@thunderid/react 0.10.1 → 0.11.1

package/dist/utils/buildThemeConfigFromFlowMeta.js

@@ -1,3 +1,5 @@
+import { normalizeBorderRadius } from "@thunderid/browser";
+
 //#region src/utils/buildThemeConfigFromFlowMeta.ts
 /**
 * Converts a v2 `FlowMetaTheme` into a `RecursivePartial<ThemeConfig>` that
@@ -14,8 +16,7 @@
 */
 const buildThemeConfigFromFlowMeta = (flowMetaTheme, colorScheme) => {
 	const scheme = flowMetaTheme.colorSchemes?.[colorScheme];
-	const borderRadius = flowMetaTheme.shape?.borderRadius;
-	const borderRadiusStr = borderRadius !== void 0 ? `${borderRadius}px` : void 0;
+	const borderRadiusConfig = normalizeBorderRadius(flowMetaTheme.shape?.borderRadius);
 	let colors;
 	if (scheme?.palette) {
 		colors = {};
@@ -30,12 +31,9 @@ const buildThemeConfigFromFlowMeta = (flowMetaTheme, colorScheme) => {
 		}
 	}
 	return {
+		...flowMetaTheme,
 		...flowMetaTheme.direction ? { direction: flowMetaTheme.direction } : {},
-		...borderRadiusStr ? { borderRadius: {
-			large: borderRadiusStr,
-			medium: borderRadiusStr,
-			small: borderRadiusStr
-		} } : {},
+		...borderRadiusConfig ? { borderRadius: borderRadiusConfig } : {},
 		...colors && Object.keys(colors).length > 0 ? { colors } : {},
 		...flowMetaTheme.typography?.fontFamily ? { typography: { fontFamily: flowMetaTheme.typography.fontFamily } } : {}
 	};

package/dist/utils/buildThemeConfigFromFlowMeta.js.map

@@ -1 +1 @@
-{"version":3,"file":"buildThemeConfigFromFlowMeta.js","names":["scheme: FlowMetaThemeColorScheme | undefined","borderRadius: number | undefined","borderRadiusStr: string | undefined","colors: RecursivePartial<ThemeConfig['colors']> | undefined","bg: RecursivePartial<ThemeConfig['colors']['background']>"],"sources":["../../src/utils/buildThemeConfigFromFlowMeta.ts"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {FlowMetaTheme, FlowMetaThemeColorScheme, RecursivePartial, ThemeConfig} from '@thunderid/browser';\n\n/**\n * Converts a v2 `FlowMetaTheme` into a `RecursivePartial<ThemeConfig>` that\n * `createTheme` can consume.\n *\n * Only fields explicitly present in the FlowMeta response are included so that\n * `createTheme` can deep-merge them onto its base (light/dark) defaults without\n * accidentally dropping sibling keys that were not returned by the server.\n *\n * For example, when FlowMeta returns only `background.default` and\n * `background.paper`, only `body.main` and `surface` are set — the base\n * theme's `background.disabled` and `background.dark` are **not** overridden\n * and therefore keep their default CSS variable values.\n */\nconst buildThemeConfigFromFlowMeta = (\n  flowMetaTheme: FlowMetaTheme,\n  colorScheme: 'light' | 'dark',\n): RecursivePartial<ThemeConfig> => {\n  const scheme: FlowMetaThemeColorScheme | undefined = flowMetaTheme.colorSchemes?.[colorScheme];\n  const borderRadius: number | undefined = flowMetaTheme.shape?.borderRadius;\n  const borderRadiusStr: string | undefined = borderRadius !== undefined ? `${borderRadius}px` : undefined;\n\n  // Build only the colors that the server actually provided.\n  // Each nested object is constructed incrementally so that absent fields are\n  // simply omitted rather than set to `undefined`, which would shadow the\n  // base-theme defaults inside `createTheme`.\n  let colors: RecursivePartial<ThemeConfig['colors']> | undefined;\n\n  if (scheme?.palette) {\n    colors = {};\n\n    if (scheme.palette.primary) {\n      colors.primary = scheme.palette.primary;\n    }\n    if (scheme.palette.secondary) {\n      colors.secondary = scheme.palette.secondary;\n    }\n    if (scheme.palette.text) {\n      colors.text = scheme.palette.text;\n    }\n\n    // Build background incrementally to avoid replacing the full base object.