@thunderid/react 0.4.0 → 0.5.0

package/dist/cjs/components/presentation/auth/SignIn/SignIn.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"SignIn.cjs","names":["SignIn: FC<SignInProps>","useThunderID","useTranslation","challengeTokenRef: any","initializationAttemptedRef: any","oauthCodeProcessedRef: any","passkeyProcessedRef: any","tempData: any","storageManager: any","urlParams: any","url: any","ThunderIDRuntimeError","EmbeddedSignInFlowType","redirectURL: any","EmbeddedSignInFlowStatus","err: any","extractErrorMessage","finalRedirectUrl: any","effectiveApplicationId: any","storedExecutionId: any","resumeExecutionId: any","error: any","response: EmbeddedSignInFlowResponse","ThunderIDAPIError","EmbeddedFlowType","normalizeFlowResponse","currentUrlParams: any","timeoutMs: number","remaining: number","errorMessage: string","timerId: any","effectiveExecutionId: any","processedInputs: Record<string, any>","consentPromptRawData: any","purposes: any[]","found: any","submitAction: any","decisions: any","effectiveExecutionIdForPasskey: any","responseFieldErrors: FieldError[] | undefined","inputs: Record<string, string>","passkeyResponse: any","handlePasskeyAuthentication","passkeyResponseObj: any","handlePasskeyRegistration","renderPropFieldErrors: Record<string, string>","BaseSignIn"],"sources":["../../../../../../src/components/presentation/auth/SignIn/SignIn.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025-2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  ThunderIDRuntimeError,\n  ThunderIDAPIError,\n  EmbeddedFlowComponent,\n  EmbeddedFlowType,\n  EmbeddedSignInFlowResponse,\n  EmbeddedSignInFlowRequest,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignInFlowType,\n  FieldError,\n  FlowMetadataResponse,\n  Preferences,\n  logger,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useState, useEffect, useRef, ReactNode} from 'react';\n// eslint-disable-next-line import/no-named-as-default\nimport BaseSignIn, {BaseSignInProps} from './BaseSignIn';\nimport useThunderID from '../../../../contexts/ThunderID/useThunderID';\nimport {useOAuthCallback} from '../../../../hooks/useOAuthCallback';\nimport useTranslation from '../../../../hooks/useTranslation';\nimport {extractErrorMessage, normalizeFlowResponse} from '../../../../utils/flowTransformer';\nimport {initiateOAuthRedirect} from '../../../../utils/oauth';\nimport {handlePasskeyAuthentication, handlePasskeyRegistration} from '../../../../utils/passkey';\n\n/**\n * Render props function parameters\n */\nexport interface SignInRenderProps {\n  /**\n   * Additional data from the flow response containing contextual information\n   * like consent prompt details and session timeouts.\n   */\n  additionalData?: Record<string, any>;\n\n  /**\n   * Current flow components\n   */\n  components: EmbeddedFlowComponent[];\n\n  /**\n   * Current error if any\n   */\n  error: Error | null;\n\n  /**\n   * Server-side field-level validation errors from the most recent flow response,\n   * collapsed to one message per field (first error wins). Empty when no validation\n   * failures are active. Render-prop consumers should display these alongside their\n   * own client-side validation errors.\n   */\n  fieldErrors: Record<string, string>;\n\n  /**\n   * Function to manually initialize the flow\n   */\n  initialize: () => Promise<void>;\n\n  /**\n   * Whether the flow has been initialized\n   */\n  isInitialized: boolean;\n\n  /**\n   * Loading state indicator\n   */\n  isLoading: boolean;\n\n  /**\n   * Flag indicating whether the flow step timeout has expired.\n   * Consuming components can use this to disable submit buttons.\n   */\n  isTimeoutDisabled?: boolean;\n\n  /**\n   * Flow metadata returned by the platform (v2 only). `null` while loading or unavailable.\n   */\n  meta: FlowMetadataResponse | null;\n\n  /**\n   * Function to submit authentication data (primary)\n   */\n  onSubmit: (payload: EmbeddedSignInFlowRequest) => Promise<void>;\n}\n\n/**\n * Props for the SignIn component.\n * Matches the interface from the main SignIn component for consistency.\n */\nexport interface SignInProps {\n  /**\n   * Render props function for custom UI\n   */\n  children?: (props: SignInRenderProps) => ReactNode;\n\n  /**\n   * Custom CSS class name for the form container.\n   */\n  className?: string;\n\n  /**\n   * Callback function called when authentication fails.\n   * @param error - The error that occurred during authentication.\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Callback function called when authentication is successful.\n   * @param authData - The authentication data returned upon successful completion.\n   */\n  onSuccess?: (authData: Record<string, any>) => void;\n\n  /**\n   * Component-level preferences to override global i18n and theme settings.\n   * Preferences are deep-merged with global ones, with component preferences\n   * taking precedence. Affects this component and all its descendants.\n   */\n  preferences?: Preferences;\n\n  /**\n   * Size variant for the component.\n   */\n  size?: 'small' | 'medium' | 'large';\n\n  /**\n   * Theme variant for the component.\n   */\n  variant?: BaseSignInProps['variant'];\n}\n\n/**\n * State for tracking passkey registration\n */\ninterface PasskeyState {\n  actionId: string | null;\n  challenge: string | null;\n  creationOptions: string | null;\n  error: Error | null;\n  executionId: string | null;\n  isActive: boolean;\n}\n\n/**\n * A component-driven SignIn component that provides authentication flow with pre-built styling.\n * This component handles the flow API calls for authentication and delegates UI logic to BaseSignIn.\n * It automatically transforms simple input-based responses into component-driven UI format.\n *\n * @example\n * // Default UI\n * ```tsx\n * import { SignIn } from '@thunderid/react/component-driven';\n *\n * const App = () => {\n *   return (\n *     <SignIn\n *       onSuccess={(authData) => {\n *         console.log('Authentication successful:', authData);\n *       }}\n *       onError={(error) => {\n *         console.error('Authentication failed:', error);\n *       }}\n *       size=\"medium\"\n *       variant=\"outlined\"\n *     />\n *   );\n * };\n * ```\n *\n * @example\n * // Custom UI with render props\n * ```tsx\n * import { SignIn } from '@thunderid/react/component-driven';\n *\n * const App = () => {\n *   return (\n *     <SignIn\n *       onSuccess={(authData) => console.log('Success:', authData)}\n *       onError={(error) => console.error('Error:', error)}\n *     >\n *       {({signIn, isLoading, components, error, isInitialized}) => (\n *         <div className=\"custom-signin\">\n *           <h1>Custom Sign In</h1>\n *           {!isInitialized ? (\n *             <p>Initializing...</p>\n *           ) : error ? (\n *             <div className=\"error\">{error.message}</div>\n *           ) : (\n *             <form onSubmit={(e) => {\n *               e.preventDefault();\n *               signIn({inputs: {username: 'user', password: 'pass'}});\n *             }}>\n *               <button type=\"submit\" disabled={isLoading}>\n *                 {isLoading ? 'Signing in...' : 'Sign In'}\n *               </button>\n *             </form>\n *           )}\n *         </div>\n *       )}\n *     </SignIn>\n *   );\n * };\n * ```\n */\nconst SignIn: FC<SignInProps> = ({\n  className,\n  preferences,\n  size = 'medium',\n  onSuccess,\n  onError,\n  variant,\n  children,\n}: SignInProps): ReactElement => {\n  const {applicationId, afterSignInUrl, signIn, isInitialized, isLoading, meta, getStorageManager, scopes} =\n    useThunderID();\n  const {t} = useTranslation(preferences?.i18n);\n\n  // State management for the flow\n  const [components, setComponents] = useState<EmbeddedFlowComponent[]>([]);\n  const [additionalData, setAdditionalData] = useState<Record<string, any>>({});\n  // Server-side validation errors from the most recent flow response. Updated on every\n  // submission; cleared when the next submission begins so stale errors don't linger.\n  const [serverFieldErrors, setServerFieldErrors] = useState<FieldError[] | null>(null);\n  const [currentExecutionId, setCurrentExecutionId] = useState<string | null>(null);\n  const challengeTokenRef: any = useRef<string | null>(null);\n  const [isStorageReady, setIsStorageReady] = useState(false);\n  const [isFlowInitialized, setIsFlowInitialized] = useState(false);\n  const [flowError, setFlowError] = useState<Error | null>(null);\n  const [isSubmitting, setIsSubmitting] = useState(false);\n  const [isTimeoutDisabled, setIsTimeoutDisabled] = useState<boolean>(false);\n  const [passkeyState, setPasskeyState] = useState<PasskeyState>({\n    actionId: null,\n    challenge: null,\n    creationOptions: null,\n    error: null,\n    executionId: null,\n    isActive: false,\n  });\n  const initializationAttemptedRef: any = useRef(false);\n  const oauthCodeProcessedRef: any = useRef(false);\n  const passkeyProcessedRef: any = useRef(false);\n  /**\n   * Sets executionId between sessionStorage and state.\n   * This ensures both are always in sync.\n   */\n  const setExecutionId = (executionId: string | null): void => {\n    setCurrentExecutionId(executionId);\n    if (executionId) {\n      sessionStorage.setItem('thunderid_execution_id', executionId);\n    } else {\n      sessionStorage.removeItem('thunderid_execution_id');\n    }\n  };\n\n  /**\n   * Restore any challenge token persisted before an OAuth redirect.\n   * Waits for SDK initialization before reading from storage.\n   */\n  useEffect(() => {\n    if (!isInitialized) return;\n\n    (async (): Promise<void> => {\n      try {\n        const storageManager: any = await getStorageManager();\n        const tempData: any = await storageManager?.getTemporaryData();\n        if (tempData?.challengeToken) {\n          challengeTokenRef.current = tempData.challengeToken as string;\n        }\n      } finally {\n        setIsStorageReady(true);\n      }\n    })();\n  }, [isInitialized]);\n\n  /**\n   * Updates challengeTokenRef immediately (stale-closure safe) and persists via\n   * the provider's StorageManager so the token survives OAuth redirects.\n   */\n  const setChallengeToken = async (challengeToken: string | null): Promise<void> => {\n    challengeTokenRef.current = challengeToken;\n    try {\n      const storageManager: any = await getStorageManager();\n      if (storageManager) {\n        if (challengeToken) {\n          await storageManager.setTemporaryDataParameter('challengeToken', challengeToken);\n        } else {\n          await storageManager.removeTemporaryDataParameter('challengeToken');\n        }\n      }\n    } catch {\n      logger.warn('Failed to persist challenge token in storage.');\n    }\n  };\n\n  /**\n   * Clear all flow-related storage and state.\n   */\n  const clearFlowState = async (): Promise<void> => {\n    setExecutionId(null);\n    await setChallengeToken(null);\n    setIsFlowInitialized(false);\n    try {\n      const storageManager: any = await getStorageManager();\n      await storageManager?.removeHybridDataParameter?.('authId');\n    } catch {\n      logger.warn('Failed to clear authId from hybrid storage.');\n    }\n    setIsTimeoutDisabled(false);\n    // Reset refs to allow new flows to start properly\n    oauthCodeProcessedRef.current = false;\n  };\n\n  /**\n   * Parse URL parameters used in flows.\n   */\n  const getUrlParams = (): any => {\n    const urlParams: any = new URL(window?.location?.href ?? '').searchParams;\n\n    return {\n      applicationId: urlParams.get('applicationId'),\n      authId: urlParams.get('authId'),\n      code: urlParams.get('code'),\n      error: urlParams.get('error'),\n      errorDescription: urlParams.get('error_description'),\n      executionId: urlParams.get('executionId'),\n      nonce: urlParams.get('nonce'),\n      state: urlParams.get('state'),\n    };\n  };\n\n  /**\n   * Handle authId from URL and persist it via the storage manager so it survives URL cleanup.\n   * ThunderIDReactClient.signIn() reads authId from storageManager.getHybridDataParameter('authId'),\n   * not from raw sessionStorage, so we must use the same storage path here.\n   */\n  const handleAuthId = async (authId: string | null): Promise<void> => {\n    if (authId) {\n      try {\n        const storageManager: any = await getStorageManager();\n        await storageManager?.setHybridDataParameter?.('authId', authId);\n      } catch {\n        logger.warn('Failed to store authId in hybrid storage.');\n      }\n    }\n  };\n\n  /**\n   * Clean up OAuth-related URL parameters from the browser URL.\n   */\n  const cleanupOAuthUrlParams = (includeNonce = false): void => {\n    if (!window?.location?.href) return;\n    const url: any = new URL(window.location.href);\n    url.searchParams.delete('error');\n    url.searchParams.delete('error_description');\n    url.searchParams.delete('code');\n    url.searchParams.delete('state');\n    if (includeNonce) {\n      url.searchParams.delete('nonce');\n    }\n    window?.history?.replaceState({}, '', url.toString());\n  };\n\n  /**\n   * Clean up flow-related URL parameters (executionId, authId) from the browser URL.\n   * Used after executionId is set in state to prevent using invalidated executionId from URL.\n   */\n  const cleanupFlowUrlParams = (): void => {\n    if (!window?.location?.href) return;\n    const url: any = new URL(window.location.href);\n    url.searchParams.delete('executionId');\n    url.searchParams.delete('authId');\n    url.searchParams.delete('applicationId');\n    window?.history?.replaceState({}, '', url.toString());\n  };\n\n  /**\n   * Set error state and call onError callback.\n   * Ensures isFlowInitialized is true so errors can be displayed in the UI.\n   */\n  const setError = (error: Error): void => {\n    setFlowError(error);\n    setIsFlowInitialized(true);\n    onError?.(error);\n  };\n\n  /**\n   * Handle OAuth error from URL parameters.\n   * Clears flow state, creates error, and cleans up URL.\n   */\n  const handleOAuthError = (error: string, errorDescription: string | null): void => {\n    clearFlowState();\n    const errorMessage: any = errorDescription || `OAuth error: ${error}`;\n    const err: any = new ThunderIDRuntimeError(errorMessage, 'SIGN_IN_ERROR', 'react');\n    setError(err);\n    cleanupOAuthUrlParams(true);\n  };\n\n  /**\n   * Handle REDIRECTION response by storing flow state and redirecting to OAuth provider.\n   */\n  const handleRedirection = async (response: EmbeddedSignInFlowResponse): Promise<boolean> => {\n    if (response.type === EmbeddedSignInFlowType.Redirection) {\n      const redirectURL: any = (response.data as any)?.redirectURL || (response as any)?.redirectURL;\n\n      if (redirectURL && window?.location) {\n        if (response.executionId) {\n          setExecutionId(response.executionId);\n        }\n        await setChallengeToken(response.challengeToken ?? null);\n\n        const urlParams: any = getUrlParams();\n        await handleAuthId(urlParams.authId);\n\n        initiateOAuthRedirect(redirectURL);\n        return true;\n      }\n    }\n    return false;\n  };\n\n  /**\n   * Handle terminal flow responses (Error and Complete) shared by initializeFlow and handleSubmit.\n   * Throws on an Error status so the caller's catch block can propagate it to BaseSignIn.\n   * Returns true when a Complete status was handled (caller should return), false otherwise.\n   */\n  const handleTerminalResponse = async (response: EmbeddedSignInFlowResponse): Promise<boolean> => {\n    // Handle Error flow status - flow has failed and is invalidated\n    if (response.flowStatus === EmbeddedSignInFlowStatus.Error) {\n      await clearFlowState();\n      const err: any = new Error(extractErrorMessage(response, t));\n      setError(err);\n      cleanupFlowUrlParams();\n      // Throw the error so it's caught by the catch block and propagated to BaseSignIn\n      throw err;\n    }\n\n    if (response.flowStatus === EmbeddedSignInFlowStatus.Complete) {\n      // Get redirectUrl from response (from /oauth2/auth/callback) or fall back to afterSignInUrl\n      const redirectUrl: any = (response as any)?.redirectUrl || (response as any)?.redirect_uri;\n      const finalRedirectUrl: any = redirectUrl || afterSignInUrl;\n\n      // Clear submitting state before redirect\n      setIsSubmitting(false);\n\n      // Clear all OAuth-related storage on successful completion\n      setExecutionId(null);\n      await setChallengeToken(null);\n      setIsFlowInitialized(false);\n      sessionStorage.removeItem('thunderid_execution_id');\n      try {\n        const storageManager: any = await getStorageManager();\n        await storageManager?.removeHybridDataParameter?.('authId');\n      } catch {\n        logger.warn('Failed to clear authId from hybrid storage after completion.');\n      }\n\n      // Clean up OAuth URL params before redirect\n      cleanupOAuthUrlParams(true);\n\n      if (onSuccess) {\n        onSuccess({\n          redirectUrl: finalRedirectUrl,\n          ...(response.data || {}),\n        });\n      }\n\n      if (finalRedirectUrl && window?.location) {\n        window.location.href = finalRedirectUrl;\n      }\n\n      return true;\n    }\n\n    return false;\n  };\n\n  /**\n   * Initialize the authentication flow.\n   * Priority: executionId > applicationId (from context) > applicationId (from URL)\n   */\n  const initializeFlow = async (): Promise<void> => {\n    const urlParams: any = getUrlParams();\n\n    // Reset OAuth code processed ref when starting a new flow\n    oauthCodeProcessedRef.current = false;\n    // Clear stale serverFieldErrors so the new flow doesn't inherit them via render-prop.\n    setServerFieldErrors(null);\n\n    await handleAuthId(urlParams.authId);\n\n    const effectiveApplicationId: any = applicationId || urlParams.applicationId;\n\n    // On a page refresh the executionId is no longer in the URL (it is scrubbed by\n    // cleanupFlowUrlParams after the first load). Fall back to the executionId persisted in\n    // sessionStorage so the in-progress flow can be resumed instead of starting a new flow.\n    // This is required for authorization_code apps where direct new-flow initiation is blocked\n    // server-side and the flow must be initiated through the OAuth /authorize endpoint.\n    const storedExecutionId: any = !urlParams.executionId ? sessionStorage.getItem('thunderid_execution_id') : null;\n    const resumeExecutionId: any = urlParams.executionId || storedExecutionId;\n\n    if (!resumeExecutionId && !effectiveApplicationId) {\n      const error: any = new ThunderIDRuntimeError(\n        'Either executionId or applicationId is required for authentication',\n        'SIGN_IN_ERROR',\n        'react',\n      );\n      setError(error);\n      throw error;\n    }\n\n    try {\n      setFlowError(null);\n\n      let response: EmbeddedSignInFlowResponse;\n\n      if (resumeExecutionId) {\n        try {\n          response = (await signIn({\n            executionId: resumeExecutionId,\n            ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n          })) as EmbeddedSignInFlowResponse;\n        } catch (resumeError) {\n          // Only treat a stale/expired session (HTTP 400 from the server, meaning the stored\n          // executionId is no longer valid) as a recoverable condition. Transient failures\n          // such as 5xx server errors or network errors are rethrown so they surface correctly.\n          const isStaleSession: boolean =\n            storedExecutionId &&\n            resumeExecutionId === storedExecutionId &&\n            resumeError instanceof ThunderIDAPIError &&\n            resumeError.statusCode === 400;\n\n          if (isStaleSession) {\n            setExecutionId(null);\n            try {\n              const storageManager: any = await getStorageManager();\n              await storageManager?.removeHybridDataParameter?.('authId');\n            } catch {\n              logger.warn('Failed to clear authId from hybrid storage.');\n            }\n            if (!effectiveApplicationId) {\n              const expiredError: any = new ThunderIDRuntimeError(\n                t('errors.signin.session.expired') ||\n                  'Your session has expired. Please return to the application and sign in again.',\n                'SIGN_IN_ERROR',\n                'react',\n              );\n              setError(expiredError);\n              return;\n            }\n            response = (await signIn({\n              applicationId: effectiveApplicationId,\n              flowType: EmbeddedFlowType.Authentication,\n              ...