@thunderid/react 0.4.0 → 0.6.0

package/dist/cjs/utils/composeAffixedInputs.cjs

@@ -0,0 +1,74 @@
+const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/utils/composeAffixedInputs.ts
+/**
+* Returns the runtime sentinel prefix used to tag "selected prefix" entries in the
+* form-state map. Resolved through the vendor namespace so white-labeled deployments
+* do not collide with each other or with a real field identifier.
+*/
+const prefixSentinel = (vendor) => `__${(0, __thunderid_browser.getVendorPrefix)(vendor)}_prefix__`;
+/**
+* Returns the runtime sentinel prefix used to tag "postfix" entries in the form-state
+* map. See {@link prefixSentinel}.
+*/
+const postfixSentinel = (vendor) => `__${(0, __thunderid_browser.getVendorPrefix)(vendor)}_postfix__`;
+/**
+* Returns the sentinel key used to store the selected prefix `value` for the affixed
+* field addressed by `identifier`. The vendor namespace controls the runtime string
+* so consumers overriding `vendor` do not conflict with the SDK default.
+*/
+const affixPrefixKey = (identifier, vendor) => `${prefixSentinel(vendor)}${identifier}`;
+/**
+* Returns the sentinel key used to store the postfix `value` for the affixed field
+* addressed by `identifier`. See {@link affixPrefixKey}.
+*/
+const affixPostfixKey = (identifier, vendor) => `${postfixSentinel(vendor)}${identifier}`;
+/**
+* Rewrites `formData` (returns a new object) so that any affixed-input identifier
+* tracked by matching sentinel prefix/postfix keys is replaced with its composed
+* form `${prefix}${typed}${postfix}`. Sentinel keys are stripped from the result.
+*
+* Behaviour:
+*  - Prefix present, postfix present  → `prefix + typed + postfix`.
+*  - Only prefix present               → `prefix + typed`.
+*  - Only postfix present              → `typed + postfix`.
+*  - Both empty / typed empty          → the identifier is left untouched.
+*  - No sentinel keys                  → returns a shallow copy of `formData` unchanged.
+*
+* The input object is not mutated. This is component-type agnostic: any field carrying
+* matching sentinel keys is composed, regardless of whether it originated from a
+* TEXT_INPUT, EMAIL_INPUT, PASSWORD_INPUT, or PHONE_INPUT.
+*
+* @param formData - The current form values map (values indexed by field identifier).
+* @param vendor - The vendor namespace configured on the SDK client, if any. Sentinel
+*   keys are resolved through this namespace so composition ignores unrelated keys
+*   written by other vendors when multiple SDK instances share a form.
+*/
+const composeAffixedInputs = (formData, vendor) => {
+	const composed = { ...formData };
+	const prefixTag = prefixSentinel(vendor);
+	const postfixTag = postfixSentinel(vendor);
+	for (const key of Object.keys(formData)) {
+		if (!key.startsWith(prefixTag) && !key.startsWith(postfixTag)) continue;
+		const identifier = key.startsWith(prefixTag) ? key.slice(prefixTag.length) : key.slice(postfixTag.length);
+		const typed = composed[identifier] ?? "";
+		if (typed === "") {
+			delete composed[affixPrefixKey(identifier, vendor)];
+			delete composed[affixPostfixKey(identifier, vendor)];
+			continue;
+		}
+		composed[identifier] = `${composed[affixPrefixKey(identifier, vendor)] ?? ""}${typed}${composed[affixPostfixKey(identifier, vendor)] ?? ""}`;
+		delete composed[affixPrefixKey(identifier, vendor)];
+		delete composed[affixPostfixKey(identifier, vendor)];
+	}
+	return composed;
+};
+var composeAffixedInputs_default = composeAffixedInputs;
+
+//#endregion
+exports.affixPostfixKey = affixPostfixKey;
+exports.affixPrefixKey = affixPrefixKey;
+exports.default = composeAffixedInputs_default;
+//# sourceMappingURL=composeAffixedInputs.cjs.map

package/dist/cjs/utils/composeAffixedInputs.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"composeAffixedInputs.cjs","names":["composed: Record<string, string>","prefixTag: string","postfixTag: string","identifier: string","typed: string"],"sources":["../../../src/utils/composeAffixedInputs.ts"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {getVendorPrefix} from '@thunderid/browser';\n\n/**\n * Returns the runtime sentinel prefix used to tag \"selected prefix\" entries in the\n * form-state map. Resolved through the vendor namespace so white-labeled deployments\n * do not collide with each other or with a real field identifier.\n */\nconst prefixSentinel = (vendor?: string): string => `__${getVendorPrefix(vendor)}_prefix__`;\n\n/**\n * Returns the runtime sentinel prefix used to tag \"postfix\" entries in the form-state\n * map. See {@link prefixSentinel}.\n */\nconst postfixSentinel = (vendor?: string): string => `__${getVendorPrefix(vendor)}_postfix__`;\n\n/**\n * Returns the sentinel key used to store the selected prefix `value` for the affixed\n * field addressed by `identifier`. The vendor namespace controls the runtime string\n * so consumers overriding `vendor` do not conflict with the SDK default.\n */\nexport const affixPrefixKey = (identifier: string, vendor?: string): string => `${prefixSentinel(vendor)}${identifier}`;\n\n/**\n * Returns the sentinel key used to store the postfix `value` for the affixed field\n * addressed by `identifier`. See {@link affixPrefixKey}.\n */\nexport const affixPostfixKey = (identifier: string, vendor?: string): string =>\n  `${postfixSentinel(vendor)}${identifier}`;\n\n/**\n * Rewrites `formData` (returns a new object) so that any affixed-input identifier\n * tracked by matching sentinel prefix/postfix keys is replaced with its composed\n * form `${prefix}${typed}${postfix}`. Sentinel keys are stripped from the result.\n *\n * Behaviour:\n *  - Prefix present, postfix present  → `prefix + typed + postfix`.\n *  - Only prefix present               → `prefix + typed`.\n *  - Only postfix present              → `typed + postfix`.\n *  - Both empty / typed empty          → the identifier is left untouched.\n *  - No sentinel keys                  → returns a shallow copy of `formData` unchanged.\n *\n * The input object is not mutated. This is component-type agnostic: any field carrying\n * matching sentinel keys is composed, regardless of whether it originated from a\n * TEXT_INPUT, EMAIL_INPUT, PASSWORD_INPUT, or PHONE_INPUT.\n *\n * @param formData - The current form values map (values indexed by field identifier).\n * @param vendor - The vendor namespace configured on the SDK client, if any. Sentinel\n *   keys are resolved through this namespace so composition ignores unrelated keys\n *   written by other vendors when multiple SDK instances share a form.\n */\nconst composeAffixedInputs = (formData: Record<string, string>, vendor?: string): Record<string, string> => {\n  const composed: Record<string, string> = {...formData};\n  const prefixTag: string = prefixSentinel(vendor);\n  const postfixTag: string = postfixSentinel(vendor);\n\n  for (const key of Object.keys(formData)) {\n    if (!key.startsWith(prefixTag) && !key.startsWith(postfixTag)) {\n      continue;\n    }\n\n    const identifier: string = key.startsWith(prefixTag) ? key.slice(prefixTag.length) : key.slice(postfixTag.length);\n\n    const typed: string = composed[identifier] ?? '';\n    if (typed === '') {\n      // Preserve emptiness — required-field checks are the caller's responsibility.\n      delete composed[affixPrefixKey(identifier, vendor)];\n      delete composed[affixPostfixKey(identifier, vendor)];\n      continue;\n    }\n\n    const prefix: string = composed[affixPrefixKey(identifier, vendor)] ?? '';\n    const postfix: string = composed[affixPostfixKey(identifier, vendor)] ?? '';\n\n    composed[identifier] = `${prefix}${typed}${postfix}`;\n    delete composed[affixPrefixKey(identifier, vendor)];\n    delete composed[affixPostfixKey(identifier, vendor)];\n  }\n\n  return composed;\n};\n\nexport default composeAffixedInputs;\n"],"mappings":";;;;;;;;;;AAyBA,MAAM,kBAAkB,WAA4B,8CAAqB,OAAO,CAAC;;;;;AAMjF,MAAM,mBAAmB,WAA4B,8CAAqB,OAAO,CAAC;;;;;;AAOlF,MAAa,kBAAkB,YAAoB,WAA4B,GAAG,eAAe,OAAO,GAAG;;;;;AAM3G,MAAa,mBAAmB,YAAoB,WAClD,GAAG,gBAAgB,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;AAuB/B,MAAM,wBAAwB,UAAkC,WAA4C;CAC1G,MAAMA,WAAmC,EAAC,GAAG,UAAS;CACtD,MAAMC,YAAoB,eAAe,OAAO;CAChD,MAAMC,aAAqB,gBAAgB,OAAO;AAElD,MAAK,MAAM,OAAO,OAAO,KAAK,SAAS,EAAE;AACvC,MAAI,CAAC,IAAI,WAAW,UAAU,IAAI,CAAC,IAAI,WAAW,WAAW,CAC3D;EAGF,MAAMC,aAAqB,IAAI,WAAW,UAAU,GAAG,IAAI,MAAM,UAAU,OAAO,GAAG,IAAI,MAAM,WAAW,OAAO;EAEjH,MAAMC,QAAgB,SAAS,eAAe;AAC9C,MAAI,UAAU,IAAI;AAEhB,UAAO,SAAS,eAAe,YAAY,OAAO;AAClD,UAAO,SAAS,gBAAgB,YAAY,OAAO;AACnD;;AAMF,WAAS,cAAc,GAHA,SAAS,eAAe,YAAY,OAAO,KAAK,KAGpC,QAFX,SAAS,gBAAgB,YAAY,OAAO,KAAK;AAGzE,SAAO,SAAS,eAAe,YAAY,OAAO;AAClD,SAAO,SAAS,gBAAgB,YAAY,OAAO;;AAGrD,QAAO;;AAGT,mCAAe"}