\n    if (scheme.palette.background) {\n      const bg: RecursivePartial<ThemeConfig['colors']['background']> = {};\n\n      if (scheme.palette.background.default) {\n        bg.body = {main: scheme.palette.background.default};\n      }\n      if (scheme.palette.background.paper) {\n        bg.surface = scheme.palette.background.paper;\n      }\n\n      if (Object.keys(bg).length > 0) {\n        colors.background = bg;\n      }\n    }\n  }\n\n  return {\n    ...(flowMetaTheme.direction ? {direction: flowMetaTheme.direction} : {}),\n    ...(borderRadiusStr\n      ? {\n          borderRadius: {\n            large: borderRadiusStr,\n            medium: borderRadiusStr,\n            small: borderRadiusStr,\n          },\n        }\n      : {}),\n    ...(colors && Object.keys(colors).length > 0 ? {colors} : {}),\n    ...(flowMetaTheme.typography?.fontFamily ? {typography: {fontFamily: flowMetaTheme.typography.fontFamily}} : {}),\n  };\n};\n\nexport default buildThemeConfigFromFlowMeta;\n"],"mappings":";;;;;;;;;;;;;;AAiCA,MAAM,gCACJ,eACA,gBACkC;CAClC,MAAMA,SAA+C,cAAc,eAAe;CAClF,MAAMC,eAAmC,cAAc,OAAO;CAC9D,MAAMC,kBAAsC,iBAAiB,SAAY,GAAG,aAAa,MAAM;CAM/F,IAAIC;AAEJ,KAAI,QAAQ,SAAS;AACnB,WAAS,EAAE;AAEX,MAAI,OAAO,QAAQ,QACjB,QAAO,UAAU,OAAO,QAAQ;AAElC,MAAI,OAAO,QAAQ,UACjB,QAAO,YAAY,OAAO,QAAQ;AAEpC,MAAI,OAAO,QAAQ,KACjB,QAAO,OAAO,OAAO,QAAQ;AAI/B,MAAI,OAAO,QAAQ,YAAY;GAC7B,MAAMC,KAA4D,EAAE;AAEpE,OAAI,OAAO,QAAQ,WAAW,QAC5B,IAAG,OAAO,EAAC,MAAM,OAAO,QAAQ,WAAW,SAAQ;AAErD,OAAI,OAAO,QAAQ,WAAW,MAC5B,IAAG,UAAU,OAAO,QAAQ,WAAW;AAGzC,OAAI,OAAO,KAAK,GAAG,CAAC,SAAS,EAC3B,QAAO,aAAa;;;AAK1B,QAAO;EACL,GAAI,cAAc,YAAY,EAAC,WAAW,cAAc,WAAU,GAAG,EAAE;EACvE,GAAI,kBACA,EACE,cAAc;GACZ,OAAO;GACP,QAAQ;GACR,OAAO;GACR,EACF,GACD,EAAE;EACN,GAAI,UAAU,OAAO,KAAK,OAAO,CAAC,SAAS,IAAI,EAAC,QAAO,GAAG,EAAE;EAC5D,GAAI,cAAc,YAAY,aAAa,EAAC,YAAY,EAAC,YAAY,cAAc,WAAW,YAAW,EAAC,GAAG,EAAE;EAChH;;AAGH,2CAAe"}
+{"version":3,"file":"buildThemeConfigFromFlowMeta.js","names":["scheme: FlowMetaThemeColorScheme | undefined","colors: RecursivePartial<ThemeConfig['colors']> | undefined","bg: RecursivePartial<ThemeConfig['colors']['background']>"],"sources":["../../src/utils/buildThemeConfigFromFlowMeta.ts"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  FlowMetaTheme,\n  FlowMetaThemeColorScheme,\n  RecursivePartial,\n  ThemeConfig,\n  normalizeBorderRadius,\n} from '@thunderid/browser';\n\n/**\n * Converts a v2 `FlowMetaTheme` into a `RecursivePartial<ThemeConfig>` that\n * `createTheme` can consume.\n *\n * Only fields explicitly present in the FlowMeta response are included so that\n * `createTheme` can deep-merge them onto its base (light/dark) defaults without\n * accidentally dropping sibling keys that were not returned by the server.\n *\n * For example, when FlowMeta returns only `background.default` and\n * `background.paper`, only `body.main` and `surface` are set — the base\n * theme's `background.disabled` and `background.dark` are **not** overridden\n * and therefore keep their default CSS variable values.\n */\nconst buildThemeConfigFromFlowMeta = (\n  flowMetaTheme: FlowMetaTheme,\n  colorScheme: 'light' | 'dark',\n): RecursivePartial<ThemeConfig> => {\n  const scheme: FlowMetaThemeColorScheme | undefined = flowMetaTheme.colorSchemes?.[colorScheme];\n  const borderRadiusConfig = normalizeBorderRadius(flowMetaTheme.shape?.borderRadius);\n\n  // Build only the colors that the server actually provided.\n  // Each nested object is constructed incrementally so that absent fields are\n  // simply omitted rather than set to `undefined`, which would shadow the\n  // base-theme defaults inside `createTheme`.