@thunderid/react 0.1.0 → 0.3.0

package/dist/components/auth/Callback/Callback.d.ts

@@ -1,51 +1,13 @@
-/**
- * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
- *
- * WSO2 LLC. licenses this file to you under the Apache License,
- * Version 2.0 (the "License"); you may not use this file except
- * in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied. See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
 import { FC } from 'react';
+import { TokenCallbackProps } from './TokenCallback';
+import { OAuthCallbackProps } from './OAuthCallback';
 /**
- * Props for Callback component
+ * Props for the unified Callback component, combining properties for both Token and OAuth callbacks.
  */
-export interface CallbackProps {
-    /**
-     * Callback function called when an error occurs
-     */
-    onError?: (error: Error) => void;
-    /**
-     * Function to navigate to a different path.
-     * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).
-     * Provide this prop to enable framework-specific navigation (e.g., from React Router).
-     */
-    onNavigate?: (path: string) => void;
-}
+export type CallbackProps = OAuthCallbackProps & TokenCallbackProps;
 /**
- * BaseCallback is a headless component that handles OAuth callback parameter forwarding.
- * This component extracts OAuth parameters (code, state, error) from the URL and forwards them
- * to the original component that initiated the OAuth flow.
- *
- * Works standalone using the browser navigate utility (History API) for navigation by default.
- * Pass an onNavigate prop to enable framework-specific navigation (e.g., via React Router).
- *
- * Flow: Extract OAuth parameters from URL -> Parse state parameter -> Redirect to original path with parameters
- *
- * The original component (SignIn/AcceptInvite) is responsible for:
- * - Processing the OAuth code via the SDK
- * - Calling /flow/execute
- * - Handling the assertion and auth/callback POST
- * - Managing the authenticated session
+ * A unified Callback component that automatically routes to either OAuthCallback or TokenCallback
+ * based on the presence of URL parameters ('code' for OAuth, 'token' for token-based flows).
  */
 export declare const Callback: FC<CallbackProps>;
 export default Callback;

package/dist/components/auth/Callback/Callback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Callback.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Callback/Callback.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAC,EAAE,EAAoB,MAAM,OAAO,CAAC;AAE5C;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAkItC,CAAC;AAEF,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"Callback.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Callback/Callback.tsx"],"names":[],"mappings":"AAkBA,OAAO,EAAC,EAAE,EAAW,MAAM,OAAO,CAAC;AACnC,OAAO,EAAgB,kBAAkB,EAAC,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAgB,kBAAkB,EAAC,MAAM,iBAAiB,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,kBAAkB,GAAG,kBAAkB,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAqBtC,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/components/auth/Callback/Callback.js

@@ -0,0 +1,23 @@
+import { TokenCallback } from "./TokenCallback.js";
+import { OAuthCallback } from "./OAuthCallback.js";
+import { useState } from "react";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/components/auth/Callback/Callback.tsx
+/**
+* A unified Callback component that automatically routes to either OAuthCallback or TokenCallback
+* based on the presence of URL parameters ('code' for OAuth, 'token' for token-based flows).
+*/
+const Callback = (props) => {
+	const [flowType] = useState(() => {
+		if (typeof window === "undefined") return "oauth";
+		return new URLSearchParams(window.location.search).get("token") ? "token" : "oauth";
+	});
+	if (typeof window === "undefined") return null;
+	if (flowType === "token") return /* @__PURE__ */ jsx(TokenCallback, { ...props });
+	return /* @__PURE__ */ jsx(OAuthCallback, { ...props });
+};
+
+//#endregion
+export { Callback };
+//# sourceMappingURL=Callback.js.map

package/dist/components/auth/Callback/Callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Callback.js","names":["Callback: FC<CallbackProps>"],"sources":["../../../../src/components/auth/Callback/Callback.tsx"],"sourcesContent":["/*\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied.  See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {FC, useState} from 'react';\nimport {TokenCallback, TokenCallbackProps} from './TokenCallback';\nimport {OAuthCallback, OAuthCallbackProps} from './OAuthCallback';\n\n/**\n * Props for the unified Callback component, combining properties for both Token and OAuth callbacks.\n */\nexport type CallbackProps = OAuthCallbackProps & TokenCallbackProps;\n\n/**\n * A unified Callback component that automatically routes to either OAuthCallback or TokenCallback\n * based on the presence of URL parameters ('code' for OAuth, 'token' for token-based flows).\n */\nexport const Callback: FC<CallbackProps> = (props: CallbackProps) => {\n  // Use state to lock the flow type on initial mount.\n  // This prevents the component from swapping to OAuthCallback if TokenCallback\n  // removes the '?token=' query parameter from the URL using window.history.\n  const [flowType] = useState<'token' | 'oauth'>(() => {\n    if (typeof window === 'undefined') {\n      return 'oauth';\n    }\n    const urlParams = new URLSearchParams(window.location.search);\n    return urlParams.get('token') ? 'token' : 'oauth';\n  });\n\n  if (typeof window === 'undefined') {\n    return null;\n  }\n\n  if (flowType === 'token') {\n    return <TokenCallback {...props} />;\n  }\n\n  return <OAuthCallback {...props} />;\n};\n\nexport default Callback;\n"],"mappings":";;;;;;;;;;AA+BA,MAAaA,YAA+B,UAAyB;CAInE,MAAM,CAAC,YAAY,eAAkC;AACnD,MAAI,OAAO,WAAW,YACpB,QAAO;AAGT,SADkB,IAAI,gBAAgB,OAAO,SAAS,OAAO,CAC5C,IAAI,QAAQ,GAAG,UAAU;GAC1C;AAEF,KAAI,OAAO,WAAW,YACpB,QAAO;AAGT,KAAI,aAAa,QACf,QAAO,oBAAC,iBAAc,GAAI,QAAS;AAGrC,QAAO,oBAAC,iBAAc,GAAI,QAAS"}

package/dist/components/auth/Callback/OAuthCallback.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+import { FC } from 'react';
+/**
+ * Props for Callback component
+ */
+export interface OAuthCallbackProps {
+    /**
+     * Callback function called when an error occurs
+     */
+    onError?: (error: Error) => void;
+    /**
+     * Function to navigate to a different path.
+     * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).
+     * Provide this prop to enable framework-specific navigation (e.g., from React Router).
+     */
+    onNavigate?: (path: string) => void;
+}
+/**
+ * BaseCallback is a headless component that handles OAuth callback parameter forwarding.
+ * This component extracts OAuth parameters (code, state, error) from the URL and forwards them
+ * to the original component that initiated the OAuth flow.
+ *
+ * Works standalone using the browser navigate utility (History API) for navigation by default.
+ * Pass an onNavigate prop to enable framework-specific navigation (e.g., via React Router).
+ *
+ * Flow: Extract OAuth parameters from URL -> Parse state parameter -> Redirect to original path with parameters
+ *
+ * The original component (SignIn/AcceptInvite) is responsible for:
+ * - Processing the OAuth code via the SDK
+ * - Calling /flow/execute
+ * - Handling the assertion and auth/callback POST
+ * - Managing the authenticated session
+ */
+export declare const OAuthCallback: FC<OAuthCallbackProps>;
+export default OAuthCallback;
+//# sourceMappingURL=OAuthCallback.d.ts.map

package/dist/components/auth/Callback/OAuthCallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthCallback.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Callback/OAuthCallback.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAC,EAAE,EAAoB,MAAM,OAAO,CAAC;AAE5C;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,kBAAkB,CAkIhD,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/components/auth/Callback/OAuthCallback.js