package/dist/cjs/utils/oauth.cjs

@@ -8,13 +8,14 @@ __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
 * Generates random state, stores return path in sessionStorage, and redirects to OAuth provider.
 *
 * @param redirectURL - OAuth authorization URL from the server
+* @param vendor - Vendor/brand namespace used to prefix the sessionStorage key. Defaults to `'thunderid'`.
 */
-function initiateOAuthRedirect(redirectURL) {
+function initiateOAuthRedirect(redirectURL, vendor) {
 	const basePath = document.querySelector("base")?.getAttribute("href") || "";
 	let returnPath = window.location.pathname;
 	if (basePath && returnPath.startsWith(basePath)) returnPath = returnPath.slice(basePath.length) || "/";
 	const state = crypto.randomUUID();
-	sessionStorage.setItem(`thunderid_oauth_${state}`, JSON.stringify({
+	sessionStorage.setItem(`${(0, __thunderid_browser.getVendorPrefix)(vendor)}_oauth_${state}`, JSON.stringify({
 		path: returnPath,
 		timestamp: Date.now()
 	}));

package/dist/cjs/utils/oauth.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.cjs","names":["basePath: string","returnPath: string","state: string","redirectUrlObj: URL"],"sources":["../../../src/utils/oauth.ts"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {navigate} from '@thunderid/browser';\n\n/**\n * Initiates OAuth redirect with CSRF protection.\n * Generates random state, stores return path in sessionStorage, and redirects to OAuth provider.\n *\n * @param redirectURL - OAuth authorization URL from the server\n */\nexport function initiateOAuthRedirect(redirectURL: string): void {\n  const basePath: string = document.querySelector('base')?.getAttribute('href') || '';\n  let returnPath: string = window.location.pathname;\n\n  if (basePath && returnPath.startsWith(basePath)) {\n    returnPath = returnPath.slice(basePath.length) || '/';\n  }\n\n  const state: string = crypto.randomUUID();\n\n  sessionStorage.setItem(\n    `thunderid_oauth_${state}`,\n    JSON.stringify({\n      path: returnPath,\n      timestamp: Date.now(),\n    }),\n  );\n\n  const redirectUrlObj: URL = new URL(redirectURL);\n  redirectUrlObj.searchParams.set('state', state);\n\n  navigate(redirectUrlObj.toString());\n}\n"],"mappings":";;;;;;;;;;;AA0BA,SAAgB,sBAAsB,aAA2B;CAC/D,MAAMA,WAAmB,SAAS,cAAc,OAAO,EAAE,aAAa,OAAO,IAAI;CACjF,IAAIC,aAAqB,OAAO,SAAS;AAEzC,KAAI,YAAY,WAAW,WAAW,SAAS,CAC7C,cAAa,WAAW,MAAM,SAAS,OAAO,IAAI;CAGpD,MAAMC,QAAgB,OAAO,YAAY;AAEzC,gBAAe,QACb,mBAAmB,SACnB,KAAK,UAAU;EACb,MAAM;EACN,WAAW,KAAK,KAAK;EACtB,CAAC,CACH;CAED,MAAMC,iBAAsB,IAAI,IAAI,YAAY;AAChD,gBAAe,aAAa,IAAI,SAAS,MAAM;AAE/C,mCAAS,eAAe,UAAU,CAAC"}
+{"version":3,"file":"oauth.cjs","names":["basePath: string","returnPath: string","state: string","redirectUrlObj: URL"],"sources":["../../../src/utils/oauth.ts"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {navigate, getVendorPrefix} from '@thunderid/browser';\n\n/**\n * Initiates OAuth redirect with CSRF protection.\n * Generates random state, stores return path in sessionStorage, and redirects to OAuth provider.\n *\n * @param redirectURL - OAuth authorization URL from the server\n * @param vendor - Vendor/brand namespace used to prefix the sessionStorage key. Defaults to `'thunderid'`.\n */\nexport function initiateOAuthRedirect(redirectURL: string, vendor?: string): void {\n  const basePath: string = document.querySelector('base')?.getAttribute('href') || '';\n  let returnPath: string = window.location.pathname;\n\n  if (basePath && returnPath.startsWith(basePath)) {\n    returnPath = returnPath.slice(basePath.length) || '/';\n  }\n\n  const state: string = crypto.randomUUID();\n\n  sessionStorage.setItem(\n    `${getVendorPrefix(vendor)}_oauth_${state}`,\n    JSON.stringify({\n      path: returnPath,\n      timestamp: Date.now(),\n    }),\n  );\n\n  const redirectUrlObj: URL = new URL(redirectURL);\n  redirectUrlObj.searchParams.set('state', state);\n\n  navigate(redirectUrlObj.toString());\n}\n"],"mappings":";;;;;;;;;;;;AA2BA,SAAgB,sBAAsB,aAAqB,QAAuB;CAChF,MAAMA,WAAmB,SAAS,cAAc,OAAO,EAAE,aAAa,OAAO,IAAI;CACjF,IAAIC,aAAqB,OAAO,SAAS;AAEzC,KAAI,YAAY,WAAW,WAAW,SAAS,CAC7C,cAAa,WAAW,MAAM,SAAS,OAAO,IAAI;CAGpD,MAAMC,QAAgB,OAAO,YAAY;AAEzC,gBAAe,QACb,4CAAmB,OAAO,CAAC,SAAS,SACpC,KAAK,UAAU;EACb,MAAM;EACN,WAAW,KAAK,KAAK;EACtB,CAAC,CACH;CAED,MAAMC,iBAAsB,IAAI,IAAI,YAAY;AAChD,gBAAe,aAAa,IAAI,SAAS,MAAM;AAE/C,mCAAS,eAAe,UAAU,CAAC"}

package/dist/components/auth/Callback/OAuthCallback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OAuthCallback.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Callback/OAuthCallback.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAC,EAAE,EAAoB,MAAM,OAAO,CAAC;AAE5C;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,kBAAkB,CAkIhD,CAAC;AAEF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"OAuthCallback.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Callback/OAuthCallback.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAC,EAAE,EAAgC,MAAM,OAAO,CAAC;AAGxD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,kBAAkB,CAuIhD,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/components/auth/Callback/OAuthCallback.js

@@ -1,5 +1,6 @@
-import { navigate } from "@thunderid/browser";
-import { useEffect, useRef } from "react";
+import ThunderIDContext_default from "../../../contexts/ThunderID/ThunderIDContext.js";
+import { getVendorPrefix, navigate } from "@thunderid/browser";
+import { useContext, useEffect, useRef } from "react";
 
 //#region src/components/auth/Callback/OAuthCallback.tsx
 /**
@@ -20,6 +21,7 @@ import { useEffect, useRef } from "react";
 */
 const OAuthCallback = ({ onNavigate, onError }) => {
 	const processingRef = useRef(false);
+	const vendor = getVendorPrefix(useContext(ThunderIDContext_default)?.vendor);
 	const navigate$1 = (path) => {
 		if (onNavigate) onNavigate(path);
 		else navigate(path);
@@ -47,7 +49,7 @@ const OAuthCallback = ({ onNavigate, onError }) => {
 					return;
 				}
 				if (!state) throw new Error("Missing OAuth state parameter - possible security issue");
-				const storedData = sessionStorage.getItem(`thunderid_oauth_${state}`);
+				const storedData = sessionStorage.getItem(`${vendor}_oauth_${state}`);
 				if (!storedData) {
 					if (oauthError) {
 						const errorMsg = errorDescription || oauthError || "OAuth authentication failed";
@@ -63,10 +65,10 @@ const OAuthCallback = ({ onNavigate, onError }) => {
 				const { path, timestamp } = JSON.parse(storedData);
 				returnPath = path || "/";
 				if (Date.now() - timestamp > 6e5) {
-					sessionStorage.removeItem(`thunderid_oauth_${state}`);
+					sessionStorage.removeItem(`${vendor}_oauth_${state}`);
 					throw new Error("OAuth state expired - please try again");
 				}
-				sessionStorage.removeItem(`thunderid_oauth_${state}`);
+				sessionStorage.removeItem(`${vendor}_oauth_${state}`);
 				if (oauthError) {
 					const errorMsg = errorDescription || oauthError || "OAuth authentication failed";
 					onError?.(new Error(errorMsg));
@@ -92,7 +94,11 @@ const OAuthCallback = ({ onNavigate, onError }) => {
 			}
 		};
 		processOAuthCallback();
-	}, [onNavigate, onError]);
+	}, [
+		onNavigate,
+		onError,
+		vendor
+	]);
 	return null;
 };
 