\n  let colors: RecursivePartial<ThemeConfig['colors']> | undefined;\n\n  if (scheme?.palette) {\n    colors = {};\n\n    if (scheme.palette.primary) {\n      colors.primary = scheme.palette.primary;\n    }\n    if (scheme.palette.secondary) {\n      colors.secondary = scheme.palette.secondary;\n    }\n    if (scheme.palette.text) {\n      colors.text = scheme.palette.text;\n    }\n\n    // Build background incrementally to avoid replacing the full base object.\n    if (scheme.palette.background) {\n      const bg: RecursivePartial<ThemeConfig['colors']['background']> = {};\n\n      if (scheme.palette.background.default) {\n        bg.body = {main: scheme.palette.background.default};\n      }\n      if (scheme.palette.background.paper) {\n        bg.surface = scheme.palette.background.paper;\n      }\n\n      if (Object.keys(bg).length > 0) {\n        colors.background = bg;\n      }\n    }\n  }\n\n  return {\n    ...flowMetaTheme,\n    ...(flowMetaTheme.direction ? {direction: flowMetaTheme.direction} : {}),\n    ...(borderRadiusConfig ? {borderRadius: borderRadiusConfig} : {}),\n    ...(colors && Object.keys(colors).length > 0 ? {colors} : {}),\n    ...(flowMetaTheme.typography?.fontFamily ? {typography: {fontFamily: flowMetaTheme.typography.fontFamily}} : {}),\n  };\n};\n\nexport default buildThemeConfigFromFlowMeta;\n"],"mappings":";;;;;;;;;;;;;;;;AAuCA,MAAM,gCACJ,eACA,gBACkC;CAClC,MAAMA,SAA+C,cAAc,eAAe;CAClF,MAAM,qBAAqB,sBAAsB,cAAc,OAAO,aAAa;CAMnF,IAAIC;AAEJ,KAAI,QAAQ,SAAS;AACnB,WAAS,EAAE;AAEX,MAAI,OAAO,QAAQ,QACjB,QAAO,UAAU,OAAO,QAAQ;AAElC,MAAI,OAAO,QAAQ,UACjB,QAAO,YAAY,OAAO,QAAQ;AAEpC,MAAI,OAAO,QAAQ,KACjB,QAAO,OAAO,OAAO,QAAQ;AAI/B,MAAI,OAAO,QAAQ,YAAY;GAC7B,MAAMC,KAA4D,EAAE;AAEpE,OAAI,OAAO,QAAQ,WAAW,QAC5B,IAAG,OAAO,EAAC,MAAM,OAAO,QAAQ,WAAW,SAAQ;AAErD,OAAI,OAAO,QAAQ,WAAW,MAC5B,IAAG,UAAU,OAAO,QAAQ,WAAW;AAGzC,OAAI,OAAO,KAAK,GAAG,CAAC,SAAS,EAC3B,QAAO,aAAa;;;AAK1B,QAAO;EACL,GAAG;EACH,GAAI,cAAc,YAAY,EAAC,WAAW,cAAc,WAAU,GAAG,EAAE;EACvE,GAAI,qBAAqB,EAAC,cAAc,oBAAmB,GAAG,EAAE;EAChE,GAAI,UAAU,OAAO,KAAK,OAAO,CAAC,SAAS,IAAI,EAAC,QAAO,GAAG,EAAE;EAC5D,GAAI,cAAc,YAAY,aAAa,EAAC,YAAY,EAAC,YAAY,cAAc,WAAW,YAAW,EAAC,GAAG,EAAE;EAChH;;AAGH,2CAAe"}

package/dist/utils/passkey.js

@@ -40,7 +40,7 @@ const handlePasskeyRegistration = async (challengeData) => {
 		return JSON.stringify(registrationResponse);
 	} catch (error) {
 		if (error instanceof ThunderIDRuntimeError) throw error;
-		if (error instanceof Error) throw new ThunderIDRuntimeError(`Passkey registration failed: ${error.message}`, "browser-webauthn-registration-error", "browser", `WebAuthn registration failed with error: ${error.name}`);
+		if (error instanceof Error) throw new ThunderIDRuntimeError("Passkey registration failed. Please try again.", "browser-webauthn-registration-error", "browser", `WebAuthn registration failed with error: ${error.name}: ${error.message}`);
 		throw new ThunderIDRuntimeError("Passkey registration failed due to an unexpected error.", "browser-webauthn-unexpected-error", "browser", "An unexpected error occurred during WebAuthn registration.");
 	}
 };
@@ -80,7 +80,7 @@ const handlePasskeyAuthentication = async (challengeData) => {
 		return JSON.stringify(authenticationResponse);
 	} catch (error) {
 		if (error instanceof ThunderIDRuntimeError) throw error;
-		if (error instanceof Error) throw new ThunderIDRuntimeError(`Passkey authentication failed: ${error.message}`, "browser-webauthn-authentication-error", "browser", `WebAuthn authentication failed with error: ${error.name}`);
+		if (error instanceof Error) throw new ThunderIDRuntimeError("Passkey authentication failed. Please try again.", "browser-webauthn-authentication-error", "browser", `WebAuthn authentication failed with error: ${error.name}: ${error.message}`);
