E,OAAO,EAC1F,UACA,gBACA,gBACA,GAAG,cACyE;CAC5E,MAAM,kBAAkBC,mBAAW;CACnC,IAAIC,SAAuC,EAAE;AAE7C,KAAI;AACF,QAAM,gBAAgB,WAAW,QAA+B;AAEhE,iBAAO,MAAM,uEAAuE;AAEpF,WAAS,MAAM,gBAAgB,kBAAkB;UAC1C,OAAO;AACd,iBAAO,MAAM,oEAAoE,OAAO,UAAU,CAAC;AAEnG,QAAM,IAAI,sBACR,0CAA0C,OAAO,UAAU,IAC3D,+BACA,QACA,8FACD;;AAGH,KAAI,CAAC,gBAAgB,cACnB,QAAO,iCAAK;CAMd,IAAIC,WAAwC;AAC5C,KAAI;AACF,aAAW,MAAM,YAAY;GAC3B,SAAS,QAAQ;GACjB,GAAI,QAAQ,gBAAgB;IAAC,IAAI,OAAO;IAAe,MAAM,aAAa;IAAI,GAAG,EAAE;GACpF,CAAC;UACK,OAAO;AACd,iBAAO,KAAK,4DAA4D,OAAO,UAAU,CAAC;;CAI5F,MAAMC,iBAAkD,MAAMC,2BAAmB;CACjF,MAAMC,YAAoB,gBAAgB,aAAc,MAAMC,sBAAc,IAAK;CACjF,MAAMC,WAAoB,MAAMC,mBAAW,UAAU;CAErD,IAAIC,OAAa,EAAE;CACnB,IAAIC,cAA2B;EAC7B,kBAAkB,EAAE;EACpB,SAAS,EAAE;EACZ;CAED,MAAM,sBAAsB;EAC1B,GAAG,QAAQ;EACX,GAAG,QAAQ;EACX,MAAM;GACJ,GAAG,QAAQ,aAAa;GACxB,GAAG,QAAQ,aAAa;GACzB;EACF;AAED,KAAI,UAAU;EACZ,IAAIC,iBAAqC,QAAQ;AAEjD,MAAI,gBAAgB,gBAAgB;AAClC,oBAAiB,GAAG,QAAQ,QAAQ;AACpC,YAAS;IAAC,GAAG;IAAQ,SAAS;IAAe;aACpC,UACT,KAAI;AAEF,QADyB,MAAM,gBAAgB,kBAAkB,UAAU,IAC7D,aAAa;AACzB,qBAAiB,GAAG,QAAQ,QAAQ;AACpC,aAAS;KAAC,GAAG;KAAQ,SAAS;KAAe;;UAEzC;AAQV,MAFwC,qBAAqB,MAAM,qBAAqB,MAGtF,KAAI;GACF,MAAMC,eAIF,MAAMC,sBAAc,UAAU;GAClC,MAAMC,sBAIF,MAAMC,6BAAqB,UAAU;AAEzC,UAAO,aAAa,MAAM,QAAQ,EAAE;AACpC,iBAAc,oBAAoB,MAAM,eAAe;WAChD,OAAO;AACd,kBAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;MAG1G,KAAI;GAEF,MAAM,SAAS,6BADiB,MAAM,gBAAgB,kBAAkB,UAAU,CACvB;AAC3D,UAAO;AACP,iBAAc;IACZ,kBAAkB;IAClB,SAAS;IACV;WACM,OAAO;AACd,kBAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;;AAK9G,QACE,oBAACC;EACC,oBAAoB,QAAQ;EAC5B,eAAe,QAAQ;EACvB,SAAS,QAAQ;EACjB,aAAa;EACb,QAAQC;EACR,cAAcC;EACd,cAAcC;EACd,SAASC;EACT,QAAQC;EACR,qBAAqBC;EACrB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,aAAa;EACb,UAAU,QAAQ;EACZ;EACO;EACb,eAAeC;EACf,YAAY;EAEX;GACuB;;AAI9B,kCAAe"}
+{"version":3,"file":"ThunderIDProvider.js","names":["ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>>","getClient","config: Partial<ThunderIDNextConfig>","flowMeta: FlowMetadataResponse | null","sessionPayload: SessionTokenPayload | undefined","getSessionPayload","sessionId: string","getSessionId","signedIn: boolean","isSignedIn","user: User","userProfile: UserProfile","updatedBaseUrl: string | undefined","userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        }","getUserAction","userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        }","getUserProfileAction","ThunderIDClientProvider","signInAction","clearSession","refreshToken","signOutAction","signUpAction","handleOAuthCallbackAction","updateUserProfileAction"],"sources":["../../src/server/ThunderIDProvider.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n'use server';\n\nimport {\n  ThunderIDRuntimeError,\n  FlowMetadataResponse,\n  FlowMetaType,\n  IdToken,\n  User,\n  UserProfile,\n  getFlowMeta,\n  extractUserClaimsFromIdToken,\n  resolveResourceEndpoint,\n} from '@thunderid/node';\nimport {ThunderIDProviderProps} from '@thunderid/react';\nimport {FC, PropsWithChildren, ReactElement} from 'react';\nimport clearSession from './actions/clearSession';\nimport getSessionId from './actions/getSessionId';\nimport