package/dist/components/auth/Callback/OAuthCallback.js.map

@@ -1 +1 @@
-{"version":3,"file":"OAuthCallback.js","names":["OAuthCallback: FC<OAuthCallbackProps>","processingRef: any","navigate","urlParams: URLSearchParams","code: string | null","state: string | null","nonce: string | null","oauthError: string | null","errorDescription: string | null","storedData: string | null","errorMsg: string","params: URLSearchParams","params","errorMessage: string"],"sources":["../../../../src/components/auth/Callback/OAuthCallback.tsx"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {navigate as browserNavigate} from '@thunderid/browser';\nimport {FC, useEffect, useRef} from 'react';\n\n/**\n * Props for Callback component\n */\nexport interface OAuthCallbackProps {\n  /**\n   * Callback function called when an error occurs\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Function to navigate to a different path.\n   * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).\n   * Provide this prop to enable framework-specific navigation (e.g., from React Router).\n   */\n  onNavigate?: (path: string) => void;\n}\n\n/**\n * BaseCallback is a headless component that handles OAuth callback parameter forwarding.\n * This component extracts OAuth parameters (code, state, error) from the URL and forwards them\n * to the original component that initiated the OAuth flow.\n *\n * Works standalone using the browser navigate utility (History API) for navigation by default.\n * Pass an onNavigate prop to enable framework-specific navigation (e.g., via React Router).\n *\n * Flow: Extract OAuth parameters from URL -> Parse state parameter -> Redirect to original path with parameters\n *\n * The original component (SignIn/AcceptInvite) is responsible for:\n * - Processing the OAuth code via the SDK\n * - Calling /flow/execute\n * - Handling the assertion and auth/callback POST\n * - Managing the authenticated session\n */\nexport const OAuthCallback: FC<OAuthCallbackProps> = ({onNavigate, onError}: OAuthCallbackProps) => {\n  // Prevent double execution in React Strict Mode\n  const processingRef: any = useRef(false);\n\n  // Resolve navigation: use provided onNavigate (router-aware) or fall back to browser navigate utility\n  const navigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n    } else {\n      browserNavigate(path);\n    }\n  };\n\n  useEffect(() => {\n    const processOAuthCallback = (): void => {\n      // Guard against double execution\n      if (processingRef.current) {\n        return;\n      }\n      processingRef.current = true;\n\n      // Declare variables outside try block for use in catch\n      let returnPath = '/';\n\n      try {\n        // 1. Extract OAuth parameters from URL\n        const urlParams: URLSearchParams = new URLSearchParams(window.location.search);\n        const code: string | null = urlParams.get('code');\n        const state: string | null = urlParams.get('state');\n        const nonce: string | null = urlParams.get('nonce');\n        const oauthError: string | null = urlParams.get('error');\n        const errorDescription: string | null = urlParams.get('error_description');\n\n        // 1a. If running inside a popup (e.g. social signup), send OAuth params\n        //     back to the opener via postMessage. The parent window's handler will\n        //     close this popup after processing the code.\n        if (window.opener) {\n          window.opener.postMessage({code, error: oauthError, errorDescription, nonce, state}, window.location.origin);\n          return;\n        }\n\n        // 2. Validate and retrieve OAuth state from sessionStorage\n        if (!state) {\n          throw new Error('Missing OAuth state parameter - possible security issue');\n        }\n\n        const storedData: string | null = sessionStorage.getItem(`thunderid_oauth_${state}`);\n        if (!storedData) {\n          // If state not found, might be an error callback - try to handle gracefully\n          if (oauthError) {\n            const errorMsg: string = errorDescription || oauthError || 'OAuth authentication failed';\n            const err: Error = new Error(errorMsg);\n            onError?.(err);\n\n            const params: URLSearchParams = new URLSearchParams();\n            params.set('error', oauthError);\n            if (errorDescription) {\n              params.set('error_description', errorDescription);\n            }\n\n            navigate(`/?${params.toString()}`);\n            return;\n          }\n          throw new Error('Invalid OAuth state - possible CSRF attack');\n        }\n\n        const {path, timestamp} = JSON.parse(storedData);\n        returnPath = path || '/';\n\n        // 3. Validate state freshness\n        const MAX_STATE_AGE = 600000; // 10 minutes\n        if (Date.now() - timestamp > MAX_STATE_AGE) {\n          sessionStorage.removeItem(`thunderid_oauth_${state}`);\n          throw new Error('OAuth state expired - please try again');\n        }\n\n        // 4. Clean up state\n        sessionStorage.removeItem(`thunderid_oauth_${state}`);\n\n        // 5. Handle OAuth error response\n        if (oauthError) {\n          const errorMsg: string = errorDescription || oauthError || 'OAuth authentication failed';\n          const err: Error = new Error(errorMsg);\n          onError?.(err);\n\n          const params: URLSearchParams = new URLSearchParams();\n          params.set('error', oauthError);\n          if (errorDescription) {\n            params.set('error_description', errorDescription);\n          }\n\n          navigate(`${returnPath}?${params.toString()}`);\n          return;\n        }\n\n        // 6. Validate required parameters\n        if (!code) {\n          throw new Error('Missing OAuth authorization code');\n        }\n\n        // 7. Forward OAuth code to original component\n        // The component (SignIn/AcceptInvite) will retrieve flowId/authId from sessionStorage\n        const params: URLSearchParams = new URLSearchParams();\n        params.set('code', code);\n        if (nonce) {\n          params.set('nonce', nonce);\n        }\n\n        navigate(`${returnPath}?${params.toString()}`);\n      } catch (err) {\n        const errorMessage: string = err instanceof Error ? err.message : 'OAuth callback processing failed';\n        // eslint-disable-next-line no-console\n        console.error('OAuth callback error:', err);\n\n        onError?.(err instanceof Error ? err : new Error(errorMessage));\n\n        // Redirect back with OAuth error format\n        const params: URLSearchParams = new URLSearchParams();\n        params.set('error', 'callback_error');\n        params.set('error_description', errorMessage);\n\n        navigate(`${returnPath}?${params.toString()}`);\n      }\n    };\n\n    processOAuthCallback();\n  }, [onNavigate, onError]);\n\n  // Headless component - no UI, just processing logic\n  return null;\n};\n\nexport default OAuthCallback;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsDA,MAAaA,iBAAyC,EAAC,YAAY,cAAiC;CAElG,MAAMC,gBAAqB,OAAO,MAAM;CAGxC,MAAMC,cAAY,SAAuB;AACvC,MAAI,WACF,YAAW,KAAK;MAEhB,UAAgB,KAAK;;AAIzB,iBAAgB;EACd,MAAM,6BAAmC;AAEvC,OAAI,cAAc,QAChB;AAEF,iBAAc,UAAU;GAGxB,IAAI,aAAa;AAEjB,OAAI;IAEF,MAAMC,YAA6B,IAAI,gBAAgB,OAAO,SAAS,OAAO;IAC9E,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,QAAuB,UAAU,IAAI,QAAQ;IACnD,MAAMC,QAAuB,UAAU,IAAI,QAAQ;IACnD,MAAMC,aAA4B,UAAU,IAAI,QAAQ;IACxD,MAAMC,mBAAkC,UAAU,IAAI,oBAAoB;AAK1E,QAAI,OAAO,QAAQ;AACjB,YAAO,OAAO,YAAY;MAAC;MAAM,OAAO;MAAY;MAAkB;MAAO;MAAM,EAAE,OAAO,SAAS,OAAO;AAC5G;;AAIF,QAAI,CAAC,MACH,OAAM,IAAI,MAAM,0DAA0D;IAG5E,MAAMC,aAA4B,eAAe,QAAQ,mBAAmB,QAAQ;AACpF,QAAI,CAAC,YAAY;AAEf,SAAI,YAAY;MACd,MAAMC,WAAmB,oBAAoB,cAAc;AAE3D,gBADmB,IAAI,MAAM,SAAS,CACxB;MAEd,MAAMC,WAA0B,IAAI,iBAAiB;AACrD,eAAO,IAAI,SAAS,WAAW;AAC/B,UAAI,iBACF,UAAO,IAAI,qBAAqB,iBAAiB;AAGnD,iBAAS,KAAKC,SAAO,UAAU,GAAG;AAClC;;AAEF,WAAM,IAAI,MAAM,6CAA6C;;IAG/D,MAAM,EAAC,MAAM,cAAa,KAAK,MAAM,WAAW;AAChD,iBAAa,QAAQ;AAIrB,QAAI,KAAK,KAAK,GAAG,YADK,KACsB;AAC1C,oBAAe,WAAW,mBAAmB,QAAQ;AACrD,WAAM,IAAI,MAAM,yCAAyC;;AAI3D,mBAAe,WAAW,mBAAmB,QAAQ;AAGrD,QAAI,YAAY;KACd,MAAMF,WAAmB,oBAAoB,cAAc;AAE3D,eADmB,IAAI,MAAM,SAAS,CACxB;KAEd,MAAMC,WAA0B,IAAI,iBAAiB;AACrD,cAAO,IAAI,SAAS,WAAW;AAC/B,SAAI,iBACF,UAAO,IAAI,qBAAqB,iBAAiB;AAGnD,gBAAS,GAAG,WAAW,GAAGC,SAAO,UAAU,GAAG;AAC9C;;AAIF,QAAI,CAAC,KACH,OAAM,IAAI,MAAM,mCAAmC;IAKrD,MAAMD,SAA0B,IAAI,iBAAiB;AACrD,WAAO,IAAI,QAAQ,KAAK;AACxB,QAAI,MACF,QAAO,IAAI,SAAS,MAAM;AAG5B,eAAS,GAAG,WAAW,GAAG,OAAO,UAAU,GAAG;YACvC,KAAK;IACZ,MAAME,eAAuB,eAAe,QAAQ,IAAI,UAAU;AAElE,YAAQ,MAAM,yBAAyB,IAAI;AAE3C,cAAU,eAAe,QAAQ,MAAM,IAAI,MAAM,aAAa,CAAC;IAG/D,MAAMF,SAA0B,IAAI,iBAAiB;AACrD,WAAO,IAAI,SAAS,iBAAiB;AACrC,WAAO,IAAI,qBAAqB,aAAa;AAE7C,eAAS,GAAG,WAAW,GAAG,OAAO,UAAU,GAAG;;;AAIlD,wBAAsB;IACrB,CAAC,YAAY,QAAQ,CAAC;AAGzB,QAAO"}
+{"version":3,"file":"OAuthCallback.js","names":["OAuthCallback: FC<OAuthCallbackProps>","processingRef: any","vendor: string","ThunderIDContext","navigate","urlParams: URLSearchParams","code: string | null","state: string | null","nonce: string | null","oauthError: string | null","errorDescription: string | null","storedData: string | null","errorMsg: string","params: URLSearchParams","params","errorMessage: string"],"sources":["../../../../src/components/auth/Callback/OAuthCallback.tsx"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {navigate as browserNavigate, getVendorPrefix} from '@thunderid/browser';\nimport {FC, useContext, useEffect, useRef} from 'react';\nimport ThunderIDContext from '../../../contexts/ThunderID/ThunderIDContext';\n\n/**\n * Props for Callback component\n */\nexport interface OAuthCallbackProps {\n  /**\n   * Callback function called when an error occurs\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Function to navigate to a different path.\n   * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).\n   * Provide this prop to enable framework-specific navigation (e.g., from React Router).\n   */\n  onNavigate?: (path: string) => void;\n}\n\n/**\n * BaseCallback is a headless component that handles OAuth callback parameter forwarding.\n * This component extracts OAuth parameters (code, state, error) from the URL and forwards them\n * to the original component that initiated the OAuth flow.\n *\n * Works standalone using the browser navigate utility (History API) for navigation by default.\n * Pass an onNavigate prop to enable framework-specific navigation (e.g., via React Router).\n *\n * Flow: Extract OAuth parameters from URL -> Parse state parameter -> Redirect to original path with parameters\n *\n * The original component (SignIn/AcceptInvite) is responsible for:\n * - Processing the OAuth code via the SDK\n * - Calling /flow/execute\n * - Handling the assertion and auth/callback POST\n * - Managing the authenticated session\n */\nexport const OAuthCallback: FC<OAuthCallbackProps> = ({onNavigate, onError}: OAuthCallbackProps) => {\n  // Prevent double execution in React Strict Mode\n  const processingRef: any = useRef(false);\n\n  // Read the vendor prefix directly from context (rather than the throwing useThunderID hook)\n  // so this component keeps working standalone, without a ThunderIDProvider ancestor.\n  const thunderIDContext = useContext(ThunderIDContext);\n  const vendor: string = getVendorPrefix(thunderIDContext?.vendor);\n\n  // Resolve navigation: use provided onNavigate (router-aware) or fall back to browser navigate utility\n  const navigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n    } else {\n      browserNavigate(path);\n    }\n  };\n\n  useEffect(() => {\n    const processOAuthCallback = (): void => {\n      // Guard against double execution\n      if (processingRef.current) {\n        return;\n      }\n      processingRef.current = true;\n\n      // Declare variables outside try block for use in catch\n      let returnPath = '/';\n\n      try {\n        // 1. Extract OAuth parameters from URL\n        const urlParams: URLSearchParams = new URLSearchParams(window.location.search);\n        const code: string | null = urlParams.get('code');\n        const state: string | null = urlParams.get('state');\n        const nonce: string | null = urlParams.get('nonce');\n        const oauthError: string | null = urlParams.get('error');\n        const errorDescription: string | null = urlParams.get('error_description');\n\n        // 1a. If running inside a popup (e.g. social signup), send OAuth params\n        //     back to the opener via postMessage. The parent window's handler will\n        //     close this popup after processing the code.\n        if (window.opener) {\n          window.opener.postMessage({code, error: oauthError, errorDescription, nonce, state}, window.location.origin);\n          return;\n        }\n\n        // 2. Validate and retrieve OAuth state from sessionStorage\n        if (!state) {\n          throw new Error('Missing OAuth state parameter - possible security issue');\n        }\n\n        const storedData: string | null = sessionStorage.getItem(`${vendor}_oauth_${state}`);\n        if (!storedData) {\n          // If state not found, might be an error callback - try to handle gracefully\n          if (oauthError) {\n            const errorMsg: string = errorDescription || oauthError || 'OAuth authentication failed';\n            const err: Error = new Error(errorMsg);\n            onError?.(err);\n\n            const params: URLSearchParams = new URLSearchParams();\n            params.set('error', oauthError);\n            if (errorDescription) {\n              params.set('error_description', errorDescription);\n            }\n\n            navigate(`/?${params.toString()}`);\n            return;\n          }\n          throw new Error('Invalid OAuth state - possible CSRF attack');\n        }\n\n        const {path, timestamp} = JSON.parse(storedData);\n        returnPath = path || '/';\n\n        // 3. Validate state freshness\n        const MAX_STATE_AGE = 600000; // 10 minutes\n        if (Date.now() - timestamp > MAX_STATE_AGE) {\n          sessionStorage.removeItem(`${vendor}_oauth_${state}`);\n          throw new Error('OAuth state expired - please try again');\n        }\n\n        // 4. Clean up state\n        sessionStorage.removeItem(`${vendor}_oauth_${state}`);\n\n        // 5. Handle OAuth error response\n        if (oauthError) {\n          const errorMsg: string = errorDescription || oauthError || 'OAuth authentication failed';\n          const err: Error = new Error(errorMsg);\n          onError?.(err);\n\n          const params: URLSearchParams = new URLSearchParams();\n          params.set('error', oauthError);\n          if (errorDescription) {\n            params.set('error_description', errorDescription);\n          }\n\n          navigate(`${returnPath}?${params.toString()}`);\n          return;\n        }\n\n        // 6. Validate required parameters\n        if (!code) {\n          throw new Error('Missing OAuth authorization code');\n        }\n\n        // 7. Forward OAuth code to original component\n        // The component (SignIn/AcceptInvite) will retrieve flowId/authId from sessionStorage\n        const params: URLSearchParams = new URLSearchParams();\n        params.set('code', code);\n        if (nonce) {\n          params.set('nonce', nonce);\n        }\n\n        navigate(`${returnPath}?${params.toString()}`);\n      } catch (err) {\n        const errorMessage: string = err instanceof Error ? err.message : 'OAuth callback processing failed';\n        // eslint-disable-next-line no-console\n        console.error('OAuth callback error:', err);\n\n        onError?.(err instanceof Error ? err : new Error(errorMessage));\n\n        // Redirect back with OAuth error format\n        const params: URLSearchParams = new URLSearchParams();\n        params.set('error', 'callback_error');\n        params.set('error_description', errorMessage);\n\n        navigate(`${returnPath}?${params.toString()}`);\n      }\n    };\n\n    processOAuthCallback();\n  }, [onNavigate, onError, vendor]);\n\n  // Headless component - no UI, just processing logic\n  return null;\n};\n\nexport default OAuthCallback;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuDA,MAAaA,iBAAyC,EAAC,YAAY,cAAiC;CAElG,MAAMC,gBAAqB,OAAO,MAAM;CAKxC,MAAMC,SAAiB,gBADE,WAAWC,yBAAiB,EACI,OAAO;CAGhE,MAAMC,cAAY,SAAuB;AACvC,MAAI,WACF,YAAW,KAAK;MAEhB,UAAgB,KAAK;;AAIzB,iBAAgB;EACd,MAAM,6BAAmC;AAEvC,OAAI,cAAc,QAChB;AAEF,iBAAc,UAAU;GAGxB,IAAI,aAAa;AAEjB,OAAI;IAEF,MAAMC,YAA6B,IAAI,gBAAgB,OAAO,SAAS,OAAO;IAC9E,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,QAAuB,UAAU,IAAI,QAAQ;IACnD,MAAMC,QAAuB,UAAU,IAAI,QAAQ;IACnD,MAAMC,aAA4B,UAAU,IAAI,QAAQ;IACxD,MAAMC,mBAAkC,UAAU,IAAI,oBAAoB;AAK1E,QAAI,OAAO,QAAQ;AACjB,YAAO,OAAO,YAAY;MAAC;MAAM,OAAO;MAAY;MAAkB;MAAO;MAAM,EAAE,OAAO,SAAS,OAAO;AAC5G;;AAIF,QAAI,CAAC,MACH,OAAM,IAAI,MAAM,0DAA0D;IAG5E,MAAMC,aAA4B,eAAe,QAAQ,GAAG,OAAO,SAAS,QAAQ;AACpF,QAAI,CAAC,YAAY;AAEf,SAAI,YAAY;MACd,MAAMC,WAAmB,oBAAoB,cAAc;AAE3D,gBADmB,IAAI,MAAM,SAAS,CACxB;MAEd,MAAMC,WAA0B,IAAI,iBAAiB;AACrD,eAAO,IAAI,SAAS,WAAW;AAC/B,UAAI,iBACF,UAAO,IAAI,qBAAqB,iBAAiB;AAGnD,iBAAS,KAAKC,SAAO,UAAU,GAAG;AAClC;;AAEF,WAAM,IAAI,MAAM,6CAA6C;;IAG/D,MAAM,EAAC,MAAM,cAAa,KAAK,MAAM,WAAW;AAChD,iBAAa,QAAQ;AAIrB,QAAI,KAAK,KAAK,GAAG,YADK,KACsB;AAC1C,oBAAe,WAAW,GAAG,OAAO,SAAS,QAAQ;AACrD,WAAM,IAAI,MAAM,yCAAyC;;AAI3D,mBAAe,WAAW,GAAG,OAAO,SAAS,QAAQ;AAGrD,QAAI,YAAY;KACd,MAAMF,WAAmB,oBAAoB,cAAc;AAE3D,eADmB,IAAI,MAAM,SAAS,CACxB;KAEd,MAAMC,WAA0B,IAAI,iBAAiB;AACrD,cAAO,IAAI,SAAS,WAAW;AAC/B,SAAI,iBACF,UAAO,IAAI,qBAAqB,iBAAiB;AAGnD,gBAAS,GAAG,WAAW,GAAGC,SAAO,UAAU,GAAG;AAC9C;;AAIF,QAAI,CAAC,KACH,OAAM,IAAI,MAAM,mCAAmC;IAKrD,MAAMD,SAA0B,IAAI,iBAAiB;AACrD,WAAO,IAAI,QAAQ,KAAK;AACxB,QAAI,MACF,QAAO,IAAI,SAAS,MAAM;AAG5B,eAAS,GAAG,WAAW,GAAG,OAAO,UAAU,GAAG;YACvC,KAAK;IACZ,MAAME,eAAuB,eAAe,QAAQ,IAAI,UAAU;AAElE,YAAQ,MAAM,yBAAyB,IAAI;AAE3C,cAAU,eAAe,QAAQ,MAAM,IAAI,MAAM,aAAa,CAAC;IAG/D,MAAMF,SAA0B,IAAI,iBAAiB;AACrD,WAAO,IAAI,SAAS,iBAAiB;AACrC,WAAO,IAAI,qBAAqB,aAAa;AAE7C,eAAS,GAAG,WAAW,GAAG,OAAO,UAAU,GAAG;;;AAIlD,wBAAsB;IACrB;EAAC;EAAY;EAAS;EAAO,CAAC;AAGjC,QAAO"}

