@thunderid/react 0.3.0 → 0.3.3

package/dist/components/presentation/auth/SignIn/v2/SignIn.js

@@ -1,556 +0,0 @@
-import useThunderID_default from "../../../../../contexts/ThunderID/useThunderID.js";
-import useTranslation_default from "../../../../../hooks/useTranslation.js";
-import { extractErrorMessage, normalizeFlowResponse } from "../../../../../utils/v2/flowTransformer.js";
-import BaseSignIn_default from "./BaseSignIn.js";
-import { useOAuthCallback } from "../../../../../hooks/v2/useOAuthCallback.js";
-import { initiateOAuthRedirect } from "../../../../../utils/oauth.js";
-import { handlePasskeyAuthentication, handlePasskeyRegistration } from "../../../../../utils/v2/passkey.js";
-import { EmbeddedFlowType, EmbeddedSignInFlowStatusV2, EmbeddedSignInFlowTypeV2, ThunderIDRuntimeError, logger } from "@thunderid/browser";
-import { useEffect, useRef, useState } from "react";
-import { Fragment, jsx } from "react/jsx-runtime";
-
-//#region src/components/presentation/auth/SignIn/v2/SignIn.tsx
-/**
-* A component-driven SignIn component that provides authentication flow with pre-built styling.
-* This component handles the flow API calls for authentication and delegates UI logic to BaseSignIn.
-* It automatically transforms simple input-based responses into component-driven UI format.
-*
-* @example
-* // Default UI
-* ```tsx
-* import { SignIn } from '@thunderid/react/component-driven';
-*
-* const App = () => {
-*   return (
-*     <SignIn
-*       onSuccess={(authData) => {
-*         console.log('Authentication successful:', authData);
-*       }}
-*       onError={(error) => {
-*         console.error('Authentication failed:', error);
-*       }}
-*       size="medium"
-*       variant="outlined"
-*     />
-*   );
-* };
-* ```
-*
-* @example
-* // Custom UI with render props
-* ```tsx
-* import { SignIn } from '@thunderid/react/component-driven';
-*
-* const App = () => {
-*   return (
-*     <SignIn
-*       onSuccess={(authData) => console.log('Success:', authData)}
-*       onError={(error) => console.error('Error:', error)}
-*     >
-*       {({signIn, isLoading, components, error, isInitialized}) => (
-*         <div className="custom-signin">
-*           <h1>Custom Sign In</h1>
-*           {!isInitialized ? (
-*             <p>Initializing...</p>
-*           ) : error ? (
-*             <div className="error">{error.message}</div>
-*           ) : (
-*             <form onSubmit={(e) => {
-*               e.preventDefault();
-*               signIn({inputs: {username: 'user', password: 'pass'}});
-*             }}>
-*               <button type="submit" disabled={isLoading}>
-*                 {isLoading ? 'Signing in...' : 'Sign In'}
-*               </button>
-*             </form>
-*           )}
-*         </div>
-*       )}
-*     </SignIn>
-*   );
-* };
-* ```
-*/
-const SignIn = ({ className, preferences, size = "medium", onSuccess, onError, variant, children }) => {
-	const { applicationId, afterSignInUrl, signIn, isInitialized, isLoading, meta, getStorageManager, scopes } = useThunderID_default();
-	const { t } = useTranslation_default(preferences?.i18n);
-	const [components, setComponents] = useState([]);
-	const [additionalData, setAdditionalData] = useState({});
-	const [currentExecutionId, setCurrentExecutionId] = useState(null);
-	const challengeTokenRef = useRef(null);
-	const [isStorageReady, setIsStorageReady] = useState(false);
-	const [isFlowInitialized, setIsFlowInitialized] = useState(false);
-	const [flowError, setFlowError] = useState(null);
-	const [isSubmitting, setIsSubmitting] = useState(false);
-	const [isTimeoutDisabled, setIsTimeoutDisabled] = useState(false);
-	const [passkeyState, setPasskeyState] = useState({
-		actionId: null,
-		challenge: null,
-		creationOptions: null,
-		error: null,
-		executionId: null,
-		isActive: false
-	});
-	const initializationAttemptedRef = useRef(false);
-	const oauthCodeProcessedRef = useRef(false);
-	const passkeyProcessedRef = useRef(false);
-	/**
-	* Sets executionId between sessionStorage and state.
-	* This ensures both are always in sync.
-	*/
-	const setExecutionId = (executionId) => {
-		setCurrentExecutionId(executionId);
-		if (executionId) sessionStorage.setItem("thunderid_execution_id", executionId);
-		else sessionStorage.removeItem("thunderid_execution_id");
-	};
-	/**
-	* Restore any challenge token persisted before an OAuth redirect.
-	* Waits for SDK initialization before reading from storage.
-	*/
-	useEffect(() => {
-		if (!isInitialized) return;
-		(async () => {
-			try {
-				const tempData = await (await getStorageManager())?.getTemporaryData();
-				if (tempData?.challengeToken) challengeTokenRef.current = tempData.challengeToken;
-			} finally {
-				setIsStorageReady(true);
-			}
-		})();
-	}, [isInitialized]);
-	/**
-	* Updates challengeTokenRef immediately (stale-closure safe) and persists via
-	* the provider's StorageManager so the token survives OAuth redirects.
-	*/
-	const setChallengeToken = async (challengeToken) => {
-		challengeTokenRef.current = challengeToken;
-		try {
-			const storageManager = await getStorageManager();
-			if (storageManager) if (challengeToken) await storageManager.setTemporaryDataParameter("challengeToken", challengeToken);
-			else await storageManager.removeTemporaryDataParameter("challengeToken");
-		} catch {
-			logger.warn("Failed to persist challenge token in storage.");
-		}
-	};
-	/**
-	* Clear all flow-related storage and state.
-	*/
-	const clearFlowState = async () => {
-		setExecutionId(null);
-		await setChallengeToken(null);
-		setIsFlowInitialized(false);
-		try {
-			await (await getStorageManager())?.removeHybridDataParameter?.("authId");
-		} catch {
-			logger.warn("Failed to clear authId from hybrid storage.");
-		}
-		setIsTimeoutDisabled(false);
-		oauthCodeProcessedRef.current = false;
-	};
-	/**
-	* Parse URL parameters used in flows.
-	*/
-	const getUrlParams = () => {
-		const urlParams = new URL(window?.location?.href ?? "").searchParams;
-		return {
-			applicationId: urlParams.get("applicationId"),
-			authId: urlParams.get("authId"),
-			code: urlParams.get("code"),
-			error: urlParams.get("error"),
-			errorDescription: urlParams.get("error_description"),
-			executionId: urlParams.get("executionId"),
-			nonce: urlParams.get("nonce"),
-			state: urlParams.get("state")
-		};
-	};
-	/**
-	* Handle authId from URL and store it in sessionStorage.
-	*/
-	const handleAuthId = async (authId) => {
-		if (authId) try {
-			await (await getStorageManager())?.setHybridDataParameter?.("authId", authId);
-		} catch {
-			logger.warn("Failed to store authId in hybrid storage.");
-		}
-	};
-	/**
-	* Clean up OAuth-related URL parameters from the browser URL.
-	*/
-	const cleanupOAuthUrlParams = (includeNonce = false) => {
-		if (!window?.location?.href) return;
-		const url = new URL(window.location.href);
-		url.searchParams.delete("error");
-		url.searchParams.delete("error_description");
-		url.searchParams.delete("code");
-		url.searchParams.delete("state");
-		if (includeNonce) url.searchParams.delete("nonce");
-		window?.history?.replaceState({}, "", url.toString());
-	};
-	/**
-	* Clean up flow-related URL parameters (executionId, authId) from the browser URL.
-	* Used after executionId is set in state to prevent using invalidated executionId from URL.
-	*/
-	const cleanupFlowUrlParams = () => {
-		if (!window?.location?.href) return;
-		const url = new URL(window.location.href);
-		url.searchParams.delete("executionId");
-		url.searchParams.delete("authId");
-		url.searchParams.delete("applicationId");
-		window?.history?.replaceState({}, "", url.toString());
-	};
-	/**
-	* Set error state and call onError callback.
-	* Ensures isFlowInitialized is true so errors can be displayed in the UI.
-	*/
-	const setError = (error) => {
-		setFlowError(error);
-		setIsFlowInitialized(true);
-		onError?.(error);
-	};
-	/**
-	* Handle OAuth error from URL parameters.
-	* Clears flow state, creates error, and cleans up URL.
-	*/
-	const handleOAuthError = (error, errorDescription) => {
-		clearFlowState();
-		setError(new ThunderIDRuntimeError(errorDescription || `OAuth error: ${error}`, "SIGN_IN_ERROR", "react"));
-		cleanupOAuthUrlParams(true);
-	};
-	/**
-	* Handle REDIRECTION response by storing flow state and redirecting to OAuth provider.
