@thunderid/nuxt 0.1.0 → 0.2.1

package/README.md

@@ -1,6 +1,7 @@
 ![ThunderID Nuxt SDK](https://raw.githubusercontent.com/thunder-id/thunderid/refs/heads/main/docs/static/assets/images/readme/repo-banner-nuxt-sdk.png)
 
-Nuxt SDK for ThunderID. Provides authentication for Nuxt 3 applications with support for SSR, server routes, and composables.
+Nuxt SDK for ThunderID. Provides authentication for Nuxt 3 applications with support for SSR, server routes, and
+composables.
 
 ## Installation
 

package/dist/module.d.mts

@@ -19,7 +19,7 @@ declare module '@nuxt/schema' {
             clientId: string;
             platform?: ThunderIDNuxtConfig['platform'];
             preferences?: ThunderIDNuxtConfig['preferences'];
-            scopes: string[];
+            scopes: string | string[];
             signInUrl?: string;
             signUpUrl?: string;
         };

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "configKey": "thunderid",
   "name": "@thunderid/nuxt",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "builder": {
     "@nuxt/module-builder": "1.0.1",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -13,13 +13,13 @@ const module$1 = defineNuxtModule({
     const publicConfig = defu(
       // Layer 1: environment variables — only win when actually set
       {
-        afterSignInUrl: process.env["NUXT_PUBLIC_THUNDERID_AFTER_SIGN_IN_URL"],
-        afterSignOutUrl: process.env["NUXT_PUBLIC_THUNDERID_AFTER_SIGN_OUT_URL"],
-        applicationId: process.env["NUXT_PUBLIC_THUNDERID_APPLICATION_ID"],
-        baseUrl: process.env["NUXT_PUBLIC_THUNDERID_BASE_URL"],
-        clientId: process.env["NUXT_PUBLIC_THUNDERID_CLIENT_ID"],
-        signInUrl: process.env["NUXT_PUBLIC_THUNDERID_SIGN_IN_URL"],
-        signUpUrl: process.env["NUXT_PUBLIC_THUNDERID_SIGN_UP_URL"]
+        afterSignInUrl: process.env.NUXT_PUBLIC_THUNDERID_AFTER_SIGN_IN_URL,
+        afterSignOutUrl: process.env.NUXT_PUBLIC_THUNDERID_AFTER_SIGN_OUT_URL,
+        applicationId: process.env.NUXT_PUBLIC_THUNDERID_APPLICATION_ID,
+        baseUrl: process.env.NUXT_PUBLIC_THUNDERID_BASE_URL,
+        clientId: process.env.NUXT_PUBLIC_THUNDERID_CLIENT_ID,
+        signInUrl: process.env.NUXT_PUBLIC_THUNDERID_SIGN_IN_URL,
+        signUpUrl: process.env.NUXT_PUBLIC_THUNDERID_SIGN_UP_URL
       },
       // Layer 2: nuxt.config.ts options
       userOptions,
@@ -31,8 +31,8 @@ const module$1 = defineNuxtModule({
       }
     );
     const privateConfig = {
-      clientSecret: process.env["THUNDERID_CLIENT_SECRET"] || userOptions.clientSecret || "",
-      sessionSecret: process.env["THUNDERID_SESSION_SECRET"] || userOptions.sessionSecret || ""
+      clientSecret: process.env.THUNDERID_CLIENT_SECRET || userOptions.clientSecret || "",
+      sessionSecret: process.env.THUNDERID_SESSION_SECRET || userOptions.sessionSecret || ""
     };
     const { options } = nuxt;
     options.runtimeConfig.thunderid = defu(
@@ -56,14 +56,14 @@ const module$1 = defineNuxtModule({
       }
     );
     const publicThunderID = options.runtimeConfig.public.thunderid;
-    if (publicThunderID?.["clientSecret"]) {
-      delete publicThunderID["clientSecret"];
+    if (publicThunderID?.clientSecret) {
+      delete publicThunderID.clientSecret;
       console.error(
         `[${PACKAGE_NAME}] SECURITY: clientSecret found in public config. Removed. Use THUNDERID_CLIENT_SECRET env var.`
       );
     }
-    if (publicThunderID?.["sessionSecret"]) {
-      delete publicThunderID["sessionSecret"];
+    if (publicThunderID?.sessionSecret) {
+      delete publicThunderID.sessionSecret;
       console.error(
         `[${PACKAGE_NAME}] SECURITY: sessionSecret found in public config. Removed. Use THUNDERID_SESSION_SECRET env var.`
       );

package/dist/runtime/components/ThunderIDRoot.js

@@ -141,7 +141,7 @@ const ThunderIDRoot = defineComponent({
                               revalidateMyOrganizations: shouldFetchOrgs ? revalidateMyOrganizations : void 0
                             },
                             {
-                              default: () => slots["default"]?.()
+                              default: () => slots.default?.()
                             }
                           )
                         }