 		throw new ThunderIDRuntimeError("Passkey authentication failed due to an unexpected error.", "browser-webauthn-unexpected-error", "browser", "An unexpected error occurred during WebAuthn authentication.");
 	}
 };

package/dist/utils/passkey.js.map

@@ -1 +1 @@
-{"version":3,"file":"passkey.js","names":["creationOptions: any","publicKey: any","credential: PublicKeyCredential","response: AuthenticatorAttestationResponse","registrationResponse: any","requestOptions: any","response: AuthenticatorAssertionResponse","authenticationResponse: any"],"sources":["../../src/utils/passkey.ts"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {ThunderIDRuntimeError, arrayBufferToBase64url, base64urlToArrayBuffer} from '@thunderid/browser';\n\n/**\n * Handles WebAuthn/Passkey registration flow for browser environments.\n *\n * @param challengeData - JSON stringified challenge data containing WebAuthn creation options.\n * @returns Promise that resolves to a JSON string containing the WebAuthn registration response.\n */\nexport const handlePasskeyRegistration = async (challengeData: string): Promise<string> => {\n  if (!window.navigator.credentials?.create) {\n    throw new ThunderIDRuntimeError(\n      'WebAuthn is not supported in this browser.',\n      'browser-webauthn-not-supported',\n      'browser',\n      'WebAuthn/Passkey registration requires a browser that supports the Web Authentication API.',\n    );\n  }\n\n  try {\n    const creationOptions: any = JSON.parse(challengeData);\n\n    // Decode challenge and user ID from base64url to BufferSource\n    const publicKey: any = {\n      ...creationOptions,\n      challenge: base64urlToArrayBuffer(creationOptions.challenge),\n      user: {\n        ...creationOptions.user,\n        id: base64urlToArrayBuffer(creationOptions.user.id),\n      },\n      ...(creationOptions.excludeCredentials && {\n        excludeCredentials: creationOptions.excludeCredentials.map((cred: any) => ({\n          ...cred,\n          id: base64urlToArrayBuffer(cred.id),\n        })),\n      }),\n    };\n\n    const credential: PublicKeyCredential = (await navigator.credentials.create({\n      publicKey,\n    })) as PublicKeyCredential;\n\n    if (!credential) {\n      throw new ThunderIDRuntimeError(\n        'No credential returned from WebAuthn registration.',\n        'browser-webauthn-no-credential',\n        'browser',\n        'The WebAuthn registration ceremony completed but did not return a valid credential.',\n      );\n    }\n\n    const response: AuthenticatorAttestationResponse = credential.response as AuthenticatorAttestationResponse;\n\n    // Encode response fields back to base64url\n    const registrationResponse: any = {\n      id: credential.id,\n      rawId: arrayBufferToBase64url(credential.rawId),\n      response: {\n        attestationObject: arrayBufferToBase64url(response.attestationObject),\n        clientDataJSON: arrayBufferToBase64url(response.clientDataJSON),\n        ...(response.getTransports && {\n          transports: response.getTransports(),\n        }),\n      },\n      type: credential.type,\n      ...(credential.authenticatorAttachment && {\n        authenticatorAttachment: credential.authenticatorAttachment,\n      }),\n    };\n\n    return JSON.stringify(registrationResponse);\n  } catch (error) {\n    if (error instanceof ThunderIDRuntimeError) {\n      throw error;\n    }\n\n    if (error instanceof Error) {\n      // Map specific WebAuthn errors to ThunderIDRuntimeError/friendly messages as needed\n      throw new ThunderIDRuntimeError(\n        `Passkey registration failed: ${error.message}`,\n        'browser-webauthn-registration-error',\n        'browser',\n        `WebAuthn registration failed with error: ${error.name}`,\n      );\n    }\n\n    throw new ThunderIDRuntimeError(\n      'Passkey registration failed due to an unexpected error.',\n      'browser-webauthn-unexpected-error',\n      'browser',\n      'An unexpected error occurred during WebAuthn registration.',\n    );\n  }\n};\n\n/**\n * Handles WebAuthn/Passkey authentication flow for browser environments.