@@ -0,0 +1,101 @@
+import { navigate } from "@thunderid/browser";
+import { useEffect, useRef } from "react";
+
+//#region src/components/auth/Callback/OAuthCallback.tsx
+/**
+* BaseCallback is a headless component that handles OAuth callback parameter forwarding.
+* This component extracts OAuth parameters (code, state, error) from the URL and forwards them
+* to the original component that initiated the OAuth flow.
+*
+* Works standalone using the browser navigate utility (History API) for navigation by default.
+* Pass an onNavigate prop to enable framework-specific navigation (e.g., via React Router).
+*
+* Flow: Extract OAuth parameters from URL -> Parse state parameter -> Redirect to original path with parameters
+*
+* The original component (SignIn/AcceptInvite) is responsible for:
+* - Processing the OAuth code via the SDK
+* - Calling /flow/execute
+* - Handling the assertion and auth/callback POST
+* - Managing the authenticated session
+*/
+const OAuthCallback = ({ onNavigate, onError }) => {
+	const processingRef = useRef(false);
+	const navigate$1 = (path) => {
+		if (onNavigate) onNavigate(path);
+		else navigate(path);
+	};
+	useEffect(() => {
+		const processOAuthCallback = () => {
+			if (processingRef.current) return;
+			processingRef.current = true;
+			let returnPath = "/";
+			try {
+				const urlParams = new URLSearchParams(window.location.search);
+				const code = urlParams.get("code");
+				const state = urlParams.get("state");
+				const nonce = urlParams.get("nonce");
+				const oauthError = urlParams.get("error");
+				const errorDescription = urlParams.get("error_description");
+				if (window.opener) {
+					window.opener.postMessage({
+						code,
+						error: oauthError,
+						errorDescription,
+						nonce,
+						state
+					}, window.location.origin);
+					return;
+				}
+				if (!state) throw new Error("Missing OAuth state parameter - possible security issue");
+				const storedData = sessionStorage.getItem(`thunderid_oauth_${state}`);
+				if (!storedData) {
+					if (oauthError) {
+						const errorMsg = errorDescription || oauthError || "OAuth authentication failed";
+						onError?.(new Error(errorMsg));
+						const params$1 = new URLSearchParams();
+						params$1.set("error", oauthError);
+						if (errorDescription) params$1.set("error_description", errorDescription);
+						navigate$1(`/?${params$1.toString()}`);
+						return;
+					}
+					throw new Error("Invalid OAuth state - possible CSRF attack");
+				}
+				const { path, timestamp } = JSON.parse(storedData);
+				returnPath = path || "/";
+				if (Date.now() - timestamp > 6e5) {
+					sessionStorage.removeItem(`thunderid_oauth_${state}`);
+					throw new Error("OAuth state expired - please try again");
+				}
+				sessionStorage.removeItem(`thunderid_oauth_${state}`);
+				if (oauthError) {
+					const errorMsg = errorDescription || oauthError || "OAuth authentication failed";
+					onError?.(new Error(errorMsg));
+					const params$1 = new URLSearchParams();
+					params$1.set("error", oauthError);
+					if (errorDescription) params$1.set("error_description", errorDescription);
+					navigate$1(`${returnPath}?${params$1.toString()}`);
+					return;
+				}
+				if (!code) throw new Error("Missing OAuth authorization code");
+				const params = new URLSearchParams();
+				params.set("code", code);
+				if (nonce) params.set("nonce", nonce);
+				navigate$1(`${returnPath}?${params.toString()}`);
+			} catch (err) {
+				const errorMessage = err instanceof Error ? err.message : "OAuth callback processing failed";
+				console.error("OAuth callback error:", err);
+				onError?.(err instanceof Error ? err : new Error(errorMessage));
+				const params = new URLSearchParams();
+				params.set("error", "callback_error");
+				params.set("error_description", errorMessage);
+				navigate$1(`${returnPath}?${params.toString()}`);
+			}
+		};
+		processOAuthCallback();
+	}, [onNavigate, onError]);
+	return null;
+};
+
+//#endregion
+export { OAuthCallback };
+//# sourceMappingURL=OAuthCallback.js.map