package/dist/runtime/components/actions/SignInButton.js

@@ -1,7 +1,7 @@
+import { navigateTo } from "#app";
 import { ThunderIDRuntimeError } from "@thunderid/browser";
 import { BaseSignInButton } from "@thunderid/vue";
 import { defineComponent, h, ref } from "vue";
-import { navigateTo } from "#app";
 import { useThunderID } from "#imports";
 const SignInButton = defineComponent({
   emits: ["click", "error"],
@@ -34,14 +34,14 @@ const SignInButton = defineComponent({
       }
     };
     return () => {
-      const slotContent = slots["default"] ? () => slots["default"]({ isLoading: isLoading.value }) : void 0;
+      const slotContent = slots.default ? () => slots.default({ isLoading: isLoading.value }) : void 0;
       return h(
         BaseSignInButton,
         {
-          class: attrs["class"],
+          class: attrs.class,
           isLoading: isLoading.value,
           onClick: handleSignIn,
-          style: attrs["style"]
+          style: attrs.style
         },
         slotContent
       );

package/dist/runtime/components/actions/SignOutButton.js

@@ -26,14 +26,14 @@ const SignOutButton = defineComponent({
       }
     };
     return () => {
-      const slotContent = slots["default"] ? () => slots["default"]({ isLoading: isLoading.value }) : void 0;
+      const slotContent = slots.default ? () => slots.default({ isLoading: isLoading.value }) : void 0;
       return h(
         BaseSignOutButton,
         {
-          class: attrs["class"],
+          class: attrs.class,
           isLoading: isLoading.value,
           onClick: handleSignOut,
-          style: attrs["style"]
+          style: attrs.style
         },
         slotContent
       );

package/dist/runtime/components/actions/SignUpButton.js

@@ -1,7 +1,7 @@
+import { navigateTo } from "#app";
 import { ThunderIDRuntimeError } from "@thunderid/browser";
 import { BaseSignUpButton } from "@thunderid/vue";
 import { defineComponent, h, ref } from "vue";
-import { navigateTo } from "#app";
 import { useThunderID } from "#imports";
 const SignUpButton = defineComponent({
   emits: ["click", "error"],
@@ -31,14 +31,14 @@ const SignUpButton = defineComponent({
       }
     };
     return () => {
-      const slotContent = slots["default"] ? () => slots["default"]({ isLoading: isLoading.value }) : void 0;
+      const slotContent = slots.default ? () => slots.default({ isLoading: isLoading.value }) : void 0;
       return h(
         BaseSignUpButton,
         {
-          class: attrs["class"],
+          class: attrs.class,
           isLoading: isLoading.value,
           onClick: handleSignUp,
-          style: attrs["style"]
+          style: attrs.style
         },
         slotContent
       );

package/dist/runtime/components/auth/Callback.js

@@ -1,5 +1,5 @@
-import { defineComponent, onMounted } from "vue";
 import { navigateTo } from "#app";
+import { defineComponent, onMounted } from "vue";
 const error = (msg, ...args) => {
   console.error(`[@thunderid/nuxt] Callback: ${msg}`, ...args);
 };

package/dist/runtime/components/auth/SignIn.js

@@ -1,6 +1,6 @@
+import { navigateTo } from "#app";
 import { BaseSignIn } from "@thunderid/vue";
 import { defineComponent, h } from "vue";
-import { navigateTo } from "#app";
 import { useThunderID } from "#imports";
 const SignIn = defineComponent({
   emits: ["error", "success"],