package/dist/components/auth/Callback/TokenCallback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TokenCallback.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Callback/TokenCallback.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAC,EAAE,EAAoB,MAAM,OAAO,CAAC;AAG5C,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAEpC;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC;IAEpD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,kBAAkB,CAwLhD,CAAC;AAEF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"TokenCallback.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Callback/TokenCallback.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAC,EAAE,EAAoB,MAAM,OAAO,CAAC;AAG5C,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAEpC;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC;IAEpD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,kBAAkB,CAyLhD,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/components/auth/Callback/TokenCallback.js

@@ -5,7 +5,7 @@ import { useEffect, useRef } from "react";
 //#region src/components/auth/Callback/TokenCallback.tsx
 const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin", signUpPath = "/signup" }) => {
 	const processingRef = useRef(false);
-	const { isInitialized, isLoading, signIn, signUp, getStorageManager } = useThunderID_default();
+	const { isInitialized, isLoading, signIn, signUp, getStorageManager, vendor } = useThunderID_default();
 	const navigate$1 = (path) => {
 		if (onNavigate) onNavigate(path);
 		else navigate(path);
@@ -20,7 +20,7 @@ const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin",
 	const initiateOAuthRedirect = (redirectURL, isRegistrationFlow) => {
 		const redirectUrlObj = new URL(redirectURL);
 		const state = redirectUrlObj.searchParams.get("state") || crypto.randomUUID();
-		sessionStorage.setItem(`thunderid_oauth_${state}`, JSON.stringify({
+		sessionStorage.setItem(`${vendor}_oauth_${state}`, JSON.stringify({
 			path: isRegistrationFlow ? signUpPath : signInPath,
 			timestamp: Date.now()
 		}));
@@ -34,7 +34,7 @@ const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin",
 		return params.toString() ? `${basePath}?${params.toString()}` : basePath;
 	};
 	const redirectWithError = (error, isRegistrationFlow) => {
-		sessionStorage.removeItem("thunderid_execution_id");
+		sessionStorage.removeItem(`${vendor}_execution_id`);
 		onError?.(error);
 		const params = new URLSearchParams();
 		params.set("error", "token_verification_failed");
@@ -70,7 +70,7 @@ const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin",
 				if (response.type === EmbeddedSignInFlowType.Redirection) {
 					const redirectURL = response.data?.redirectURL || response?.redirectURL;
 					const nextExecutionId$1 = response.executionId || executionId;
-					sessionStorage.setItem("thunderid_execution_id", nextExecutionId$1);
+					sessionStorage.setItem(`${vendor}_execution_id`, nextExecutionId$1);
 					if (redirectURL) {
 						initiateOAuthRedirect(redirectURL, isRegistrationFlow);
 						return;
@@ -78,7 +78,7 @@ const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin",
 				}
 				if (response.flowStatus === EmbeddedSignInFlowStatus.Complete) {
 					const redirectUrl = response?.redirectUrl || response?.redirect_uri;
-					sessionStorage.removeItem("thunderid_execution_id");
+					sessionStorage.removeItem(`${vendor}_execution_id`);
 					await storageManager.removeHybridDataParameter("authId");
 					onSuccess?.({
 						redirectUrl,
@@ -99,7 +99,7 @@ const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin",
 					return;
 				}
 				const nextExecutionId = response.executionId || executionId;
-				sessionStorage.setItem("thunderid_execution_id", nextExecutionId);
+				sessionStorage.setItem(`${vendor}_execution_id`, nextExecutionId);
 				if (response.challengeToken) await storageManager.setTemporaryDataParameter("challengeToken", response.challengeToken);
 				navigate$1(buildSignInPath(nextExecutionId, applicationId, isRegistrationFlow));
 			} catch (err) {
@@ -121,7 +121,8 @@ const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin",
 		signIn,
 		signUp,
 		signInPath,
-		signUpPath
+		signUpPath,
+		vendor
 	]);
 	return null;
 };