(scopes && {scopes}),\n            })) as EmbeddedSignInFlowResponse;\n          } else {\n            throw resumeError;\n          }\n        }\n      } else {\n        response = (await signIn({\n          applicationId: effectiveApplicationId,\n          flowType: EmbeddedFlowType.Authentication,\n          ...(scopes && {scopes}),\n        })) as EmbeddedSignInFlowResponse;\n      }\n\n      if (await handleRedirection(response)) {\n        return;\n      }\n\n      // Handle a flow that completes (or errors) on the very first step — e.g. a reused SSO\n      // session lets the backend return COMPLETE immediately with no UI components. Without\n      // this the UI would fall through with no components and spin forever.\n      if (await handleTerminalResponse(response)) {\n        return;\n      }\n\n      const {\n        executionId: normalizedExecutionId,\n        components: normalizedComponents,\n        additionalData: normalizedAdditionalData,\n      } = normalizeFlowResponse(\n        response,\n        t,\n        {\n          resolveTranslations: false,\n        },\n        meta,\n      );\n\n      await setChallengeToken(response.challengeToken ?? null);\n\n      if (normalizedExecutionId && normalizedComponents) {\n        setExecutionId(normalizedExecutionId);\n        setComponents(normalizedComponents);\n        setAdditionalData(normalizedAdditionalData ?? {});\n        setIsFlowInitialized(true);\n        setIsTimeoutDisabled(false);\n        // Clean up executionId from URL after setting it in state\n        cleanupFlowUrlParams();\n      }\n    } catch (error) {\n      const err: any = error;\n      await clearFlowState();\n\n      setError(err instanceof ThunderIDRuntimeError ? err : new Error(extractErrorMessage(err, t)));\n      initializationAttemptedRef.current = false;\n    }\n  };\n\n  /**\n   * Initialize the flow and handle cleanup of stale flow state.\n   */\n  useEffect(() => {\n    const urlParams: any = getUrlParams();\n\n    // Check for OAuth error in URL\n    if (urlParams.error) {\n      handleOAuthError(urlParams.error, urlParams.errorDescription);\n      return;\n    }\n\n    handleAuthId(urlParams.authId);\n\n    // Skip OAuth code processing - let the dedicated OAuth useEffect handle it\n    // No action needed here as the dedicated useEffect will handle it\n  }, []);\n\n  useEffect(() => {\n    // Only initialize if we're not processing an OAuth callback or submission.\n    // Wait for isStorageReady so the challenge token is restored from storage before\n    // we attempt to resume a persisted executionId — the server requires it.\n    const currentUrlParams: any = getUrlParams();\n    if (\n      isInitialized &&\n      isStorageReady &&\n      !isLoading &&\n      !isFlowInitialized &&\n      !initializationAttemptedRef.current &&\n      !currentExecutionId &&\n      !currentUrlParams.code &&\n      !currentUrlParams.state &&\n      !isSubmitting &&\n      !oauthCodeProcessedRef.current\n    ) {\n      initializationAttemptedRef.current = true;\n      initializeFlow();\n    }\n  }, [isInitialized, isStorageReady, isLoading, isFlowInitialized, currentExecutionId]);\n\n  /**\n   * Handle step timeout if configured in additionalData.\n   */\n  useEffect(() => {\n    const timeoutMs: number = Number(additionalData?.['stepTimeout']) || 0;\n    if (timeoutMs <= 0 || !isFlowInitialized) {\n      setIsTimeoutDisabled(false);\n      return undefined;\n    }\n\n    const remaining: number = Math.max(0, Math.floor((timeoutMs - Date.now()) / 1000));\n\n    const handleTimeout = (): void => {\n      const errorMessage: string = t('errors.signin.timeout') || 'Time allowed to complete the step has expired.';\n      setError(new Error(errorMessage));\n      setIsTimeoutDisabled(true);\n    };\n\n    if (remaining <= 0) {\n      handleTimeout();\n      return undefined;\n    }\n\n    const timerId: any = setTimeout(() => {\n      handleTimeout();\n    }, remaining * 1000);\n\n    return () => clearTimeout(timerId);\n  }, [additionalData?.['stepTimeout'], isFlowInitialized, t]);\n\n  /**\n   * Handle form submission from BaseSignIn or render props.\n   */\n  const handleSubmit = async (payload: EmbeddedSignInFlowRequest): Promise<void> => {\n    // Use executionId from payload if available, otherwise fall back to currentExecutionId\n    const effectiveExecutionId: any = payload.executionId || currentExecutionId;\n\n    if (!effectiveExecutionId) {\n      throw new Error('No active flow ID');\n    }\n\n    const processedInputs: Record<string, any> = {...payload.inputs};\n\n    // Auto-compile consent decisions if we are currently on a consent prompt step\n    if (additionalData?.['consentPrompt']) {\n      try {\n        const consentPromptRawData: any = additionalData['consentPrompt'];\n        const purposes: any[] =\n          typeof consentPromptRawData === 'string'\n            ? JSON.parse(consentPromptRawData)\n            : consentPromptRawData.purposes || consentPromptRawData;\n\n        // Find the action component to determine if it was a deny action\n        let isDeny = false;\n        if (payload.action) {\n          // Flatten components to find the action\n          const findAction = (comps: any[]): any => {\n            if (!comps || comps.length === 0) return null;\n\n            const found: any = comps.find((c: any) => c.id === payload.action);\n            if (found) return found;\n\n            return comps.reduce((acc: any, c: any) => {\n              if (acc) return acc;\n              if (c.components) return findAction(c.components);\n              return null;\n            }, null);\n          };\n\n          const submitAction: any = findAction(components);\n\n          if (submitAction && submitAction.variant?.toLowerCase() !== 'primary') {\n            isDeny = true;\n          }\n        }\n\n        const decisions: any = {\n          purposes: purposes.map((p: any) => ({\n            approved: !isDeny,\n            elements: [\n              ...(p.essential || []).map((e: any) => ({\n                approved: !isDeny,\n                name: e.name,\n              })),\n              ...(p.optional || []).map((e: any) => {\n                const key = `__consent_opt__${p.purposeId}__${e.name}`;\n                return {\n                  approved: isDeny ? false : processedInputs[key] !== 'false',\n                  name: e.name,\n                };\n              }),\n            ],\n            purposeName: p.purposeName,\n          })),\n        };\n        processedInputs['consent_decisions'] = JSON.stringify(decisions);\n\n        // Cleanup temporary consent tracking fields from inputs\n        Object.keys(processedInputs).forEach((key: string) => {\n          if (key.startsWith('__consent_opt__')) {\n            delete processedInputs[key];\n          }\n        });\n      } catch (e) {\n        // Failed to construct consent_decisions payload automatically\n      }\n    }\n\n    try {\n      setIsSubmitting(true);\n      setFlowError(null);\n      // Clear any field errors from the previous response before the new round-trip.\n      setServerFieldErrors(null);\n\n      const response: EmbeddedSignInFlowResponse = (await signIn({\n        executionId: effectiveExecutionId,\n        ...payload,\n        inputs: processedInputs,\n        ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n      })) as EmbeddedSignInFlowResponse;\n\n      if (await handleRedirection(response)) {\n        return;\n      }\n      if (\n        response.data?.additionalData?.['passkeyChallenge'] ||\n        response.data?.additionalData?.['passkeyCreationOptions']\n      ) {\n        const {passkeyChallenge, passkeyCreationOptions}: any = response.data.additionalData;\n        const effectiveExecutionIdForPasskey: any = response.executionId || effectiveExecutionId;\n\n        // Reset passkey processed ref to allow processing\n        passkeyProcessedRef.current = false;\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Set passkey state to trigger the passkey\n        setPasskeyState({\n          actionId: 'submit',\n          challenge: passkeyChallenge,\n          creationOptions: passkeyCreationOptions,\n          error: null,\n          executionId: effectiveExecutionIdForPasskey,\n          isActive: true,\n        });\n        setIsSubmitting(false);\n\n        return;\n      }\n\n      const {\n        executionId: normalizedExecutionId,\n        components: normalizedComponents,\n        additionalData: normalizedAdditionalData,\n      } = normalizeFlowResponse(\n        response,\n        t,\n        {\n          resolveTranslations: false,\n        },\n        meta,\n      );\n\n      // Handle terminal flow statuses (Error throws, Complete redirects and returns true).\n      if (await handleTerminalResponse(response)) {\n        return;\n      }\n\n      // Always update challenge token on any INCOMPLETE response — token rotates every step.\n      await setChallengeToken(response.challengeToken ?? null);\n\n      // Update executionId if response contains a new one\n      if (normalizedExecutionId && normalizedComponents) {\n        setExecutionId(normalizedExecutionId);\n        setComponents(normalizedComponents);\n        setAdditionalData(normalizedAdditionalData ?? {});\n        setIsTimeoutDisabled(false);\n        // Ensure flow is marked as initialized when we have components\n        setIsFlowInitialized(true);\n        // Clean up executionId from URL after setting it in state\n        cleanupFlowUrlParams();\n\n        // Surface server-side validation failures so BaseSignIn can inject them into\n        // the form-level fieldErrors state used by the render-prop / default UI.\n        const responseFieldErrors: FieldError[] | undefined = (response.data as any)?.fieldErrors;\n        if (responseFieldErrors && responseFieldErrors.length > 0) {\n          setServerFieldErrors(responseFieldErrors);\n        }\n\n        // Display error from INCOMPLETE response\n        if ((response as any)?.error) {\n          setFlowError(new Error(extractErrorMessage(response, t)));\n        }\n      }\n    } catch (error) {\n      const err: any = error;\n      await clearFlowState();\n\n      setError(err instanceof ThunderIDRuntimeError ? err : new Error(extractErrorMessage(err, t)));\n      return;\n    } finally {\n      setIsSubmitting(false);\n    }\n  };\n\n  /**\n   * Handle authentication errors.\n   */\n  const handleError = (error: Error): void => {\n    setError(error);\n  };\n\n  useOAuthCallback({\n    currentExecutionId,\n    isInitialized: isInitialized && !isLoading && isStorageReady,\n    isSubmitting,\n    onError: (err: any) => {\n      clearFlowState();\n      setError(err instanceof Error ? err : new Error(String(err)));\n    },\n    onSubmit: async (payload: any) => handleSubmit({executionId: payload.executionId, inputs: payload.inputs}),\n    processedRef: oauthCodeProcessedRef,\n    setExecutionId,\n  });\n\n  /**\n   * Handle passkey authentication/registration when passkey state becomes active.\n   * This effect auto-triggers the browser passkey popup and submits the result.\n   */\n  useEffect(() => {\n    if (\n      !passkeyState.isActive ||\n      (!passkeyState.challenge && !passkeyState.creationOptions) ||\n      !passkeyState.executionId\n    ) {\n      return;\n    }\n\n    // Prevent re-processing\n    if (passkeyProcessedRef.current) {\n      return;\n    }\n    passkeyProcessedRef.current = true;\n\n    const performPasskeyProcess = async (): Promise<void> => {\n      let inputs: Record<string, string>;\n\n      if (passkeyState.challenge) {\n        const passkeyResponse: any = await handlePasskeyAuthentication(passkeyState.challenge);\n        const passkeyResponseObj: any = JSON.parse(passkeyResponse);\n\n        inputs = {\n          authenticatorData: passkeyResponseObj.response.authenticatorData,\n          clientDataJSON: passkeyResponseObj.response.clientDataJSON,\n          credentialId: passkeyResponseObj.id,\n          signature: passkeyResponseObj.response.signature,\n          userHandle: passkeyResponseObj.response.userHandle,\n        };\n      } else if (passkeyState.creationOptions) {\n        const passkeyResponse: any = await handlePasskeyRegistration(passkeyState.creationOptions);\n        const passkeyResponseObj: any = JSON.parse(passkeyResponse);\n\n        inputs = {\n          attestationObject: passkeyResponseObj.response.attestationObject,\n          clientDataJSON: passkeyResponseObj.response.clientDataJSON,\n          credentialId: passkeyResponseObj.id,\n        };\n      } else {\n        throw new Error('No passkey challenge or creation options available');\n      }\n\n      await handleSubmit({\n        executionId: passkeyState.executionId ?? undefined,\n        inputs,\n      });\n    };\n\n    performPasskeyProcess()\n      .then(() => {\n        setPasskeyState({\n          actionId: null,\n          challenge: null,\n          creationOptions: null,\n          error: null,\n          executionId: null,\n          isActive: false,\n        });\n      })\n      .catch((error: any) => {\n        setPasskeyState((prev: any) => ({...prev, error: error as Error, isActive: false}));\n        setFlowError(error as Error);\n        onError?.(error as Error);\n      });\n  }, [passkeyState.isActive, passkeyState.challenge, passkeyState.creationOptions, passkeyState.executionId]);\n\n  if (children) {\n    // Collapse the server FieldError[] array to a single message per field map for\n    // render-prop consumers. First error per field wins. Multi-error cases per\n    // field are rare in practice (server typically returns one rule failure per\n    // field in current flows) and consumers needing the full array can still read\n    // it from the raw flow response.\n    const renderPropFieldErrors: Record<string, string> = {};\n    if (serverFieldErrors) {\n      for (const fe of serverFieldErrors) {\n        if (!(fe.identifier in renderPropFieldErrors)) {\n          renderPropFieldErrors[fe.identifier] = fe.message;\n        }\n      }\n    }\n\n    const renderProps: SignInRenderProps = {\n      additionalData,\n      components,\n      error: flowError,\n      fieldErrors: renderPropFieldErrors,\n      initialize: initializeFlow,\n      isInitialized: isFlowInitialized,\n      isLoading: isLoading || isSubmitting || !isInitialized,\n      isTimeoutDisabled,\n      meta,\n      onSubmit: handleSubmit,\n    };\n\n    return <>{children(renderProps)}</>;\n  }\n  // Otherwise, render the default BaseSignIn component\n  return (\n    <BaseSignIn\n      additionalData={additionalData}\n      components={components}\n      isLoading={isLoading || !isInitialized || !isFlowInitialized}\n      isTimeoutDisabled={isTimeoutDisabled}\n      onSubmit={handleSubmit}\n      onError={handleError}\n      error={flowError}\n      className={className}\n      size={size}\n      variant={variant}\n      preferences={preferences}\n      serverFieldErrors={serverFieldErrors}\n    />\n  );\n};\n\nexport default SignIn;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4NA,MAAMA,UAA2B,EAC/B,WACA,aACA,OAAO,UACP,WACA,SACA,SACA,eAC+B;CAC/B,MAAM,EAAC,eAAe,gBAAgB,QAAQ,eAAe,WAAW,MAAM,mBAAmB,WAC/FC,8BAAc;CAChB,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAG7C,MAAM,CAAC,YAAY,qCAAmD,EAAE,CAAC;CACzE,MAAM,CAAC,gBAAgB,yCAAmD,EAAE,CAAC;CAG7E,MAAM,CAAC,mBAAmB,4CAAsD,KAAK;CACrF,MAAM,CAAC,oBAAoB,6CAAiD,KAAK;CACjF,MAAMC,sCAA+C,KAAK;CAC1D,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAM,CAAC,mBAAmB,4CAAiC,MAAM;CACjE,MAAM,CAAC,WAAW,oCAAuC,KAAK;CAC9D,MAAM,CAAC,cAAc,uCAA4B,MAAM;CACvD,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,cAAc,uCAA0C;EAC7D,UAAU;EACV,WAAW;EACX,iBAAiB;EACjB,OAAO;EACP,aAAa;EACb,UAAU;EACX,CAAC;CACF,MAAMC,+CAAyC,MAAM;CACrD,MAAMC,0CAAoC,MAAM;CAChD,MAAMC,wCAAkC,MAAM;;;;;CAK9C,MAAM,kBAAkB,gBAAqC;AAC3D,wBAAsB,YAAY;AAClC,MAAI,YACF,gBAAe,QAAQ,0BAA0B,YAAY;MAE7D,gBAAe,WAAW,yBAAyB;;;;;;AAQvD,4BAAgB;AACd,MAAI,CAAC,cAAe;AAEpB,GAAC,YAA2B;AAC1B,OAAI;IAEF,MAAMC,WAAgB,OADM,MAAM,mBAAmB,GACT,kBAAkB;AAC9D,QAAI,UAAU,eACZ,mBAAkB,UAAU,SAAS;aAE/B;AACR,sBAAkB,KAAK;;MAEvB;IACH,CAAC,cAAc,CAAC;;;;;CAMnB,MAAM,oBAAoB,OAAO,mBAAiD;AAChF,oBAAkB,UAAU;AAC5B,MAAI;GACF,MAAMC,iBAAsB,MAAM,mBAAmB;AACrD,OAAI,eACF,KAAI,eACF,OAAM,eAAe,0BAA0B,kBAAkB,eAAe;OAEhF,OAAM,eAAe,6BAA6B,iBAAiB;UAGjE;AACN,8BAAO,KAAK,gDAAgD;;;;;;CAOhE,MAAM,iBAAiB,YAA2B;AAChD,iBAAe,KAAK;AACpB,QAAM,kBAAkB,KAAK;AAC7B,uBAAqB,MAAM;AAC3B,MAAI;AAEF,UAD4B,MAAM,mBAAmB,GAC/B,4BAA4B,SAAS;UACrD;AACN,8BAAO,KAAK,8CAA8C;;AAE5D,uBAAqB,MAAM;AAE3B,wBAAsB,UAAU;;;;;CAMlC,MAAM,qBAA0B;EAC9B,MAAMC,YAAiB,IAAI,IAAI,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAE7D,SAAO;GACL,eAAe,UAAU,IAAI,gBAAgB;GAC7C,QAAQ,UAAU,IAAI,SAAS;GAC/B,MAAM,UAAU,IAAI,OAAO;GAC3B,OAAO,UAAU,IAAI,QAAQ;GAC7B,kBAAkB,UAAU,IAAI,oBAAoB;GACpD,aAAa,UAAU,IAAI,cAAc;GACzC,OAAO,UAAU,IAAI,QAAQ;GAC7B,OAAO,UAAU,IAAI,QAAQ;GAC9B;;;;;;;CAQH,MAAM,eAAe,OAAO,WAAyC;AACnE,MAAI,OACF,KAAI;AAEF,UAD4B,MAAM,mBAAmB,GAC/B,yBAAyB,UAAU,OAAO;UAC1D;AACN,8BAAO,KAAK,4CAA4C;;;;;;CAQ9D,MAAM,yBAAyB,eAAe,UAAgB;AAC5D,MAAI,CAAC,QAAQ,UAAU,KAAM;EAC7B,MAAMC,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aAAa,OAAO,oBAAoB;AAC5C,MAAI,aAAa,OAAO,OAAO;AAC/B,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aACF,KAAI,aAAa,OAAO,QAAQ;AAElC,UAAQ,SAAS,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;;;;;CAOvD,MAAM,6BAAmC;AACvC,MAAI,CAAC,QAAQ,UAAU,KAAM;EAC7B,MAAMA,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,cAAc;AACtC,MAAI,aAAa,OAAO,SAAS;AACjC,MAAI,aAAa,OAAO,gBAAgB;AACxC,UAAQ,SAAS,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;;;;;CAOvD,MAAM,YAAY,UAAuB;AACvC,eAAa,MAAM;AACnB,uBAAqB,KAAK;AAC1B,YAAU,MAAM;;;;;;CAOlB,MAAM,oBAAoB,OAAe,qBAA0C;AACjF,kBAAgB;AAGhB,WADiB,IAAIC,0CADK,oBAAoB,gBAAgB,SACL,iBAAiB,QAAQ,CACrE;AACb,wBAAsB,KAAK;;;;;CAM7B,MAAM,oBAAoB,OAAO,aAA2D;AAC1F,MAAI,SAAS,SAASC,2CAAuB,aAAa;GACxD,MAAMC,cAAoB,SAAS,MAAc,eAAgB,UAAkB;AAEnF,OAAI,eAAe,QAAQ,UAAU;AACnC,QAAI,SAAS,YACX,gBAAe,SAAS,YAAY;AAEtC,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,UAAM,aADiB,cAAc,CACR,OAAO;AAEpC,wCAAsB,YAAY;AAClC,WAAO;;;AAGX,SAAO;;;;;;;CAQT,MAAM,yBAAyB,OAAO,aAA2D;AAE/F,MAAI,SAAS,eAAeC,6CAAyB,OAAO;AAC1D,SAAM,gBAAgB;GACtB,MAAMC,MAAW,IAAI,MAAMC,4CAAoB,UAAU,EAAE,CAAC;AAC5D,YAAS,IAAI;AACb,yBAAsB;AAEtB,SAAM;;AAGR,MAAI,SAAS,eAAeF,6CAAyB,UAAU;GAG7D,MAAMG,mBADoB,UAAkB,eAAgB,UAAkB,gBACjC;AAG7C,mBAAgB,MAAM;AAGtB,kBAAe,KAAK;AACpB,SAAM,kBAAkB,KAAK;AAC7B,wBAAqB,MAAM;AAC3B,kBAAe,WAAW,yBAAyB;AACnD,OAAI;AAEF,WAD4B,MAAM,mBAAmB,GAC/B,4BAA4B,SAAS;WACrD;AACN,+BAAO,KAAK,+DAA+D;;AAI7E,yBAAsB,KAAK;AAE3B,OAAI,UACF,WAAU;IACR,aAAa;IACb,GAAI,SAAS,QAAQ,EAAE;IACxB,CAAC;AAGJ,OAAI,oBAAoB,QAAQ,SAC9B,QAAO,SAAS,OAAO;AAGzB,UAAO;;AAGT,SAAO;;;;;;CAOT,MAAM,iBAAiB,YAA2B;EAChD,MAAMR,YAAiB,cAAc;AAGrC,wBAAsB,UAAU;AAEhC,uBAAqB,KAAK;AAE1B,QAAM,aAAa,UAAU,OAAO;EAEpC,MAAMS,yBAA8B,iBAAiB,UAAU;EAO/D,MAAMC,oBAAyB,CAAC,UAAU,cAAc,eAAe,QAAQ,yBAAyB,GAAG;EAC3G,MAAMC,oBAAyB,UAAU,eAAe;AAExD,MAAI,CAAC,qBAAqB,CAAC,wBAAwB;GACjD,MAAMC,QAAa,IAAIV,0CACrB,sEACA,iBACA,QACD;AACD,YAAS,MAAM;AACf,SAAM;;AAGR,MAAI;AACF,gBAAa,KAAK;GAElB,IAAIW;AAEJ,OAAI,kBACF,KAAI;AACF,eAAY,MAAM,OAAO;KACvB,aAAa;KACb,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;KACjF,CAAC;YACK,aAAa;AAUpB,QALE,qBACA,sBAAsB,qBACtB,uBAAuBC,yCACvB,YAAY,eAAe,KAET;AAClB,oBAAe,KAAK;AACpB,SAAI;AAEF,aAD4B,MAAM,mBAAmB,GAC/B,4BAA4B,SAAS;aACrD;AACN,iCAAO,KAAK,8CAA8C;;AAE5D,SAAI,CAAC,wBAAwB;AAO3B,eAN0B,IAAIZ,0CAC5B,EAAE,gCAAgC,IAChC,iFACF,iBACA,QACD,CACqB;AACtB;;AAEF,gBAAY,MAAM,OAAO;MACvB,eAAe;MACf,UAAUa,qCAAiB;MAC3B,GAAI,UAAU,EAAC,QAAO;MACvB,CAAC;UAEF,OAAM;;OAIV,YAAY,MAAM,OAAO;IACvB,eAAe;IACf,UAAUA,qCAAiB;IAC3B,GAAI,UAAU,EAAC,QAAO;IACvB,CAAC;AAGJ,OAAI,MAAM,kBAAkB,SAAS,CACnC;AAMF,OAAI,MAAM,uBAAuB,SAAS,CACxC;GAGF,MAAM,EACJ,aAAa,uBACb,YAAY,sBACZ,gBAAgB,6BACdC,8CACF,UACA,GACA,EACE,qBAAqB,OACtB,EACD,KACD;AAED,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAExD,OAAI,yBAAyB,sBAAsB;AACjD,mBAAe,sBAAsB;AACrC,kBAAc,qBAAqB;AACnC,sBAAkB,4BAA4B,EAAE,CAAC;AACjD,yBAAqB,KAAK;AAC1B,yBAAqB,MAAM;AAE3B,0BAAsB;;WAEjB,OAAO;GACd,MAAMV,MAAW;AACjB,SAAM,gBAAgB;AAEtB,YAAS,eAAeJ,4CAAwB,MAAM,IAAI,MAAMK,4CAAoB,