package/dist/runtime/components/auth/SignUp.js

@@ -1,10 +1,7 @@
-import {
-  EmbeddedFlowResponseType,
-  EmbeddedFlowType
-} from "@thunderid/browser";
+import { navigateTo } from "#app";
+import { EmbeddedFlowResponseType, EmbeddedFlowType } from "@thunderid/browser";
 import { BaseSignUp } from "@thunderid/vue";
 import { defineComponent, h } from "vue";
-import { navigateTo } from "#app";
 import { useThunderID } from "#imports";
 const SignUp = defineComponent({
   name: "SignUp",
@@ -24,7 +21,7 @@ const SignUp = defineComponent({
     variant: { default: "outlined", type: String }
   },
   setup(props, { slots }) {
-    const { signUp, isInitialized, applicationId } = useThunderID();
+    const { signUp, isInitialized, applicationId, scopes } = useThunderID();
     const handleInitialize = async (payload) => {
       let applicationIdFromUrl = null;
       if (import.meta.client) {
@@ -34,7 +31,8 @@ const SignUp = defineComponent({
       const effectiveApplicationId = applicationId || applicationIdFromUrl || void 0;
       const initialPayload = payload || {
         flowType: EmbeddedFlowType.Registration,
-        ...effectiveApplicationId && { applicationId: effectiveApplicationId }
+        ...effectiveApplicationId && { applicationId: effectiveApplicationId },
+        ...scopes && { scopes }
       };
       return await signUp(initialPayload);
     };
@@ -46,7 +44,7 @@ const SignUp = defineComponent({
         await navigateTo(oauthRedirectUrl, { external: true });
         return;
       }
-      if (props.shouldRedirectAfterSignUp && response?.type !== EmbeddedFlowResponseType.Redirection && props.afterSignUpUrl) {
+      if (props.shouldRedirectAfterSignUp && response?.type !== EmbeddedFlowResponseType.Redirection && props.afterSignUpUrl && !response?.assertion) {
         await navigateTo(props.afterSignUpUrl, { external: true });
       }
       if (props.shouldRedirectAfterSignUp && response?.type === EmbeddedFlowResponseType.Redirection && response?.data?.redirectURL && !response.data.redirectURL.includes("oauth") && !response.data.redirectURL.includes("auth")) {
@@ -72,7 +70,7 @@ const SignUp = defineComponent({
         size: props.size,
         variant: props.variant
       },
-      slots["default"] ? { default: (renderProps) => slots["default"](renderProps) } : void 0
+      slots.default ? { default: (renderProps) => slots.default(renderProps) } : void 0
     );
   }
 });

package/dist/runtime/components/control/Loading.js

@@ -6,10 +6,10 @@ const Loading = defineComponent({
     const { isLoading } = useThunderID();
     return () => {
       if (!isLoading.value) {
-        const fallback = slots["fallback"]?.();
+        const fallback = slots.fallback?.();
         return fallback ? h(Fragment, {}, fallback) : null;
       }
-      const content = slots["default"]?.();
+      const content = slots.default?.();
       return content ? h(Fragment, {}, content) : null;
     };
   }

package/dist/runtime/components/control/SignedIn.js

@@ -6,10 +6,10 @@ const SignedIn = defineComponent({
     const { isSignedIn } = useThunderID();
     return () => {
       if (!isSignedIn.value) {
-        const fallback = slots["fallback"]?.();
+        const fallback = slots.fallback?.();
         return fallback ? h(Fragment, {}, fallback) : null;
       }
-      const content = slots["default"]?.();
+      const content = slots.default?.();
       return content ? h(Fragment, {}, content) : null;
     };
   }

package/dist/runtime/components/control/SignedOut.js

@@ -6,10 +6,10 @@ const SignedOut = defineComponent({
     const { isSignedIn } = useThunderID();
     return () => {
       if (isSignedIn.value) {
-        const fallback = slots["fallback"]?.();
+        const fallback = slots.fallback?.();
         return fallback ? h(Fragment, {}, fallback) : null;
       }
-      const content = slots["default"]?.();
+      const content = slots.default?.();
       return content ? h(Fragment, {}, content) : null;
     };
   }

package/dist/runtime/components/organization/Organization.js

@@ -6,10 +6,10 @@ const Organization = defineComponent({
     const { currentOrganization } = useOrganization();
     return () => {
       if (!currentOrganization?.value) {
-        const fallback = slots["fallback"]?.();
+        const fallback = slots.fallback?.();
         return fallback ? h(Fragment, {}, fallback) : null;
       }
-      const content = slots["default"]?.({ organization: currentOrganization.value });
+      const content = slots.default?.({ organization: currentOrganization.value });
       return content ? h(Fragment, {}, content) : null;
     };
   }

package/dist/runtime/components/user/User.js

@@ -6,10 +6,10 @@ const User = defineComponent({
     const { user } = useThunderID();
     return () => {
       if (!user.value) {
-        const fallback = slots["fallback"]?.();
+        const fallback = slots.fallback?.();
         return fallback ? h(Fragment, {}, fallback) : null;
       }
-      const content = slots["default"]?.({ user: user.value });
+      const content = slots.default?.({ user: user.value });
       return content ? h(Fragment, {}, content) : null;
     };
   }