package/dist/components/auth/Callback/TokenCallback.js.map

@@ -1 +1 @@
-{"version":3,"file":"TokenCallback.js","names":["TokenCallback: FC<TokenCallbackProps>","processingRef: any","useThunderID","navigate","url: URL","redirectUrlObj: URL","state: string","params: URLSearchParams","searchParams: URLSearchParams","executionId: string | null","token: string | null","applicationId: string | null","isRegistrationFlow: boolean","storageManager: any","response: any","redirectURL: string | undefined","nextExecutionId: string","nextExecutionId","redirectUrl: string | undefined","failureReason: string | undefined","error: Error"],"sources":["../../../../src/components/auth/Callback/TokenCallback.tsx"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the\n * License for the specific language governing permissions and limitations\n * under the License.\n */\n\nimport {EmbeddedSignInFlowStatus, EmbeddedSignInFlowType, navigate as browserNavigate} from '@thunderid/browser';\nimport {FC, useEffect, useRef} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\nexport interface TokenCallbackProps {\n  /**\n   * Callback function called when an error occurs\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Function to navigate to a different path.\n   * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).\n   * Provide this prop to enable framework-specific navigation (e.g., from React Router).\n   */\n  onNavigate?: (path: string) => void;\n\n  /**\n   * Callback function called when authentication is successful\n   */\n  onSuccess?: (authData: Record<string, any>) => void;\n\n  /**\n   * Custom path for the sign-in page. Defaults to '/signin'\n   */\n  signInPath?: string;\n\n  /**\n   * Custom path for the sign-up page. Defaults to '/signup'\n   */\n  signUpPath?: string;\n}\n\nexport const TokenCallback: FC<TokenCallbackProps> = ({\n  onNavigate,\n  onError,\n  onSuccess,\n  signInPath = '/signin',\n  signUpPath = '/signup',\n}: TokenCallbackProps) => {\n  const processingRef: any = useRef(false);\n  const {isInitialized, isLoading, signIn, signUp, getStorageManager} = useThunderID();\n\n  const navigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n    } else {\n      browserNavigate(path);\n    }\n  };\n\n  const clearTokenFromUrl = (): void => {\n    if (!window?.location?.href) {\n      return;\n    }\n\n    const url: URL = new URL(window.location.href);\n    url.searchParams.delete('token');\n    url.searchParams.delete('type');\n    window.history.replaceState({}, '', url.toString());\n  };\n\n  const initiateOAuthRedirect = (redirectURL: string, isRegistrationFlow?: boolean): void => {\n    const redirectUrlObj: URL = new URL(redirectURL);\n    const state: string = redirectUrlObj.searchParams.get('state') || crypto.randomUUID();\n\n    sessionStorage.setItem(\n      `thunderid_oauth_${state}`,\n      JSON.stringify({\n        path: isRegistrationFlow ? signUpPath : signInPath,\n        timestamp: Date.now(),\n      }),\n    );\n\n    browserNavigate(redirectUrlObj.toString());\n  };\n\n  const buildSignInPath = (\n    executionId?: string | null,\n    applicationId?: string | null,\n    isRegistrationFlow?: boolean,\n  ): string => {\n    const params: URLSearchParams = new URLSearchParams();\n    if (executionId) {\n      params.set('executionId', executionId);\n    }\n    if (applicationId) {\n      params.set('applicationId', applicationId);\n    }\n\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    return params.toString() ? `${basePath}?${params.toString()}` : basePath;\n  };\n\n  const redirectWithError = (error: Error, isRegistrationFlow?: boolean): void => {\n    sessionStorage.removeItem('thunderid_execution_id');\n\n    onError?.(error);\n\n    const params: URLSearchParams = new URLSearchParams();\n    params.set('error', 'token_verification_failed');\n    params.set('error_description', error.message);\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    navigate(`${basePath}?${params.toString()}`);\n  };\n\n  useEffect(() => {\n    if (!isInitialized || isLoading) {\n      return;\n    }\n\n    const processTokenCallback = async (): Promise<void> => {\n      if (processingRef.current) {\n        return;\n      }\n      processingRef.current = true;\n\n      // Read URL params before clearing them so they're accessible in both try and catch.\n      const searchParams: URLSearchParams = new URLSearchParams(window.location.search);\n      const executionId: string | null = searchParams.get('id') || searchParams.get('executionId');\n      const token: string | null = searchParams.get('token');\n      const applicationId: string | null = searchParams.get('applicationId');\n      const isRegistrationFlow: boolean = searchParams.get('type') === 'REGISTRATION';\n\n      clearTokenFromUrl();\n\n      try {\n        const storageManager: any = await getStorageManager();\n\n        if (!executionId || !token) {\n          const error: Error = new Error('Missing executionId or token in callback URL');\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        let response: any;\n\n        if (isRegistrationFlow) {\n          response = await signUp({executionId, inputs: {token}});\n        } else {\n          response = await signIn({executionId, inputs: {token}});\n        }\n\n        if (response.type === EmbeddedSignInFlowType.Redirection) {\n          const redirectURL: string | undefined = response.data?.redirectURL || response?.redirectURL;\n          const nextExecutionId: string = response.executionId || executionId;\n          sessionStorage.setItem('thunderid_execution_id', nextExecutionId);\n\n          if (redirectURL) {\n            initiateOAuthRedirect(redirectURL, isRegistrationFlow);\n            return;\n          }\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatus.Complete) {\n          const redirectUrl: string | undefined = response?.redirectUrl || response?.redirect_uri;\n\n          sessionStorage.removeItem('thunderid_execution_id');\n          await storageManager.removeHybridDataParameter('authId');\n\n          onSuccess?.({\n            redirectUrl,\n            ...((response.data as Record<string, any>) || {}),\n          });\n\n          if (redirectUrl) {\n            window.location.href = redirectUrl;\n            return;\n          }\n\n          navigate(isRegistrationFlow ? signUpPath : signInPath);\n          return;\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatus.Error) {\n          const failureReason: string | undefined = response?.failureReason;\n          const error: Error = new Error(failureReason || 'Token validation failed. Please try again.');\n          await storageManager.removeHybridDataParameter('authId');\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        const nextExecutionId: string = response.executionId || executionId;\n        sessionStorage.setItem('thunderid_execution_id', nextExecutionId);\n\n        if (response.challengeToken) {\n          await storageManager.setTemporaryDataParameter('challengeToken', response.challengeToken);\n        }\n\n        navigate(buildSignInPath(nextExecutionId, applicationId, isRegistrationFlow));\n      } catch (err) {\n        const error: Error = err instanceof Error ? err : new Error('Token callback processing failed');\n        // eslint-disable-next-line no-console\n        console.error('Token callback error:', err);\n        const storageManager: any = await getStorageManager();\n        if (storageManager) {\n          await storageManager.removeHybridDataParameter('authId');\n        }\n        redirectWithError(error, isRegistrationFlow);\n      }\n    };\n\n    processTokenCallback();\n  }, [\n    getStorageManager,\n    isInitialized,\n    isLoading,\n    onError,\n    onNavigate,\n    onSuccess,\n    signIn,\n    signUp,\n    signInPath,\n    signUpPath,\n  ]);\n\n  return null;\n};\n\nexport default TokenCallback;\n"],"mappings":";;;;;AAkDA,MAAaA,iBAAyC,EACpD,YACA,SACA,WACA,aAAa,WACb,aAAa,gBACW;CACxB,MAAMC,gBAAqB,OAAO,MAAM;CACxC,MAAM,EAAC,eAAe,WAAW,QAAQ,QAAQ,sBAAqBC,sBAAc;CAEpF,MAAMC,cAAY,SAAuB;AACvC,MAAI,WACF,YAAW,KAAK;MAEhB,UAAgB,KAAK;;CAIzB,MAAM,0BAAgC;AACpC,MAAI,CAAC,QAAQ,UAAU,KACrB;EAGF,MAAMC,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aAAa,OAAO,OAAO;AAC/B,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;CAGrD,MAAM,yBAAyB,aAAqB,uBAAuC;EACzF,MAAMC,iBAAsB,IAAI,IAAI,YAAY;EAChD,MAAMC,QAAgB,eAAe,aAAa,IAAI,QAAQ,IAAI,OAAO,YAAY;AAErF,iBAAe,QACb,mBAAmB,SACnB,KAAK,UAAU;GACb,MAAM,qBAAqB,aAAa;GACxC,WAAW,KAAK,KAAK;GACtB,CAAC,CACH;AAED,WAAgB,eAAe,UAAU,CAAC;;CAG5C,MAAM,mBACJ,aACA,eACA,uBACW;EACX,MAAMC,SAA0B,IAAI,iBAAiB;AACrD,MAAI,YACF,QAAO,IAAI,eAAe,YAAY;AAExC,MAAI,cACF,QAAO,IAAI,iBAAiB,cAAc;EAG5C,MAAM,WAAW,qBAAqB,aAAa;AACnD,SAAO,OAAO,UAAU,GAAG,GAAG,SAAS,GAAG,OAAO,UAAU,KAAK;;CAGlE,MAAM,qBAAqB,OAAc,uBAAuC;AAC9E,iBAAe,WAAW,yBAAyB;AAEnD,YAAU,MAAM;EAEhB,MAAMA,SAA0B,IAAI,iBAAiB;AACrD,SAAO,IAAI,SAAS,4BAA4B;AAChD,SAAO,IAAI,qBAAqB,MAAM,QAAQ;AAE9C,aAAS,GADQ,qBAAqB,aAAa,WAC9B,GAAG,OAAO,UAAU,GAAG;;AAG9C,iBAAgB;AACd,MAAI,CAAC,iBAAiB,UACpB;EAGF,MAAM,uBAAuB,YAA2B;AACtD,OAAI,cAAc,QAChB;AAEF,iBAAc,UAAU;GAGxB,MAAMC,eAAgC,IAAI,gBAAgB,OAAO,SAAS,OAAO;GACjF,MAAMC,cAA6B,aAAa,IAAI,KAAK,IAAI,aAAa,IAAI,cAAc;GAC5F,MAAMC,QAAuB,aAAa,IAAI,QAAQ;GACtD,MAAMC,gBAA+B,aAAa,IAAI,gBAAgB;GACtE,MAAMC,qBAA8B,aAAa,IAAI,OAAO,KAAK;AAEjE,sBAAmB;AAEnB,OAAI;IACF,MAAMC,iBAAsB,MAAM,mBAAmB;AAErD,QAAI,CAAC,eAAe,CAAC,OAAO;AAE1B,uCADqB,IAAI,MAAM,+CAA+C,EACrD,mBAAmB;AAC5C;;IAGF,IAAIC;AAEJ,QAAI,mBACF,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;QAEvD,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;AAGzD,QAAI,SAAS,SAAS,uBAAuB,aAAa;KACxD,MAAMC,cAAkC,SAAS,MAAM,eAAe,UAAU;KAChF,MAAMC,oBAA0B,SAAS,eAAe;AACxD,oBAAe,QAAQ,0BAA0BC,kBAAgB;AAEjE,SAAI,aAAa;AACf,4BAAsB,aAAa,mBAAmB;AACtD;;;AAIJ,QAAI,SAAS,eAAe,yBAAyB,UAAU;KAC7D,MAAMC,cAAkC,UAAU,eAAe,UAAU;AAE3E,oBAAe,WAAW,yBAAyB;AACnD,WAAM,eAAe,0BAA0B,SAAS;AAExD,iBAAY;MACV;MACA,GAAK,SAAS,QAAgC,EAAE;MACjD,CAAC;AAEF,SAAI,aAAa;AACf,aAAO,SAAS,OAAO;AACvB;;AAGF,gBAAS,qBAAqB,aAAa,WAAW;AACtD;;AAGF,QAAI,SAAS,eAAe,yBAAyB,OAAO;KAC1D,MAAMC,gBAAoC,UAAU;KACpD,MAAMC,QAAe,IAAI,MAAM,iBAAiB,6CAA6C;AAC7F,WAAM,eAAe,0BAA0B,SAAS;AACxD,uBAAkB,OAAO,mBAAmB;AAC5C;;IAGF,MAAMJ,kBAA0B,SAAS,eAAe;AACxD,mBAAe,QAAQ,0BAA0B,gBAAgB;AAEjE,QAAI,SAAS,eACX,OAAM,eAAe,0BAA0B,kBAAkB,SAAS,eAAe;AAG3F,eAAS,gBAAgB,iBAAiB,eAAe,mBAAmB,CAAC;YACtE,KAAK;IACZ,MAAMI,QAAe,eAAe,QAAQ,sBAAM,IAAI,MAAM,mCAAmC;AAE/F,YAAQ,MAAM,yBAAyB,IAAI;IAC3C,MAAMP,iBAAsB,MAAM,mBAAmB;AACrD,QAAI,eACF,OAAM,eAAe,0BAA0B,SAAS;AAE1D,sBAAkB,OAAO,mBAAmB;;;AAIhD,wBAAsB;IACrB;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,QAAO"}