package/dist/components/auth/Callback/OAuthCallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthCallback.js","names":["OAuthCallback: FC<OAuthCallbackProps>","processingRef: any","navigate","urlParams: URLSearchParams","code: string | null","state: string | null","nonce: string | null","oauthError: string | null","errorDescription: string | null","storedData: string | null","errorMsg: string","params: URLSearchParams","params","errorMessage: string"],"sources":["../../../../src/components/auth/Callback/OAuthCallback.tsx"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {navigate as browserNavigate} from '@thunderid/browser';\nimport {FC, useEffect, useRef} from 'react';\n\n/**\n * Props for Callback component\n */\nexport interface OAuthCallbackProps {\n  /**\n   * Callback function called when an error occurs\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Function to navigate to a different path.\n   * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).\n   * Provide this prop to enable framework-specific navigation (e.g., from React Router).\n   */\n  onNavigate?: (path: string) => void;\n}\n\n/**\n * BaseCallback is a headless component that handles OAuth callback parameter forwarding.\n * This component extracts OAuth parameters (code, state, error) from the URL and forwards them\n * to the original component that initiated the OAuth flow.\n *\n * Works standalone using the browser navigate utility (History API) for navigation by default.\n * Pass an onNavigate prop to enable framework-specific navigation (e.g., via React Router).\n *\n * Flow: Extract OAuth parameters from URL -> Parse state parameter -> Redirect to original path with parameters\n *\n * The original component (SignIn/AcceptInvite) is responsible for:\n * - Processing the OAuth code via the SDK\n * - Calling /flow/execute\n * - Handling the assertion and auth/callback POST\n * - Managing the authenticated session\n */\nexport const OAuthCallback: FC<OAuthCallbackProps> = ({onNavigate, onError}: OAuthCallbackProps) => {\n  // Prevent double execution in React Strict Mode\n  const processingRef: any = useRef(false);\n\n  // Resolve navigation: use provided onNavigate (router-aware) or fall back to browser navigate utility\n  const navigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n    } else {\n      browserNavigate(path);\n    }\n  };\n\n  useEffect(() => {\n    const processOAuthCallback = (): void => {\n      // Guard against double execution\n      if (processingRef.current) {\n        return;\n      }\n      processingRef.current = true;\n\n      // Declare variables outside try block for use in catch\n      let returnPath = '/';\n\n      try {\n        // 1. Extract OAuth parameters from URL\n        const urlParams: URLSearchParams = new URLSearchParams(window.location.search);\n        const code: string | null = urlParams.get('code');\n        const state: string | null = urlParams.get('state');\n        const nonce: string | null = urlParams.get('nonce');\n        const oauthError: string | null = urlParams.get('error');\n        const errorDescription: string | null = urlParams.get('error_description');\n\n        // 1a. If running inside a popup (e.g. social signup), send OAuth params\n        //     back to the opener via postMessage. The parent window's handler will\n        //     close this popup after processing the code.\n        if (window.opener) {\n          window.opener.postMessage({code, error: oauthError, errorDescription, nonce, state}, window.location.origin);\n          return;\n        }\n\n        // 2. Validate and retrieve OAuth state from sessionStorage\n        if (!state) {\n          throw new Error('Missing OAuth state parameter - possible security issue');\n        }\n\n        const storedData: string | null = sessionStorage.getItem(`thunderid_oauth_${state}`);\n        if (!storedData) {\n          // If state not found, might be an error callback - try to handle gracefully\n          if (oauthError) {\n            const errorMsg: string = errorDescription || oauthError || 'OAuth authentication failed';\n            const err: Error = new Error(errorMsg);\n            onError?.(err);\n\n            const params: URLSearchParams = new URLSearchParams();\n            params.set('error', oauthError);\n            if (errorDescription) {\n              params.set('error_description', errorDescription);\n            }\n\n            navigate(`/?${params.toString()}`);\n            return;\n          }\n          throw new Error('Invalid OAuth state - possible CSRF attack');\n        }\n\n        const {path, timestamp} = JSON.parse(storedData);\n        returnPath = path || '/';\n\n        // 3. Validate state freshness\n        const MAX_STATE_AGE = 600000; // 10 minutes\n        if (Date.now() - timestamp > MAX_STATE_AGE) {\n          sessionStorage.removeItem(`thunderid_oauth_${state}`);\n          throw new Error('OAuth state expired - please try again');\n        }\n\n        // 4. Clean up state\n        sessionStorage.removeItem(`thunderid_oauth_${state}`);\n\n        // 5. Handle OAuth error response\n        if (oauthError) {\n          const errorMsg: string = errorDescription || oauthError || 'OAuth authentication failed';\n          const err: Error = new Error(errorMsg);\n          onError?.(err);\n\n          const params: URLSearchParams = new URLSearchParams();\n          params.set('error', oauthError);\n          if (errorDescription) {\n            params.set('error_description', errorDescription);\n          }\n\n          navigate(`${returnPath}?${params.toString()}`);\n          return;\n        }\n\n        // 6. Validate required parameters\n        if (!code) {\n          throw new Error('Missing OAuth authorization code');\n        }\n\n        // 7. Forward OAuth code to original component\n        // The component (SignIn/AcceptInvite) will retrieve flowId/authId from sessionStorage\n        const params: URLSearchParams = new URLSearchParams();\n        params.set('code', code);\n        if (nonce) {\n          params.set('nonce', nonce);\n        }\n\n        navigate(`${returnPath}?${params.toString()}`);\n      } catch (err) {\n        const errorMessage: string = err instanceof Error ? err.message : 'OAuth callback processing failed';\n        // eslint-disable-next-line no-console\n        console.error('OAuth callback error:', err);\n\n        onError?.(err instanceof Error ? err : new Error(errorMessage));\n\n        // Redirect back with OAuth error format\n        const params: URLSearchParams = new URLSearchParams();\n        params.set('error', 'callback_error');\n        params.set('error_description', errorMessage);\n\n        navigate(`${returnPath}?${params.toString()}`);\n      }\n    };\n\n    processOAuthCallback();\n  }, [onNavigate, onError]);\n\n  // Headless component - no UI, just processing logic\n  return null;\n};\n\nexport default OAuthCallback;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsDA,MAAaA,iBAAyC,EAAC,YAAY,cAAiC;CAElG,MAAMC,gBAAqB,OAAO,MAAM;CAGxC,MAAMC,cAAY,SAAuB;AACvC,MAAI,WACF,YAAW,KAAK;MAEhB,UAAgB,KAAK;;AAIzB,iBAAgB;EACd,MAAM,6BAAmC;AAEvC,OAAI,cAAc,QAChB;AAEF,iBAAc,UAAU;GAGxB,IAAI,aAAa;AAEjB,OAAI;IAEF,MAAMC,YAA6B,IAAI,gBAAgB,OAAO,SAAS,OAAO;IAC9E,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,QAAuB,UAAU,IAAI,QAAQ;IACnD,MAAMC,QAAuB,UAAU,IAAI,QAAQ;IACnD,MAAMC,aAA4B,UAAU,IAAI,QAAQ;IACxD,MAAMC,mBAAkC,UAAU,IAAI,oBAAoB;AAK1E,QAAI,OAAO,QAAQ;AACjB,YAAO,OAAO,YAAY;MAAC;MAAM,OAAO;MAAY;MAAkB;MAAO;MAAM,EAAE,OAAO,SAAS,OAAO;AAC5G;;AAIF,QAAI,CAAC,MACH,OAAM,IAAI,MAAM,0DAA0D;IAG5E,MAAMC,aAA4B,eAAe,QAAQ,mBAAmB,QAAQ;AACpF,QAAI,CAAC,YAAY;AAEf,SAAI,YAAY;MACd,MAAMC,WAAmB,oBAAoB,cAAc;AAE3D,gBADmB,IAAI,MAAM,SAAS,CACxB;MAEd,MAAMC,WAA0B,IAAI,iBAAiB;AACrD,eAAO,IAAI,SAAS,WAAW;AAC/B,UAAI,iBACF,UAAO,IAAI,qBAAqB,iBAAiB;AAGnD,iBAAS,KAAKC,SAAO,UAAU,GAAG;AAClC;;AAEF,WAAM,IAAI,MAAM,6CAA6C;;IAG/D,MAAM,EAAC,MAAM,cAAa,KAAK,MAAM,WAAW;AAChD,iBAAa,QAAQ;AAIrB,QAAI,KAAK,KAAK,GAAG,YADK,KACsB;AAC1C,oBAAe,WAAW,mBAAmB,QAAQ;AACrD,WAAM,IAAI,MAAM,yCAAyC;;AAI3D,mBAAe,WAAW,mBAAmB,QAAQ;AAGrD,QAAI,YAAY;KACd,MAAMF,WAAmB,oBAAoB,cAAc;AAE3D,eADmB,IAAI,MAAM,SAAS,CACxB;KAEd,MAAMC,WAA0B,IAAI,iBAAiB;AACrD,cAAO,IAAI,SAAS,WAAW;AAC/B,SAAI,iBACF,UAAO,IAAI,qBAAqB,iBAAiB;AAGnD,gBAAS,GAAG,WAAW,GAAGC,SAAO,UAAU,GAAG;AAC9C;;AAIF,QAAI,CAAC,KACH,OAAM,IAAI,MAAM,mCAAmC;IAKrD,MAAMD,SAA0B,IAAI,iBAAiB;AACrD,WAAO,IAAI,QAAQ,KAAK;AACxB,QAAI,MACF,QAAO,IAAI,SAAS,MAAM;AAG5B,eAAS,GAAG,WAAW,GAAG,OAAO,UAAU,GAAG;YACvC,KAAK;IACZ,MAAME,eAAuB,eAAe,QAAQ,IAAI,UAAU;AAElE,YAAQ,MAAM,yBAAyB,IAAI;AAE3C,cAAU,eAAe,QAAQ,MAAM,IAAI,MAAM,aAAa,CAAC;IAG/D,MAAMF,SAA0B,IAAI,iBAAiB;AACrD,WAAO,IAAI,SAAS,iBAAiB;AACrC,WAAO,IAAI,qBAAqB,aAAa;AAE7C,eAAS,GAAG,WAAW,GAAG,OAAO,UAAU,GAAG;;;AAIlD,wBAAsB;IACrB,CAAC,YAAY,QAAQ,CAAC;AAGzB,QAAO"}