package/dist/runtime/composables/useThunderID.js

@@ -1,6 +1,6 @@
+import { navigateTo, useState, useRuntimeConfig } from "#app";
 import { EmbeddedSignInFlowStatus, getRedirectBasedSignUpUrl } from "@thunderid/browser";
 import { useThunderID as useThunderIDVue } from "@thunderid/vue";
-import { navigateTo, useState, useRuntimeConfig } from "#app";
 export function useThunderID() {
   const context = useThunderIDVue();
   const signIn = async (...args) => {
@@ -24,13 +24,13 @@ export function useThunderID() {
         }
         return {
           authData: {},
-          flowStatus: EmbeddedSignInFlowStatus.SuccessCompleted
+          flowStatus: EmbeddedSignInFlowStatus.Complete
         };
       }
       return res.data;
     }
     const options = arg0;
-    const returnTo = typeof options?.["returnTo"] === "string" ? options["returnTo"] : void 0;
+    const returnTo = typeof options?.returnTo === "string" ? options.returnTo : void 0;
     const url = returnTo ? `/api/auth/signin?returnTo=${encodeURIComponent(returnTo)}` : "/api/auth/signin";
     await navigateTo(url, { external: true });
     return void 0;
@@ -41,17 +41,6 @@ export function useThunderID() {
   };
   const signUp = async (...args) => {
     const payload = args[0];
-    if (payload && typeof payload === "object" && "flowType" in payload) {
-      const res = await $fetch("/api/auth/signup", {
-        body: { payload },
-        method: "POST"
-      });
-      if (res.data?.afterSignUpUrl) {
-        await navigateTo(res.data.afterSignUpUrl, { external: false });
-        return void 0;
-      }
-      return res.data;
-    }
     const cfg = useRuntimeConfig().public.thunderid ?? {};
     if (cfg.signUpUrl) {
       await navigateTo(cfg.signUpUrl, { external: true });

package/dist/runtime/middleware/defineThunderIDMiddleware.js

@@ -9,11 +9,11 @@ export function defineThunderIDMiddleware(options = {}) {
       return navigateTo(`${redirectTo}?returnTo=${returnTo}`, { external: true });
     }
     const user = authState.value.user;
-    if (requireOrganization && !user?.["organizationId"]) {
+    if (requireOrganization && !user?.organizationId) {
       return navigateTo(redirectTo, { external: true });
     }
     if (requireScopes.length > 0) {
-      const sessionScopes = String(user?.["scopes"] ?? "").split(" ");
+      const sessionScopes = String(user?.scopes ?? "").split(" ");
       const hasAllScopes = requireScopes.every((s) => sessionScopes.includes(s));
       if (!hasAllScopes) {
         return navigateTo(redirectTo, { external: true });

package/dist/runtime/plugins/thunderid.js

@@ -1,8 +1,8 @@
+import { defineNuxtPlugin, useState, useRequestEvent, useRuntimeConfig, navigateTo } from "#app";
 import { getRedirectBasedSignUpUrl } from "@thunderid/browser";
 import { ThunderIDPlugin, THUNDERID_KEY } from "@thunderid/vue";
 import { computed } from "vue";
 import ThunderIDRoot from "../components/ThunderIDRoot.js";
-import { defineNuxtPlugin, useState, useRequestEvent, useRuntimeConfig, navigateTo } from "#app";
 export default defineNuxtPlugin((nuxtApp) => {
   const publicConfig = useRuntimeConfig().public.thunderid;
   if (import.meta.client && import.meta.dev) {
@@ -46,7 +46,7 @@ export default defineNuxtPlugin((nuxtApp) => {
           user: ssrContext.session?.sub ? { sub: ssrContext.session.sub } : null
         };
       } else {
-        const legacyAuth = event?.context?.["__thunderidAuth"];
+        const legacyAuth = event?.context?.__thunderidAuth;
         authState.value = legacyAuth ?? { isLoading: false, isSignedIn: false, user: null };
       }
     }
@@ -60,7 +60,7 @@ export default defineNuxtPlugin((nuxtApp) => {
   const user = computed(() => authState.value.user ?? null);
   const organizationRef = computed(() => currentOrgState.value);
   const signIn = async (options) => {
-    const returnTo = typeof options?.["returnTo"] === "string" ? options["returnTo"] : void 0;
+    const returnTo = typeof options?.returnTo === "string" ? options.returnTo : void 0;
     const url = returnTo ? `/api/auth/signin?returnTo=${encodeURIComponent(returnTo)}` : "/api/auth/signin";
     await navigateTo(url, { external: true });
   };
@@ -112,6 +112,7 @@ export default defineNuxtPlugin((nuxtApp) => {
     organizationHandle: publicConfig.organizationHandle,
     platform: void 0,
     reInitialize: async () => false,
+    scopes: publicConfig.scopes,
     signIn,
     signInOptions: void 0,
     signInSilently: noop,