KAAK,EAAE,CAAC,CAAC;AAC7F,8BAA2B,UAAU;;;;;;AAOzC,4BAAgB;EACd,MAAMP,YAAiB,cAAc;AAGrC,MAAI,UAAU,OAAO;AACnB,oBAAiB,UAAU,OAAO,UAAU,iBAAiB;AAC7D;;AAGF,eAAa,UAAU,OAAO;IAI7B,EAAE,CAAC;AAEN,4BAAgB;EAId,MAAMiB,mBAAwB,cAAc;AAC5C,MACE,iBACA,kBACA,CAAC,aACD,CAAC,qBACD,CAAC,2BAA2B,WAC5B,CAAC,sBACD,CAAC,iBAAiB,QAClB,CAAC,iBAAiB,SAClB,CAAC,gBACD,CAAC,sBAAsB,SACvB;AACA,8BAA2B,UAAU;AACrC,mBAAgB;;IAEjB;EAAC;EAAe;EAAgB;EAAW;EAAmB;EAAmB,CAAC;;;;AAKrF,4BAAgB;EACd,MAAMC,YAAoB,OAAO,iBAAiB,eAAe,IAAI;AACrE,MAAI,aAAa,KAAK,CAAC,mBAAmB;AACxC,wBAAqB,MAAM;AAC3B;;EAGF,MAAMC,YAAoB,KAAK,IAAI,GAAG,KAAK,OAAO,YAAY,KAAK,KAAK,IAAI,IAAK,CAAC;EAElF,MAAM,sBAA4B;GAChC,MAAMC,eAAuB,EAAE,wBAAwB,IAAI;AAC3D,YAAS,IAAI,MAAM,aAAa,CAAC;AACjC,wBAAqB,KAAK;;AAG5B,MAAI,aAAa,GAAG;AAClB,kBAAe;AACf;;EAGF,MAAMC,UAAe,iBAAiB;AACpC,kBAAe;KACd,YAAY,IAAK;AAEpB,eAAa,aAAa,QAAQ;IACjC;EAAC,iBAAiB;EAAgB;EAAmB;EAAE,CAAC;;;;CAK3D,MAAM,eAAe,OAAO,YAAsD;EAEhF,MAAMC,uBAA4B,QAAQ,eAAe;AAEzD,MAAI,CAAC,qBACH,OAAM,IAAI,MAAM,oBAAoB;EAGtC,MAAMC,kBAAuC,EAAC,GAAG,QAAQ,QAAO;AAGhE,MAAI,iBAAiB,iBACnB,KAAI;GACF,MAAMC,uBAA4B,eAAe;GACjD,MAAMC,WACJ,OAAO,yBAAyB,WAC5B,KAAK,MAAM,qBAAqB,GAChC,qBAAqB,YAAY;GAGvC,IAAI,SAAS;AACb,OAAI,QAAQ,QAAQ;IAElB,MAAM,cAAc,UAAsB;AACxC,SAAI,CAAC,SAAS,MAAM,WAAW,EAAG,QAAO;KAEzC,MAAMC,QAAa,MAAM,MAAM,MAAW,EAAE,OAAO,QAAQ,OAAO;AAClE,SAAI,MAAO,QAAO;AAElB,YAAO,MAAM,QAAQ,KAAU,MAAW;AACxC,UAAI,IAAK,QAAO;AAChB,UAAI,EAAE,WAAY,QAAO,WAAW,EAAE,WAAW;AACjD,aAAO;QACN,KAAK;;IAGV,MAAMC,eAAoB,WAAW,WAAW;AAEhD,QAAI,gBAAgB,aAAa,SAAS,aAAa,KAAK,UAC1D,UAAS;;GAIb,MAAMC,YAAiB,EACrB,UAAU,SAAS,KAAK,OAAY;IAClC,UAAU,CAAC;IACX,UAAU,CACR,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAY;KACtC,UAAU,CAAC;KACX,MAAM,EAAE;KACT,EAAE,EACH,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,MAAW;KACpC,MAAM,MAAM,kBAAkB,EAAE,UAAU,IAAI,EAAE;AAChD,YAAO;MACL,UAAU,SAAS,QAAQ,gBAAgB,SAAS;MACpD,MAAM,EAAE;MACT;MACD,CACH;IACD,aAAa,EAAE;IAChB,EAAE,EACJ;AACD,mBAAgB,uBAAuB,KAAK,UAAU,UAAU;AAGhE,UAAO,KAAK,gBAAgB,CAAC,SAAS,QAAgB;AACpD,QAAI,IAAI,WAAW,kBAAkB,CACnC,QAAO,gBAAgB;KAEzB;WACK,GAAG;AAKd,MAAI;AACF,mBAAgB,KAAK;AACrB,gBAAa,KAAK;AAElB,wBAAqB,KAAK;GAE1B,MAAMf,WAAwC,MAAM,OAAO;IACzD,aAAa;IACb,GAAG;IACH,QAAQ;IACR,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF,CAAC;AAEF,OAAI,MAAM,kBAAkB,SAAS,CACnC;AAEF,OACE,SAAS,MAAM,iBAAiB,uBAChC,SAAS,MAAM,iBAAiB,2BAChC;IACA,MAAM,EAAC,kBAAkB,2BAA+B,SAAS,KAAK;IACtE,MAAMgB,iCAAsC,SAAS,eAAe;AAGpE,wBAAoB,UAAU;AAE9B,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,oBAAgB;KACd,UAAU;KACV,WAAW;KACX,iBAAiB;KACjB,OAAO;KACP,aAAa;KACb,UAAU;KACX,CAAC;AACF,oBAAgB,MAAM;AAEtB;;GAGF,MAAM,EACJ,aAAa,uBACb,YAAY,sBACZ,gBAAgB,6BACdb,8CACF,UACA,GACA,EACE,qBAAqB,OACtB,EACD,KACD;AAGD,OAAI,MAAM,uBAAuB,SAAS,CACxC;AAIF,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,OAAI,yBAAyB,sBAAsB;AACjD,mBAAe,sBAAsB;AACrC,kBAAc,qBAAqB;AACnC,sBAAkB,4BAA4B,EAAE,CAAC;AACjD,yBAAqB,MAAM;AAE3B,yBAAqB,KAAK;AAE1B,0BAAsB;IAItB,MAAMc,sBAAiD,SAAS,MAAc;AAC9E,QAAI,uBAAuB,oBAAoB,SAAS,EACtD,sBAAqB,oBAAoB;AAI3C,QAAK,UAAkB,MACrB,cAAa,IAAI,MAAMvB,4CAAoB,UAAU,EAAE,CAAC,CAAC;;WAGtD,OAAO;GACd,MAAMD,MAAW;AACjB,SAAM,gBAAgB;AAEtB,YAAS,eAAeJ,4CAAwB,MAAM,IAAI,MAAMK,4CAAoB,KAAK,EAAE,CAAC,CAAC;AAC7F;YACQ;AACR,mBAAgB,MAAM;;;;;;CAO1B,MAAM,eAAe,UAAuB;AAC1C,WAAS,MAAM;;AAGjB,2CAAiB;EACf;EACA,eAAe,iBAAiB,CAAC,aAAa;EAC9C;EACA,UAAU,QAAa;AACrB,mBAAgB;AAChB,YAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,CAAC;;EAE/D,UAAU,OAAO,YAAiB,aAAa;GAAC,aAAa,QAAQ;GAAa,QAAQ,QAAQ;GAAO,CAAC;EAC1G,cAAc;EACd;EACD,CAAC;;;;;AAMF,4BAAgB;AACd,MACE,CAAC,aAAa,YACb,CAAC,aAAa,aAAa,CAAC,aAAa,mBAC1C,CAAC,aAAa,YAEd;AAIF,MAAI,oBAAoB,QACtB;AAEF,sBAAoB,UAAU;EAE9B,MAAM,wBAAwB,YAA2B;GACvD,IAAIwB;AAEJ,OAAI,aAAa,WAAW;IAC1B,MAAMC,kBAAuB,MAAMC,4CAA4B,aAAa,UAAU;IACtF,MAAMC,qBAA0B,KAAK,MAAM,gBAAgB;AAE3D,aAAS;KACP,mBAAmB,mBAAmB,SAAS;KAC/C,gBAAgB,mBAAmB,SAAS;KAC5C,cAAc,mBAAmB;KACjC,WAAW,mBAAmB,SAAS;KACvC,YAAY,mBAAmB,SAAS;KACzC;cACQ,aAAa,iBAAiB;IACvC,MAAMF,kBAAuB,MAAMG,0CAA0B,aAAa,gBAAgB;IAC1F,MAAMD,qBAA0B,KAAK,MAAM,gBAAgB;AAE3D,aAAS;KACP,mBAAmB,mBAAmB,SAAS;KAC/C,gBAAgB,mBAAmB,SAAS;KAC5C,cAAc,mBAAmB;KAClC;SAED,OAAM,IAAI,MAAM,qDAAqD;AAGvE,SAAM,aAAa;IACjB,aAAa,aAAa,eAAe;IACzC;IACD,CAAC;;AAGJ,yBAAuB,CACpB,WAAW;AACV,mBAAgB;IACd,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,OAAO;IACP,aAAa;IACb,UAAU;IACX,CAAC;IACF,CACD,OAAO,UAAe;AACrB,oBAAiB,UAAe;IAAC,GAAG;IAAa;IAAgB,UAAU;IAAM,EAAE;AACnF,gBAAa,MAAe;AAC5B,aAAU,MAAe;IACzB;IACH;EAAC,aAAa;EAAU,aAAa;EAAW,aAAa;EAAiB,aAAa;EAAY,CAAC;AAE3G,KAAI,UAAU;EAMZ,MAAME,wBAAgD,EAAE;AACxD,MAAI,mBACF;QAAK,MAAM,MAAM,kBACf,KAAI,EAAE,GAAG,cAAc,uBACrB,uBAAsB,GAAG,cAAc,GAAG;;AAkBhD,SAAO,mFAAG,SAb6B;GACrC;GACA;GACA,OAAO;GACP,aAAa;GACb,YAAY;GACZ,eAAe;GACf,WAAW,aAAa,gBAAgB,CAAC;GACzC;GACA;GACA,UAAU;GACX,CAE8B,GAAI;;AAGrC,QACE,2CAACC;EACiB;EACJ;EACZ,WAAW,aAAa,CAAC,iBAAiB,CAAC;EACxB;EACnB,UAAU;EACV,SAAS;EACT,OAAO;EACI;EACL;EACG;EACI;EACM;GACnB;;AAIN,qBAAe"}
+{"version":3,"file":"SignIn.cjs","names":["SignIn: FC<SignInProps>","useThunderID","useTranslation","challengeTokenRef: any","initializationAttemptedRef: any","oauthCodeProcessedRef: any","passkeyProcessedRef: any","tempData: any","storageManager: any","urlParams: any","url: any","ThunderIDRuntimeError","EmbeddedSignInFlowType","redirectURL: any","EmbeddedSignInFlowStatus","err: any","extractErrorMessage","finalRedirectUrl: any","effectiveApplicationId: any","storedExecutionId: any","resumeExecutionId: any","error: any","response: EmbeddedSignInFlowResponse","ThunderIDAPIError","EmbeddedFlowType","normalizeFlowResponse","currentUrlParams: any","timeoutMs: number","remaining: number","errorMessage: string","timerId: any","effectiveExecutionId: any","processedInputs: Record<string, any>","consentPromptRawData: any","purposes: any[]","found: any","submitAction: any","decisions: any","effectiveExecutionIdForPasskey: any","responseFieldErrors: FieldError[] | undefined","inputs: Record<string, string>","passkeyResponse: any","handlePasskeyAuthentication","passkeyResponseObj: any","handlePasskeyRegistration","renderPropFieldErrors: Record<string, string>","BaseSignIn"],"sources":["../../../../../../src/components/presentation/auth/SignIn/SignIn.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025-2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  ThunderIDRuntimeError,\n  ThunderIDAPIError,\n  EmbeddedFlowComponent,\n  EmbeddedFlowType,\n  EmbeddedSignInFlowResponse,\n  EmbeddedSignInFlowRequest,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignInFlowType,\n  FieldError,\n  FlowMetadataResponse,\n  Preferences,\n  logger,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useState, useEffect, useRef, ReactNode} from 'react';\n// eslint-disable-next-line import/no-named-as-default\nimport BaseSignIn, {BaseSignInProps} from './BaseSignIn';\nimport useThunderID from '../../../../contexts/ThunderID/useThunderID';\nimport {useOAuthCallback} from '../../../../hooks/useOAuthCallback';\nimport useTranslation from '../../../../hooks/useTranslation';\nimport {extractErrorMessage, normalizeFlowResponse} from '../../../../utils/flowTransformer';\nimport {initiateOAuthRedirect} from '../../../../utils/oauth';\nimport {handlePasskeyAuthentication, handlePasskeyRegistration} from '../../../../utils/passkey';\n\n/**\n * Render props function parameters\n */\nexport interface SignInRenderProps {\n  /**\n   * Additional data from the flow response containing contextual information\n   * like consent prompt details and session timeouts.\n   */\n  additionalData?: Record<string, any>;\n\n  /**\n   * Current flow components\n   */\n  components: EmbeddedFlowComponent[];\n\n  /**\n   * Current error if any\n   */\n  error: Error | null;\n\n  /**\n   * Server-side field-level validation errors from the most recent flow response,\n   * collapsed to one message per field (first error wins). Empty when no validation\n   * failures are active. Render-prop consumers should display these alongside their\n   * own client-side validation errors.\n   */\n  fieldErrors: Record<string, string>;\n\n  /**\n   * Function to manually initialize the flow\n   */\n  initialize: () => Promise<void>;\n\n  /**\n   * Whether the flow has been initialized\n   */\n  isInitialized: boolean;\n\n  /**\n   * Loading state indicator\n   */\n  isLoading: boolean;\n\n  /**\n   * Flag indicating whether the flow step timeout has expired.\n   * Consuming components can use this to disable submit buttons.\n   */\n  isTimeoutDisabled?: boolean;\n\n  /**\n   * Flow metadata returned by the platform (v2 only). `null` while loading or unavailable.\n   */\n  meta: FlowMetadataResponse | null;\n\n  /**\n   * Function to submit authentication data (primary)\n   */\n  onSubmit: (payload: EmbeddedSignInFlowRequest) => Promise<void>;\n}\n\n/**\n * Props for the SignIn component.\n * Matches the interface from the main SignIn component for consistency.\n */\nexport interface SignInProps {\n  /**\n   * Render props function for custom UI\n   */\n  children?: (props: SignInRenderProps) => ReactNode;\n\n  /**\n   * Custom CSS class name for the form container.\n   */\n  className?: string;\n\n  /**\n   * Callback function called when authentication fails.\n   * @param error - The error that occurred during authentication.\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Callback function called when authentication is successful.\n   * @param authData - The authentication data returned upon successful completion.\n   */\n  onSuccess?: (authData: Record<string, any>) => void;\n\n  /**\n   * Component-level preferences to override global i18n and theme settings.\n   * Preferences are deep-merged with global ones, with component preferences\n   * taking precedence. Affects this component and all its descendants.\n   */\n  preferences?: Preferences;\n\n  /**\n   * Size variant for the component.\n   */\n  size?: 'small' | 'medium' | 'large';\n\n  /**\n   * Theme variant for the component.\n   */\n  variant?: BaseSignInProps['variant'];\n}\n\n/**\n * State for tracking passkey registration\n */\ninterface PasskeyState {\n  actionId: string | null;\n  challenge: string | null;\n  creationOptions: string | null;\n  error: Error | null;\n  executionId: string | null;\n  isActive: boolean;\n}\n\n/**\n * A component-driven SignIn component that provides authentication flow with pre-built styling.\n * This component handles the flow API calls for authentication and delegates UI logic to BaseSignIn.\n * It automatically transforms simple input-based responses into component-driven UI format.\n *\n * @example\n * // Default UI\n * ```tsx\n * import { SignIn } from '@thunderid/react/component-driven';\n *\n * const App = () => {\n *   return (\n *     <SignIn\n *       onSuccess={(authData) => {\n *         console.log('Authentication successful:', authData);\n *       }}\n *       onError={(error) => {\n *         console.error('Authentication failed:', error);\n *       }}\n *       size=\"medium\"\n *       variant=\"outlined\"\n *     />\n *   );\n * };\n * ```\n *\n * @example\n * // Custom UI with render props\n * ```tsx\n * import { SignIn } from '@thunderid/react/component-driven';\n *\n * const App = () => {\n *   return (\n *     <SignIn\n *       onSuccess={(authData) => console.log('Success:', authData)}\n *       onError={(error) => console.error('Error:', error)}\n *     >\n *       {({signIn, isLoading, components, error, isInitialized}) => (\n *         <div className=\"custom-signin\">\n *           <h1>Custom Sign In</h1>\n *           {!isInitialized ? (\n *             <p>Initializing...</p>\n *           ) : error ? (\n *             <div className=\"error\">{error.message}</div>\n *           ) : (\n *             <form onSubmit={(e) => {\n *               e.preventDefault();\n *               signIn({inputs: {username: 'user', password: 'pass'}});\n *             }}>\n *               <button type=\"submit\" disabled={isLoading}>\n *                 {isLoading ? 'Signing in...' : 'Sign In'}\n *               </button>\n *             </form>\n *           )}\n *         </div>\n *       )}\n *     </SignIn>\n *   );\n * };\n * ```\n */\nconst SignIn: FC<SignInProps> = ({\n  className,\n  preferences,\n  size = 'medium',\n  onSuccess,\n  onError,\n  variant,\n  children,\n}: SignInProps): ReactElement => {\n  const {applicationId, afterSignInUrl, signIn, isInitialized, isLoading, meta, getStorageManager, scopes, vendor} =\n    useThunderID();\n  const {t} = useTranslation(preferences?.i18n);\n\n  // State management for the flow\n  const [components, setComponents] = useState<EmbeddedFlowComponent[]>([]);\n  const [additionalData, setAdditionalData] = useState<Record<string, any>>({});\n  // Server-side validation errors from the most recent flow response. Updated on every\n  // submission; cleared when the next submission begins so stale errors don't linger.\n  const [serverFieldErrors, setServerFieldErrors] = useState<FieldError[] | null>(null);\n  const [currentExecutionId, setCurrentExecutionId] = useState<string | null>(null);\n  const challengeTokenRef: any = useRef<string | null>(null);\n  const [isStorageReady, setIsStorageReady] = useState(false);\n  const [isFlowInitialized, setIsFlowInitialized] = useState(false);\n  const [flowError, setFlowError] = useState<Error | null>(null);\n  const [isSubmitting, setIsSubmitting] = useState(false);\n  const [isTimeoutDisabled, setIsTimeoutDisabled] = useState<boolean>(false);\n  const [passkeyState, setPasskeyState] = useState<PasskeyState>({\n    actionId: null,\n    challenge: null,\n    creationOptions: null,\n    error: null,\n    executionId: null,\n    isActive: false,\n  });\n  const initializationAttemptedRef: any = useRef(false);\n  const oauthCodeProcessedRef: any = useRef(false);\n  const passkeyProcessedRef: any = useRef(false);\n  /**\n   * Sets executionId between sessionStorage and state.\n   * This ensures both are always in sync.\n   */\n  const setExecutionId = (executionId: string | null): void => {\n    setCurrentExecutionId(executionId);\n    if (executionId) {\n      sessionStorage.setItem(`${vendor}_execution_id`, executionId);\n    } else {\n      sessionStorage.removeItem(`${vendor}_execution_id`);\n    }\n  };\n\n  /**\n   * Restore any challenge token persisted before an OAuth redirect.\n   * Waits for SDK initialization before reading from storage.\n   */\n  useEffect(() => {\n    if (!isInitialized) return;\n\n    (async (): Promise<void> => {\n      try {\n        const storageManager: any = await getStorageManager();\n        const tempData: any = await storageManager?.getTemporaryData();\n        if (tempData?.challengeToken) {\n          challengeTokenRef.current = tempData.challengeToken as string;\n        }\n      } finally {\n        setIsStorageReady(true);\n      }\n    })();\n  }, [isInitialized]);\n\n  /**\n   * Updates challengeTokenRef immediately (stale-closure safe) and persists via\n   * the provider's StorageManager so the token survives OAuth redirects.\n   */\n  const setChallengeToken = async (challengeToken: string | null): Promise<void> => {\n    challengeTokenRef.current = challengeToken;\n    try {\n      const storageManager: any = await getStorageManager();\n      if (storageManager) {\n        if (challengeToken) {\n          await storageManager.setTemporaryDataParameter('challengeToken', challengeToken);\n        } else {\n          await storageManager.removeTemporaryDataParameter('challengeToken');\n        }\n      }\n    } catch {\n      logger.warn('Failed to persist challenge token in storage.');\n    }\n  };\n\n  /**\n   * Clear all flow-related storage and state.\n   */\n  const clearFlowState = async (): Promise<void> => {\n    setExecutionId(null);\n    await setChallengeToken(null);\n    setIsFlowInitialized(false);\n    try {\n      const storageManager: any = await getStorageManager();\n      await storageManager?.removeHybridDataParameter?.('authId');\n    } catch {\n      logger.warn('Failed to clear authId from hybrid storage.');\n    }\n    setIsTimeoutDisabled(false);\n    // Reset refs to allow new flows to start properly\n    oauthCodeProcessedRef.current = false;\n  };\n\n  /**\n   * Parse URL parameters used in flows.\n   */\n  const getUrlParams = (): any => {\n    const urlParams: any = new URL(window?.location?.href ?? '').searchParams;\n\n    return {\n      applicationId: urlParams.get('applicationId'),\n      authId: urlParams.get('authId'),\n      code: urlParams.get('code'),\n      error: urlParams.get('error'),\n      errorDescription: urlParams.get('error_description'),\n      executionId: urlParams.get('executionId'),\n      nonce: urlParams.get('nonce'),\n      state: urlParams.get('state'),\n    };\n  };\n\n  /**\n   * Handle authId from URL and persist it via the storage manager so it survives URL cleanup.\n   * ThunderIDReactClient.signIn() reads authId from storageManager.getHybridDataParameter('authId'),\n   * not from raw sessionStorage, so we must use the same storage path here.\n   */\n  const handleAuthId = async (authId: string | null): Promise<void> => {\n    if (authId) {\n      try {\n        const storageManager: any = await getStorageManager();\n        await storageManager?.setHybridDataParameter?.('authId', authId);\n      } catch {\n        logger.warn('Failed to store authId in hybrid storage.');\n      }\n    }\n  };\n\n  /**\n   * Clean up OAuth-related URL parameters from the browser URL.\n   */\n  const cleanupOAuthUrlParams = (includeNonce = false): void => {\n    if (!window?.location?.href) return;\n    const url: any = new URL(window.location.href);\n    url.searchParams.delete('error');\n    url.searchParams.delete('error_description');\n    url.searchParams.delete('code');\n    url.searchParams.delete('state');\n    if (includeNonce) {\n      url.searchParams.delete('nonce');\n    }\n    window?.history?.replaceState({}, '', url.toString());\n  };\n\n  /**\n   * Clean up flow-related URL parameters (executionId, authId) from the browser URL.\n   * Used after executionId is set in state to prevent using invalidated executionId from URL.\n   */\n  const cleanupFlowUrlParams = (): void => {\n    if (!window?.location?.href) return;\n    const url: any = new URL(window.location.href);\n    url.searchParams.delete('executionId');\n    url.searchParams.delete('authId');\n    url.searchParams.delete('applicationId');\n    window?.history?.replaceState({}, '', url.toString());\n  };\n\n  /**\n   * Set error state and call onError callback.\n   * Ensures isFlowInitialized is true so errors can be displayed in the UI.\n   */\n  const setError = (error: Error): void => {\n    setFlowError(error);\n    setIsFlowInitialized(true);\n    onError?.(error);\n  };\n\n  /**\n   * Handle OAuth error from URL parameters.\n   * Clears flow state, creates error, and cleans up URL.\n   */\n  const handleOAuthError = (error: string, errorDescription: string | null): void => {\n    clearFlowState();\n    const errorMessage: any = errorDescription || `OAuth error: ${error}`;\n    const err: any = new ThunderIDRuntimeError(errorMessage, 'SIGN_IN_ERROR', 'react');\n    setError(err);\n    cleanupOAuthUrlParams(true);\n  };\n\n  /**\n   * Handle REDIRECTION response by storing flow state and redirecting to OAuth provider.\n   */\n  const handleRedirection = async (response: EmbeddedSignInFlowResponse): Promise<boolean> => {\n    if (response.type === EmbeddedSignInFlowType.Redirection) {\n      const redirectURL: any = (response.data as any)?.redirectURL || (response as any)?.redirectURL;\n\n      if (redirectURL && window?.location) {\n        if (response.executionId) {\n          setExecutionId(response.executionId);\n        }\n        await setChallengeToken(response.challengeToken ?? null);\n\n        const urlParams: any = getUrlParams();\n        await handleAuthId(urlParams.authId);\n\n        initiateOAuthRedirect(redirectURL, vendor);\n        return true;\n      }\n    }\n    return false;\n  };\n\n  /**\n   * Handle terminal flow responses (Error and Complete) shared by initializeFlow and handleSubmit.\n   * Throws on an Error status so the caller's catch block can propagate it to BaseSignIn.\n   * Returns true when a Complete status was handled (caller should return), false otherwise.