getSessionPayload from './actions/getSessionPayload';\nimport getUserAction from './actions/getUserAction';\nimport getUserProfileAction from './actions/getUserProfileAction';\nimport handleOAuthCallbackAction from './actions/handleOAuthCallbackAction';\nimport isSignedIn from './actions/isSignedIn';\nimport refreshToken from './actions/refreshToken';\nimport signInAction from './actions/signInAction';\nimport signOutAction from './actions/signOutAction';\nimport signUpAction from './actions/signUpAction';\nimport updateUserProfileAction from './actions/updateUserProfileAction';\nimport getClient from './getClient';\nimport ThunderIDClientProvider from '../client/contexts/ThunderID/ThunderIDProvider.js';\nimport {ThunderIDNextConfig} from '../models/config';\nimport logger from '../utils/logger';\nimport {SessionTokenPayload} from '../utils/SessionManager';\n\n/**\n * Props interface of {@link ThunderIDServerProvider}\n */\nexport type ThunderIDServerProviderProps = Partial<ThunderIDProviderProps> & {\n  clientSecret?: string;\n  /**\n   * Session cookie lifetime in seconds. Determines how long the session cookie\n   * remains valid in the browser after sign-in.\n   *\n   * Resolution order (first defined value wins):\n   *   1. This prop — set here when mounting the provider.\n   *   2. `THUNDERID_SESSION_COOKIE_EXPIRY_TIME` environment variable.\n   *   3. Built-in default of 86400 seconds (24 hours).\n   *\n   * @example\n   * // 8-hour session cookie\n   * <ThunderIDServerProvider sessionCookieExpiryTime={28800} ... />\n   */\n  sessionCookieExpiryTime?: number;\n};\n\n/**\n * Server-side provider component for ThunderID authentication.\n * Wraps the client-side provider and handles server-side authentication logic.\n * Uses the singleton ThunderIDNextClient instance for consistent authentication state.\n *\n * @param props - Props injected into the component.\n *\n * @example\n * ```tsx\n * <ThunderIDServerProvider config={thunderidConfig}>\n *   <YourApp />\n * </ThunderIDServerProvider>\n * ```\n *\n * @returns ThunderIDServerProvider component.\n */\nconst ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>> = async ({\n  children,\n  afterSignInUrl,\n  afterSignOutUrl,\n  ..._config\n}: PropsWithChildren<ThunderIDServerProviderProps>): Promise<ReactElement> => {\n  const thunderIDClient = getClient();\n  let config: Partial<ThunderIDNextConfig> = {};\n\n  try {\n    await thunderIDClient.initialize(_config as ThunderIDNextConfig);\n\n    logger.debug('[ThunderIDServerProvider] ThunderID client initialized successfully.');\n\n    config = await thunderIDClient.getConfiguration();\n  } catch (error) {\n    logger.error('[ThunderIDServerProvider] Failed to initialize ThunderID client:', error?.toString());\n\n    throw new ThunderIDRuntimeError(\n      `Failed to initialize ThunderID client: ${error?.toString()}`,\n      'next-ConfigurationError-001',\n      'next',\n      'An error occurred while initializing the ThunderID client. Please check your configuration.',\n    );\n  }\n\n  if (!thunderIDClient.isInitialized) {\n    return <></>;\n  }\n\n  // Fetch flow metadata (design config + i18n bundle) server-side so `FlowMetaProvider` can seed\n  // its state and skip a redundant client-side fetch — avoiding a flash of untranslated i18n keys\n  // (e.g. raw `signin.forms.credentials.title`) while embedded flow components first render.