package/dist/runtime/server/ThunderIDNuxtClient.d.ts

@@ -15,7 +15,7 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { ThunderIDNodeClient, type IdToken, type Organization, type OrganizationDetails, type CreateOrganizationPayload, type Storage, type TokenExchangeRequestConfig, type TokenResponse, type User, type UserProfile, type UpdateMeProfileConfig, type AllOrganizationsApiResponse, type EmbeddedFlowExecuteRequestPayload, type EmbeddedFlowExecuteResponse, type ExtendedAuthorizeRequestUrlParams, type SignUpOptions, type GetBrandingPreferenceConfig, type BrandingPreference } from '@thunderid/node';
+import { ThunderIDNodeClient, type IdToken, type Organization, type OrganizationDetails, type CreateOrganizationPayload, type Storage, type TokenExchangeRequestConfig, type TokenResponse, type User, type UserProfile, type UpdateMeProfileConfig, type AllOrganizationsApiResponse, type ExtendedAuthorizeRequestUrlParams, type SignUpOptions, type GetBrandingPreferenceConfig, type BrandingPreference } from '@thunderid/node';
 import type { ThunderIDNuxtConfig, ThunderIDSessionPayload } from '../types.js';
 declare class ThunderIDNuxtClient extends ThunderIDNodeClient<ThunderIDNuxtConfig> {
     private static instance;
@@ -26,8 +26,7 @@ declare class ThunderIDNuxtClient extends ThunderIDNodeClient<ThunderIDNuxtConfi
     reInitialize(config: Partial<ThunderIDNuxtConfig>): Promise<boolean>;
     rehydrateSessionFromPayload(session: ThunderIDSessionPayload): Promise<void>;
     signIn(...args: any[]): Promise<any>;
-    signUp(options?: SignUpOptions): Promise<void>;
-    signUp(payload: EmbeddedFlowExecuteRequestPayload): Promise<EmbeddedFlowExecuteResponse>;
+    signUp(_options?: SignUpOptions): Promise<void>;
     getAuthorizeRequestUrl(customParams: ExtendedAuthorizeRequestUrlParams, userId?: string): Promise<string>;
     signOut(...args: any[]): Promise<string>;
     getUser(sessionId?: string): Promise<User>;

package/dist/runtime/server/ThunderIDNuxtClient.js

@@ -4,10 +4,7 @@ import {
   getMeOrganizations,
   getAllOrganizations,
   createOrganization,
-  getOrganization,
-  initializeEmbeddedSignInFlow,
-  executeEmbeddedSignInFlow,
-  executeEmbeddedSignUpFlow
+  getOrganization
 } from "@thunderid/node";
 class ThunderIDNuxtClient extends ThunderIDNodeClient {
   static instance;
@@ -66,26 +63,6 @@ class ThunderIDNuxtClient extends ThunderIDNodeClient {
   }
   signIn(...args) {
     const arg0 = args[0];
-    if (typeof arg0 === "object" && arg0 !== null && "flowId" in arg0) {
-      const sessionId = args[2];
-      if (arg0.flowId === "") {
-        return this.getSignInUrl(
-          { client_secret: "{{clientSecret}}", response_mode: "direct" },
-          sessionId
-        ).then((authorizeUrl) => {
-          const url = new URL(authorizeUrl);
-          return initializeEmbeddedSignInFlow({
-            payload: Object.fromEntries(url.searchParams.entries()),
-            url: `${url.origin}${url.pathname}`
-          });
-        });
-      }
-      const request = args[1] ?? {};
-      return executeEmbeddedSignInFlow({
-        payload: arg0,
-        url: request.url
-      });
-    }
     if (typeof arg0 === "object" && arg0 !== null && ("code" in arg0 || "state" in arg0)) {
       const payload = arg0;
       const code = typeof payload.code === "string" ? payload.code : void 0;
@@ -99,17 +76,8 @@ class ThunderIDNuxtClient extends ThunderIDNodeClient {
     }
     return super.signIn(args[0], args[1], args[2], args[3], args[4], args[5]);
   }
-  async signUp(payloadOrOptions) {
-    if (!payloadOrOptions || !("flowType" in payloadOrOptions)) {
-      return void 0;
-    }
-    const configData = this.getStorageManager().getConfigData();
-    const baseUrl = configData?.baseUrl;
-    const response = await executeEmbeddedSignUpFlow({
-      baseUrl,
-      payload: payloadOrOptions
-    });
-    return response;
+  async signUp(_options) {
+    return void 0;
   }
   async getAuthorizeRequestUrl(customParams, userId) {
     return this.getSignInUrl(customParams, userId);
@@ -161,7 +129,6 @@ class ThunderIDNuxtClient extends ThunderIDNodeClient {
       headers: { Authorization: `Bearer ${accessToken}` }
     });
   }
-  // eslint-disable-next-line class-methods-use-this
   async getBrandingPreference(config) {
     return getBrandingPreference(config);
   }