-	*/
-	const handleRedirection = async (response) => {
-		if (response.type === EmbeddedSignInFlowTypeV2.Redirection) {
-			const redirectURL = response.data?.redirectURL || response?.redirectURL;
-			if (redirectURL && window?.location) {
-				if (response.executionId) setExecutionId(response.executionId);
-				await setChallengeToken(response.challengeToken ?? null);
-				handleAuthId(getUrlParams().authId);
-				initiateOAuthRedirect(redirectURL);
-				return true;
-			}
-		}
-		return false;
-	};
-	/**
-	* Initialize the authentication flow.
-	* Priority: executionId > applicationId (from context) > applicationId (from URL)
-	*/
-	const initializeFlow = async () => {
-		const urlParams = getUrlParams();
-		oauthCodeProcessedRef.current = false;
-		handleAuthId(urlParams.authId);
-		const effectiveApplicationId = applicationId || urlParams.applicationId;
-		if (!urlParams.executionId && !effectiveApplicationId) {
-			const error = new ThunderIDRuntimeError("Either executionId or applicationId is required for authentication", "SIGN_IN_ERROR", "react");
-			setError(error);
-			throw error;
-		}
-		try {
-			setFlowError(null);
-			let response;
-			if (urlParams.executionId) response = await signIn({
-				executionId: urlParams.executionId,
-				...challengeTokenRef.current ? { challengeToken: challengeTokenRef.current } : {}
-			});
-			else response = await signIn({
-				applicationId: effectiveApplicationId,
-				flowType: EmbeddedFlowType.Authentication,
-				...scopes && { scopes }
-			});
-			if (await handleRedirection(response)) return;
-			const { executionId: normalizedExecutionId, components: normalizedComponents, additionalData: normalizedAdditionalData } = normalizeFlowResponse(response, t, { resolveTranslations: false }, meta);
-			await setChallengeToken(response.challengeToken ?? null);
-			if (normalizedExecutionId && normalizedComponents) {
-				setExecutionId(normalizedExecutionId);
-				setComponents(normalizedComponents);
-				setAdditionalData(normalizedAdditionalData ?? {});
-				setIsFlowInitialized(true);
-				setIsTimeoutDisabled(false);
-				cleanupFlowUrlParams();
-			}
-		} catch (error) {
-			const err = error;
-			await clearFlowState();
-			setError(err instanceof ThunderIDRuntimeError ? err : new Error(extractErrorMessage(err, t)));
-			initializationAttemptedRef.current = false;
-		}
-	};
-	/**
-	* Initialize the flow and handle cleanup of stale flow state.
-	*/
-	useEffect(() => {
-		const urlParams = getUrlParams();
-		if (urlParams.error) {
-			handleOAuthError(urlParams.error, urlParams.errorDescription);
-			return;
-		}
-		handleAuthId(urlParams.authId);
-	}, []);
-	useEffect(() => {
-		const currentUrlParams = getUrlParams();
-		if (isInitialized && !isLoading && isStorageReady && !isFlowInitialized && !initializationAttemptedRef.current && !currentExecutionId && !currentUrlParams.code && !currentUrlParams.state && !isSubmitting && !oauthCodeProcessedRef.current) {
-			initializationAttemptedRef.current = true;
-			initializeFlow();
-		}
-	}, [
-		isInitialized,
-		isLoading,
-		isStorageReady,
-		isFlowInitialized,
-		currentExecutionId
-	]);
-	/**
-	* Handle step timeout if configured in additionalData.
-	*/
-	useEffect(() => {
-		const timeoutMs = Number(additionalData?.["stepTimeout"]) || 0;
-		if (timeoutMs <= 0 || !isFlowInitialized) {
-			setIsTimeoutDisabled(false);
-			return;
-		}
-		const remaining = Math.max(0, Math.floor((timeoutMs - Date.now()) / 1e3));
-		const handleTimeout = () => {
-			const errorMessage = t("errors.signin.timeout") || "Time allowed to complete the step has expired.";
-			setError(new Error(errorMessage));
-			setIsTimeoutDisabled(true);
-		};
-		if (remaining <= 0) {
-			handleTimeout();
-			return;
-		}
-		const timerId = setTimeout(() => {
-			handleTimeout();
-		}, remaining * 1e3);
-		return () => clearTimeout(timerId);
-	}, [
-		additionalData?.["stepTimeout"],
-		isFlowInitialized,
-		t
-	]);
-	/**
-	* Handle form submission from BaseSignIn or render props.
-	*/
-	const handleSubmit = async (payload) => {
-		const effectiveExecutionId = payload.executionId || currentExecutionId;
-		if (!effectiveExecutionId) throw new Error("No active flow ID");
-		const processedInputs = { ...payload.inputs };
-		if (additionalData?.["consentPrompt"]) try {
-			const consentPromptRawData = additionalData["consentPrompt"];
-			const purposes = typeof consentPromptRawData === "string" ? JSON.parse(consentPromptRawData) : consentPromptRawData.purposes || consentPromptRawData;
-			let isDeny = false;
-			if (payload.action) {
-				const findAction = (comps) => {
-					if (!comps || comps.length === 0) return null;
-					const found = comps.find((c) => c.id === payload.action);
-					if (found) return found;
-					return comps.reduce((acc, c) => {
-						if (acc) return acc;
-						if (c.components) return findAction(c.components);
-						return null;
-					}, null);
-				};
-				const submitAction = findAction(components);
-				if (submitAction && submitAction.variant?.toLowerCase() !== "primary") isDeny = true;
-			}
-			const decisions = { purposes: purposes.map((p) => ({
-				approved: !isDeny,
-				elements: [...(p.essential || []).map((e) => ({
-					approved: !isDeny,
-					name: e.name
-				})), ...(p.optional || []).map((e) => {
-					const key = `__consent_opt__${p.purposeId}__${e.name}`;
-					return {
-						approved: isDeny ? false : processedInputs[key] !== "false",
-						name: e.name
-					};
-				})],
-				purposeName: p.purposeName
-			})) };
-			processedInputs["consent_decisions"] = JSON.stringify(decisions);
-			Object.keys(processedInputs).forEach((key) => {
-				if (key.startsWith("__consent_opt__")) delete processedInputs[key];
-			});
-		} catch (e) {}
-		try {
-			setIsSubmitting(true);
-			setFlowError(null);
-			const response = await signIn({
-				executionId: effectiveExecutionId,
-				...payload,
-				inputs: processedInputs,
-				...challengeTokenRef.current ? { challengeToken: challengeTokenRef.current } : {}
-			});
-			if (await handleRedirection(response)) return;
-			if (response.data?.additionalData?.["passkeyChallenge"] || response.data?.additionalData?.["passkeyCreationOptions"]) {
-				const { passkeyChallenge, passkeyCreationOptions } = response.data.additionalData;
-				const effectiveExecutionIdForPasskey = response.executionId || effectiveExecutionId;
-				passkeyProcessedRef.current = false;
-				await setChallengeToken(response.challengeToken ?? null);
-				setPasskeyState({
-					actionId: "submit",
-					challenge: passkeyChallenge,
-					creationOptions: passkeyCreationOptions,
-					error: null,
-					executionId: effectiveExecutionIdForPasskey,
-					isActive: true
-				});
-				setIsSubmitting(false);
-				return;
-			}
-			const { executionId: normalizedExecutionId, components: normalizedComponents, additionalData: normalizedAdditionalData } = normalizeFlowResponse(response, t, { resolveTranslations: false }, meta);
-			if (response.flowStatus === EmbeddedSignInFlowStatusV2.Error) {
-				await clearFlowState();
-				const err = new Error(extractErrorMessage(response, t));
-				setError(err);
-				cleanupFlowUrlParams();
-				throw err;
-			}
-			if (response.flowStatus === EmbeddedSignInFlowStatusV2.Complete) {
-				const finalRedirectUrl = response?.redirectUrl || response?.redirect_uri || afterSignInUrl;
-				setIsSubmitting(false);
-				setExecutionId(null);
-				await setChallengeToken(null);
-				setIsFlowInitialized(false);
-				sessionStorage.removeItem("thunderid_execution_id");
-				try {
-					await (await getStorageManager())?.removeHybridDataParameter?.("authId");
-				} catch {
-					logger.warn("Failed to clear authId from hybrid storage after completion.");
-				}
-				cleanupOAuthUrlParams(true);
-				if (onSuccess) onSuccess({
-					redirectUrl: finalRedirectUrl,
-					...response.data || {}
-				});
-				if (finalRedirectUrl && window?.location) window.location.href = finalRedirectUrl;
-				return;
-			}
-			await setChallengeToken(response.challengeToken ?? null);
-			if (normalizedExecutionId && normalizedComponents) {
-				setExecutionId(normalizedExecutionId);
-				setComponents(normalizedComponents);
-				setAdditionalData(normalizedAdditionalData ?? {});
-				setIsTimeoutDisabled(false);
-				setIsFlowInitialized(true);
-				cleanupFlowUrlParams();
-				if (response?.error) setFlowError(new Error(extractErrorMessage(response, t)));
-			}
-		} catch (error) {
-			const err = error;
-			await clearFlowState();
-			setError(err instanceof ThunderIDRuntimeError ? err : new Error(extractErrorMessage(err, t)));
-			return;
-		} finally {
-			setIsSubmitting(false);
-		}
-	};
-	/**
-	* Handle authentication errors.