\n *\n * @param challengeData - JSON stringified challenge data containing WebAuthn request options.\n * @returns Promise that resolves to a JSON string containing the WebAuthn authentication response.\n */\nexport const handlePasskeyAuthentication = async (challengeData: string): Promise<string> => {\n  if (!window.navigator.credentials?.get) {\n    throw new ThunderIDRuntimeError(\n      'WebAuthn is not supported in this browser.',\n      'browser-webauthn-not-supported',\n      'browser',\n      'WebAuthn/Passkey authentication requires a browser that supports the Web Authentication API.',\n    );\n  }\n\n  try {\n    const requestOptions: any = JSON.parse(challengeData);\n\n    // Decode challenge and allowed credentials from base64url to BufferSource\n    const publicKey: any = {\n      ...requestOptions,\n      challenge: base64urlToArrayBuffer(requestOptions.challenge),\n      ...(requestOptions.allowCredentials && {\n        allowCredentials: requestOptions.allowCredentials.map((cred: any) => ({\n          ...cred,\n          id: base64urlToArrayBuffer(cred.id),\n        })),\n      }),\n    };\n\n    const credential: PublicKeyCredential = (await navigator.credentials.get({\n      publicKey,\n    })) as PublicKeyCredential;\n\n    if (!credential) {\n      throw new ThunderIDRuntimeError(\n        'No credential returned from WebAuthn authentication.',\n        'browser-webauthn-no-credential',\n        'browser',\n        'The WebAuthn authentication ceremony completed but did not return a valid credential.',\n      );\n    }\n\n    const response: AuthenticatorAssertionResponse = credential.response as AuthenticatorAssertionResponse;\n\n    // Encode response fields back to base64url\n    const authenticationResponse: any = {\n      id: credential.id,\n      rawId: arrayBufferToBase64url(credential.rawId),\n      response: {\n        authenticatorData: arrayBufferToBase64url(response.authenticatorData),\n        clientDataJSON: arrayBufferToBase64url(response.clientDataJSON),\n        signature: arrayBufferToBase64url(response.signature),\n        ...(response.userHandle && {\n          userHandle: arrayBufferToBase64url(response.userHandle),\n        }),\n      },\n      type: credential.type,\n      ...(credential.authenticatorAttachment && {\n        authenticatorAttachment: credential.authenticatorAttachment,\n      }),\n    };\n\n    return JSON.stringify(authenticationResponse);\n  } catch (error) {\n    if (error instanceof ThunderIDRuntimeError) {\n      throw error;\n    }\n\n    if (error instanceof Error) {\n      throw new ThunderIDRuntimeError(\n        `Passkey authentication failed: ${error.message}`,\n        'browser-webauthn-authentication-error',\n        'browser',\n        `WebAuthn authentication failed with error: ${error.name}`,\n      );\n    }\n\n    throw new ThunderIDRuntimeError(\n      'Passkey authentication failed due to an unexpected error.',\n      'browser-webauthn-unexpected-error',\n      'browser',\n      'An unexpected error occurred during WebAuthn authentication.',\n    );\n  }\n};\n"],"mappings":";;;;;;;;;AA0BA,MAAa,4BAA4B,OAAO,kBAA2C;AACzF,KAAI,CAAC,OAAO,UAAU,aAAa,OACjC,OAAM,IAAI,sBACR,8CACA,kCACA,WACA,6FACD;AAGH,KAAI;EACF,MAAMA,kBAAuB,KAAK,MAAM,cAAc;EAGtD,MAAMC,YAAiB;GACrB,GAAG;GACH,WAAW,uBAAuB,gBAAgB,UAAU;GAC5D,MAAM;IACJ,GAAG,gBAAgB;IACnB,IAAI,uBAAuB,gBAAgB,KAAK,GAAG;IACpD;GACD,GAAI,gBAAgB,sBAAsB,EACxC,oBAAoB,gBAAgB,mBAAmB,KAAK,UAAe;IACzE,GAAG;IACH,IAAI,uBAAuB,KAAK,GAAG;IACpC,EAAE,EACJ;GACF;EAED,MAAMC,aAAmC,MAAM,UAAU,YAAY,OAAO,EAC1E,WACD,CAAC;AAEF,MAAI,CAAC,WACH,OAAM,IAAI,sBACR,sDACA,kCACA,WACA,sFACD;EAGH,MAAMC,WAA6C,WAAW;EAG9D,MAAMC,uBAA4B;GAChC,IAAI,WAAW;GACf,OAAO,uBAAuB,WAAW,MAAM;GAC/C,UAAU;IACR,mBAAmB,uBAAuB,SAAS,kBAAkB;IACrE,gBAAgB,uBAAuB,SAAS,eAAe;IAC/D,GAAI,SAAS,iBAAiB,EAC5B,YAAY,SAAS,eAAe,EACrC;IACF;GACD,MAAM,WAAW;GACjB,GAAI,WAAW,2BAA2B,EACxC,yBAAyB,WAAW,yBACrC;GACF;AAED,SAAO,KAAK,UAAU,qBAAqB;UACpC,OAAO;AACd,MAAI,iBAAiB,sBACnB,OAAM;AAGR,MAAI,iBAAiB,MAEnB,OAAM,IAAI,sBACR,gCAAgC,MAAM,WACtC,uCACA,WACA,4CAA4C,MAAM,OACnD;AAGH,QAAM,IAAI,sBACR,2DACA,qCACA,WACA,6DACD;;;;;;;;;AAUL,MAAa,8BAA8B,OAAO,kBAA2C;AAC3F,KAAI,CAAC,OAAO,UAAU,aAAa,IACjC,OAAM,IAAI,sBACR,8CACA,kCACA,WACA,+FACD;AAGH,KAAI;EACF,MAAMC,iBAAsB,KAAK,MAAM,cAAc;EAGrD,MAAMJ,YAAiB;GACrB,GAAG;GACH,WAAW,uBAAuB,eAAe,UAAU;GAC3D,GAAI,eAAe,oBAAoB,EACrC,kBAAkB,eAAe,iBAAiB,KAAK,UAAe;IACpE,GAAG;IACH,IAAI,uBAAuB,KAAK,GAAG;IACpC,EAAE,EACJ;GACF;EAED,MAAMC,aAAmC,MAAM,UAAU,YAAY,IAAI,EACvE,WACD,CAAC;AAEF,MAAI,CAAC,WACH,OAAM,IAAI,sBACR,wDACA,kCACA,WACA,wFACD;EAGH,MAAMI,WAA2C,WAAW;EAG5D,MAAMC,yBAA8B;GAClC,IAAI,WAAW;GACf,OAAO,uBAAuB,WAAW,MAAM;GAC/C,UAAU;IACR,mBAAmB,uBAAuB,SAAS,kBAAkB;IACrE,gBAAgB,uBAAuB,SAAS,eAAe;IAC/D,WAAW,uBAAuB,SAAS,UAAU;IACrD,GAAI,SAAS,cAAc,EACzB,YAAY,uBAAuB,SAAS,WAAW,EACxD;IACF;GACD,MAAM,WAAW;GACjB,GAAI,WAAW,2BAA2B,EACxC,yBAAyB,WAAW,yBACrC;GACF;AAED,SAAO,KAAK,UAAU,uBAAuB;UACtC,OAAO;AACd,MAAI,iBAAiB,sBACnB,OAAM;AAGR,MAAI,iBAAiB,MACnB,OAAM,IAAI,sBACR,kCAAkC,MAAM,WACxC,yCACA,WACA,8CAA8C,MAAM,OACrD;AAGH,QAAM,IAAI,sBACR,6DACA,qCACA,WACA,+DACD"}
+{"version":3,"file":"passkey.js","names":["creationOptions: any","publicKey: any","credential: PublicKeyCredential","response: AuthenticatorAttestationResponse","registrationResponse: any","requestOptions: any","response: AuthenticatorAssertionResponse","authenticationResponse: any"],"sources":["../../src/utils/passkey.ts"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {ThunderIDRuntimeError, arrayBufferToBase64url, base64urlToArrayBuffer} from '@thunderid/browser';\n\n/**\n * Handles WebAuthn/Passkey registration flow for browser environments.\n *\n * @param challengeData - JSON stringified challenge data containing WebAuthn creation options.\n * @returns Promise that resolves to a JSON string containing the WebAuthn registration response.\n */\nexport const handlePasskeyRegistration = async (challengeData: string): Promise<string> => {\n  if (!window.navigator.credentials?.create) {\n    throw new ThunderIDRuntimeError(\n      'WebAuthn is not supported in this browser.',\n      'browser-webauthn-not-supported',\n      'browser',\n      'WebAuthn/Passkey registration requires a browser that supports the Web Authentication API.',\n    );\n  }\n\n  try {\n    const creationOptions: any = JSON.parse(challengeData);\n\n    // Decode challenge and user ID from base64url to BufferSource\n    const publicKey: any = {\n      ...creationOptions,\n      challenge: base64urlToArrayBuffer(creationOptions.challenge),\n      user: {\n        ...creationOptions.user,\n        id: base64urlToArrayBuffer(creationOptions.user.id),\n      },\n      ...