\n   */\n  const handleTerminalResponse = async (response: EmbeddedSignInFlowResponse): Promise<boolean> => {\n    // Handle Error flow status - flow has failed and is invalidated\n    if (response.flowStatus === EmbeddedSignInFlowStatus.Error) {\n      await clearFlowState();\n      const err: any = new Error(extractErrorMessage(response, t));\n      setError(err);\n      cleanupFlowUrlParams();\n      // Throw the error so it's caught by the catch block and propagated to BaseSignIn\n      throw err;\n    }\n\n    if (response.flowStatus === EmbeddedSignInFlowStatus.Complete) {\n      // Get redirectUrl from response (from /oauth2/auth/callback) or fall back to afterSignInUrl\n      const redirectUrl: any = (response as any)?.redirectUrl || (response as any)?.redirect_uri;\n      const finalRedirectUrl: any = redirectUrl || afterSignInUrl;\n\n      // Clear submitting state before redirect\n      setIsSubmitting(false);\n\n      // Clear all OAuth-related storage on successful completion\n      setExecutionId(null);\n      await setChallengeToken(null);\n      setIsFlowInitialized(false);\n      sessionStorage.removeItem(`${vendor}_execution_id`);\n      try {\n        const storageManager: any = await getStorageManager();\n        await storageManager?.removeHybridDataParameter?.('authId');\n      } catch {\n        logger.warn('Failed to clear authId from hybrid storage after completion.');\n      }\n\n      // Clean up OAuth URL params before redirect\n      cleanupOAuthUrlParams(true);\n\n      if (onSuccess) {\n        onSuccess({\n          redirectUrl: finalRedirectUrl,\n          ...(response.data || {}),\n        });\n      }\n\n      if (finalRedirectUrl && window?.location) {\n        window.location.href = finalRedirectUrl;\n      }\n\n      return true;\n    }\n\n    return false;\n  };\n\n  /**\n   * Initialize the authentication flow.\n   * Priority: executionId > applicationId (from context) > applicationId (from URL)\n   */\n  const initializeFlow = async (): Promise<void> => {\n    const urlParams: any = getUrlParams();\n\n    // Reset OAuth code processed ref when starting a new flow\n    oauthCodeProcessedRef.current = false;\n    // Clear stale serverFieldErrors so the new flow doesn't inherit them via render-prop.\n    setServerFieldErrors(null);\n\n    await handleAuthId(urlParams.authId);\n\n    const effectiveApplicationId: any = applicationId || urlParams.applicationId;\n\n    // On a page refresh the executionId is no longer in the URL (it is scrubbed by\n    // cleanupFlowUrlParams after the first load). Fall back to the executionId persisted in\n    // sessionStorage so the in-progress flow can be resumed instead of starting a new flow.\n    // This is required for authorization_code apps where direct new-flow initiation is blocked\n    // server-side and the flow must be initiated through the OAuth /authorize endpoint.\n    const storedExecutionId: any = !urlParams.executionId ? sessionStorage.getItem(`${vendor}_execution_id`) : null;\n    const resumeExecutionId: any = urlParams.executionId || storedExecutionId;\n\n    if (!resumeExecutionId && !effectiveApplicationId) {\n      const error: any = new ThunderIDRuntimeError(\n        'Either executionId or applicationId is required for authentication',\n        'SIGN_IN_ERROR',\n        'react',\n      );\n      setError(error);\n      throw error;\n    }\n\n    try {\n      setFlowError(null);\n\n      let response: EmbeddedSignInFlowResponse;\n\n      if (resumeExecutionId) {\n        try {\n          response = (await signIn({\n            executionId: resumeExecutionId,\n            ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n          })) as EmbeddedSignInFlowResponse;\n        } catch (resumeError) {\n          // Only treat a stale/expired session (HTTP 400 from the server, meaning the stored\n          // executionId is no longer valid) as a recoverable condition. Transient failures\n          // such as 5xx server errors or network errors are rethrown so they surface correctly.\n          const isStaleSession: boolean =\n            storedExecutionId &&\n            resumeExecutionId === storedExecutionId &&\n            resumeError instanceof ThunderIDAPIError &&\n            resumeError.statusCode === 400;\n\n          if (isStaleSession) {\n            setExecutionId(null);\n            try {\n              const storageManager: any = await getStorageManager();\n              await storageManager?.removeHybridDataParameter?.('authId');\n            } catch {\n              logger.warn('Failed to clear authId from hybrid storage.');\n            }\n            if (!effectiveApplicationId) {\n              const expiredError: any = new ThunderIDRuntimeError(\n                t('errors.signin.session.expired') ||\n                  'Your session has expired. Please return to the application and sign in again.',\n                'SIGN_IN_ERROR',\n                'react',\n              );\n              setError(expiredError);\n              return;\n            }\n            response = (await signIn({\n              applicationId: effectiveApplicationId,\n              flowType: EmbeddedFlowType.Authentication,\n              ...(scopes && {scopes}),\n            })) as EmbeddedSignInFlowResponse;\n          } else {\n            throw resumeError;\n          }\n        }\n      } else {\n        response = (await signIn({\n          applicationId: effectiveApplicationId,\n          flowType: EmbeddedFlowType.Authentication,\n          ...(scopes && {scopes}),\n        })) as EmbeddedSignInFlowResponse;\n      }\n\n      if (await handleRedirection(response)) {\n        return;\n      }\n\n      // Handle a flow that completes (or errors) on the very first step — e.g. a reused SSO\n      // session lets the backend return COMPLETE immediately with no UI components. Without\n      // this the UI would fall through with no components and spin forever.\n      if (await handleTerminalResponse(response)) {\n        return;\n      }\n\n      const {\n        executionId: normalizedExecutionId,\n        components: normalizedComponents,\n        additionalData: normalizedAdditionalData,\n      } = normalizeFlowResponse(\n        response,\n        t,\n        {\n          resolveTranslations: false,\n        },\n        meta,\n      );\n\n      await setChallengeToken(response.challengeToken ?? null);\n\n      if (normalizedExecutionId && normalizedComponents) {\n        setExecutionId(normalizedExecutionId);\n        setComponents(normalizedComponents);\n        setAdditionalData(normalizedAdditionalData ?? {});\n        setIsFlowInitialized(true);\n        setIsTimeoutDisabled(false);\n        // Clean up executionId from URL after setting it in state\n        cleanupFlowUrlParams();\n      }\n    } catch (error) {\n      const err: any = error;\n      await clearFlowState();\n\n      setError(err instanceof ThunderIDRuntimeError ? err : new Error(extractErrorMessage(err, t)));\n      initializationAttemptedRef.current = false;\n    }\n  };\n\n  /**\n   * Initialize the flow and handle cleanup of stale flow state.\n   */\n  useEffect(() => {\n    const urlParams: any = getUrlParams();\n\n    // Check for OAuth error in URL\n    if (urlParams.error) {\n      handleOAuthError(urlParams.error, urlParams.errorDescription);\n      return;\n    }\n\n    handleAuthId(urlParams.authId);\n\n    // Skip OAuth code processing - let the dedicated OAuth useEffect handle it\n    // No action needed here as the dedicated useEffect will handle it\n  }, []);\n\n  useEffect(() => {\n    // Only initialize if we're not processing an OAuth callback or submission.\n    // Wait for isStorageReady so the challenge token is restored from storage before\n    // we attempt to resume a persisted executionId — the server requires it.\n    const currentUrlParams: any = getUrlParams();\n    if (\n      isInitialized &&\n      isStorageReady &&\n      !isLoading &&\n      !isFlowInitialized &&\n      !initializationAttemptedRef.current &&\n      !currentExecutionId &&\n      !currentUrlParams.code &&\n      !currentUrlParams.state &&\n      !isSubmitting &&\n      !oauthCodeProcessedRef.current\n    ) {\n      initializationAttemptedRef.current = true;\n      initializeFlow();\n    }\n  }, [isInitialized, isStorageReady, isLoading, isFlowInitialized, currentExecutionId]);\n\n  /**\n   * Handle step timeout if configured in additionalData.\n   */\n  useEffect(() => {\n    const timeoutMs: number = Number(additionalData?.['stepTimeout']) || 0;\n    if (timeoutMs <= 0 || !isFlowInitialized) {\n      setIsTimeoutDisabled(false);\n      return undefined;\n    }\n\n    const remaining: number = Math.max(0, Math.floor((timeoutMs - Date.now()) / 1000));\n\n    const handleTimeout = (): void => {\n      const errorMessage: string = t('errors.signin.timeout') || 'Time allowed to complete the step has expired.';\n      setError(new Error(errorMessage));\n      setIsTimeoutDisabled(true);\n    };\n\n    if (remaining <= 0) {\n      handleTimeout();\n      return undefined;\n    }\n\n    const timerId: any = setTimeout(() => {\n      handleTimeout();\n    }, remaining * 1000);\n\n    return () => clearTimeout(timerId);\n  }, [additionalData?.['stepTimeout'], isFlowInitialized, t]);\n\n  /**\n   * Handle form submission from BaseSignIn or render props.\n   */\n  const handleSubmit = async (payload: EmbeddedSignInFlowRequest): Promise<void> => {\n    // Use executionId from payload if available, otherwise fall back to currentExecutionId\n    const effectiveExecutionId: any = payload.executionId || currentExecutionId;\n\n    if (!effectiveExecutionId) {\n      throw new Error('No active flow ID');\n    }\n\n    const processedInputs: Record<string, any> = {...payload.inputs};\n\n    // Auto-compile consent decisions if we are currently on a consent prompt step\n    if (additionalData?.['consentPrompt']) {\n      try {\n        const consentPromptRawData: any = additionalData['consentPrompt'];\n        const purposes: any[] =\n          typeof consentPromptRawData === 'string'\n            ? JSON.parse(consentPromptRawData)\n            : consentPromptRawData.purposes || consentPromptRawData;\n\n        // Find the action component to determine if it was a deny action\n        let isDeny = false;\n        if (payload.action) {\n          // Flatten components to find the action\n          const findAction = (comps: any[]): any => {\n            if (!comps || comps.length === 0) return null;\n\n            const found: any = comps.find((c: any) => c.id === payload.action);\n            if (found) return found;\n\n            return comps.reduce((acc: any, c: any) => {\n              if (acc) return acc;\n              if (c.components) return findAction(c.components);\n              return null;\n            }, null);\n          };\n\n          const submitAction: any = findAction(components);\n\n          if (submitAction && submitAction.variant?.toLowerCase() !== 'primary') {\n            isDeny = true;\n          }\n        }\n\n        const decisions: any = {\n          purposes: purposes.map((p: any) => ({\n            approved: !isDeny,\n            elements: [\n              ...(p.essential || []).map((e: any) => ({\n                approved: !isDeny,\n                name: e.name,\n              })),\n              ...(p.optional || []).map((e: any) => {\n                const key = `__consent_opt__${p.purposeId}__${e.name}`;\n                return {\n                  approved: isDeny ? false : processedInputs[key] !== 'false',\n                  name: e.name,\n                };\n              }),\n            ],\n            purposeName: p.purposeName,\n          })),\n        };\n        processedInputs['consent_decisions'] = JSON.stringify(decisions);\n\n        // Cleanup temporary consent tracking fields from inputs\n        Object.keys(processedInputs).forEach((key: string) => {\n          if (key.startsWith('__consent_opt__')) {\n            delete processedInputs[key];\n          }\n        });\n      } catch (e) {\n        // Failed to construct consent_decisions payload automatically\n      }\n    }\n\n    try {\n      setIsSubmitting(true);\n      setFlowError(null);\n      // Clear any field errors from the previous response before the new round-trip.\n      setServerFieldErrors(null);\n\n      const response: EmbeddedSignInFlowResponse = (await signIn({\n        executionId: effectiveExecutionId,\n        ...payload,\n        inputs: processedInputs,\n        ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n      })) as EmbeddedSignInFlowResponse;\n\n      if (await handleRedirection(response)) {\n        return;\n      }\n      if (\n        response.data?.additionalData?.['passkeyChallenge'] ||\n        response.data?.additionalData?.['passkeyCreationOptions']\n      ) {\n        const {passkeyChallenge, passkeyCreationOptions}: any = response.data.additionalData;\n        const effectiveExecutionIdForPasskey: any = response.executionId || effectiveExecutionId;\n\n        // Reset passkey processed ref to allow processing\n        passkeyProcessedRef.current = false;\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Set passkey state to trigger the passkey\n        setPasskeyState({\n          actionId: 'submit',\n          challenge: passkeyChallenge,\n          creationOptions: passkeyCreationOptions,\n          error: null,\n          executionId: effectiveExecutionIdForPasskey,\n          isActive: true,\n        });\n        setIsSubmitting(false);\n\n        return;\n      }\n\n      const {\n        executionId: normalizedExecutionId,\n        components: normalizedComponents,\n        additionalData: normalizedAdditionalData,\n      } = normalizeFlowResponse(\n        response,\n        t,\n        {\n          resolveTranslations: false,\n        },\n        meta,\n      );\n\n      // Handle terminal flow statuses (Error throws, Complete redirects and returns true).\n      if (await handleTerminalResponse(response)) {\n        return;\n      }\n\n      // Always update challenge token on any INCOMPLETE response — token rotates every step.\n      await setChallengeToken(response.challengeToken ?? null);\n\n      // Update executionId if response contains a new one\n      if (normalizedExecutionId && normalizedComponents) {\n        setExecutionId(normalizedExecutionId);\n        setComponents(normalizedComponents);\n        setAdditionalData(normalizedAdditionalData ?? {});\n        setIsTimeoutDisabled(false);\n        // Ensure flow is marked as initialized when we have components\n        setIsFlowInitialized(true);\n        // Clean up executionId from URL after setting it in state\n        cleanupFlowUrlParams();\n\n        // Surface server-side validation failures so BaseSignIn can inject them into\n        // the form-level fieldErrors state used by the render-prop / default UI.\n        const responseFieldErrors: FieldError[] | undefined = (response.data as any)?.fieldErrors;\n        if (responseFieldErrors && responseFieldErrors.length > 0) {\n          setServerFieldErrors(responseFieldErrors);\n        }\n\n        // Display error from INCOMPLETE response\n        if ((response as any)?.error) {\n          setFlowError(new Error(extractErrorMessage(response, t)));\n        }\n      }\n    } catch (error) {\n      const err: any = error;\n      await clearFlowState();\n\n      setError(err instanceof ThunderIDRuntimeError ? err : new Error(extractErrorMessage(err, t)));\n      return;\n    } finally {\n      setIsSubmitting(false);\n    }\n  };\n\n  /**\n   * Handle authentication errors.\n   */\n  const handleError = (error: Error): void => {\n    setError(error);\n  };\n\n  useOAuthCallback({\n    currentExecutionId,\n    executionIdStorageKey: `${vendor}_execution_id`,\n    isInitialized: isInitialized && !isLoading && isStorageReady,\n    isSubmitting,\n    onError: (err: any) => {\n      clearFlowState();\n      setError(err instanceof Error ? err : new Error(String(err)));\n    },\n    onSubmit: async (payload: any) => handleSubmit({executionId: payload.executionId, inputs: payload.inputs}),\n    processedRef: oauthCodeProcessedRef,\n    setExecutionId,\n  });\n\n  /**\n   * Handle passkey authentication/registration when passkey state becomes active.\n   * This effect auto-triggers the browser passkey popup and submits the result.\n   */\n  useEffect(() => {\n    if (\n      !passkeyState.isActive ||\n      (!passkeyState.challenge && !passkeyState.creationOptions) ||\n      !passkeyState.executionId\n    ) {\n      return;\n    }\n\n    // Prevent re-processing\n    if (passkeyProcessedRef.current) {\n      return;\n    }\n    passkeyProcessedRef.current = true;\n\n    const performPasskeyProcess = async (): Promise<void> => {\n      let inputs: Record<string, string>;\n\n      if (passkeyState.challenge) {\n        const passkeyResponse: any = await handlePasskeyAuthentication(passkeyState.challenge);\n        const passkeyResponseObj: any = JSON.parse(passkeyResponse);\n\n        inputs = {\n          authenticatorData: passkeyResponseObj.response.authenticatorData,\n          clientDataJSON: passkeyResponseObj.response.clientDataJSON,\n          credentialId: passkeyResponseObj.id,\n          signature: passkeyResponseObj.response.signature,\n          userHandle: passkeyResponseObj.response.userHandle,\n        };\n      } else if (passkeyState.creationOptions) {\n        const passkeyResponse: any = await handlePasskeyRegistration(passkeyState.creationOptions);\n        const passkeyResponseObj: any = JSON.parse(passkeyResponse);\n\n        inputs = {\n          attestationObject: passkeyResponseObj.response.attestationObject,\n          clientDataJSON: passkeyResponseObj.response.clientDataJSON,\n          credentialId: passkeyResponseObj.id,\n        };\n      } else {\n        throw new Error('No passkey challenge or creation options available');\n      }\n\n      await handleSubmit({\n        executionId: passkeyState.executionId ?? undefined,\n        inputs,\n      });\n    };\n\n    performPasskeyProcess()\n      .then(() => {\n        setPasskeyState({\n          actionId: null,\n          challenge: null,\n          creationOptions: null,\n          error: null,\n          executionId: null,\n          isActive: false,\n        });\n      })\n      .catch((error: any) => {\n        setPasskeyState((prev: any) => ({...prev, error: error as Error, isActive: false}));\n        setFlowError(error as Error);\n        onError?.(error as Error);\n      });\n  }, [passkeyState.isActive, passkeyState.challenge, passkeyState.creationOptions, passkeyState.executionId]);\n\n  if (children) {\n    // Collapse the server FieldError[] array to a single message per field map for\n    // render-prop consumers. First error per field wins. Multi-error cases per\n    // field are rare in practice (server typically returns one rule failure per\n    // field in current flows) and consumers needing the full array can still read\n    // it from the raw flow response.\n    const renderPropFieldErrors: Record<string, string> = {};\n    if (serverFieldErrors) {\n      for (const fe of serverFieldErrors) {\n        if (!