-	*/
-	const handleError = (error) => {
-		setError(error);
-	};
-	useOAuthCallback({
-		currentExecutionId,
-		isInitialized: isInitialized && !isLoading && isStorageReady,
-		isSubmitting,
-		onError: (err) => {
-			clearFlowState();
-			setError(err instanceof Error ? err : new Error(String(err)));
-		},
-		onSubmit: async (payload) => handleSubmit({
-			executionId: payload.executionId,
-			inputs: payload.inputs
-		}),
-		processedRef: oauthCodeProcessedRef,
-		setExecutionId
-	});
-	/**
-	* Handle passkey authentication/registration when passkey state becomes active.
-	* This effect auto-triggers the browser passkey popup and submits the result.
-	*/
-	useEffect(() => {
-		if (!passkeyState.isActive || !passkeyState.challenge && !passkeyState.creationOptions || !passkeyState.executionId) return;
-		if (passkeyProcessedRef.current) return;
-		passkeyProcessedRef.current = true;
-		const performPasskeyProcess = async () => {
-			let inputs;
-			if (passkeyState.challenge) {
-				const passkeyResponse = await handlePasskeyAuthentication(passkeyState.challenge);
-				const passkeyResponseObj = JSON.parse(passkeyResponse);
-				inputs = {
-					authenticatorData: passkeyResponseObj.response.authenticatorData,
-					clientDataJSON: passkeyResponseObj.response.clientDataJSON,
-					credentialId: passkeyResponseObj.id,
-					signature: passkeyResponseObj.response.signature,
-					userHandle: passkeyResponseObj.response.userHandle
-				};
-			} else if (passkeyState.creationOptions) {
-				const passkeyResponse = await handlePasskeyRegistration(passkeyState.creationOptions);
-				const passkeyResponseObj = JSON.parse(passkeyResponse);
-				inputs = {
-					attestationObject: passkeyResponseObj.response.attestationObject,
-					clientDataJSON: passkeyResponseObj.response.clientDataJSON,
-					credentialId: passkeyResponseObj.id
-				};
-			} else throw new Error("No passkey challenge or creation options available");
-			await handleSubmit({
-				executionId: passkeyState.executionId ?? void 0,
-				inputs
-			});
-		};
-		performPasskeyProcess().then(() => {
-			setPasskeyState({
-				actionId: null,
-				challenge: null,
-				creationOptions: null,
-				error: null,
-				executionId: null,
-				isActive: false
-			});
-		}).catch((error) => {
-			setPasskeyState((prev) => ({
-				...prev,
-				error,
-				isActive: false
-			}));
-			setFlowError(error);
-			onError?.(error);
-		});
-	}, [
-		passkeyState.isActive,
-		passkeyState.challenge,
-		passkeyState.creationOptions,
-		passkeyState.executionId
-	]);
-	if (children) return /* @__PURE__ */ jsx(Fragment, { children: children({
-		additionalData,
-		components,
-		error: flowError,
-		initialize: initializeFlow,
-		isInitialized: isFlowInitialized,
-		isLoading: isLoading || isSubmitting || !isInitialized,
-		isTimeoutDisabled,
-		meta,
-		onSubmit: handleSubmit
-	}) });
-	return /* @__PURE__ */ jsx(BaseSignIn_default, {
-		additionalData,
-		components,
-		isLoading: isLoading || !isInitialized || !isFlowInitialized,
-		isTimeoutDisabled,
-		onSubmit: handleSubmit,
-		onError: handleError,
-		error: flowError,
-		className,
-		size,
-		variant,
-		preferences
-	});
-};
-var SignIn_default = SignIn;
-
-//#endregion
-export { SignIn_default as default };
-//# sourceMappingURL=SignIn.js.map

package/dist/components/presentation/auth/SignIn/v2/SignIn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignIn.js","names":["SignIn: FC<SignInProps>","useThunderID","useTranslation","challengeTokenRef: any","initializationAttemptedRef: any","oauthCodeProcessedRef: any","passkeyProcessedRef: any","tempData: any","storageManager: any","urlParams: any","url: any","redirectURL: any","effectiveApplicationId: any","error: any","response: EmbeddedSignInFlowResponseV2","err: any","currentUrlParams: any","timeoutMs: number","remaining: number","errorMessage: string","timerId: any","effectiveExecutionId: any","processedInputs: Record<string, any>","consentPromptRawData: any","purposes: any[]","found: any","submitAction: any","decisions: any","effectiveExecutionIdForPasskey: any","finalRedirectUrl: any","inputs: Record<string, string>","passkeyResponse: any","passkeyResponseObj: any","BaseSignIn"],"sources":["../../../../../../src/components/presentation/auth/SignIn/v2/SignIn.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025-2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  ThunderIDRuntimeError,\n  EmbeddedFlowComponentV2 as EmbeddedFlowComponent,\n  EmbeddedFlowType,\n  EmbeddedSignInFlowResponseV2,\n  EmbeddedSignInFlowRequestV2,\n  EmbeddedSignInFlowStatusV2,\n  EmbeddedSignInFlowTypeV2,\n  FlowMetadataResponse,\n  Preferences,\n  logger,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useState, useEffect, useRef, ReactNode} from 'react';\n// eslint-disable-next-line import/no-named-as-default\nimport BaseSignIn, {BaseSignInProps} from './BaseSignIn';\nimport useThunderID from '../../../../../contexts/ThunderID/useThunderID';\nimport useTranslation from '../../../../../hooks/useTranslation';\nimport {useOAuthCallback} from '../../../../../hooks/v2/useOAuthCallback';\nimport {initiateOAuthRedirect} from '../../../../../utils/oauth';\nimport {extractErrorMessage, normalizeFlowResponse} from '../../../../../utils/v2/flowTransformer';\nimport {handlePasskeyAuthentication, handlePasskeyRegistration} from '../../../../../utils/v2/passkey';\n\n/**\n * Render props function parameters\n */\nexport interface SignInRenderProps {\n  /**\n   * Additional data from the flow response containing contextual information\n   * like consent prompt details and session timeouts.\n   */\n  additionalData?: Record<string, any>;\n\n  /**\n   * Current flow components\n   */\n  components: EmbeddedFlowComponent[];\n\n  /**\n   * Current error if any\n   */\n  error: Error | null;\n\n  /**\n   * Function to manually initialize the flow\n   */\n  initialize: () => Promise<void>;\n\n  /**\n   * Whether the flow has been initialized\n   */\n  isInitialized: boolean;\n\n  /**\n   * Loading state indicator\n   */\n  isLoading: boolean;\n\n  /**\n   * Flag indicating whether the flow step timeout has expired.\n   * Consuming components can use this to disable submit buttons.\n   */\n  isTimeoutDisabled?: boolean;\n\n  /**\n   * Flow metadata returned by the platform (v2 only). `null` while loading or unavailable.\n   */\n  meta: FlowMetadataResponse | null;\n\n  /**\n   * Function to submit authentication data (primary)\n   */\n  onSubmit: (payload: EmbeddedSignInFlowRequestV2) => Promise<void>;\n}\n\n/**\n * Props for the SignIn component.\n * Matches the interface from the main SignIn component for consistency.\n */\nexport interface SignInProps {\n  /**\n   * Render props function for custom UI\n   */\n  children?: (props: SignInRenderProps) => ReactNode;\n\n  /**\n   * Custom CSS class name for the form container.\n   */\n  className?: string;\n\n  /**\n   * Callback function called when authentication fails.\n   * @param error - The error that occurred during authentication.