(creationOptions.excludeCredentials && {\n        excludeCredentials: creationOptions.excludeCredentials.map((cred: any) => ({\n          ...cred,\n          id: base64urlToArrayBuffer(cred.id),\n        })),\n      }),\n    };\n\n    const credential: PublicKeyCredential = (await navigator.credentials.create({\n      publicKey,\n    })) as PublicKeyCredential;\n\n    if (!credential) {\n      throw new ThunderIDRuntimeError(\n        'No credential returned from WebAuthn registration.',\n        'browser-webauthn-no-credential',\n        'browser',\n        'The WebAuthn registration ceremony completed but did not return a valid credential.',\n      );\n    }\n\n    const response: AuthenticatorAttestationResponse = credential.response as AuthenticatorAttestationResponse;\n\n    // Encode response fields back to base64url\n    const registrationResponse: any = {\n      id: credential.id,\n      rawId: arrayBufferToBase64url(credential.rawId),\n      response: {\n        attestationObject: arrayBufferToBase64url(response.attestationObject),\n        clientDataJSON: arrayBufferToBase64url(response.clientDataJSON),\n        ...(response.getTransports && {\n          transports: response.getTransports(),\n        }),\n      },\n      type: credential.type,\n      ...(credential.authenticatorAttachment && {\n        authenticatorAttachment: credential.authenticatorAttachment,\n      }),\n    };\n\n    return JSON.stringify(registrationResponse);\n  } catch (error) {\n    if (error instanceof ThunderIDRuntimeError) {\n      throw error;\n    }\n\n    if (error instanceof Error) {\n      // Map specific WebAuthn errors to ThunderIDRuntimeError/friendly messages as needed\n      throw new ThunderIDRuntimeError(\n        'Passkey registration failed. Please try again.',\n        'browser-webauthn-registration-error',\n        'browser',\n        `WebAuthn registration failed with error: ${error.name}: ${error.message}`,\n      );\n    }\n\n    throw new ThunderIDRuntimeError(\n      'Passkey registration failed due to an unexpected error.',\n      'browser-webauthn-unexpected-error',\n      'browser',\n      'An unexpected error occurred during WebAuthn registration.',\n    );\n  }\n};\n\n/**\n * Handles WebAuthn/Passkey authentication flow for browser environments.\n *\n * @param challengeData - JSON stringified challenge data containing WebAuthn request options.\n * @returns Promise that resolves to a JSON string containing the WebAuthn authentication response.\n */\nexport const handlePasskeyAuthentication = async (challengeData: string): Promise<string> => {\n  if (!window.navigator.credentials?.get) {\n    throw new ThunderIDRuntimeError(\n      'WebAuthn is not supported in this browser.',\n      'browser-webauthn-not-supported',\n      'browser',\n      'WebAuthn/Passkey authentication requires a browser that supports the Web Authentication API.',\n    );\n  }\n\n  try {\n    const requestOptions: any = JSON.parse(challengeData);\n\n    // Decode challenge and allowed credentials from base64url to BufferSource\n    const publicKey: any = {\n      ...requestOptions,\n      challenge: base64urlToArrayBuffer(requestOptions.challenge),\n      ...(requestOptions.allowCredentials && {\n        allowCredentials: requestOptions.allowCredentials.map((cred: any) => ({\n          ...cred,\n          id: base64urlToArrayBuffer(cred.id),\n        })),\n      }),\n    };\n\n    const credential: PublicKeyCredential = (await navigator.credentials.get({\n      publicKey,\n    })) as PublicKeyCredential;\n\n    if (!credential) {\n      throw new ThunderIDRuntimeError(\n        'No credential returned from WebAuthn authentication.',\n        'browser-webauthn-no-credential',\n        'browser',\n        'The WebAuthn authentication ceremony completed but did not return a valid credential.',\n      );\n    }\n\n    const response: AuthenticatorAssertionResponse = credential.response as AuthenticatorAssertionResponse;\n\n    // Encode response fields back to base64url\n    const authenticationResponse: any = {\n      id: credential.id,\n      rawId: arrayBufferToBase64url(credential.rawId),\n      response: {\n        authenticatorData: arrayBufferToBase64url(response.authenticatorData),\n        clientDataJSON: arrayBufferToBase64url(response.clientDataJSON),\n        signature: arrayBufferToBase64url(response.signature),\n        ...