\n  let flowMeta: FlowMetadataResponse | null = null;\n  try {\n    flowMeta = await getFlowMeta({\n      baseUrl: config?.baseUrl,\n      url: resolveResourceEndpoint('flowMeta', config),\n      ...(config?.applicationId ? {id: config.applicationId, type: FlowMetaType.App} : {}),\n    });\n  } catch (error) {\n    logger.warn('[ThunderIDServerProvider] Failed to fetch flow metadata:', error?.toString());\n  }\n\n  // Try to get session information from JWT first, then fall back to legacy\n  const sessionPayload: SessionTokenPayload | undefined = await getSessionPayload();\n  const sessionId: string = sessionPayload?.sessionId || (await getSessionId()) || '';\n  const signedIn: boolean = await isSignedIn(sessionId);\n\n  let user: User = {};\n  let userProfile: UserProfile = {\n    flattenedProfile: {},\n    profile: {},\n  };\n\n  const resolvedPreferences = {\n    ...config?.preferences,\n    ..._config.preferences,\n    user: {\n      ...config?.preferences?.user,\n      ..._config.preferences?.user,\n    },\n  };\n\n  if (signedIn) {\n    let updatedBaseUrl: string | undefined = config?.baseUrl;\n\n    if (sessionPayload?.organizationId) {\n      updatedBaseUrl = `${config?.baseUrl}/o`;\n      config = {...config, baseUrl: updatedBaseUrl};\n    } else if (sessionId) {\n      try {\n        const idToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        if (idToken?.['user_org']) {\n          updatedBaseUrl = `${config?.baseUrl}/o`;\n          config = {...config, baseUrl: updatedBaseUrl};\n        }\n      } catch {\n        // Continue without organization info\n      }\n    }\n\n    // Check if user profile fetching is enabled (default: true)\n    const shouldFetchUserProfile: boolean = resolvedPreferences?.user?.fetchUserProfile !== false;\n\n    if (shouldFetchUserProfile) {\n      try {\n        const userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserAction(sessionId);\n        const userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        } = await getUserProfileAction(sessionId);\n\n        user = userResponse.data?.user || {};\n        userProfile = userProfileResponse.data?.userProfile ?? userProfile;\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to fetch user profile from /users/me:', error?.toString());\n      }\n    } else {\n      try {\n        const decodedIdToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        const claims = extractUserClaimsFromIdToken(decodedIdToken);\n        user = claims;\n        userProfile = {\n          flattenedProfile: claims,\n          profile: claims,\n        };\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to extract user claims from ID token:', error?.toString());\n      }\n    }\n  }\n\n  return (\n    <ThunderIDClientProvider\n      organizationHandle={config?.organizationHandle}\n      