\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Callback function called when authentication is successful.\n   * @param authData - The authentication data returned upon successful completion.\n   */\n  onSuccess?: (authData: Record<string, any>) => void;\n\n  /**\n   * Component-level preferences to override global i18n and theme settings.\n   * Preferences are deep-merged with global ones, with component preferences\n   * taking precedence. Affects this component and all its descendants.\n   */\n  preferences?: Preferences;\n\n  /**\n   * Size variant for the component.\n   */\n  size?: 'small' | 'medium' | 'large';\n\n  /**\n   * Theme variant for the component.\n   */\n  variant?: BaseSignInProps['variant'];\n}\n\n/**\n * State for tracking passkey registration\n */\ninterface PasskeyState {\n  actionId: string | null;\n  challenge: string | null;\n  creationOptions: string | null;\n  error: Error | null;\n  executionId: string | null;\n  isActive: boolean;\n}\n\n/**\n * A component-driven SignIn component that provides authentication flow with pre-built styling.\n * This component handles the flow API calls for authentication and delegates UI logic to BaseSignIn.\n * It automatically transforms simple input-based responses into component-driven UI format.\n *\n * @example\n * // Default UI\n * ```tsx\n * import { SignIn } from '@thunderid/react/component-driven';\n *\n * const App = () => {\n *   return (\n *     <SignIn\n *       onSuccess={(authData) => {\n *         console.log('Authentication successful:', authData);\n *       }}\n *       onError={(error) => {\n *         console.error('Authentication failed:', error);\n *       }}\n *       size=\"medium\"\n *       variant=\"outlined\"\n *     />\n *   );\n * };\n * ```\n *\n * @example\n * // Custom UI with render props\n * ```tsx\n * import { SignIn } from '@thunderid/react/component-driven';\n *\n * const App = () => {\n *   return (\n *     <SignIn\n *       onSuccess={(authData) => console.log('Success:', authData)}\n *       onError={(error) => console.error('Error:', error)}\n *     >\n *       {({signIn, isLoading, components, error, isInitialized}) => (\n *         <div className=\"custom-signin\">\n *           <h1>Custom Sign In</h1>\n *           {!isInitialized ? (\n *             <p>Initializing...</p>\n *           ) : error ? (\n *             <div className=\"error\">{error.message}</div>\n *           ) : (\n *             <form onSubmit={(e) => {\n *               e.preventDefault();\n *               signIn({inputs: {username: 'user', password: 'pass'}});\n *             }}>\n *               <button type=\"submit\" disabled={isLoading}>\n *                 {isLoading ? 'Signing in...' : 'Sign In'}\n *               </button>\n *             </form>\n *           )}\n *         </div>\n *       )}\n *     </SignIn>\n *   );\n * };\n * ```\n */\nconst SignIn: FC<SignInProps> = ({\n  className,\n  preferences,\n  size = 'medium',\n  onSuccess,\n  onError,\n  variant,\n  children,\n}: SignInProps): ReactElement => {\n  const {applicationId, afterSignInUrl, signIn, isInitialized, isLoading, meta, getStorageManager, scopes} =\n    useThunderID();\n  const {t} = useTranslation(preferences?.i18n);\n\n  // State management for the flow\n  const [components, setComponents] = useState<EmbeddedFlowComponent[]>([]);\n  const [additionalData, setAdditionalData] = useState<Record<string, any>>({});\n  const [currentExecutionId, setCurrentExecutionId] = useState<string | null>(null);\n  const challengeTokenRef: any = useRef<string | null>(null);\n  const [isStorageReady, setIsStorageReady] = useState(false);\n  const [isFlowInitialized, setIsFlowInitialized] = useState(false);\n  const [flowError, setFlowError] = useState<Error | null>(null);\n  const [isSubmitting, setIsSubmitting] = useState(false);\n  const [isTimeoutDisabled, setIsTimeoutDisabled] = useState<boolean>(false);\n  const [passkeyState, setPasskeyState] = useState<PasskeyState>({\n    actionId: null,\n    challenge: null,\n    creationOptions: null,\n    error: null,\n    executionId: null,\n    isActive: false,\n  });\n  const initializationAttemptedRef: any = useRef(false);\n  const oauthCodeProcessedRef: any = useRef(false);\n  const passkeyProcessedRef: any = useRef(false);\n  /**\n   * Sets executionId between sessionStorage and state.\n   * This ensures both are always in sync.\n   */\n  const setExecutionId = (executionId: string | null): void => {\n    setCurrentExecutionId(executionId);\n    if (executionId) {\n      sessionStorage.setItem('thunderid_execution_id', executionId);\n    } else {\n      sessionStorage.removeItem('thunderid_execution_id');\n    }\n  };\n\n  /**\n   * Restore any challenge token persisted before an OAuth redirect.\n   * Waits for SDK initialization before reading from storage.\n   */\n  useEffect(() => {\n    if (!isInitialized) return;\n\n    (async (): Promise<void> => {\n      try {\n        const storageManager: any = await getStorageManager();\n        const tempData: any = await storageManager?.getTemporaryData();\n        if (tempData?.challengeToken) {\n          challengeTokenRef.current = tempData.challengeToken as string;\n        }\n      } finally {\n        setIsStorageReady(true);\n      }\n    })();\n  }, [isInitialized]);\n\n  /**\n   * Updates challengeTokenRef immediately (stale-closure safe) and persists via\n   * the provider's StorageManager so the token survives OAuth redirects.\n   */\n  const setChallengeToken = async (challengeToken: string | null): Promise<void> => {\n    challengeTokenRef.current = challengeToken;\n    try {\n      const storageManager: any = await getStorageManager();\n      if (storageManager) {\n        if (challengeToken) {\n          await storageManager.setTemporaryDataParameter('challengeToken', challengeToken);\n        } else {\n          await storageManager.removeTemporaryDataParameter('challengeToken');\n        }\n      }\n    } catch {\n      logger.warn('Failed to persist challenge token in storage.');\n    }\n  };\n\n  /**\n   * Clear all flow-related storage and state.\n   */\n  const clearFlowState = async (): Promise<void> => {\n    setExecutionId(null);\n    await setChallengeToken(null);\n    setIsFlowInitialized(false);\n    try {\n      const storageManager: any = await getStorageManager();\n      await storageManager?.removeHybridDataParameter?.('authId');\n    } catch {\n      logger.warn('Failed to clear authId from hybrid storage.');\n    }\n    setIsTimeoutDisabled(false);\n    // Reset refs to allow new flows to start properly\n    oauthCodeProcessedRef.current = false;\n  };\n\n  /**\n   * Parse URL parameters used in flows.\n   */\n  const getUrlParams = (): any => {\n    const urlParams: any = new URL(window?.location?.href ?? '').searchParams;\n\n    return {\n      applicationId: urlParams.get('applicationId'),\n      authId: urlParams.get('authId'),\n      code: urlParams.get('code'),\n      error: urlParams.get('error'),\n      errorDescription: urlParams.get('error_description'),\n      executionId: urlParams.get('executionId'),\n      nonce: urlParams.get('nonce'),\n      state: urlParams.get('state'),\n    };\n  };\n\n  /**\n   * Handle authId from URL and store it in sessionStorage.