package/dist/runtime/server/plugins/thunderid-ssr.js

@@ -23,9 +23,9 @@ export default defineNitroPlugin((nitro) => {
         );
         return;
       }
-      const sessionSecret2 = process.env["THUNDERID_SESSION_SECRET"] || privateConfig?.sessionSecret;
+      const sessionSecret2 = process.env.THUNDERID_SESSION_SECRET || privateConfig?.sessionSecret;
       if (!sessionSecret2) {
-        if (process.env["NODE_ENV"] === "production") {
+        if (process.env.NODE_ENV === "production") {
           log.error(
             "THUNDERID_SESSION_SECRET is required in production. Set it to a secure random string of at least 32 characters. Refusing to initialize ThunderID client."
           );
@@ -58,7 +58,7 @@ export default defineNitroPlugin((nitro) => {
     const config = useRuntimeConfig(event);
     const publicConfig = config.public.thunderid;
     const prefs = publicConfig?.preferences;
-    const sessionSecret = process.env["THUNDERID_SESSION_SECRET"] || config.thunderid?.sessionSecret;
+    const sessionSecret = process.env.THUNDERID_SESSION_SECRET || config.thunderid?.sessionSecret;
     const session = await verifyAndRehydrateSession(
       event,
       sessionSecret
@@ -77,7 +77,7 @@ export default defineNitroPlugin((nitro) => {
         const idToken = await client.getDecodedIdToken(
           session.sessionId
         );
-        if (idToken?.["user_org"]) {
+        if (idToken?.user_org) {
           resolvedBaseUrl = `${baseUrl}/o`;
         }
       }
@@ -130,6 +130,6 @@ export default defineNitroPlugin((nitro) => {
       isSignedIn: true,
       user: ssrData.user
     };
-    eventContext["__thunderidAuth"] = authState;
+    eventContext.__thunderidAuth = authState;
   });
 });

package/dist/runtime/server/routes/auth/branding/branding.get.js

@@ -21,7 +21,7 @@ export default defineEventHandler(async (event) => {
         const idToken = await client.getDecodedIdToken(
           session.sessionId
         );
-        if (idToken?.["user_org"]) {
+        if (idToken?.user_org) {
           resolvedBaseUrl = `${baseUrl}/o`;
         }
       }

package/dist/runtime/server/routes/auth/session/callback.get.js

@@ -12,11 +12,11 @@ export default defineEventHandler(async (event) => {
   const sessionSecret = config.thunderid?.sessionSecret;
   const publicConfig = config.public.thunderid;
   const query = getQuery(event);
-  const code = query["code"];
-  const state = query["state"];
-  const sessionState = query["session_state"];
-  const error = query["error"];
-  const errorDescription = query["error_description"];
+  const code = query.code;
+  const state = query.state;
+  const sessionState = query.session_state;
+  const error = query.error;
+  const errorDescription = query.error_description;
   if (error) {
     throw createError({
       statusCode: 400,

package/dist/runtime/server/routes/auth/session/signin.get.js

@@ -8,7 +8,7 @@ export default defineEventHandler(async (event) => {
   const config = useRuntimeConfig();
   const sessionSecret = config.thunderid?.sessionSecret;
   const query = getQuery(event);
-  const returnTo = query["returnTo"];
+  const returnTo = query.returnTo;
   const safeReturnTo = returnTo && returnTo.startsWith("/") && !returnTo.startsWith("//") ? returnTo : void 0;
   const sessionId = generateSessionId();
   const tempToken = await createTempSessionToken(sessionId, sessionSecret, safeReturnTo);

package/dist/runtime/server/routes/auth/session/signin.post.d.ts

@@ -21,7 +21,7 @@
  * Handles embedded (app-native) sign-in flow steps.
  *
  * Request body:
- * - `payload` — the embedded flow step payload (`EmbeddedSignInFlowHandleRequestPayload`).
+ * - `payload` — the embedded flow step payload.
  *   When omitted or `{}`, the flow is initialised and the authorize URL is returned.
  * - `request` — optional per-step config (e.g. `{ url }` override).
  *

package/dist/runtime/server/routes/auth/session/signin.post.js

@@ -66,7 +66,7 @@ export default defineEventHandler(async (event) => {
       statusMessage: `Embedded sign-in step failed: ${err?.message ?? String(err)}`
     });
   }
-  if (response?.flowStatus === EmbeddedSignInFlowStatus.SuccessCompleted) {
+  if (response?.flowStatus === EmbeddedSignInFlowStatus.Complete) {
     const authData = response?.authData ?? {};
     const { code, state, session_state: sessionState } = authData;
     if (!code) {

package/dist/runtime/server/routes/auth/session/signup.post.js

@@ -1,4 +1,4 @@
-import { EmbeddedFlowStatus } from "@thunderid/node";
+import { EmbeddedSignUpFlowStatus } from "@thunderid/node";
 import { defineEventHandler, readBody, createError } from "h3";
 import ThunderIDNuxtClient from "../../../ThunderIDNuxtClient.js";
 import { useRuntimeConfig } from "#imports";
@@ -23,7 +23,7 @@ export default defineEventHandler(async (event) => {
       statusMessage: `Embedded sign-up step failed: ${err?.message ?? String(err)}`
     });
   }
-  if (hasFlowStatus(response) && response.flowStatus === EmbeddedFlowStatus.Complete) {
+  if (hasFlowStatus(response) && response.flowStatus === EmbeddedSignUpFlowStatus.Complete) {
     return { data: { afterSignUpUrl }, success: true };
   }
   return { data: response, success: true };