+{"version":3,"file":"TokenCallback.js","names":["TokenCallback: FC<TokenCallbackProps>","processingRef: any","useThunderID","navigate","url: URL","redirectUrlObj: URL","state: string","params: URLSearchParams","searchParams: URLSearchParams","executionId: string | null","token: string | null","applicationId: string | null","isRegistrationFlow: boolean","storageManager: any","response: any","redirectURL: string | undefined","nextExecutionId: string","nextExecutionId","redirectUrl: string | undefined","failureReason: string | undefined","error: Error"],"sources":["../../../../src/components/auth/Callback/TokenCallback.tsx"],"sourcesContent":["/**\n * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the\n * License for the specific language governing permissions and limitations\n * under the License.\n */\n\nimport {EmbeddedSignInFlowStatus, EmbeddedSignInFlowType, navigate as browserNavigate} from '@thunderid/browser';\nimport {FC, useEffect, useRef} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\nexport interface TokenCallbackProps {\n  /**\n   * Callback function called when an error occurs\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Function to navigate to a different path.\n   * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).\n   * Provide this prop to enable framework-specific navigation (e.g., from React Router).\n   */\n  onNavigate?: (path: string) => void;\n\n  /**\n   * Callback function called when authentication is successful\n   */\n  onSuccess?: (authData: Record<string, any>) => void;\n\n  /**\n   * Custom path for the sign-in page. Defaults to '/signin'\n   */\n  signInPath?: string;\n\n  /**\n   * Custom path for the sign-up page. Defaults to '/signup'\n   */\n  signUpPath?: string;\n}\n\nexport const TokenCallback: FC<TokenCallbackProps> = ({\n  onNavigate,\n  onError,\n  onSuccess,\n  signInPath = '/signin',\n  signUpPath = '/signup',\n}: TokenCallbackProps) => {\n  const processingRef: any = useRef(false);\n  const {isInitialized, isLoading, signIn, signUp, getStorageManager, vendor} = useThunderID();\n\n  const navigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n    } else {\n      browserNavigate(path);\n    }\n  };\n\n  const clearTokenFromUrl = (): void => {\n    if (!window?.location?.href) {\n      return;\n    }\n\n    const url: URL = new URL(window.location.href);\n    url.searchParams.delete('token');\n    url.searchParams.delete('type');\n    window.history.replaceState({}, '', url.toString());\n  };\n\n  const initiateOAuthRedirect = (redirectURL: string, isRegistrationFlow?: boolean): void => {\n    const redirectUrlObj: URL = new URL(redirectURL);\n    const state: string = redirectUrlObj.searchParams.get('state') || crypto.randomUUID();\n\n    sessionStorage.setItem(\n      `${vendor}_oauth_${state}`,\n      JSON.stringify({\n        path: isRegistrationFlow ? signUpPath : signInPath,\n        timestamp: Date.now(),\n      }),\n    );\n\n    browserNavigate(redirectUrlObj.toString());\n  };\n\n  const buildSignInPath = (\n    executionId?: string | null,\n    applicationId?: string | null,\n    isRegistrationFlow?: boolean,\n  ): string => {\n    const params: URLSearchParams = new URLSearchParams();\n    if (executionId) {\n      params.set('executionId', executionId);\n    }\n    if (applicationId) {\n      params.set('applicationId', applicationId);\n    }\n\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    return params.toString() ? `${basePath}?${params.toString()}` : basePath;\n  };\n\n  const redirectWithError = (error: Error, isRegistrationFlow?: boolean): void => {\n    sessionStorage.removeItem(`${vendor}_execution_id`);\n\n    onError?.(error);\n\n    const params: URLSearchParams = new URLSearchParams();\n    params.set('error', 'token_verification_failed');\n    params.set('error_description', error.message);\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    navigate(`${basePath}?${params.toString()}`);\n  };\n\n  useEffect(() => {\n    if (!isInitialized || isLoading) {\n      return;\n    }\n\n    const processTokenCallback = async (): Promise<void> => {\n      if (processingRef.current) {\n        return;\n      }\n      processingRef.current = true;\n\n      // Read URL params before clearing them so they're accessible in both try and catch.\n      const searchParams: URLSearchParams = new URLSearchParams(window.location.search);\n      const executionId: string | null = searchParams.get('id') || searchParams.get('executionId');\n      const token: string | null = searchParams.get('token');\n      const applicationId: string | null = searchParams.get('applicationId');\n      const isRegistrationFlow: boolean = searchParams.get('type') === 'REGISTRATION';\n\n      clearTokenFromUrl();\n\n      try {\n        const storageManager: any = await getStorageManager();\n\n        if (!executionId || !token) {\n          const error: Error = new Error('Missing executionId or token in callback URL');\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        let response: any;\n\n        if (isRegistrationFlow) {\n          response = await signUp({executionId, inputs: {token}});\n        } else {\n          response = await signIn({executionId, inputs: {token}});\n        }\n\n        if (response.type === EmbeddedSignInFlowType.Redirection) {\n          const redirectURL: string | undefined = response.data?.redirectURL || response?.redirectURL;\n          const nextExecutionId: string = response.executionId || executionId;\n          sessionStorage.setItem(`${vendor}_execution_id`, nextExecutionId);\n\n          if (redirectURL) {\n            initiateOAuthRedirect(redirectURL, isRegistrationFlow);\n            return;\n          }\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatus.Complete) {\n          const redirectUrl: string | undefined = response?.redirectUrl || response?.redirect_uri;\n\n          sessionStorage.removeItem(`${vendor}_execution_id`);\n          await storageManager.removeHybridDataParameter('authId');\n\n          onSuccess?.({\n            redirectUrl,\n            ...((response.data as Record<string, any>) || {}),\n          });\n\n          if (redirectUrl) {\n            window.location.href = redirectUrl;\n            return;\n          }\n\n          navigate(isRegistrationFlow ? signUpPath : signInPath);\n          return;\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatus.Error) {\n          const failureReason: string | undefined = response?.failureReason;\n          const error: Error = new Error(failureReason || 'Token validation failed. Please try again.');\n          await storageManager.removeHybridDataParameter('authId');\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        const nextExecutionId: string = response.executionId || executionId;\n        sessionStorage.setItem(`${vendor}_execution_id`, nextExecutionId);\n\n        if (response.challengeToken) {\n          await storageManager.setTemporaryDataParameter('challengeToken', response.challengeToken);\n        }\n\n        navigate(buildSignInPath(nextExecutionId, applicationId, isRegistrationFlow));\n      } catch (err) {\n        const error: Error = err instanceof Error ? err : new Error('Token callback processing failed');\n        // eslint-disable-next-line no-console\n        console.error('Token callback error:', err);\n        const storageManager: any = await getStorageManager();\n        if (storageManager) {\n          await storageManager.removeHybridDataParameter('authId');\n        }\n        redirectWithError(error, isRegistrationFlow);\n      }\n    };\n\n    processTokenCallback();\n  }, [\n    getStorageManager,\n    isInitialized,\n    isLoading,\n    onError,\n    onNavigate,\n    onSuccess,\n    signIn,\n    signUp,\n    signInPath,\n    signUpPath,\n    vendor,\n  ]);\n\n  return null;\n};\n\nexport default TokenCallback;\n"],"mappings":";;;;;AAkDA,MAAaA,iBAAyC,EACpD,YACA,SACA,WACA,aAAa,WACb,aAAa,gBACW;CACxB,MAAMC,gBAAqB,OAAO,MAAM;CACxC,MAAM,EAAC,eAAe,WAAW,QAAQ,QAAQ,mBAAmB,WAAUC,sBAAc;CAE5F,MAAMC,cAAY,SAAuB;AACvC,MAAI,WACF,YAAW,KAAK;MAEhB,UAAgB,KAAK;;CAIzB,MAAM,0BAAgC;AACpC,MAAI,CAAC,QAAQ,UAAU,KACrB;EAGF,MAAMC,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aAAa,OAAO,OAAO;AAC/B,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;CAGrD,MAAM,yBAAyB,aAAqB,uBAAuC;EACzF,MAAMC,iBAAsB,IAAI,IAAI,YAAY;EAChD,MAAMC,QAAgB,eAAe,aAAa,IAAI,QAAQ,IAAI,OAAO,YAAY;AAErF,iBAAe,QACb,GAAG,OAAO,SAAS,SACnB,KAAK,UAAU;GACb,MAAM,qBAAqB,aAAa;GACxC,WAAW,KAAK,KAAK;GACtB,CAAC,CACH;AAED,WAAgB,eAAe,UAAU,CAAC;;CAG5C,MAAM,mBACJ,aACA,eACA,uBACW;EACX,MAAMC,SAA0B,IAAI,iBAAiB;AACrD,MAAI,YACF,QAAO,IAAI,eAAe,YAAY;AAExC,MAAI,cACF,QAAO,IAAI,iBAAiB,cAAc;EAG5C,MAAM,WAAW,qBAAqB,aAAa;AACnD,SAAO,OAAO,UAAU,GAAG,GAAG,SAAS,GAAG,OAAO,UAAU,KAAK;;CAGlE,MAAM,qBAAqB,OAAc,uBAAuC;AAC9E,iBAAe,WAAW,GAAG,OAAO,eAAe;AAEnD,YAAU,MAAM;EAEhB,MAAMA,SAA0B,IAAI,iBAAiB;AACrD,SAAO,IAAI,SAAS,4BAA4B;AAChD,SAAO,IAAI,qBAAqB,MAAM,QAAQ;AAE9C,aAAS,GADQ,qBAAqB,aAAa,WAC9B,GAAG,OAAO,UAAU,GAAG;;AAG9C,iBAAgB;AACd,MAAI,CAAC,iBAAiB,UACpB;EAGF,MAAM,uBAAuB,YAA2B;AACtD,OAAI,cAAc,QAChB;AAEF,iBAAc,UAAU;GAGxB,MAAMC,eAAgC,IAAI,gBAAgB,OAAO,SAAS,OAAO;GACjF,MAAMC,cAA6B,aAAa,IAAI,KAAK,IAAI,aAAa,IAAI,cAAc;GAC5F,MAAMC,QAAuB,aAAa,IAAI,QAAQ;GACtD,MAAMC,gBAA+B,aAAa,IAAI,gBAAgB;GACtE,MAAMC,qBAA8B,aAAa,IAAI,OAAO,KAAK;AAEjE,sBAAmB;AAEnB,OAAI;IACF,MAAMC,iBAAsB,MAAM,mBAAmB;AAErD,QAAI,CAAC,eAAe,CAAC,OAAO;AAE1B,uCADqB,IAAI,MAAM,+CAA+C,EACrD,mBAAmB;AAC5C;;IAGF,IAAIC;AAEJ,QAAI,mBACF,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;QAEvD,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;AAGzD,QAAI,SAAS,SAAS,uBAAuB,aAAa;KACxD,MAAMC,cAAkC,SAAS,MAAM,eAAe,UAAU;KAChF,MAAMC,oBAA0B,SAAS,eAAe;AACxD,oBAAe,QAAQ,GAAG,OAAO,gBAAgBC,kBAAgB;AAEjE,SAAI,aAAa;AACf,4BAAsB,aAAa,mBAAmB;AACtD;;;AAIJ,QAAI,SAAS,eAAe,yBAAyB,UAAU;KAC7D,MAAMC,cAAkC,UAAU,eAAe,UAAU;AAE3E,oBAAe,WAAW,GAAG,OAAO,eAAe;AACnD,WAAM,eAAe,0BAA0B,SAAS;AAExD,iBAAY;MACV;MACA,GAAK,SAAS,QAAgC,EAAE;MACjD,CAAC;AAEF,SAAI,aAAa;AACf,aAAO,SAAS,OAAO;AACvB;;AAGF,gBAAS,qBAAqB,aAAa,WAAW;AACtD;;AAGF,QAAI,SAAS,eAAe,yBAAyB,OAAO;KAC1D,MAAMC,gBAAoC,UAAU;KACpD,MAAMC,QAAe,IAAI,MAAM,iBAAiB,6CAA6C;AAC7F,WAAM,eAAe,0BAA0B,SAAS;AACxD,uBAAkB,OAAO,mBAAmB;AAC5C;;IAGF,MAAMJ,kBAA0B,SAAS,eAAe;AACxD,mBAAe,QAAQ,GAAG,OAAO,gBAAgB,gBAAgB;AAEjE,QAAI,SAAS,eACX,OAAM,eAAe,0BAA0B,kBAAkB,SAAS,eAAe;AAG3F,eAAS,gBAAgB,iBAAiB,eAAe,mBAAmB,CAAC;YACtE,KAAK;IACZ,MAAMI,QAAe,eAAe,QAAQ,sBAAM,IAAI,MAAM,mCAAmC;AAE/F,YAAQ,MAAM,yBAAyB,IAAI;IAC3C,MAAMP,iBAAsB,MAAM,mBAAmB;AACrD,QAAI,eACF,OAAM,eAAe,0BAA0B,SAAS;AAE1D,sBAAkB,OAAO,mBAAmB;;;AAIhD,wBAAsB;IACrB;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,QAAO"}