\n   */\n  const handleAuthId = async (authId: string | null): Promise<void> => {\n    if (authId) {\n      try {\n        const storageManager: any = await getStorageManager();\n        await storageManager?.setHybridDataParameter?.('authId', authId);\n      } catch {\n        logger.warn('Failed to store authId in hybrid storage.');\n      }\n    }\n  };\n\n  /**\n   * Clean up OAuth-related URL parameters from the browser URL.\n   */\n  const cleanupOAuthUrlParams = (includeNonce = false): void => {\n    if (!window?.location?.href) return;\n    const url: any = new URL(window.location.href);\n    url.searchParams.delete('error');\n    url.searchParams.delete('error_description');\n    url.searchParams.delete('code');\n    url.searchParams.delete('state');\n    if (includeNonce) {\n      url.searchParams.delete('nonce');\n    }\n    window?.history?.replaceState({}, '', url.toString());\n  };\n\n  /**\n   * Clean up flow-related URL parameters (executionId, authId) from the browser URL.\n   * Used after executionId is set in state to prevent using invalidated executionId from URL.\n   */\n  const cleanupFlowUrlParams = (): void => {\n    if (!window?.location?.href) return;\n    const url: any = new URL(window.location.href);\n    url.searchParams.delete('executionId');\n    url.searchParams.delete('authId');\n    url.searchParams.delete('applicationId');\n    window?.history?.replaceState({}, '', url.toString());\n  };\n\n  /**\n   * Set error state and call onError callback.\n   * Ensures isFlowInitialized is true so errors can be displayed in the UI.\n   */\n  const setError = (error: Error): void => {\n    setFlowError(error);\n    setIsFlowInitialized(true);\n    onError?.(error);\n  };\n\n  /**\n   * Handle OAuth error from URL parameters.\n   * Clears flow state, creates error, and cleans up URL.\n   */\n  const handleOAuthError = (error: string, errorDescription: string | null): void => {\n    clearFlowState();\n    const errorMessage: any = errorDescription || `OAuth error: ${error}`;\n    const err: any = new ThunderIDRuntimeError(errorMessage, 'SIGN_IN_ERROR', 'react');\n    setError(err);\n    cleanupOAuthUrlParams(true);\n  };\n\n  /**\n   * Handle REDIRECTION response by storing flow state and redirecting to OAuth provider.\n   */\n  const handleRedirection = async (response: EmbeddedSignInFlowResponseV2): Promise<boolean> => {\n    if (response.type === EmbeddedSignInFlowTypeV2.Redirection) {\n      const redirectURL: any = (response.data as any)?.redirectURL || (response as any)?.redirectURL;\n\n      if (redirectURL && window?.location) {\n        if (response.executionId) {\n          setExecutionId(response.executionId);\n        }\n        await setChallengeToken(response.challengeToken ?? null);\n\n        const urlParams: any = getUrlParams();\n        handleAuthId(urlParams.authId);\n\n        initiateOAuthRedirect(redirectURL);\n        return true;\n      }\n    }\n    return false;\n  };\n\n  /**\n   * Initialize the authentication flow.\n   * Priority: executionId > applicationId (from context) > applicationId (from URL)\n   */\n  const initializeFlow = async (): Promise<void> => {\n    const urlParams: any = getUrlParams();\n\n    // Reset OAuth code processed ref when starting a new flow\n    oauthCodeProcessedRef.current = false;\n\n    handleAuthId(urlParams.authId);\n\n    const effectiveApplicationId: any = applicationId || urlParams.applicationId;\n\n    if (!urlParams.executionId && !effectiveApplicationId) {\n      const error: any = new ThunderIDRuntimeError(\n        'Either executionId or applicationId is required for authentication',\n        'SIGN_IN_ERROR',\n        'react',\n      );\n      setError(error);\n      throw error;\n    }\n\n    try {\n      setFlowError(null);\n\n      let response: EmbeddedSignInFlowResponseV2;\n\n      if (urlParams.executionId) {\n        response = (await signIn({\n          executionId: urlParams.executionId,\n          ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n        })) as EmbeddedSignInFlowResponseV2;\n      } else {\n        response = (await signIn({\n          applicationId: effectiveApplicationId,\n          flowType: EmbeddedFlowType.Authentication,\n          ...(scopes && {scopes}),\n        })) as EmbeddedSignInFlowResponseV2;\n      }\n\n      if (await handleRedirection(response)) {\n        return;\n      }\n\n      const {\n        executionId: normalizedExecutionId,\n        components: normalizedComponents,\n        additionalData: normalizedAdditionalData,\n      } = normalizeFlowResponse(\n        response,\n        t,\n        {\n          resolveTranslations: false,\n        },\n        meta,\n      );\n\n      await setChallengeToken(response.challengeToken ?? null);\n\n      if (normalizedExecutionId && normalizedComponents) {\n        setExecutionId(normalizedExecutionId);\n        setComponents(normalizedComponents);\n        setAdditionalData(normalizedAdditionalData ?? {});\n        setIsFlowInitialized(true);\n        setIsTimeoutDisabled(false);\n        // Clean up executionId from URL after setting it in state\n        cleanupFlowUrlParams();\n      }\n    } catch (error) {\n      const err: any = error;\n      await clearFlowState();\n\n      setError(err instanceof ThunderIDRuntimeError ? err : new Error(extractErrorMessage(err, t)));\n      initializationAttemptedRef.current = false;\n    }\n  };\n\n  /**\n   * Initialize the flow and handle cleanup of stale flow state.\n   */\n  useEffect(() => {\n    const urlParams: any = getUrlParams();\n\n    // Check for OAuth error in URL\n    if (urlParams.error) {\n      handleOAuthError(urlParams.error, urlParams.errorDescription);\n      return;\n    }\n\n    handleAuthId(urlParams.authId);\n\n    // Skip OAuth code processing - let the dedicated OAuth useEffect handle it\n    // No action needed here as the dedicated useEffect will handle it\n  }, []);\n\n  useEffect(() => {\n    // Only initialize if we're not processing an OAuth callback or submission\n    const currentUrlParams: any = getUrlParams();\n    if (\n      isInitialized &&\n      !isLoading &&\n      isStorageReady &&\n      !isFlowInitialized &&\n      !initializationAttemptedRef.current &&\n      !currentExecutionId &&\n      !currentUrlParams.code &&\n      !currentUrlParams.state &&\n      !isSubmitting &&\n      !oauthCodeProcessedRef.current\n    ) {\n      initializationAttemptedRef.current = true;\n      initializeFlow();\n    }\n  }, [isInitialized, isLoading, isStorageReady, isFlowInitialized, currentExecutionId]);\n\n  /**\n   * Handle step timeout if configured in additionalData.\n   */\n  useEffect(() => {\n    const timeoutMs: number = Number(additionalData?.