package/dist/runtime/server/utils/session.d.ts

@@ -61,13 +61,13 @@ export declare function getTempSessionCookieName(): string;
 /**
  * Session cookie options.
  */
-type SessionCookieOptions = {
+interface SessionCookieOptions {
     httpOnly: boolean;
     maxAge: number;
     path: string;
     sameSite: 'lax';
     secure: boolean;
-};
+}
 export declare function getSessionCookieOptions(): SessionCookieOptions;
 /**
  * Temp session cookie options (15 min TTL).

package/dist/runtime/server/utils/session.js

@@ -3,9 +3,9 @@ import { setCookie } from "h3";
 import { SignJWT, jwtVerify } from "jose";
 const DEFAULT_EXPIRY_SECONDS = 3600;
 function getSecret(sessionSecret) {
-  const secret = sessionSecret || process.env["THUNDERID_SESSION_SECRET"];
+  const secret = sessionSecret || process.env.THUNDERID_SESSION_SECRET;
   if (!secret) {
-    if (process.env["NODE_ENV"] === "production") {
+    if (process.env.NODE_ENV === "production") {
       throw new Error(
         "[thunderid] THUNDERID_SESSION_SECRET environment variable is required in production. Set it to a secure random string of at least 32 characters."
       );
@@ -37,7 +37,7 @@ export async function createTempSessionToken(sessionId, sessionSecret, returnTo)
     type: "temp"
   };
   if (returnTo) {
-    payload["returnTo"] = returnTo;
+    payload.returnTo = returnTo;
   }
   return new SignJWT(payload).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime("15m").sign(secret);
 }
@@ -49,12 +49,12 @@ export async function verifySessionToken(token, sessionSecret) {
 export async function verifyTempSessionToken(token, sessionSecret) {
   const secret = getSecret(sessionSecret);
   const { payload } = await jwtVerify(token, secret);
-  if (payload["type"] !== "temp") {
+  if (payload.type !== "temp") {
     throw new Error("Invalid token type: expected temp session");
   }
   return {
-    returnTo: payload["returnTo"],
-    sessionId: payload["sessionId"]
+    returnTo: payload.returnTo,
+    sessionId: payload.sessionId
   };
 }
 export function getSessionCookieName() {
@@ -69,7 +69,7 @@ export function getSessionCookieOptions() {
     maxAge: DEFAULT_EXPIRY_SECONDS,
     path: "/",
     sameSite: "lax",
-    secure: process.env["NODE_ENV"] === "production"
+    secure: process.env.NODE_ENV === "production"
   };
 }
 export function getTempSessionCookieOptions() {
@@ -78,7 +78,7 @@ export function getTempSessionCookieOptions() {
     maxAge: 15 * 60,
     path: "/",
     sameSite: "lax",
-    secure: process.env["NODE_ENV"] === "production"
+    secure: process.env.NODE_ENV === "production"
   };
 }
 export async function issueSessionCookie(event, sessionId, tokenResponse, sessionSecret) {
@@ -86,7 +86,7 @@ export async function issueSessionCookie(event, sessionId, tokenResponse, sessio
   const client = ThunderIDNuxtClient.getInstance();
   const idToken = await client.getDecodedIdToken(sessionId, tokenResponse.idToken);
   const userId = idToken.sub || sessionId;
-  const organizationId = idToken["user_org"] || idToken["organization_id"];
+  const organizationId = idToken.user_org || idToken.organization_id;
   const expiresInSeconds = parseInt(tokenResponse.expiresIn ?? "3600", 10);
   const accessTokenExpiresAt = Math.floor(Date.now() / 1e3) + (Number.isFinite(expiresInSeconds) ? expiresInSeconds : 3600);
   const sessionToken = await createSessionToken(