package/dist/components/auth/Callback/TokenCallback.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+ * License for the specific language governing permissions and limitations
+ * under the License.
+ */
+import { FC } from 'react';
+export interface TokenCallbackProps {
+    /**
+     * Callback function called when an error occurs
+     */
+    onError?: (error: Error) => void;
+    /**
+     * Function to navigate to a different path.
+     * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).
+     * Provide this prop to enable framework-specific navigation (e.g., from React Router).
+     */
+    onNavigate?: (path: string) => void;
+    /**
+     * Callback function called when authentication is successful
+     */
+    onSuccess?: (authData: Record<string, any>) => void;
+    /**
+     * Custom path for the sign-in page. Defaults to '/signin'
+     */
+    signInPath?: string;
+    /**
+     * Custom path for the sign-up page. Defaults to '/signup'
+     */
+    signUpPath?: string;
+}
+export declare const TokenCallback: FC<TokenCallbackProps>;
+export default TokenCallback;
+//# sourceMappingURL=TokenCallback.d.ts.map

package/dist/components/auth/Callback/TokenCallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenCallback.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Callback/TokenCallback.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAC,EAAE,EAAoB,MAAM,OAAO,CAAC;AAG5C,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAEpC;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC;IAEpD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,kBAAkB,CAwLhD,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/components/auth/Callback/TokenCallback.js

@@ -0,0 +1,131 @@
+import useThunderID_default from "../../../contexts/ThunderID/useThunderID.js";
+import { EmbeddedSignInFlowStatusV2, EmbeddedSignInFlowTypeV2, navigate } from "@thunderid/browser";
+import { useEffect, useRef } from "react";
+
+//#region src/components/auth/Callback/TokenCallback.tsx
+const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin", signUpPath = "/signup" }) => {
+	const processingRef = useRef(false);
+	const { isInitialized, isLoading, signIn, signUp, getStorageManager } = useThunderID_default();
+	const navigate$1 = (path) => {
+		if (onNavigate) onNavigate(path);
+		else navigate(path);
+	};
+	const clearTokenFromUrl = () => {
+		if (!window?.location?.href) return;
+		const url = new URL(window.location.href);
+		url.searchParams.delete("token");
+		url.searchParams.delete("type");
+		window.history.replaceState({}, "", url.toString());
+	};
+	const initiateOAuthRedirect = (redirectURL, isRegistrationFlow) => {
+		const redirectUrlObj = new URL(redirectURL);
+		const state = redirectUrlObj.searchParams.get("state") || crypto.randomUUID();
+		sessionStorage.setItem(`thunderid_oauth_${state}`, JSON.stringify({
+			path: isRegistrationFlow ? signUpPath : signInPath,
+			timestamp: Date.now()
+		}));
+		navigate(redirectUrlObj.toString());
+	};
+	const buildSignInPath = (executionId, applicationId, isRegistrationFlow) => {
+		const params = new URLSearchParams();
+		if (executionId) params.set("executionId", executionId);
+		if (applicationId) params.set("applicationId", applicationId);
+		const basePath = isRegistrationFlow ? signUpPath : signInPath;
+		return params.toString() ? `${basePath}?${params.toString()}` : basePath;
+	};
+	const redirectWithError = (error, isRegistrationFlow) => {
+		sessionStorage.removeItem("thunderid_execution_id");
+		onError?.(error);
+		const params = new URLSearchParams();
+		params.set("error", "token_verification_failed");
+		params.set("error_description", error.message);
+		navigate$1(`${isRegistrationFlow ? signUpPath : signInPath}?${params.toString()}`);
+	};
+	useEffect(() => {
+		if (!isInitialized || isLoading) return;
+		const processTokenCallback = async () => {
+			if (processingRef.current) return;
+			processingRef.current = true;
+			const searchParams = new URLSearchParams(window.location.search);
+			const executionId = searchParams.get("id") || searchParams.get("executionId");
+			const token = searchParams.get("token");
+			const applicationId = searchParams.get("applicationId");
+			const isRegistrationFlow = searchParams.get("type") === "REGISTRATION";
+			clearTokenFromUrl();
+			try {
+				const storageManager = await getStorageManager();
+				if (!executionId || !token) {
+					redirectWithError(/* @__PURE__ */ new Error("Missing executionId or token in callback URL"), isRegistrationFlow);
+					return;
+				}
+				let response;
+				if (isRegistrationFlow) response = await signUp({
+					executionId,
+					inputs: { token }
+				});
+				else response = await signIn({
+					executionId,
+					inputs: { token }
+				});
+				if (response.type === EmbeddedSignInFlowTypeV2.Redirection) {
+					const redirectURL = response.data?.redirectURL || response?.redirectURL;
+					const nextExecutionId$1 = response.executionId || executionId;
+					sessionStorage.setItem("thunderid_execution_id", nextExecutionId$1);
+					if (redirectURL) {
+						initiateOAuthRedirect(redirectURL, isRegistrationFlow);
+						return;
+					}
+				}
+				if (response.flowStatus === EmbeddedSignInFlowStatusV2.Complete) {
+					const redirectUrl = response?.redirectUrl || response?.redirect_uri;
+					sessionStorage.removeItem("thunderid_execution_id");
+					await storageManager.removeHybridDataParameter("authId");
+					onSuccess?.({
+						redirectUrl,
+						...response.data || {}
+					});
+					if (redirectUrl) {
+						window.location.href = redirectUrl;
+						return;
+					}
+					navigate$1(isRegistrationFlow ? signUpPath : signInPath);
+					return;
+				}
+				if (response.flowStatus === EmbeddedSignInFlowStatusV2.Error) {
+					const failureReason = response?.failureReason;
+					const error = new Error(failureReason || "Token validation failed. Please try again.");
+					await storageManager.removeHybridDataParameter("authId");
+					redirectWithError(error, isRegistrationFlow);
+					return;
+				}
+				const nextExecutionId = response.executionId || executionId;
+				sessionStorage.setItem("thunderid_execution_id", nextExecutionId);
+				if (response.challengeToken) await storageManager.setTemporaryDataParameter("challengeToken", response.challengeToken);
+				navigate$1(buildSignInPath(nextExecutionId, applicationId, isRegistrationFlow));
+			} catch (err) {
+				const error = err instanceof Error ? err : /* @__PURE__ */ new Error("Token callback processing failed");
+				console.error("Token callback error:", err);
+				const storageManager = await getStorageManager();
+				if (storageManager) await storageManager.removeHybridDataParameter("authId");
+				redirectWithError(error, isRegistrationFlow);
+			}
+		};
+		processTokenCallback();
+	}, [
+		getStorageManager,
+		isInitialized,
+		isLoading,
+		onError,
+		onNavigate,
+		onSuccess,
+		signIn,
+		signUp,
+		signInPath,
+		signUpPath
+	]);
+	return null;
+};
+
+//#endregion
+export { TokenCallback };
+//# sourceMappingURL=TokenCallback.js.map