['stepTimeout']) || 0;\n    if (timeoutMs <= 0 || !isFlowInitialized) {\n      setIsTimeoutDisabled(false);\n      return undefined;\n    }\n\n    const remaining: number = Math.max(0, Math.floor((timeoutMs - Date.now()) / 1000));\n\n    const handleTimeout = (): void => {\n      const errorMessage: string = t('errors.signin.timeout') || 'Time allowed to complete the step has expired.';\n      setError(new Error(errorMessage));\n      setIsTimeoutDisabled(true);\n    };\n\n    if (remaining <= 0) {\n      handleTimeout();\n      return undefined;\n    }\n\n    const timerId: any = setTimeout(() => {\n      handleTimeout();\n    }, remaining * 1000);\n\n    return () => clearTimeout(timerId);\n  }, [additionalData?.['stepTimeout'], isFlowInitialized, t]);\n\n  /**\n   * Handle form submission from BaseSignIn or render props.\n   */\n  const handleSubmit = async (payload: EmbeddedSignInFlowRequestV2): Promise<void> => {\n    // Use executionId from payload if available, otherwise fall back to currentExecutionId\n    const effectiveExecutionId: any = payload.executionId || currentExecutionId;\n\n    if (!effectiveExecutionId) {\n      throw new Error('No active flow ID');\n    }\n\n    const processedInputs: Record<string, any> = {...payload.inputs};\n\n    // Auto-compile consent decisions if we are currently on a consent prompt step\n    if (additionalData?.['consentPrompt']) {\n      try {\n        const consentPromptRawData: any = additionalData['consentPrompt'];\n        const purposes: any[] =\n          typeof consentPromptRawData === 'string'\n            ? JSON.parse(consentPromptRawData)\n            : consentPromptRawData.purposes || consentPromptRawData;\n\n        // Find the action component to determine if it was a deny action\n        let isDeny = false;\n        if (payload.action) {\n          // Flatten components to find the action\n          const findAction = (comps: any[]): any => {\n            if (!comps || comps.length === 0) return null;\n\n            const found: any = comps.find((c: any) => c.id === payload.action);\n            if (found) return found;\n\n            return comps.reduce((acc: any, c: any) => {\n              if (acc) return acc;\n              if (c.components) return findAction(c.components);\n              return null;\n            }, null);\n          };\n\n          const submitAction: any = findAction(components);\n\n          if (submitAction && submitAction.variant?.toLowerCase() !== 'primary') {\n            isDeny = true;\n          }\n        }\n\n        const decisions: any = {\n          purposes: purposes.map((p: any) => ({\n            approved: !isDeny,\n            elements: [\n              ...(p.essential || []).map((e: any) => ({\n                approved: !isDeny,\n                name: e.name,\n              })),\n              ...(p.optional || []).map((e: any) => {\n                const key = `__consent_opt__${p.purposeId}__${e.name}`;\n                return {\n                  approved: isDeny ? false : processedInputs[key] !== 'false',\n                  name: e.name,\n                };\n              }),\n            ],\n            purposeName: p.purposeName,\n          })),\n        };\n        processedInputs['consent_decisions'] = JSON.stringify(decisions);\n\n        // Cleanup temporary consent tracking fields from inputs\n        Object.keys(processedInputs).forEach((key: string) => {\n          if (key.startsWith('__consent_opt__')) {\n            delete processedInputs[key];\n          }\n        });\n      } catch (e) {\n        // Failed to construct consent_decisions payload automatically\n      }\n    }\n\n    try {\n      setIsSubmitting(true);\n      setFlowError(null);\n\n      const response: EmbeddedSignInFlowResponseV2 = (await signIn({\n        executionId: effectiveExecutionId,\n        ...payload,\n        inputs: processedInputs,\n        ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n      })) as EmbeddedSignInFlowResponseV2;\n\n      if (await handleRedirection(response)) {\n        return;\n      }\n      if (\n        response.data?.additionalData?.['passkeyChallenge'] ||\n        response.data?.additionalData?.['passkeyCreationOptions']\n      ) {\n        const {passkeyChallenge, passkeyCreationOptions}: any = response.data.additionalData;\n        const effectiveExecutionIdForPasskey: any = response.executionId || effectiveExecutionId;\n\n        // Reset passkey processed ref to allow processing\n        passkeyProcessedRef.current = false;\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Set passkey state to trigger the passkey\n        setPasskeyState({\n          actionId: 'submit',\n          challenge: passkeyChallenge,\n          creationOptions: passkeyCreationOptions,\n          error: null,\n          executionId: effectiveExecutionIdForPasskey,\n          isActive: true,\n        });\n        setIsSubmitting(false);\n\n        return;\n      }\n\n      const {\n        executionId: normalizedExecutionId,\n        components: normalizedComponents,\n        additionalData: normalizedAdditionalData,\n      } = normalizeFlowResponse(\n        response,\n        t,\n        {\n          resolveTranslations: false,\n        },\n        meta,\n      );\n\n      // Handle Error flow status - flow has failed and is invalidated\n      if (response.flowStatus === EmbeddedSignInFlowStatusV2.Error) {\n        await clearFlowState();\n        const err: any = new Error(extractErrorMessage(response, t));\n        setError(err);\n        cleanupFlowUrlParams();\n        // Throw the error so it's caught by the catch block and propagated to BaseSignIn\n        throw err;\n      }\n\n      if (response.flowStatus === EmbeddedSignInFlowStatusV2.Complete) {\n        // Get redirectUrl from response (from /oauth2/auth/callback) or fall back to afterSignInUrl\n        const redirectUrl: any = (response as any)?.redirectUrl || (response as any)?.redirect_uri;\n        const finalRedirectUrl: any = redirectUrl || afterSignInUrl;\n\n        // Clear submitting state before redirect\n        setIsSubmitting(false);\n\n        // Clear all OAuth-related storage on successful completion\n        setExecutionId(null);\n        await setChallengeToken(null);\n        setIsFlowInitialized(false);\n        sessionStorage.removeItem('thunderid_execution_id');\n        try {\n          const storageManager: any = await getStorageManager();\n          await storageManager?.removeHybridDataParameter?.('authId');\n        } catch {\n          logger.warn('Failed to clear authId from hybrid storage after completion.');\n        }\n\n        // Clean up OAuth URL params before redirect\n        cleanupOAuthUrlParams(true);\n\n        if (onSuccess) {\n          onSuccess({\n            redirectUrl: finalRedirectUrl,\n            ...(response.data || {}),\n          });\n        }\n\n        if (finalRedirectUrl && window?.location) {\n          window.location.href = finalRedirectUrl;\n        }\n\n        return;\n      }\n\n      // Always update challenge token on any INCOMPLETE response — token rotates every step.