package/dist/components/presentation/auth/AcceptInvite/BaseAcceptInvite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BaseAcceptInvite.d.ts","sourceRoot":"","sources":["../../../../../src/components/presentation/auth/AcceptInvite/BaseAcceptInvite.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EAEZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAgB,SAAS,EAAuD,MAAM,OAAO,CAAC;AAcxG,OAAsB,EAAC,SAAS,EAAC,MAAM,+BAA+B,CAAC;AAKvE;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC;QACnB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE;YACL,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC;SACpB,CAAC;QACF,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,YAAY,GAAG,UAAU,GAAG,OAAO,CAAC;IAChD,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEpC;;OAEG;IACH,UAAU,EAAE,GAAG,EAAE,CAAC;IAElB;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IAErB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;IAExB;;OAEG;IACH,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAExC;;OAEG;IACH,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAEzD;;OAEG;IACH,YAAY,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5E;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,UAAU,EAAE,OAAO,CAAC;IAEpB;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IAEnB;;OAEG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAE3B;;OAEG;IACH,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEjC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,2BAA2B,KAAK,SAAS,CAAC;IAE7D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;IAExB;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,wBAAwB,KAAK,IAAI,CAAC;IAE5D;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAE1B;;;OAGG;IACH,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAE9E;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IAEpC;;OAEG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;CAChC;AAED;;;;;;;;;;;;;;GAcG;AACH,QAAA,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CA2oB/C,CAAC;AAEF,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"BaseAcceptInvite.d.ts","sourceRoot":"","sources":["../../../../../src/components/presentation/auth/AcceptInvite/BaseAcceptInvite.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EAEZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAgB,SAAS,EAAuD,MAAM,OAAO,CAAC;AAcxG,OAAsB,EAAC,SAAS,EAAC,MAAM,+BAA+B,CAAC;AAKvE;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC;QACnB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE;YACL,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC;SACpB,CAAC;QACF,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,YAAY,GAAG,UAAU,GAAG,OAAO,CAAC;IAChD,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEpC;;OAEG;IACH,UAAU,EAAE,GAAG,EAAE,CAAC;IAElB;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IAErB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;IAExB;;OAEG;IACH,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAExC;;OAEG;IACH,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAEzD;;OAEG;IACH,YAAY,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5E;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,UAAU,EAAE,OAAO,CAAC;IAEpB;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IAEnB;;OAEG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAE3B;;OAEG;IACH,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEjC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,2BAA2B,KAAK,SAAS,CAAC;IAE7D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;IAExB;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,wBAAwB,KAAK,IAAI,CAAC;IAE5D;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAE1B;;;OAGG;IACH,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAE9E;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IAEpC;;OAEG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;CAChC;AAED;;;;;;;;;;;;;;GAcG;AACH,QAAA,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAspB/C,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/components/presentation/auth/AcceptInvite/BaseAcceptInvite.js