package/dist/components/auth/Callback/TokenCallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenCallback.js","names":["TokenCallback: FC<TokenCallbackProps>","processingRef: any","useThunderID","navigate","url: URL","redirectUrlObj: URL","state: string","params: URLSearchParams","searchParams: URLSearchParams","executionId: string | null","token: string | null","applicationId: string | null","isRegistrationFlow: boolean","storageManager: any","response: any","redirectURL: string | undefined","nextExecutionId: string","nextExecutionId","redirectUrl: string | undefined","failureReason: string | undefined","error: Error"],"sources":["../../../../src/components/auth/Callback/TokenCallback.tsx"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the\n * License for the specific language governing permissions and limitations\n * under the License.\n */\n\nimport {EmbeddedSignInFlowStatusV2, EmbeddedSignInFlowTypeV2, navigate as browserNavigate} from '@thunderid/browser';\nimport {FC, useEffect, useRef} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\nexport interface TokenCallbackProps {\n  /**\n   * Callback function called when an error occurs\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Function to navigate to a different path.\n   * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).\n   * Provide this prop to enable framework-specific navigation (e.g., from React Router).\n   */\n  onNavigate?: (path: string) => void;\n\n  /**\n   * Callback function called when authentication is successful\n   */\n  onSuccess?: (authData: Record<string, any>) => void;\n\n  /**\n   * Custom path for the sign-in page. Defaults to '/signin'\n   */\n  signInPath?: string;\n\n  /**\n   * Custom path for the sign-up page. Defaults to '/signup'\n   */\n  signUpPath?: string;\n}\n\nexport const TokenCallback: FC<TokenCallbackProps> = ({\n  onNavigate,\n  onError,\n  onSuccess,\n  signInPath = '/signin',\n  signUpPath = '/signup',\n}: TokenCallbackProps) => {\n  const processingRef: any = useRef(false);\n  const {isInitialized, isLoading, signIn, signUp, getStorageManager} = useThunderID();\n\n  const navigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n    } else {\n      browserNavigate(path);\n    }\n  };\n\n  const clearTokenFromUrl = (): void => {\n    if (!window?.location?.href) {\n      return;\n    }\n\n    const url: URL = new URL(window.location.href);\n    url.searchParams.delete('token');\n    url.searchParams.delete('type');\n    window.history.replaceState({}, '', url.toString());\n  };\n\n  const initiateOAuthRedirect = (redirectURL: string, isRegistrationFlow?: boolean): void => {\n    const redirectUrlObj: URL = new URL(redirectURL);\n    const state: string = redirectUrlObj.searchParams.get('state') || crypto.randomUUID();\n\n    sessionStorage.setItem(\n      `thunderid_oauth_${state}`,\n      JSON.stringify({\n        path: isRegistrationFlow ? signUpPath : signInPath,\n        timestamp: Date.now(),\n      }),\n    );\n\n    browserNavigate(redirectUrlObj.toString());\n  };\n\n  const buildSignInPath = (\n    executionId?: string | null,\n    applicationId?: string | null,\n    isRegistrationFlow?: boolean,\n  ): string => {\n    const params: URLSearchParams = new URLSearchParams();\n    if (executionId) {\n      params.set('executionId', executionId);\n    }\n    if (applicationId) {\n      params.set('applicationId', applicationId);\n    }\n\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    return params.toString() ? `${basePath}?${params.toString()}` : basePath;\n  };\n\n  const redirectWithError = (error: Error, isRegistrationFlow?: boolean): void => {\n    sessionStorage.removeItem('thunderid_execution_id');\n\n    onError?.(error);\n\n    const params: URLSearchParams = new URLSearchParams();\n    params.set('error', 'token_verification_failed');\n    params.set('error_description', error.message);\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    navigate(`${basePath}?${params.toString()}`);\n  };\n\n  useEffect(() => {\n    if (!isInitialized || isLoading) {\n      return;\n    }\n\n    const processTokenCallback = async (): Promise<void> => {\n      if (processingRef.current) {\n        return;\n      }\n      processingRef.current = true;\n\n      // Read URL params before clearing them so they're accessible in both try and catch.\n      const searchParams: URLSearchParams = new URLSearchParams(window.location.search);\n      const executionId: string | null = searchParams.get('id') || searchParams.get('executionId');\n      const token: string | null = searchParams.get('token');\n      const applicationId: string | null = searchParams.get('applicationId');\n      const isRegistrationFlow: boolean = searchParams.get('type') === 'REGISTRATION';\n\n      clearTokenFromUrl();\n\n      try {\n        const storageManager: any = await getStorageManager();\n\n        if (!executionId || !token) {\n          const error: Error = new Error('Missing executionId or token in callback URL');\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        let response: any;\n\n        if (isRegistrationFlow) {\n          response = await signUp({executionId, inputs: {token}});\n        } else {\n          response = await signIn({executionId, inputs: {token}});\n        }\n\n        if (response.type === EmbeddedSignInFlowTypeV2.Redirection) {\n          const redirectURL: string | undefined = (response.data as any)?.redirectURL || (response as any)?.redirectURL;\n          const nextExecutionId: string = response.executionId || executionId;\n          sessionStorage.setItem('thunderid_execution_id', nextExecutionId);\n\n          if (redirectURL) {\n            initiateOAuthRedirect(redirectURL, isRegistrationFlow);\n            return;\n          }\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatusV2.Complete) {\n          const redirectUrl: string | undefined = (response as any)?.redirectUrl || (response as any)?.redirect_uri;\n\n          sessionStorage.removeItem('thunderid_execution_id');\n          await storageManager.removeHybridDataParameter('authId');\n\n          onSuccess?.({\n            redirectUrl,\n            ...((response.data as Record<string, any>) || {}),\n          });\n\n          if (redirectUrl) {\n            window.location.href = redirectUrl;\n            return;\n          }\n\n          navigate(isRegistrationFlow ? signUpPath : signInPath);\n          return;\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatusV2.Error) {\n          const failureReason: string | undefined = (response as any)?.failureReason;\n          const error: Error = new Error(failureReason || 'Token validation failed. Please try again.');\n          await storageManager.removeHybridDataParameter('authId');\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        const nextExecutionId: string = response.executionId || executionId;\n        sessionStorage.setItem('thunderid_execution_id', nextExecutionId);\n\n        if (response.challengeToken) {\n          await storageManager.setTemporaryDataParameter('challengeToken', response.challengeToken);\n        }\n\n        navigate(buildSignInPath(nextExecutionId, applicationId, isRegistrationFlow));\n      } catch (err) {\n        const error: Error = err instanceof Error ? err : new Error('Token callback processing failed');\n        // eslint-disable-next-line no-console\n        console.error('Token callback error:', err);\n        const storageManager: any = await getStorageManager();\n        if (storageManager) {\n          await storageManager.removeHybridDataParameter('authId');\n        }\n        redirectWithError(error, isRegistrationFlow);\n      }\n    };\n\n    processTokenCallback();\n  }, [\n    getStorageManager,\n    isInitialized,\n    isLoading,\n    onError,\n    onNavigate,\n    onSuccess,\n    signIn,\n    signUp,\n    signInPath,\n    signUpPath,\n  ]);\n\n  return null;\n};\n\nexport default TokenCallback;\n"],"mappings":";;;;;AAkDA,MAAaA,iBAAyC,EACpD,YACA,SACA,WACA,aAAa,WACb,aAAa,gBACW;CACxB,MAAMC,gBAAqB,OAAO,MAAM;CACxC,MAAM,EAAC,eAAe,WAAW,QAAQ,QAAQ,sBAAqBC,sBAAc;CAEpF,MAAMC,cAAY,SAAuB;AACvC,MAAI,WACF,YAAW,KAAK;MAEhB,UAAgB,KAAK;;CAIzB,MAAM,0BAAgC;AACpC,MAAI,CAAC,QAAQ,UAAU,KACrB;EAGF,MAAMC,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aAAa,OAAO,OAAO;AAC/B,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;CAGrD,MAAM,yBAAyB,aAAqB,uBAAuC;EACzF,MAAMC,iBAAsB,IAAI,IAAI,YAAY;EAChD,MAAMC,QAAgB,eAAe,aAAa,IAAI,QAAQ,IAAI,OAAO,YAAY;AAErF,iBAAe,QACb,mBAAmB,SACnB,KAAK,UAAU;GACb,MAAM,qBAAqB,aAAa;GACxC,WAAW,KAAK,KAAK;GACtB,CAAC,CACH;AAED,WAAgB,eAAe,UAAU,CAAC;;CAG5C,MAAM,mBACJ,aACA,eACA,uBACW;EACX,MAAMC,SAA0B,IAAI,iBAAiB;AACrD,MAAI,YACF,QAAO,IAAI,eAAe,YAAY;AAExC,MAAI,cACF,QAAO,IAAI,iBAAiB,cAAc;EAG5C,MAAM,WAAW,qBAAqB,aAAa;AACnD,SAAO,OAAO,UAAU,GAAG,GAAG,SAAS,GAAG,OAAO,UAAU,KAAK;;CAGlE,MAAM,qBAAqB,OAAc,uBAAuC;AAC9E,iBAAe,WAAW,yBAAyB;AAEnD,YAAU,MAAM;EAEhB,MAAMA,SAA0B,IAAI,iBAAiB;AACrD,SAAO,IAAI,SAAS,4BAA4B;AAChD,SAAO,IAAI,qBAAqB,MAAM,QAAQ;AAE9C,aAAS,GADQ,qBAAqB,aAAa,WAC9B,GAAG,OAAO,UAAU,GAAG;;AAG9C,iBAAgB;AACd,MAAI,CAAC,iBAAiB,UACpB;EAGF,MAAM,uBAAuB,YAA2B;AACtD,OAAI,cAAc,QAChB;AAEF,iBAAc,UAAU;GAGxB,MAAMC,eAAgC,IAAI,gBAAgB,OAAO,SAAS,OAAO;GACjF,MAAMC,cAA6B,aAAa,IAAI,KAAK,IAAI,aAAa,IAAI,cAAc;GAC5F,MAAMC,QAAuB,aAAa,IAAI,QAAQ;GACtD,MAAMC,gBAA+B,aAAa,IAAI,gBAAgB;GACtE,MAAMC,qBAA8B,aAAa,IAAI,OAAO,KAAK;AAEjE,sBAAmB;AAEnB,OAAI;IACF,MAAMC,iBAAsB,MAAM,mBAAmB;AAErD,QAAI,CAAC,eAAe,CAAC,OAAO;AAE1B,uCADqB,IAAI,MAAM,+CAA+C,EACrD,mBAAmB;AAC5C;;IAGF,IAAIC;AAEJ,QAAI,mBACF,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;QAEvD,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;AAGzD,QAAI,SAAS,SAAS,yBAAyB,aAAa;KAC1D,MAAMC,cAAmC,SAAS,MAAc,eAAgB,UAAkB;KAClG,MAAMC,oBAA0B,SAAS,eAAe;AACxD,oBAAe,QAAQ,0BAA0BC,kBAAgB;AAEjE,SAAI,aAAa;AACf,4BAAsB,aAAa,mBAAmB;AACtD;;;AAIJ,QAAI,SAAS,eAAe,2BAA2B,UAAU;KAC/D,MAAMC,cAAmC,UAAkB,eAAgB,UAAkB;AAE7F,oBAAe,WAAW,yBAAyB;AACnD,WAAM,eAAe,0BAA0B,SAAS;AAExD,iBAAY;MACV;MACA,GAAK,SAAS,QAAgC,EAAE;MACjD,CAAC;AAEF,SAAI,aAAa;AACf,aAAO,SAAS,OAAO;AACvB;;AAGF,gBAAS,qBAAqB,aAAa,WAAW;AACtD;;AAGF,QAAI,SAAS,eAAe,2BAA2B,OAAO;KAC5D,MAAMC,gBAAqC,UAAkB;KAC7D,MAAMC,QAAe,IAAI,MAAM,iBAAiB,6CAA6C;AAC7F,WAAM,eAAe,0BAA0B,SAAS;AACxD,uBAAkB,OAAO,mBAAmB;AAC5C;;IAGF,MAAMJ,kBAA0B,SAAS,eAAe;AACxD,mBAAe,QAAQ,0BAA0B,gBAAgB;AAEjE,QAAI,SAAS,eACX,OAAM,eAAe,0BAA0B,kBAAkB,SAAS,eAAe;AAG3F,eAAS,gBAAgB,iBAAiB,eAAe,mBAAmB,CAAC;YACtE,KAAK;IACZ,MAAMI,QAAe,eAAe,QAAQ,sBAAM,IAAI,MAAM,mCAAmC;AAE/F,YAAQ,MAAM,yBAAyB,IAAI;IAC3C,MAAMP,iBAAsB,MAAM,mBAAmB;AACrD,QAAI,eACF,OAAM,eAAe,0BAA0B,SAAS;AAE1D,sBAAkB,OAAO,mBAAmB;;;AAIhD,wBAAsB;IACrB;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,QAAO"}