(fe.identifier in renderPropFieldErrors)) {\n          renderPropFieldErrors[fe.identifier] = fe.message;\n        }\n      }\n    }\n\n    const renderProps: SignInRenderProps = {\n      additionalData,\n      components,\n      error: flowError,\n      fieldErrors: renderPropFieldErrors,\n      initialize: initializeFlow,\n      isInitialized: isFlowInitialized,\n      isLoading: isLoading || isSubmitting || !isInitialized,\n      isTimeoutDisabled,\n      meta,\n      onSubmit: handleSubmit,\n    };\n\n    return <>{children(renderProps)}</>;\n  }\n  // Otherwise, render the default BaseSignIn component\n  return (\n    <BaseSignIn\n      additionalData={additionalData}\n      components={components}\n      isLoading={isLoading || !isInitialized || !isFlowInitialized}\n      isTimeoutDisabled={isTimeoutDisabled}\n      onSubmit={handleSubmit}\n      onError={handleError}\n      error={flowError}\n      className={className}\n      size={size}\n      variant={variant}\n      preferences={preferences}\n      serverFieldErrors={serverFieldErrors}\n    />\n  );\n};\n\nexport default SignIn;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4NA,MAAMA,UAA2B,EAC/B,WACA,aACA,OAAO,UACP,WACA,SACA,SACA,eAC+B;CAC/B,MAAM,EAAC,eAAe,gBAAgB,QAAQ,eAAe,WAAW,MAAM,mBAAmB,QAAQ,WACvGC,8BAAc;CAChB,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAG7C,MAAM,CAAC,YAAY,qCAAmD,EAAE,CAAC;CACzE,MAAM,CAAC,gBAAgB,yCAAmD,EAAE,CAAC;CAG7E,MAAM,CAAC,mBAAmB,4CAAsD,KAAK;CACrF,MAAM,CAAC,oBAAoB,6CAAiD,KAAK;CACjF,MAAMC,sCAA+C,KAAK;CAC1D,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAM,CAAC,mBAAmB,4CAAiC,MAAM;CACjE,MAAM,CAAC,WAAW,oCAAuC,KAAK;CAC9D,MAAM,CAAC,cAAc,uCAA4B,MAAM;CACvD,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,cAAc,uCAA0C;EAC7D,UAAU;EACV,WAAW;EACX,iBAAiB;EACjB,OAAO;EACP,aAAa;EACb,UAAU;EACX,CAAC;CACF,MAAMC,+CAAyC,MAAM;CACrD,MAAMC,0CAAoC,MAAM;CAChD,MAAMC,wCAAkC,MAAM;;;;;CAK9C,MAAM,kBAAkB,gBAAqC;AAC3D,wBAAsB,YAAY;AAClC,MAAI,YACF,gBAAe,QAAQ,GAAG,OAAO,gBAAgB,YAAY;MAE7D,gBAAe,WAAW,GAAG,OAAO,eAAe;;;;;;AAQvD,4BAAgB;AACd,MAAI,CAAC,cAAe;AAEpB,GAAC,YAA2B;AAC1B,OAAI;IAEF,MAAMC,WAAgB,OADM,MAAM,mBAAmB,GACT,kBAAkB;AAC9D,QAAI,UAAU,eACZ,mBAAkB,UAAU,SAAS;aAE/B;AACR,sBAAkB,KAAK;;MAEvB;IACH,CAAC,cAAc,CAAC;;;;;CAMnB,MAAM,oBAAoB,OAAO,mBAAiD;AAChF,oBAAkB,UAAU;AAC5B,MAAI;GACF,MAAMC,iBAAsB,MAAM,mBAAmB;AACrD,OAAI,eACF,KAAI,eACF,OAAM,eAAe,0BAA0B,kBAAkB,eAAe;OAEhF,OAAM,eAAe,6BAA6B,iBAAiB;UAGjE;AACN,8BAAO,KAAK,gDAAgD;;;;;;CAOhE,MAAM,iBAAiB,YAA2B;AAChD,iBAAe,KAAK;AACpB,QAAM,kBAAkB,KAAK;AAC7B,uBAAqB,MAAM;AAC3B,MAAI;AAEF,UAD4B,MAAM,mBAAmB,GAC/B,4BAA4B,SAAS;UACrD;AACN,8BAAO,KAAK,8CAA8C;;AAE5D,uBAAqB,MAAM;AAE3B,wBAAsB,UAAU;;;;;CAMlC,MAAM,qBAA0B;EAC9B,MAAMC,YAAiB,IAAI,IAAI,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAE7D,SAAO;GACL,eAAe,UAAU,IAAI,gBAAgB;GAC7C,QAAQ,UAAU,IAAI,SAAS;GAC/B,MAAM,UAAU,IAAI,OAAO;GAC3B,OAAO,UAAU,IAAI,QAAQ;GAC7B,kBAAkB,UAAU,IAAI,oBAAoB;GACpD,aAAa,UAAU,IAAI,cAAc;GACzC,OAAO,UAAU,IAAI,QAAQ;GAC7B,OAAO,UAAU,IAAI,QAAQ;GAC9B;;;;;;;CAQH,MAAM,eAAe,OAAO,WAAyC;AACnE,MAAI,OACF,KAAI;AAEF,UAD4B,MAAM,mBAAmB,GAC/B,yBAAyB,UAAU,OAAO;UAC1D;AACN,8BAAO,KAAK,4CAA4C;;;;;;CAQ9D,MAAM,yBAAyB,eAAe,UAAgB;AAC5D,MAAI,CAAC,QAAQ,UAAU,KAAM;EAC7B,MAAMC,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aAAa,OAAO,oBAAoB;AAC5C,MAAI,aAAa,OAAO,OAAO;AAC/B,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aACF,KAAI,aAAa,OAAO,QAAQ;AAElC,UAAQ,SAAS,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;;;;;CAOvD,MAAM,6BAAmC;AACvC,MAAI,CAAC,QAAQ,UAAU,KAAM;EAC7B,MAAMA,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,cAAc;AACtC,MAAI,aAAa,OAAO,SAAS;AACjC,MAAI,aAAa,OAAO,gBAAgB;AACxC,UAAQ,SAAS,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;;;;;CAOvD,MAAM,YAAY,UAAuB;AACvC,eAAa,MAAM;AACnB,uBAAqB,KAAK;AAC1B,YAAU,MAAM;;;;;;CAOlB,MAAM,oBAAoB,OAAe,qBAA0C;AACjF,kBAAgB;AAGhB,WADiB,IAAIC,0CADK,oBAAoB,gBAAgB,SACL,iBAAiB,QAAQ,CACrE;AACb,wBAAsB,KAAK;;;;;CAM7B,MAAM,oBAAoB,OAAO,aAA2D;AAC1F,MAAI,SAAS,SAASC,2CAAuB,aAAa;GACxD,MAAMC,cAAoB,SAAS,MAAc,eAAgB,UAAkB;AAEnF,OAAI,eAAe,QAAQ,UAAU;AACnC,QAAI,SAAS,YACX,gBAAe,SAAS,YAAY;AAEtC,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,UAAM,aADiB,cAAc,CACR,OAAO;AAEpC,wCAAsB,aAAa,OAAO;AAC1C,WAAO;;;AAGX,SAAO;;;;;;;CAQT,MAAM,yBAAyB,OAAO,aAA2D;AAE/F,MAAI,SAAS,eAAeC,6CAAyB,OAAO;AAC1D,SAAM,gBAAgB;GACtB,MAAMC,MAAW,IAAI,MAAMC,4CAAoB,UAAU,EAAE,CAAC;AAC5D,YAAS,IAAI;AACb,yBAAsB;AAEtB,SAAM;;AAGR,MAAI,SAAS,eAAeF,6CAAyB,UAAU;GAG7D,MAAMG,mBADoB,UAAkB,eAAgB,UAAkB,gBACjC;AAG7C,mBAAgB,MAAM;AAGtB,kBAAe,KAAK;AACpB,SAAM,kBAAkB,KAAK;AAC7B,wBAAqB,MAAM;AAC3B,kBAAe,WAAW,GAAG,OAAO,eAAe;AACnD,OAAI;AAEF,WAD4B,MAAM,mBAAmB,GAC/B,4BAA4B,SAAS;WACrD;AACN,+BAAO,KAAK,+DAA+D;;AAI7E,yBAAsB,KAAK;AAE3B,OAAI,UACF,WAAU;IACR,aAAa;IACb,GAAI,SAAS,QAAQ,EAAE;IACxB,CAAC;AAGJ,OAAI,oBAAoB,QAAQ,SAC9B,QAAO,SAAS,OAAO;AAGzB,UAAO;;AAGT,SAAO;;;;;;CAOT,MAAM,iBAAiB,YAA2B;EAChD,MAAMR,YAAiB,cAAc;AAGrC,wBAAsB,UAAU;AAEhC,uBAAqB,KAAK;AAE1B,QAAM,aAAa,UAAU,OAAO;EAEpC,MAAMS,yBAA8B,iBAAiB,UAAU;EAO/D,MAAMC,oBAAyB,CAAC,UAAU,cAAc,eAAe,QAAQ,GAAG,OAAO,eAAe,GAAG;EAC3G,MAAMC,oBAAyB,UAAU,eAAe;AAExD,MAAI,CAAC,qBAAqB,CAAC,wBAAwB;GACjD,MAAMC,QAAa,IAAIV,0CACrB,sEACA,iBACA,QACD;AACD,YAAS,MAAM;AACf,SAAM;;AAGR,MAAI;AACF,gBAAa,KAAK;GAElB,IAAIW;AAEJ,OAAI,kBACF,KAAI;AACF,eAAY,MAAM,OAAO;KACvB,aAAa;KACb,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;KACjF,CAAC;YACK,aAAa;AAUpB,QALE,qBACA,sBAAsB,qBACtB,uBAAuBC,yCACvB,YAAY,eAAe,KAET;AAClB,oBAAe,KAAK;AACpB,SAAI;AAEF,aAD4B,MAAM,mBAAmB,GAC/B,4BAA4B,SAAS;aACrD;AACN,iCAAO,KAAK,8CAA8C;;AAE5D,SAAI,CAAC,wBAAwB;AAO3B,eAN0B,IAAIZ,0CAC5B,EAAE,gCAAgC,IAChC,iFACF,iBACA,QACD,CACqB;AACtB;;AAEF,gBAAY,MAAM,OAAO;MACvB,eAAe;MACf,UAAUa,qCAAiB;MAC3B,GAAI,UAAU,EAAC,QAAO;MACvB,CAAC;UAEF,OAAM;;OAIV,YAAY,MAAM,OAAO;IACvB,eAAe;IACf,UAAUA,qCAAiB;IAC3B,GAAI,UAAU,EAAC,QAAO;IACvB,CAAC;AAGJ,OAAI,MAAM,kBAAkB,SAAS,CACnC;AAMF,OAAI,MAAM,uBAAuB,SAAS,CACxC;GAGF,MAAM,EACJ,aAAa,uBACb,YAAY,sBACZ,gBAAgB,6BACdC,8CACF,UACA,GACA,EACE,qBAAqB,OACtB,EACD,KACD;AAED,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAExD,OAAI,yBAAyB,sBAAsB;AACjD,mBAAe,sBAAsB;AACrC,kBAAc,qBAAqB;AACnC,sBAAkB,4BAA4B,EAAE,CAAC;AACjD,yBAAqB,KAAK;AAC1B,yBAAqB,MAAM;AAE3B,0BAAsB;;WAEjB,OAAO;GACd,MAAMV,MAAW;AACjB,SAAM,gBAAgB;AAEtB,YAAS,eAAeJ,4CAAwB,MAAM,IAAI,MAAMK,4CAAoB,KAAK,EAAE,CAAC,CAAC;AAC7F,8BAA2B,UAAU;;;;;;AAOzC,4BAAgB;EACd,MAAMP,YAAiB,cAAc;AAGrC,MAAI,UAAU,OAAO;AACnB,oBAAiB,UAAU,OAAO,UAAU,iBAAiB;AAC7D;;AAGF,eAAa,UAAU,OAAO;IAI7B,EAAE,CAAC;AAEN,4BAAgB;EAId,MAAMiB,mBAAwB,cAAc;AAC5C,MACE,iBACA,kBACA,CAAC,aACD,CAAC,qBACD,CAAC,2BAA2B,WAC5B,CAAC,sBACD,CAAC,iBAAiB,QAClB,CAAC,iBAAiB,SAClB,CAAC,gBACD,CAAC,sBAAsB,SACvB;AACA,8BAA2B,UAAU;AACrC,mBAAgB;;IAEjB;EAAC;EAAe;EAAgB;EAAW;EAAmB;EAAmB,CAAC;;;;AAKrF,4BAAgB;EACd,MAAMC,YAAoB,OAAO,iBAAiB,eAAe,IAAI;AACrE,MAAI,aAAa,KAAK,CAAC,mBAAmB;AACxC,wBAAqB,MAAM;AAC3B;;EAGF,MAAMC,YAAoB,KAAK,IAAI,GAAG,KAAK,OAAO,YAAY,KAAK,KAAK,IAAI,IAAK,CAAC;EAElF,MAAM,sBAA4B;GAChC,MAAMC,eAAuB,EAAE,wBAAwB,IAAI;AAC3D,YAAS,IAAI,MAAM,aAAa,CAAC;AACjC,wBAAqB,KAAK;;AAG5B,MAAI,aAAa,GAAG;AAClB,kBAAe;AACf;;EAGF,MAAMC,UAAe,iBAAiB;AACpC,kBAAe;KACd,YAAY,IAAK;AAEpB,eAAa,aAAa,QAAQ;IACjC;EAAC,iBAAiB;EAAgB;EAAmB;EAAE,CAAC;;;;CAK3D,MAAM,eAAe,OAAO,YAAsD;EAEhF,MAAMC,uBAA4B,QAAQ,eAAe;AAEzD,MAAI,CAAC,qBACH,OAAM,IAAI,MAAM,oBAAoB;EAGtC,MAAMC,kBAAuC,EAAC,GAAG,QAAQ,QAAO;AAGhE,MAAI,iBAAiB,iBACnB,KAAI;GACF,MAAMC,uBAA4B,eAAe;GACjD,MAAMC,WACJ,OAAO,yBAAyB,WAC5B,KAAK,MAAM,qBAAqB,GAChC,qBAAqB,YAAY;GAGvC,IAAI,SAAS;AACb,OAAI,QAAQ,QAAQ;IAElB,MAAM,cAAc,UAAsB;AACxC,SAAI,CAAC,SAAS,MAAM,WAAW,EAAG,QAAO;KAEzC,MAAMC,QAAa,MAAM,MAAM,MAAW,EAAE,OAAO,QAAQ,OAAO;AAClE,SAAI,MAAO,QAAO;AAElB,YAAO,MAAM,QAAQ,KAAU,MAAW;AACxC,UAAI,IAAK,QAAO;AAChB,UAAI,EAAE,WAAY,QAAO,WAAW,EAAE,WAAW;AACjD,aAAO;QACN,KAAK;;IAGV,MAAMC,eAAoB,WAAW,WAAW;AAEhD,QAAI,gBAAgB,aAAa,SAAS,aAAa,KAAK,UAC1D,UAAS;;GAIb,MAAMC,YAAiB,EACrB,UAAU,SAAS,KAAK,OAAY;IAClC,UAAU,CAAC;IACX,UAAU,CACR,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAY;KACtC,UAAU,CAAC;KACX,MAAM,EAAE;KACT,EAAE,EACH,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,MAAW;KACpC,MAAM,MAAM,kBAAkB,EAAE,UAAU,IAAI,EAAE;AAChD,YAAO;MACL,UAAU,SAAS,QAAQ,gBAAgB,SAAS;MACpD,MAAM,EAAE;MACT;MACD,CACH;IACD,aAAa,EAAE;IAChB,EAAE,EACJ;AACD,mBAAgB,uBAAuB,KAAK,UAAU,UAAU;AAGhE,UAAO,KAAK,gBAAgB,CAAC,SAAS,QAAgB;AACpD,QAAI,IAAI,WAAW,kBAAkB,CACnC,QAAO,gBAAgB;KAEzB;WACK,GAAG;AAKd,MAAI;AACF,mBAAgB,KAAK;AACrB,gBAAa,KAAK;AAElB,wBAAqB,KAAK;GAE1B,MAAMf,WAAwC,MAAM,OAAO;IACzD,aAAa;IACb,GAAG;IACH,QAAQ;IACR,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF,CAAC;AAEF,OAAI,MAAM,kBAAkB,SAAS,CACnC;AAEF,OACE,SAAS,MAAM,iBAAiB,uBAChC,SAAS,MAAM,iBAAiB,2BAChC;IACA,MAAM,EAAC,kBAAkB,2BAA+B,SAAS,KAAK;IACtE,MAAMgB,iCAAsC,SAAS,eAAe;AAGpE,wBAAoB,UAAU;AAE9B,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,oBAAgB;KACd,UAAU;KACV,WAAW;KACX,iBAAiB;KACjB,OAAO;KACP,aAAa;KACb,UAAU;KACX,CAAC;AACF,oBAAgB,MAAM;AAEtB;;GAGF,MAAM,EACJ,aAAa,uBACb,YAAY,sBACZ,gBAAgB,6BACdb,8CACF,UACA,GACA,EACE,qBAAqB,OACtB,EACD,KACD;AAGD,OAAI,MAAM,uBAAuB,SAAS,CACxC;AAIF,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,OAAI,yBAAyB,sBAAsB;AACjD,mBAAe,sBAAsB;AACrC,kBAAc,qBAAqB;AACnC,sBAAkB,4BAA4B,EAAE,CAAC;AACjD,yBAAqB,MAAM;AAE3B,yBAAqB,KAAK;AAE1B,0BAAsB;IAItB,MAAMc,sBAAiD,SAAS,MAAc;AAC9E,QAAI,uBAAuB,oBAAoB,SAAS,EACtD,sBAAqB,oBAAoB;AAI3C,QAAK,UAAkB,MACrB,cAAa,IAAI,MAAMvB,4CAAoB,UAAU,EAAE,CAAC,CAAC;;WAGtD,OAAO;GACd,MAAMD,MAAW;AACjB,SAAM,gBAAgB;AAEtB,YAAS,eAAeJ,4CAAwB,MAAM,IAAI,MAAMK,4CAAoB,KAAK,EAAE,CAAC,CAAC;AAC7F;YACQ;AACR,mBAAgB,MAAM;;;;;;CAO1B,MAAM,eAAe,UAAuB;AAC1C,WAAS,MAAM;;AAGjB,2CAAiB;EACf;EACA,uBAAuB,GAAG,OAAO;EACjC,eAAe,iBAAiB,CAAC,aAAa;EAC9C;EACA,UAAU,QAAa;AACrB,mBAAgB;AAChB,YAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,CAAC;;EAE/D,UAAU,OAAO,YAAiB,aAAa;GAAC,aAAa,QAAQ;GAAa,QAAQ,QAAQ;GAAO,CAAC;EAC1G,cAAc;EACd;EACD,CAAC;;;;;AAMF,4BAAgB;AACd,MACE,CAAC,aAAa,YACb,CAAC,aAAa,aAAa,CAAC,aAAa,mBAC1C,CAAC,aAAa,YAEd;AAIF,MAAI,oBAAoB,QACtB;AAEF,sBAAoB,UAAU;EAE9B,MAAM,wBAAwB,YAA2B;GACvD,IAAIwB;AAEJ,OAAI,aAAa,WAAW;IAC1B,MAAMC,kBAAuB,MAAMC,4CAA4B,aAAa,UAAU;IACtF,MAAMC,qBAA0B,KAAK,MAAM,gBAAgB;AAE3D,aAAS;KACP,mBAAmB,mBAAmB,SAAS;KAC/C,gBAAgB,mBAAmB,SAAS;KAC5C,cAAc,mBAAmB;KACjC,WAAW,mBAAmB,SAAS;KACvC,YAAY,mBAAmB,SAAS;KACzC;cACQ,aAAa,iBAAiB;IACvC,MAAMF,kBAAuB,MAAMG,0CAA0B,aAAa,gBAAgB;IAC1F,MAAMD,qBAA0B,KAAK,MAAM,gBAAgB;AAE3D,aAAS;KACP,mBAAmB,mBAAmB,SAAS;KAC/C,gBAAgB,mBAAmB,SAAS;KAC5C,cAAc,mBAAmB;KAClC;SAED,OAAM,IAAI,MAAM,qDAAqD;AAGvE,SAAM,aAAa;IACjB,aAAa,aAAa,eAAe;IACzC;IACD,CAAC;;AAGJ,yBAAuB,CACpB,WAAW;AACV,mBAAgB;IACd,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,OAAO;IACP,aAAa;IACb,UAAU;IACX,CAAC;IACF,CACD,OAAO,UAAe;AACrB,oBAAiB,UAAe;IAAC,GAAG;IAAa;IAAgB,UAAU;IAAM,EAAE;AACnF,gBAAa,MAAe;AAC5B,aAAU,MAAe;IACzB;IACH;EAAC,aAAa;EAAU,aAAa;EAAW,aAAa;EAAiB,aAAa;EAAY,CAAC;AAE3G,KAAI,UAAU;EAMZ,MAAME,wBAAgD,EAAE;AACxD,MAAI,mBACF;QAAK,MAAM,MAAM,kBACf,KAAI,EAAE,GAAG,cAAc,uBACrB,uBAAsB,GAAG,cAAc,GAAG;;AAkBhD,SAAO,mFAAG,SAb6B;GACrC;GACA;GACA,OAAO;GACP,aAAa;GACb,YAAY;GACZ,eAAe;GACf,WAAW,aAAa,gBAAgB,CAAC;GACzC;GACA;GACA,UAAU;GACX,CAE8B,GAAI;;AAGrC,QACE,2CAACC;EACiB;EACJ;EACZ,WAAW,aAAa,CAAC,iBAAiB,CAAC;EACxB;EACnB,UAAU;EACV,SAAS;EACT,OAAO;EACI;EACL;EACG;EACI;EACM;GACnB;;AAIN,qBAAe"}

package/dist/cjs/contexts/I18n/I18nProvider.cjs

@@ -9,7 +9,6 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
 //#region src/contexts/I18n/I18nProvider.tsx
 const logger = (0, __thunderid_browser.createPackageComponentLogger)("@thunderid/react", "I18nProvider");
-const DEFAULT_STORAGE_KEY = "thunderid-i18n-language";
 const DEFAULT_URL_PARAM = "lang";
 const detectBrowserLanguage = () => {
 	if (typeof window !== "undefined" && window.navigator) return window.navigator.language || __thunderid_browser.TranslationBundleConstants.FALLBACK_LOCALE;
@@ -76,10 +75,10 @@ const detectUrlParamLanguage = (paramName) => {
 * I18nProvider component that manages internationalization state and provides
 * translation functions to child components.
 */
-const I18nProvider = ({ children, preferences }) => {
+const I18nProvider = ({ children, preferences, vendor }) => {
 	const defaultBundles = (0, __thunderid_browser.getDefaultI18nBundles)();
 	const storageStrategy = preferences?.storageStrategy ?? "cookie";
-	const storageKey = preferences?.storageKey ?? DEFAULT_STORAGE_KEY;
+	const storageKey = preferences?.storageKey ?? `${(0, __thunderid_browser.getVendorPrefix)(vendor)}-i18n-language`;
 	const urlParamConfig = preferences?.urlParam === void 0 ? DEFAULT_URL_PARAM : preferences.urlParam;
 	const resolvedCookieDomain = (0, react.useMemo)(() => {
 		if (storageStrategy !== "cookie") return void 0;

package/dist/cjs/contexts/I18n/I18nProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"I18nProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","TranslationBundleConstants","parts: string[]","match: RegExpMatchArray | null","maxAge: number","secure: string","domain: string","I18nProvider: FC<PropsWithChildren<I18nProviderProps>>","defaultBundles: Record<string, I18nBundle>","storageStrategy: I18nStorageStrategy","storageKey: string","urlParamConfig: string | false","resolvedCookieDomain: string | undefined","storage: StorageAdapter","urlLanguage: string | null","storedLanguage: string | null","browserLanguage: string","injectBundles: (newBundles: Record<string, I18nBundle>) => void","merged: Record<string, I18nBundle>","normalizedTranslations: I18nTranslations","mergedBundles: Record<string, I18nBundle>","languageKey: string","fallbackLanguage: string","t: (key: string, params?: Record<string, string | number>) => string","translation: string | undefined","currentBundle: I18nBundle | undefined","fallbackBundle: I18nBundle | undefined","setLanguage: (language: string) => void","contextValue: I18nContextValue","I18nContext"],"sources":["../../../../src/contexts/I18n/I18nProvider.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  deepMerge,\n  I18nPreferences,\n  I18nStorageStrategy,\n  createPackageComponentLogger,\n  I18nBundle,\n  I18nTranslations,\n  TranslationBundleConstants,\n  getDefaultI18nBundles,\n  normalizeTranslations,\n} from '@thunderid/browser';\nimport {FC, PropsWithChildren, ReactElement, useCallback, useEffect, useMemo, useState} from 'react';\nimport I18nContext, {I18nContextValue} from './I18nContext';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'I18nProvider',\n);\n\nconst DEFAULT_STORAGE_KEY = 'thunderid-i18n-language';\nconst DEFAULT_URL_PARAM = 'lang';\n\nexport interface I18nProviderProps {\n  /**\n   * The i18n preferences from the ThunderIDProvider\n   */\n  preferences?: I18nPreferences;\n}\n\nconst detectBrowserLanguage = (): string => {\n  if (typeof window !== 'undefined' && window.navigator) {\n    return window.navigator.language || TranslationBundleConstants.FALLBACK_LOCALE;\n  }\n\n  return TranslationBundleConstants.FALLBACK_LOCALE;\n};\n\nconst deriveRootDomain = (hostname: string): string => {\n  const parts: string[] = hostname.split('.');\n  return parts.length > 1 ? parts.slice(-2).join('.') : hostname;\n};\n\nconst getCookie = (name: string): string | null => {\n  if (typeof document === 'undefined') return null;\n  const match: RegExpMatchArray | null = new RegExp(\n    `(?:^|; )${name.replace(/([.*+?^${}()|[\\]\\\\])/g, '\\\\$1')}=([^;]*)`,\n  ).exec(document.cookie);\n  return match ? decodeURIComponent(match[1]) : null;\n};\n\nconst setCookie = (name: string, value: string, domain: string): void => {\n  if (typeof document === 'undefined') return;\n  const maxAge: number = 365 * 24 * 60 * 60;\n  const secure: string = typeof window !== 'undefined' && window.location.protocol === 'https:' ? '; Secure' : '';\n  document.cookie =\n    `${encodeURIComponent(name)}=${encodeURIComponent(value)}` +\n    `; Max-Age=${maxAge}` +\n    `; Path=/` +\n    `; Domain=${domain}` +\n    `; SameSite=Lax${secure}`;\n};\n\ninterface StorageAdapter {\n  read: () => string | null;\n  write: (language: string) => void;\n}\n\nconst createStorageAdapter = (strategy: I18nStorageStrategy, key: string, cookieDomain?: string): StorageAdapter => {\n  switch (strategy) {\n    case 'cookie':\n      return {\n        read: (): string | null => getCookie(key),\n        write: (language: string): void => {\n          const domain: string =\n            cookieDomain ?? (typeof window !== 'undefined' ? deriveRootDomain(window.location.hostname) : '');\n          if (domain) setCookie(key, language, domain);\n        },\n      };\n    case 'localStorage':\n      return {\n        read: (): string | null => {\n          if (typeof window === 'undefined' || !window.localStorage) return null;\n          try {\n            return window.localStorage.getItem(key);\n          } catch {\n            return null;\n          }\n        },\n        write: (language: string): void => {\n          if (typeof window === 'undefined' || !window.localStorage) return;\n          try {\n            window.localStorage.setItem(key, language);\n          } catch {\n            logger.warn('Failed to persist language preference to localStorage.');\n          }\n        },\n      };\n    case 'none':\n    default:\n      return {read: (): null => null, write: (): void => {}};\n  }\n};\n\nconst detectUrlParamLanguage = (paramName: string): string | null => {\n  if (typeof window === 'undefined') return null;\n  try {\n    return new URLSearchParams(window.location.search).get(paramName);\n  } catch {\n    return null;\n  }\n};\n\n/**\n * I18nProvider component that manages internationalization state and provides\n * translation functions to child components.\n */\nconst I18nProvider: FC<PropsWithChildren<I18nProviderProps>> = ({\n  children,\n  preferences,\n}: PropsWithChildren<I18nProviderProps>): ReactElement => {\n  // Get default bundles from the browser package\n  const defaultBundles: Record<string, I18nBundle> = getDefaultI18nBundles();\n\n  const storageStrategy: I18nStorageStrategy = preferences?.storageStrategy ?? 'cookie';\n  const storageKey: string = preferences?.storageKey ?? DEFAULT_STORAGE_KEY;\n  const urlParamConfig: string | false = preferences?.urlParam === undefined ? DEFAULT_URL_PARAM : preferences.urlParam;\n\n  const resolvedCookieDomain: string | undefined = useMemo((): string | undefined => {\n    if (storageStrategy !== 'cookie') return undefined;\n    if (preferences?.cookieDomain) return preferences.cookieDomain;\n    return typeof window !== 'undefined' ? deriveRootDomain(window.location.hostname) : undefined;\n  }, [storageStrategy, preferences?.cookieDomain]);\n\n  const storage: StorageAdapter = useMemo(\n    () => createStorageAdapter(storageStrategy, storageKey, resolvedCookieDomain),\n    [storageStrategy, storageKey, resolvedCookieDomain],\n  );\n\n  const determineInitialLanguage = (): string => {\n    if (preferences?.language) return preferences.language;\n    if (urlParamConfig !== false) {\n      const urlLanguage: string | null = detectUrlParamLanguage(urlParamConfig);\n      if (urlLanguage) {\n        storage.write(urlLanguage);\n        return urlLanguage;\n      }\n    }\n    const storedLanguage: string | null = storage.read();\n    if (storedLanguage) return storedLanguage;\n    const browserLanguage: string = detectBrowserLanguage();\n    if (browserLanguage) return browserLanguage;\n    return preferences?.fallbackLanguage || TranslationBundleConstants.FALLBACK_LOCALE;\n  };\n\n  const [currentLanguage, setCurrentLanguage] = useState<string>(determineInitialLanguage);\n\n  // Bundles injected at runtime (e.g., from flow metadata i18n translations).\n  // These take precedence over defaults but are overridden by prop-provided bundles.\n  const [injectedBundles, setInjectedBundles] = useState<Record<string, I18nBundle>>({});\n\n  const injectBundles: (newBundles: Record<string, I18nBundle>) => void = useCallback(\n    (newBundles: Record<string, I18nBundle>): void => {\n      setInjectedBundles((prev: Record<string, I18nBundle>) => {\n        const merged: Record<string, I18nBundle> = {...prev};\n        Object.entries(newBundles).forEach(([key, bundle]: [string, I18nBundle]) => {\n          const normalizedTranslations: I18nTranslations = normalizeTranslations(\n            bundle.translations as unknown as Record<string, string | Record<string, string>>,\n          );\n          if (merged[key]) {\n            merged[key] = {\n              ...merged[key],\n              translations: deepMerge(merged[key].translations, normalizedTranslations),\n            };\n          } else {\n            merged[key] = {...bundle, translations: normalizedTranslations};\n          }\n        });\n        return merged;\n      });\n    },\n    [],\n  );\n\n  /**\n   * Merge bundles in priority order: defaults → injected (meta) → prop-provided\n   */\n  const mergedBundles: Record<string, I18nBundle> = useMemo(() => {\n    const merged: Record<string, I18nBundle> = {};\n\n    // 1. Default bundles\n    Object.entries(defaultBundles).forEach(([key, bundle]: [string, I18nBundle]) => {\n      // Convert key format (e.g., 'en_US' to 'en-US')\n      const languageKey: string = key.replace('_', '-');\n      merged[languageKey] = bundle;\n    });\n\n    // 2. Injected bundles (e.g., from flow metadata) — override defaults\n    Object.entries(injectedBundles).forEach(([key, bundle]: [string, I18nBundle]) => {\n      const normalizedTranslations: I18nTranslations = normalizeTranslations(\n        bundle.translations as unknown as Record<string, string | Record<string, string>>,\n      );\n      if (merged[key]) {\n        merged[key] = {\n          ...merged[key],\n          translations: deepMerge(merged[key].translations, normalizedTranslations),\n        };\n      } else {\n        merged[key] = {...bundle, translations: normalizedTranslations};\n      }\n    });\n\n    // 3. User-provided bundles (from props) — highest priority, override everything\n    if (preferences?.bundles) {\n      Object.entries(preferences.bundles).forEach(([key, userBundle]: [string, I18nBundle]) => {\n        const normalizedTranslations: I18nTranslations = normalizeTranslations(\n          userBundle.translations as unknown as Record<string, string | Record<string, string>>,\n        );\n        if (merged[key]) {\n          merged[key] = {\n            ...merged[key],\n            metadata: userBundle.metadata ? {...merged[key].metadata, ...userBundle.metadata} : merged[key].metadata,\n            translations: deepMerge(merged[key].translations, normalizedTranslations),\n          };\n        } else {\n          merged[key] = {...userBundle, translations: normalizedTranslations};\n        }\n      });\n    }\n\n    return merged;\n  }, [defaultBundles, injectedBundles, preferences?.bundles]);\n\n  const fallbackLanguage: string = preferences?.fallbackLanguage || TranslationBundleConstants.FALLBACK_LOCALE;\n\n  // Persist language changes to the configured storage.