\n      await setChallengeToken(response.challengeToken ?? null);\n\n      // Update executionId if response contains a new one\n      if (normalizedExecutionId && normalizedComponents) {\n        setExecutionId(normalizedExecutionId);\n        setComponents(normalizedComponents);\n        setAdditionalData(normalizedAdditionalData ?? {});\n        setIsTimeoutDisabled(false);\n        // Ensure flow is marked as initialized when we have components\n        setIsFlowInitialized(true);\n        // Clean up executionId from URL after setting it in state\n        cleanupFlowUrlParams();\n\n        // Display error from INCOMPLETE response\n        if ((response as any)?.error) {\n          setFlowError(new Error(extractErrorMessage(response, t)));\n        }\n      }\n    } catch (error) {\n      const err: any = error;\n      await clearFlowState();\n\n      setError(err instanceof ThunderIDRuntimeError ? err : new Error(extractErrorMessage(err, t)));\n      return;\n    } finally {\n      setIsSubmitting(false);\n    }\n  };\n\n  /**\n   * Handle authentication errors.\n   */\n  const handleError = (error: Error): void => {\n    setError(error);\n  };\n\n  useOAuthCallback({\n    currentExecutionId,\n    isInitialized: isInitialized && !isLoading && isStorageReady,\n    isSubmitting,\n    onError: (err: any) => {\n      clearFlowState();\n      setError(err instanceof Error ? err : new Error(String(err)));\n    },\n    onSubmit: async (payload: any) => handleSubmit({executionId: payload.executionId, inputs: payload.inputs}),\n    processedRef: oauthCodeProcessedRef,\n    setExecutionId,\n  });\n\n  /**\n   * Handle passkey authentication/registration when passkey state becomes active.\n   * This effect auto-triggers the browser passkey popup and submits the result.\n   */\n  useEffect(() => {\n    if (\n      !passkeyState.isActive ||\n      (!passkeyState.challenge && !passkeyState.creationOptions) ||\n      !passkeyState.executionId\n    ) {\n      return;\n    }\n\n    // Prevent re-processing\n    if (passkeyProcessedRef.current) {\n      return;\n    }\n    passkeyProcessedRef.current = true;\n\n    const performPasskeyProcess = async (): Promise<void> => {\n      let inputs: Record<string, string>;\n\n      if (passkeyState.challenge) {\n        const passkeyResponse: any = await handlePasskeyAuthentication(passkeyState.challenge);\n        const passkeyResponseObj: any = JSON.parse(passkeyResponse);\n\n        inputs = {\n          authenticatorData: passkeyResponseObj.response.authenticatorData,\n          clientDataJSON: passkeyResponseObj.response.clientDataJSON,\n          credentialId: passkeyResponseObj.id,\n          signature: passkeyResponseObj.response.signature,\n          userHandle: passkeyResponseObj.response.userHandle,\n        };\n      } else if (passkeyState.creationOptions) {\n        const passkeyResponse: any = await handlePasskeyRegistration(passkeyState.creationOptions);\n        const passkeyResponseObj: any = JSON.parse(passkeyResponse);\n\n        inputs = {\n          attestationObject: passkeyResponseObj.response.attestationObject,\n          clientDataJSON: passkeyResponseObj.response.clientDataJSON,\n          credentialId: passkeyResponseObj.id,\n        };\n      } else {\n        throw new Error('No passkey challenge or creation options available');\n      }\n\n      await handleSubmit({\n        executionId: passkeyState.executionId ?? undefined,\n        inputs,\n      });\n    };\n\n    performPasskeyProcess()\n      .then(() => {\n        setPasskeyState({\n          actionId: null,\n          challenge: null,\n          creationOptions: null,\n          error: null,\n          executionId: null,\n          isActive: false,\n        });\n      })\n      .catch((error: any) => {\n        setPasskeyState((prev: any) => ({...prev, error: error as Error, isActive: false}));\n        setFlowError(error as Error);\n        onError?.(error as Error);\n      });\n  }, [passkeyState.isActive, passkeyState.challenge, passkeyState.creationOptions, passkeyState.executionId]);\n\n  if (children) {\n    const renderProps: SignInRenderProps = {\n      additionalData,\n      components,\n      error: flowError,\n      initialize: initializeFlow,\n      isInitialized: isFlowInitialized,\n      isLoading: isLoading || isSubmitting || !isInitialized,\n      isTimeoutDisabled,\n      meta,\n      onSubmit: handleSubmit,\n    };\n\n    return <>{children(renderProps)}</>;\n  }\n  // Otherwise, render the default BaseSignIn component\n  return (\n    <BaseSignIn\n      additionalData={additionalData}\n      components={components}\n      isLoading={isLoading || !isInitialized || !isFlowInitialized}\n      isTimeoutDisabled={isTimeoutDisabled}\n      onSubmit={handleSubmit}\n      onError={handleError}\n      error={flowError}\n      className={className}\n      size={size}\n      variant={variant}\n      preferences={preferences}\n    />\n  );\n};\n\nexport default SignIn;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkNA,MAAMA,UAA2B,EAC/B,WACA,aACA,OAAO,UACP,WACA,SACA,SACA,eAC+B;CAC/B,MAAM,EAAC,eAAe,gBAAgB,QAAQ,eAAe,WAAW,MAAM,mBAAmB,WAC/FC,sBAAc;CAChB,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAG7C,MAAM,CAAC,YAAY,iBAAiB,SAAkC,EAAE,CAAC;CACzE,MAAM,CAAC,gBAAgB,qBAAqB,SAA8B,EAAE,CAAC;CAC7E,MAAM,CAAC,oBAAoB,yBAAyB,SAAwB,KAAK;CACjF,MAAMC,oBAAyB,OAAsB,KAAK;CAC1D,MAAM,CAAC,gBAAgB,qBAAqB,SAAS,MAAM;CAC3D,MAAM,CAAC,mBAAmB,wBAAwB,SAAS,MAAM;CACjE,MAAM,CAAC,WAAW,gBAAgB,SAAuB,KAAK;CAC9D,MAAM,CAAC,cAAc,mBAAmB,SAAS,MAAM;CACvD,MAAM,CAAC,mBAAmB,wBAAwB,SAAkB,MAAM;CAC1E,MAAM,CAAC,cAAc,mBAAmB,SAAuB;EAC7D,UAAU;EACV,WAAW;EACX,iBAAiB;EACjB,OAAO;EACP,aAAa;EACb,UAAU;EACX,CAAC;CACF,MAAMC,6BAAkC,OAAO,MAAM;CACrD,MAAMC,wBAA6B,OAAO,MAAM;CAChD,MAAMC,sBAA2B,OAAO,MAAM;;;;;CAK9C,MAAM,kBAAkB,gBAAqC;AAC3D,wBAAsB,YAAY;AAClC,MAAI,YACF,gBAAe,QAAQ,0BAA0B,YAAY;MAE7D,gBAAe,WAAW,yBAAyB;;;;;;AAQvD,iBAAgB;AACd,MAAI,CAAC,cAAe;AAEpB,GAAC,YAA2B;AAC1B,OAAI;IAEF,MAAMC,WAAgB,OADM,MAAM,mBAAmB,GACT,kBAAkB;AAC9D,QAAI,UAAU,eACZ,mBAAkB,UAAU,SAAS;aAE/B;AACR,sBAAkB,KAAK;;MAEvB;IACH,CAAC,cAAc,CAAC;;;;;CAMnB,MAAM,oBAAoB,OAAO,mBAAiD;AAChF,oBAAkB,UAAU;AAC5B,MAAI;GACF,MAAMC,iBAAsB,MAAM,mBAAmB;AACrD,OAAI,eACF,KAAI,eACF,OAAM,eAAe,0BAA0B,kBAAkB,eAAe;OAEhF,OAAM,eAAe,6BAA6B,iBAAiB;UAGjE;AACN,UAAO,KAAK,gDAAgD;;;;;;CAOhE,MAAM,iBAAiB,YAA2B;AAChD,iBAAe,KAAK;AACpB,QAAM,kBAAkB,KAAK;AAC7B,uBAAqB,MAAM;AAC3B,MAAI;AAEF,UAD4B,MAAM,mBAAmB,GAC/B,4BAA4B,SAAS;UACrD;AACN,UAAO,KAAK,8CAA8C;;AAE5D,uBAAqB,MAAM;AAE3B,wBAAsB,UAAU;;;;;CAMlC,MAAM,qBAA0B;EAC9B,MAAMC,YAAiB,IAAI,IAAI,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAE7D,SAAO;GACL,eAAe,UAAU,IAAI,gBAAgB;GAC7C,QAAQ,UAAU,IAAI,SAAS;GAC/B,MAAM,UAAU,IAAI,OAAO;GAC3B,OAAO,UAAU,IAAI,QAAQ;GAC7B,kBAAkB,UAAU,IAAI,oBAAoB;GACpD,aAAa,UAAU,IAAI,cAAc;GACzC,OAAO,UAAU,IAAI,QAAQ;GAC7B,OAAO,UAAU,IAAI,QAAQ;GAC9B;;;;;CAMH,MAAM,eAAe,OAAO,WAAyC;AACnE,MAAI,OACF,KAAI;AAEF,UAD4B,MAAM,mBAAmB,GAC/B,yBAAyB,UAAU,OAAO;UAC1D;AACN