package/dist/components/control/Loading.js

@@ -0,0 +1,33 @@
+import useThunderID_default from "../../contexts/ThunderID/useThunderID.js";
+import { Fragment, jsx } from "react/jsx-runtime";
+
+//#region src/components/control/Loading.tsx
+/**
+* A component that only renders its children when the ThunderID is loading.
+*
+* @remarks This component is only supported in browser based React applications (CSR).
+*
+* @example
+* ```tsx
+* import { Loading } from '@thunderid/auth-react';
+*
+* const App = () => {
+*   return (
+*     <Loading fallback={<p>Finished Loading...</p>}>
+*       <p>Loading...</p>
+*     </Loading>
+*   );
+* }
+* ```
+*/
+const Loading = ({ children, fallback = null }) => {
+	const { isLoading } = useThunderID_default();
+	if (!isLoading) return /* @__PURE__ */ jsx(Fragment, { children: fallback });
+	return /* @__PURE__ */ jsx(Fragment, { children });
+};
+Loading.displayName = "Loading";
+var Loading_default = Loading;
+
+//#endregion
+export { Loading_default as default };
+//# sourceMappingURL=Loading.js.map

package/dist/components/control/Loading.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Loading.js","names":["Loading: FC<PropsWithChildren<LoadingProps>>","useThunderID"],"sources":["../../../src/components/control/Loading.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {FC, PropsWithChildren, ReactNode} from 'react';\nimport useThunderID from '../../contexts/ThunderID/useThunderID';\n\n/**\n * Props for the Loading component.\n */\nexport interface LoadingProps {\n  /**\n   * Content to show when the user is not signed in.\n   */\n  fallback?: ReactNode;\n}\n\n/**\n * A component that only renders its children when the ThunderID is loading.\n *\n * @remarks This component is only supported in browser based React applications (CSR).\n *\n * @example\n * ```tsx\n * import { Loading } from '@thunderid/auth-react';\n *\n * const App = () => {\n *   return (\n *     <Loading fallback={<p>Finished Loading...</p>}>\n *       <p>Loading...</p>\n *     </Loading>\n *   );\n * }\n * ```\n */\nconst Loading: FC<PropsWithChildren<LoadingProps>> = ({children, fallback = null}: PropsWithChildren<LoadingProps>) => {\n  const {isLoading} = useThunderID();\n\n  if (!isLoading) {\n    return <>{fallback}</>;\n  }\n\n  return <>{children}</>;\n};\n\nLoading.displayName = 'Loading';\n\nexport default Loading;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAiDA,MAAMA,WAAgD,EAAC,UAAU,WAAW,WAA2C;CACrH,MAAM,EAAC,cAAaC,sBAAc;AAElC,KAAI,CAAC,UACH,QAAO,0CAAG,WAAY;AAGxB,QAAO,gCAAG,WAAY;;AAGxB,QAAQ,cAAc;AAEtB,sBAAe"}

package/dist/components/control/OrganizationContext/OrganizationContext.js

@@ -0,0 +1,32 @@
+import useThunderID_default from "../../../contexts/ThunderID/useThunderID.js";
+import ThunderIDProvider_default from "../../../contexts/ThunderID/ThunderIDProvider.js";
+import OrganizationContextController_default from "./OrganizationContextController.js";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/components/control/OrganizationContext/OrganizationContext.tsx
+const OrganizationContext = ({ instanceId, baseUrl, clientId, afterSignInUrl, afterSignOutUrl, targetOrganizationId, sourceInstanceId, scopes, children,...rest }) => {
+	const { isSignedIn: isSourceSignedIn, instanceId: sourceInstanceIdFromContext, baseUrl: sourceBaseUrl, clientId: sourceClientId } = useThunderID_default();
+	return /* @__PURE__ */ jsx(ThunderIDProvider_default, {
+		instanceId,
+		baseUrl: baseUrl || sourceBaseUrl,
+		clientId: clientId || sourceClientId,
+		afterSignInUrl,
+		afterSignOutUrl,
+		scopes,
+		organizationChain: {
+			sourceInstanceId: sourceInstanceId || sourceInstanceIdFromContext,
+			targetOrganizationId
+		},
+		...rest,
+		children: /* @__PURE__ */ jsx(OrganizationContextController_default, {
+			targetOrganizationId,
+			isSourceSignedIn,
+			children
+		})
+	});
+};
+var OrganizationContext_default = OrganizationContext;
+
+//#endregion
+export { OrganizationContext_default as default };
+//# sourceMappingURL=OrganizationContext.js.map

package/dist/components/control/OrganizationContext/OrganizationContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationContext.js","names":["OrganizationContext: FC<PropsWithChildren<OrganizationContextProps>>","useThunderID","ThunderIDProvider","OrganizationContextController"],"sources":["../../../../src/components/control/OrganizationContext/OrganizationContext.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {FC, PropsWithChildren} from 'react';\nimport OrganizationContextController from './OrganizationContextController';\nimport ThunderIDProvider, {ThunderIDProviderProps} from '../../../contexts/ThunderID/ThunderIDProvider';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\nexport interface OrganizationContextProps extends Omit<ThunderIDProviderProps, 'organizationChain' | 'baseUrl'> {\n  /**\n   * Optional base URL for the organization context. If not provided, it will default to the source provider's base URL.\n   */\n  baseUrl?: string;\n  /**\n   * Instance ID for this organization context. Must be unique across the app if multiple contexts are used.\n   */\n  instanceId: number;\n  /**\n   * Optional source instance ID. If not provided, immediate parent provider is used as source.\n   */\n  sourceInstanceId?: number;\n  /**\n   * ID of the organization to authenticate with\n   */\n  targetOrganizationId: string;\n}\n\nconst OrganizationContext: FC<PropsWithChildren<OrganizationContextProps>> = ({\n  instanceId,\n  baseUrl,\n  clientId,\n  afterSignInUrl,\n  afterSignOutUrl,\n  targetOrganizationId,\n  sourceInstanceId,\n  scopes,\n  children,\n  ...rest\n}: PropsWithChildren<OrganizationContextProps>) => {\n  // Get the source provider's signed-in status\n  const {\n    isSignedIn: isSourceSignedIn,\n    instanceId: sourceInstanceIdFromContext,\n    baseUrl: sourceBaseUrl,\n    clientId: sourceClientId,\n  } = useThunderID();\n\n  return (\n    <ThunderIDProvider\n      instanceId={instanceId}\n      baseUrl={baseUrl || sourceBaseUrl}\n      clientId={clientId || sourceClientId}\n      afterSignInUrl={afterSignInUrl}\n      afterSignOutUrl={afterSignOutUrl}\n      scopes={scopes}\n      organizationChain={{\n        sourceInstanceId: sourceInstanceId || sourceInstanceIdFromContext,\n        targetOrganizationId,\n      }}\n      {...rest}\n    >\n      <OrganizationContextController targetOrganizationId={targetOrganizationId} isSourceSignedIn={isSourceSignedIn}>\n        {children}\n      </OrganizationContextController>\n    </ThunderIDProvider>\n  );\n};\n\nexport default OrganizationContext;\n"],"mappings":";;;;;;AA0CA,MAAMA,uBAAwE,EAC5E,YACA,SACA,UACA,gBACA,iBACA,sBACA,kBACA,QACA,SACA,GAAG,WAC8C;CAEjD,MAAM,EACJ,YAAY,kBACZ,YAAY,6BACZ,SAAS,eACT,UAAU,mBACRC,sBAAc;AAElB,QACE,oBAACC;EACa;EACZ,SAAS,WAAW;EACpB,UAAU,YAAY;EACN;EACC;EACT;EACR,mBAAmB;GACjB,kBAAkB,oBAAoB;GACtC;GACD;EACD,GAAI;YAEJ,oBAACC;GAAoD;GAAwC;GAC1F;IAC6B;GACd;;AAIxB,kCAAe"}

package/dist/components/control/OrganizationContext/OrganizationContextController.js