\n  useEffect(() => {\n    storage.write(currentLanguage);\n  }, [currentLanguage, storage]);\n\n  // Translation function\n  const t: (key: string, params?: Record<string, string | number>) => string = useCallback(\n    (key: string, params?: Record<string, string | number>): string => {\n      let translation: string | undefined;\n\n      // Try to get translation from current language bundle\n      const currentBundle: I18nBundle | undefined = mergedBundles[currentLanguage];\n      if (currentBundle?.translations[key]) {\n        translation = currentBundle.translations[key];\n      }\n\n      // Fallback to fallback language if translation not found\n      if (!translation && currentLanguage !== fallbackLanguage) {\n        const fallbackBundle: I18nBundle | undefined = mergedBundles[fallbackLanguage];\n        if (fallbackBundle?.translations[key]) {\n          translation = fallbackBundle.translations[key];\n        }\n      }\n\n      // If still no translation found, return the key itself\n      if (!translation) {\n        translation = key;\n      }\n\n      // Replace parameters if provided\n      if (params && Object.keys(params).length > 0) {\n        return Object.entries(params).reduce(\n          (acc: string, [paramKey, paramValue]: [string, string | number]) =>\n            acc.replace(new RegExp(`\\\\{${paramKey}\\\\}`, 'g'), String(paramValue)),\n          translation,\n        );\n      }\n\n      return translation;\n    },\n    [mergedBundles, currentLanguage, fallbackLanguage],\n  );\n\n  // Language setter function\n  const setLanguage: (language: string) => void = useCallback(\n    (language: string) => {\n      if (mergedBundles[language]) {\n        setCurrentLanguage(language);\n      } else {\n        logger.warn(\n          `Language '${language}' is not available. Available languages: ${Object.keys(mergedBundles).join(', ')}`,\n        );\n      }\n    },\n    [mergedBundles],\n  );\n\n  const contextValue: I18nContextValue = useMemo(\n    () => ({\n      bundles: mergedBundles,\n      currentLanguage,\n      fallbackLanguage,\n      injectBundles,\n      setLanguage,\n      t,\n    }),\n    [currentLanguage, fallbackLanguage, injectBundles, mergedBundles, setLanguage, t],\n  );\n\n  return <I18nContext.Provider value={contextValue}>{children}</I18nContext.Provider>;\n};\n\nexport default I18nProvider;\n"],"mappings":";;;;;;;;;;AAgCA,MAAMA,+DACJ,oBACA,eACD;AAED,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAS1B,MAAM,8BAAsC;AAC1C,KAAI,OAAO,WAAW,eAAe,OAAO,UAC1C,QAAO,OAAO,UAAU,YAAYC,+CAA2B;AAGjE,QAAOA,+CAA2B;;AAGpC,MAAM,oBAAoB,aAA6B;CACrD,MAAMC,QAAkB,SAAS,MAAM,IAAI;AAC3C,QAAO,MAAM,SAAS,IAAI,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,GAAG;;AAGxD,MAAM,aAAa,SAAgC;AACjD,KAAI,OAAO,aAAa,YAAa,QAAO;CAC5C,MAAMC,yBAAiC,IAAI,OACzC,WAAW,KAAK,QAAQ,yBAAyB,OAAO,CAAC,UAC1D,EAAC,KAAK,SAAS,OAAO;AACvB,QAAO,QAAQ,mBAAmB,MAAM,GAAG,GAAG;;AAGhD,MAAM,aAAa,MAAc,OAAe,WAAyB;AACvE,KAAI,OAAO,aAAa,YAAa;CACrC,MAAMC,SAAiB,MAAM,KAAK,KAAK;CACvC,MAAMC,SAAiB,OAAO,WAAW,eAAe,OAAO,SAAS,aAAa,WAAW,aAAa;AAC7G,UAAS,SACP,GAAG,mBAAmB,KAAK,CAAC,GAAG,mBAAmB,MAAM,aAC3C,0BAED,uBACK;;AAQrB,MAAM,wBAAwB,UAA+B,KAAa,iBAA0C;AAClH,SAAQ,UAAR;EACE,KAAK,SACH,QAAO;GACL,YAA2B,UAAU,IAAI;GACzC,QAAQ,aAA2B;IACjC,MAAMC,SACJ,iBAAiB,OAAO,WAAW,cAAc,iBAAiB,OAAO,SAAS,SAAS,GAAG;AAChG,QAAI,OAAQ,WAAU,KAAK,UAAU,OAAO;;GAE/C;EACH,KAAK,eACH,QAAO;GACL,YAA2B;AACzB,QAAI,OAAO,WAAW,eAAe,CAAC,OAAO,aAAc,QAAO;AAClE,QAAI;AACF,YAAO,OAAO,aAAa,QAAQ,IAAI;YACjC;AACN,YAAO;;;GAGX,QAAQ,aAA2B;AACjC,QAAI,OAAO,WAAW,eAAe,CAAC,OAAO,aAAc;AAC3D,QAAI;AACF,YAAO,aAAa,QAAQ,KAAK,SAAS;YACpC;AACN,YAAO,KAAK,yDAAyD;;;GAG1E;EACH,KAAK;EACL,QACE,QAAO;GAAC,YAAkB;GAAM,aAAmB;GAAG;;;AAI5D,MAAM,0BAA0B,cAAqC;AACnE,KAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,KAAI;AACF,SAAO,IAAI,gBAAgB,OAAO,SAAS,OAAO,CAAC,IAAI,UAAU;SAC3D;AACN,SAAO;;;;;;;AAQX,MAAMC,gBAA0D,EAC9D,UACA,kBACwD;CAExD,MAAMC,iEAAoE;CAE1E,MAAMC,kBAAuC,aAAa,mBAAmB;CAC7E,MAAMC,aAAqB,aAAa,cAAc;CACtD,MAAMC,iBAAiC,aAAa,aAAa,SAAY,oBAAoB,YAAY;CAE7G,MAAMC,gDAA6E;AACjF,MAAI,oBAAoB,SAAU,QAAO;AACzC,MAAI,aAAa,aAAc,QAAO,YAAY;AAClD,SAAO,OAAO,WAAW,cAAc,iBAAiB,OAAO,SAAS,SAAS,GAAG;IACnF,CAAC,iBAAiB,aAAa,aAAa,CAAC;CAEhD,MAAMC,mCACE,qBAAqB,iBAAiB,YAAY,qBAAqB,EAC7E;EAAC;EAAiB;EAAY;EAAqB,CACpD;CAED,MAAM,iCAAyC;AAC7C,MAAI,aAAa,SAAU,QAAO,YAAY;AAC9C,MAAI,mBAAmB,OAAO;GAC5B,MAAMC,cAA6B,uBAAuB,eAAe;AACzE,OAAI,aAAa;AACf,YAAQ,MAAM,YAAY;AAC1B,WAAO;;;EAGX,MAAMC,iBAAgC,QAAQ,MAAM;AACpD,MAAI,eAAgB,QAAO;EAC3B,MAAMC,kBAA0B,uBAAuB;AACvD,MAAI,gBAAiB,QAAO;AAC5B,SAAO,aAAa,oBAAoBf,+CAA2B;;CAGrE,MAAM,CAAC,iBAAiB,0CAAuC,yBAAyB;CAIxF,MAAM,CAAC,iBAAiB,0CAA2D,EAAE,CAAC;CAEtF,MAAMgB,wCACH,eAAiD;AAChD,sBAAoB,SAAqC;GACvD,MAAMC,SAAqC,EAAC,GAAG,MAAK;AACpD,UAAO,QAAQ,WAAW,CAAC,SAAS,CAAC,KAAK,YAAkC;IAC1E,MAAMC,wEACJ,OAAO,aACR;AACD,QAAI,OAAO,KACT,QAAO,OAAO;KACZ,GAAG,OAAO;KACV,iDAAwB,OAAO,KAAK,cAAc,uBAAuB;KAC1E;QAED,QAAO,OAAO;KAAC,GAAG;KAAQ,cAAc;KAAuB;KAEjE;AACF,UAAO;IACP;IAEJ,EAAE,CACH;;;;CAKD,MAAMC,yCAA0D;EAC9D,MAAMF,SAAqC,EAAE;AAG7C,SAAO,QAAQ,eAAe,CAAC,SAAS,CAAC,KAAK,YAAkC;GAE9E,MAAMG,cAAsB,IAAI,QAAQ,KAAK,IAAI;AACjD,UAAO,eAAe;IACtB;AAGF,SAAO,QAAQ,gBAAgB,CAAC,SAAS,CAAC,KAAK,YAAkC;GAC/E,MAAMF,wEACJ,OAAO,aACR;AACD,OAAI,OAAO,KACT,QAAO,OAAO;IACZ,GAAG,OAAO;IACV,iDAAwB,OAAO,KAAK,cAAc,uBAAuB;IAC1E;OAED,QAAO,OAAO;IAAC,GAAG;IAAQ,cAAc;IAAuB;IAEjE;AAGF,MAAI,aAAa,QACf,QAAO,QAAQ,YAAY,QAAQ,CAAC,SAAS,CAAC,KAAK,gBAAsC;GACvF,MAAMA,wEACJ,WAAW,aACZ;AACD,OAAI,OAAO,KACT,QAAO,OAAO;IACZ,GAAG,OAAO;IACV,UAAU,WAAW,WAAW;KAAC,GAAG,OAAO,KAAK;KAAU,GAAG,WAAW;KAAS,GAAG,OAAO,KAAK;IAChG,iDAAwB,OAAO,KAAK,cAAc,uBAAuB;IAC1E;OAED,QAAO,OAAO;IAAC,GAAG;IAAY,cAAc;IAAuB;IAErE;AAGJ,SAAO;IACN;EAAC;EAAgB;EAAiB,aAAa;EAAQ,CAAC;CAE3D,MAAMG,mBAA2B,aAAa,oBAAoBrB,+CAA2B;AAG7F,4BAAgB;AACd,UAAQ,MAAM,gBAAgB;IAC7B,CAAC,iBAAiB,QAAQ,CAAC;CAG9B,MAAMsB,4BACH,KAAa,WAAqD;EACjE,IAAIC;EAGJ,MAAMC,gBAAwC,cAAc;AAC5D,MAAI,eAAe,aAAa,KAC9B,eAAc,cAAc,aAAa;AAI3C,MAAI,CAAC,eAAe,oBAAoB,kBAAkB;GACxD,MAAMC,iBAAyC,cAAc;AAC7D,OAAI,gBAAgB,aAAa,KAC/B,eAAc,eAAe,aAAa;;AAK9C,MAAI,CAAC,YACH,eAAc;AAIhB,MAAI,UAAU,OAAO,KAAK,OAAO,CAAC,SAAS,EACzC,QAAO,OAAO,QAAQ,OAAO,CAAC,QAC3B,KAAa,CAAC,UAAU,gBACvB,IAAI,QAAQ,IAAI,OAAO,MAAM,SAAS,MAAM,IAAI,EAAE,OAAO,WAAW,CAAC,EACvE,YACD;AAGH,SAAO;IAET;EAAC;EAAe;EAAiB;EAAiB,CACnD;CAGD,MAAMC,sCACH,aAAqB;AACpB,MAAI,cAAc,UAChB,oBAAmB,SAAS;MAE5B,QAAO,KACL,aAAa,SAAS,2CAA2C,OAAO,KAAK,cAAc,CAAC,KAAK,KAAK,GACvG;IAGL,CAAC,cAAc,CAChB;CAED,MAAMC,yCACG;EACL,SAAS;EACT;EACA;EACA;EACA;EACA;EACD,GACD;EAAC;EAAiB;EAAkB;EAAe;EAAe;EAAa;EAAE,CAClF;AAED,QAAO,2CAACC,4BAAY;EAAS,OAAO;EAAe;GAAgC;;AAGrF,2BAAe"}
+{"version":3,"file":"I18nProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","TranslationBundleConstants","parts: string[]","match: RegExpMatchArray | null","maxAge: number","secure: string","domain: string","I18nProvider: FC<PropsWithChildren<I18nProviderProps>>","defaultBundles: Record<string, I18nBundle>","storageStrategy: I18nStorageStrategy","storageKey: string","urlParamConfig: string | false","resolvedCookieDomain: string | undefined","storage: StorageAdapter","urlLanguage: string | null","storedLanguage: string | null","browserLanguage: string","injectBundles: (newBundles: Record<string, I18nBundle>) => void","merged: Record<string, I18nBundle>","normalizedTranslations: I18nTranslations","mergedBundles: Record<string, I18nBundle>","languageKey: string","fallbackLanguage: string","t: (key: string, params?: Record<string, string | number>) => string","translation: string | undefined","currentBundle: I18nBundle | undefined","fallbackBundle: I18nBundle | undefined","setLanguage: (language: string) => void","contextValue: I18nContextValue","I18nContext"],"sources":["../../../../src/contexts/I18n/I18nProvider.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  deepMerge,\n  I18nPreferences,\n  I18nStorageStrategy,\n  createPackageComponentLogger,\n  I18nBundle,\n  I18nTranslations,\n  TranslationBundleConstants,\n  getDefaultI18nBundles,\n  normalizeTranslations,\n  getVendorPrefix,\n} from '@thunderid/browser';\nimport {FC, PropsWithChildren, ReactElement, useCallback, useEffect, useMemo, useState} from 'react';\nimport I18nContext, {I18nContextValue} from './I18nContext';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'I18nProvider',\n);\n\nconst DEFAULT_URL_PARAM = 'lang';\n\nexport interface I18nProviderProps {\n  /**\n   * The i18n preferences from the ThunderIDProvider\n   */\n  preferences?: I18nPreferences;\n\n  /**\n   * Vendor/brand namespace used to derive the default language storage key\n   * (e.g. `${vendor}-i18n-language`). Resolved from the SDK config's `vendor` option.\n   * @default 'thunderid'\n   */\n  vendor?: string;\n}\n\nconst detectBrowserLanguage = (): string => {\n  if (typeof window !== 'undefined' && window.navigator) {\n    return window.navigator.language || TranslationBundleConstants.FALLBACK_LOCALE;\n  }\n\n  return TranslationBundleConstants.FALLBACK_LOCALE;\n};\n\nconst deriveRootDomain = (hostname: string): string => {\n  const parts: string[] = hostname.split('.');\n  return parts.length > 1 ? parts.slice(-2).join('.') : hostname;\n};\n\nconst getCookie = (name: string): string | null => {\n  if (typeof document === 'undefined') return null;\n  const match: RegExpMatchArray | null = new RegExp(\n    `(?:^|; )${name.replace(/([.*+?^${}()|[\\]\\\\])/g, '\\\\$1')}=([^;]*)`,\n  ).exec(document.cookie);\n  return match ? decodeURIComponent(match[1]) : null;\n};\n\nconst setCookie = (name: string, value: string, domain: string): void => {\n  if (typeof document === 'undefined') return;\n  const maxAge: number = 365 * 24 * 60 * 60;\n  const secure: string = typeof window !== 'undefined' && window.location.protocol === 'https:' ? '; Secure' : '';\n  document.cookie =\n    `${encodeURIComponent(name)}=${encodeURIComponent(value)}` +\n    `; Max-Age=${maxAge}` +\n    `; Path=/` +\n    `; Domain=${domain}` +\n    `; SameSite=Lax${secure}`;\n};\n\ninterface StorageAdapter {\n  read: () => string | null;\n  write: (language: string) => void;\n}\n\nconst createStorageAdapter = (strategy: I18nStorageStrategy, key: string, cookieDomain?: string): StorageAdapter => {\n  switch (strategy) {\n    case 'cookie':\n      return {\n        read: (): string | null => getCookie(key),\n        write: (language: string): void => {\n          const domain: string =\n            cookieDomain ?? (typeof window !== 'undefined' ? deriveRootDomain(window.location.hostname) : '');\n          if (domain) setCookie(key, language, domain);\n        },\n      };\n    case 'localStorage':\n      return {\n        read: (): string | null => {\n          if (typeof window === 'undefined' || !window.localStorage) return null;\n          try {\n            return window.localStorage.getItem(key);\n          } catch {\n            return null;\n          }\n        },\n        write: (language: string): void => {\n          if (typeof window === 'undefined' || !window.localStorage) return;\n          try {\n            window.localStorage.setItem(key, language);\n          } catch {\n            logger.warn('Failed to persist language preference to localStorage.');\n          }\n        },\n      };\n    case 'none':\n    default:\n      return {read: (): null => null, write: (): void => {}};\n  }\n};\n\nconst detectUrlParamLanguage = (paramName: string): string | null => {\n  if (typeof window === 'undefined') return null;\n  try {\n    return new URLSearchParams(window.location.search).get(paramName);\n  } catch {\n    return null;\n  }\n};\n\n/**\n * I18nProvider component that manages internationalization state and provides\n * translation functions to child components.\n */\nconst I18nProvider: FC<PropsWithChildren<I18nProviderProps>> = ({\n  children,\n  preferences,\n  vendor,\n}: PropsWithChildren<I18nProviderProps>): ReactElement => {\n  // Get default bundles from the browser package\n  const defaultBundles: Record<string, I18nBundle> = getDefaultI18nBundles();\n\n  const storageStrategy: I18nStorageStrategy = preferences?.storageStrategy ?? 'cookie';\n  const storageKey: string = preferences?.storageKey ?? `${getVendorPrefix(vendor)}-i18n-language`;\n  const urlParamConfig: string | false = preferences?.urlParam === undefined ? DEFAULT_URL_PARAM : preferences.urlParam;\n\n  const resolvedCookieDomain: string | undefined = useMemo((): string | undefined => {\n    if (storageStrategy !== 'cookie') return undefined;\n    if (preferences?.cookieDomain) return preferences.cookieDomain;\n    return typeof window !== 'undefined' ? deriveRootDomain(window.location.hostname) : undefined;\n  }, [storageStrategy, preferences?.cookieDomain]);\n\n  const storage: StorageAdapter = useMemo(\n    () => createStorageAdapter(storageStrategy, storageKey, resolvedCookieDomain),\n    [storageStrategy, storageKey, resolvedCookieDomain],\n  );\n\n  const determineInitialLanguage = (): string => {\n    if (preferences?.language) return preferences.language;\n    if (urlParamConfig !== false) {\n      const urlLanguage: string | null = detectUrlParamLanguage(urlParamConfig);\n      if (urlLanguage) {\n        storage.write(urlLanguage);\n        return urlLanguage;\n      }\n    }\n    const storedLanguage: string | null = storage.read();\n    if (storedLanguage) return storedLanguage;\n    const browserLanguage: string = detectBrowserLanguage();\n    if (browserLanguage) return browserLanguage;\n    return preferences?.fallbackLanguage || TranslationBundleConstants.FALLBACK_LOCALE;\n  };\n\n  const [currentLanguage, setCurrentLanguage] = useState<string>(determineInitialLanguage);\n\n  // Bundles injected at runtime (e.g., from flow metadata i18n translations).\n  // These take precedence over defaults but are overridden by prop-provided bundles.\n  const [injectedBundles, setInjectedBundles] = useState<Record<string, I18nBundle>>({});\n\n  const injectBundles: (newBundles: Record<string, I18nBundle>) => void = useCallback(\n    (newBundles: Record<string, I18nBundle>): void => {\n      setInjectedBundles((prev: Record<string, I18nBundle>) => {\n        const merged: Record<string, I18nBundle> = {...prev};\n        Object.entries(newBundles).forEach(([key, bundle]: [string, I18nBundle]) => {\n          const normalizedTranslations: I18nTranslations = normalizeTranslations(\n            bundle.translations as unknown as Record<string, string | Record<string, string>>,\n          );\n          if (merged[key]) {\n            merged[key] = {\n              ...merged[key],\n              translations: deepMerge(merged[key].translations, normalizedTranslations),\n            };\n          } else {\n            merged[key] = {...bundle, translations: normalizedTranslations};\n          }\n        });\n        return merged;\n      });\n    },\n    [],\n  );\n\n  /**\n   * Merge bundles in priority order: defaults → injected (meta) → prop-provided\n   */\n  const mergedBundles: Record<string, I18nBundle> = useMemo(() => {\n    const merged: Record<string, I18nBundle> = {};\n\n    // 1. Default bundles\n    Object.entries(defaultBundles).forEach(([key, bundle]: [string, I18nBundle]) => {\n      // Convert key format (e.g., 'en_US' to 'en-US')\n      const languageKey: string = key.replace('_', '-');\n      merged[languageKey] = bundle;\n    });\n\n    // 2. Injected bundles (e.g., from flow metadata) — override defaults\n    Object.entries(injectedBundles).forEach(([key, bundle]: [string, I18nBundle]) => {\n      const normalizedTranslations: I18nTranslations = normalizeTranslations(\n        bundle.translations as unknown as Record<string, string | Record<string, string>>,\n      );\n      if (merged[key]) {\n        merged[key] = {\n          ...merged[key],\n          translations: deepMerge(merged[key].translations, normalizedTranslations),\n        };\n      } else {\n        merged[key] = {...bundle, translations: normalizedTranslations};\n      }\n    });\n\n    // 3. User-provided bundles (from props) — highest priority, override everything\n    if (preferences?.bundles) {\n      Object.entries(preferences.bundles).forEach(([key, userBundle]: [string, I18nBundle]) => {\n        const normalizedTranslations: I18nTranslations = normalizeTranslations(\n          userBundle.translations as unknown as Record<string, string | Record<string, string>>,\n        );\n        if (merged[key]) {\n          merged[key] = {\n            ...merged[key],\n            metadata: userBundle.metadata ? {...merged[key].metadata, ...userBundle.metadata} : merged[key].metadata,\n            translations: deepMerge(merged[key].translations, normalizedTranslations),\n          };\n        } else {\n          merged[key] = {...userBundle, translations: normalizedTranslations};\n        }\n      });\n    }\n\n    return merged;\n  }, [defaultBundles, injectedBundles, preferences?.bundles]);\n\n  const fallbackLanguage: string = preferences?.fallbackLanguage || TranslationBundleConstants.FALLBACK_LOCALE;\n\n  // Persist language changes to the configured storage.\n  useEffect(() => {\n    storage.write(currentLanguage);\n  }, [currentLanguage, storage]);\n\n  // Translation function\n  const t: (key: string, params?: Record<string, string | number>) => string = useCallback(\n    (key: string, params?: Record<string, string | number>): string => {\n      let translation: string | undefined;\n\n      // Try to get translation from current language bundle\n      const currentBundle: I18nBundle | undefined = mergedBundles[currentLanguage];\n      if (currentBundle?.translations[key]) {\n        translation = currentBundle.translations[key];\n      }\n\n      // Fallback to fallback language if translation not found\n      if (!translation && currentLanguage !