@@ -34,7 +34,7 @@ import { cx } from "@emotion/css";
 * 3. Flow completion
 */
 const BaseAcceptInvite = ({ executionId, inviteToken, onSubmit, onComplete, onError, onFlowChange, onGoToSignIn, className = "", children, preferences, size = "medium", variant = "outlined", showTitle = true, showSubtitle = true }) => {
-	const { meta, isInitialized, getStorageManager } = useThunderID_default();
+	const { meta, isInitialized, getStorageManager, vendor } = useThunderID_default();
 	const { t } = useTranslation_default(preferences?.i18n);
 	const { theme } = useTheme_default();
 	const customRenderers = useContext(ComponentRendererContext_default);
@@ -134,6 +134,7 @@ const BaseAcceptInvite = ({ executionId, inviteToken, onSubmit, onComplete, onEr
 	*/
 	useOAuthCallback({
 		currentExecutionId: executionId ?? null,
+		executionIdStorageKey: `${vendor}_execution_id`,
 		isInitialized: isStorageReady,
 		onComplete: () => {
 			setIsValidatingToken(false);
@@ -280,7 +281,7 @@ const BaseAcceptInvite = ({ executionId, inviteToken, onSubmit, onComplete, onEr
 			if (response.type === "REDIRECTION") {
 				const redirectURL = response.data?.redirectURL || response?.redirectURL;
 				if (redirectURL && typeof window !== "undefined") {
-					initiateOAuthRedirect(redirectURL);
+					initiateOAuthRedirect(redirectURL, vendor);
 					return;
 				}
 			}
@@ -314,6 +315,14 @@ const BaseAcceptInvite = ({ executionId, inviteToken, onSubmit, onComplete, onEr
 		normalizeFlowResponseLocal
 	]);
 	/**
+	* reset form values, errors, and touched fields to initial state
+	*/
+	const resetForm = useCallback(() => {
+		setFormValues({});
+		setFormErrors({});
+		setTouchedFields({});
+	}, []);
+	/**
 	* Validate invite token on component mount.
 	*/
 	useEffect(() => {
@@ -330,7 +339,7 @@ const BaseAcceptInvite = ({ executionId, inviteToken, onSubmit, onComplete, onEr
 			setIsValidatingToken(true);
 			setApiError(null);
 			try {
-				if (executionId) sessionStorage.setItem("thunderid_execution_id", executionId);
+				if (executionId) sessionStorage.setItem(`${vendor}_execution_id`, executionId);
 				const response = normalizeFlowResponseLocal(await onSubmit({
 					executionId,
 					inputs: { inviteToken },
@@ -475,7 +484,7 @@ const BaseAcceptInvite = ({ executionId, inviteToken, onSubmit, onComplete, onEr
 					children: /* @__PURE__ */ jsx(Alert_default.Description, { children: apiError.message })
 				})
 			}),
-			/* @__PURE__ */ jsxs("div", { children: [componentsWithoutHeadings && componentsWithoutHeadings.length > 0 ? renderInviteUserComponents(componentsWithoutHeadings, formValues, touchedFields, formErrors, isLoading, isFormValid, handleInputChange, {
+			/* @__PURE__ */ jsxs("div", { children: [componentsWithoutHeadings && componentsWithoutHeadings.length > 0 ? renderInviteUserComponents(componentsWithoutHeadings, formValues, touchedFields, formErrors, isLoading, isFormValid, resetForm, handleInputChange, {
 				_customRenderers: customRenderers,
 				_theme: theme,
 				onInputBlur: handleInputBlur,