package/dist/runtime/types.d.ts

@@ -15,7 +15,7 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import type { BrandingPreference, I18nPreferences, Organization, Platform, TokenEndpointAuthMethod, User, UserProfile } from '@thunderid/node';
+import type { BrandingPreference, I18nPreferences, Organization, TokenEndpointAuthMethod, User, UserProfile } from '@thunderid/node';
 import type { JWTPayload } from 'jose';
 /**
  * Configuration for the ThunderID Nuxt module.
@@ -30,18 +30,12 @@ export interface ThunderIDNuxtConfig {
      * URL when present. Mirrors `applicationId` in the React/Next.js SDKs.
      */
     applicationId?: string;
-    /** Base URL of the ThunderID org tenant (e.g. https://api.asgardeo.io/t/your_org) */
+    /** Base URL of the ThunderID org tenant (e.g. https://localhost:8090) */
     baseUrl?: string;
     /** OAuth2 Client ID */
     clientId?: string;
     /** OAuth2 Client Secret (server-only, use THUNDERID_CLIENT_SECRET env var) */
     clientSecret?: string;
-    /**
-     * Identity platform variant. Set to `Platform.ThunderID` when connecting to
-     * a Thunder (ThunderIDV2) instance. Forwarded to the underlying Node client so
-     * platform-specific behaviours (e.g. issuer resolution) apply correctly.
-     */
-    platform?: keyof typeof Platform;
     /**
      * Feature-gating preferences that control which server-side data fetches
      * the Nitro plugin performs on every SSR request.
@@ -72,7 +66,7 @@ export interface ThunderIDNuxtConfig {
         };
     };
     /** OAuth2 scopes to request */
-    scopes?: string[];
+    scopes?: string | string[];
     /** Secret for signing session JWTs (use THUNDERID_SESSION_SECRET env var) */
     sessionSecret?: string;
     /**

package/dist/runtime/utils/log.js

@@ -8,7 +8,7 @@ export function createLogger(subsystem) {
   const tag = `[${PREFIX}:${subsystem}]`;
   return {
     debug: (...args) => {
-      if (process.env["THUNDERID_DEBUG"]) {
+      if (process.env.THUNDERID_DEBUG) {
         console.log(tag, ...args);
       }
     },

package/dist/runtime/utils/url-validation.js

@@ -1,5 +1,5 @@
-import { ThunderIDError } from "../errors/thunderid-error.js";
 import { ErrorCode } from "../errors/error-codes.js";
+import { ThunderIDError } from "../errors/thunderid-error.js";
 export function validateReturnUrl(url) {
   if (typeof url !== "string" || url.trim() === "") {
     throw new ThunderIDError("returnTo must be a non-empty string.", ErrorCode.OpenRedirectBlocked, { statusCode: 400 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/nuxt",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "Nuxt SDK for ThunderID",
   "keywords": [
     "thunderid",
@@ -8,7 +8,7 @@
     "nuxtjs",
     "ssr"
   ],
-  "homepage": "https://github.com/thunder-id/thunderid/tree/main/sdks/nuxt#readme",
+  "homepage": "https://github.com/thunder-id/javascript-sdks/tree/main/packages/nuxt#readme",
   "bugs": {
     "url": "https://github.com/thunder-id/thunderid/issues"
   },
@@ -57,30 +57,30 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/thunder-id/thunderid",
+    "url": "https://github.com/thunder-id/javascript-sdks",
     "directory": "packages/nuxt"
   },
   "dependencies": {
-    "@nuxt/kit": "3.21.6",
+    "@nuxt/kit": "3.21.7",
     "defu": "6.1.5",
     "jose": "5.2.0",
-    "@thunderid/node": "^0.1.0",
-    "@thunderid/browser": "^0.1.0",
-    "@thunderid/vue": "^0.1.0"
+    "@thunderid/browser": "^0.3.1",
+    "@thunderid/node": "^0.2.1",
+    "@thunderid/vue": "^0.3.3"
   },
   "devDependencies": {
     "@nuxt/devtools": "2.6.4",
     "@nuxt/module-builder": "1.0.1",
-    "@nuxt/schema": "3.21.6",
+    "@nuxt/schema": "3.21.7",
     "@nuxt/test-utils": "3.17.2",
+    "@thunderid/eslint-plugin": "0.0.2",
+    "@thunderid/prettier-config": "0.0.2",
     "@types/node": "24.7.2",
     "eslint": "9.39.4",
     "h3": "1.15.11",
-    "nuxt": "3.21.6",
+    "nuxt": "3.21.7",
     "typescript": "5.9.3",
-    "vitest": "4.1.3",
-    "@thunderid/eslint-plugin": "^0.0.0",
-    "@thunderid/prettier-config": "^0.0.0"
+    "vitest": "4.1.8"
   },
   "peerDependencies": {
     "nuxt": ">=3.10.0",
@@ -91,6 +91,9 @@
   },
   "scripts": {
     "build": "nuxt module-build prepare && nuxt module-build build",
+    "clean": "pnpm clean:dist && pnpm clean:node_modules",
+    "clean:dist": "rimraf dist .nuxt",
+    "clean:node_modules": "rimraf node_modules",
     "format:check": "prettier --check --cache .",
     "format:fix": "prettier --write --cache .",
     "lint": "nuxt prepare && eslint .",