== fallbackLanguage) {\n        const fallbackBundle: I18nBundle | undefined = mergedBundles[fallbackLanguage];\n        if (fallbackBundle?.translations[key]) {\n          translation = fallbackBundle.translations[key];\n        }\n      }\n\n      // If still no translation found, return the key itself\n      if (!translation) {\n        translation = key;\n      }\n\n      // Replace parameters if provided\n      if (params && Object.keys(params).length > 0) {\n        return Object.entries(params).reduce(\n          (acc: string, [paramKey, paramValue]: [string, string | number]) =>\n            acc.replace(new RegExp(`\\\\{${paramKey}\\\\}`, 'g'), String(paramValue)),\n          translation,\n        );\n      }\n\n      return translation;\n    },\n    [mergedBundles, currentLanguage, fallbackLanguage],\n  );\n\n  // Language setter function\n  const setLanguage: (language: string) => void = useCallback(\n    (language: string) => {\n      if (mergedBundles[language]) {\n        setCurrentLanguage(language);\n      } else {\n        logger.warn(\n          `Language '${language}' is not available. Available languages: ${Object.keys(mergedBundles).join(', ')}`,\n        );\n      }\n    },\n    [mergedBundles],\n  );\n\n  const contextValue: I18nContextValue = useMemo(\n    () => ({\n      bundles: mergedBundles,\n      currentLanguage,\n      fallbackLanguage,\n      injectBundles,\n      setLanguage,\n      t,\n    }),\n    [currentLanguage, fallbackLanguage, injectBundles, mergedBundles, setLanguage, t],\n  );\n\n  return <I18nContext.Provider value={contextValue}>{children}</I18nContext.Provider>;\n};\n\nexport default I18nProvider;\n"],"mappings":";;;;;;;;;;AAiCA,MAAMA,+DACJ,oBACA,eACD;AAED,MAAM,oBAAoB;AAgB1B,MAAM,8BAAsC;AAC1C,KAAI,OAAO,WAAW,eAAe,OAAO,UAC1C,QAAO,OAAO,UAAU,YAAYC,+CAA2B;AAGjE,QAAOA,+CAA2B;;AAGpC,MAAM,oBAAoB,aAA6B;CACrD,MAAMC,QAAkB,SAAS,MAAM,IAAI;AAC3C,QAAO,MAAM,SAAS,IAAI,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,GAAG;;AAGxD,MAAM,aAAa,SAAgC;AACjD,KAAI,OAAO,aAAa,YAAa,QAAO;CAC5C,MAAMC,yBAAiC,IAAI,OACzC,WAAW,KAAK,QAAQ,yBAAyB,OAAO,CAAC,UAC1D,EAAC,KAAK,SAAS,OAAO;AACvB,QAAO,QAAQ,mBAAmB,MAAM,GAAG,GAAG;;AAGhD,MAAM,aAAa,MAAc,OAAe,WAAyB;AACvE,KAAI,OAAO,aAAa,YAAa;CACrC,MAAMC,SAAiB,MAAM,KAAK,KAAK;CACvC,MAAMC,SAAiB,OAAO,WAAW,eAAe,OAAO,SAAS,aAAa,WAAW,aAAa;AAC7G,UAAS,SACP,GAAG,mBAAmB,KAAK,CAAC,GAAG,mBAAmB,MAAM,aAC3C,0BAED,uBACK;;AAQrB,MAAM,wBAAwB,UAA+B,KAAa,iBAA0C;AAClH,SAAQ,UAAR;EACE,KAAK,SACH,QAAO;GACL,YAA2B,UAAU,IAAI;GACzC,QAAQ,aAA2B;IACjC,MAAMC,SACJ,iBAAiB,OAAO,WAAW,cAAc,iBAAiB,OAAO,SAAS,SAAS,GAAG;AAChG,QAAI,OAAQ,WAAU,KAAK,UAAU,OAAO;;GAE/C;EACH,KAAK,eACH,QAAO;GACL,YAA2B;AACzB,QAAI,OAAO,WAAW,eAAe,CAAC,OAAO,aAAc,QAAO;AAClE,QAAI;AACF,YAAO,OAAO,aAAa,QAAQ,IAAI;YACjC;AACN,YAAO;;;GAGX,QAAQ,aAA2B;AACjC,QAAI,OAAO,WAAW,eAAe,CAAC,OAAO,aAAc;AAC3D,QAAI;AACF,YAAO,aAAa,QAAQ,KAAK,SAAS;YACpC;AACN,YAAO,KAAK,yDAAyD;;;GAG1E;EACH,KAAK;EACL,QACE,QAAO;GAAC,YAAkB;GAAM,aAAmB;GAAG;;;AAI5D,MAAM,0BAA0B,cAAqC;AACnE,KAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,KAAI;AACF,SAAO,IAAI,gBAAgB,OAAO,SAAS,OAAO,CAAC,IAAI,UAAU;SAC3D;AACN,SAAO;;;;;;;AAQX,MAAMC,gBAA0D,EAC9D,UACA,aACA,aACwD;CAExD,MAAMC,iEAAoE;CAE1E,MAAMC,kBAAuC,aAAa,mBAAmB;CAC7E,MAAMC,aAAqB,aAAa,cAAc,4CAAmB,OAAO,CAAC;CACjF,MAAMC,iBAAiC,aAAa,aAAa,SAAY,oBAAoB,YAAY;CAE7G,MAAMC,gDAA6E;AACjF,MAAI,oBAAoB,SAAU,QAAO;AACzC,MAAI,aAAa,aAAc,QAAO,YAAY;AAClD,SAAO,OAAO,WAAW,cAAc,iBAAiB,OAAO,SAAS,SAAS,GAAG;IACnF,CAAC,iBAAiB,aAAa,aAAa,CAAC;CAEhD,MAAMC,mCACE,qBAAqB,iBAAiB,YAAY,qBAAqB,EAC7E;EAAC;EAAiB;EAAY;EAAqB,CACpD;CAED,MAAM,iCAAyC;AAC7C,MAAI,aAAa,SAAU,QAAO,YAAY;AAC9C,MAAI,mBAAmB,OAAO;GAC5B,MAAMC,cAA6B,uBAAuB,eAAe;AACzE,OAAI,aAAa;AACf,YAAQ,MAAM,YAAY;AAC1B,WAAO;;;EAGX,MAAMC,iBAAgC,QAAQ,MAAM;AACpD,MAAI,eAAgB,QAAO;EAC3B,MAAMC,kBAA0B,uBAAuB;AACvD,MAAI,gBAAiB,QAAO;AAC5B,SAAO,aAAa,oBAAoBf,+CAA2B;;CAGrE,MAAM,CAAC,iBAAiB,0CAAuC,yBAAyB;CAIxF,MAAM,CAAC,iBAAiB,0CAA2D,EAAE,CAAC;CAEtF,MAAMgB,wCACH,eAAiD;AAChD,sBAAoB,SAAqC;GACvD,MAAMC,SAAqC,EAAC,GAAG,MAAK;AACpD,UAAO,QAAQ,WAAW,CAAC,SAAS,CAAC,KAAK,YAAkC;IAC1E,MAAMC,wEACJ,OAAO,aACR;AACD,QAAI,OAAO,KACT,QAAO,OAAO;KACZ,GAAG,OAAO;KACV,iDAAwB,OAAO,KAAK,cAAc,uBAAuB;KAC1E;QAED,QAAO,OAAO;KAAC,GAAG;KAAQ,cAAc;KAAuB;KAEjE;AACF,UAAO;IACP;IAEJ,EAAE,CACH;;;;CAKD,MAAMC,yCAA0D;EAC9D,MAAMF,SAAqC,EAAE;AAG7C,SAAO,QAAQ,eAAe,CAAC,SAAS,CAAC,KAAK,YAAkC;GAE9E,MAAMG,cAAsB,IAAI,QAAQ,KAAK,IAAI;AACjD,UAAO,eAAe;IACtB;AAGF,SAAO,QAAQ,gBAAgB,CAAC,SAAS,CAAC,KAAK,YAAkC;GAC/E,MAAMF,wEACJ,OAAO,aACR;AACD,OAAI,OAAO,KACT,QAAO,OAAO;IACZ,GAAG,OAAO;IACV,iDAAwB,OAAO,KAAK,cAAc,uBAAuB;IAC1E;OAED,QAAO,OAAO;IAAC,GAAG;IAAQ,cAAc;IAAuB;IAEjE;AAGF,MAAI,aAAa,QACf,QAAO,QAAQ,YAAY,QAAQ,CAAC,SAAS,CAAC,KAAK,gBAAsC;GACvF,MAAMA,wEACJ,WAAW,aACZ;AACD,OAAI,OAAO,KACT,QAAO,OAAO;IACZ,GAAG,OAAO;IACV,UAAU,WAAW,WAAW;KAAC,GAAG,OAAO,KAAK;KAAU,GAAG,WAAW;KAAS,GAAG,OAAO,KAAK;IAChG,iDAAwB,OAAO,KAAK,cAAc,uBAAuB;IAC1E;OAED,QAAO,OAAO;IAAC,GAAG;IAAY,cAAc;IAAuB;IAErE;AAGJ,SAAO;IACN;EAAC;EAAgB;EAAiB,aAAa;EAAQ,CAAC;CAE3D,MAAMG,mBAA2B,aAAa,oBAAoBrB,+CAA2B;AAG7F,4BAAgB;AACd,UAAQ,MAAM,gBAAgB;IAC7B,CAAC,iBAAiB,QAAQ,CAAC;CAG9B,MAAMsB,4BACH,KAAa,WAAqD;EACjE,IAAIC;EAGJ,MAAMC,gBAAwC,cAAc;AAC5D,MAAI,eAAe,aAAa,KAC9B,eAAc,cAAc,aAAa;AAI3C,MAAI,CAAC,eAAe,oBAAoB,kBAAkB;GACxD,MAAMC,iBAAyC,cAAc;AAC7D,OAAI,gBAAgB,aAAa,KAC/B,eAAc,eAAe,aAAa;;AAK9C,MAAI,CAAC,YACH,eAAc;AAIhB,MAAI,UAAU,OAAO,KAAK,OAAO,CAAC,SAAS,EACzC,QAAO,OAAO,QAAQ,OAAO,CAAC,QAC3B,KAAa,CAAC,UAAU,gBACvB,IAAI,QAAQ,IAAI,OAAO,MAAM,SAAS,MAAM,IAAI,EAAE,OAAO,WAAW,CAAC,EACvE,YACD;AAGH,SAAO;IAET;EAAC;EAAe;EAAiB;EAAiB,CACnD;CAGD,MAAMC,sCACH,aAAqB;AACpB,MAAI,cAAc,UAChB,oBAAmB,SAAS;MAE5B,QAAO,KACL,aAAa,SAAS,2CAA2C,OAAO,KAAK,cAAc,CAAC,KAAK,KAAK,GACvG;IAGL,CAAC,cAAc,CAChB;CAED,MAAMC,yCACG;EACL,SAAS;EACT;EACA;EACA;EACA;EACA;EACD,GACD;EAAC;EAAiB;EAAkB;EAAe;EAAe;EAAa;EAAE,CAClF;AAED,QAAO,2CAACC,4BAAY;EAAS,OAAO;EAAe;GAAgC;;AAGrF,2BAAe"}

package/dist/cjs/contexts/ThunderID/ThunderIDContext.cjs

@@ -1,4 +1,6 @@
 const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
 let react = require("react");
 react = require_rolldown_runtime.__toESM(react);
 
@@ -39,7 +41,8 @@ const ThunderIDContext = (0, react.createContext)({
 	signOut: () => Promise.resolve({}),
 	signUp: () => Promise.resolve({}),
 	signUpUrl: void 0,
-	user: null
+	user: null,
+	vendor: __thunderid_browser.VendorConstants.VENDOR_PREFIX
 });
 ThunderIDContext.displayName = "ThunderIDContext";
 var ThunderIDContext_default = ThunderIDContext;

package/dist/cjs/contexts/ThunderID/ThunderIDContext.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDContext.cjs","names":["ThunderIDContext: Context<ThunderIDContextProps | null>"],"sources":["../../../../src/contexts/ThunderID/ThunderIDContext.ts"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  FlowMetadataResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  IdToken,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  TokenExchangeRequestConfig,\n  TokenResponse,\n} from '@thunderid/browser';\nimport {Context, createContext} from 'react';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\n\n/**\n * Props interface of {@link ThunderIDContext}\n */\nexport type ThunderIDContextProps = {\n  afterSignInUrl: string | undefined;\n  applicationId: string | undefined;\n  baseUrl: string | undefined;\n  clientId: string | undefined;\n  scopes: string | string[] | undefined;\n  /**\n   * OIDC discovery data.\n   */\n  discovery: {\n    /**\n     * The response from the `.well-known/openid-configuration` endpoint.\n     * Contains server capabilities, supported endpoints, and metadata.\n     * `null` while loading or when discovery has not been fetched.\n     */\n    wellKnown: OIDCDiscoveryApiResponse | null;\n  };\n  /**\n   * Swaps the current access token with a new one based on the provided configuration (with a grant type).\n   * @param config - Configuration for the token exchange request.\n   * @returns A promise that resolves to the token response or the raw response.\n   */\n  exchangeToken: (config: TokenExchangeRequestConfig) => Promise<TokenResponse | Response>;\n  /**\n   * Retrieves the access token stored in the storage.\n   * This function retrieves the access token and returns it.\n   * @remarks This does not work in the `webWorker` or any other worker environment.\n   * @returns A promise that resolves to the access token.\n   */\n  getAccessToken: () => Promise<string>;\n  /**\n   * Function to retrieve the decoded ID token.\n   * This function decodes the ID token and returns its payload.\n   * It can be used to access user claims and other information contained in the ID token.\n   *\n   * @returns A promise that resolves to the decoded ID token payload.\n   */\n  getDecodedIdToken: () => Promise<IdToken>;\n  /**\n   * Function to retrieve the ID token.\n   * This function retrieves the ID token and returns it.\n   *\n   * @returns A promise that resolves to the ID token.\n   */\n  getIdToken: () => Promise<string>;\n  /**\n   * Returns the underlying StorageManager instance for reading and writing SDK-managed storage.\n   */\n  getStorageManager: () => Promise<any>;\n  /**\n   * HTTP request function to make API calls.\n   * @param requestConfig - Configuration for the HTTP request.\n   * @returns A promise that resolves to the HTTP response.\n   */\n  http: {\n    /**\n     * Makes an HTTP request using the provided configuration.\n     * @param requestConfig - Configuration for the HTTP request.\n     * @returns A promise that resolves to the HTTP response.\n     */\n    request: (requestConfig?: HttpRequestConfig) => Promise<HttpResponse<any>>;\n    /**\n     * Makes multiple HTTP requests based on the provided configuration.\n     * @param requestConfigs - Set of configurations for the HTTP requests.\n     * @returns A promise that resolves to an array of HTTP responses.\n     */\n    requestAll: (requestConfigs?: HttpRequestConfig[]) => Promise<HttpResponse<any>[]>;\n  };\n  /**\n   * Instance ID for multi-instance support.\n   */\n  instanceId: number;\n  isInitialized: boolean;\n  /**\n   * Flag indicating whether the SDK is working in the background.\n   */\n  isLoading: boolean;\n  /**\n   * Flag indicating whether flow metadata is currently being fetched.\n   */\n  isMetaLoading: boolean;\n  /**\n   * Flag indicating whether the user is signed in or not.\n   */\n  isSignedIn: boolean;\n\n  /**\n   * Flow metadata returned by `GET /flow/meta` (v2 platform only).\n   * `null` while loading or when `resolveFromMeta` is disabled.\n   */\n  meta: FlowMetadataResponse | null;\n\n  organizationHandle: string | undefined;\n\n  /**\n   * Re-initializes the client with a new configuration.\n   *\n   * @remarks\n   * This can be partial configuration to update only specific fields.\n   *\n   * @param config - New configuration to re-initialize the client with.\n   * @returns Promise resolving to boolean indicating success.\n   */\n  reInitialize: (config: Partial<ThunderIDReactConfig>) => Promise<boolean>;\n\n  /**\n   * Recovery function to initiate the account/password recovery flow.\n   */\n  recover: (...args: any[]) => Promise<any>;\n\n  /**\n   * Resolves `{{ t(key) }}` and `{{ meta(path) }}` template expressions in a string,\n   * using the current i18n translation function and flow metadata from context.\n   *\n   * Useful in render-props patterns where consumers need to expand template strings\n   * that come from the server (e.g. component labels, placeholders, headings).\n   *\n   * @example\n   * const {resolveFlowTemplateLiterals} = useThunderID();\n   * resolveFlowTemplateLiterals('{{ t(signin.heading.label) }}') // → 'Sign In'\n   * resolveFlowTemplateLiterals('Login to {{ meta(application.name) }}') // → 'Login to My App'\n   */\n  resolveFlowTemplateLiterals: (text: string | undefined) => string;\n\n  /**\n   * Sign-in function to initiate the authentication process.\n   * @remark This is the programmatic version of the `SignInButton` component.\n   * TODO: Fix the types.\n   */\n  signIn: (...args: any) => Promise<any>;\n\n  /**\n   * Optional additional parameters to be sent in the sign-in request.\n   * This can include custom parameters that your authorization server supports.\n   * These parameters will be included in the authorization request sent to the server.\n   * If not provided, no additional parameters will be sent.\n   *\n   * @example\n   * signInOptions: { prompt: \"login\", fidp: \"OrganizationSSO\" }\n   */\n  signInOptions?: SignInOptions;\n\n  /**\n   * Optional token request configuration. params are appended to the token endpoint POST body.\n   *\n   * @example\n   * tokenRequest: { params: { resource: \"https://api.example.com\" } }\n   */\n  tokenRequest?: {\n    params?: Record<string, unknown>;\n  };\n\n  /**\n   * Silent sign-in function to re-authenticate the user without user interaction.\n   * @remark This is the programmatic version of the `SilentSignIn` component.\n   */\n  signInSilently: ThunderIDReactClient['signInSilently'];\n\n  signInUrl: string | undefined;\n  /**\n   * Sign-out function to terminate the authentication session.\n   * @remark This is the programmatic version of the `SignOutButton` component.\n   * FIXME: Fix the types.\n   */\n  signOut: any;\n\n  /**\n   * Sign-up function to initiate the registration process.\n   * @remark This is the programmatic version of the `SignUpButton` component.\n   */\n  signUp: (...args: any[]) => Promise<any>;\n\n  signUpUrl: string | undefined;\n\n  user: any;\n} & Pick<ThunderIDReactClient, 'clearSession'>;\n\n/**\n * Context object for managing the Authentication flow builder core context.\n */\nconst ThunderIDContext: Context<ThunderIDContextProps | null> = createContext<null | ThunderIDContextProps>({\n  afterSignInUrl: undefined,\n  applicationId: undefined,\n  baseUrl: undefined,\n  clearSession: () => {},\n  clientId: undefined,\n  scopes: undefined,\n  discovery: {\n    wellKnown: null,\n  },\n  exchangeToken: null as unknown as ThunderIDContextProps['exchangeToken'],\n  getAccessToken: null as unknown as ThunderIDContextProps['getAccessToken'],\n  getDecodedIdToken: null as unknown as ThunderIDContextProps['getDecodedIdToken'],\n  getIdToken: null as unknown as ThunderIDContextProps['getIdToken'],\n  getStorageManager: () => Promise.resolve(null),\n  http: {\n    request: () => null as unknown as Promise<HttpResponse<any>>,\n    requestAll: () => null as unknown as Promise<HttpResponse<any>[]>,\n  },\n  instanceId: 0,\n  isInitialized: false,\n  isLoading: true,\n  isMetaLoading: false,\n  isSignedIn: false,\n  meta: null,\n  organizationHandle: undefined,\n  reInitialize: null as unknown as ThunderIDContextProps['reInitialize'],\n  recover: () => Promise.resolve({} as any),\n  resolveFlowTemplateLiterals: (text: string | undefined) => text ?? '',\n  signIn: () => Promise.resolve({} as any),\n  signInSilently: () => Promise.resolve({} as any),\n  signInUrl: undefined,\n  signOut: () => Promise.resolve({} as any),\n  signUp: () => Promise.resolve({} as any),\n  signUpUrl: undefined,\n  user: null,\n});\n\nThunderIDContext.displayName = 'ThunderIDContext';\n\nexport default ThunderIDContext;\n"],"mappings":";;;;;;;;AAuNA,MAAMA,4CAAsG;CAC1G,gBAAgB;CAChB,eAAe;CACf,SAAS;CACT,oBAAoB;CACpB,UAAU;CACV,QAAQ;CACR,WAAW,EACT,WAAW,MACZ;CACD,eAAe;CACf,gBAAgB;CAChB,mBAAmB;CACnB,YAAY;CACZ,yBAAyB,QAAQ,QAAQ,KAAK;CAC9C,MAAM;EACJ,eAAe;EACf,kBAAkB;EACnB;CACD,YAAY;CACZ,eAAe;CACf,WAAW;CACX,eAAe;CACf,YAAY;CACZ,MAAM;CACN,oBAAoB;CACpB,cAAc;CACd,eAAe,QAAQ,QAAQ,EAAE,CAAQ;CACzC,8BAA8B,SAA6B,QAAQ;CACnE,cAAc,QAAQ,QAAQ,EAAE,CAAQ;CACxC,sBAAsB,QAAQ,QAAQ,EAAE,CAAQ;CAChD,WAAW;CACX,eAAe,QAAQ,QAAQ,EAAE,CAAQ;CACzC,cAAc,QAAQ,QAAQ,EAAE,CAAQ;CACxC,WAAW;CACX,MAAM;CACP,CAAC;AAEF,iBAAiB,cAAc;AAE/B,+BAAe"}
+{"version":3,"file":"ThunderIDContext.cjs","names":["ThunderIDContext: Context<ThunderIDContextProps | null>","VendorConstants"],"sources":["../../../../src/contexts/ThunderID/ThunderIDContext.ts"],"sourcesContent":["/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  FlowMetadataResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  IdToken,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  TokenExchangeRequestConfig,\n  TokenResponse,\n  VendorConstants,\n} from '@thunderid/browser';\nimport {Context, createContext} from 'react';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\n\n/**\n * Props interface of {@link ThunderIDContext}\n */\nexport type ThunderIDContextProps = {\n  afterSignInUrl: string | undefined;\n  applicationId: string | undefined;\n  baseUrl: string | undefined;\n  clientId: string | undefined;\n  scopes: string | string[] | undefined;\n  /**\n   * OIDC discovery data.\n   */\n  discovery: {\n    /**\n     * The response from the `.well-known/openid-configuration` endpoint.\n     * Contains server capabilities, supported endpoints, and metadata.\n     * `null` while loading or when discovery has not been fetched.\n     */\n    wellKnown: OIDCDiscoveryApiResponse | null;\n  };\n  /**\n   * Swaps the current access token with a new one based on the provided configuration (with a grant type).\n   * @param config - Configuration for the token exchange request.\n   * @returns A promise that resolves to the token response or the raw response.\n   */\n  exchangeToken: (config: TokenExchangeRequestConfig) => Promise<TokenResponse | Response>;\n  /**\n   * Retrieves the access token stored in the storage.\n   * This function retrieves the access token and returns it.\n   * @remarks This does not work in the `webWorker` or any other worker environment.\n   * @returns A promise that resolves to the access token.\n   */\n  getAccessToken: () => Promise<string>;\n  /**\n   * Function to retrieve the decoded ID token.\n   * This function decodes the ID token and returns its payload.\n   * It can be used to access user claims and other information contained in the ID token.\n   *\n   * @returns A promise that resolves to the decoded ID token payload.\n   */\n  getDecodedIdToken: () => Promise<IdToken>;\n  /**\n   * Function to retrieve the ID token.\n   * This function retrieves the ID token and returns it.\n   *\n   * @returns A promise that resolves to the ID token.\n   */\n  getIdToken: () => Promise<string>;\n  /**\n   * Returns the underlying StorageManager instance for reading and writing SDK-managed storage.\n   */\n  getStorageManager: () => Promise<any>;\n  /**\n   * HTTP request function to make API calls.\n   * @param requestConfig - Configuration for the HTTP request.\n   * @returns A promise that resolves to the HTTP response.\n   */\n  http: {\n    /**\n     * Makes an HTTP request using the provided configuration.\n     * @param requestConfig - Configuration for the HTTP request.\n     * @returns A promise that resolves to the HTTP response.\n     */\n    request: (requestConfig?: HttpRequestConfig) => Promise<HttpResponse<any>>;\n    /**\n     * Makes multiple HTTP requests based on the provided configuration.\n     * @param requestConfigs - Set of configurations for the HTTP requests.\n     * @returns A promise that resolves to an array of HTTP responses.\n     */\n    requestAll: (requestConfigs?: HttpRequestConfig[]) => Promise<HttpResponse<any>[]>;\n  };\n  /**\n   * Instance ID for multi-instance support.\n   */\n  instanceId: number;\n  isInitialized: boolean;\n  /**\n   * Flag indicating whether the SDK is working in the background.\n   */\n  isLoading: boolean;\n  /**\n   * Flag indicating whether flow metadata is currently being fetched.\n   */\n  isMetaLoading: boolean;\n  /**\n   * Flag indicating whether the user is signed in or not.\n   */\n  isSignedIn: boolean;\n\n  /**\n   * Flow metadata returned by `GET /flow/meta` (v2 platform only).\n   * `null` while loading or when `resolveFromMeta` is disabled.\n   */\n  meta: FlowMetadataResponse | null;\n\n  organizationHandle: string | undefined;\n\n  /**\n   * Re-initializes the client with a new configuration.\n   *\n   * @remarks\n   * This can be partial configuration to update only specific fields.\n   *\n   * @param config - New configuration to re-initialize the client with.\n   * @returns Promise resolving to boolean indicating success.\n   */\n  reInitialize: (config: Partial<ThunderIDReactConfig>) => Promise<boolean>;\n\n  /**\n   * Recovery function to initiate the account/password recovery flow.\n   */\n  recover: (...args: any[]) => Promise<any>;\n\n  /**\n   * Resolves `{{ t(key) }}` and `{{ meta(path) }}` template expressions in a string,\n   * using the current i18n translation function and flow metadata from context.\n   *\n   * Useful in render-props patterns where consumers need to expand template strings\n   * that come from the server (e.g. component labels, placeholders, headings).\n   *\n   * @example\n   * const {resolveFlowTemplateLiterals} = useThunderID();\n   * resolveFlowTemplateLiterals('{{ t(signin.heading.label) }}') // → 'Sign In'\n   * resolveFlowTemplateLiterals('Login to {{ meta(application.name) }}') // → 'Login to My App'\n   */\n  resolveFlowTemplateLiterals: (text: string | undefined) => string;\n\n  /**\n   * Sign-in function to initiate the authentication process.\n   * @remark This is the programmatic version of the `SignInButton` component.\n   * TODO: Fix the types.\n   */\n  signIn: (...args: any) => Promise<any>;\n\n  /**\n   * Optional additional parameters to be sent in the sign-in request.\n   * This can include custom parameters that your authorization server supports.\n   * These parameters will be included in the authorization request sent to the server.\n   * If not provided, no additional parameters will be sent.\n   *\n   * @example\n   * signInOptions: { prompt: \"login\", fidp: \"OrganizationSSO\" }\n   */\n  signInOptions?: SignInOptions;\n\n  /**\n   * Optional token request configuration. params are appended to the token endpoint POST body.\n   *\n   * @example\n   * tokenRequest: { params: { resource: \"https://api.example.com\" } }\n   */\n  tokenRequest?: {\n    params?: Record<string, unknown>;\n  };\n\n  /**\n   * Silent sign-in function to re-authenticate the user without user interaction.\n   * @remark This is the programmatic version of the `SilentSignIn` component.\n   */\n  signInSilently: ThunderIDReactClient['signInSilently'];\n\n  signInUrl: string | undefined;\n  /**\n   * Sign-out function to terminate the authentication session.\n   * @remark This is the programmatic version of the `SignOutButton` component.\n   * FIXME: Fix the types.\n   */\n  signOut: any;\n\n  /**\n   * Sign-up function to initiate the registration process.\n   * @remark This is the programmatic version of the `SignUpButton` component.\n   */\n  signUp: (...args: any[]) => Promise<any>;\n\n  signUpUrl: string | undefined;\n\n  user: any;\n\n  /**\n   * Vendor/brand namespace used to prefix storage keys, cookie names, and CSS class names.\n   * Resolved from the `vendor` config option, defaulting to `'thunderid'`.\n   */\n  vendor: string;\n} & Pick<ThunderIDReactClient, 'clearSession'>;\n\n/**\n * Context object for managing the Authentication flow builder core context.\n */\nconst ThunderIDContext: Context<ThunderIDContextProps | null> = createContext<null | ThunderIDContextProps>({\n  afterSignInUrl: undefined,\n  applicationId: undefined,\n  baseUrl: undefined,\n  clearSession: () => {},\n  clientId: undefined,\n  scopes: undefined,\n  discovery: {\n    wellKnown: null,\n  },\n  exchangeToken: null as unknown as ThunderIDContextProps['exchangeToken'],\n  getAccessToken: null as unknown as ThunderIDContextProps['getAccessToken'],\n  getDecodedIdToken: null as unknown as ThunderIDContextProps['getDecodedIdToken'],\n  getIdToken: null as unknown as ThunderIDContextProps['getIdToken'],\n  getStorageManager: () => Promise.resolve(null),\n  http: {\n    request: () => null as unknown as Promise<HttpResponse<any>>,\n    requestAll: () => null as unknown as Promise<HttpResponse<any>[]>,\n  },\n  instanceId: 0,\n  isInitialized: false,\n  isLoading: true,\n  isMetaLoading: false,\n  isSignedIn: false,\n  meta: null,\n  organizationHandle: undefined,\n  reInitialize: null as unknown as ThunderIDContextProps['reInitialize'],\n  recover: () => Promise.resolve({} as any),\n  resolveFlowTemplateLiterals: (text: string | undefined) => text ?? '',\n  signIn: () => Promise.resolve({} as any),\n  signInSilently: () => Promise.resolve({} as any),\n  signInUrl: undefined,\n  signOut: () => Promise.resolve({} as any),\n  signUp: () => Promise.resolve({} as any),\n  signUpUrl: undefined,\n  user: null,\n  vendor: VendorConstants.VENDOR_PREFIX,\n});\n\nThunderIDContext.displayName = 'ThunderIDContext';\n\nexport default ThunderIDContext;\n"],"mappings":";;;;;;;;;;AA8NA,MAAMA,4CAAsG;CAC1G,gBAAgB;CAChB,eAAe;CACf,SAAS;CACT,oBAAoB;CACpB,UAAU;CACV,QAAQ;CACR,WAAW,EACT,WAAW,MACZ;CACD,eAAe;CACf,gBAAgB;CAChB,mBAAmB;CACnB,YAAY;CACZ,yBAAyB,QAAQ,QAAQ,KAAK;CAC9C,MAAM;EACJ,eAAe;EACf,kBAAkB;EACnB;CACD,YAAY;CACZ,eAAe;CACf,WAAW;CACX,eAAe;CACf,YAAY;CACZ,MAAM;CACN,oBAAoB;CACpB,cAAc;CACd,eAAe,QAAQ,QAAQ,EAAE,CAAQ;CACzC,8BAA8B,SAA6B,QAAQ;CACnE,cAAc,QAAQ,QAAQ,EAAE,CAAQ;CACxC,sBAAsB,QAAQ,QAAQ,EAAE,CAAQ;CAChD,WAAW;CACX,eAAe,QAAQ,QAAQ,EAAE,CAAQ;CACzC,cAAc,QAAQ,QAAQ,EAAE,CAAQ;CACxC,WAAW;CACX,MAAM;CACN,QAAQC,oCAAgB;CACzB,CAAC;AAEF,iBAAiB,cAAc;AAE/B,+BAAe"}