applicationId={config?.applicationId}\n      baseUrl={config?.baseUrl}\n      initialMeta={flowMeta}\n      signIn={signInAction}\n      clearSession={clearSession}\n      refreshToken={refreshToken}\n      signOut={signOutAction}\n      signUp={signUpAction}\n      handleOAuthCallback={handleOAuthCallbackAction}\n      signInUrl={config?.signInUrl}\n      signUpUrl={config?.signUpUrl}\n      preferences={resolvedPreferences}\n      clientId={config?.clientId}\n      user={user}\n      userProfile={userProfile}\n      updateProfile={updateUserProfileAction}\n      isSignedIn={signedIn}\n    >\n      {children}\n    </ThunderIDClientProvider>\n  );\n};\n\nexport default ThunderIDServerProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwFA,MAAMA,0BAA+E,OAAO,EAC1F,UACA,gBACA,gBACA,GAAG,cACyE;CAC5E,MAAM,kBAAkBC,mBAAW;CACnC,IAAIC,SAAuC,EAAE;AAE7C,KAAI;AACF,QAAM,gBAAgB,WAAW,QAA+B;AAEhE,iBAAO,MAAM,uEAAuE;AAEpF,WAAS,MAAM,gBAAgB,kBAAkB;UAC1C,OAAO;AACd,iBAAO,MAAM,oEAAoE,OAAO,UAAU,CAAC;AAEnG,QAAM,IAAI,sBACR,0CAA0C,OAAO,UAAU,IAC3D,+BACA,QACA,8FACD;;AAGH,KAAI,CAAC,gBAAgB,cACnB,QAAO,iCAAK;CAMd,IAAIC,WAAwC;AAC5C,KAAI;AACF,aAAW,MAAM,YAAY;GAC3B,SAAS,QAAQ;GACjB,KAAK,wBAAwB,YAAY,OAAO;GAChD,GAAI,QAAQ,gBAAgB;IAAC,IAAI,OAAO;IAAe,MAAM,aAAa;IAAI,GAAG,EAAE;GACpF,CAAC;UACK,OAAO;AACd,iBAAO,KAAK,4DAA4D,OAAO,UAAU,CAAC;;CAI5F,MAAMC,iBAAkD,MAAMC,2BAAmB;CACjF,MAAMC,YAAoB,gBAAgB,aAAc,MAAMC,sBAAc,IAAK;CACjF,MAAMC,WAAoB,MAAMC,mBAAW,UAAU;CAErD,IAAIC,OAAa,EAAE;CACnB,IAAIC,cAA2B;EAC7B,kBAAkB,EAAE;EACpB,SAAS,EAAE;EACZ;CAED,MAAM,sBAAsB;EAC1B,GAAG,QAAQ;EACX,GAAG,QAAQ;EACX,MAAM;GACJ,GAAG,QAAQ,aAAa;GACxB,GAAG,QAAQ,aAAa;GACzB;EACF;AAED,KAAI,UAAU;EACZ,IAAIC,iBAAqC,QAAQ;AAEjD,MAAI,gBAAgB,gBAAgB;AAClC,oBAAiB,GAAG,QAAQ,QAAQ;AACpC,YAAS;IAAC,GAAG;IAAQ,SAAS;IAAe;aACpC,UACT,KAAI;AAEF,QADyB,MAAM,gBAAgB,kBAAkB,UAAU,IAC7D,aAAa;AACzB,qBAAiB,GAAG,QAAQ,QAAQ;AACpC,aAAS;KAAC,GAAG;KAAQ,SAAS;KAAe;;UAEzC;AAQV,MAFwC,qBAAqB,MAAM,qBAAqB,MAGtF,KAAI;GACF,MAAMC,eAIF,MAAMC,sBAAc,UAAU;GAClC,MAAMC,sBAIF,MAAMC,6BAAqB,UAAU;AAEzC,UAAO,aAAa,MAAM,QAAQ,EAAE;AACpC,iBAAc,oBAAoB,MAAM,eAAe;WAChD,OAAO;AACd,kBAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;MAG1G,KAAI;GAEF,MAAM,SAAS,6BADiB,MAAM,gBAAgB,kBAAkB,UAAU,CACvB;AAC3D,UAAO;AACP,iBAAc;IACZ,kBAAkB;IAClB,SAAS;IACV;WACM,OAAO;AACd,kBAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;;AAK9G,QACE,oBAACC;EACC,oBAAoB,QAAQ;EAC5B,eAAe,QAAQ;EACvB,SAAS,QAAQ;EACjB,aAAa;EACb,QAAQC;EACR,cAAcC;EACd,cAAcC;EACd,SAASC;EACT,QAAQC;EACR,qBAAqBC;EACrB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,aAAa;EACb,UAAU,QAAQ;EACZ;EACO;EACb,eAAeC;EACf,YAAY;EAEX;GACuB;;AAI9B,kCAAe"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/nextjs",
-  "version": "0.10.1",
+  "version": "0.10.3",
   "description": "Next.js SDK for ThunderID",
   "keywords": [
     "thunderid",
@@ -40,8 +40,8 @@
     "@types/react": "19.2.14",
     "jose": "6.2.3",
     "tslib": "2.8.1",
-    "@thunderid/node": "^0.11.0",
-    "@thunderid/react": "^0.11.1"
+    "@thunderid/react": "^0.11.3",
+    "@thunderid/node": "^0.11.2"
   },
   "devDependencies": {
     "@thunderid/eslint-plugin": "0.0.2",