@@ -0,0 +1,55 @@
+import useThunderID_default from "../../../contexts/ThunderID/useThunderID.js";
+import { useEffect, useRef } from "react";
+import { Fragment, jsx } from "react/jsx-runtime";
+
+//#region src/components/control/OrganizationContext/OrganizationContextController.tsx
+const OrganizationContextController = ({ targetOrganizationId, isSourceSignedIn, children }) => {
+	const { isInitialized, isSignedIn, switchOrganization, isLoading } = useThunderID_default();
+	const hasAuthenticatedRef = useRef(false);
+	const isAuthenticatingRef = useRef(false);
+	/**
+	* Handle the organization switch when:
+	* - Current instance is initialized and NOT signed in
+	* - Source provider IS signed in
+	* Uses the `switchOrganization` function from the ThunderID context.
+	*/
+	useEffect(() => {
+		const performOrganizationSwitch = async () => {
+			if (hasAuthenticatedRef.current || isAuthenticatingRef.current) return;
+			if (!isInitialized || isLoading) return;
+			if (isSignedIn) {
+				hasAuthenticatedRef.current = true;
+				return;
+			}
+			if (!isSourceSignedIn) return;
+			try {
+				isAuthenticatingRef.current = true;
+				hasAuthenticatedRef.current = true;
+				await switchOrganization({
+					id: targetOrganizationId,
+					name: "",
+					orgHandle: ""
+				});
+			} catch (error) {
+				console.error("Linked organization authentication failed:", error);
+				hasAuthenticatedRef.current = false;
+			} finally {
+				isAuthenticatingRef.current = false;
+			}
+		};
+		performOrganizationSwitch();
+	}, [
+		isInitialized,
+		isSignedIn,
+		isLoading,
+		isSourceSignedIn,
+		targetOrganizationId,
+		switchOrganization
+	]);
+	return /* @__PURE__ */ jsx(Fragment, { children });
+};
+var OrganizationContextController_default = OrganizationContextController;
+
+//#endregion
+export { OrganizationContextController_default as default };
+//# sourceMappingURL=OrganizationContextController.js.map

package/dist/components/control/OrganizationContext/OrganizationContextController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationContextController.js","names":["OrganizationContextController: FC<OrganizationContextControllerProps>","useThunderID","hasAuthenticatedRef: React.MutableRefObject<boolean>","isAuthenticatingRef: React.MutableRefObject<boolean>"],"sources":["../../../../src/components/control/OrganizationContext/OrganizationContextController.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {Organization} from '@thunderid/browser';\nimport {FC, useEffect, useRef} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\ninterface OrganizationContextControllerProps {\n  /**\n   * Children to render\n   */\n  children: React.ReactNode;\n  /**\n   * Whether the source provider is signed in\n   */\n  isSourceSignedIn: boolean;\n  /**\n   * ID of the organization to authenticate with\n   */\n  targetOrganizationId: string;\n}\n\nconst OrganizationContextController: FC<OrganizationContextControllerProps> = ({\n  targetOrganizationId,\n  isSourceSignedIn,\n  children,\n}: OrganizationContextControllerProps) => {\n  const {isInitialized, isSignedIn, switchOrganization, isLoading} = useThunderID();\n  const hasAuthenticatedRef: React.MutableRefObject<boolean> = useRef(false);\n  const isAuthenticatingRef: React.MutableRefObject<boolean> = useRef(false);\n\n  /**\n   * Handle the organization switch when:\n   * - Current instance is initialized and NOT signed in\n   * - Source provider IS signed in\n   * Uses the `switchOrganization` function from the ThunderID context.\n   */\n  useEffect(() => {\n    const performOrganizationSwitch = async (): Promise<void> => {\n      // Prevent multiple authentication attempts\n      if (hasAuthenticatedRef.current || isAuthenticatingRef.current) {\n        return;\n      }\n\n      // Wait for initialization to complete\n      if (!isInitialized || isLoading) {\n        return;\n      }\n\n      // Only proceed if user is not already signed in to this instance\n      if (isSignedIn) {\n        hasAuthenticatedRef.current = true;\n        return;\n      }\n\n      // CRITICAL: Only proceed if source provider is signed in\n      if (!isSourceSignedIn) {\n        return;\n      }\n\n      try {\n        isAuthenticatingRef.current = true;\n        hasAuthenticatedRef.current = true;\n\n        // Build the organization object for authentication\n        const targetOrganization: Organization = {\n          id: targetOrganizationId,\n          name: '', // Name will be populated after authentication\n          orgHandle: '', // Will be populated after authentication\n        };\n\n        // Call the switchOrganization API from context (handles token exchange)\n        await switchOrganization(targetOrganization);\n      } catch (error) {\n        // eslint-disable-next-line no-console\n        console.error('Linked organization authentication failed:', error);\n\n        // Reset the flag to allow retry\n        hasAuthenticatedRef.current = false;\n      } finally {\n        isAuthenticatingRef.current = false;\n      }\n    };\n\n    performOrganizationSwitch();\n  }, [isInitialized, isSignedIn, isLoading, isSourceSignedIn, targetOrganizationId, switchOrganization]);\n\n  return <>{children}</>;\n};\n\nexport default OrganizationContextController;\n"],"mappings":";;;;;AAqCA,MAAMA,iCAAyE,EAC7E,sBACA,kBACA,eACwC;CACxC,MAAM,EAAC,eAAe,YAAY,oBAAoB,cAAaC,sBAAc;CACjF,MAAMC,sBAAuD,OAAO,MAAM;CAC1E,MAAMC,sBAAuD,OAAO,MAAM;;;;;;;AAQ1E,iBAAgB;EACd,MAAM,4BAA4B,YAA2B;AAE3D,OAAI,oBAAoB,WAAW,oBAAoB,QACrD;AAIF,OAAI,CAAC,iBAAiB,UACpB;AAIF,OAAI,YAAY;AACd,wBAAoB,UAAU;AAC9B;;AAIF,OAAI,CAAC,iBACH;AAGF,OAAI;AACF,wBAAoB,UAAU;AAC9B,wBAAoB,UAAU;AAU9B,UAAM,mBAPmC;KACvC,IAAI;KACJ,MAAM;KACN,WAAW;KACZ,CAG2C;YACrC,OAAO;AAEd,YAAQ,MAAM,8CAA8C,MAAM;AAGlE,wBAAoB,UAAU;aACtB;AACR,wBAAoB,UAAU;;;AAIlC,6BAA2B;IAC1B;EAAC;EAAe;EAAY;EAAW;EAAkB;EAAsB;EAAmB,CAAC;AAEtG,QAAO,gCAAG,WAAY;;AAGxB,4CAAe"}