(response.userHandle && {\n          userHandle: arrayBufferToBase64url(response.userHandle),\n        }),\n      },\n      type: credential.type,\n      ...(credential.authenticatorAttachment && {\n        authenticatorAttachment: credential.authenticatorAttachment,\n      }),\n    };\n\n    return JSON.stringify(authenticationResponse);\n  } catch (error) {\n    if (error instanceof ThunderIDRuntimeError) {\n      throw error;\n    }\n\n    if (error instanceof Error) {\n      throw new ThunderIDRuntimeError(\n        'Passkey authentication failed. Please try again.',\n        'browser-webauthn-authentication-error',\n        'browser',\n        `WebAuthn authentication failed with error: ${error.name}: ${error.message}`,\n      );\n    }\n\n    throw new ThunderIDRuntimeError(\n      'Passkey authentication failed due to an unexpected error.',\n      'browser-webauthn-unexpected-error',\n      'browser',\n      'An unexpected error occurred during WebAuthn authentication.',\n    );\n  }\n};\n"],"mappings":";;;;;;;;;AA0BA,MAAa,4BAA4B,OAAO,kBAA2C;AACzF,KAAI,CAAC,OAAO,UAAU,aAAa,OACjC,OAAM,IAAI,sBACR,8CACA,kCACA,WACA,6FACD;AAGH,KAAI;EACF,MAAMA,kBAAuB,KAAK,MAAM,cAAc;EAGtD,MAAMC,YAAiB;GACrB,GAAG;GACH,WAAW,uBAAuB,gBAAgB,UAAU;GAC5D,MAAM;IACJ,GAAG,gBAAgB;IACnB,IAAI,uBAAuB,gBAAgB,KAAK,GAAG;IACpD;GACD,GAAI,gBAAgB,sBAAsB,EACxC,oBAAoB,gBAAgB,mBAAmB,KAAK,UAAe;IACzE,GAAG;IACH,IAAI,uBAAuB,KAAK,GAAG;IACpC,EAAE,EACJ;GACF;EAED,MAAMC,aAAmC,MAAM,UAAU,YAAY,OAAO,EAC1E,WACD,CAAC;AAEF,MAAI,CAAC,WACH,OAAM,IAAI,sBACR,sDACA,kCACA,WACA,sFACD;EAGH,MAAMC,WAA6C,WAAW;EAG9D,MAAMC,uBAA4B;GAChC,IAAI,WAAW;GACf,OAAO,uBAAuB,WAAW,MAAM;GAC/C,UAAU;IACR,mBAAmB,uBAAuB,SAAS,kBAAkB;IACrE,gBAAgB,uBAAuB,SAAS,eAAe;IAC/D,GAAI,SAAS,iBAAiB,EAC5B,YAAY,SAAS,eAAe,EACrC;IACF;GACD,MAAM,WAAW;GACjB,GAAI,WAAW,2BAA2B,EACxC,yBAAyB,WAAW,yBACrC;GACF;AAED,SAAO,KAAK,UAAU,qBAAqB;UACpC,OAAO;AACd,MAAI,iBAAiB,sBACnB,OAAM;AAGR,MAAI,iBAAiB,MAEnB,OAAM,IAAI,sBACR,kDACA,uCACA,WACA,4CAA4C,MAAM,KAAK,IAAI,MAAM,UAClE;AAGH,QAAM,IAAI,sBACR,2DACA,qCACA,WACA,6DACD;;;;;;;;;AAUL,MAAa,8BAA8B,OAAO,kBAA2C;AAC3F,KAAI,CAAC,OAAO,UAAU,aAAa,IACjC,OAAM,IAAI,sBACR,8CACA,kCACA,WACA,+FACD;AAGH,KAAI;EACF,MAAMC,iBAAsB,KAAK,MAAM,cAAc;EAGrD,MAAMJ,YAAiB;GACrB,GAAG;GACH,WAAW,uBAAuB,eAAe,UAAU;GAC3D,GAAI,eAAe,oBAAoB,EACrC,kBAAkB,eAAe,iBAAiB,KAAK,UAAe;IACpE,GAAG;IACH,IAAI,uBAAuB,KAAK,GAAG;IACpC,EAAE,EACJ;GACF;EAED,MAAMC,aAAmC,MAAM,UAAU,YAAY,IAAI,EACvE,WACD,CAAC;AAEF,MAAI,CAAC,WACH,OAAM,IAAI,sBACR,wDACA,kCACA,WACA,wFACD;EAGH,MAAMI,WAA2C,WAAW;EAG5D,MAAMC,yBAA8B;GAClC,IAAI,WAAW;GACf,OAAO,uBAAuB,WAAW,MAAM;GAC/C,UAAU;IACR,mBAAmB,uBAAuB,SAAS,kBAAkB;IACrE,gBAAgB,uBAAuB,SAAS,eAAe;IAC/D,WAAW,uBAAuB,SAAS,UAAU;IACrD,GAAI,SAAS,cAAc,EACzB,YAAY,uBAAuB,SAAS,WAAW,EACxD;IACF;GACD,MAAM,WAAW;GACjB,GAAI,WAAW,2BAA2B,EACxC,yBAAyB,WAAW,yBACrC;GACF;AAED,SAAO,KAAK,UAAU,uBAAuB;UACtC,OAAO;AACd,MAAI,iBAAiB,sBACnB,OAAM;AAGR,MAAI,iBAAiB,MACnB,OAAM,IAAI,sBACR,oDACA,yCACA,WACA,8CAA8C,MAAM,KAAK,IAAI,MAAM,UACpE;AAGH,QAAM,IAAI,sBACR,6DACA,qCACA,WACA,+DACD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/react",
-  "version": "0.10.1",
+  "version": "0.11.1",
   "description": "React SDK for ThunderID",
   "keywords": [
     "thunderid",
@@ -62,7 +62,7 @@
     "@floating-ui/react": "0.27.12",
     "dompurify": "3.4.11",
     "tslib": "2.8.1",
-    "@thunderid/browser": "^0.10.1"
+    "@thunderid/browser": "^0.11.1"
   },
   "publishConfig": {
     "access": "public"