,UAAO,KAAK,4CAA4C;;;;;;CAQ9D,MAAM,yBAAyB,eAAe,UAAgB;AAC5D,MAAI,CAAC,QAAQ,UAAU,KAAM;EAC7B,MAAMC,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aAAa,OAAO,oBAAoB;AAC5C,MAAI,aAAa,OAAO,OAAO;AAC/B,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aACF,KAAI,aAAa,OAAO,QAAQ;AAElC,UAAQ,SAAS,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;;;;;CAOvD,MAAM,6BAAmC;AACvC,MAAI,CAAC,QAAQ,UAAU,KAAM;EAC7B,MAAMA,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,cAAc;AACtC,MAAI,aAAa,OAAO,SAAS;AACjC,MAAI,aAAa,OAAO,gBAAgB;AACxC,UAAQ,SAAS,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;;;;;CAOvD,MAAM,YAAY,UAAuB;AACvC,eAAa,MAAM;AACnB,uBAAqB,KAAK;AAC1B,YAAU,MAAM;;;;;;CAOlB,MAAM,oBAAoB,OAAe,qBAA0C;AACjF,kBAAgB;AAGhB,WADiB,IAAI,sBADK,oBAAoB,gBAAgB,SACL,iBAAiB,QAAQ,CACrE;AACb,wBAAsB,KAAK;;;;;CAM7B,MAAM,oBAAoB,OAAO,aAA6D;AAC5F,MAAI,SAAS,SAAS,yBAAyB,aAAa;GAC1D,MAAMC,cAAoB,SAAS,MAAc,eAAgB,UAAkB;AAEnF,OAAI,eAAe,QAAQ,UAAU;AACnC,QAAI,SAAS,YACX,gBAAe,SAAS,YAAY;AAEtC,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,iBADuB,cAAc,CACd,OAAO;AAE9B,0BAAsB,YAAY;AAClC,WAAO;;;AAGX,SAAO;;;;;;CAOT,MAAM,iBAAiB,YAA2B;EAChD,MAAMF,YAAiB,cAAc;AAGrC,wBAAsB,UAAU;AAEhC,eAAa,UAAU,OAAO;EAE9B,MAAMG,yBAA8B,iBAAiB,UAAU;AAE/D,MAAI,CAAC,UAAU,eAAe,CAAC,wBAAwB;GACrD,MAAMC,QAAa,IAAI,sBACrB,sEACA,iBACA,QACD;AACD,YAAS,MAAM;AACf,SAAM;;AAGR,MAAI;AACF,gBAAa,KAAK;GAElB,IAAIC;AAEJ,OAAI,UAAU,YACZ,YAAY,MAAM,OAAO;IACvB,aAAa,UAAU;IACvB,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF,CAAC;OAEF,YAAY,MAAM,OAAO;IACvB,eAAe;IACf,UAAU,iBAAiB;IAC3B,GAAI,UAAU,EAAC,QAAO;IACvB,CAAC;AAGJ,OAAI,MAAM,kBAAkB,SAAS,CACnC;GAGF,MAAM,EACJ,aAAa,uBACb,YAAY,sBACZ,gBAAgB,6BACd,sBACF,UACA,GACA,EACE,qBAAqB,OACtB,EACD,KACD;AAED,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAExD,OAAI,yBAAyB,sBAAsB;AACjD,mBAAe,sBAAsB;AACrC,kBAAc,qBAAqB;AACnC,sBAAkB,4BAA4B,EAAE,CAAC;AACjD,yBAAqB,KAAK;AAC1B,yBAAqB,MAAM;AAE3B,0BAAsB;;WAEjB,OAAO;GACd,MAAMC,MAAW;AACjB,SAAM,gBAAgB;AAEtB,YAAS,eAAe,wBAAwB,MAAM,IAAI,MAAM,oBAAoB,KAAK,EAAE,CAAC,CAAC;AAC7F,8BAA2B,UAAU;;;;;;AAOzC,iBAAgB;EACd,MAAMN,YAAiB,cAAc;AAGrC,MAAI,UAAU,OAAO;AACnB,oBAAiB,UAAU,OAAO,UAAU,iBAAiB;AAC7D;;AAGF,eAAa,UAAU,OAAO;IAI7B,EAAE,CAAC;AAEN,iBAAgB;EAEd,MAAMO,mBAAwB,cAAc;AAC5C,MACE,iBACA,CAAC,aACD,kBACA,CAAC,qBACD,CAAC,2BAA2B,WAC5B,CAAC,sBACD,CAAC,iBAAiB,QAClB,CAAC,iBAAiB,SAClB,CAAC,gBACD,CAAC,sBAAsB,SACvB;AACA,8BAA2B,UAAU;AACrC,mBAAgB;;IAEjB;EAAC;EAAe;EAAW;EAAgB;EAAmB;EAAmB,CAAC;;;;AAKrF,iBAAgB;EACd,MAAMC,YAAoB,OAAO,iBAAiB,eAAe,IAAI;AACrE,MAAI,aAAa,KAAK,CAAC,mBAAmB;AACxC,wBAAqB,MAAM;AAC3B;;EAGF,MAAMC,YAAoB,KAAK,IAAI,GAAG,KAAK,OAAO,YAAY,KAAK,KAAK,IAAI,IAAK,CAAC;EAElF,MAAM,sBAA4B;GAChC,MAAMC,eAAuB,EAAE,wBAAwB,IAAI;AAC3D,YAAS,IAAI,MAAM,aAAa,CAAC;AACjC,wBAAqB,KAAK;;AAG5B,MAAI,aAAa,GAAG;AAClB,kBAAe;AACf;;EAGF,MAAMC,UAAe,iBAAiB;AACpC,kBAAe;KACd,YAAY,IAAK;AAEpB,eAAa,aAAa,QAAQ;IACjC;EAAC,iBAAiB;EAAgB;EAAmB;EAAE,CAAC;;;;CAK3D,MAAM,eAAe,OAAO,YAAwD;EAElF,MAAMC,uBAA4B,QAAQ,eAAe;AAEzD,MAAI,CAAC,qBACH,OAAM,IAAI,MAAM,oBAAoB;EAGtC,MAAMC,kBAAuC,EAAC,GAAG,QAAQ,QAAO;AAGhE,MAAI,iBAAiB,iBACnB,KAAI;GACF,MAAMC,uBAA4B,eAAe;GACjD,MAAMC,WACJ,OAAO,yBAAyB,WAC5B,KAAK,MAAM,qBAAqB,GAChC,qBAAqB,YAAY;GAGvC,IAAI,SAAS;AACb,OAAI,QAAQ,QAAQ;IAElB,MAAM,cAAc,UAAsB;AACxC,SAAI,CAAC,SAAS,MAAM,WAAW,EAAG,QAAO;KAEzC,MAAMC,QAAa,MAAM,MAAM,MAAW,EAAE,OAAO,QAAQ,OAAO;AAClE,SAAI,MAAO,QAAO;AAElB,YAAO,MAAM,QAAQ,KAAU,MAAW;AACxC,UAAI,IAAK,QAAO;AAChB,UAAI,EAAE,WAAY,QAAO,WAAW,EAAE,WAAW;AACjD,aAAO;QACN,KAAK;;IAGV,MAAMC,eAAoB,WAAW,WAAW;AAEhD,QAAI,gBAAgB,aAAa,SAAS,aAAa,KAAK,UAC1D,UAAS;;GAIb,MAAMC,YAAiB,EACrB,UAAU,SAAS,KAAK,OAAY;IAClC,UAAU,CAAC;IACX,UAAU,CACR,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAY;KACtC,UAAU,CAAC;KACX,MAAM,EAAE;KACT,EAAE,EACH,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,MAAW;KACpC,MAAM,MAAM,kBAAkB,EAAE,UAAU,IAAI,EAAE;AAChD,YAAO;MACL,UAAU,SAAS,QAAQ,gBAAgB,SAAS;MACpD,MAAM,EAAE;MACT;MACD,CACH;IACD,aAAa,EAAE;IAChB,EAAE,EACJ;AACD,mBAAgB,uBAAuB,KAAK,UAAU,UAAU;AAGhE,UAAO,KAAK,gBAAgB,CAAC,SAAS,QAAgB;AACpD,QAAI,IAAI,WAAW,kBAAkB,CACnC,QAAO,gBAAgB;KAEzB;WACK,GAAG;AAKd,MAAI;AACF,mBAAgB,KAAK;AACrB,gBAAa,KAAK;GAElB,MAAMb,WAA0C,MAAM,OAAO;IAC3D,aAAa;IACb,GAAG;IACH,QAAQ;IACR,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF,CAAC;AAEF,OAAI,MAAM,kBAAkB,SAAS,CACnC;AAEF,OACE,SAAS,MAAM,iBAAiB,uBAChC,SAAS,MAAM,iBAAiB,2BAChC;IACA,MAAM,EAAC,kBAAkB,2BAA+B,SAAS,KAAK;IACtE,MAAMc,iCAAsC,SAAS,eAAe;AAGpE,wBAAoB,UAAU;AAE9B,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,oBAAgB;KACd,UAAU;KACV,WAAW;KACX,iBAAiB;KACjB,OAAO;KACP,aAAa;KACb,UAAU;KACX,CAAC;AACF,oBAAgB,MAAM;AAEtB;;GAGF,MAAM,EACJ,aAAa,uBACb,YAAY,sBACZ,gBAAgB,6BACd,sBACF,UACA,GACA,EACE,qBAAqB,OACtB,EACD,KACD;AAGD,OAAI,SAAS,eAAe,2BAA2B,OAAO;AAC5D,UAAM,gBAAgB;IACtB,MAAMb,MAAW,IAAI,MAAM,oBAAoB,UAAU,EAAE,CAAC;AAC5D,aAAS,IAAI;AACb,0BAAsB;AAEtB,UAAM;;AAGR,OAAI,SAAS,eAAe,2BAA2B,UAAU;IAG/D,MAAMc,mBADoB,UAAkB,eAAgB,UAAkB,gBACjC;AAG7C,oBAAgB,MAAM;AAGtB,mBAAe,KAAK;AACpB,UAAM,kBAAkB,KAAK;AAC7B,yBAAqB,MAAM;AAC3B,mBAAe,WAAW,yBAAyB;AACnD,QAAI;AAEF,YAD4B,MAAM,mBAAmB,GAC/B,4BAA4B,SAAS;YACrD;AACN,YAAO,KAAK,+DAA+D;;AAI7E,0BAAsB,KAAK;AAE3B,QAAI,UACF,WAAU;KACR,aAAa;KACb,GAAI,SAAS,QAAQ,EAAE;KACxB,CAAC;AAGJ,QAAI,oBAAoB,QAAQ,SAC9B,QAAO,SAAS,OAAO;AAGzB;;AAIF,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,OAAI,yBAAyB,sBAAsB;AACjD,mBAAe,sBAAsB;AACrC,kBAAc,qBAAqB;AACnC,sBAAkB,4BAA4B,EAAE,CAAC;AACjD,yBAAqB,MAAM;AAE3B,yBAAqB,KAAK;AAE1B,0BAAsB;AAGtB,QAAK,UAAkB,MACrB,cAAa,IAAI,MAAM,oBAAoB,UAAU,EAAE,CAAC,CAAC;;WAGtD,OAAO;GACd,MAAMd,MAAW;AACjB,SAAM,gBAAgB;AAEtB,YAAS,eAAe,wBAAwB,MAAM,IAAI,MAAM,oBAAoB,KAAK,EAAE,CAAC,CAAC;AAC7F;YACQ;AACR,mBAAgB,MAAM;;;;;;CAO1B,MAAM,eAAe,UAAuB;AAC1C,WAAS,MAAM;;AAGjB,kBAAiB;EACf;EACA,eAAe,iBAAiB,CAAC,aAAa;EAC9C;EACA,UAAU,QAAa;AACrB,mBAAgB;AAChB,YAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,CAAC;;EAE/D,UAAU,OAAO,YAAiB,aAAa;GAAC,aAAa,QAAQ;GAAa,QAAQ,QAAQ;GAAO,CAAC;EAC1G,cAAc;EACd;EACD,CAAC;;;;;AAMF,iBAAgB;AACd,MACE,CAAC,aAAa,YACb,CAAC,aAAa,aAAa,CAAC,aAAa,mBAC1C,CAAC,aAAa,YAEd;AAIF,MAAI,oBAAoB,QACtB;AAEF,sBAAoB,UAAU;EAE9B,MAAM,wBAAwB,YAA2B;GACvD,IAAIe;AAEJ,OAAI,aAAa,WAAW;IAC1B,MAAMC,kBAAuB,MAAM,4BAA4B,aAAa,UAAU;IACtF,MAAMC,qBAA0B,KAAK,MAAM,gBAAgB;AAE3D,aAAS;KACP,mBAAmB,mBAAmB,SAAS;KAC/C,gBAAgB,mBAAmB,SAAS;KAC5C,cAAc,mBAAmB;KACjC,WAAW,mBAAmB,SAAS;KACvC,YAAY,mBAAmB,SAAS;KACzC;cACQ,aAAa,iBAAiB;IACvC,MAAMD,kBAAuB,MAAM,0BAA0B,aAAa,gBAAgB;IAC1F,MAAMC,qBAA0B,KAAK,MAAM,gBAAgB;AAE3D,aAAS;KACP,mBAAmB,mBAAmB,SAAS;KAC/C,gBAAgB,mBAAmB,SAAS;KAC5C,cAAc,mBAAmB;KAClC;SAED,OAAM,IAAI,MAAM,qDAAqD;AAGvE,SAAM,aAAa;IACjB,aAAa,aAAa,eAAe;IACzC;IACD,CAAC;;AAGJ,yBAAuB,CACpB,WAAW;AACV,mBAAgB;IACd,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,OAAO;IACP,aAAa;IACb,UAAU;IACX,CAAC;IACF,CACD,OAAO,UAAe;AACrB,oBAAiB,UAAe;IAAC,GAAG;IAAa;IAAgB,UAAU;IAAM,EAAE;AACnF,gBAAa,MAAe;AAC5B,aAAU,MAAe;IACzB;IACH;EAAC,aAAa;EAAU,aAAa;EAAW,aAAa;EAAiB,aAAa;EAAY,CAAC;AAE3G,KAAI,SAaF,QAAO,0CAAG,SAZ6B;EACrC;EACA;EACA,OAAO;EACP,YAAY;EACZ,eAAe;EACf,WAAW,aAAa,gBAAgB,CAAC;EACzC;EACA;EACA,UAAU;EACX,CAE8B,GAAI;AAGrC,QACE,oBAACC;EACiB;EACJ;EACZ,WAAW,aAAa,CAAC,iBAAiB,CAAC;EACxB;EACnB,UAAU;EACV,SAAS;EACT,OAAO;EACI;EACL;EACG;EACI;GACb;;AAIN,qBAAe"}