package/dist/cjs/contexts/ThunderID/ThunderIDProvider.cjs

@@ -130,7 +130,7 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 				const urlParams = currentUrl.searchParams;
 				const code = urlParams.get("code");
 				const executionIdFromUrl = urlParams.get("executionId");
-				const storedExecutionId = sessionStorage.getItem("thunderid_execution_id");
+				const storedExecutionId = sessionStorage.getItem(`${(0, __thunderid_browser.getVendorPrefix)(config.vendor)}_execution_id`);
 				if (code && !executionIdFromUrl && !storedExecutionId) await signIn();
 			} catch (error) {
 				throw new __thunderid_browser.ThunderIDRuntimeError(`Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`, "thunderid-signIn-Error", "react", "An error occurred while trying to sign in.");
@@ -262,10 +262,12 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 		signUp,
 		signUpUrl,
 		syncSession,
-		user
+		user,
+		vendor: (0, __thunderid_browser.getVendorPrefix)(config.vendor)
 	}), [
 		applicationId,
 		config?.organizationHandle,
+		config.vendor,
 		config.afterSignInUrl,
 		config.scopes,
 		signInUrl,
@@ -301,6 +303,7 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 		value,
 		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_I18nProvider.default, {
 			preferences: preferences?.i18n,
+			vendor: (0, __thunderid_browser.getVendorPrefix)(config.vendor),
 			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_FlowMetaProvider.default, {
 				enabled: preferences?.resolveFromMeta !== false,
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ThemeProvider.default, {

package/dist/cjs/contexts/ThunderID/ThunderIDProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","storageManagerRef: any","useBrowserUrl","resolvedBaseUrl: string","decodedToken: IdToken","claims: User","arg1: any","isV2FlowRequest: boolean","ThunderIDRuntimeError","isAlreadySignedIn: boolean","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getStorageManager: () => Promise<any>","storageManager: any","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: (payload: any) => Promise<any>","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025-2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  createPackageComponentLogger,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext from './ThunderIDContext';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  syncSession,\n  instanceId = 0,\n  organizationChain,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<any | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [baseUrl, setBaseUrl] = useState<string>(initialBaseUrl ?? '');\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl,\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    syncSession,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(initialBaseUrl ?? '');\n  }, [initialBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function updateSession(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${(await client.getConfiguration()).baseUrl}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      // TEMPORARY: SCIM2 and Organizations endpoints are not yet supported.\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      setUser(claims);\n      setUserProfile({\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      const currentSignInStatus: boolean = await client.isSignedIn();\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so SCIM2/Me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // User is already authenticated. Skip...\n      const isAlreadySignedIn: boolean = await client.isSignedIn();\n\n      // Start auto-refresh with a soft failure.\n      const scheduleAutoRefresh = async (): Promise<void> => {\n        try {\n          await client.startAutoRefreshToken();\n        } catch (error) {\n          logger.warn('Failed to schedule automatic token refresh.', error);\n        }\n      };\n\n      // Restore session state and kick off the refresh timer.\n      const resumeSession = async (): Promise<void> => {\n        await updateSession();\n        await scheduleAutoRefresh();\n      };\n\n      if (isAlreadySignedIn) {\n        await resumeSession();\n      }\n\n      // The access token may have expired while the refresh token is still valid.\n      // Attempt a silent refresh — startAutoRefreshToken() calls refreshAccessToken()\n      // immediately when timeUntilRefresh <= 0, then re-check sign-in status.\n      await scheduleAutoRefresh();\n\n      if (await client.isSignedIn()) {\n        await resumeSession();\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem('thunderid_execution_id');\n\n          if (code && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      schemas: prev?.schemas ?? [],\n      flattenedProfile: generateFlattenedUserProfile(payload, prev?.schemas ?? []),\n      profile: payload,\n    }));\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getStorageManager: () => Promise<any> = useCallback(async (): Promise<any> => {\n    const storageManager: any = storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: (payload: any) => Promise<any> = useCallback(\n    async (payload: any): Promise<any> => client.recover(payload),\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => client.reInitialize(reInitConfig),\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getIdToken,\n      getStorageManager,\n      http: {\n        request,\n        requestAll,\n      },\n      instanceId,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      syncSession,\n      user,\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.afterSignInUrl,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      client,\n      signInOptions,\n      tokenRequest,\n      syncSession,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      getAccessToken,\n      getStorageManager,\n      instanceId,\n      organizationChain,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider profile={userProfile!} onUpdateProfile={handleProfileUpdate}>\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;AA0CA,MAAMA,+DACJ,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aACA,aAAa,GACb,kBACA,GAAG,WAC0D;CAC7D,MAAMC,qCAA8C,MAAM;CAC1D,MAAMC,kCAA6C,IAAIC,qCAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,sCAAqC,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,+BAAe;CACjE,MAAM,CAAC,MAAM,+BAAgC,KAAK;CAClD,MAAM,CAAC,gBAAgB,yCAAuC,MAAM;CACpE,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,eAAe,wCAAsC,KAAK;CAEjE,MAAM,CAAC,aAAa,sCAA+C,KAAK;CACxE,MAAM,CAAC,SAAS,kCAA+B,kBAAkB,GAAG;CACpE,MAAM,CAAC,QAAQ,iCAA4C;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,WAAW,oCAA0D,KAAK;AAEjF,4BAAgB;AACd,aAAW,kBAAkB,GAAG;IAC/B,CAAC,eAAe,CAAC;AAEpB,4BAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,gBAA+B;AAC5C,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,IAAI,MAAM,OAAO,kBAAkB,EAAE,QAAQ;AAC/D,eAAW,gBAAgB;;GAI7B,MAAMC,+DAA4C,aAAa;AAC/D,WAAQ,OAAO;AACf,kBAAe;IACb,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ,CAAC;AAKF,qBADqC,MAAM,OAAO,YAAY,CACxB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAIC,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,4BAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;GAGF,MAAMC,oBAA6B,MAAM,OAAO,YAAY;GAG5D,MAAM,sBAAsB,YAA2B;AACrD,QAAI;AACF,WAAM,OAAO,uBAAuB;aAC7B,OAAO;AACd,YAAO,KAAK,+CAA+C,MAAM;;;GAKrE,MAAM,gBAAgB,YAA2B;AAC/C,UAAM,eAAe;AACrB,UAAM,qBAAqB;;AAG7B,OAAI,kBACF,OAAM,eAAe;AAMvB,SAAM,qBAAqB;AAE3B,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AACrB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QAAQ,yBAAyB;AAEzF,QAAI,QAAQ,CAAC,sBAAsB,CAAC,kBAClC,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAIN,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,4BAAgB;EACd,IAAIO;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,4BAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,4BAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMN,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMK,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAIP,0CACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,SAAS,MAAM,WAAW,EAAE;GAC5B,wEAA+C,SAAS,MAAM,WAAW,EAAE,CAAC;GAC5E,SAAS;GACV,EAAE;;CAGL,MAAMS,2CACJ,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,oCAAgD,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,wCACJ,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,2CAAoD,YAA0B;EAClF,MAAMC,iBAAsB,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAC1F,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,oCACJ,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,uCACJ,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,YAA+B,OAAO,QAAQ,QAAQ,EAC7D,CAAC,OAAO,CACT;CAED,MAAMC,gCACJ,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,iBAAoC,OAAO,aAAa,aAAa,EAC5E,CAAC,OAAO,CACT;CAED,MAAMC,kCACG;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ;GACA;GACD;EACD;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,2CAACC,iCAAiB;EAAgB;YAChC,2CAACC;GAAa,aAAa,aAAa;aACtC,2CAACC;IAAiB,SAAS,aAAa,oBAAoB;cAC1D,2CAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,2CAACC,0CACC,2CAACC;MAAa,SAAS;MAAc,iBAAiB;gBACpD,2CAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}
+{"version":3,"file":"ThunderIDProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","storageManagerRef: any","useBrowserUrl","resolvedBaseUrl: string","decodedToken: IdToken","claims: User","arg1: any","isV2FlowRequest: boolean","ThunderIDRuntimeError","isAlreadySignedIn: boolean","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getStorageManager: () => Promise<any>","storageManager: any","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: (payload: any) => Promise<any>","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["/**\n * Copyright (c) 2025-2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext from './ThunderIDContext';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  syncSession,\n  instanceId = 0,\n  organizationChain,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<any | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [baseUrl, setBaseUrl] = useState<string>(initialBaseUrl ?? '');\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl,\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    syncSession,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(initialBaseUrl ?? '');\n  }, [initialBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function updateSession(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${(await client.getConfiguration()).baseUrl}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      // TEMPORARY: SCIM2 and Organizations endpoints are not yet supported.\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      setUser(claims);\n      setUserProfile({\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      const currentSignInStatus: boolean = await client.isSignedIn();\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so SCIM2/Me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // User is already authenticated. Skip...\n      const isAlreadySignedIn: boolean = await client.isSignedIn();\n\n      // Start auto-refresh with a soft failure.\n      const scheduleAutoRefresh = async (): Promise<void> => {\n        try {\n          await client.startAutoRefreshToken();\n        } catch (error) {\n          logger.warn('Failed to schedule automatic token refresh.', error);\n        }\n      };\n\n      // Restore session state and kick off the refresh timer.\n      const resumeSession = async (): Promise<void> => {\n        await updateSession();\n        await scheduleAutoRefresh();\n      };\n\n      if (isAlreadySignedIn) {\n        await resumeSession();\n      }\n\n      // The access token may have expired while the refresh token is still valid.\n      // Attempt a silent refresh — startAutoRefreshToken() calls refreshAccessToken()\n      // immediately when timeUntilRefresh <= 0, then re-check sign-in status.\n      await scheduleAutoRefresh();\n\n      if (await client.isSignedIn()) {\n        await resumeSession();\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          if (code && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      schemas: prev?.schemas ?? [],\n      flattenedProfile: generateFlattenedUserProfile(payload, prev?.schemas ?? []),\n      profile: payload,\n    }));\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getStorageManager: () => Promise<any> = useCallback(async (): Promise<any> => {\n    const storageManager: any = storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: (payload: any) => Promise<any> = useCallback(\n    async (payload: any): Promise<any> => client.recover(payload),\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => client.reInitialize(reInitConfig),\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getIdToken,\n      getStorageManager,\n      http: {\n        request,\n        requestAll,\n      },\n      instanceId,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      syncSession,\n      user,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      client,\n      signInOptions,\n      tokenRequest,\n      syncSession,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      getAccessToken,\n      getStorageManager,\n      instanceId,\n      organizationChain,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider profile={userProfile!} onUpdateProfile={handleProfileUpdate}>\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;AA2CA,MAAMA,+DACJ,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aACA,aAAa,GACb,kBACA,GAAG,WAC0D;CAC7D,MAAMC,qCAA8C,MAAM;CAC1D,MAAMC,kCAA6C,IAAIC,qCAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,sCAAqC,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,+BAAe;CACjE,MAAM,CAAC,MAAM,+BAAgC,KAAK;CAClD,MAAM,CAAC,gBAAgB,yCAAuC,MAAM;CACpE,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,eAAe,wCAAsC,KAAK;CAEjE,MAAM,CAAC,aAAa,sCAA+C,KAAK;CACxE,MAAM,CAAC,SAAS,kCAA+B,kBAAkB,GAAG;CACpE,MAAM,CAAC,QAAQ,iCAA4C;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,WAAW,oCAA0D,KAAK;AAEjF,4BAAgB;AACd,aAAW,kBAAkB,GAAG;IAC/B,CAAC,eAAe,CAAC;AAEpB,4BAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,gBAA+B;AAC5C,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,IAAI,MAAM,OAAO,kBAAkB,EAAE,QAAQ;AAC/D,eAAW,gBAAgB;;GAI7B,MAAMC,+DAA4C,aAAa;AAC/D,WAAQ,OAAO;AACf,kBAAe;IACb,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ,CAAC;AAKF,qBADqC,MAAM,OAAO,YAAY,CACxB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAIC,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,4BAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;GAGF,MAAMC,oBAA6B,MAAM,OAAO,YAAY;GAG5D,MAAM,sBAAsB,YAA2B;AACrD,QAAI;AACF,WAAM,OAAO,uBAAuB;aAC7B,OAAO;AACd,YAAO,KAAK,+CAA+C,MAAM;;;GAKrE,MAAM,gBAAgB,YAA2B;AAC/C,UAAM,eAAe;AACrB,UAAM,qBAAqB;;AAG7B,OAAI,kBACF,OAAM,eAAe;AAMvB,SAAM,qBAAqB;AAE3B,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AACrB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,4CAAmB,OAAO,OAAO,CAAC,eACnC;AAED,QAAI,QAAQ,CAAC,sBAAsB,CAAC,kBAClC,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAIN,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,4BAAgB;EACd,IAAIO;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,4BAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,4BAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMN,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMK,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAIP,0CACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,SAAS,MAAM,WAAW,EAAE;GAC5B,wEAA+C,SAAS,MAAM,WAAW,EAAE,CAAC;GAC5E,SAAS;GACV,EAAE;;CAGL,MAAMS,2CACJ,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,oCAAgD,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,wCACJ,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,2CAAoD,YAA0B;EAClF,MAAMC,iBAAsB,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAC1F,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,oCACJ,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,uCACJ,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,YAA+B,OAAO,QAAQ,QAAQ,EAC7D,CAAC,OAAO,CACT;CAED,MAAMC,gCACJ,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,iBAAoC,OAAO,aAAa,aAAa,EAC5E,CAAC,OAAO,CACT;CAED,MAAMC,kCACG;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ;GACA;GACD;EACD;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,iDAAwB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,2CAACC,iCAAiB;EAAgB;YAChC,2CAACC;GAAa,aAAa,aAAa;GAAM,iDAAwB,OAAO,OAAO;aAClF,2CAACC;IAAiB,SAAS,aAAa,oBAAoB;cAC1D,2CAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,2CAACC,0CACC,2CAACC;MAAa,SAAS;MAAc,iBAAiB;gBACpD,2CAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}

package/dist/cjs/utils/oauth.cjs

@@ -8,13 +8,14 @@ __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
 * Generates random state, stores return path in sessionStorage, and redirects to OAuth provider.
 *
 * @param redirectURL - OAuth authorization URL from the server
+* @param vendor - Vendor/brand namespace used to prefix the sessionStorage key. Defaults to `'thunderid'`.
 */
-function initiateOAuthRedirect(redirectURL) {
+function initiateOAuthRedirect(redirectURL, vendor) {
 	const basePath = document.querySelector("base")?.getAttribute("href") || "";
 	let returnPath = window.location.pathname;
 	if (basePath && returnPath.startsWith(basePath)) returnPath = returnPath.slice(basePath.length) || "/";
 	const state = crypto.randomUUID();
-	sessionStorage.setItem(`thunderid_oauth_${state}`, JSON.stringify({
+	sessionStorage.setItem(`${(0, __thunderid_browser.getVendorPrefix)(vendor)}_oauth_${state}`, JSON.stringify({
 		path: returnPath,
 		timestamp: Date.now()
 	}));